github.com/siderolabs/omni

Welcome to the v0.40.0-beta.0 release of Omni! This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Support Bundle

Support downloading cluster support bundle from the UI.

Show Total Items

Display total number of clusters and machines on the corresponding pages. Also show some basic stats there: the number of clusters not ready and allocated/available machines.

Contributors

• Artem Chernyshev
• Andrey Smirnov
• Dmitriy Matrenichev
• Utku Ozdemir
• Jubblin
• Maxime Brunet
• Sam
• Spencer Smith

Changes

<details><summary>27 commits</summary> <p>

• 8ef319c chore: bump kube-service-exposer version
• 743e67f chore: bump state-etcd module version
• 6759925 chore: deprecate Talos 1.3
• 5dd5259 chore: add rotating log for audit data
• 6f6e1a6 fix: do not allow deleting machine classes which are used anywhere
• aeb9322 fix: preserve labels on the MachineClass when editing it in the UI
• 641328c feat: show machine/cluster stats and total counts
• ad74f85 chore: bump deps
• 19a72be feat: add support bundle download button to cluster overview
• d76f8bd test: enable Talemu tests
• f67579f fix: properly update ClusterMachineIdentity resource
• d8e804f fix: use proper finalizer chain in the MachineClassStatusController
• 67bcc75 feat: compute machineclass machine requirement (pressure)
• 23fb0c1 fix: make image pre pull failure block the kubernetes update
• b8db949 chore: bump dependencies
• e484bca fix: improve resource deletion reliability, fix support bundle tests
• 6f73f58 fix: properly display icons on Safari browser
• 276c3f4 fix: use proper check for the machine set teardown flow
• 4cfc0e6 chore: rework auth.* keys, add ctxstore package
• 76263e1 fix: do not rely on MachineStatus updates when checking maintenance
• d271a8a fix: do not expect LB to be healthy when scaling down workers
• 085bc2e fix: add finalizer on MachineSetNode resource in the controller
• cbfb898 fix: add missing return err in the maintenance config drop migration
• a1a1d08 chore: bump deps
• 4369338 fix: update Talos machine config schema to v1.7
• b93ac81 fix: provide cached access to the state via Omni API
• 7602fde fix: update compose to fix missing information </p> </details>

Changes from siderolabs/go-api-signature

<details><summary>1 commit</summary> <p>

• 4bf0f02 fix: get rid of data race in the key sign interceptor </p> </details>

Changes from siderolabs/go-kubernetes

<details><summary>2 commits</summary> <p>

• ee8c6b8 fix: add one more removed feature gate for 1.31
• 37dd61f feat: add support for Kubernetes 1.31 </p> </details>

Changes from siderolabs/grpc-proxy

<details><summary>5 commits</summary> <p>

• ec3b59c fix: address all gRPC deprecations
• 02f82db chore: rekres, bump deps
• 62b29be chore: rekres, update dependencies
• 2decdd1 chore: add no-op github workflow
• 77d7adc chore: bump deps </p> </details>

Changes from siderolabs/image-factory

<details><summary>4 commits</summary> <p>

• e5686e2 release(v0.4.2): prepare release
• 1a2b64a feat: add Rock4 SE board to the mix of supported boards
• d07a780 fix: update wizard-versions.html
• f73a61e fix: update misreported error </p> </details>

Dependency Changes

• github.com/adrg/xdg v0.4.0 -> v0.5.0
• github.com/aws/aws-sdk-go-v2 v1.30.0 -> v1.30.3
• github.com/aws/aws-sdk-go-v2/config v1.27.21 -> v1.27.27
• github.com/aws/aws-sdk-go-v2/credentials v1.17.21 -> v1.17.27
• github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.1 -> v1.17.8
• github.com/aws/aws-sdk-go-v2/service/s3 v1.56.1 -> v1.58.2
• github.com/aws/smithy-go v1.20.2 -> v1.20.3
• github.com/cosi-project/runtime v0.5.0 -> v0.5.5
• github.com/cosi-project/state-etcd v0.2.9 -> v0.3.0
• github.com/go-jose/go-jose/v4 v4.0.2 -> v4.0.3
• github.com/google/go-containerregistry v0.19.2 -> v0.20.1
• github.com/siderolabs/go-api-signature v0.3.3 -> v0.3.4
• github.com/siderolabs/go-kubernetes v0.2.9 -> v0.2.11
• github.com/siderolabs/grpc-proxy v0.4.0 -> v0.4.1
• github.com/siderolabs/image-factory v0.4.1 -> v0.4.2
• github.com/siderolabs/omni/client 000000000000 -> v0.39.1
• github.com/siderolabs/talos/pkg/machinery 4feb94ca0997 -> v1.8.0-alpha.1
• github.com/zitadel/oidc/v3 v3.25.1 -> v3.26.0
• golang.org/x/crypto v0.24.0 -> v0.25.0
• golang.org/x/net v0.26.0 -> v0.27.0
• google.golang.org/grpc v1.64.0 -> v1.65.0
• k8s.io/api v0.30.2 -> v0.30.3
• k8s.io/client-go v0.30.2 -> v0.30.3

Previous release can be found at v0.39.0

Welcome to the v0.39.0-beta.0 release of Omni! This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Equinix Metal

Equinix metal is now available as a download/PXE option in the UI/CLI.

Exposed Services Reliability

Exposed services proxy now provides more reliable connection to the underlying services for slower networks in the cluster. Also if some nodes are down the proxy will evict them from the routing.

Insecure Node Access

It is now possible to access nodes running in maintenance mode using talosctl. Omni account wide talosconfig and at least Operator user role is required for that. No --insecure flag should be set.

Maintenance Talos Updates

Machine's Talos version can now be updated without adding the machine to a cluster. Either talosctl upgrade -n <uuid> or the UI (Machines page) can be used for that.

Contributors

• David Anderson
• Artem Chernyshev
• Brad Fitzpatrick
• Utku Ozdemir
• Andrey Smirnov
• Dmitriy Matrenichev
• AdamEr8
• Andrey Smirnov
• Andrey Smirnov
• Dominic Evans
• Khionu Sybiern
• Nathan Johnson
• Ryan Cox
• Vincent Batts
• ignoramous

Changes

<details><summary>28 commits</summary> <p>

• 116ae97 release(v0.39.0-beta.0): prepare release
• 26a61be fix: add resource caches for missing resource types
• 5d953e4 fix: do not re-create peer on the remote addr change
• 08717d9 fix: get rid of config patches for the maintenance configs
• b910c20 chore: add resource throughput metrics
• 9671551 fix: use proper permissions for cluster taint resource
• 09a8b36 fix: enable etcd client keep-alives by default
• 5e46841 chore: add go.work file
• 3810ccb fix: properly clean up stale Talos gRPC backends
• 80d9277 feat: bump service exposer version to 1.1.3
• 20b08ea fix: allow changing machine set node mgmt mode if it has no nodes
• c9b8b3f feat: add Equinix metal option in the download installation media
• 5460134 chore: bump dependencies
• cd8bac4 feat: read real IP from the provision API gRPC requests
• b47acf2 feat: support insecure access to the nodes running in maintenance
• 2f05ab0 feat: show N/∞ in the machine set if unlim allocation policy is used
• dc7c2b3 fix: detect the old vs. new URL format correctly on workload proxying
• e9bca13 feat: use tcp loadbalancer for exposed services
• 17f7168 chore: bump COSI runtime version, use its task runner
• 85424da fix: do better handling of small screens
• 8b16da3 fix: use proper z-index for the tooltip component
• 92afd42 chore: replace append with slices pkg functions
• ccc9d22 chore: update runtime and go-api-signature modules
• 551286e chore: bump go to 1.22.4, rekres
• 271bb70 chore: migrate to oidc v3
• 6dcfd4c feat: handle all goroutine panics gracefully
• c565666 feat: provide cleaner UI for the machine sets/machines lists
• e69df41 fix: redo EtcdManualBackupShouldBeCreated </p> </details>

Changes from siderolabs/go-api-signature

<details><summary>1 commit</summary> <p>

• 782aac0 chore: bump deps </p> </details>

Changes from siderolabs/go-loadbalancer

<details><summary>1 commit</summary> <p>

• 0639758 chore: bump deps </p> </details>

Changes from siderolabs/siderolink

<details><summary>1 commit</summary> <p>

• e76747b chore: migrate to rtnetlink/2 </p> </details>

Changes from siderolabs/tcpproxy

<details><summary>70 commits</summary> <p>

• 3d4e7b8 chore: rename to siderolabs/tcpproxy
• 6f85d8e Implement correct half-close sequence for the connections.
• 8bea9a4 Add support for TCP_USER_TIMEOUT setting
• 91f8614 remove old ACME tls-sni-01 stuff that LetsEncrypt removed March 2019
• 74ca1dc add Proxy.AddSNIRouteFunc to do lookups by SNI dynamically
• 4e04b92 gofmt for Go 1.19
• be3ee21 (doc): s/tlsproxy/tcpproxy
• 2e577fe Modified TestProxyPROXYOut to conform with the fixed version of PROXY protocol header format
• 0f9bced Fixed HAProxy's PROXY protocol v1 Human-readable header format in DialProxy
• 2825d76 fix(test): update travis and e2e selfSignedCert fn
• b6bb9b5 Update import path to inet.af/tcpproxy
• dfa16c6 tlsrouter/README: fix the go get url
• f5c09fb Take advantage of Go 1.11's splice support, unwrap Conns in DialProxy.HandleConn
• 7f81f77 Work around deadlock with Go tip (at Go rev f3f7bd5)
• 7efa37f Quiet log spam in test.
• dbc1514 Adding the HostName field to the Conn struct (#18)
• 2b928d9 Link to docs
• de1c7de Add support for arbitrary matching against HTTP and SNI hostnames.
• c6a0996 Support configurable routing of ACME tls-sni-01 challenges.
• 815c942 Merge matcher and route into an interface that yields a Target.
• 2065af4 Support HAProxy's PROXY protocol v1 in DialProxy.
• e030359 Fix golint nits by adding docstrings and simplifying execution flow.
• 6d97c2a Correct the package building command, and only deploy for master branch commits.
• aa12504 Another attempt to fix Travis.
• f6af481 Make Travis test all packages, and remove the go.universe.tf import path.
• d7e343e Fix the godoc link to point to google/tcpproxy.
• bef9f6a Merge bradfitz's tcpproxy codebase with the software formerly known as tlsrouter.
• d86e96a Move tlsrouter's readme to the command's directory.
• 9e73877 Switch license to Apache2, add Google copyright headers.
• cbf137d Correct the travis build to kinda work.
• 3eb49e9 Move tlsrouter to cmd/tlsrouter, in preparation for rewrite as a pkg.
• af97cdd Fix copy/paste-o in doc example.
• 3273f40 Add vendor warning
• e387889 Add TargetListener
• 2eb0155 Start of tcpproxy. No Listener or reverse dialing yet.
• c58b44c Make golint fail if lint errors are found, and fix said lint.
• 4621df9 Clean up the Travis build a bit more, moving more stuff to the deploy stage.
• 96cc76f Test Travis's new build stage support.
• bbbede8 Make travis fetch the test-only dependency.
• 4b8641f Add support for HAProxy's PROXY protocol.
• d23eadc Upload packages based on Go 1.8, not 1.7.
• 7ef32e3 Add Go 1.8 to the build matrix.
• e07ecec typo
• aa3f9c9 Remove debug print in acme code.
• 6664640 Stop testing against Go 1.6.
• 728b8bc Add ACME routing support.
• a5c2ccd Use nogroup as the group, not nobody.
• a94dbd1 Port extra error checking over from netboot.
• 3cd4412 Clean up travis config a bit, and add missing copyright notice.
• aded796 Add a deploy step to garbage-collect old packagecloud files.
• 3e6354c Random change to force travis rebuild on latest code.
• 77fa998 Attempt to create a package with no version name.
• bfef4ba Revert to just debian/jessie. It's the same package anyway.
• 173db90 Try the obvious way to specify a matrix of package tags.
• ea58780 Limit the deploy to only the go 1.7 build.
• a2d0c96 Skip cleanup so travis doesn't delete the freshly built .deb.
• 73ee2e7 Attempt a packagecloud push.
• cbd4ea6 Attempt to build a debian package with FPM.
• 4f5b46f Add a systemd unit file to run tlsrouter.
• 8cc8cac Document -hello-timeout in README.
• e0a0158 Add slowloris protection, in the form of a ClientHello timeout.
• 09cc4bb Remove support for SSL 3.0.
• c41a68d Add tests for hostname matching, and make DNS matches match entire string.
• 6546db4 Fix vet errors in Go 1.6.
• e34c2a6 Add more words to README.
• b321571 Add godoc comments to appease golint.
• 55ba69d Add a Travis CI config.
• b8a3ed8 Add DNS name support to config
• 0a0a9f6 Add licensing and contributing information for release.
• b1edd90 Initial commit. </p> </details>

Dependency Changes

• filippo.io/age 6ad4560f4afc -> v1.2.0
• github.com/aws/aws-sdk-go-v2 v1.27.0 -> v1.30.0
• github.com/aws/aws-sdk-go-v2/config v1.27.16 -> v1.27.21
• github.com/aws/aws-sdk-go-v2/credentials v1.17.16 -> v1.17.21
• github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.16.21 -> v1.17.1
• github.com/aws/aws-sdk-go-v2/service/s3 v1.54.3 -> v1.56.1
• github.com/containers/image/v5 v5.31.0 -> v5.31.1
• github.com/cosi-project/runtime v0.4.6 -> v0.5.0
• github.com/go-jose/go-jose/v4 v4.0.2 new
• github.com/google/go-containerregistry v0.19.1 -> v0.19.2
• github.com/siderolabs/go-api-signature v0.3.2 -> v0.3.3
• github.com/siderolabs/go-loadbalancer v0.3.3 -> v0.3.4
• github.com/siderolabs/siderolink v0.3.8 -> v0.3.9
• github.com/siderolabs/tcpproxy v0.1.0 new
• github.com/spf13/cobra v1.8.0 -> v1.8.1
• github.com/zitadel/oidc/v3 v3.25.1 new
• golang.org/x/crypto v0.23.0 -> v0.24.0
• golang.org/x/net v0.25.0 -> v0.26.0
• golang.org/x/tools v0.21.0 -> v0.22.0
• google.golang.org/protobuf v1.34.1 -> v1.34.2
• k8s.io/api v0.30.1 -> v0.30.2
• k8s.io/client-go v0.30.1 -> v0.30.2
• k8s.io/klog/v2 v2.120.1 -> v2.130.1
• sigs.k8s.io/controller-runtime v0.18.3 -> v0.18.4

Previous release can be found at v0.38.0

Welcome to the v0.38.0-beta.0 release of Omni! This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Break-Glass Configs

Omni now allows getting raw Talos and Kubernetes configs that can allow bypassing Omni when accessing the cluster.

It has a couple of limitations:

• It is available only if is enabled for the account.
• Only os:operator role Talosconfig level is available.
• The cluster will be marked as tainted for the time being, which doesn't affect anything, but is the signal that Omni no longer fully controls secrets rotation.

Exposed Services DNS Name

Exposed services now use new naming schema, so it shouldn't be affected by slow DNS updates.

The domain name patter is now: <hash>-<account>.proxy-us.siderolabs.io.

Kubeconfig Authcode-Keyboard

It is now possible to generate kubeconfig with --grant-type=authcode-keyboard and Omni supports that mode. This mode will print a URL and ask for a one time code instead of starting a local HTTP server on port 8000. Clicking the URL will open the same Omni page as usual, but will present you the one time code instead of doing redirect.

This mode is useful for remote machine kubectl execution and removes the need to set up ssh port-forwarding.

Machine Logs

Machine logs are now stored using new persitent circular buffer library, which has better write efficiency.

Pending Updates

Omni UI now shows pending config changes which are not applied due to locked machines in the cluster.

Contributors

• Artem Chernyshev
• Utku Ozdemir
• Andrey Smirnov
• Dmitriy Matrenichev
• Andrey Smirnov
• Grzegorz Rozniecki

Changes

<details><summary>30 commits</summary> <p>

• 4109996 fix: make MachineSetNode controller select only connected machines
• 2457897 fix: use un-cached list in the MachineSetNodeController
• 73529c2 fix: display descriptions when show description checkbox is clicked
• 6a59d63 fix: generate schematics with the extensions, meta and kernel args
• 87a7750 chore: add Akamai installation media
• fa64b46 fix: skip invalid machines in TalosUpgradeStatusController
• 22bb2cc fix: use proper types in the machine status and snapshot controllers
• a2b7b53 feat: use the new domain scheme for exposed services
• 4ecb175 fix: handle panics in Omni and Talos UI watches
• 6286340 fix: properly delete the item from the cached items slice
• 63ad5bd feat: provide a way to getadmin talosconfig and kubeconfig
• fa21349 fix: properly generate maintenance config patches
• 2e64c31 fix: ignore not found ClusterMachine in the migrations
• a2c3802 fix: validate user email on creation
• 73d0d3b fix: properly detect authcode-keyboard oidc mode
• b7a0620 feat: use circular buffer's new persistence option for machine logs
• 7eec6b9 chore: bump COSI runtime to 0.4.5
• 4d23186 feat: show pending config updates due to locked machine
• f98cf51 fix: ignore not found in the MachineStatus and MachineStatusSnapshot
• ce6e15a fix: proper time adjustment to fix flaky TestEtcdManualBackup
• 27491ea chore: upgrade github.com/containers/image to v5
• 3f75f91 fix: change Transport.Address field to Transport.Address method
• e12cfa8 feat: support authcode login in kubectl oidc-login
• 2fcd0fd fix: properly update the pulled images count if some images are skipped
• 5a4251c test: fix a data race in MachineStatusSnapshotController unit tests
• 0965091 test: fix flaky test in ClusterMachineConfigStatus unit tests
• b7d48aa chore: small fixes
• a6c8b47 fix: pass through the talosctl -n args if they cannot be resolved
• 3bab8bf chore: migrate to Vite and Bun to build the frontend
• 37c1a97 fix: use proper routing on the config patch view and edit pages </p> </details>

Changes from siderolabs/discovery-client

<details><summary>13 commits</summary> <p>

• ca662d2 feat: export default GRPC dial options for the client
• 7a767fa chore: bump Go, deps and rekres
• f4095a1 chore: bump discovery API to v0.1.4
• fbb1cea fix: keepalive interval calculation
• ff8f4be fix: enable gRPC keepalives
• 9ba5f03 chore: app optional ControlPlane data
• 269a832 chore: rekres, update discovery api
• a5c19c6 feat: provide public IP discovered from the server
• 230f317 fix: reconnect the client on update failure
• ac5ab32 feat: support deleting an affiliate
• 27a5bee chore: rekres
• a9a5e9b feat: initial client code
• 98eb999 chore: initial commit </p> </details>

Dependency Changes

• github.com/containers/image/v5 v5.31.0 new
• github.com/cosi-project/runtime 15e9d678159d -> v0.4.6
• github.com/siderolabs/discovery-client v0.1.9 new

Previous release can be found at v0.37.0

Welcome to the v0.37.0-beta.0 release of Omni! This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Node Overview Page

Node overview page now displays more information about the node. That includes:

• Machine stage.
• Unmet health check conditions of the Talos MachineStatus.
• CPU, memory and secure boot information.
• The list of labels added to the machine.

Patches UI

The UI now has the page that shows config patches define for a machine. It includes both cluster level and account level machine patches.

Secureboot Support Added

Omni now fully supports secureboot enabled machines.

Service Events

Node overview page service list now displays information about each service events. If a service fails to start it will be possible to see why in the UI.

Contributors

• Artem Chernyshev
• Andrey Smirnov
• Utku Ozdemir
• Dmitriy Matrenichev
• Christian Hüning
• Mattias Cockburn
• Petr Krutov

Changes

<details><summary>22 commits</summary> <p>

• 800762d chore: rewrite MachineStatus to use QController
• ed26122 fix: implement the controller for handling machine status snapshot
• 6aa2140 feat: display more data on the node overview page
• 5654a49 chore: add renovate.json
• 82abb2b chore: bump deps
• c635827 test: do not use epoch millis in service account names
• 22e3acf chore: bump default Talos version to 1.7.4
• a67d1fb fix: always generate siderolink connection config for all machines
• 9bce82a fix: ignore MachineStatus events timestamps as they're not reliable
• ccca5b5 fix: bump siderolink module version
• f38b7e5 feat: enable ALPN for machine API
• 48cc03a fix: retry affiliate deletes
• 55afa59 feat: add secure boot support
• 0bd2a42 docs: fix a typo in the on-prem installation link
• 247c165 fix: improve wording in authentication error messages
• e2f8407 chore: run rekres
• 4a8ebbf chore: enable codecov and rekres
• 2f1ab0d feat: show service events on the node overview page
• c68a836 fix: use proper name for fetching existing extension configuration
• 4b747f0 feat: add dedicated patch pages for machines and cluster machines
• 4bd0331 fix: get rid of duplicating label completion options
• 631f5c5 chore: always build frontend on BUILDPLATFORM </p> </details>

Changes from siderolabs/go-circular

<details><summary>3 commits</summary> <p>

• cbce5c3 feat: add persistence support
• 3c48c53 feat: implement extra compressed chunks
• 835f04c chore: rekres, update dependencies </p> </details>

Changes from siderolabs/go-tail

<details><summary>1 commit</summary> <p>

• 7cb7294 fix: remove unexpected short read error </p> </details>

Changes from siderolabs/image-factory

<details><summary>10 commits</summary> <p>

• 819432c release(v0.4.1): prepare release
• 4f3206b release(v0.4.0): prepare release
• b0b6bff feat: implement wizard-like UI for the Image Factory
• 8ccd284 feat: allow key-based image verification as option
• 4643056 chore: rekres/update dependencies
• 116721a fix: workaround extension name inconsistencies
• f5bc497 release(v0.3.3): prepare release
• 221b442 feat: support zstd compression
• 40a13c5 release(v0.3.2): prepare release
• 2fe6825 fix: generation of overlay installer images </p> </details>

Changes from siderolabs/siderolink

<details><summary>1 commit</summary> <p>

• 3a587fc fix: do not ever skip updates which have remove flag </p> </details>

Dependency Changes

• github.com/auth0/go-jwt-middleware/v2 v2.2.0 -> v2.2.1
• github.com/aws/aws-sdk-go-v2 v1.26.1 -> v1.27.0
• github.com/aws/aws-sdk-go-v2/config v1.27.10 -> v1.27.16
• github.com/aws/aws-sdk-go-v2/credentials v1.17.10 -> v1.17.16
• github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.15.8 -> v1.16.21
• github.com/aws/aws-sdk-go-v2/service/s3 v1.47.6 -> v1.54.3
• github.com/cosi-project/runtime v0.4.2 -> v0.4.3
• github.com/emicklei/dot v1.6.1 -> v1.6.2
• github.com/hashicorp/vault/api v1.10.0 -> v1.14.0
• github.com/hashicorp/vault/api/auth/kubernetes v0.5.0 -> v0.7.0
• github.com/johannesboyne/gofakes3 f005f5cc03aa -> 99de01ee122d
• github.com/prometheus/client_golang v1.19.0 -> v1.19.1
• github.com/siderolabs/go-circular v0.1.0 -> v0.2.0
• github.com/siderolabs/go-tail v0.1.0 -> v0.1.1
• github.com/siderolabs/image-factory v0.3.1 -> v0.4.1
• github.com/siderolabs/siderolink v0.3.7 -> v0.3.8
• github.com/siderolabs/talos/pkg/machinery v1.7.2 -> 4feb94ca0997
• github.com/zitadel/logging v0.5.0 -> v0.6.0
• go.etcd.io/bbolt v1.3.9 -> v1.3.10
• go.etcd.io/etcd/client/pkg/v3 v3.5.13 -> v3.5.14
• go.etcd.io/etcd/client/v3 v3.5.13 -> v3.5.14
• go.etcd.io/etcd/server/v3 v3.5.13 -> v3.5.14
• golang.org/x/tools v0.20.0 -> v0.21.0
• google.golang.org/grpc v1.63.2 -> v1.64.0
• k8s.io/api v0.30.0-rc.1 -> v0.30.1
• k8s.io/apimachinery v0.30.0-rc.1 -> v0.30.1
• k8s.io/client-go v0.30.0-rc.1 -> v0.30.1
• sigs.k8s.io/controller-runtime v0.16.3 -> v0.18.3

Previous release can be found at v0.36.0

Welcome to the v0.36.0-beta.0 release of Omni! This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Machine And Cluster Labels Completion

The UI of search inputs was reworked. Now Omni suggests autocompletion for all existing machine and cluster labels. It also displays the labels as colored boxes in the input to better match with what's shown in the list.

Machine Set Scaling Parallelism

It is now possible to adjust worker machine sets scaling and update strategies in the UI.

omnictl Version Warnings

omnictl now warns that it has the different version from the backend.

Contributors

• Artem Chernyshev
• Dmitriy Matrenichev

Changes

<details><summary>13 commits</summary> <p>

• 6501134 feat: implement labels completion for clusters and machines
• f0b9240 fix: add the label when clicking outside of the input
• 859f04a feat: warn about using omnictl version different from the backend
• 5397c70 chore: bump siderolink to 0.3.7
• 15186b6 fix: machine class edit page
• a330167 fix: use proper help string for omnictl download --talos-version flag
• c1d38e6 fix: properly do rolling update on control plane nodes
• a0d02ea fix: do not block machine config updates if loadbalancer is down
• 105fd8b fix: do not try to audit machine which no longer has MachineStatus
• 81f749f fix: do not fail schematic reconcile if initial talos version is empty
• 7bd922a feat: implement the UI for adjusting machine sets update strategies
• 0058c04 fix: get all attribute values from SAML ACS when adding user labels
• 7aabbb0 fix: make search work on NodeExtensions page </p> </details>

Changes from siderolabs/siderolink

<details><summary>2 commits</summary> <p>

• be00ff5 chore: redo event filtering as a sequence of iterators
• a936b60 chore: handle peer events in batches </p> </details>

Dependency Changes

• github.com/siderolabs/siderolink v0.3.5 -> v0.3.7
• golang.org/x/crypto v0.22.0 -> v0.23.0
• golang.org/x/net v0.24.0 -> v0.25.0
• golang.org/x/sync v0.6.0 -> v0.7.0
• golang.org/x/text v0.14.0 -> v0.15.0
• golang.org/x/tools v0.19.0 -> v0.20.0
• google.golang.org/grpc v1.62.2 -> v1.63.2
• google.golang.org/protobuf v1.33.0 -> v1.34.1

Previous release can be found at v0.35.0

Welcome to the v0.35.0-beta.0 release of Omni! This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Auth With Username/Password

Omni now shows the error about unverified Auth0 emails.

Machine Extensions

It is now possible to see currently installed system extensions for each machine in the UI and change them there. It is also possible to configure machines' system extensions during cluster creation and scaling.

Also Talos upgrades from 1.5.x -> 1.6.x+ will make Omni automatically pick up kernel modules which are no longer included in Talos >= 1.6.x.

Machine Join Configs

Partial config for joining Talos nodes running in maintenance mode can now be downloaded from the Omni UI.

Machine Status

Talos machine status is now composed both from Talos events (push model). And from Talos node MachineStatus resource (pull model). This way even if the node gets disconnected from Omni for a long time, Omni won't lose any important events.

Settings UI

Admin settings UI (backups and users) is now unified under the single page with tabs.

Contributors

• Artem Chernyshev
• Utku Ozdemir
• Andrey Smirnov
• Simon-Boyer

Changes

<details><summary>22 commits</summary> <p>

• 16108a9 feat: allow setting some url params for api endpoint
• 041a436 feat: unify admin settings under Settings page
• 987f8cd feat: improve auth flow when user email is not verified
• 5b8c130 feat: imlpement the UI for configuring extensions during cluster create
• f6cd840 feat: implement the page that shows list of extensions per node
• 89fa1ad fix: make MachineSetNodeController handle machinesets without clusters
• fa3c9ff feat: automatically pick up extensions when upgrading Talos
• f40c552 chore: use new Auth0 app for CI
• 23d5532 fix: invert the order of recent clusters
• baec123 fix: do not allow adding ISO, PXE nodes running different Talos version
• 264fb35 chore: bump go-kubernetes module
• 2c42f5c feat: add button to overview page to download partial machine config
• 95197e2 feat: improve reliability of machine status snapshots
• ac4fcd8 fix: drop outdated SchematicConfigurationController finalizer
• 7953a49 fix: ignore unknown machine version on the cluster create page
• fbe196e test: use Talos nodes with partial config in integration tests
• 4b50d7c test: fix flaky test by longer k8s node checks and retries
• a32cb8a fix: start watch before delete in omnictl delete
• 40033da fix: remove MachineSetNodes after links removal
• 29667ef fix: make cluster machine install disk selector pick correct disk
• 18e41f8 fix: issue with etcd watch cancel
• 7f58ea4 fix: allow adding machines to Omni at higher speed </p> </details>

Changes from siderolabs/go-kubernetes

<details><summary>1 commit</summary> <p>

• ddd4c69 feat: add support for Kubernetes 1.30 </p> </details>

Dependency Changes

• github.com/aws/smithy-go v1.20.2 new
• github.com/cosi-project/runtime v0.4.1 -> v0.4.2
• github.com/cosi-project/state-etcd v0.2.8 -> v0.2.9
• github.com/rs/xid v1.5.0 new
• github.com/siderolabs/go-kubernetes v0.2.8 -> v0.2.9
• go.etcd.io/etcd/client/pkg/v3 v3.5.12 -> v3.5.13
• go.etcd.io/etcd/client/v3 v3.5.12 -> v3.5.13
• go.etcd.io/etcd/server/v3 v3.5.12 -> v3.5.13

Previous release can be found at v0.34.0