v0.48.0-beta.0

Omni 0.48.0-beta.0 (2025-04-03)

Welcome to the v0.48.0-beta.0 release of Omni!
This is a pre-release of Omni

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Custom Etcd Backup Throughput

The throughput for etcd backup uploads/downloads can now be limited using the --etcd-backup-upload-limit and --etcd-backup-download-limit flags.

Explicit Exposed Service Prefixes

Users can now explicitly specify the prefix for exposed services using the omni-kube-service-exposer.sidero.dev/prefix annotation on their Kubernetes Services.

This is useful when users prefer not to have prefixes randomly generated.

Filter Clusters by Readiness

Clusters can now be filtered by readiness status in the Omni UI.

Cleanup of Unused Config Patches

User-managed config patches not associated with an existing target (e.g., cluster, machine set, or machine) are now cleaned up after 30 days.

Contributors

• Artem Chernyshev
• Utku Ozdemir
• Dmitriy Matrenichev
• Andrey Smirnov
• Orzelius
• Luke Milby
• Matt Willsher
• Nick Niehoff
• Noel Georgi

Changes

53 commits

• 6e4b386 release(v0.48.0-beta.0): prepare release
• 5c4e983 fix: restore timeout in OmniSuite.SetupTest
• 72405c7 fix: filter out device mapper/lvm disks from block devices
• a91bb04 feat: use <platform>-installer[-secureboot] as the installer image
• 77ab722 chore: rekres, bump Go, regenerate, fix docker-compose targets
• 9338a1a fix: check proper jittered time in unit tests
• 6978d31 chore: add support for jitter in EtcdBackupController
• 143e7a6 feat: support filtering clusters by readiness
• d93ae59 fix: ignore 404 errors when removing disconnected links of a cluster
• 9abf37c fix: use clearer description on the machines page metrics
• 2a20840 fix: correctly parse commas in label selectors
• 764cec4 fix: show warning instead of error for etcd quorum being at min
• 4f00856 chore: update dependencies
• b6563c2 chore: bump default Talos version to 1.9.5, Kubernetes version to 1.32.3
• 5ef843f fix: properly display error message when machine class removal failed
• b91b673 fix: add more strict security headers to the web page handler
• 57c005e feat: allow setting exposed service prefixes explicitly
• 3c55a0b fix: do not allow http[s] urls in the redirect query
• 0cd8212 fix: do not select USB sticks by default
• 3650c60 fix: duplicate resources declaration in helm deployment
• 7c50e8b fix: update text and description for SideroLink over GRPC
• 4dea372 chore: add GOEXPERIMENT env to vscode config
• e6e9202 test: fix the timing related flake in resource logger test
• 3b0e831 fix: do not switch Siderolink GRPC tunnel mode after provisioning
• 4a8546e fix: some updated icons were appearing as white
• 1fb14d2 fix: do not clip the tooltip in the cluster machine status
• 63a3c52 chore: update all used icons
• 1e721e5 feat: cleanup orphan config patches
• f7da5d0 chore: rework EtcdBackupControllerSuite to use synctest experiment
• a5efd81 feat: validate incoming packets addresses in siderolink manager
• 966b99c chore: rekres to enable separate cache
• b1c71f0 feat: add support for custom throughput for uploads and downloads
• 86976d3 perf: move etcd backup status resources into secondary storage
• 1e67803 fix: remove force unique token annotation from the link on wipe
• 9012978 chore: replace InfoIterator with iter.Seq2 type
• b519c6c chore: migrate ConfigPatches above threshold of 2048
• b264a41 fix: properly support the PXE and ISO machines in the secure tokens flow
• fd2d340 fix: exclude metal-agent extension from available extensions
• c6e5a5f chore: enable compression only for ConfigPatch
• bd264cd chore: expose omni_runtime_cached_resources metric
• e751022 chore: rework Reconciler to use proper http.Transport
• 2bb38e3 chore: add omni_machine_config_patch_size metrics
• 075698d fix: preserve SideroLink tunnel config on machine allocation
• 56fbf31 fix: skip applying maintenance config to unsupported machines
• bfd24e5 fix: disable compressConfigsAndMachinePatches
• 82d1f09 fix: fix exposed service links on the sidebar
• 9e7d8fb fix: increase log level of the SideroLink GRPC tunnel handler
• ad34182 fix: properly build the search query on the Machines page
• 517c294 chore: add logging for migrations
• aef8b43 fix: extensions list hidden on small screens
• 57cea88 chore: warn if cluster doesn't exist in omnictl talosconfig command
• ef32e43 fix: increase log level of the SideroLink GRPC tunnel handler
• 510512e fix: properly read the siderolink-disable-last-endpoint flag

Changes from siderolabs/discovery-api

1 commit

• 64513a6 feat: rekres, regenerate proto files

Changes from siderolabs/discovery-client

1 commit

• b3632c4 feat: support extra dial options in the client

Changes from siderolabs/discovery-service

3 commits

• 008fcae release(v1.0.10): prepare release
• 6a44f8c chore: bump dependencies
• 761d53a feat: update dependencies

Changes from siderolabs/go-kubernetes

3 commits

• 9ba5654 fix: fix ignoring alpha/beta version parsing
• 0fe1db4 feat: update for new changes in Kubernetes 1.33.0-alpha.3
• 804cb44 feat: add support for Kubernetes to 1.33

Changes from siderolabs/go-loadbalancer

1 commit

• 589c33a chore: upgrade upstream.List and loadbalancer.TCP to Go 1.23

Changes from siderolabs/go-pointer

1 commit

• 347ee9b chore: rekres, update dependencies

Changes from siderolabs/image-factory

8 commits

• c6e3fa6 release(v0.6.7): prepare release
• f896663 feat: update Talos to v1.10.0-alpha.1
• 0931477 release(v0.6.6): prepare release
• b80192a feat: refactor platform metadata
• 4bb43ef fix: add imgfree to ipxe boot script
• d5f3f5a feat: update for Talos 1.10 current
• e727003 chore: update go-uefi module
• 3b302c6 feat: set secure boot support for nocloud platform

Changes from siderolabs/siderolink

1 commit

• a7af143 feat: support packets filtering before writing them to the tun device

Dependency Changes

• github.com/ProtonMail/gopenpgp/v2 v2.8.2 -> v2.8.3
• github.com/auth0/go-jwt-middleware/v2 v2.2.2 -> v2.3.0
• github.com/aws/aws-sdk-go-v2 v1.32.8 -> v1.36.3
• github.com/aws/aws-sdk-go-v2/config v1.28.11 -> v1.29.9
• github.com/aws/aws-sdk-go-v2/credentials v1.17.52 -> v1.17.62
• github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.49 -> v1.17.66
• github.com/aws/aws-sdk-go-v2/service/s3 v1.72.3 -> v1.78.2
• github.com/aws/smithy-go v1.22.1 -> v1.22.3
• github.com/cenkalti/backoff/v5 v5.0.2 new
• github.com/containers/image/v5 v5.33.0 -> v5.34.2
• github.com/cosi-project/runtime v0.9.4 -> v0.10.1
• github.com/emicklei/dot v1.6.4 -> v1.8.0
• github.com/go-jose/go-jose/v4 v4.0.4 -> v4.0.5
• github.com/google/go-cmp v0.6.0 -> v0.7.0
• github.com/google/go-containerregistry v0.20.2 -> v0.20.3
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.0 -> v2.26.3
• github.com/hashicorp/vault/api v1.15.0 -> v1.16.0
• github.com/hashicorp/vault/api/auth/kubernetes v0.8.0 -> v0.9.0
• github.com/jellydator/ttlcache/v3 v3.3.0 new
• github.com/johannesboyne/gofakes3 0da3aa9c32ca -> 5c39aecd6999
• github.com/klauspost/compress v1.18.0 new
• github.com/prometheus/client_golang v1.20.5 -> v1.21.1
• github.com/prometheus/common v0.62.0 -> v0.63.0
• github.com/santhosh-tekuri/jsonschema/v6 v6.0.1 new
• github.com/siderolabs/discovery-api v0.1.5 -> v0.1.6
• github.com/siderolabs/discovery-client v0.1.10 -> v0.1.11
• github.com/siderolabs/discovery-service v1.0.9 -> v1.0.10
• github.com/siderolabs/go-kubernetes v0.2.17 -> v0.2.20
• github.com/siderolabs/go-loadbalancer v0.3.4 -> v0.4.0
• github.com/siderolabs/go-pointer v1.0.0 -> v1.0.1
• github.com/siderolabs/image-factory v0.6.5 -> v0.6.7
• github.com/siderolabs/omni/client v0.45.0 -> v0.47.1
• github.com/siderolabs/siderolink v0.3.12 -> v0.3.13
• github.com/siderolabs/talos/pkg/machinery v1.10.0-alpha.0 -> v1.10.0-alpha.2
• github.com/spf13/cobra v1.8.1 -> v1.9.1
• github.com/stripe/stripe-go/v76 v76.25.0 new
• github.com/zitadel/oidc/v3 v3.34.0 -> v3.36.1
• go.etcd.io/bbolt v1.3.11 -> v1.4.0
• go.etcd.io/etcd/client/pkg/v3 v3.5.18 -> v3.5.19
• go.etcd.io/etcd/client/v3 v3.5.18 -> v3.5.19
• go.etcd.io/etcd/server/v3 v3.5.18 -> v3.5.19
• go.uber.org/mock v0.5.0 new
• golang.org/x/crypto v0.33.0 -> v0.36.0
• golang.org/x/net v0.35.0 -> v0.37.0
• golang.org/x/sync v0.11.0 -> v0.12.0
• golang.org/x/time v0.11.0 new
• golang.org/x/tools v0.29.0 -> v0.31.0
• google.golang.org/grpc v1.70.0 -> v1.71.0
• google.golang.org/protobuf v1.36.4 -> v1.36.5
• k8s.io/api v0.32.0 -> v0.32.3
• k8s.io/client-go v0.32.0 -> v0.32.3
• sigs.k8s.io/controller-runtime v0.19.4 -> v0.20.3

Previous release can be found at v0.47.0