v0.35.0-beta.0

Omni 0.35.0-beta.0 (2024-05-09)

Welcome to the v0.35.0-beta.0 release of Omni!
This is a pre-release of Omni

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Auth With Username/Password

Omni now shows the error about unverified Auth0 emails.

Machine Extensions

It is now possible to see currently installed system extensions for each machine in the UI and change them there.
It is also possible to configure machines' system extensions during cluster creation and scaling.

Also Talos upgrades from 1.5.x -> 1.6.x+ will make Omni automatically pick up kernel modules which are no longer
included in Talos >= 1.6.x.

Machine Join Configs

Partial config for joining Talos nodes running in maintenance mode can now be downloaded from the Omni UI.

Machine Status

Talos machine status is now composed both from Talos events (push model).
And from Talos node MachineStatus resource (pull model).
This way even if the node gets disconnected from Omni for a long time, Omni won't lose any important events.

Settings UI

Admin settings UI (backups and users) is now unified under the single page with tabs.

Contributors

• Artem Chernyshev
• Utku Ozdemir
• Andrey Smirnov
• Simon-Boyer

Changes

23 commits

• 3aea4dd release(v0.35.0-beta.0): prepare release
• 16108a9 feat: allow setting some url params for api endpoint
• 041a436 feat: unify admin settings under Settings page
• 987f8cd feat: improve auth flow when user email is not verified
• 5b8c130 feat: imlpement the UI for configuring extensions during cluster create
• f6cd840 feat: implement the page that shows list of extensions per node
• 89fa1ad fix: make MachineSetNodeController handle machinesets without clusters
• fa3c9ff feat: automatically pick up extensions when upgrading Talos
• f40c552 chore: use new Auth0 app for CI
• 23d5532 fix: invert the order of recent clusters
• baec123 fix: do not allow adding ISO, PXE nodes running different Talos version
• 264fb35 chore: bump go-kubernetes module
• 2c42f5c feat: add button to overview page to download partial machine config
• 95197e2 feat: improve reliability of machine status snapshots
• ac4fcd8 fix: drop outdated SchematicConfigurationController finalizer
• 7953a49 fix: ignore unknown machine version on the cluster create page
• fbe196e test: use Talos nodes with partial config in integration tests
• 4b50d7c test: fix flaky test by longer k8s node checks and retries
• a32cb8a fix: start watch before delete in omnictl delete
• 40033da fix: remove MachineSetNodes after links removal
• 29667ef fix: make cluster machine install disk selector pick correct disk
• 18e41f8 fix: issue with etcd watch cancel
• 7f58ea4 fix: allow adding machines to Omni at higher speed

Changes from siderolabs/go-kubernetes

1 commit

• ddd4c69 feat: add support for Kubernetes 1.30

Dependency Changes

• github.com/aws/smithy-go v1.20.2 new
• github.com/cosi-project/runtime v0.4.1 -> v0.4.2
• github.com/cosi-project/state-etcd v0.2.8 -> v0.2.9
• github.com/rs/xid v1.5.0 new
• github.com/siderolabs/go-kubernetes v0.2.8 -> v0.2.9
• go.etcd.io/etcd/client/pkg/v3 v3.5.12 -> v3.5.13
• go.etcd.io/etcd/client/v3 v3.5.12 -> v3.5.13
• go.etcd.io/etcd/server/v3 v3.5.12 -> v3.5.13

Previous release can be found at v0.34.0

v0.34.0

Omni 0.34.0 (2024-04-24)

Welcome to the v0.34.0 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Kubernetes Node Audit

Omni now automatically cleans up Kubernetes nodes, which do not have corresponding Omni machines in the cluster.

Talos Overlays Support

Starting from this version Omni can properly handle Talos overlays during upgrades.
When upgrading SBC nodes from 1.6.x -> 1.7.x Omni will automatically add the correct overlay for the SBC.

Downgrades from 1.7.x to 1.6.x is not recommended.

Contributors

• Andrey Smirnov
• Artem Chernyshev
• Andrey Smirnov
• Utku Ozdemir
• Noel Georgi
• Andrew Rynhard
• Andrey Smirnov
• Artem Chernyshev
• Mattias Cockburn
• Dmitriy Matrenichev

Changes

19 commits

• 38503b1 release(v0.34.0): prepare release
• fcfa5cc fix: paginate nodes list page
• 725584c fix: update S3 client for specific GCS workarounds
• ddfaf91 release(v0.34.0-beta.0): prepare release
• d79e863 test: get rid of upgrade test flakiness, fix cli tests
• 6fff261 fix: implement the correct upgrade flow from 1.6.x to 1.7.x for SBC
• 586d2d7 feat: generate overlay info by extracting board kernel args
• 4134d2c chore: use sops for secrets
• f2b975b feat: read overlays from the machine, preserve them during updates
• 340d078 fix: use correct labels struct in the download installation media cmd
• 0d337c2 test: fix the flakiness in the resourcelogger test
• 23dcf32 feat: implement kubernetes node audit controller
• e037975 chore: rekres & fix linting errors
• 8aa6a6a fix: properly select schematics for machine set and machine levels
• 09a7b12 fix: skip empty config patches in ClusterMachineConfigPatches
• aa4d764 fix: always delete removed nodes from discovery service
• 7486bb8 feat: support generating installation media with overlays for Talos 1.7+
• e580f14 test: fix assertion in maintenance config patch test
• bb0618f release(v0.33.0-beta.0): prepare release

Changes since v0.34.0-beta.0

3 commits

• 38503b1 release(v0.34.0): prepare release
• fcfa5cc fix: paginate nodes list page
• 725584c fix: update S3 client for specific GCS workarounds

Changes from siderolabs/discovery-api

1 commit

• e1dc7bb chore: rekres, update dependencies

Changes from siderolabs/discovery-client

13 commits

• ca662d2 feat: export default GRPC dial options for the client
• 7a767fa chore: bump Go, deps and rekres
• f4095a1 chore: bump discovery API to v0.1.4
• fbb1cea fix: keepalive interval calculation
• ff8f4be fix: enable gRPC keepalives
• 9ba5f03 chore: app optional ControlPlane data
• 269a832 chore: rekres, update discovery api
• a5c19c6 feat: provide public IP discovered from the server
• 230f317 fix: reconnect the client on update failure
• ac5ab32 feat: support deleting an affiliate
• 27a5bee chore: rekres
• a9a5e9b feat: initial client code
• 98eb999 chore: initial commit

Changes from siderolabs/go-procfs

12 commits

• 9f72b22 feat: support removing kernel args
• 4b4a6ff chore: rekres
• a062a4c chore: rekres, rename
• 8cbc42d feat: provide an option to overwrite some args in AppendAll
• 24d06a9 refactor: remove talos kernel default args
• a82654e feat: implement SetAll method
• 16ce2ef fix: update cmdline.Set() to drop the value being overwritten
• 5a9a4a7 feat: update kernel args for new KSPP requirements
• 57c7311 refactor: change directory layout
• a077c96 fix: fix go module name
• 698666f chore: move package to new repo
• dabb425 Initial commit

Changes from siderolabs/image-factory

14 commits

• db55c07 release(v0.3.1): prepare release
• 762cf2b fix: generation of SecureBoot ISO
• ae1f0a3 fix: sort extensions in the UI schematic generator
• c2de13f release(v0.3.0): prepare release
• 7062392 chore: update Talos dependency to 1.7.0-beta.0
• 78f8944 feat: add cert issuer regexp option
• c0981e8 feat: add support for -insecure-schematic-service-repository flag
• 5d779bb chore: bump dependencies
• 93eb7de feat: support overlay
• df3d211 release(v0.2.3): prepare release
• [4ccf0e5](https://github.com/siderolabs/image-factory/commit/...

v0.34.0-beta.0

Omni 0.34.0-beta.0 (2024-04-23)

Welcome to the v0.34.0-beta.0 release of Omni!
This is a pre-release of Omni

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Kubernetes Node Audit

Omni now automatically cleans up Kubernetes nodes, which do not have corresponding Omni machines in the cluster.

Talos Overlays Support

Starting from this version Omni can properly handle Talos overlays during upgrades.
When upgrading SBC nodes from 1.6.x -> 1.7.x Omni will automatically add the correct overlay for the SBC.

Downgrades from 1.7.x to 1.6.x is not recommended.

Contributors

• Andrey Smirnov
• Artem Chernyshev
• Andrey Smirnov
• Utku Ozdemir
• Noel Georgi
• Andrew Rynhard
• Andrey Smirnov
• Artem Chernyshev
• Mattias Cockburn
• Dmitriy Matrenichev

Changes

16 commits

• ddfaf91 release(v0.34.0-beta.0): prepare release
• d79e863 test: get rid of upgrade test flakiness, fix cli tests
• 6fff261 fix: implement the correct upgrade flow from 1.6.x to 1.7.x for SBC
• 586d2d7 feat: generate overlay info by extracting board kernel args
• 4134d2c chore: use sops for secrets
• f2b975b feat: read overlays from the machine, preserve them during updates
• 340d078 fix: use correct labels struct in the download installation media cmd
• 0d337c2 test: fix the flakiness in the resourcelogger test
• 23dcf32 feat: implement kubernetes node audit controller
• e037975 chore: rekres & fix linting errors
• 8aa6a6a fix: properly select schematics for machine set and machine levels
• 09a7b12 fix: skip empty config patches in ClusterMachineConfigPatches
• aa4d764 fix: always delete removed nodes from discovery service
• 7486bb8 feat: support generating installation media with overlays for Talos 1.7+
• e580f14 test: fix assertion in maintenance config patch test
• bb0618f release(v0.33.0-beta.0): prepare release

Changes from siderolabs/discovery-api

1 commit

• e1dc7bb chore: rekres, update dependencies

Changes from siderolabs/discovery-client

13 commits

• ca662d2 feat: export default GRPC dial options for the client
• 7a767fa chore: bump Go, deps and rekres
• f4095a1 chore: bump discovery API to v0.1.4
• fbb1cea fix: keepalive interval calculation
• ff8f4be fix: enable gRPC keepalives
• 9ba5f03 chore: app optional ControlPlane data
• 269a832 chore: rekres, update discovery api
• a5c19c6 feat: provide public IP discovered from the server
• 230f317 fix: reconnect the client on update failure
• ac5ab32 feat: support deleting an affiliate
• 27a5bee chore: rekres
• a9a5e9b feat: initial client code
• 98eb999 chore: initial commit

Changes from siderolabs/go-procfs

12 commits

• 9f72b22 feat: support removing kernel args
• 4b4a6ff chore: rekres
• a062a4c chore: rekres, rename
• 8cbc42d feat: provide an option to overwrite some args in AppendAll
• 24d06a9 refactor: remove talos kernel default args
• a82654e feat: implement SetAll method
• 16ce2ef fix: update cmdline.Set() to drop the value being overwritten
• 5a9a4a7 feat: update kernel args for new KSPP requirements
• 57c7311 refactor: change directory layout
• a077c96 fix: fix go module name
• 698666f chore: move package to new repo
• dabb425 Initial commit

Changes from siderolabs/image-factory

14 commits

• db55c07 release(v0.3.1): prepare release
• 762cf2b fix: generation of SecureBoot ISO
• ae1f0a3 fix: sort extensions in the UI schematic generator
• c2de13f release(v0.3.0): prepare release
• 7062392 chore: update Talos dependency to 1.7.0-beta.0
• 78f8944 feat: add cert issuer regexp option
• c0981e8 feat: add support for -insecure-schematic-service-repository flag
• 5d779bb chore: bump dependencies
• 93eb7de feat: support overlay
• df3d211 release(v0.2.3): prepare release
• 4ccf0e5 fix: ignore missing DTB and other SBC artifacts
• c7dba02 chore: run tailwindcss before creating image
• 81f2cb4 chore: bump dependencies, rekres
• 07095cd chore: re-enable govulncheck

Dependency Changes

• github.com/aws/aws-sdk-go-v2 v1.24.1 -> v1.26.1
• github.com/aws/aws-sdk-go-v2/config v1.26.4 -> v1.27.10
• github.com/aws/aws-sdk-go-v2/credentials v1.16.15 -> v1.17.10
• github.com/google/go-containerregistry v0.18.0 -> v0.19.1
• **github.com/promet...

v0.33.2

Omni 0.33.2 (2024-04-17)

Welcome to the v0.33.2 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Contributors

• Artem Chernyshev

Changes

2 commits

• 1893d59 release(v0.33.2): prepare release
• 2461cb1 fix: properly select schematics for machine set and machine levels

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.33.1

v0.33.1

Omni 0.33.1 (2024-04-16)

Welcome to the v0.33.1 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Contributors

• Utku Ozdemir

Changes

2 commits

• d666241 release(v0.33.1): prepare release
• 8b0a6a9 fix: skip empty config patches in ClusterMachineConfigPatches

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.33.0

v0.33.0

Omni 0.33.0 (2024-04-15)

Welcome to the v0.33.0 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Extensions Support

It is now possible to change the list of installed extensions for the machines which are allocated into a cluster.
It can be done using cluster templates.

The extensions list can be defined for all machines of a cluster, machine set or for a particular machine.
Extensions update is done the same way as Talos upgrades.

Machine Allocation Changes

From now on Omni doesn't allow adding machines to a cluster which has lower major or minor version of Talos.
Which means that adding a machine to a cluster which will lead to downgrade of Talos version is no longer possible.
It is done to avoid all kinds of weird issues which Talos downgrades might lead to.

Contributors

• Artem Chernyshev
• Dmitriy Matrenichev
• Utku Ozdemir
• Andrey Smirnov
• Spencer Smith
• Justin Garrison
• Sherif Fanous

Changes

16 commits

• 0ce44c3 release(v0.33.0): prepare release
• 592f916 feat: don't allow downgrades of the machines when adding to a cluster
• 2e015a9 chore: support Auth0 client playing nicely with other OAuth2/OIDC providers
• de4c096 fix: ignore not existing cluster in MachineSet teardown flow
• d3e3eef chore: support WG over GRPC in Omni
• 1cc5fb9 refactor: disable K8s stats for clusters with > 50 nodes
• 1b64824 fix: add missing region input on the backups storage config page
• f70239c fix: ignore modules.dep virtual extension on schematic id calculation
• 1196863 feat: forbid *.acceptedCAs fields in config patches
• 4c179fa chore: bump Go to 1.22.2 and Talos machinery to v1.7.0-beta.0
• b171daa fix: properly render download installation media page in Safari
• 7fb5d2b chore: add barebones compose file
• 9d35dfe chore: bump net library to v0.23.0
• 5dc2eaa fix: prevent link and clustermachine deletion from getting stuck
• ae85293 docs: add screenshot and install link
• 2107c01 feat: support setting extensions list in the cluster template

Changes since v0.33.0-beta.0

1 commit

• 0ce44c3 release(v0.33.0): prepare release

Changes from siderolabs/crypto

2 commits

• c240482 feat: provide dynamic client CA matching
• 2f4f911 feat: add PEMEncodedCertificate wrapper

Changes from siderolabs/siderolink

5 commits

• 5422b1c chore: quick fixes
• 9300968 feat: move actual logic into the agent package
• 8866351 chore: implement WireGuard over GRPC
• 7909156 chore: bump deps
• eb221dd chore: bump deps

Dependency Changes

• github.com/cenkalti/backoff/v4 v4.2.1 -> v4.3.0
• github.com/cosi-project/runtime v0.4.0-alpha.9 -> v0.4.1
• github.com/siderolabs/crypto v0.4.2 -> v0.4.4
• github.com/siderolabs/siderolink v0.3.4 -> v0.3.5
• github.com/siderolabs/talos/pkg/machinery v1.7.0-alpha.1 -> v1.7.0-beta.0
• golang.org/x/crypto v0.19.0 -> v0.21.0
• golang.org/x/net v0.21.0 -> v0.23.0
• golang.org/x/tools v0.16.1 -> v0.19.0
• golang.zx2c4.com/wireguard 12269c276173 new

Previous release can be found at v0.32.0

v0.33.0-beta.0

Omni 0.33.0-beta.0 (2024-04-12)

Welcome to the v0.33.0-beta.0 release of Omni!
This is a pre-release of Omni

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Extensions Support

It is now possible to change the list of installed extensions for the machines which are allocated into a cluster.
It can be done using cluster templates.
The extensions list can be defined for all machines of a cluster, machine set or for a particular machine.
Extensions update is done the same way as Talos upgrades.

Machine Allocation Changes

From now on Omni doesn't allow adding machines to a cluster which has lower major or minor version of Talos.
Which means that adding a machine to a cluster which will lead to downgrade of Talos version is no longer possible.
It is done to avoid all kinds of weird issues which Talos downgrades might lead to.

Contributors

• Artem Chernyshev
• Dmitriy Matrenichev
• Utku Ozdemir
• Andrey Smirnov
• Spencer Smith
• Justin Garrison
• Sherif Fanous

Changes

16 commits

• bb0618f release(v0.33.0-beta.0): prepare release
• 592f916 feat: don't allow downgrades of the machines when adding to a cluster
• 2e015a9 chore: support Auth0 client playing nicely with other OAuth2/OIDC providers
• de4c096 fix: ignore not existing cluster in MachineSet teardown flow
• d3e3eef chore: support WG over GRPC in Omni
• 1cc5fb9 refactor: disable K8s stats for clusters with > 50 nodes
• 1b64824 fix: add missing region input on the backups storage config page
• f70239c fix: ignore modules.dep virtual extension on schematic id calculation
• 1196863 feat: forbid *.acceptedCAs fields in config patches
• 4c179fa chore: bump Go to 1.22.2 and Talos machinery to v1.7.0-beta.0
• b171daa fix: properly render download installation media page in Safari
• 7fb5d2b chore: add barebones compose file
• 9d35dfe chore: bump net library to v0.23.0
• 5dc2eaa fix: prevent link and clustermachine deletion from getting stuck
• ae85293 docs: add screenshot and install link
• 2107c01 feat: support setting extensions list in the cluster template

Changes from siderolabs/crypto

2 commits

• c240482 feat: provide dynamic client CA matching
• 2f4f911 feat: add PEMEncodedCertificate wrapper

Changes from siderolabs/siderolink

5 commits

• 5422b1c chore: quick fixes
• 9300968 feat: move actual logic into the agent package
• 8866351 chore: implement WireGuard over GRPC
• 7909156 chore: bump deps
• eb221dd chore: bump deps

Dependency Changes

• github.com/cenkalti/backoff/v4 v4.2.1 -> v4.3.0
• github.com/cosi-project/runtime v0.4.0-alpha.9 -> v0.4.1
• github.com/siderolabs/crypto v0.4.2 -> v0.4.4
• github.com/siderolabs/siderolink v0.3.4 -> v0.3.5
• github.com/siderolabs/talos/pkg/machinery v1.7.0-alpha.1 -> v1.7.0-beta.0
• golang.org/x/crypto v0.19.0 -> v0.21.0
• golang.org/x/net v0.21.0 -> v0.23.0
• golang.org/x/tools v0.16.1 -> v0.19.0
• golang.zx2c4.com/wireguard 12269c276173 new

Previous release can be found at v0.32.0

v0.32.2

Omni 0.32.2 (2024-04-08)

Welcome to the v0.32.2 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Contributors

• Utku Ozdemir
• Spencer Smith

Changes

3 commits

• c738077 release(v0.32.2): prepare release
• a678451 chore: bump net library to v0.23.0
• be3b9ab fix: ignore modules.dep virtual extension on schematic id calculation

Dependency Changes

• golang.org/x/crypto v0.19.0 -> v0.21.0
• golang.org/x/net v0.21.0 -> v0.23.0

Previous release can be found at v0.32.1

v0.32.1

Omni 0.32.1 (2024-04-03)

Welcome to the v0.32.1 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Contributors

• Utku Ozdemir

Changes

2 commits

• 7017abc release(v0.32.1): prepare release
• 8ee8000 fix: prevent link and clustermachine deletion from getting stuck

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.32.0

v0.31.2

Omni 0.31.2 (2024-04-03)

Welcome to the v0.31.2 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Contributors

• Utku Ozdemir

Changes

2 commits

• 35a620f release(v0.31.2): prepare release
• 8759aa2 fix: prevent link and clustermachine deletion from getting stuck

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.31.1