v0.44.0-beta.0

Omni 0.44.0-beta.0 (2024-11-06)

Welcome to the v0.44.0-beta.0 release of Omni!
This is a pre-release of Omni

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Automatically Resolve Cluster in talosctl

talosctl command now works without --cluster flag when using instance wide Talos config.
Omni will automatically resolve the correct cluster.

Reset Removed Machines

Omni will now try to wipe Talos installation from the machines which are removed from the instance.

Contributors

• Artem Chernyshev
• Dmitriy Matrenichev
• Andrey Smirnov
• Noel Georgi
• Tijmen Blaauw - van den Brink

Changes

26 commits

• fe075b0 release(v0.44.0-beta.0): prepare release
• fe0fc17 feat: support creating config patches in the infrastructure providers
• 3e8bc8d feat: enable watch retries on Omni side
• 23ccdb5 chore: bump dependencies
• be3e67c fix: include NodeJS types in the frontend build
• abaee03 fix: make web UI show favicon
• cc59192 feat: reset machine when it's removed from Omni
• 900987b test: disable secure boot in e2e tests
• 58159e4 feat: automatically resolve cluster in talosctl calls
• 8da2328 fix: remove MaintenanceConfigPatchController finalizers
• 21455d9 fix: properly show the current manifests in the bootstrap manifest sync
• c904e3a chore: do not audit log GET requests to k8s
• 62917e7 fix: use proper selectors in the MachineClass create UI
• 4b4088d fix: do not read Talos versions from the image registry ever
• b3dc48a chore: bump dependencies
• 9d0a512 fix: filter block devices with UNKNOWN type
• 8c737ba fix: fetch Talos version from the image factory
• 83554e5 fix: do not set empty initial labels in the UI
• 98315a9 fix: do not build acompat docker image
• cd1f2bd fix: build arm64 integration tests executable
• c754cdc feat: support insecure localhost infra provider access mode
• 284e8b5 fix: introduce timeout in the etcd healthchecks in the machine set ctrl
• d7b92e7 chore: remove ip_address field from audit log session
• 18b13ea chore: add basic helm chart
• 1544b9c chore: move from Codec to CodecV2
• 1c12dfc fix: properly return error from config.Init

Changes from siderolabs/crypto

1 commit

• 58b2f92 chore: use HTTP/2 ALPN by default

Changes from siderolabs/discovery-api

1 commit

• 005e92c chore: rekres and regen

Changes from siderolabs/discovery-client

1 commit

• b74fb90 fix: allow custom TLS config for the client

Changes from siderolabs/discovery-service

4 commits

• b8da986 fix: reduce memory allocations (logger)
• 3367c7b chore: add proto-codec/codec
• efbb10b fix: properly parse peer address
• cf39974 feat: support direct TLS serving

Changes from siderolabs/gen

3 commits

• e847d2a chore: add more utilities to xiter
• f3c5a2b chore: add Empty and Empty2 iterators
• c53b90b chore: add packages xiter/xstrings/xbytes

Changes from siderolabs/go-circular

1 commit

• 9a0f7b0 fix: multiple data race issues

Changes from siderolabs/go-kubernetes

3 commits

• e56a7f6 fix: update deprecations based on Kubernetes 1.32.0-alpha.3
• 381f251 feat: update for Kubernetes 1.32
• 0e767c5 chore: k8s 1.31 kube-scheduler health endpoints

Changes from siderolabs/grpc-proxy

2 commits

• de1c628 fix: copy data from big frame msg
• ef47ec7 chore: upgrade Codec implementations and usages to Codec2

Changes from siderolabs/proto-codec

3 commits

• 0d84c65 chore: add support for gogo protobuf generator
• 19f8d2e chore: add kres
• e038bb4 Initial commit

Changes from siderolabs/siderolink

2 commits

• 1893385 fix: initialize tls listener properly
• 6c8fa1f feat: allow listening over TLS for SideroLink API

Dependency Changes

• github.com/adrg/xdg v0.5.0 -> v0.5.3
• github.com/aws/aws-sdk-go-v2 v1.30.4 -> v1.32.3
• github.com/aws/aws-sdk-go-v2/config v1.27.31 -> v1.28.1
• github.com/aws/aws-sdk-go-v2/credentials v1.17.30 -> v1.17.42
• github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.16 -> v1.17.35
• github.com/aws/aws-sdk-go-v2/service/s3 v1.61.0 -> v1.66.2
• github.com/aws/smithy-go v1.20.4 -> v1.22.0
• github.com/cosi-project/runtime v0.6.3 -> v0.7.1
• github.com/cosi-project/state-etcd v0.3.2 -> v0.4.0
• github.com/fsnotify/fsnotify v1.7.0 -> v1.8.0
• github.com/golang-jwt/jwt/v4 v4.5.0 -> v4.5.1
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.22.0 -> v2.23.0
• github.com/hashicorp/vault/api v1.14.0 -> v1.15.0
• github.com/hashicorp/vault/api/auth/kubernetes v0.7.0 -> v0.8.0
• github.com/johannesboyne/gofakes3 edd0227ffc37 -> 2db7ccb81e19
• github.com/jonboulle/clockwork fc59783b0293 -> 7e524bd2b238
• **github.com/...

v0.43.3

Omni 0.43.3 (2024-10-28)

Welcome to the v0.43.3 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Contributors

• Artem Chernyshev

Changes

2 commits

• 5bf8ac2 release(v0.43.3): prepare release
• 63d5723 fix: remove MaintenanceConfigPatchController finalizers

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.43.2

v0.43.2

Omni 0.43.2 (2024-10-25)

Welcome to the v0.43.2 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Contributors

• Artem Chernyshev
• Dmitriy Matrenichev

Changes

4 commits

• 07614b9 release(v0.43.2): prepare release
• c403da7 fix: properly show the current manifests in the bootstrap manifest sync
• 23c33e7 chore: do not audit log GET requests to k8s
• 5d0c81a fix: use proper selectors in the MachineClass create UI

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.43.1

v0.43.1

Omni 0.43.1 (2024-10-17)

Welcome to the v0.43.1 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Contributors

• Artem Chernyshev
• Dmitriy Matrenichev

Changes

3 commits

• ed779c9 release(v0.43.1): prepare release
• dbdbcb6 fix: introduce timeout in the etcd healthchecks in the machine set ctrl
• cd1f88f chore: remove ip_address field from audit log session

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.43.0

v0.43.0

Omni 0.43.0 (2024-10-11)

Welcome to the v0.43.0 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

gRPC Tunnel

gRPC tunnel for wireguard can now be enabled when downloading the installation media from Omni.

Talos Diagnostics

Omni now shows Talos diagnostics information for Talos >= 1.8.0.

Contributors

• Artem Chernyshev
• Utku Ozdemir
• Dmitriy Matrenichev
• Andrey Smirnov
• Birger J. Nordølum
• Justin Garrison

Changes

28 commits

• 3655206 release(v0.43.0): prepare release
• 397f204 feat: display pending machine requests in the machine sets
• 0d66194 release(v0.43.0-beta.0): prepare release
• 4084b6e fix: get proper IP from peer metadata
• d547889 fix: filter requests in the infra provision controller
• d1c9d9d chore: set peer.address to inform about IP status
• 23a4092 chore: refactor code
• 5630d83 fix: ignore parse errors in the log parser
• 8334c59 chore: add a way to get provider data in the infra provider
• cc71fb6 feat: support auto provisioned machine classes
• 41c3bd5 fix: support whitespaces in the label selectors
• 99191c6 feat: integrate with Talos diagnostics
• dcf89d9 feat: update Omni for Talos 1.8 machinery
• a04b07f test: fix the error message in infra test
• 3e3e53b chore: fix capitalization of wireguard
• f69ff37 feat: make infra provider report back it's information: schema, name
• 7555312 fix: get rid of the exceptions in the ui
• 8e48723 feat: support attaching machine sets to a machine request sets
• bb2f52d chore: drop machine class status and machine set pressure resources
• 3ef1f85 fix: call deprovision only after the machine request status is deleted
• 423f729 chore: bump default versions: Talos 1.7.6, Kubernetes 1.30.5
• c4a4151 feat: allow specifying grpc tunnel option explicitly for install media
• bb14ed6 fix: parse machine labels and extensions as slices in omnictl download
• 9e033d7 docs: update omni template so docs are easier
• 4c329db fix: update COSI runtime
• 81e08eb test: run infra integration tests against Talemu provider
• f83cf3b fix: pin apexcharts version to 3.45.2
• e3d46f9 feat: implement compression of config fields on resources

Changes since v0.43.0-beta.0

2 commits

• 3655206 release(v0.43.0): prepare release
• 397f204 feat: display pending machine requests in the machine sets

Dependency Changes

• github.com/cosi-project/runtime v0.6.1 -> v0.6.3
• github.com/cosi-project/state-etcd v0.3.1 -> v0.3.2
• github.com/santhosh-tekuri/jsonschema/v5 v5.3.1 new
• github.com/siderolabs/talos/pkg/machinery 6f7c3a8e5c63 -> v1.8.0

Previous release can be found at v0.42.0

v0.43.0-beta.0

Omni 0.43.0-beta.0 (2024-10-09)

Welcome to the v0.43.0-beta.0 release of Omni!
This is a pre-release of Omni

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

gRPC Tunnel

gRPC tunnel for wireguard can now be enabled when downloading the installation media from Omni.

Talos Diagnostics

Omni now shows Talos diagnostics information for Talos >= 1.8.0.

Contributors

• Artem Chernyshev
• Utku Ozdemir
• Dmitriy Matrenichev
• Andrey Smirnov
• Birger J. Nordølum
• Justin Garrison

Changes

26 commits

• 0d66194 release(v0.43.0-beta.0): prepare release
• 4084b6e fix: get proper IP from peer metadata
• d547889 fix: filter requests in the infra provision controller
• d1c9d9d chore: set peer.address to inform about IP status
• 23a4092 chore: refactor code
• 5630d83 fix: ignore parse errors in the log parser
• 8334c59 chore: add a way to get provider data in the infra provider
• cc71fb6 feat: support auto provisioned machine classes
• 41c3bd5 fix: support whitespaces in the label selectors
• 99191c6 feat: integrate with Talos diagnostics
• dcf89d9 feat: update Omni for Talos 1.8 machinery
• a04b07f test: fix the error message in infra test
• 3e3e53b chore: fix capitalization of wireguard
• f69ff37 feat: make infra provider report back it's information: schema, name
• 7555312 fix: get rid of the exceptions in the ui
• 8e48723 feat: support attaching machine sets to a machine request sets
• bb2f52d chore: drop machine class status and machine set pressure resources
• 3ef1f85 fix: call deprovision only after the machine request status is deleted
• 423f729 chore: bump default versions: Talos 1.7.6, Kubernetes 1.30.5
• c4a4151 feat: allow specifying grpc tunnel option explicitly for install media
• bb14ed6 fix: parse machine labels and extensions as slices in omnictl download
• 9e033d7 docs: update omni template so docs are easier
• 4c329db fix: update COSI runtime
• 81e08eb test: run infra integration tests against Talemu provider
• f83cf3b fix: pin apexcharts version to 3.45.2
• e3d46f9 feat: implement compression of config fields on resources

Dependency Changes

• github.com/cosi-project/runtime v0.6.1 -> v0.6.3
• github.com/cosi-project/state-etcd v0.3.1 -> v0.3.2
• github.com/santhosh-tekuri/jsonschema/v5 v5.3.1 new
• github.com/siderolabs/talos/pkg/machinery 6f7c3a8e5c63 -> v1.8.0

Previous release can be found at v0.42.0

v0.42.3

Omni 0.42.3 (2024-09-17)

Welcome to the v0.42.3 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Contributors

• Artem Chernyshev

Changes

3 commits

• 12e9a65 release(v0.42.3): prepare release
• 89860d5 fix: call deprovision only after the machine request status is deleted
• 42218d0 release(v0.42.2): prepare release

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.42.2

v0.42.2

Omni 0.42.2 (2024-09-17)

Welcome to the v0.42.2 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Contributors

• Artem Chernyshev

Changes

3 commits

• 465f5a1 fix: update COSI runtime
• b2c9b61 release(v0.42.1): prepare release
• fefbb18 fix: pin apexcharts version to 3.45.2

Changes since v0.42.1

1 commit

• 465f5a1 fix: update COSI runtime

Dependency Changes

• github.com/cosi-project/runtime v0.6.1 -> v0.6.3
• github.com/cosi-project/state-etcd v0.3.1 -> v0.3.2

Previous release can be found at v0.42.0

v0.42.1

Omni 0.42.1 (2024-09-12)

Welcome to the v0.42.1 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Contributors

• Artem Chernyshev

Changes

2 commits

• b2c9b61 release(v0.42.1): prepare release
• fefbb18 fix: pin apexcharts version to 3.45.2

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.42.0

v0.42.0

Omni 0.42.0 (2024-09-10)

Welcome to the v0.42.0 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Allow multiple IP's in siderolink-wireguard-advertised-addr flag

The siderolink-wireguard-advertised-addr flag now accepts multiple IP addresses separated by commas. This is useful
when you have multiple IPs (IPv4 and IPv6) on the host machine and want to allow Talos nodes to connect to the Omni
using any of them.

Audit log

It is now possible to get the audit log from the Omni. By default it's disabled. To enable, pass
--audit-log-dir <dir> to the Omni. The audit log will be written to the specified directory, separated by day.

Retention is set to 30 days (including the current day). The audit log is written in JSON format, where each entry is
a JSON object.

There are two ways to get audit log, and for both you need Admin role:

1. By using the UI: Simply click "Download audit log" in the main menu.
2. Using omnictl audit-log command. This command will stream the audit log from the Omni to the local machine stdout.

Cluster Sort

Cluster list on Clusters page can now be sorted by name or creation date.
Before it was always sorted by creation date (newest first).

TLS Cert Reload

Omni service can now reload the TLS certs without restart.

Contributors

• Artem Chernyshev
• Dmitriy Matrenichev
• Andrey Smirnov
• Utku Ozdemir
• Noel Georgi
• Justin Garrison

Changes

31 commits

• 06a1553 release(v0.42.0): prepare release
• 4ed9049 fix: hide download audit log button if audit logs feature is disabled
• b6b252e fix: use YAML representation in omnictl get
• 44e1c5d release(v0.42.0-beta.0): prepare release
• c076c3c fix: filter readonly, CD and loop devices for 1.8
• 0360422 feat: support passing extra data through the siderolink join token
• 381021e fix: calculate requested and connected machines in the ClusterStatus
• 7abb0f5 chore: bump deps
• 464f699 chore: rename CloudProvider to InfraProvider
• bfe036e chore: allow to specify start and end time for audit-log
• e2f5795 chore: allow multiple IP's for siderolink-wireguard-advertised-addr flag
• 3c1defe fix: fix spelling for hover text
• 76ba670 chore: allow users with admin role to download audit log from UI
• e8d578a fix: add siderolink connection params to the infra provider interface
• 4a82cd0 chore: rewrite renamed extension names on Talos version updates
• 56c0394 fix: always remove finalizers from the ClusterMachineStatus
• ce45042 feat: implement MachineRequestSets and support links cleanup flow
• 85aaf1c feat: support sorting cluster by name, creation time
• 95c8210 feat: implement base infra provider library
• a32a6fa feat: reload TLS certs without restart
• 00ae084 fix: delete upgrade meta key from nodes after upgrades
• 3f5c0f8 chore: enable 'github.com/planetscale/vtprotobuf' encoding
• 34a8c36 chore: rekres to get BUSL license change date updated on releases
• bf188e4 chore: implement audit log reader
• 5d48547 chore: use range-over-func iterators for resource iteration
• dc349c1 chore: do a full generate with latest deps
• 67f2e8d chore: print error on closing secondary storage backing store
• 89e8a62 fix: pass the logger to machine logs circular buffer
• d2387d9 fix: use a separate phase for the extensions installation
• cbfe7c9 chore: add periodic cleanup of old log files
• aea900f fix: display machines in tearing down state

Changes since v0.42.0-beta.0

3 commits

• 06a1553 release(v0.42.0): prepare release
• 4ed9049 fix: hide download audit log button if audit logs feature is disabled
• b6b252e fix: use YAML representation in omnictl get

Changes from siderolabs/discovery-service

1 commit

• 270f257 chore: bump deps

Changes from siderolabs/go-api-signature

2 commits

• 8807c5e fix: account for time truncation to a second resolution
• 1b35ea8 chore: bump deps and fix data race

Changes from siderolabs/go-debug

1 commit

• c8f9b12 chore: add support for Go 1.23

Changes from siderolabs/go-talos-support

3 commits

• 58f4f0f chore: bump Go dependencies
• f9d46fd fix: add dns-resolve-cache to the list of logs gathered
• 69891cf chore: remove containerd dependency

Changes from siderolabs/image-factory

9 commits

• fe9134a release(v0.5.0): prepare release
• 7f09750 feat: update to Talos 1.8
• b985abc fix: cache generated system extension image correctly
• 9687413 fix: set SOURCE_DATA_EPOCH
• fef0833 chore: add in new helios64 overlay
• 03bd46f feat: support inclusion on well-known UEFI SecureBoot certs
• 608a6f0 chore: alias nvidia extensions to lts versions
• 8b4e0d9 chore: make metatadata pkg public
• 7a4de58 chore: build multi-arch image

Dependency Changes

• github.com/auth0/go-jwt-middleware/v2 v2.2.1 -> v2.2.2
• github.com/aws/aws-sdk-go-v2 ...