Omni 0.45.0-beta.0 (2024-12-12)

Welcome to the v0.45.0-beta.0 release of Omni!
This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Service Account Management UI

It is now possible to view, create, delete and edit service account in the Omni web UI.

New SBC Support

Turing RK1 SBC installation media can now be downloaded from Omni.

User Management CLI

omnictl now has new commands for user management to make it consistent with the UI:

omnictl user list
`omnictl user create [email] --role [role]
omnictl user delete [email]
omnictl user set-role email --role [role]

Contributors

Utku Ozdemir
Noel Georgi
Andrey Smirnov
Artem Chernyshev
Dmitriy Matrenichev
Christopher Gill
Nico Berlee

Changes

23 commits

99693cf test: assert power on/off status in static infra provider tests
471831c test: assert machine labels in static infra provider tests
8aeff65 feat: update Talos machinery to final 1.9.0-beta.1
a7b603e feat: implement CLI commands for user management
bbbf6f2 feat: add Turing RK1 SoM to SBCs dropdown
d8e3aad chore: handle renamed drm extensions
6f3ce0d fix: regenerate wipe id of infra machines only once per de-allocation
ce40338 feat: add rejected state to infra machine acceptance status
8a64ba7 chore: bump COSI runtime to v0.7.5
815b2b0 feat: allow specifying extra kernel args on infra machines
95c22be chore: bump deps
e84b10a fix: fix panic in ConfigPatchRequestController
ac362f9 fix: ignore Unimplemented errors in MetaDelete calls
377b550 feat: update Talos machinery to v1.9.0-beta.0
776bc65 test: add static infra provider (bare-metal provider) integration tests
d879c6e chore: bump discovery service to v1.0.8
5a26d4c feat: add resources and controllers for bare metal infra provider
033e051 chore: bump Go to 1.23.3, rekres, regenerate sources, make linters happy
9085e82 fix: use the custom image factory host in backend and frontend
7fd2817 chore: deprecate Talos 1.4
d46fe7e fix: fix compose.yaml typo
e4586f4 fix: properly set up provider for autoprovision tests
05ab993 fix: properly map config patch requests in the infra provision ctrl

Changes from siderolabs/crypto

1 commit

0d45dee chore: bump deps

Changes from siderolabs/discovery-service

1 commit

2bb245a fix: do not register storage metric collectors if it is not enabled

Changes from siderolabs/go-kubernetes

4 commits

06f07ab chore: add authorization config api version
5ca8ab1 chore: kube-apiserver authorization config file support
0f62a7e feat: add one more deprecation/removal for v1.32
87d2e8e feat: add one more deprecation for 1.32.0-beta.0

Changes from siderolabs/image-factory

11 commits

d0dcfe5 release(v0.6.2): prepare release
a8cdc21 feat: update dependencies for Talos 1.9
b7f7fd3 chore: add hash errata for tarball headers
370c137 fix: vmware build assets on non-amd64
c102c95 chore: alias i915/amdgpu extensions to new name
b7b4c71 release(v0.6.1): prepare release
96c8455 chore: bump generated data
cc1074b release(v0.6.0): prepare release
0ca8240 fix: secureboot iso gen
8e66370 feat: hide Talos metal agent extension on the UI
d98b007 feat: reword wizard using GitHub Copilot

Dependency Changes

github.com/ProtonMail/gopenpgp/v2 v2.7.5 -> v2.8.1
github.com/aws/aws-sdk-go-v2 v1.32.3 -> v1.32.6
github.com/aws/aws-sdk-go-v2/config v1.28.1 -> v1.28.6
github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.35 -> v1.17.43
github.com/aws/aws-sdk-go-v2/service/s3 v1.66.2 -> v1.71.0
github.com/aws/smithy-go v1.22.0 -> v1.22.1
github.com/containers/image/v5 v5.32.2 -> v5.33.0
github.com/cosi-project/runtime v0.7.1 -> v0.7.5
github.com/cosi-project/state-etcd v0.4.0 -> v0.4.1
github.com/emicklei/dot v1.6.2 -> v1.6.4
github.com/grpc-ecosystem/grpc-gateway/v2 v2.23.0 -> v2.24.0
github.com/johannesboyne/gofakes3 2db7ccb81e19 -> 0da3aa9c32ca
github.com/siderolabs/crypto v0.5.0 -> v0.5.1
github.com/siderolabs/discovery-service v1.0.7 -> v1.0.8
github.com/siderolabs/go-kubernetes v0.2.14 -> v0.2.17
github.com/siderolabs/image-factory v0.5.0 -> v0.6.2
github.com/siderolabs/talos/pkg/machinery v1.8.2 -> v1.9.0-beta.1
github.com/stretchr/testify v1.9.0 -> v1.10.0
github.com/zitadel/oidc/v3 v3.32.1 -> v3.33.1
go.etcd.io/etcd/client/pkg/v3 v3.5.16 -> v3.5.17
go.etcd.io/etcd/client/v3 v3.5.16 -> v3.5.17
go.etcd.io/etcd/server/v3 v3.5.16 -> v3.5.17
golang.org/x/crypto v0.28.0 -> v0.29.0
golang.org/x/net v0.30.0 -> v0.31.0
golang.org/x/sync v0.8.0 -> v0.10.0
golang.org/x/tools v0.26.0 -> v0.27.0
google.golang.org/grpc v1.67.1 -> v1.68.0
google.golang.org/protobuf v1.35.1 -> v1.35.2
k8s.io/api v0.31.2 -> v0.32.0-rc.1
k8s.io/apimachinery v0.31.2 -> v0.32.0-rc.1
k8s.io/client-go v0.31.2 -> v0.32.0-rc.1
sigs.k8s.io/controller-runtime v0.19.1 -> v0.19.3

Previous release can be found at v0.44.0

Omni 0.44.0-beta.0 (2024-11-06)

Welcome to the v0.44.0-beta.0 release of Omni! This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Automatically Resolve Cluster in `talosctl`

talosctl command now works without --cluster flag when using instance wide Talos config. Omni will automatically resolve the correct cluster.

Reset Removed Machines

Omni will now try to wipe Talos installation from the machines which are removed from the instance.

Contributors

Artem Chernyshev
Dmitriy Matrenichev
Andrey Smirnov
Noel Georgi
Tijmen Blaauw - van den Brink

Changes

25 commits

fe0fc17 feat: support creating config patches in the infrastructure providers
3e8bc8d feat: enable watch retries on Omni side
23ccdb5 chore: bump dependencies
be3e67c fix: include NodeJS types in the frontend build
abaee03 fix: make web UI show favicon
cc59192 feat: reset machine when it's removed from Omni
900987b test: disable secure boot in e2e tests
58159e4 feat: automatically resolve cluster in talosctl calls
8da2328 fix: remove MaintenanceConfigPatchController finalizers
21455d9 fix: properly show the current manifests in the bootstrap manifest sync
c904e3a chore: do not audit log GET requests to k8s
62917e7 fix: use proper selectors in the MachineClass create UI
4b4088d fix: do not read Talos versions from the image registry ever
b3dc48a chore: bump dependencies
9d0a512 fix: filter block devices with UNKNOWN type
8c737ba fix: fetch Talos version from the image factory
83554e5 fix: do not set empty initial labels in the UI
98315a9 fix: do not build acompat docker image
cd1f2bd fix: build arm64 integration tests executable
c754cdc feat: support insecure localhost infra provider access mode
284e8b5 fix: introduce timeout in the etcd healthchecks in the machine set ctrl
d7b92e7 chore: remove ip_address field from audit log session
18b13ea chore: add basic helm chart
1544b9c chore: move from Codec to CodecV2
1c12dfc fix: properly return error from config.Init

Changes from siderolabs/crypto

1 commit

58b2f92 chore: use HTTP/2 ALPN by default

Changes from siderolabs/discovery-api

1 commit

005e92c chore: rekres and regen

Changes from siderolabs/discovery-client

1 commit

b74fb90 fix: allow custom TLS config for the client

Changes from siderolabs/discovery-service

4 commits

b8da986 fix: reduce memory allocations (logger)
3367c7b chore: add proto-codec/codec
efbb10b fix: properly parse peer address
cf39974 feat: support direct TLS serving

Changes from siderolabs/gen

3 commits

e847d2a chore: add more utilities to xiter
f3c5a2b chore: add Empty and Empty2 iterators
c53b90b chore: add packages xiter/xstrings/xbytes

Changes from siderolabs/go-circular

1 commit

9a0f7b0 fix: multiple data race issues

Changes from siderolabs/go-kubernetes

3 commits

e56a7f6 fix: update deprecations based on Kubernetes 1.32.0-alpha.3
381f251 feat: update for Kubernetes 1.32
0e767c5 chore: k8s 1.31 kube-scheduler health endpoints

Changes from siderolabs/grpc-proxy

2 commits

de1c628 fix: copy data from big frame msg
ef47ec7 chore: upgrade Codec implementations and usages to Codec2

Changes from siderolabs/proto-codec

3 commits

0d84c65 chore: add support for gogo protobuf generator
19f8d2e chore: add kres
e038bb4 Initial commit

Changes from siderolabs/siderolink

2 commits

1893385 fix: initialize tls listener properly
6c8fa1f feat: allow listening over TLS for SideroLink API

Dependency Changes

github.com/adrg/xdg v0.5.0 -> v0.5.3
github.com/aws/aws-sdk-go-v2 v1.30.4 -> v1.32.3
github.com/aws/aws-sdk-go-v2/config v1.27.31 -> v1.28.1
github.com/aws/aws-sdk-go-v2/credentials v1.17.30 -> v1.17.42
github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.16 -> v1.17.35
github.com/aws/aws-sdk-go-v2/service/s3 v1.61.0 -> v1.66.2
github.com/aws/smithy-go v1.20.4 -> v1.22.0
github.com/cosi-project/runtime v0.6.3 -> v0.7.1
github.com/cosi-project/state-etcd v0.3.2 -> v0.4.0
github.com/fsnotify/fsnotify v1.7.0 -> v1.8.0
github.com/golang-jwt/jwt/v4 v4.5.0 -> v4.5.1
github.com/grpc-ecosystem/grpc-gateway/v2 v2.22.0 -> v2.23.0
github.com/hashicorp/vault/api v1.14.0 -> v1.15.0
github.com/hashicorp/vault/api/auth/kubernetes v0.7.0 -> v0.8.0
github.com/johannesboyne/gofakes3 edd0227ffc37 -> 2db7ccb81e19
github.com/jonboulle/clockwork fc59783b0293 -> 7e524bd2b238
github.com/prometheus/client_golang v1.20.2 -> v1.20.5
github.com/prometheus/common v0.57.0 -> v0.60.1
github.com/siderolabs/crypto v0.4.4 -> v0.5.0
github.com/siderolabs/discovery-api v0.1.4 -> v0.1.5
github.com/siderolabs/discovery-client v0.1.9 -> v0.1.10
github.com/siderolabs/discovery-service v1.0.3 -> v1.0.7
github.com/siderolabs/gen v0.5.0 -> v0.7.0
github.com/siderolabs/go-circular v0.2.0 -> v0.2.1
github.com/siderolabs/go-kubernetes v0.2.11 -> v0.2.14
github.com/siderolabs/grpc-proxy v0.4.1 -> v0.5.1
github.com/siderolabs/omni/client v0.39.1 -> v0.42.1
github.com/siderolabs/proto-codec v0.1.1 new
github.com/siderolabs/siderolink v0.3.9 -> v0.3.11
github.com/siderolabs/talos/pkg/machinery v1.8.0 -> v1.8.2
github.com/zitadel/logging v0.6.0 -> v0.6.1
github.com/zitadel/oidc/v3 v3.28.2 -> v3.32.1
go.etcd.io/etcd/client/pkg/v3 v3.5.15 -> v3.5.16
go.etcd.io/etcd/client/v3 v3.5.15 -> v3.5.16
go.etcd.io/etcd/server/v3 v3.5.15 -> v3.5.16
golang.org/x/crypto v0.26.0 -> v0.28.0
golang.org/x/net v0.28.0 -> v0.30.0
golang.org/x/tools v0.24.0 -> v0.26.0
google.golang.org/grpc v1.66.0 -> v1.67.1
google.golang.org/protobuf v1.34.2 -> v1.35.1
k8s.io/api v0.31.0 -> v0.31.2
k8s.io/client-go v0.31.0 -> v0.31.2
sigs.k8s.io/controller-runtime v0.19.0 -> v0.19.1

Previous release can be found at v0.43.0

Omni 0.43.0 (2024-10-11)

Welcome to the v0.43.0 release of Omni!

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

`gRPC` Tunnel

gRPC tunnel for wireguard can now be enabled when downloading the installation media from Omni.

Talos Diagnostics

Omni now shows Talos diagnostics information for Talos >= 1.8.0.

Contributors

Artem Chernyshev
Utku Ozdemir
Dmitriy Matrenichev
Andrey Smirnov
Birger J. Nordølum
Justin Garrison

Changes

27 commits

397f204 feat: display pending machine requests in the machine sets
0d66194 release(v0.43.0-beta.0): prepare release
4084b6e fix: get proper IP from peer metadata
d547889 fix: filter requests in the infra provision controller
d1c9d9d chore: set peer.address to inform about IP status
23a4092 chore: refactor code
5630d83 fix: ignore parse errors in the log parser
8334c59 chore: add a way to get provider data in the infra provider
cc71fb6 feat: support auto provisioned machine classes
41c3bd5 fix: support whitespaces in the label selectors
99191c6 feat: integrate with Talos diagnostics
dcf89d9 feat: update Omni for Talos 1.8 machinery
a04b07f test: fix the error message in infra test
3e3e53b chore: fix capitalization of wireguard
f69ff37 feat: make infra provider report back it's information: schema, name
7555312 fix: get rid of the exceptions in the ui
8e48723 feat: support attaching machine sets to a machine request sets
bb2f52d chore: drop machine class status and machine set pressure resources
3ef1f85 fix: call deprovision only after the machine request status is deleted
423f729 chore: bump default versions: Talos 1.7.6, Kubernetes 1.30.5
c4a4151 feat: allow specifying grpc tunnel option explicitly for install media
bb14ed6 fix: parse machine labels and extensions as slices in omnictl download
9e033d7 docs: update omni template so docs are easier
4c329db fix: update COSI runtime
81e08eb test: run infra integration tests against Talemu provider
f83cf3b fix: pin apexcharts version to 3.45.2
e3d46f9 feat: implement compression of config fields on resources

Changes since v0.43.0-beta.0

1 commit

397f204 feat: display pending machine requests in the machine sets

Dependency Changes

github.com/cosi-project/runtime v0.6.1 -> v0.6.3
github.com/cosi-project/state-etcd v0.3.1 -> v0.3.2
github.com/santhosh-tekuri/jsonschema/v5 v5.3.1 new
github.com/siderolabs/talos/pkg/machinery 6f7c3a8e5c63 -> v1.8.0

Previous release can be found at v0.42.0

Omni 0.43.0-beta.0 (2024-10-09)

Welcome to the v0.43.0-beta.0 release of Omni! This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

`gRPC` Tunnel

gRPC tunnel for wireguard can now be enabled when downloading the installation media from Omni.

Talos Diagnostics

Omni now shows Talos diagnostics information for Talos >= 1.8.0.

Contributors

Artem Chernyshev
Utku Ozdemir
Dmitriy Matrenichev
Andrey Smirnov
Birger J. Nordølum
Justin Garrison

Changes

25 commits

4084b6e fix: get proper IP from peer metadata
d547889 fix: filter requests in the infra provision controller
d1c9d9d chore: set peer.address to inform about IP status
23a4092 chore: refactor code
5630d83 fix: ignore parse errors in the log parser
8334c59 chore: add a way to get provider data in the infra provider
cc71fb6 feat: support auto provisioned machine classes
41c3bd5 fix: support whitespaces in the label selectors
99191c6 feat: integrate with Talos diagnostics
dcf89d9 feat: update Omni for Talos 1.8 machinery
a04b07f test: fix the error message in infra test
3e3e53b chore: fix capitalization of wireguard
f69ff37 feat: make infra provider report back it's information: schema, name
7555312 fix: get rid of the exceptions in the ui
8e48723 feat: support attaching machine sets to a machine request sets
bb2f52d chore: drop machine class status and machine set pressure resources
3ef1f85 fix: call deprovision only after the machine request status is deleted
423f729 chore: bump default versions: Talos 1.7.6, Kubernetes 1.30.5
c4a4151 feat: allow specifying grpc tunnel option explicitly for install media
bb14ed6 fix: parse machine labels and extensions as slices in omnictl download
9e033d7 docs: update omni template so docs are easier
4c329db fix: update COSI runtime
81e08eb test: run infra integration tests against Talemu provider
f83cf3b fix: pin apexcharts version to 3.45.2
e3d46f9 feat: implement compression of config fields on resources

Dependency Changes

github.com/cosi-project/runtime v0.6.1 -> v0.6.3
github.com/cosi-project/state-etcd v0.3.1 -> v0.3.2
github.com/santhosh-tekuri/jsonschema/v5 v5.3.1 new
github.com/siderolabs/talos/pkg/machinery 6f7c3a8e5c63 -> v1.8.0

Previous release can be found at v0.42.0

Omni 0.42.0-beta.0 (2024-09-06)

Welcome to the v0.42.0-beta.0 release of Omni! This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Allow multiple IP's in `siderolink-wireguard-advertised-addr` flag

The siderolink-wireguard-advertised-addr flag now accepts multiple IP addresses separated by commas. This is useful when you have multiple IPs (IPv4 and IPv6) on the host machine and want to allow Talos nodes to connect to the Omni using any of them.

Audit log

It is now possible to get the audit log from the Omni. By default it's disabled. To enable, pass --audit-log-dir <dir> to the Omni. The audit log will be written to the specified directory, separated by day.

Retention is set to 30 days (including the current day). The audit log is written in JSON format, where each entry is a JSON object.

There are two ways to get audit log, and for both you need Admin role:

By using the UI: Simply click "Download audit log" in the main menu.
Using omnictl audit-log command. This command will stream the audit log from the Omni to the local machine stdout.

Cluster Sort

Cluster list on Clusters page can now be sorted by name or creation date. Before it was always sorted by creation date (newest first).

TLS Cert Reload

Omni service can now reload the TLS certs without restart.

Contributors

Dmitriy Matrenichev
Artem Chernyshev
Andrey Smirnov
Utku Ozdemir
Noel Georgi
Justin Garrison

Changes

27 commits

c076c3c fix: filter readonly, CD and loop devices for 1.8
0360422 feat: support passing extra data through the siderolink join token
381021e fix: calculate requested and connected machines in the ClusterStatus
7abb0f5 chore: bump deps
464f699 chore: rename CloudProvider to InfraProvider
bfe036e chore: allow to specify start and end time for audit-log
e2f5795 chore: allow multiple IP's for siderolink-wireguard-advertised-addr flag
3c1defe fix: fix spelling for hover text
76ba670 chore: allow users with admin role to download audit log from UI
e8d578a fix: add siderolink connection params to the infra provider interface
4a82cd0 chore: rewrite renamed extension names on Talos version updates
56c0394 fix: always remove finalizers from the ClusterMachineStatus
ce45042 feat: implement MachineRequestSets and support links cleanup flow
85aaf1c feat: support sorting cluster by name, creation time
95c8210 feat: implement base infra provider library
a32a6fa feat: reload TLS certs without restart
00ae084 fix: delete upgrade meta key from nodes after upgrades
3f5c0f8 chore: enable 'github.com/planetscale/vtprotobuf' encoding
34a8c36 chore: rekres to get BUSL license change date updated on releases
bf188e4 chore: implement audit log reader
5d48547 chore: use range-over-func iterators for resource iteration
dc349c1 chore: do a full generate with latest deps
67f2e8d chore: print error on closing secondary storage backing store
89e8a62 fix: pass the logger to machine logs circular buffer
d2387d9 fix: use a separate phase for the extensions installation
cbfe7c9 chore: add periodic cleanup of old log files
aea900f fix: display machines in tearing down state

Changes from siderolabs/discovery-service

1 commit

270f257 chore: bump deps

Changes from siderolabs/go-api-signature

2 commits

8807c5e fix: account for time truncation to a second resolution
1b35ea8 chore: bump deps and fix data race

Changes from siderolabs/go-debug

1 commit

c8f9b12 chore: add support for Go 1.23

Changes from siderolabs/go-talos-support

3 commits

58f4f0f chore: bump Go dependencies
f9d46fd fix: add dns-resolve-cache to the list of logs gathered
69891cf chore: remove containerd dependency

Changes from siderolabs/image-factory

9 commits

fe9134a release(v0.5.0): prepare release
7f09750 feat: update to Talos 1.8
b985abc fix: cache generated system extension image correctly
9687413 fix: set SOURCE_DATA_EPOCH
fef0833 chore: add in new helios64 overlay
03bd46f feat: support inclusion on well-known UEFI SecureBoot certs
608a6f0 chore: alias nvidia extensions to lts versions
8b4e0d9 chore: make metatadata pkg public
7a4de58 chore: build multi-arch image

Dependency Changes

github.com/auth0/go-jwt-middleware/v2 v2.2.1 -> v2.2.2
github.com/aws/aws-sdk-go-v2 v1.30.3 -> v1.30.4
github.com/aws/aws-sdk-go-v2/config v1.27.27 -> v1.27.31
github.com/aws/aws-sdk-go-v2/credentials v1.17.27 -> v1.17.30
github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.10 -> v1.17.16
github.com/aws/aws-sdk-go-v2/service/s3 v1.58.3 -> v1.61.0
github.com/aws/smithy-go v1.20.3 -> v1.20.4
github.com/containers/image/v5 v5.32.1 -> v5.32.2
github.com/cosi-project/runtime v0.5.5 -> v0.6.1
github.com/cosi-project/state-etcd v0.3.0 -> v0.3.1
github.com/fsnotify/fsnotify v1.7.0 new
github.com/grpc-ecosystem/grpc-gateway/v2 v2.21.0 -> v2.22.0
github.com/prometheus/client_golang v1.19.1 -> v1.20.2
github.com/prometheus/common v0.55.0 -> v0.57.0
github.com/siderolabs/discovery-service 74bca2da5cc8 -> v1.0.3
github.com/siderolabs/go-api-signature v0.3.4 -> v0.3.6
github.com/siderolabs/go-debug v0.3.0 -> v0.4.0
github.com/siderolabs/go-talos-support v0.1.0 -> v0.1.1
github.com/siderolabs/image-factory v0.4.2 -> v0.5.0
github.com/siderolabs/talos/pkg/machinery v1.8.0-alpha.1 -> 6f7c3a8e5c63
github.com/zitadel/oidc/v3 v3.27.0 -> v3.28.2
go.etcd.io/bbolt v1.3.10 -> v1.3.11
google.golang.org/grpc v1.65.0 -> v1.66.0
sigs.k8s.io/controller-runtime v0.18.5 -> v0.19.0

Previous release can be found at v0.41.0

Omni 0.41.0-beta.0 (2024-08-16)

Welcome to the v0.41.0-beta.0 release of Omni! This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Contributors

Artem Chernyshev
Andrey Smirnov
Dmitriy Matrenichev
Utku Ozdemir
Brant Gurganus

Changes

15 commits

1cb1080 feat: bump kube-service-exposer to v0.2.0
dd510e9 fix: properly cleanup tearing down exposed services
0bec3e4 chore: bump deps
6080c25 test: fix several flaky tests
99f9317 chore: implement audit log for several types
ee73083 fix: properly remove MachineSetNode finalizer in the controller
16b008b fix: increase LRU cache size for Talos and Kubernetes clients
36c7b10 fix: skip reconciling redacted machine config on no input changes
f0b44b1 fix: add gRPC read buffer pool for etcd client
b1fceea fix: properly handle ExposedService resource finalizers
5e35cbe fix: fix nil pointer dereference in workload proxy reconciler
4746652 docs: add a stringArray example for extensions
7536191 chore: implement labels extractor controller for more efficient code
7df58fe chore: add request label to the links created by the cloud provider
d194d59 feat: implement audit log

Dependency Changes

github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.8 -> v1.17.10
github.com/aws/aws-sdk-go-v2/service/s3 v1.58.2 -> v1.58.3
github.com/containers/image/v5 v5.31.1 -> v5.32.1
github.com/go-jose/go-jose/v4 v4.0.3 -> v4.0.4
github.com/google/go-containerregistry v0.20.1 -> v0.20.2
github.com/grpc-ecosystem/grpc-gateway/v2 v2.20.0 -> v2.21.0
github.com/johannesboyne/gofakes3 99de01ee122d -> edd0227ffc37
github.com/prometheus/common v0.55.0 new
github.com/zitadel/oidc/v3 v3.26.0 -> v3.27.0
go.etcd.io/etcd/client/pkg/v3 v3.5.14 -> v3.5.15
go.etcd.io/etcd/client/v3 v3.5.14 -> v3.5.15
go.etcd.io/etcd/server/v3 v3.5.14 -> v3.5.15
golang.org/x/crypto v0.25.0 -> v0.26.0
golang.org/x/net v0.27.0 -> v0.28.0
golang.org/x/sync v0.7.0 -> v0.8.0
golang.org/x/tools v0.22.0 -> v0.24.0
k8s.io/api v0.30.3 -> v0.31.0
k8s.io/apimachinery v0.30.3 -> v0.31.0
k8s.io/client-go v0.30.3 -> v0.31.0
sigs.k8s.io/controller-runtime v0.18.4 -> v0.18.5

Previous release can be found at v0.40.0

Omni 0.40.0-beta.0 (2024-07-26)

Welcome to the v0.40.0-beta.0 release of Omni! This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Support Bundle

Support downloading cluster support bundle from the UI.

Show Total Items

Display total number of clusters and machines on the corresponding pages. Also show some basic stats there: the number of clusters not ready and allocated/available machines.

Contributors

Artem Chernyshev
Andrey Smirnov
Dmitriy Matrenichev
Utku Ozdemir
Jubblin
Maxime Brunet
Sam
Spencer Smith

Changes

27 commits

8ef319c chore: bump kube-service-exposer version
743e67f chore: bump state-etcd module version
6759925 chore: deprecate Talos 1.3
5dd5259 chore: add rotating log for audit data
6f6e1a6 fix: do not allow deleting machine classes which are used anywhere
aeb9322 fix: preserve labels on the MachineClass when editing it in the UI
641328c feat: show machine/cluster stats and total counts
ad74f85 chore: bump deps
19a72be feat: add support bundle download button to cluster overview
d76f8bd test: enable Talemu tests
f67579f fix: properly update ClusterMachineIdentity resource
d8e804f fix: use proper finalizer chain in the MachineClassStatusController
67bcc75 feat: compute machineclass machine requirement (pressure)
23fb0c1 fix: make image pre pull failure block the kubernetes update
b8db949 chore: bump dependencies
e484bca fix: improve resource deletion reliability, fix support bundle tests
6f73f58 fix: properly display icons on Safari browser
276c3f4 fix: use proper check for the machine set teardown flow
4cfc0e6 chore: rework auth.* keys, add ctxstore package
76263e1 fix: do not rely on MachineStatus updates when checking maintenance
d271a8a fix: do not expect LB to be healthy when scaling down workers
085bc2e fix: add finalizer on MachineSetNode resource in the controller
cbfb898 fix: add missing return err in the maintenance config drop migration
a1a1d08 chore: bump deps
4369338 fix: update Talos machine config schema to v1.7
b93ac81 fix: provide cached access to the state via Omni API
7602fde fix: update compose to fix missing information

Changes from siderolabs/go-api-signature

1 commit

4bf0f02 fix: get rid of data race in the key sign interceptor

Changes from siderolabs/go-kubernetes

2 commits

ee8c6b8 fix: add one more removed feature gate for 1.31
37dd61f feat: add support for Kubernetes 1.31

Changes from siderolabs/grpc-proxy

5 commits

ec3b59c fix: address all gRPC deprecations
02f82db chore: rekres, bump deps
62b29be chore: rekres, update dependencies
2decdd1 chore: add no-op github workflow
77d7adc chore: bump deps

Changes from siderolabs/image-factory

4 commits

e5686e2 release(v0.4.2): prepare release
1a2b64a feat: add Rock4 SE board to the mix of supported boards
d07a780 fix: update wizard-versions.html
f73a61e fix: update misreported error

Dependency Changes

github.com/adrg/xdg v0.4.0 -> v0.5.0
github.com/aws/aws-sdk-go-v2 v1.30.0 -> v1.30.3
github.com/aws/aws-sdk-go-v2/config v1.27.21 -> v1.27.27
github.com/aws/aws-sdk-go-v2/credentials v1.17.21 -> v1.17.27
github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.1 -> v1.17.8
github.com/aws/aws-sdk-go-v2/service/s3 v1.56.1 -> v1.58.2
github.com/aws/smithy-go v1.20.2 -> v1.20.3
github.com/cosi-project/runtime v0.5.0 -> v0.5.5
github.com/cosi-project/state-etcd v0.2.9 -> v0.3.0
github.com/go-jose/go-jose/v4 v4.0.2 -> v4.0.3
github.com/google/go-containerregistry v0.19.2 -> v0.20.1
github.com/siderolabs/go-api-signature v0.3.3 -> v0.3.4
github.com/siderolabs/go-kubernetes v0.2.9 -> v0.2.11
github.com/siderolabs/grpc-proxy v0.4.0 -> v0.4.1
github.com/siderolabs/image-factory v0.4.1 -> v0.4.2
github.com/siderolabs/omni/client 000000000000 -> v0.39.1
github.com/siderolabs/talos/pkg/machinery 4feb94ca0997 -> v1.8.0-alpha.1
github.com/zitadel/oidc/v3 v3.25.1 -> v3.26.0
golang.org/x/crypto v0.24.0 -> v0.25.0
golang.org/x/net v0.26.0 -> v0.27.0
google.golang.org/grpc v1.64.0 -> v1.65.0
k8s.io/api v0.30.2 -> v0.30.3
k8s.io/client-go v0.30.2 -> v0.30.3

Previous release can be found at v0.39.0

Omni 0.40.0 (2024-07-26)

Welcome to the v0.40.0 release of Omni! This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Support Bundle

Support downloading cluster support bundle from the UI.

Show Total Items

Display total number of clusters and machines on the corresponding pages. Also show some basic stats there: the number of clusters not ready and allocated/available machines.

Contributors

Artem Chernyshev
Andrey Smirnov
Dmitriy Matrenichev
Utku Ozdemir
Jubblin
Maxime Brunet
Sam
Spencer Smith

Changes

27 commits

8ef319c chore: bump kube-service-exposer version
743e67f chore: bump state-etcd module version
6759925 chore: deprecate Talos 1.3
5dd5259 chore: add rotating log for audit data
6f6e1a6 fix: do not allow deleting machine classes which are used anywhere
aeb9322 fix: preserve labels on the MachineClass when editing it in the UI
641328c feat: show machine/cluster stats and total counts
ad74f85 chore: bump deps
19a72be feat: add support bundle download button to cluster overview
d76f8bd test: enable Talemu tests
f67579f fix: properly update ClusterMachineIdentity resource
d8e804f fix: use proper finalizer chain in the MachineClassStatusController
67bcc75 feat: compute machineclass machine requirement (pressure)
23fb0c1 fix: make image pre pull failure block the kubernetes update
b8db949 chore: bump dependencies
e484bca fix: improve resource deletion reliability, fix support bundle tests
6f73f58 fix: properly display icons on Safari browser
276c3f4 fix: use proper check for the machine set teardown flow
4cfc0e6 chore: rework auth.* keys, add ctxstore package
76263e1 fix: do not rely on MachineStatus updates when checking maintenance
d271a8a fix: do not expect LB to be healthy when scaling down workers
085bc2e fix: add finalizer on MachineSetNode resource in the controller
cbfb898 fix: add missing return err in the maintenance config drop migration
a1a1d08 chore: bump deps
4369338 fix: update Talos machine config schema to v1.7
b93ac81 fix: provide cached access to the state via Omni API
7602fde fix: update compose to fix missing information

Changes from siderolabs/go-api-signature

1 commit

4bf0f02 fix: get rid of data race in the key sign interceptor

Changes from siderolabs/go-kubernetes

2 commits

ee8c6b8 fix: add one more removed feature gate for 1.31
37dd61f feat: add support for Kubernetes 1.31

Changes from siderolabs/grpc-proxy

5 commits

ec3b59c fix: address all gRPC deprecations
02f82db chore: rekres, bump deps
62b29be chore: rekres, update dependencies
2decdd1 chore: add no-op github workflow
77d7adc chore: bump deps

Changes from siderolabs/image-factory

4 commits

e5686e2 release(v0.4.2): prepare release
1a2b64a feat: add Rock4 SE board to the mix of supported boards
d07a780 fix: update wizard-versions.html
f73a61e fix: update misreported error

Dependency Changes

github.com/adrg/xdg v0.4.0 -> v0.5.0
github.com/aws/aws-sdk-go-v2 v1.30.0 -> v1.30.3
github.com/aws/aws-sdk-go-v2/config v1.27.21 -> v1.27.27
github.com/aws/aws-sdk-go-v2/credentials v1.17.21 -> v1.17.27
github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.1 -> v1.17.8
github.com/aws/aws-sdk-go-v2/service/s3 v1.56.1 -> v1.58.2
github.com/aws/smithy-go v1.20.2 -> v1.20.3
github.com/cosi-project/runtime v0.5.0 -> v0.5.5
github.com/cosi-project/state-etcd v0.2.9 -> v0.3.0
github.com/go-jose/go-jose/v4 v4.0.2 -> v4.0.3
github.com/google/go-containerregistry v0.19.2 -> v0.20.1
github.com/siderolabs/go-api-signature v0.3.3 -> v0.3.4
github.com/siderolabs/go-kubernetes v0.2.9 -> v0.2.11
github.com/siderolabs/grpc-proxy v0.4.0 -> v0.4.1
github.com/siderolabs/image-factory v0.4.1 -> v0.4.2
github.com/siderolabs/omni/client 000000000000 -> v0.39.1
github.com/siderolabs/talos/pkg/machinery 4feb94ca0997 -> v1.8.0-alpha.1
github.com/zitadel/oidc/v3 v3.25.1 -> v3.26.0
golang.org/x/crypto v0.24.0 -> v0.25.0
golang.org/x/net v0.26.0 -> v0.27.0
google.golang.org/grpc v1.64.0 -> v1.65.0
k8s.io/api v0.30.2 -> v0.30.3
k8s.io/client-go v0.30.2 -> v0.30.3

Previous release can be found at v0.39.0

Omni 0.39.0-beta.0 (2024-07-04)

Welcome to the v0.39.0-beta.0 release of Omni! This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Equinix Metal

Equinix metal is now available as a download/PXE option in the UI/CLI.

Exposed Services Reliability

Exposed services proxy now provides more reliable connection to the underlying services for slower networks in the cluster. Also if some nodes are down the proxy will evict them from the routing.

Insecure Node Access

It is now possible to access nodes running in maintenance mode using talosctl. Omni account wide talosconfig and at least Operator user role is required for that. No --insecure flag should be set.

Maintenance Talos Updates

Machine's Talos version can now be updated without adding the machine to a cluster. Either talosctl upgrade -n <uuid> or the UI (Machines page) can be used for that.

Contributors

David Anderson
Artem Chernyshev
Brad Fitzpatrick
Utku Ozdemir
Andrey Smirnov
Dmitriy Matrenichev
AdamEr8
Andrey Smirnov
Andrey Smirnov
Dominic Evans
Khionu Sybiern
Nathan Johnson
Ryan Cox
Vincent Batts
ignoramous

Changes

28 commits

116ae97 release(v0.39.0-beta.0): prepare release
26a61be fix: add resource caches for missing resource types
5d953e4 fix: do not re-create peer on the remote addr change
08717d9 fix: get rid of config patches for the maintenance configs
b910c20 chore: add resource throughput metrics
9671551 fix: use proper permissions for cluster taint resource
09a8b36 fix: enable etcd client keep-alives by default
5e46841 chore: add go.work file
3810ccb fix: properly clean up stale Talos gRPC backends
80d9277 feat: bump service exposer version to 1.1.3
20b08ea fix: allow changing machine set node mgmt mode if it has no nodes
c9b8b3f feat: add Equinix metal option in the download installation media
5460134 chore: bump dependencies
cd8bac4 feat: read real IP from the provision API gRPC requests
b47acf2 feat: support insecure access to the nodes running in maintenance
2f05ab0 feat: show N/∞ in the machine set if unlim allocation policy is used
dc7c2b3 fix: detect the old vs. new URL format correctly on workload proxying
e9bca13 feat: use tcp loadbalancer for exposed services
17f7168 chore: bump COSI runtime version, use its task runner
85424da fix: do better handling of small screens
8b16da3 fix: use proper z-index for the tooltip component
92afd42 chore: replace append with slices pkg functions
ccc9d22 chore: update runtime and go-api-signature modules
551286e chore: bump go to 1.22.4, rekres
271bb70 chore: migrate to oidc v3
6dcfd4c feat: handle all goroutine panics gracefully
c565666 feat: provide cleaner UI for the machine sets/machines lists
e69df41 fix: redo EtcdManualBackupShouldBeCreated

Changes from siderolabs/go-api-signature

1 commit

782aac0 chore: bump deps

Changes from siderolabs/go-loadbalancer

1 commit

0639758 chore: bump deps

Changes from siderolabs/siderolink

1 commit

e76747b chore: migrate to rtnetlink/2

Changes from siderolabs/tcpproxy

70 commits

3d4e7b8 chore: rename to siderolabs/tcpproxy
6f85d8e Implement correct half-close sequence for the connections.
8bea9a4 Add support for TCP_USER_TIMEOUT setting
91f8614 remove old ACME tls-sni-01 stuff that LetsEncrypt removed March 2019
74ca1dc add Proxy.AddSNIRouteFunc to do lookups by SNI dynamically
4e04b92 gofmt for Go 1.19
be3ee21 (doc): s/tlsproxy/tcpproxy
2e577fe Modified TestProxyPROXYOut to conform with the fixed version of PROXY protocol header format
0f9bced Fixed HAProxy's PROXY protocol v1 Human-readable header format in DialProxy
2825d76 fix(test): update travis and e2e selfSignedCert fn
b6bb9b5 Update import path to inet.af/tcpproxy
dfa16c6 tlsrouter/README: fix the go get url
f5c09fb Take advantage of Go 1.11's splice support, unwrap Conns in DialProxy.HandleConn
7f81f77 Work around deadlock with Go tip (at Go rev f3f7bd5)
7efa37f Quiet log spam in test.
dbc1514 Adding the HostName field to the Conn struct (#18)
2b928d9 Link to docs
de1c7de Add support for arbitrary matching against HTTP and SNI hostnames.
c6a0996 Support configurable routing of ACME tls-sni-01 challenges.
815c942 Merge matcher and route into an interface that yields a Target.
2065af4 Support HAProxy's PROXY protocol v1 in DialProxy.
e030359 Fix golint nits by adding docstrings and simplifying execution flow.
6d97c2a Correct the package building command, and only deploy for master branch commits.
aa12504 Another attempt to fix Travis.
f6af481 Make Travis test all packages, and remove the go.universe.tf import path.
d7e343e Fix the godoc link to point to google/tcpproxy.
bef9f6a Merge bradfitz's tcpproxy codebase with the software formerly known as tlsrouter.
d86e96a Move tlsrouter's readme to the command's directory.
9e73877 Switch license to Apache2, add Google copyright headers.
cbf137d Correct the travis build to kinda work.
3eb49e9 Move tlsrouter to cmd/tlsrouter, in preparation for rewrite as a pkg.
af97cdd Fix copy/paste-o in doc example.
3273f40 Add vendor warning
e387889 Add TargetListener
2eb0155 Start of tcpproxy. No Listener or reverse dialing yet.
c58b44c Make golint fail if lint errors are found, and fix said lint.
4621df9 Clean up the Travis build a bit more, moving more stuff to the deploy stage.
96cc76f Test Travis's new build stage support.
bbbede8 Make travis fetch the test-only dependency.
4b8641f Add support for HAProxy's PROXY protocol.
d23eadc Upload packages based on Go 1.8, not 1.7.
7ef32e3 Add Go 1.8 to the build matrix.
e07ecec typo
aa3f9c9 Remove debug print in acme code.
6664640 Stop testing against Go 1.6.
728b8bc Add ACME routing support.
a5c2ccd Use nogroup as the group, not nobody.
a94dbd1 Port extra error checking over from netboot.
3cd4412 Clean up travis config a bit, and add missing copyright notice.
aded796 Add a deploy step to garbage-collect old packagecloud files.
3e6354c Random change to force travis rebuild on latest code.
77fa998 Attempt to create a package with no version name.
bfef4ba Revert to just debian/jessie. It's the same package anyway.
173db90 Try the obvious way to specify a matrix of package tags.
ea58780 Limit the deploy to only the go 1.7 build.
a2d0c96 Skip cleanup so travis doesn't delete the freshly built .deb.
73ee2e7 Attempt a packagecloud push.
cbd4ea6 Attempt to build a debian package with FPM.
4f5b46f Add a systemd unit file to run tlsrouter.
8cc8cac Document -hello-timeout in README.
e0a0158 Add slowloris protection, in the form of a ClientHello timeout.
09cc4bb Remove support for SSL 3.0.
c41a68d Add tests for hostname matching, and make DNS matches match entire string.
6546db4 Fix vet errors in Go 1.6.
e34c2a6 Add more words to README.
b321571 Add godoc comments to appease golint.
55ba69d Add a Travis CI config.
b8a3ed8 Add DNS name support to config
0a0a9f6 Add licensing and contributing information for release.
b1edd90 Initial commit.

Dependency Changes

filippo.io/age 6ad4560f4afc -> v1.2.0
github.com/aws/aws-sdk-go-v2 v1.27.0 -> v1.30.0
github.com/aws/aws-sdk-go-v2/config v1.27.16 -> v1.27.21
github.com/aws/aws-sdk-go-v2/credentials v1.17.16 -> v1.17.21
github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.16.21 -> v1.17.1
github.com/aws/aws-sdk-go-v2/service/s3 v1.54.3 -> v1.56.1
github.com/containers/image/v5 v5.31.0 -> v5.31.1
github.com/cosi-project/runtime v0.4.6 -> v0.5.0
github.com/go-jose/go-jose/v4 v4.0.2 new
github.com/google/go-containerregistry v0.19.1 -> v0.19.2
github.com/siderolabs/go-api-signature v0.3.2 -> v0.3.3
github.com/siderolabs/go-loadbalancer v0.3.3 -> v0.3.4
github.com/siderolabs/siderolink v0.3.8 -> v0.3.9
github.com/siderolabs/tcpproxy v0.1.0 new
github.com/spf13/cobra v1.8.0 -> v1.8.1
github.com/zitadel/oidc/v3 v3.25.1 new
golang.org/x/crypto v0.23.0 -> v0.24.0
golang.org/x/net v0.25.0 -> v0.26.0
golang.org/x/tools v0.21.0 -> v0.22.0
google.golang.org/protobuf v1.34.1 -> v1.34.2
k8s.io/api v0.30.1 -> v0.30.2
k8s.io/client-go v0.30.1 -> v0.30.2
k8s.io/klog/v2 v2.120.1 -> v2.130.1
sigs.k8s.io/controller-runtime v0.18.3 -> v0.18.4

Previous release can be found at v0.38.0

Omni 0.38.0-beta.0 (2024-06-18)

Welcome to the v0.38.0-beta.0 release of Omni! This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Break-Glass Configs

Omni now allows getting raw Talos and Kubernetes configs that can allow bypassing Omni when accessing the cluster.

It has a couple of limitations:

It is available only if is enabled for the account.
Only os:operator role Talosconfig level is available.
The cluster will be marked as tainted for the time being, which doesn't affect anything, but is the signal that Omni no longer fully controls secrets rotation.

Exposed Services DNS Name

Exposed services now use new naming schema, so it shouldn't be affected by slow DNS updates.

The domain name patter is now: <hash>-<account>.proxy-us.siderolabs.io.

Kubeconfig Authcode-Keyboard

It is now possible to generate kubeconfig with --grant-type=authcode-keyboard and Omni supports that mode. This mode will print a URL and ask for a one time code instead of starting a local HTTP server on port 8000. Clicking the URL will open the same Omni page as usual, but will present you the one time code instead of doing redirect.

This mode is useful for remote machine kubectl execution and removes the need to set up ssh port-forwarding.

Machine Logs

Machine logs are now stored using new persitent circular buffer library, which has better write efficiency.

Pending Updates

Omni UI now shows pending config changes which are not applied due to locked machines in the cluster.

Contributors

Artem Chernyshev
Utku Ozdemir
Andrey Smirnov
Dmitriy Matrenichev
Andrey Smirnov
Grzegorz Rozniecki

Changes

30 commits

4109996 fix: make MachineSetNode controller select only connected machines
2457897 fix: use un-cached list in the MachineSetNodeController
73529c2 fix: display descriptions when show description checkbox is clicked
6a59d63 fix: generate schematics with the extensions, meta and kernel args
87a7750 chore: add Akamai installation media
fa64b46 fix: skip invalid machines in TalosUpgradeStatusController
22bb2cc fix: use proper types in the machine status and snapshot controllers
a2b7b53 feat: use the new domain scheme for exposed services
4ecb175 fix: handle panics in Omni and Talos UI watches
6286340 fix: properly delete the item from the cached items slice
63ad5bd feat: provide a way to getadmin talosconfig and kubeconfig
fa21349 fix: properly generate maintenance config patches
2e64c31 fix: ignore not found ClusterMachine in the migrations
a2c3802 fix: validate user email on creation
73d0d3b fix: properly detect authcode-keyboard oidc mode
b7a0620 feat: use circular buffer's new persistence option for machine logs
7eec6b9 chore: bump COSI runtime to 0.4.5
4d23186 feat: show pending config updates due to locked machine
f98cf51 fix: ignore not found in the MachineStatus and MachineStatusSnapshot
ce6e15a fix: proper time adjustment to fix flaky TestEtcdManualBackup
27491ea chore: upgrade github.com/containers/image to v5
3f75f91 fix: change Transport.Address field to Transport.Address method
e12cfa8 feat: support authcode login in kubectl oidc-login
2fcd0fd fix: properly update the pulled images count if some images are skipped
5a4251c test: fix a data race in MachineStatusSnapshotController unit tests
0965091 test: fix flaky test in ClusterMachineConfigStatus unit tests
b7d48aa chore: small fixes
a6c8b47 fix: pass through the talosctl -n args if they cannot be resolved
3bab8bf chore: migrate to Vite and Bun to build the frontend
37c1a97 fix: use proper routing on the config patch view and edit pages

Changes from siderolabs/discovery-client

13 commits

ca662d2 feat: export default GRPC dial options for the client
7a767fa chore: bump Go, deps and rekres
f4095a1 chore: bump discovery API to v0.1.4
fbb1cea fix: keepalive interval calculation
ff8f4be fix: enable gRPC keepalives
9ba5f03 chore: app optional ControlPlane data
269a832 chore: rekres, update discovery api
a5c19c6 feat: provide public IP discovered from the server
230f317 fix: reconnect the client on update failure
ac5ab32 feat: support deleting an affiliate
27a5bee chore: rekres
a9a5e9b feat: initial client code
98eb999 chore: initial commit

Dependency Changes

github.com/containers/image/v5 v5.31.0 new
github.com/cosi-project/runtime 15e9d678159d -> v0.4.6
github.com/siderolabs/discovery-client v0.1.9 new

Previous release can be found at v0.37.0

Omni 0.37.0-beta.0 (2024-06-04)

Welcome to the v0.37.0-beta.0 release of Omni! This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Node Overview Page

Node overview page now displays more information about the node. That includes:

Machine stage.
Unmet health check conditions of the Talos MachineStatus.
CPU, memory and secure boot information.
The list of labels added to the machine.

Patches UI

The UI now has the page that shows config patches define for a machine. It includes both cluster level and account level machine patches.

Secureboot Support Added

Omni now fully supports secureboot enabled machines.

Service Events

Node overview page service list now displays information about each service events. If a service fails to start it will be possible to see why in the UI.

Contributors

Artem Chernyshev
Andrey Smirnov
Utku Ozdemir
Dmitriy Matrenichev
Christian Hüning
Mattias Cockburn
Petr Krutov

Changes

22 commits

800762d chore: rewrite MachineStatus to use QController
ed26122 fix: implement the controller for handling machine status snapshot
6aa2140 feat: display more data on the node overview page
5654a49 chore: add renovate.json
82abb2b chore: bump deps
c635827 test: do not use epoch millis in service account names
22e3acf chore: bump default Talos version to 1.7.4
a67d1fb fix: always generate siderolink connection config for all machines
9bce82a fix: ignore MachineStatus events timestamps as they're not reliable
ccca5b5 fix: bump siderolink module version
f38b7e5 feat: enable ALPN for machine API
48cc03a fix: retry affiliate deletes
55afa59 feat: add secure boot support
0bd2a42 docs: fix a typo in the on-prem installation link
247c165 fix: improve wording in authentication error messages
e2f8407 chore: run rekres
4a8ebbf chore: enable codecov and rekres
2f1ab0d feat: show service events on the node overview page
c68a836 fix: use proper name for fetching existing extension configuration
4b747f0 feat: add dedicated patch pages for machines and cluster machines
4bd0331 fix: get rid of duplicating label completion options
631f5c5 chore: always build frontend on BUILDPLATFORM

Changes from siderolabs/go-circular

3 commits

cbce5c3 feat: add persistence support
3c48c53 feat: implement extra compressed chunks
835f04c chore: rekres, update dependencies

Changes from siderolabs/go-tail

1 commit

7cb7294 fix: remove unexpected short read error

Changes from siderolabs/image-factory

10 commits

819432c release(v0.4.1): prepare release
4f3206b release(v0.4.0): prepare release
b0b6bff feat: implement wizard-like UI for the Image Factory
8ccd284 feat: allow key-based image verification as option
4643056 chore: rekres/update dependencies
116721a fix: workaround extension name inconsistencies
f5bc497 release(v0.3.3): prepare release
221b442 feat: support zstd compression
40a13c5 release(v0.3.2): prepare release
2fe6825 fix: generation of overlay installer images

Changes from siderolabs/siderolink

1 commit

3a587fc fix: do not ever skip updates which have remove flag

Dependency Changes

github.com/auth0/go-jwt-middleware/v2 v2.2.0 -> v2.2.1
github.com/aws/aws-sdk-go-v2 v1.26.1 -> v1.27.0
github.com/aws/aws-sdk-go-v2/config v1.27.10 -> v1.27.16
github.com/aws/aws-sdk-go-v2/credentials v1.17.10 -> v1.17.16
github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.15.8 -> v1.16.21
github.com/aws/aws-sdk-go-v2/service/s3 v1.47.6 -> v1.54.3
github.com/cosi-project/runtime v0.4.2 -> v0.4.3
github.com/emicklei/dot v1.6.1 -> v1.6.2
github.com/hashicorp/vault/api v1.10.0 -> v1.14.0
github.com/hashicorp/vault/api/auth/kubernetes v0.5.0 -> v0.7.0
github.com/johannesboyne/gofakes3 f005f5cc03aa -> 99de01ee122d
github.com/prometheus/client_golang v1.19.0 -> v1.19.1
github.com/siderolabs/go-circular v0.1.0 -> v0.2.0
github.com/siderolabs/go-tail v0.1.0 -> v0.1.1
github.com/siderolabs/image-factory v0.3.1 -> v0.4.1
github.com/siderolabs/siderolink v0.3.7 -> v0.3.8
github.com/siderolabs/talos/pkg/machinery v1.7.2 -> 4feb94ca0997
github.com/zitadel/logging v0.5.0 -> v0.6.0
go.etcd.io/bbolt v1.3.9 -> v1.3.10
go.etcd.io/etcd/client/pkg/v3 v3.5.13 -> v3.5.14
go.etcd.io/etcd/client/v3 v3.5.13 -> v3.5.14
go.etcd.io/etcd/server/v3 v3.5.13 -> v3.5.14
golang.org/x/tools v0.20.0 -> v0.21.0
google.golang.org/grpc v1.63.2 -> v1.64.0
k8s.io/api v0.30.0-rc.1 -> v0.30.1
k8s.io/apimachinery v0.30.0-rc.1 -> v0.30.1
k8s.io/client-go v0.30.0-rc.1 -> v0.30.1
sigs.k8s.io/controller-runtime v0.16.3 -> v0.18.3

Previous release can be found at v0.36.0

Omni 0.36.0-beta.0 (2024-05-20)

Welcome to the v0.36.0-beta.0 release of Omni! This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Machine And Cluster Labels Completion

The UI of search inputs was reworked. Now Omni suggests autocompletion for all existing machine and cluster labels. It also displays the labels as colored boxes in the input to better match with what's shown in the list.

Machine Set Scaling Parallelism

It is now possible to adjust worker machine sets scaling and update strategies in the UI.

`omnictl` Version Warnings

omnictl now warns that it has the different version from the backend.

Contributors

Artem Chernyshev
Dmitriy Matrenichev

Changes

13 commits

6501134 feat: implement labels completion for clusters and machines
f0b9240 fix: add the label when clicking outside of the input
859f04a feat: warn about using omnictl version different from the backend
5397c70 chore: bump siderolink to 0.3.7
15186b6 fix: machine class edit page
a330167 fix: use proper help string for omnictl download --talos-version flag
c1d38e6 fix: properly do rolling update on control plane nodes
a0d02ea fix: do not block machine config updates if loadbalancer is down
105fd8b fix: do not try to audit machine which no longer has MachineStatus
81f749f fix: do not fail schematic reconcile if initial talos version is empty
7bd922a feat: implement the UI for adjusting machine sets update strategies
0058c04 fix: get all attribute values from SAML ACS when adding user labels
7aabbb0 fix: make search work on NodeExtensions page

Changes from siderolabs/siderolink

2 commits

be00ff5 chore: redo event filtering as a sequence of iterators
a936b60 chore: handle peer events in batches

Dependency Changes

github.com/siderolabs/siderolink v0.3.5 -> v0.3.7
golang.org/x/crypto v0.22.0 -> v0.23.0
golang.org/x/net v0.24.0 -> v0.25.0
golang.org/x/sync v0.6.0 -> v0.7.0
golang.org/x/text v0.14.0 -> v0.15.0
golang.org/x/tools v0.19.0 -> v0.20.0
google.golang.org/grpc v1.62.2 -> v1.63.2
google.golang.org/protobuf v1.33.0 -> v1.34.1

Previous release can be found at v0.35.0

Omni 0.35.0-beta.0 (2024-05-08)

Welcome to the v0.35.0-beta.0 release of Omni! This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Auth With Username/Password

Omni now shows the error about unverified Auth0 emails.

Machine Extensions

It is now possible to see currently installed system extensions for each machine in the UI and change them there. It is also possible to configure machines' system extensions during cluster creation and scaling.

Also Talos upgrades from 1.5.x -> 1.6.x+ will make Omni automatically pick up kernel modules which are no longer included in Talos >= 1.6.x.

Machine Join Configs

Partial config for joining Talos nodes running in maintenance mode can now be downloaded from the Omni UI.

Machine Status

Talos machine status is now composed both from Talos events (push model). And from Talos node MachineStatus resource (pull model). This way even if the node gets disconnected from Omni for a long time, Omni won't lose any important events.

Settings UI

Admin settings UI (backups and users) is now unified under the single page with tabs.

Contributors

Artem Chernyshev
Utku Ozdemir
Andrey Smirnov
Simon-Boyer

Changes

22 commits

16108a9 feat: allow setting some url params for api endpoint
041a436 feat: unify admin settings under Settings page
987f8cd feat: improve auth flow when user email is not verified
5b8c130 feat: imlpement the UI for configuring extensions during cluster create
f6cd840 feat: implement the page that shows list of extensions per node
89fa1ad fix: make MachineSetNodeController handle machinesets without clusters
fa3c9ff feat: automatically pick up extensions when upgrading Talos
f40c552 chore: use new Auth0 app for CI
23d5532 fix: invert the order of recent clusters
baec123 fix: do not allow adding ISO, PXE nodes running different Talos version
264fb35 chore: bump go-kubernetes module
2c42f5c feat: add button to overview page to download partial machine config
95197e2 feat: improve reliability of machine status snapshots
ac4fcd8 fix: drop outdated SchematicConfigurationController finalizer
7953a49 fix: ignore unknown machine version on the cluster create page
fbe196e test: use Talos nodes with partial config in integration tests
4b50d7c test: fix flaky test by longer k8s node checks and retries
a32cb8a fix: start watch before delete in omnictl delete
40033da fix: remove MachineSetNodes after links removal
29667ef fix: make cluster machine install disk selector pick correct disk
18e41f8 fix: issue with etcd watch cancel
7f58ea4 fix: allow adding machines to Omni at higher speed

Changes from siderolabs/go-kubernetes

1 commit

ddd4c69 feat: add support for Kubernetes 1.30

Dependency Changes

github.com/aws/smithy-go v1.20.2 new
github.com/cosi-project/runtime v0.4.1 -> v0.4.2
github.com/cosi-project/state-etcd v0.2.8 -> v0.2.9
github.com/rs/xid v1.5.0 new
github.com/siderolabs/go-kubernetes v0.2.8 -> v0.2.9
go.etcd.io/etcd/client/pkg/v3 v3.5.12 -> v3.5.13
go.etcd.io/etcd/client/v3 v3.5.12 -> v3.5.13
go.etcd.io/etcd/server/v3 v3.5.12 -> v3.5.13

Previous release can be found at v0.34.0

Omni 0.34.0-beta.0 (2024-04-22)

Welcome to the v0.34.0-beta.0 release of Omni! This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Contributors

Andrey Smirnov
Andrey Smirnov
Artem Chernyshev
Utku Ozdemir
Noel Georgi
Andrew Rynhard
Andrey Smirnov
Artem Chernyshev
Mattias Cockburn
Dmitriy Matrenichev

Changes

15 commits

d79e863 test: get rid of upgrade test flakiness, fix cli tests
6fff261 fix: implement the correct upgrade flow from 1.6.x to 1.7.x for SBC
586d2d7 feat: generate overlay info by extracting board kernel args
4134d2c chore: use sops for secrets
f2b975b feat: read overlays from the machine, preserve them during updates
340d078 fix: use correct labels struct in the download installation media cmd
0d337c2 test: fix the flakiness in the resourcelogger test
23dcf32 feat: implement kubernetes node audit controller
e037975 chore: rekres & fix linting errors
8aa6a6a fix: properly select schematics for machine set and machine levels
09a7b12 fix: skip empty config patches in ClusterMachineConfigPatches
aa4d764 fix: always delete removed nodes from discovery service
7486bb8 feat: support generating installation media with overlays for Talos 1.7+
e580f14 test: fix assertion in maintenance config patch test
bb0618f release(v0.33.0-beta.0): prepare release

Changes from siderolabs/discovery-api

1 commit

e1dc7bb chore: rekres, update dependencies

Changes from siderolabs/discovery-client

13 commits

ca662d2 feat: export default GRPC dial options for the client
7a767fa chore: bump Go, deps and rekres
f4095a1 chore: bump discovery API to v0.1.4
fbb1cea fix: keepalive interval calculation
ff8f4be fix: enable gRPC keepalives
9ba5f03 chore: app optional ControlPlane data
269a832 chore: rekres, update discovery api
a5c19c6 feat: provide public IP discovered from the server
230f317 fix: reconnect the client on update failure
ac5ab32 feat: support deleting an affiliate
27a5bee chore: rekres
a9a5e9b feat: initial client code
98eb999 chore: initial commit

Changes from siderolabs/go-procfs

12 commits

9f72b22 feat: support removing kernel args
4b4a6ff chore: rekres
a062a4c chore: rekres, rename
8cbc42d feat: provide an option to overwrite some args in AppendAll
24d06a9 refactor: remove talos kernel default args
a82654e feat: implement SetAll method
16ce2ef fix: update cmdline.Set() to drop the value being overwritten
5a9a4a7 feat: update kernel args for new KSPP requirements
57c7311 refactor: change directory layout
a077c96 fix: fix go module name
698666f chore: move package to new repo
dabb425 Initial commit

Changes from siderolabs/image-factory

14 commits

db55c07 release(v0.3.1): prepare release
762cf2b fix: generation of SecureBoot ISO
ae1f0a3 fix: sort extensions in the UI schematic generator
c2de13f release(v0.3.0): prepare release
7062392 chore: update Talos dependency to 1.7.0-beta.0
78f8944 feat: add cert issuer regexp option
c0981e8 feat: add support for -insecure-schematic-service-repository flag
5d779bb chore: bump dependencies
93eb7de feat: support overlay
df3d211 release(v0.2.3): prepare release
4ccf0e5 fix: ignore missing DTB and other SBC artifacts
c7dba02 chore: run tailwindcss before creating image
81f2cb4 chore: bump dependencies, rekres
07095cd chore: re-enable govulncheck

Dependency Changes

github.com/aws/aws-sdk-go-v2 v1.24.1 -> v1.26.1
github.com/aws/aws-sdk-go-v2/config v1.26.4 -> v1.27.10
github.com/aws/aws-sdk-go-v2/credentials v1.16.15 -> v1.17.10
github.com/google/go-containerregistry v0.18.0 -> v0.19.1
github.com/prometheus/client_golang v1.18.0 -> v1.19.0
github.com/siderolabs/discovery-api v0.1.3 -> v0.1.4
github.com/siderolabs/discovery-client v0.1.9 new
github.com/siderolabs/go-procfs v0.1.2 new
github.com/siderolabs/image-factory v0.2.2 -> v0.3.1
github.com/siderolabs/talos/pkg/machinery v1.7.0-beta.0 -> 3dd1f4e88c22
golang.org/x/crypto v0.21.0 -> v0.22.0
golang.org/x/net v0.23.0 -> v0.24.0
google.golang.org/grpc v1.62.1 -> v1.62.2
k8s.io/api v0.29.2 -> v0.30.0-rc.1
k8s.io/apimachinery v0.29.2 -> v0.30.0-rc.1
k8s.io/client-go v0.29.2 -> v0.30.0-rc.1
k8s.io/klog/v2 v2.120.0 -> v2.120.1

Previous release can be found at v0.33.0

Omni 0.33.0-beta.0 (2024-04-12)

Welcome to the v0.33.0-beta.0 release of Omni! This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Extensions Support

It is now possible to change the list of installed extensions for the machines which are allocated into a cluster. It can be done using cluster templates. The extensions list can be defined for all machines of a cluster, machine set or for a particular machine. Extensions update is done the same way as Talos upgrades.

Machine Allocation Changes

From now on Omni doesn't allow adding machines to a cluster which has lower major or minor version of Talos. Which means that adding a machine to a cluster which will lead to downgrade of Talos version is no longer possible. It is done to avoid all kinds of weird issues which Talos downgrades might lead to.

Contributors

Artem Chernyshev
Dmitriy Matrenichev
Utku Ozdemir
Andrey Smirnov
Spencer Smith
Justin Garrison
Sherif Fanous

Changes

15 commits

592f916 feat: don't allow downgrades of the machines when adding to a cluster
2e015a9 chore: support Auth0 client playing nicely with other OAuth2/OIDC providers
de4c096 fix: ignore not existing cluster in MachineSet teardown flow
d3e3eef chore: support WG over GRPC in Omni
1cc5fb9 refactor: disable K8s stats for clusters with > 50 nodes
1b64824 fix: add missing region input on the backups storage config page
f70239c fix: ignore modules.dep virtual extension on schematic id calculation
1196863 feat: forbid *.acceptedCAs fields in config patches
4c179fa chore: bump Go to 1.22.2 and Talos machinery to v1.7.0-beta.0
b171daa fix: properly render download installation media page in Safari
7fb5d2b chore: add barebones compose file
9d35dfe chore: bump net library to v0.23.0
5dc2eaa fix: prevent link and clustermachine deletion from getting stuck
ae85293 docs: add screenshot and install link
2107c01 feat: support setting extensions list in the cluster template

Changes from siderolabs/crypto

2 commits

c240482 feat: provide dynamic client CA matching
2f4f911 feat: add PEMEncodedCertificate wrapper

Changes from siderolabs/siderolink

5 commits

5422b1c chore: quick fixes
9300968 feat: move actual logic into the agent package
8866351 chore: implement WireGuard over GRPC
7909156 chore: bump deps
eb221dd chore: bump deps

Dependency Changes

github.com/cenkalti/backoff/v4 v4.2.1 -> v4.3.0
github.com/cosi-project/runtime v0.4.0-alpha.9 -> v0.4.1
github.com/siderolabs/crypto v0.4.2 -> v0.4.4
github.com/siderolabs/siderolink v0.3.4 -> v0.3.5
github.com/siderolabs/talos/pkg/machinery v1.7.0-alpha.1 -> v1.7.0-beta.0
golang.org/x/crypto v0.19.0 -> v0.21.0
golang.org/x/net v0.21.0 -> v0.23.0
golang.org/x/tools v0.16.1 -> v0.19.0
golang.zx2c4.com/wireguard 12269c276173 new

Previous release can be found at v0.32.0

Omni 0.20.0 (2023-10-17)

Welcome to the v0.20.0 release of Omni!

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Kubeconfig Changes

Omni now generates Kubernetes configs without accessing Talos API.

Omni can now define SAML user roles depending on the SAML labels it gets from the SAML assertion. Role is assigned only once on user creation.

Contributors

Andrey Smirnov
Artem Chernyshev
Utku Ozdemir

Changes

19 commits

992614d4 chore: stop kubernetes status watchers for the offline cluster
79868c27 chore: optimize controller operations for disconnected machines
8c2c39d3 fix: do not run loadbalancer for the unreachable clusters
caf3d955 test: set unique names for config patches
f31373bd feat: implement kubeconfig generation on Omni side
681ffa3b feat: allow defining SAML label mapping rules to Omni roles
9d3f3b9e fix: rewrite the link counter handling
9becbc78 refactor: use COSI runtime with new controller runtime DB
22235517 fix: gracefully handle links removal in the siderolink manager
26ae4163 refactor: lower the level of log storage logs
01743ecd fix: rework the talos client and configuration generation
f837129a chore: bump Talos machinery to the latest main
4a79387e fix: update to Go 1.21.3
3df360b8 chore: log received interruption signals in Omni
0a72c596 chore: update state-etcd to v0.2.4
4f2978d2 test: override grpc call log level in authorization tests
e21e39a8 test: avoid excessive public key registration in integration tests
78c5fbdf ci: remove gh actions workflow
e9f07068 test: fix the assertion on cluster destroyed

Dependency Changes

github.com/cosi-project/runtime v0.3.11 -> v0.3.13
github.com/cosi-project/state-etcd v0.2.3 -> v0.2.4
github.com/hashicorp/golang-lru/v2 v2.0.7 new
github.com/siderolabs/talos/pkg/machinery c14a5d4f79a3 -> 7bb205ebe2ef
golang.org/x/crypto v0.13.0 -> v0.14.0
golang.org/x/net v0.15.0 -> v0.17.0
google.golang.org/grpc v1.58.2 -> v1.58.3

Previous release can be found at v0.19.0

Omni 0.16.0 (2023-08-18)

Welcome to the v0.16.0 release of Omni!

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Better Etcd Disaster Recovery

Omni now allows replacing control plane machines even if etcd is unhealthy. And stil properly handles safety checks, not allowing to break etcd quorum, allowing removing only unhealthy machines.

It also allows canceling machine destroy sequence if the machine destroyed is not being torn down by the machine set controller.

Machine Locking

Cluster templates now also support machine locking:

kind: Machine
name: 430d882a-51a8-48b3-ab00-d4b5b0b5b0b0
locked: true

Limit Workload Access

Workload proxy now takes into account the access to the cluster when allowing users to open the service endpoints.

Contributors

Utku Ozdemir
Artem Chernyshev
Dmitriy Matrenichev

Changes

18 commits

3d1c19a1 feat: allow replacing control plane machines if it doesn't break etcd
12561b5b fix: don't allow changing disk for the nodes that have Talos installed
8e17f742 feat: allow canceling deletion of a machine set node
1d8722aa chore: use 1.5.0 Talos in tests and enable disk encryption feature
3318a443 feat: show invalid-state label if the machine is reachable but apid is not
05f69c0d feat: enable workload proxying by default
dded4d81 fix: check for roles and ACLs on exposed service access
d718f134 chore: run auth tests in main integration test pipeline
79516583 chore: remove toInputWeak and add mutex.Empty
6b2e09b7 chore: bump Go to 1.21
a5f4a9a4 chore: cleanup ConfigPatch resources along with their owners
a48efd7a feat: add support for machine locking in cluster templates
964eb23d feat: block os:admin access to Talos API from workload clusters
65bb6403 refactor: simplify cleanup of exposed services
ede70550 fix: destroy exposedservices when cluster is destroyed
ddfd7657 fix: fix workload svc proxy feature visibility on frontend
ead58143 chore: update vault in docker-compose
653824ca chore: set default Talos version to v1.4.7

Dependency Changes

github.com/emicklei/dot v1.5.0 -> v1.6.0
github.com/siderolabs/talos/pkg/machinery 80238a05a6f8 -> v1.5.0-beta.1
go.uber.org/zap v1.24.0 -> v1.25.0
golang.org/x/net v0.12.0 -> v0.14.0
golang.org/x/text v0.11.0 -> v0.12.0
golang.org/x/tools v0.11.0 -> v0.12.0

Previous release can be found at v0.15.0

Omni 0.11.0-alpha.0 (2023-06-08)

Welcome to the v0.11.0-alpha.0 release of Omni! This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Support Full ACL Syntax

ACL now supports configuring additive perimissions to the base role, which includes:

accessing the clusters - read-only, write access, separate Talos API access
read-only access to machines
write access to machines

SAML support

Omni now supports SAML authentication. SAML authentication is enabled by the following cmd line flags:

--auth-saml-enabled
--auth-saml-url <idp-url>
--auth-saml-metadata <idp-metadata>
--auth-saml-label-rules '{"Role": "role"}'

Omni metadata endpoint is /saml/metadata.

The users are automatically created on the first SAML login. The first created user has Admin permissions, other have no permissions. Permissions can be managed by ACLs or Admin can change user roles.

Replace User Scopes with Roles

User management is now simplified. Instead of having scopes like cluster:read, cluster:write, etc, the user is assigned one of 4 roles: None, Reader, Operator, Admin.

None - gives no permissions.
Reader - gives readonly permissions.
Operator - allows managing clusters, machines, getting talosconfig, but doesn't allow editing users.
Amdin - all permissions.

Fine grained access can still be managed by ACLs.

Contributors

Utku Ozdemir
Artem Chernyshev
Andrey Smirnov

Changes

10 commits

c7c93a1e fix: let the empty endpoints be recorded if there are no endpoints
c28907e4 feat: copy SAML attributes to Identity as labels
a2f17a21 feat: implement full ACL syntax
c0fa5d46 feat: add support for SAML authentication
ad783798 fix: replace exponential-backoff library with own implementation
c8d7183a feat: replace scopes with simplified roles
08a048a9 feat: update default Talos to 1.4.5, Kubernetes to 1.27.2
5278321b fix: respect service account key env on omnictl download
caac445d fix: don't show OngoingTasks until the UI is authorized
dfca66df fix: include node name in the cluster node search

Changes from siderolabs/go-api-signature

1 commit

a034e9f feat: replace scopes with roles

Dependency Changes

github.com/crewjam/saml v0.4.13 new
github.com/siderolabs/go-api-signature v0.2.4 -> a034e9ff315b
github.com/siderolabs/talos/pkg/machinery v1.4.4 -> v1.4.5

Previous release can be found at v0.10.0

Omni 0.1.0-beta.2 (2022-12-20)

Welcome to the v0.1.0-beta.2 release of Omni! This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Contributors

Andrey Smirnov
Artem Chernyshev

Changes

5 commits

59df55f fix: bring K8s info back to life on the node overview page
2f54f91 chore: run etcd elections ("lock") to prevent concurrent Omni runs
8beb051 chore: update COSI to v0.3.0-alpha.2
f14e358 fix: better errors in talosctl via Omni
f12a216 fix: properly reset flush timeout in the Talos logs viewer

Dependency Changes

github.com/cosi-project/runtime v0.3.0-alpha.1 -> v0.3.0-alpha.2

Previous release can be found at v0.1.0-beta.1

Omni 0.1.0-beta.1 (2022-12-16)

Welcome to the v0.1.0-beta.1 release of Omni! This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Contributors

Andrey Smirnov
Andrey Smirnov
Utku Ozdemir
Alexey Palazhchenko
Artem Chernyshev
Dmitriy Matrenichev
Andrew Rynhard
Artem Chernyshev
Noel Georgi
Serge Logvinov

Changes

20 commits

9a7a9a0 feat: add RedactedClusterMachineConfig resource
c83cfe2 feat: rework the cluster list view and cluster overview pages
f65ce14 fix: ignore keys if the auth is disabled
e9c3831 fix: create config patch if it does not exist
437d271 fix: support Kubernetes proxy OIDC flow when auth is disabled
a47c211 fix: read cluster reference from MachineStatus spec
8091f16 fix: set owner on MachineStatus migration
e986e20 fix: wrong yaml module version (should be v3)
dbb3d48 fix: rollback etcd auto compaction retention
047b89f refactor: move machine status labels into spec
f990aea feat: do not allow setting config patch fields which are owned by Omni
7d9258f fix: fix incorrect yaml multiline string decoding in ClusterMachineSpec
0b5b095 fix: prevent etcd audit from removing valid members
82fe21b fix: label generated patches with system-patch label
4c2ce26 fix: enhance watch to accept a single Ref value
ef78843 feat: implement Machine level config patch editor
8144d44 fix: encode image download URL when signing & slugify file names
75ea9e6 refactor: rewrite generic ClusterMachineStatusController
5dba725 feat: add ability to download admin talosconfig in debug mode
5baa939 refactor: kubernetes.Runtime to cache clients and configs

Changes from siderolabs/crypto

28 commits

c03ff58 feat: add a way to represent redacted x509 private keys
c3225ee feat: allow CSR template subject field to be overridden
8570669 chore: rename to siderolabs/crypto
e9df1b8 feat: add support for generating keys from RSA-SHA256 CAs
510b0d2 chore: add json tags
6fa2d93 fix: deepcopy nil fields as nil
9a63cba fix: add back support for generating ECDSA keys with P-256 and SHA512
893bc66 fix: use SHA256 for ECDSA-P256
deec8d4 chore: implement DeepCopy methods for PEMEncoded* types
d3cb772 feat: make possible to change KeyUsage
6bc5bb5 chore: remove unused argument
cd18ef6 feat: add support for several organizations
97c888b chore: add options to CSR
7776057 chore: fix typos
80df078 chore: remove named result parameters
15bdd28 chore: minor updates
4f80b97 fix: verify CSR signature before issuing a certificate
39584f1 feat: support for key/certificate types RSA, Ed25519, ECDSA
cf75519 fix: function NewKeyPair should create certificate with proper subject
751c95a feat: add 'PEMEncodedKey' which allows to transport keys in YAML
562c3b6 feat: add support for public RSA key in RSAKey
bda0e9c feat: enable more conversions between encoded and raw versions
e0dd56a feat: add NotBefore option for x509 cert creation
12a4897 feat: add support for SPKI fingerprint generation and matching
d0c3eef fix: implement NewKeyPair
196679e feat: move pkg/grpc/tls from github.com/talos-systems/talos as ./tls
1ff6242 chore: initial version as imported from talos-systems/talos
835063e chore: initial commit

Changes from siderolabs/gen

1 commit

8e89b1e feat: add GetOrCreate and GetOrCall methods

Dependency Changes

github.com/cosi-project/runtime v0.2.0 -> v0.3.0-alpha.1
github.com/grpc-ecosystem/grpc-gateway/v2 v2.13.0 -> v2.14.0
github.com/siderolabs/crypto c03ff58af505 new
github.com/siderolabs/gen v0.4.1 -> v0.4.2
github.com/siderolabs/talos/pkg/machinery v1.3.0-beta.0 -> 873bd3807c0f
go.uber.org/zap v1.23.0 -> v1.24.0
golang.org/x/net v0.2.0 -> v0.4.0
golang.org/x/text v0.4.0 -> v0.5.0

Previous release can be found at v0.1.0-beta.0

Omni 0.1.0-beta.0 (2022-12-02)

Welcome to the v0.1.0-beta.0 release of Omni! This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Contributors

Artem Chernyshev
Andrey Smirnov
Artem Chernyshev
Dmitriy Matrenichev
Utku Ozdemir
Philipp Sauter
evgeniybryzh
Noel Georgi
Andrew Rynhard
Tim Jones
Andrew Rynhard
Gerard de Leeuw
Steve Francis
Volodymyr Mazurets

Changes

405 commits

e096c88 chore: add resource operation metrics
741e820 feat: implement config patch creation UI
5def267 fix: attempt to clean up docker container better
876ff5e feat: update COSI and state-etcd to 0.2.0
3df410d test: refactor and update config patch integration tests
5eea9e5 feat: add TLS support to siderolink API
36394ea refactor: simplify the resource leak fix
e5b962b chore: update dev environment
39bf206 fix: save user picture and fullname in the local storage
f1611c1 feat: add machine level config patch support
f2e6cf5 fix: remove several resource/goroutine leaks
fc37af3 feat: allow destroying config patches in the UI
3154d59 fix: respect SIDEROLINK_DEV_JOIN_TOKEN only in debug mode
38f5380 feat: avoid deleting all resources on omnictl delete
28666bc chore: add support for local development using compose
cad73ce chore: increase TestEtcdAudit timeout and fix incorrect Assert() calls.
7199b75 chore: during config merge create config if there was none
dab54d1 chore: increase TestTalosBackendRoles reliability
997cd78 feat: add reconfiguring phase to machinesetstatus
81fb2b9 fix: fix button order and vue config
252fb29 refactor: simplify backend.Server.Run method
f335c2f refactor: split watch to Watch and WatchFunc, add unit tests
35a7919 feat: track machine config apply status
1c54710 fix: use rolling update strategy on control planes
17ccdc2 refactor: various logging fixes
3c9ca9c fix: update node overview Kubernetes node watch to make it compatible
e8c2063 fix: enable edit config patches button on the cluster overview page
6e80521 fix: reset the item list after the watch gets reconnected
620d197 chore: remove AddContext method from runtime.Runtime interface
8972ade chore: update default version of Talos to v1.2.7
6a2dde8 fix: update the config patch rollout strategy
fb3f6a3 fix: skip updating config status if applying config caused a reboot
8776146 fix: apply finalizer to the Machine only when CMS is created
134bb20 test: fix config patch test with reboot
d3b6b5a feat: implement config patch viewer and editor
149efe1 chore: bump runtime and state-etcd modules
c345b83 chore: output omnictl auth log to stderr
39b2ba2 refactor: introduce ClusterEndpoint resource
6998ff0 fix: treat created and updated events same
289fe88 feat: add omnictl apply
2f1be3b chore: fix TestGenerateJoinToken test
3829176 fix: don't close config patch editor window if config validation fails
c96f504 feat: add suspended mode
b967bcf feat: add last config apply error to clustermachineconfigstatus
0395d9d test: increase key generation timeout on storage signing test
577eba4 fix: set SideroLink MTU to 1280
0f32172 fix: minor things in frontend
9abcc7b test: add config patching integration tests
99531fb refactor: drop unneeded controller inputs
5172354 chore: add omnictl to the generated image
738cf64 fix: set cluster machine version in machine config status correctly
1d0d220 fix: lower ttl of the issued keys on the FE side by 10 minutes
2889524 feat: dynamic title
3d17bd7 chore: fix release CI run
f2c752f fix: properly proxy watch requests through dev-server
9a74897 release(v0.1.0-alpha.1): prepare release
8b284f3 feat: implement Kubernetes API OIDC proxy and OIDC server
adad8d0 refactor: rework LoadBalancerConfig/LoadBalancerStatus resources
08e2cb4 feat: support editing config patches on cluster and machine set levels
e2197c8 test: e2e testing improvements
ec9051f fix: config patching
e2a1d6c fix: send logs in JSON format by default
954dd70 chore: replace talos-systems depedencies with siderolabs
acf94db chore: add payload logger
838c716 fix: allow time skew on validating the public keys
dd481d6 fix: refactor runGRPCProxy in router tests to catch listener errors
e68d010 chore: small fixes
ad86875 feat: minor adjustments on the cluster create page
e61f194 chore: implement debug handlers with controller dependency graphs
cbbf901 refactor: use generic TransformController more
33f9f2c chore: remove reflect from runtime package
6586963 feat: add scopes to users, rework authz & add integration tests
bb355f5 fix: reload the page to init the UI Authenticator on signature fails
c90cd48 chore: log auth context
d278780 fix: update Clusters page UI
5e77607 tests: abort on first failure
4c55980 chore: get full method name from the service
2194f43 feat: redesign cluster list view
40b3f23 chore: enable gRPC request duration histogram
0235bb9 refactor: make sure Talos/Kubernetes versions are defined once
dd6154a chore: add public key pruning
68908ba fix: bring back UpgradeInfo API
f1bc692 refactor: drop dependency on Talos Go module
0e3ef43 feat: implement talosctl access via Omni
2b0014f fix: provide a way to switch the user on the authenticate page
e295d7e chore: refactor all controller tests to use assertResource function
8251dfb refactor: extract PGP client key handling
02da9ee refactor: use extracted go-api-signature library
4bc3db4 fix: drop not working upgrade k8s functional
17ca75e feat: add 404 page
8dcde2a feat: implement logout flow in the frontend
ba766b9 fix: make omnictl correctly re-auth on invalid key
fd16f87 fix: don't set timeout on watch gRPC requests
8dc3cc6 fix: don't use omni in external names
2513661 fix: reset Error field of the MachineSetStatus
b611e99 fix: properly handle Forbidden errors on the authentication page
8525502 fix: stop runners properly and clean up StatusMachineSnapshot
ab0190d feat: implement scopes and enforce authorization
9198d96 feat: sign gRPC requests on the frontend to enable Authentication flow
bdd8f21 chore: remove reset button and fix padding
362db57 fix: gRPC verifier should verify against original JSON payload
30186b8 fix: omnictl ignoring omniconfig argument
e8ab0ba fix: do not attempt to execute failed integration test again
9fda25e chore: add more info on errors to different controllers
ccda526 chore: bump grpc version
b1ac125 chore: emit log when we got machine status event.
005d257 chore: set admin role specifically for Reboot request.
27f0e30 chore: update deps
77f0219 test: more unit-tests for auth components
0bf6ddf fix: pass through HTTP request if auth is disabled
4f3a67b fix: unit-tests for auth package and fixes
e3390cb chore: rename arges-theila to omni
14d2614 chore: allow slashes in secretPath
e423edc fix: add unit-tests for auth message and fix issues
b5cfa1a feat: add vault client
b47791c feat: sign grpc requests on cli with pgp key & verify it on server
d6ef4d9 feat: split account ID and name
e412e1a chore: workaround the bind problem
e23cc59 chore: bump minimum Talos version to v1.2.4
0638a29 feat: stop using websockets
8f3c19d feat: update install media to be identifiable
70d1e35 feat: implement resource encryption
7653638 fix: fix NPE in integration tests
e39849f chore: update Makefile and Dockerfile with kres
4709473 fix: return an error if external etcd client fails to be built
5366661 refactor: use generic transform controller
a2a5f16 feat: limit access to Talos API via Omni to os:reader
e254201 feat: merge internal/external states into one
3258ca4 feat: add ControlPlaneStatus controller
1c0f286 refactor: use MachineStatus Talos resource
0a6b19f chore: drop support for Talos resource API
ee5f6d5 feat: add auth resource types & implement CLI auth
36736e1 fix: use correct protobuf URL for cosi resource spec
b98c56d feat: bump minimum version for Talos to v1.2.3
b93bc9c chore: move containers and optional package to the separate module
e1af4d8 chore: update COSI to v0.2.0-alpha.1
788dd37 feat: implement and enable by default etcd backend
1b83038 release(v0.1.0-alpha.0): prepare release
8a9c4f1 feat: implement CLI configuration file (omniconfig)
b0c92d5 feat: implement etcd audit controller
0e993a0 feat: properly support scaling down the cluster
264cdc9 refactor: prepare for etcd backend integration
b519d17 feat: show version in the UI
a2fb539 feat: keep track of loadbalancer health in the controller
4789c62 feat: implement a new controller that can gather cluster machine data
bd3712e fix: populate machine label field in the patches created by the UI
ba70b4a fix: rename to Omni, fix workers scale up, hide join token
47b45c1 fix: correct filenames for Digital Ocean images
9d217cf feat: introduce new resources, deprecate ClusterMachineTemplate
aee153b fix: address style issue in the Pods paginator
752dd44 chore: update Talos machinery to 1.2.0 and use client config struct
88d7079 fix: regenerate sources from proto files that were rolled back.
84062c5 chore: update Talos to the latest master
5a139e4 fix: properly route theila internal requests in the gRPC proxy
4be4fb6 feat: add support for 'talosconfig' generation
9235b8b fix: properly layer gRPC proxies
9a516cc fix: wait for selector of 'View All' to render in e2e tests.
3cf3aa7 fix: some unhandled errors in the e2e tests.
c32c7d5 fix: ignore updating cluster machines statuses without machine statuses
4cfa307 chore: run rekres, fix lint errors and bump Go to 1.19
eb2d449 fix: skip the machines in tearingDown phase in the controller
9ebc769 fix: allow all services to be proxied by gRPC router
ea2b01d fix: properly handle non empty resource id in the K8s resource watch
3bb7da3 feat: show a Cluster column in the Machine section
8beb70b fix: ignore tearing down clusters in the Cluster migrations
319d4e7 fix: properly handle null memory modules list
6c2120b chore: introduce migrations manager for COSI DB state
ec52139 fix: filter out invalid memory modules info coming from Talos nodes
8e87031 fix: bump loadbalancer timeout settings
bc0ed26 feat: introduce websocket, HTTP requests monitoring
857401f feat: add HTTP logging (static, gateway), and websocket logging
eb612a3 fix: do hard stop of events sink gRPC server after 5 seconds
3162513 fix: populate nodes filter dropdown properly and rewrite filter function
5713a51 fix: make TSelectList search filter the items in the dropdown
f2519ff feat: don't allow using nodes with not enough mem for the cluster
9e474d6 feat: show disconnected warning in the machines list
fa52b48 feat: redesign Installation Media selection menu
01e301a fix: query node list using talosctl get members instead of K8s nodes
e694df5 fix: display all available Talos versions on cluster create page
7a87525 fix: use v-model instead of callbacks in the inputs
d681f5f feat: support scaling up the clusters
e992b95 feat: show notification on image download progress
8ea6d9f fix: probably fix 'context canceled' on image download
692612b fix: improve the Talos image generation process
a69c140 feat: introduce Prometheus metrics
e90ca78 fix: make grpc api listen only on siderolink interface
99fc28c fix: display correct cluster/machine status on ui
eaf7655 fix: add a pause before integration tests
19ff1c9 chore: rename download button
e1c4e1b feat: add download options for all talos images
24e7863 fix: delete cached clients from gRPC proxy when the cluster is destroyed
58c89ef feat: implement argesctl delete command
3c99b49 test: add a test which removes allocated machine
75dd28f chore: fill in resource definitions for table headers
028f168 feat: End-to-end tests with playwright
6be6b36 chore: bump goimports from 0.1.10 to 0.1.11 and node from 18.5.0 to 18.6.0
af4da08 test: implement kernel log streaming test
1eacfee feat: implement argesctl machine-logs output in 'zap-like' and 'dmesg' form.
96ab7ab chore: ignore memory modules with zero size
fd0575f chore: retrieve k8s versions from github registry
8651527 feat: redo errgroup to return error on first nil error
944222d fix: show ClusterMachineStatus.Stage in 'Clusters' view
f3f6b6e chore: refactor run method and no longer ignore log receiver listener errors
b316377 chore: rename 'Dmesg' to 'Console'
19ee857 test: add a way to recover deleted machines
e5b5bdc fix: update SideroLink library for EEXIST fixes
363de69 fix: spec collector equality
841f3b2 feat: add ability to supply machine config patches on the machines
907ca93 test: fix link destroy test
4c9f99d fix: remove machine status if the machine is in tearing down phase
d9747e5 fix: make cluster machine status test more reliable
3bfff3b fix: do not set up full theila runtime during clients tests
4bf33bc fix: immediately fail the request if the cluster is down
124a5c2 fix: ensure the created date on resources is set
14161bf feat: add scale up integration test and minor log fixes
7af06fd feat: make integration tests a subtests of one global test
f7c1464 feat: implement log receiver for logs from Talos
5b800ea fix: accumulate bytes received/send in the link resource
b3b1e9b feat: machine removal
fb01bc4 fix: use Talos 1.2.0
3a50efe feat: filter machines that can be added to cluster
ba62db5 fix: properly parse siderolink-api-advertised-url if there's no port
96f835a fix: properly display node selectors in FireFox
12c20a4 fix: populate disks when machines are connected during cluster create
0dc97f8 fix: adjust overview page to look closer to the mockups
2b77af8 feat: add the chart showing the count of clusters
a1dff65 feat: implement ISO download with embedded kernel args
37c03d8 test: pull kubeconfig and interact with Kubernetes API
75bfb08 fix: ignore the error on splitting host/port
3be5a32 feat: make the whole cluster list item clickable, add dropdown menu item
2c9dc99 fix: adjust the look of the Overview page a bit
aa4a926 feat: add the button for downloading cluster Kubeconfig on overview page
4532de6 feat: support basic auth in argesctl command
b66bb3c feat: add summary information Overview page
3bdbce4 test: more cluster creation tests, two clusters, cleanup
3b00bd5 fix: improve cluster deletion and node reset flow
2d83d16 test: create a cluster and verify cluster machine statuses
f471cfd fix: copy all labels from the ClusterMachine to ClusterMachineStatus
ec32f86 test: add integration tests up to the cluster creation
a8d3ee5 feat: add kubeconfig command to argesctl and fix kubeconfig
10b9a3b test: implement API integration test
3e6b891 feat: aggregate cluster machine statuses in cluster status controller
f6cbc58 chore: ignore empty processor info
c5fc71b fix: clean up Kubernetes client and configs when a cluster is destroyed
e8478fe fix: properly use tracker to cleanup ClusterMachineConfig resources
044fcad fix: make MachineStatusController connect to configured nodes
2867099 feat: add api endpoint to fetch kubeconfig
5f32667 test: support registry mirrors for development purposes
5114695 refactor: consistent flag naming
9ffb19e chore: use latest node
5512321 refactor: set better defaults for cli args
ff88242 chore: mark 'siderolink-wireguard-endpoint' flags as required
4a9d9ad feat: add the ClusterMachineStatus resource
e4e8b62 refactor: unify all Arges API under a single HTTP server
5af9049 chore: rename sidebar item
a4fc47f chore: fix build warning
547b83c chore: bump siderolink version
11c31f3 refactor: drop one of the layered gRPC servers
0adbbb7 feat: introduce a way to copy kernel arguments from the UI
ce5422a fix: import new COSI library to fix YAML marshaling
d6cec09 feat: implement Arges API client, and minimal argesctl
65c8d68 feat: implement cluster creation view
8365b00 feat: re-enable old Theila UI
63e703c fix: update Talos to the latest master
d33e27b feat: implement clusters list view
cb9e23c feat: protect Theila state from external API access
952c235 fix: properly allocated ports in the loadbalancer
a58c479 chore: report siderolink events kernel arg
8a56fe3 refactor: move Theila resources to public pkg/
1251699 fix: reset the MachineEventsSnapshot after the node is reset
9a2e6af feat: implement bootstrap controller
7107e27 feat: implement apply and reset config controller
1579eb0 feat: implement machine events handler and ClusterStatus
7214f4a feat: implement cluster load balancer controller
9c4fafa feat: add a controller that manages load balancers for talos clusters
7e3d80c feat: add a resources that specify configurations for load balancers
dc0d356 feat: support Theila runtime watch with label selectors
6a568a7 feat: implement ClusterMachineConfig resource and it's controller
3db0f1c feat: implement TalosConfig controller
b7ae8e1 feat: introduce Cluster controller that adds finalizers on Clusters
8d7ea02 chore: use label selectors in TalosConfig, set labels on the resources
cff9cb1 fix: separate advertised endpoint from the actual wireguard endpoint
5be6cc3 feat: implement cluster creation UI
a1633eb chore: add typed wrappers around State, Reader and Writer
5515f3d feat: add ClusterSecrets resource and controller and tests
7226f6c feat: add Cluster, ClusterMachine and TalosConfig resources
ec44930 feat: enable vtprotobuf optimized marshaling
15be219 feat: generate TS constants from go //tsgen: comments
caa4c4d fix: resource equality for proto specs
beeca88 refactor: clarify code that creates or gets links for nodes
340c63a feat: implement Machines page
f7bc0c6 feat: accept nodes if they provide the correct join token
bdf789a feat: immediately reconnect SideroLink peers after Arges restart
6b74fa8 feat: implement MachineStatusController
f5db0e0 feat: add more info to the siderolink connection spec
d3e4a71 refactor: simplify the usage of gRPC resource CRUD API
2430115 feat: implement MachineController and small fixes
e31d22d feat: support running Theila without contexts
a6b3646 refactor: small fixes
33d2b59 refactor: clean up a bit SideroLink code, fix shutdown
98ec883 chore: rename main executable to avoid clashing with Theila project
828721d feat: enable COSI persistence for resources
f1f7883 feat: set up siderolink endpoints in Theila
6439335 refactor: migrate to typed.Resource in Theila internal state
6195274 refactor: restructure folders in the project
1abf72b chore: update Talos libs to the latest version
16dffd9 fix: display delta time for pod's age
8b80726 feat: update favicon to sidero logo
2da7378 feat: show the extended hardware info
d3c6004 chore: allow getting resources without version and group
eb19087 fix: remove t-header error notification
5a28202 feat: restyle t-alert component
9f2b482 fix: get rid of racy code in the kubeconfig request code
c40824e feat: add text Highlight feature
9018c81 feat: use ~/.talos/config as a primary source for clusters
e10547b refactor: remove old components and not used code parts
f704684 fix: properly calculate servers capacity
755a077 fix: use proper units for memory and CPU charts on the node monitor page
d0a083d release(v0.2.0-alpha.0): prepare release
53878ee fix: properly update servers menu item when the context is changed
b4cb9c7 feat: restyle TMonitor page
f0377e2 fix: invert chart value for cpu, storage and memory on the overview page
6ea6ecf fix: update capi-utils to fix talosconfig requests for CAPI clusters
e3796d3 chore: update capi-utils
39186eb feat: implement overview page, cluster dropdown, ongoing tasks
59f2b27 docs: update README.md
2b7831f feat: add Kubernetes and Servers pages
4451a5b fix: properly set TaskStatus namespace in the initial call
4545464 fix: add new fields to the TaskStatus spec, update Talos
891cf3b docs: describe client context types, usage
309b515 feat: update k8s upgrades tasks structure for the new UI representation
5aa8ca2 feat: add NodesPage
db434e0 feat: add TPagination component
0b51727 feat: add Pods, Dashboard, Upgrade views, etc
c549b8b feat: add Overview and Upgrade Kubernetes pages
cec2e85 chore: define constants for all used resource types
962bdaf feat: add TSideBar
fa28ccb feat: add TheHeader component
f3418a5 feat: button;icons;config
db30f50 fix: add frontend/node_modules to gitignore
a675b86 fix: properly pass label selector to the metadata in ClusterListItem
7911d6a chore: add ability to start local development server for the frontend
076fee1 feat: use CAPI utils for CAPI requests
5ed5ba2 fix: more websocket client bugfixes
6fe22ad fix: reset reconnect timeouts after the client is reconnected
c4b144a fix: talosconfig/kubeconfig when using the default context
b439a37 fix: properly handle Same-Origin header in websockets
ffffed1 fix: read node name from nodename resource instead of hostname
2d6f984 fix: use secure websockets if the page itself is using https
799f2d2 feat: rework the node overview page
0d0eaf4 fix: make charts height resize depending on the screen height
7de0101 fix: use polyfill to fix streaming APIs on Firefox
0cff2b0 feat: small UI adjustments
d70bd41 feat: implement accept Sidero server functional
f3a6e16 feat: add top processes list to the Overview page
3cf97e4 refactor: use the same object for gRPC metadata context and messages
243206f release(v0.1.0-alpha.2): prepare release
e5b6f29 feat: implement node Reset
bcb7d23 fix: node IP not being truncated
e576d33 feat: add upgrade UI for CAPI clusters
10cdce7 fix: server labels key/value order and chevron orientation
4007177 feat: implement Kubernetes upgrade UI components
f4917ee fix: accumulate chart updates into a single update
414d76c feat: implement upgrade controller
36742ea feat: introduce create, delete and update gRPC APIs
2b3d314 feat: install internal COSI runtime alongside with K8s and Talos
ae7f784 refactor: move all generated TypeScript files under frontend/src/api
61bad64 release(v0.1.0-alpha.1): prepare release
8e5e722 feat: implement node reboot controls
9765a88 feat: dmesg logs page
ecbbd67 feat: use updated timestamp to display event time on the graph
7c56773 refactor: use Metadata to pass context in all gRPC calls
abb4733 feat: implement service logs viewer
8e8e032 feat: add ability to pick sort order on the servers page
1a1c728 fix: resolve the issue with idFn value generating undefined ids
2e83fe2 feat: allow filtering servers by picking from predefined categories
48f776e fix: navigate home when changing the context
a1ce0ca fix: resolve services search issues
5b768f8 feat: make stacked lists searchable
ec1bc5b feat: implement stats component and add stats to the servers page
1a85999 feat: align Sidero servers list outlook with the wireframes
524264c fix: display error message and use proper layout for the spinner
5263d16 feat: introduce node stats page
8feb35e feat: make root sidebar sections collapsible
36ad656 feat: detect cluster capabilities
a25d90d feat: support switching context in the UI
67903e2 refactor: separate Watch from StackedList
76b9e1d release(v0.1.0-alpha.0): prepare release
7bde4c8 fix: cobra command was initialized but not actually used
04624c9 feat: support getting Talos and Kubernetes client configs for a cluster
219b9c8 feat: implement notifications component
f8b19a0 feat: decouple watch list from the view
2f8c96e feat: implement appearance settings modal window
de745d6 feat: implement Talos runtime backend
af69a0d feat: support getting Kubernetes resource through gRPC gateway
2c50010 feat: implement breadcrumbs component, add support for table header
3fc1e80 feat: implement nodes view
961e93a feat: implement clusters view
e8248ff feat: use plain zap instead of SugaredLogger everywhere
81ba93d chore: generate websocket protocol messages using protobuf
37a878d feat: make JS websocket reconnect on connection loss
23b3281 feat: use dynamic watcher to allow listing any kinds of resources
16475f5 feat: implement real time update server on top of web sockets
76b39ae feat: create hello world Vue app using Kres
baab493 Initial commit

Changes since v0.1.0-alpha.1

55 commits

e096c88 chore: add resource operation metrics
741e820 feat: implement config patch creation UI
5def267 fix: attempt to clean up docker container better
876ff5e feat: update COSI and state-etcd to 0.2.0
3df410d test: refactor and update config patch integration tests
5eea9e5 feat: add TLS support to siderolink API
36394ea refactor: simplify the resource leak fix
e5b962b chore: update dev environment
39bf206 fix: save user picture and fullname in the local storage
f1611c1 feat: add machine level config patch support
f2e6cf5 fix: remove several resource/goroutine leaks
fc37af3 feat: allow destroying config patches in the UI
3154d59 fix: respect SIDEROLINK_DEV_JOIN_TOKEN only in debug mode
38f5380 feat: avoid deleting all resources on omnictl delete
28666bc chore: add support for local development using compose
cad73ce chore: increase TestEtcdAudit timeout and fix incorrect Assert() calls.
7199b75 chore: during config merge create config if there was none
dab54d1 chore: increase TestTalosBackendRoles reliability
997cd78 feat: add reconfiguring phase to machinesetstatus
81fb2b9 fix: fix button order and vue config
252fb29 refactor: simplify backend.Server.Run method
f335c2f refactor: split watch to Watch and WatchFunc, add unit tests
35a7919 feat: track machine config apply status
1c54710 fix: use rolling update strategy on control planes
17ccdc2 refactor: various logging fixes
3c9ca9c fix: update node overview Kubernetes node watch to make it compatible
e8c2063 fix: enable edit config patches button on the cluster overview page
6e80521 fix: reset the item list after the watch gets reconnected
620d197 chore: remove AddContext method from runtime.Runtime interface
8972ade chore: update default version of Talos to v1.2.7
6a2dde8 fix: update the config patch rollout strategy
fb3f6a3 fix: skip updating config status if applying config caused a reboot
8776146 fix: apply finalizer to the Machine only when CMS is created
134bb20 test: fix config patch test with reboot
d3b6b5a feat: implement config patch viewer and editor
149efe1 chore: bump runtime and state-etcd modules
c345b83 chore: output omnictl auth log to stderr
39b2ba2 refactor: introduce ClusterEndpoint resource
6998ff0 fix: treat created and updated events same
289fe88 feat: add omnictl apply
2f1be3b chore: fix TestGenerateJoinToken test
3829176 fix: don't close config patch editor window if config validation fails
c96f504 feat: add suspended mode
b967bcf feat: add last config apply error to clustermachineconfigstatus
0395d9d test: increase key generation timeout on storage signing test
577eba4 fix: set SideroLink MTU to 1280
0f32172 fix: minor things in frontend
9abcc7b test: add config patching integration tests
99531fb refactor: drop unneeded controller inputs
5172354 chore: add omnictl to the generated image
738cf64 fix: set cluster machine version in machine config status correctly
1d0d220 fix: lower ttl of the issued keys on the FE side by 10 minutes
2889524 feat: dynamic title
3d17bd7 chore: fix release CI run
f2c752f fix: properly proxy watch requests through dev-server

Dependency Changes

This release has no dependency changes

Omni 0.1.0-alpha.1 (2022-11-10)

Welcome to the v0.1.0-alpha.1 release of Omni! This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Contributors

Artem Chernyshev
Andrey Smirnov
Artem Chernyshev
Dmitriy Matrenichev
Philipp Sauter
Utku Ozdemir
evgeniybryzh
Noel Georgi
Andrew Rynhard
Tim Jones
Andrew Rynhard
Gerard de Leeuw
Steve Francis
Volodymyr Mazurets

Changes

349 commits

8b284f3 feat: implement Kubernetes API OIDC proxy and OIDC server
adad8d0 refactor: rework LoadBalancerConfig/LoadBalancerStatus resources
08e2cb4 feat: support editing config patches on cluster and machine set levels
e2197c8 test: e2e testing improvements
ec9051f fix: config patching
e2a1d6c fix: send logs in JSON format by default
954dd70 chore: replace talos-systems depedencies with siderolabs
acf94db chore: add payload logger
838c716 fix: allow time skew on validating the public keys
dd481d6 fix: refactor runGRPCProxy in router tests to catch listener errors
e68d010 chore: small fixes
ad86875 feat: minor adjustments on the cluster create page
e61f194 chore: implement debug handlers with controller dependency graphs
cbbf901 refactor: use generic TransformController more
33f9f2c chore: remove reflect from runtime package
6586963 feat: add scopes to users, rework authz & add integration tests
bb355f5 fix: reload the page to init the UI Authenticator on signature fails
c90cd48 chore: log auth context
d278780 fix: update Clusters page UI
5e77607 tests: abort on first failure
4c55980 chore: get full method name from the service
2194f43 feat: redesign cluster list view
40b3f23 chore: enable gRPC request duration histogram
0235bb9 refactor: make sure Talos/Kubernetes versions are defined once
dd6154a chore: add public key pruning
68908ba fix: bring back UpgradeInfo API
f1bc692 refactor: drop dependency on Talos Go module
0e3ef43 feat: implement talosctl access via Omni
2b0014f fix: provide a way to switch the user on the authenticate page
e295d7e chore: refactor all controller tests to use assertResource function
8251dfb refactor: extract PGP client key handling
02da9ee refactor: use extracted go-api-signature library
4bc3db4 fix: drop not working upgrade k8s functional
17ca75e feat: add 404 page
8dcde2a feat: implement logout flow in the frontend
ba766b9 fix: make omnictl correctly re-auth on invalid key
fd16f87 fix: don't set timeout on watch gRPC requests
8dc3cc6 fix: don't use omni in external names
2513661 fix: reset Error field of the MachineSetStatus
b611e99 fix: properly handle Forbidden errors on the authentication page
8525502 fix: stop runners properly and clean up StatusMachineSnapshot
ab0190d feat: implement scopes and enforce authorization
9198d96 feat: sign gRPC requests on the frontend to enable Authentication flow
bdd8f21 chore: remove reset button and fix padding
362db57 fix: gRPC verifier should verify against original JSON payload
30186b8 fix: omnictl ignoring omniconfig argument
e8ab0ba fix: do not attempt to execute failed integration test again
9fda25e chore: add more info on errors to different controllers
ccda526 chore: bump grpc version
b1ac125 chore: emit log when we got machine status event.
005d257 chore: set admin role specifically for Reboot request.
27f0e30 chore: update deps
77f0219 test: more unit-tests for auth components
0bf6ddf fix: pass through HTTP request if auth is disabled
4f3a67b fix: unit-tests for auth package and fixes
e3390cb chore: rename arges-theila to omni
14d2614 chore: allow slashes in secretPath
e423edc fix: add unit-tests for auth message and fix issues
b5cfa1a feat: add vault client
b47791c feat: sign grpc requests on cli with pgp key & verify it on server
d6ef4d9 feat: split account ID and name
e412e1a chore: workaround the bind problem
e23cc59 chore: bump minimum Talos version to v1.2.4
0638a29 feat: stop using websockets
8f3c19d feat: update install media to be identifiable
70d1e35 feat: implement resource encryption
7653638 fix: fix NPE in integration tests
e39849f chore: update Makefile and Dockerfile with kres
4709473 fix: return an error if external etcd client fails to be built
5366661 refactor: use generic transform controller
a2a5f16 feat: limit access to Talos API via Omni to os:reader
e254201 feat: merge internal/external states into one
3258ca4 feat: add ControlPlaneStatus controller
1c0f286 refactor: use MachineStatus Talos resource
0a6b19f chore: drop support for Talos resource API
ee5f6d5 feat: add auth resource types & implement CLI auth
36736e1 fix: use correct protobuf URL for cosi resource spec
b98c56d feat: bump minimum version for Talos to v1.2.3
b93bc9c chore: move containers and optional package to the separate module
e1af4d8 chore: update COSI to v0.2.0-alpha.1
788dd37 feat: implement and enable by default etcd backend
1b83038 release(v0.1.0-alpha.0): prepare release
8a9c4f1 feat: implement CLI configuration file (omniconfig)
b0c92d5 feat: implement etcd audit controller
0e993a0 feat: properly support scaling down the cluster
264cdc9 refactor: prepare for etcd backend integration
b519d17 feat: show version in the UI
a2fb539 feat: keep track of loadbalancer health in the controller
4789c62 feat: implement a new controller that can gather cluster machine data
bd3712e fix: populate machine label field in the patches created by the UI
ba70b4a fix: rename to Omni, fix workers scale up, hide join token
47b45c1 fix: correct filenames for Digital Ocean images
9d217cf feat: introduce new resources, deprecate ClusterMachineTemplate
aee153b fix: address style issue in the Pods paginator
752dd44 chore: update Talos machinery to 1.2.0 and use client config struct
88d7079 fix: regenerate sources from proto files that were rolled back.
84062c5 chore: update Talos to the latest master
5a139e4 fix: properly route theila internal requests in the gRPC proxy
4be4fb6 feat: add support for 'talosconfig' generation
9235b8b fix: properly layer gRPC proxies
9a516cc fix: wait for selector of 'View All' to render in e2e tests.
3cf3aa7 fix: some unhandled errors in the e2e tests.
c32c7d5 fix: ignore updating cluster machines statuses without machine statuses
4cfa307 chore: run rekres, fix lint errors and bump Go to 1.19
eb2d449 fix: skip the machines in tearingDown phase in the controller
9ebc769 fix: allow all services to be proxied by gRPC router
ea2b01d fix: properly handle non empty resource id in the K8s resource watch
3bb7da3 feat: show a Cluster column in the Machine section
8beb70b fix: ignore tearing down clusters in the Cluster migrations
319d4e7 fix: properly handle null memory modules list
6c2120b chore: introduce migrations manager for COSI DB state
ec52139 fix: filter out invalid memory modules info coming from Talos nodes
8e87031 fix: bump loadbalancer timeout settings
bc0ed26 feat: introduce websocket, HTTP requests monitoring
857401f feat: add HTTP logging (static, gateway), and websocket logging
eb612a3 fix: do hard stop of events sink gRPC server after 5 seconds
3162513 fix: populate nodes filter dropdown properly and rewrite filter function
5713a51 fix: make TSelectList search filter the items in the dropdown
f2519ff feat: don't allow using nodes with not enough mem for the cluster
9e474d6 feat: show disconnected warning in the machines list
fa52b48 feat: redesign Installation Media selection menu
01e301a fix: query node list using talosctl get members instead of K8s nodes
e694df5 fix: display all available Talos versions on cluster create page
7a87525 fix: use v-model instead of callbacks in the inputs
d681f5f feat: support scaling up the clusters
e992b95 feat: show notification on image download progress
8ea6d9f fix: probably fix 'context canceled' on image download
692612b fix: improve the Talos image generation process
a69c140 feat: introduce Prometheus metrics
e90ca78 fix: make grpc api listen only on siderolink interface
99fc28c fix: display correct cluster/machine status on ui
eaf7655 fix: add a pause before integration tests
19ff1c9 chore: rename download button
e1c4e1b feat: add download options for all talos images
24e7863 fix: delete cached clients from gRPC proxy when the cluster is destroyed
58c89ef feat: implement argesctl delete command
3c99b49 test: add a test which removes allocated machine
75dd28f chore: fill in resource definitions for table headers
028f168 feat: End-to-end tests with playwright
6be6b36 chore: bump goimports from 0.1.10 to 0.1.11 and node from 18.5.0 to 18.6.0
af4da08 test: implement kernel log streaming test
1eacfee feat: implement argesctl machine-logs output in 'zap-like' and 'dmesg' form.
96ab7ab chore: ignore memory modules with zero size
fd0575f chore: retrieve k8s versions from github registry
8651527 feat: redo errgroup to return error on first nil error
944222d fix: show ClusterMachineStatus.Stage in 'Clusters' view
f3f6b6e chore: refactor run method and no longer ignore log receiver listener errors
b316377 chore: rename 'Dmesg' to 'Console'
19ee857 test: add a way to recover deleted machines
e5b5bdc fix: update SideroLink library for EEXIST fixes
363de69 fix: spec collector equality
841f3b2 feat: add ability to supply machine config patches on the machines
907ca93 test: fix link destroy test
4c9f99d fix: remove machine status if the machine is in tearing down phase
d9747e5 fix: make cluster machine status test more reliable
3bfff3b fix: do not set up full theila runtime during clients tests
4bf33bc fix: immediately fail the request if the cluster is down
124a5c2 fix: ensure the created date on resources is set
14161bf feat: add scale up integration test and minor log fixes
7af06fd feat: make integration tests a subtests of one global test
f7c1464 feat: implement log receiver for logs from Talos
5b800ea fix: accumulate bytes received/send in the link resource
b3b1e9b feat: machine removal
fb01bc4 fix: use Talos 1.2.0
3a50efe feat: filter machines that can be added to cluster
ba62db5 fix: properly parse siderolink-api-advertised-url if there's no port
96f835a fix: properly display node selectors in FireFox
12c20a4 fix: populate disks when machines are connected during cluster create
0dc97f8 fix: adjust overview page to look closer to the mockups
2b77af8 feat: add the chart showing the count of clusters
a1dff65 feat: implement ISO download with embedded kernel args
37c03d8 test: pull kubeconfig and interact with Kubernetes API
75bfb08 fix: ignore the error on splitting host/port
3be5a32 feat: make the whole cluster list item clickable, add dropdown menu item
2c9dc99 fix: adjust the look of the Overview page a bit
aa4a926 feat: add the button for downloading cluster Kubeconfig on overview page
4532de6 feat: support basic auth in argesctl command
b66bb3c feat: add summary information Overview page
3bdbce4 test: more cluster creation tests, two clusters, cleanup
3b00bd5 fix: improve cluster deletion and node reset flow
2d83d16 test: create a cluster and verify cluster machine statuses
f471cfd fix: copy all labels from the ClusterMachine to ClusterMachineStatus
ec32f86 test: add integration tests up to the cluster creation
a8d3ee5 feat: add kubeconfig command to argesctl and fix kubeconfig
10b9a3b test: implement API integration test
3e6b891 feat: aggregate cluster machine statuses in cluster status controller
f6cbc58 chore: ignore empty processor info
c5fc71b fix: clean up Kubernetes client and configs when a cluster is destroyed
e8478fe fix: properly use tracker to cleanup ClusterMachineConfig resources
044fcad fix: make MachineStatusController connect to configured nodes
2867099 feat: add api endpoint to fetch kubeconfig
5f32667 test: support registry mirrors for development purposes
5114695 refactor: consistent flag naming
9ffb19e chore: use latest node
5512321 refactor: set better defaults for cli args
ff88242 chore: mark 'siderolink-wireguard-endpoint' flags as required
4a9d9ad feat: add the ClusterMachineStatus resource
e4e8b62 refactor: unify all Arges API under a single HTTP server
5af9049 chore: rename sidebar item
a4fc47f chore: fix build warning
547b83c chore: bump siderolink version
11c31f3 refactor: drop one of the layered gRPC servers
0adbbb7 feat: introduce a way to copy kernel arguments from the UI
ce5422a fix: import new COSI library to fix YAML marshaling
d6cec09 feat: implement Arges API client, and minimal argesctl
65c8d68 feat: implement cluster creation view
8365b00 feat: re-enable old Theila UI
63e703c fix: update Talos to the latest master
d33e27b feat: implement clusters list view
cb9e23c feat: protect Theila state from external API access
952c235 fix: properly allocated ports in the loadbalancer
a58c479 chore: report siderolink events kernel arg
8a56fe3 refactor: move Theila resources to public pkg/
1251699 fix: reset the MachineEventsSnapshot after the node is reset
9a2e6af feat: implement bootstrap controller
7107e27 feat: implement apply and reset config controller
1579eb0 feat: implement machine events handler and ClusterStatus
7214f4a feat: implement cluster load balancer controller
9c4fafa feat: add a controller that manages load balancers for talos clusters
7e3d80c feat: add a resources that specify configurations for load balancers
dc0d356 feat: support Theila runtime watch with label selectors
6a568a7 feat: implement ClusterMachineConfig resource and it's controller
3db0f1c feat: implement TalosConfig controller
b7ae8e1 feat: introduce Cluster controller that adds finalizers on Clusters
8d7ea02 chore: use label selectors in TalosConfig, set labels on the resources
cff9cb1 fix: separate advertised endpoint from the actual wireguard endpoint
5be6cc3 feat: implement cluster creation UI
a1633eb chore: add typed wrappers around State, Reader and Writer
5515f3d feat: add ClusterSecrets resource and controller and tests
7226f6c feat: add Cluster, ClusterMachine and TalosConfig resources
ec44930 feat: enable vtprotobuf optimized marshaling
15be219 feat: generate TS constants from go //tsgen: comments
caa4c4d fix: resource equality for proto specs
beeca88 refactor: clarify code that creates or gets links for nodes
340c63a feat: implement Machines page
f7bc0c6 feat: accept nodes if they provide the correct join token
bdf789a feat: immediately reconnect SideroLink peers after Arges restart
6b74fa8 feat: implement MachineStatusController
f5db0e0 feat: add more info to the siderolink connection spec
d3e4a71 refactor: simplify the usage of gRPC resource CRUD API
2430115 feat: implement MachineController and small fixes
e31d22d feat: support running Theila without contexts
a6b3646 refactor: small fixes
33d2b59 refactor: clean up a bit SideroLink code, fix shutdown
98ec883 chore: rename main executable to avoid clashing with Theila project
828721d feat: enable COSI persistence for resources
f1f7883 feat: set up siderolink endpoints in Theila
6439335 refactor: migrate to typed.Resource in Theila internal state
6195274 refactor: restructure folders in the project
1abf72b chore: update Talos libs to the latest version
16dffd9 fix: display delta time for pod's age
8b80726 feat: update favicon to sidero logo
2da7378 feat: show the extended hardware info
d3c6004 chore: allow getting resources without version and group
eb19087 fix: remove t-header error notification
5a28202 feat: restyle t-alert component
9f2b482 fix: get rid of racy code in the kubeconfig request code
c40824e feat: add text Highlight feature
9018c81 feat: use ~/.talos/config as a primary source for clusters
e10547b refactor: remove old components and not used code parts
f704684 fix: properly calculate servers capacity
755a077 fix: use proper units for memory and CPU charts on the node monitor page
d0a083d release(v0.2.0-alpha.0): prepare release
53878ee fix: properly update servers menu item when the context is changed
b4cb9c7 feat: restyle TMonitor page
f0377e2 fix: invert chart value for cpu, storage and memory on the overview page
6ea6ecf fix: update capi-utils to fix talosconfig requests for CAPI clusters
e3796d3 chore: update capi-utils
39186eb feat: implement overview page, cluster dropdown, ongoing tasks
59f2b27 docs: update README.md
2b7831f feat: add Kubernetes and Servers pages
4451a5b fix: properly set TaskStatus namespace in the initial call
4545464 fix: add new fields to the TaskStatus spec, update Talos
891cf3b docs: describe client context types, usage
309b515 feat: update k8s upgrades tasks structure for the new UI representation
5aa8ca2 feat: add NodesPage
db434e0 feat: add TPagination component
0b51727 feat: add Pods, Dashboard, Upgrade views, etc
c549b8b feat: add Overview and Upgrade Kubernetes pages
cec2e85 chore: define constants for all used resource types
962bdaf feat: add TSideBar
fa28ccb feat: add TheHeader component
f3418a5 feat: button;icons;config
db30f50 fix: add frontend/node_modules to gitignore
a675b86 fix: properly pass label selector to the metadata in ClusterListItem
7911d6a chore: add ability to start local development server for the frontend
076fee1 feat: use CAPI utils for CAPI requests
5ed5ba2 fix: more websocket client bugfixes
6fe22ad fix: reset reconnect timeouts after the client is reconnected
c4b144a fix: talosconfig/kubeconfig when using the default context
b439a37 fix: properly handle Same-Origin header in websockets
ffffed1 fix: read node name from nodename resource instead of hostname
2d6f984 fix: use secure websockets if the page itself is using https
799f2d2 feat: rework the node overview page
0d0eaf4 fix: make charts height resize depending on the screen height
7de0101 fix: use polyfill to fix streaming APIs on Firefox
0cff2b0 feat: small UI adjustments
d70bd41 feat: implement accept Sidero server functional
f3a6e16 feat: add top processes list to the Overview page
3cf97e4 refactor: use the same object for gRPC metadata context and messages
243206f release(v0.1.0-alpha.2): prepare release
e5b6f29 feat: implement node Reset
bcb7d23 fix: node IP not being truncated
e576d33 feat: add upgrade UI for CAPI clusters
10cdce7 fix: server labels key/value order and chevron orientation
4007177 feat: implement Kubernetes upgrade UI components
f4917ee fix: accumulate chart updates into a single update
414d76c feat: implement upgrade controller
36742ea feat: introduce create, delete and update gRPC APIs
2b3d314 feat: install internal COSI runtime alongside with K8s and Talos
ae7f784 refactor: move all generated TypeScript files under frontend/src/api
61bad64 release(v0.1.0-alpha.1): prepare release
8e5e722 feat: implement node reboot controls
9765a88 feat: dmesg logs page
ecbbd67 feat: use updated timestamp to display event time on the graph
7c56773 refactor: use Metadata to pass context in all gRPC calls
abb4733 feat: implement service logs viewer
8e8e032 feat: add ability to pick sort order on the servers page
1a1c728 fix: resolve the issue with idFn value generating undefined ids
2e83fe2 feat: allow filtering servers by picking from predefined categories
48f776e fix: navigate home when changing the context
a1ce0ca fix: resolve services search issues
5b768f8 feat: make stacked lists searchable
ec1bc5b feat: implement stats component and add stats to the servers page
1a85999 feat: align Sidero servers list outlook with the wireframes
524264c fix: display error message and use proper layout for the spinner
5263d16 feat: introduce node stats page
8feb35e feat: make root sidebar sections collapsible
36ad656 feat: detect cluster capabilities
a25d90d feat: support switching context in the UI
67903e2 refactor: separate Watch from StackedList
76b9e1d release(v0.1.0-alpha.0): prepare release
7bde4c8 fix: cobra command was initialized but not actually used
04624c9 feat: support getting Talos and Kubernetes client configs for a cluster
219b9c8 feat: implement notifications component
f8b19a0 feat: decouple watch list from the view
2f8c96e feat: implement appearance settings modal window
de745d6 feat: implement Talos runtime backend
af69a0d feat: support getting Kubernetes resource through gRPC gateway
2c50010 feat: implement breadcrumbs component, add support for table header
3fc1e80 feat: implement nodes view
961e93a feat: implement clusters view
e8248ff feat: use plain zap instead of SugaredLogger everywhere
81ba93d chore: generate websocket protocol messages using protobuf
37a878d feat: make JS websocket reconnect on connection loss
23b3281 feat: use dynamic watcher to allow listing any kinds of resources
16475f5 feat: implement real time update server on top of web sockets
76b39ae feat: create hello world Vue app using Kres
baab493 Initial commit

Changes since v0.1.0-alpha.0

81 commits

8b284f3 feat: implement Kubernetes API OIDC proxy and OIDC server
adad8d0 refactor: rework LoadBalancerConfig/LoadBalancerStatus resources
08e2cb4 feat: support editing config patches on cluster and machine set levels
e2197c8 test: e2e testing improvements
ec9051f fix: config patching
e2a1d6c fix: send logs in JSON format by default
954dd70 chore: replace talos-systems depedencies with siderolabs
acf94db chore: add payload logger
838c716 fix: allow time skew on validating the public keys
dd481d6 fix: refactor runGRPCProxy in router tests to catch listener errors
e68d010 chore: small fixes
ad86875 feat: minor adjustments on the cluster create page
e61f194 chore: implement debug handlers with controller dependency graphs
cbbf901 refactor: use generic TransformController more
33f9f2c chore: remove reflect from runtime package
6586963 feat: add scopes to users, rework authz & add integration tests
bb355f5 fix: reload the page to init the UI Authenticator on signature fails
c90cd48 chore: log auth context
d278780 fix: update Clusters page UI
5e77607 tests: abort on first failure
4c55980 chore: get full method name from the service
2194f43 feat: redesign cluster list view
40b3f23 chore: enable gRPC request duration histogram
0235bb9 refactor: make sure Talos/Kubernetes versions are defined once
dd6154a chore: add public key pruning
68908ba fix: bring back UpgradeInfo API
f1bc692 refactor: drop dependency on Talos Go module
0e3ef43 feat: implement talosctl access via Omni
2b0014f fix: provide a way to switch the user on the authenticate page
e295d7e chore: refactor all controller tests to use assertResource function
8251dfb refactor: extract PGP client key handling
02da9ee refactor: use extracted go-api-signature library
4bc3db4 fix: drop not working upgrade k8s functional
17ca75e feat: add 404 page
8dcde2a feat: implement logout flow in the frontend
ba766b9 fix: make omnictl correctly re-auth on invalid key
fd16f87 fix: don't set timeout on watch gRPC requests
8dc3cc6 fix: don't use omni in external names
2513661 fix: reset Error field of the MachineSetStatus
b611e99 fix: properly handle Forbidden errors on the authentication page
8525502 fix: stop runners properly and clean up StatusMachineSnapshot
ab0190d feat: implement scopes and enforce authorization
9198d96 feat: sign gRPC requests on the frontend to enable Authentication flow
bdd8f21 chore: remove reset button and fix padding
362db57 fix: gRPC verifier should verify against original JSON payload
30186b8 fix: omnictl ignoring omniconfig argument
e8ab0ba fix: do not attempt to execute failed integration test again
9fda25e chore: add more info on errors to different controllers
ccda526 chore: bump grpc version
b1ac125 chore: emit log when we got machine status event.
005d257 chore: set admin role specifically for Reboot request.
27f0e30 chore: update deps
77f0219 test: more unit-tests for auth components
0bf6ddf fix: pass through HTTP request if auth is disabled
4f3a67b fix: unit-tests for auth package and fixes
e3390cb chore: rename arges-theila to omni
14d2614 chore: allow slashes in secretPath
e423edc fix: add unit-tests for auth message and fix issues
b5cfa1a feat: add vault client
b47791c feat: sign grpc requests on cli with pgp key & verify it on server
d6ef4d9 feat: split account ID and name
e412e1a chore: workaround the bind problem
e23cc59 chore: bump minimum Talos version to v1.2.4
0638a29 feat: stop using websockets
8f3c19d feat: update install media to be identifiable
70d1e35 feat: implement resource encryption
7653638 fix: fix NPE in integration tests
e39849f chore: update Makefile and Dockerfile with kres
4709473 fix: return an error if external etcd client fails to be built
5366661 refactor: use generic transform controller
a2a5f16 feat: limit access to Talos API via Omni to os:reader
e254201 feat: merge internal/external states into one
3258ca4 feat: add ControlPlaneStatus controller
1c0f286 refactor: use MachineStatus Talos resource
0a6b19f chore: drop support for Talos resource API
ee5f6d5 feat: add auth resource types & implement CLI auth
36736e1 fix: use correct protobuf URL for cosi resource spec
b98c56d feat: bump minimum version for Talos to v1.2.3
b93bc9c chore: move containers and optional package to the separate module
e1af4d8 chore: update COSI to v0.2.0-alpha.1
788dd37 feat: implement and enable by default etcd backend

Dependency Changes

This release has no dependency changes

Omni 0.1.0-alpha.0 (2022-09-19)

Welcome to the v0.1.0-alpha.0 release of Omni! This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/arges-theila/issues.

Contributors

Artem Chernyshev
Artem Chernyshev
Andrey Smirnov
Philipp Sauter
evgeniybryzh
Dmitriy Matrenichev
Utku Ozdemir
Noel Georgi
Andrew Rynhard
Andrew Rynhard
Gerard de Leeuw
Steve Francis
Tim Jones
Volodymyr Mazurets

Changes

267 commits

8a9c4f1 feat: implement CLI configuration file (omniconfig)
b0c92d5 feat: implement etcd audit controller
0e993a0 feat: properly support scaling down the cluster
264cdc9 refactor: prepare for etcd backend integration
b519d17 feat: show version in the UI
a2fb539 feat: keep track of loadbalancer health in the controller
4789c62 feat: implement a new controller that can gather cluster machine data
bd3712e fix: populate machine label field in the patches created by the UI
ba70b4a fix: rename to Omni, fix workers scale up, hide join token
47b45c1 fix: correct filenames for Digital Ocean images
9d217cf feat: introduce new resources, deprecate ClusterMachineTemplate
aee153b fix: address style issue in the Pods paginator
752dd44 chore: update Talos machinery to 1.2.0 and use client config struct
88d7079 fix: regenerate sources from proto files that were rolled back.
84062c5 chore: update Talos to the latest master
5a139e4 fix: properly route theila internal requests in the gRPC proxy
4be4fb6 feat: add support for 'talosconfig' generation
9235b8b fix: properly layer gRPC proxies
9a516cc fix: wait for selector of 'View All' to render in e2e tests.
3cf3aa7 fix: some unhandled errors in the e2e tests.
c32c7d5 fix: ignore updating cluster machines statuses without machine statuses
4cfa307 chore: run rekres, fix lint errors and bump Go to 1.19
eb2d449 fix: skip the machines in tearingDown phase in the controller
9ebc769 fix: allow all services to be proxied by gRPC router
ea2b01d fix: properly handle non empty resource id in the K8s resource watch
3bb7da3 feat: show a Cluster column in the Machine section
8beb70b fix: ignore tearing down clusters in the Cluster migrations
319d4e7 fix: properly handle null memory modules list
6c2120b chore: introduce migrations manager for COSI DB state
ec52139 fix: filter out invalid memory modules info coming from Talos nodes
8e87031 fix: bump loadbalancer timeout settings
bc0ed26 feat: introduce websocket, HTTP requests monitoring
857401f feat: add HTTP logging (static, gateway), and websocket logging
eb612a3 fix: do hard stop of events sink gRPC server after 5 seconds
3162513 fix: populate nodes filter dropdown properly and rewrite filter function
5713a51 fix: make TSelectList search filter the items in the dropdown
f2519ff feat: don't allow using nodes with not enough mem for the cluster
9e474d6 feat: show disconnected warning in the machines list
fa52b48 feat: redesign Installation Media selection menu
01e301a fix: query node list using talosctl get members instead of K8s nodes
e694df5 fix: display all available Talos versions on cluster create page
7a87525 fix: use v-model instead of callbacks in the inputs
d681f5f feat: support scaling up the clusters
e992b95 feat: show notification on image download progress
8ea6d9f fix: probably fix 'context canceled' on image download
692612b fix: improve the Talos image generation process
a69c140 feat: introduce Prometheus metrics
e90ca78 fix: make grpc api listen only on siderolink interface
99fc28c fix: display correct cluster/machine status on ui
eaf7655 fix: add a pause before integration tests
19ff1c9 chore: rename download button
e1c4e1b feat: add download options for all talos images
24e7863 fix: delete cached clients from gRPC proxy when the cluster is destroyed
58c89ef feat: implement argesctl delete command
3c99b49 test: add a test which removes allocated machine
75dd28f chore: fill in resource definitions for table headers
028f168 feat: End-to-end tests with playwright
6be6b36 chore: bump goimports from 0.1.10 to 0.1.11 and node from 18.5.0 to 18.6.0
af4da08 test: implement kernel log streaming test
1eacfee feat: implement argesctl machine-logs output in 'zap-like' and 'dmesg' form.
96ab7ab chore: ignore memory modules with zero size
fd0575f chore: retrieve k8s versions from github registry
8651527 feat: redo errgroup to return error on first nil error
944222d fix: show ClusterMachineStatus.Stage in 'Clusters' view
f3f6b6e chore: refactor run method and no longer ignore log receiver listener errors
b316377 chore: rename 'Dmesg' to 'Console'
19ee857 test: add a way to recover deleted machines
e5b5bdc fix: update SideroLink library for EEXIST fixes
363de69 fix: spec collector equality
841f3b2 feat: add ability to supply machine config patches on the machines
907ca93 test: fix link destroy test
4c9f99d fix: remove machine status if the machine is in tearing down phase
d9747e5 fix: make cluster machine status test more reliable
3bfff3b fix: do not set up full theila runtime during clients tests
4bf33bc fix: immediately fail the request if the cluster is down
124a5c2 fix: ensure the created date on resources is set
14161bf feat: add scale up integration test and minor log fixes
7af06fd feat: make integration tests a subtests of one global test
f7c1464 feat: implement log receiver for logs from Talos
5b800ea fix: accumulate bytes received/send in the link resource
b3b1e9b feat: machine removal
fb01bc4 fix: use Talos 1.2.0
3a50efe feat: filter machines that can be added to cluster
ba62db5 fix: properly parse siderolink-api-advertised-url if there's no port
96f835a fix: properly display node selectors in FireFox
12c20a4 fix: populate disks when machines are connected during cluster create
0dc97f8 fix: adjust overview page to look closer to the mockups
2b77af8 feat: add the chart showing the count of clusters
a1dff65 feat: implement ISO download with embedded kernel args
37c03d8 test: pull kubeconfig and interact with Kubernetes API
75bfb08 fix: ignore the error on splitting host/port
3be5a32 feat: make the whole cluster list item clickable, add dropdown menu item
2c9dc99 fix: adjust the look of the Overview page a bit
aa4a926 feat: add the button for downloading cluster Kubeconfig on overview page
4532de6 feat: support basic auth in argesctl command
b66bb3c feat: add summary information Overview page
3bdbce4 test: more cluster creation tests, two clusters, cleanup
3b00bd5 fix: improve cluster deletion and node reset flow
2d83d16 test: create a cluster and verify cluster machine statuses
f471cfd fix: copy all labels from the ClusterMachine to ClusterMachineStatus
ec32f86 test: add integration tests up to the cluster creation
a8d3ee5 feat: add kubeconfig command to argesctl and fix kubeconfig
10b9a3b test: implement API integration test
3e6b891 feat: aggregate cluster machine statuses in cluster status controller
f6cbc58 chore: ignore empty processor info
c5fc71b fix: clean up Kubernetes client and configs when a cluster is destroyed
e8478fe fix: properly use tracker to cleanup ClusterMachineConfig resources
044fcad fix: make MachineStatusController connect to configured nodes
2867099 feat: add api endpoint to fetch kubeconfig
5f32667 test: support registry mirrors for development purposes
5114695 refactor: consistent flag naming
9ffb19e chore: use latest node
5512321 refactor: set better defaults for cli args
ff88242 chore: mark 'siderolink-wireguard-endpoint' flags as required
4a9d9ad feat: add the ClusterMachineStatus resource
e4e8b62 refactor: unify all Arges API under a single HTTP server
5af9049 chore: rename sidebar item
a4fc47f chore: fix build warning
547b83c chore: bump siderolink version
11c31f3 refactor: drop one of the layered gRPC servers
0adbbb7 feat: introduce a way to copy kernel arguments from the UI
ce5422a fix: import new COSI library to fix YAML marshaling
d6cec09 feat: implement Arges API client, and minimal argesctl
65c8d68 feat: implement cluster creation view
8365b00 feat: re-enable old Theila UI
63e703c fix: update Talos to the latest master
d33e27b feat: implement clusters list view
cb9e23c feat: protect Theila state from external API access
952c235 fix: properly allocated ports in the loadbalancer
a58c479 chore: report siderolink events kernel arg
8a56fe3 refactor: move Theila resources to public pkg/
1251699 fix: reset the MachineEventsSnapshot after the node is reset
9a2e6af feat: implement bootstrap controller
7107e27 feat: implement apply and reset config controller
1579eb0 feat: implement machine events handler and ClusterStatus
7214f4a feat: implement cluster load balancer controller
9c4fafa feat: add a controller that manages load balancers for talos clusters
7e3d80c feat: add a resources that specify configurations for load balancers
dc0d356 feat: support Theila runtime watch with label selectors
6a568a7 feat: implement ClusterMachineConfig resource and it's controller
3db0f1c feat: implement TalosConfig controller
b7ae8e1 feat: introduce Cluster controller that adds finalizers on Clusters
8d7ea02 chore: use label selectors in TalosConfig, set labels on the resources
cff9cb1 fix: separate advertised endpoint from the actual wireguard endpoint
5be6cc3 feat: implement cluster creation UI
a1633eb chore: add typed wrappers around State, Reader and Writer
5515f3d feat: add ClusterSecrets resource and controller and tests
7226f6c feat: add Cluster, ClusterMachine and TalosConfig resources
ec44930 feat: enable vtprotobuf optimized marshaling
15be219 feat: generate TS constants from go //tsgen: comments
caa4c4d fix: resource equality for proto specs
beeca88 refactor: clarify code that creates or gets links for nodes
340c63a feat: implement Machines page
f7bc0c6 feat: accept nodes if they provide the correct join token
bdf789a feat: immediately reconnect SideroLink peers after Arges restart
6b74fa8 feat: implement MachineStatusController
f5db0e0 feat: add more info to the siderolink connection spec
d3e4a71 refactor: simplify the usage of gRPC resource CRUD API
2430115 feat: implement MachineController and small fixes
e31d22d feat: support running Theila without contexts
a6b3646 refactor: small fixes
33d2b59 refactor: clean up a bit SideroLink code, fix shutdown
98ec883 chore: rename main executable to avoid clashing with Theila project
828721d feat: enable COSI persistence for resources
f1f7883 feat: set up siderolink endpoints in Theila
6439335 refactor: migrate to typed.Resource in Theila internal state
6195274 refactor: restructure folders in the project
1abf72b chore: update Talos libs to the latest version
16dffd9 fix: display delta time for pod's age
8b80726 feat: update favicon to sidero logo
2da7378 feat: show the extended hardware info
d3c6004 chore: allow getting resources without version and group
eb19087 fix: remove t-header error notification
5a28202 feat: restyle t-alert component
9f2b482 fix: get rid of racy code in the kubeconfig request code
c40824e feat: add text Highlight feature
9018c81 feat: use ~/.talos/config as a primary source for clusters
e10547b refactor: remove old components and not used code parts
f704684 fix: properly calculate servers capacity
755a077 fix: use proper units for memory and CPU charts on the node monitor page
d0a083d release(v0.2.0-alpha.0): prepare release
53878ee fix: properly update servers menu item when the context is changed
b4cb9c7 feat: restyle TMonitor page
f0377e2 fix: invert chart value for cpu, storage and memory on the overview page
6ea6ecf fix: update capi-utils to fix talosconfig requests for CAPI clusters
e3796d3 chore: update capi-utils
39186eb feat: implement overview page, cluster dropdown, ongoing tasks
59f2b27 docs: update README.md
2b7831f feat: add Kubernetes and Servers pages
4451a5b fix: properly set TaskStatus namespace in the initial call
4545464 fix: add new fields to the TaskStatus spec, update Talos
891cf3b docs: describe client context types, usage
309b515 feat: update k8s upgrades tasks structure for the new UI representation
5aa8ca2 feat: add NodesPage
db434e0 feat: add TPagination component
0b51727 feat: add Pods, Dashboard, Upgrade views, etc
c549b8b feat: add Overview and Upgrade Kubernetes pages
cec2e85 chore: define constants for all used resource types
962bdaf feat: add TSideBar
fa28ccb feat: add TheHeader component
f3418a5 feat: button;icons;config
db30f50 fix: add frontend/node_modules to gitignore
a675b86 fix: properly pass label selector to the metadata in ClusterListItem
7911d6a chore: add ability to start local development server for the frontend
076fee1 feat: use CAPI utils for CAPI requests
5ed5ba2 fix: more websocket client bugfixes
6fe22ad fix: reset reconnect timeouts after the client is reconnected
c4b144a fix: talosconfig/kubeconfig when using the default context
b439a37 fix: properly handle Same-Origin header in websockets
ffffed1 fix: read node name from nodename resource instead of hostname
2d6f984 fix: use secure websockets if the page itself is using https
799f2d2 feat: rework the node overview page
0d0eaf4 fix: make charts height resize depending on the screen height
7de0101 fix: use polyfill to fix streaming APIs on Firefox
0cff2b0 feat: small UI adjustments
d70bd41 feat: implement accept Sidero server functional
f3a6e16 feat: add top processes list to the Overview page
3cf97e4 refactor: use the same object for gRPC metadata context and messages
243206f release(v0.1.0-alpha.2): prepare release
e5b6f29 feat: implement node Reset
bcb7d23 fix: node IP not being truncated
e576d33 feat: add upgrade UI for CAPI clusters
10cdce7 fix: server labels key/value order and chevron orientation
4007177 feat: implement Kubernetes upgrade UI components
f4917ee fix: accumulate chart updates into a single update
414d76c feat: implement upgrade controller
36742ea feat: introduce create, delete and update gRPC APIs
2b3d314 feat: install internal COSI runtime alongside with K8s and Talos
ae7f784 refactor: move all generated TypeScript files under frontend/src/api
61bad64 release(v0.1.0-alpha.1): prepare release
8e5e722 feat: implement node reboot controls
9765a88 feat: dmesg logs page
ecbbd67 feat: use updated timestamp to display event time on the graph
7c56773 refactor: use Metadata to pass context in all gRPC calls
abb4733 feat: implement service logs viewer
8e8e032 feat: add ability to pick sort order on the servers page
1a1c728 fix: resolve the issue with idFn value generating undefined ids
2e83fe2 feat: allow filtering servers by picking from predefined categories
48f776e fix: navigate home when changing the context
a1ce0ca fix: resolve services search issues
5b768f8 feat: make stacked lists searchable
ec1bc5b feat: implement stats component and add stats to the servers page
1a85999 feat: align Sidero servers list outlook with the wireframes
524264c fix: display error message and use proper layout for the spinner
5263d16 feat: introduce node stats page
8feb35e feat: make root sidebar sections collapsible
36ad656 feat: detect cluster capabilities
a25d90d feat: support switching context in the UI
67903e2 refactor: separate Watch from StackedList
76b9e1d release(v0.1.0-alpha.0): prepare release
7bde4c8 fix: cobra command was initialized but not actually used
04624c9 feat: support getting Talos and Kubernetes client configs for a cluster
219b9c8 feat: implement notifications component
f8b19a0 feat: decouple watch list from the view
2f8c96e feat: implement appearance settings modal window
de745d6 feat: implement Talos runtime backend
af69a0d feat: support getting Kubernetes resource through gRPC gateway
2c50010 feat: implement breadcrumbs component, add support for table header
3fc1e80 feat: implement nodes view
961e93a feat: implement clusters view
e8248ff feat: use plain zap instead of SugaredLogger everywhere
81ba93d chore: generate websocket protocol messages using protobuf
37a878d feat: make JS websocket reconnect on connection loss
23b3281 feat: use dynamic watcher to allow listing any kinds of resources
16475f5 feat: implement real time update server on top of web sockets
76b39ae feat: create hello world Vue app using Kres
baab493 Initial commit

Dependency Changes

This release has no dependency changes

Files

CHANGELOG.md

Latest commit

History

CHANGELOG.md

File metadata and controls

Omni 0.45.0-beta.0 (2024-12-12)

Service Account Management UI

New SBC Support

User Management CLI

Contributors

Changes

Changes from siderolabs/crypto

Changes from siderolabs/discovery-service

Changes from siderolabs/go-kubernetes

Changes from siderolabs/image-factory

Dependency Changes

Omni 0.44.0-beta.0 (2024-11-06)

Automatically Resolve Cluster in talosctl

Reset Removed Machines

Contributors

Changes

Changes from siderolabs/crypto

Changes from siderolabs/discovery-api

Changes from siderolabs/discovery-client

Changes from siderolabs/discovery-service

Changes from siderolabs/gen

Changes from siderolabs/go-circular

Changes from siderolabs/go-kubernetes

Changes from siderolabs/grpc-proxy

Changes from siderolabs/proto-codec

Changes from siderolabs/siderolink

Dependency Changes

Omni 0.43.0 (2024-10-11)

gRPC Tunnel

Talos Diagnostics

Contributors

Changes

Changes since v0.43.0-beta.0

Dependency Changes

Omni 0.43.0-beta.0 (2024-10-09)

gRPC Tunnel

Talos Diagnostics

Contributors

Changes

Dependency Changes

Omni 0.42.0-beta.0 (2024-09-06)

Allow multiple IP's in siderolink-wireguard-advertised-addr flag

Audit log

Cluster Sort

TLS Cert Reload

Contributors

Changes

Changes from siderolabs/discovery-service

Changes from siderolabs/go-api-signature

Changes from siderolabs/go-debug

Changes from siderolabs/go-talos-support

Changes from siderolabs/image-factory

Dependency Changes

Omni 0.41.0-beta.0 (2024-08-16)

Contributors

Changes

Dependency Changes

Omni 0.40.0-beta.0 (2024-07-26)

Support Bundle

Show Total Items

Contributors

Changes

Changes from siderolabs/go-api-signature

Changes from siderolabs/go-kubernetes

Changes from siderolabs/grpc-proxy

Changes from siderolabs/image-factory

Dependency Changes

Omni 0.40.0 (2024-07-26)

Support Bundle

Show Total Items

Contributors

Changes

Changes from siderolabs/go-api-signature

Changes from siderolabs/go-kubernetes

Automatically Resolve Cluster in `talosctl`

`gRPC` Tunnel

`gRPC` Tunnel

Allow multiple IP's in `siderolink-wireguard-advertised-addr` flag

`omnictl` Version Warnings