v0.38.1

Omni 0.38.1 (2024-06-21)

Welcome to the v0.38.1 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Contributors

• Artem Chernyshev

Changes

2 commits

• 2e8bf65 release(v0.38.1): prepare release
• e0a760a fix: use proper z-index for the tooltip component

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.38.0

v0.38.0

Omni 0.38.0 (2024-06-20)

Welcome to the v0.38.0 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Break-Glass Configs

Omni now allows getting raw Talos and Kubernetes configs that can allow bypassing Omni when
accessing the cluster.

It has a couple of limitations:

• It is available only if is enabled for the account.
• Only os:operator role Talosconfig level is available.
• The cluster will be marked as tainted for the time being, which doesn't affect anything, but is
  the signal that Omni no longer fully controls secrets rotation.

Exposed Services DNS Name

Exposed services now use new naming schema, so it shouldn't be affected by slow DNS updates.

The domain name patter is now: <hash>-<account>.proxy-us.siderolabs.io.

Kubeconfig Authcode-Keyboard

It is now possible to generate kubeconfig with --grant-type=authcode-keyboard and Omni
supports that mode.
This mode will print a URL and ask for a one time code instead of starting a local HTTP server on port 8000.
Clicking the URL will open the same Omni page as usual, but will present you the one time code instead of doing redirect.

This mode is useful for remote machine kubectl execution and removes the need to set up ssh port-forwarding.

Machine Logs

Machine logs are now stored using new persitent circular buffer library, which has better write efficiency.

Pending Updates

Omni UI now shows pending config changes which are not applied due to locked machines in the cluster.

Contributors

• Artem Chernyshev
• Utku Ozdemir
• Andrey Smirnov
• Dmitriy Matrenichev
• Andrey Smirnov
• Grzegorz Rozniecki

Changes

35 commits

• 67eb768 release(v0.38.0): prepare release
• 11f7edb fix: do not use created time of the ClusterMachineTalosVersion in sort
• 61b0e4c fix: use proper index for the Tooltip
• d8df8af fix: do not use time namespace to parseDuration
• 1d92ae5 release(v0.38.0-beta.0): prepare release
• 4109996 fix: make MachineSetNode controller select only connected machines
• 2457897 fix: use un-cached list in the MachineSetNodeController
• 73529c2 fix: display descriptions when show description checkbox is clicked
• 6a59d63 fix: generate schematics with the extensions, meta and kernel args
• 87a7750 chore: add Akamai installation media
• fa64b46 fix: skip invalid machines in TalosUpgradeStatusController
• 22bb2cc fix: use proper types in the machine status and snapshot controllers
• a2b7b53 feat: use the new domain scheme for exposed services
• 4ecb175 fix: handle panics in Omni and Talos UI watches
• 6286340 fix: properly delete the item from the cached items slice
• 63ad5bd feat: provide a way to getadmin talosconfig and kubeconfig
• fa21349 fix: properly generate maintenance config patches
• 2e64c31 fix: ignore not found ClusterMachine in the migrations
• a2c3802 fix: validate user email on creation
• 73d0d3b fix: properly detect authcode-keyboard oidc mode
• b7a0620 feat: use circular buffer's new persistence option for machine logs
• 7eec6b9 chore: bump COSI runtime to 0.4.5
• 4d23186 feat: show pending config updates due to locked machine
• f98cf51 fix: ignore not found in the MachineStatus and MachineStatusSnapshot
• ce6e15a fix: proper time adjustment to fix flaky TestEtcdManualBackup
• 27491ea chore: upgrade github.com/containers/image to v5
• 3f75f91 fix: change Transport.Address field to Transport.Address method
• e12cfa8 feat: support authcode login in kubectl oidc-login
• 2fcd0fd fix: properly update the pulled images count if some images are skipped
• 5a4251c test: fix a data race in MachineStatusSnapshotController unit tests
• 0965091 test: fix flaky test in ClusterMachineConfigStatus unit tests
• b7d48aa chore: small fixes
• a6c8b47 fix: pass through the talosctl -n args if they cannot be resolved
• 3bab8bf chore: migrate to Vite and Bun to build the frontend
• 37c1a97 fix: use proper routing on the config patch view and edit pages

Changes since v0.38.0-beta.0

4 commits

• 67eb768 release(v0.38.0): prepare release
• 11f7edb fix: do not use created time of the ClusterMachineTalosVersion in sort
• 61b0e4c fix: use proper index for the Tooltip
• d8df8af fix: do not use time namespace to parseDuration

Changes from siderolabs/discovery-client

13 commits

• ca662d2 feat: export default GRPC dial options for the client
• 7a767fa chore: bump Go, deps and rekres
• f4095a1 chore: bump discovery API to v0.1.4
• fbb1cea fix: keepalive interval calculation
• ff8f4be fix: enable gRPC keepalives
• 9ba5f03 chore: app optional ControlPlane data
• 269a832 chore: rekres, update discovery api
• a5c19c6 feat: provide public IP discovered from the server
• 230f317 fix: reconnect the client on update failure
• ac5ab32 feat: support deleting an affiliate
• 27a5bee chore: rekres
• a9a5e9b feat: initial client code
• 98eb999 chore: initial commit
  <...

v0.38.0-beta.0

Omni 0.38.0-beta.0 (2024-06-18)

Welcome to the v0.38.0-beta.0 release of Omni!
This is a pre-release of Omni

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Break-Glass Configs

Omni now allows getting raw Talos and Kubernetes configs that can allow bypassing Omni when
accessing the cluster.

It has a couple of limitations:

• It is available only if is enabled for the account.
• Only os:operator role Talosconfig level is available.
• The cluster will be marked as tainted for the time being, which doesn't affect anything, but is
  the signal that Omni no longer fully controls secrets rotation.

Exposed Services DNS Name

Exposed services now use new naming schema, so it shouldn't be affected by slow DNS updates.

The domain name patter is now: <hash>-<account>.proxy-us.siderolabs.io.

Kubeconfig Authcode-Keyboard

It is now possible to generate kubeconfig with --grant-type=authcode-keyboard and Omni
supports that mode.
This mode will print a URL and ask for a one time code instead of starting a local HTTP server on port 8000.
Clicking the URL will open the same Omni page as usual, but will present you the one time code instead of doing redirect.

This mode is useful for remote machine kubectl execution and removes the need to set up ssh port-forwarding.

Machine Logs

Machine logs are now stored using new persitent circular buffer library, which has better write efficiency.

Pending Updates

Omni UI now shows pending config changes which are not applied due to locked machines in the cluster.

Contributors

• Artem Chernyshev
• Utku Ozdemir
• Andrey Smirnov
• Dmitriy Matrenichev
• Andrey Smirnov
• Grzegorz Rozniecki

Changes

31 commits

• 1d92ae5 release(v0.38.0-beta.0): prepare release
• 4109996 fix: make MachineSetNode controller select only connected machines
• 2457897 fix: use un-cached list in the MachineSetNodeController
• 73529c2 fix: display descriptions when show description checkbox is clicked
• 6a59d63 fix: generate schematics with the extensions, meta and kernel args
• 87a7750 chore: add Akamai installation media
• fa64b46 fix: skip invalid machines in TalosUpgradeStatusController
• 22bb2cc fix: use proper types in the machine status and snapshot controllers
• a2b7b53 feat: use the new domain scheme for exposed services
• 4ecb175 fix: handle panics in Omni and Talos UI watches
• 6286340 fix: properly delete the item from the cached items slice
• 63ad5bd feat: provide a way to getadmin talosconfig and kubeconfig
• fa21349 fix: properly generate maintenance config patches
• 2e64c31 fix: ignore not found ClusterMachine in the migrations
• a2c3802 fix: validate user email on creation
• 73d0d3b fix: properly detect authcode-keyboard oidc mode
• b7a0620 feat: use circular buffer's new persistence option for machine logs
• 7eec6b9 chore: bump COSI runtime to 0.4.5
• 4d23186 feat: show pending config updates due to locked machine
• f98cf51 fix: ignore not found in the MachineStatus and MachineStatusSnapshot
• ce6e15a fix: proper time adjustment to fix flaky TestEtcdManualBackup
• 27491ea chore: upgrade github.com/containers/image to v5
• 3f75f91 fix: change Transport.Address field to Transport.Address method
• e12cfa8 feat: support authcode login in kubectl oidc-login
• 2fcd0fd fix: properly update the pulled images count if some images are skipped
• 5a4251c test: fix a data race in MachineStatusSnapshotController unit tests
• 0965091 test: fix flaky test in ClusterMachineConfigStatus unit tests
• b7d48aa chore: small fixes
• a6c8b47 fix: pass through the talosctl -n args if they cannot be resolved
• 3bab8bf chore: migrate to Vite and Bun to build the frontend
• 37c1a97 fix: use proper routing on the config patch view and edit pages

Changes from siderolabs/discovery-client

13 commits

• ca662d2 feat: export default GRPC dial options for the client
• 7a767fa chore: bump Go, deps and rekres
• f4095a1 chore: bump discovery API to v0.1.4
• fbb1cea fix: keepalive interval calculation
• ff8f4be fix: enable gRPC keepalives
• 9ba5f03 chore: app optional ControlPlane data
• 269a832 chore: rekres, update discovery api
• a5c19c6 feat: provide public IP discovered from the server
• 230f317 fix: reconnect the client on update failure
• ac5ab32 feat: support deleting an affiliate
• 27a5bee chore: rekres
• a9a5e9b feat: initial client code
• 98eb999 chore: initial commit

Dependency Changes

• github.com/containers/image/v5 v5.31.0 new
• github.com/cosi-project/runtime 15e9d678159d -> v0.4.6
• github.com/siderolabs/discovery-client v0.1.9 new

Previous release can be found at v0.37.0

v0.37.5

Omni 0.37.5 (2024-06-13)

Welcome to the v0.37.5 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Contributors

• Artem Chernyshev

Changes

2 commits

• 4efdd08 release(v0.37.5): prepare release
• 755289d fix: properly delete the item from the cached items slice

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.37.4

v0.37.4

Omni 0.37.4 (2024-06-12)

Welcome to the v0.37.4 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Contributors

• Artem Chernyshev

Changes

2 commits

• 855359b release(v0.37.4): prepare release
• a54cc0f fix: properly generate maintenance config patches

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.37.3

v0.37.3

Omni 0.37.3 (2024-06-11)

Welcome to the v0.37.3 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Contributors

• Artem Chernyshev

Changes

2 commits

• e32e50c release(v0.37.3): prepare release
• 63b2815 fix: ignore not found ClusterMachine in the migrations

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.37.2

v0.37.2

Omni 0.37.2 (2024-06-10)

Welcome to the v0.37.2 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Contributors

• Andrey Smirnov
• Andrey Smirnov
• Artem Chernyshev
• Utku Ozdemir
• Dmitriy Matrenichev

Changes

3 commits

• c6cc18f release(v0.37.2): prepare release
• 7d15a88 chore: bump COSI runtime to 0.4.5
• c2f4ba0 fix: ignore not found in the MachineStatus and MachineStatusSnapshot

Changes from siderolabs/discovery-client

13 commits

• ca662d2 feat: export default GRPC dial options for the client
• 7a767fa chore: bump Go, deps and rekres
• f4095a1 chore: bump discovery API to v0.1.4
• fbb1cea fix: keepalive interval calculation
• ff8f4be fix: enable gRPC keepalives
• 9ba5f03 chore: app optional ControlPlane data
• 269a832 chore: rekres, update discovery api
• a5c19c6 feat: provide public IP discovered from the server
• 230f317 fix: reconnect the client on update failure
• ac5ab32 feat: support deleting an affiliate
• 27a5bee chore: rekres
• a9a5e9b feat: initial client code
• 98eb999 chore: initial commit

Dependency Changes

• github.com/cosi-project/runtime 15e9d678159d -> v0.4.5
• github.com/siderolabs/discovery-client v0.1.9 new

Previous release can be found at v0.37.1

v0.37.1

Omni 0.37.1 (2024-06-07)

Welcome to the v0.37.1 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Contributors

• Artem Chernyshev
• Utku Ozdemir

Changes

3 commits

• 01945b8 release(v0.37.1): prepare release
• 29724e0 fix: properly update the pulled images count if some images are skipped
• 05de9d8 fix: pass through the talosctl -n args if they cannot be resolved

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.37.0

v0.37.0

Omni 0.37.0 (2024-06-06)

Welcome to the v0.37.0 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Omni Hosted Discovery Service

Omni is now bundled with the discovery service.
If enabled, it will be started on the ipv6 address of the wireguard network.

Then it will be possible to configure clusters to use Omni discovery service
instead of a public one.

Node Overview Page

Node overview page now displays more information about the node.
That includes:

• Machine stage.
• Unmet health check conditions of the Talos MachineStatus.
• CPU, memory and secure boot information.
• The list of labels added to the machine.

Patches UI

The UI now has the page that shows config patches define for a machine.
It includes both cluster level and account level machine patches.

Secureboot Support Added

Omni now fully supports secureboot enabled machines.

Service Events

Node overview page service list now displays information about each service events.
If a service fails to start it will be possible to see why in the UI.

Contributors

• Artem Chernyshev
• Andrey Smirnov
• Andrey Smirnov
• Seán C McCord
• Utku Ozdemir
• Dmitriy Matrenichev
• Alexey Palazhchenko
• Rohit Dandamudi
• Alex Lubbock
• Christian Hüning
• Dennis Marttinen
• Mattias Cockburn
• Noel Georgi
• Petr Krutov
• Philipp Sauter
• Rohit Dandamudi
• Sergey Yakovlev

Changes

31 commits

• 1957b5e release(v0.37.0): prepare release
• 471bbe4 fix: properly set Cache-Control header
• 8eac9c9 fix: fix config generation failure due to secure boot status
• 331fc31 feat: run embedded discovery service in Omni
• 05a6cf8 feat: add Cache-Control header for head requests
• d0cb1bc chore: replace grpc.Dial* with grpc.NewClient
• 02444f6 fix: properly generate machine config input versions in the migration
• a80a9cf fix: read proper resource type in the MachineStatusSnapshot
• 2a525ab release(v0.37.0-beta.0): prepare release
• 800762d chore: rewrite MachineStatus to use QController
• ed26122 fix: implement the controller for handling machine status snapshot
• 6aa2140 feat: display more data on the node overview page
• 5654a49 chore: add renovate.json
• 82abb2b chore: bump deps
• c635827 test: do not use epoch millis in service account names
• 22e3acf chore: bump default Talos version to 1.7.4
• a67d1fb fix: always generate siderolink connection config for all machines
• 9bce82a fix: ignore MachineStatus events timestamps as they're not reliable
• ccca5b5 fix: bump siderolink module version
• f38b7e5 feat: enable ALPN for machine API
• 48cc03a fix: retry affiliate deletes
• 55afa59 feat: add secure boot support
• 0bd2a42 docs: fix a typo in the on-prem installation link
• 247c165 fix: improve wording in authentication error messages
• e2f8407 chore: run rekres
• 4a8ebbf chore: enable codecov and rekres
• 2f1ab0d feat: show service events on the node overview page
• c68a836 fix: use proper name for fetching existing extension configuration
• 4b747f0 feat: add dedicated patch pages for machines and cluster machines
• 4bd0331 fix: get rid of duplicating label completion options
• 631f5c5 chore: always build frontend on BUILDPLATFORM

Changes since v0.37.0-beta.0

8 commits

• 1957b5e release(v0.37.0): prepare release
• 471bbe4 fix: properly set Cache-Control header
• 8eac9c9 fix: fix config generation failure due to secure boot status
• 331fc31 feat: run embedded discovery service in Omni
• 05a6cf8 feat: add Cache-Control header for head requests
• d0cb1bc chore: replace grpc.Dial* with grpc.NewClient
• 02444f6 fix: properly generate machine config input versions in the migration
• a80a9cf fix: read proper resource type in the MachineStatusSnapshot

Changes from siderolabs/discovery-service

52 commits

• 74bca2d feat: export service entrypoint
• 86e1317 feat: log the state file size on load and save
• 417251c fix: fix the panic in loading state from storage
• 10c83d2 release(v1.0.1): prepare release
• 196c609 fix: use shared gRPC buffers, lower buffer size
• a2217bd chore: migrate from wrapped sync.Pool to HashTrieMap
• 8a7a0d4 chore: bump deps
• ea8b8f1 feat: implement state storage
• c551426 feat: migrate grpc-middleware to v2, update deps
• 6af92b5 feat: add support for arm64 builds
• 952dc54 refactor: update dependencies, small cleanups
• 4cf4b6e fix: update Go to 1.21.3
• c939fef chore: fix typo on landing page
• 12d9689 chore: update dependencies, rekres
• 912943a test: add test on client redirect
• 8db8ef3 feat: add an option to redirect all clients to a fixed endpoint...

v0.37.0-beta.0

Omni 0.37.0-beta.0 (2024-06-04)

Welcome to the v0.37.0-beta.0 release of Omni!
This is a pre-release of Omni

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Node Overview Page

Node overview page now displays more information about the node.
That includes:

• Machine stage.
• Unmet health check conditions of the Talos MachineStatus.
• CPU, memory and secure boot information.
• The list of labels added to the machine.

Patches UI

The UI now has the page that shows config patches define for a machine.
It includes both cluster level and account level machine patches.

Secureboot Support Added

Omni now fully supports secureboot enabled machines.

Service Events

Node overview page service list now displays information about each service events.
If a service fails to start it will be possible to see why in the UI.

Contributors

• Artem Chernyshev
• Andrey Smirnov
• Utku Ozdemir
• Dmitriy Matrenichev
• Christian Hüning
• Mattias Cockburn
• Petr Krutov

Changes

23 commits

• 2a525ab release(v0.37.0-beta.0): prepare release
• 800762d chore: rewrite MachineStatus to use QController
• ed26122 fix: implement the controller for handling machine status snapshot
• 6aa2140 feat: display more data on the node overview page
• 5654a49 chore: add renovate.json
• 82abb2b chore: bump deps
• c635827 test: do not use epoch millis in service account names
• 22e3acf chore: bump default Talos version to 1.7.4
• a67d1fb fix: always generate siderolink connection config for all machines
• 9bce82a fix: ignore MachineStatus events timestamps as they're not reliable
• ccca5b5 fix: bump siderolink module version
• f38b7e5 feat: enable ALPN for machine API
• 48cc03a fix: retry affiliate deletes
• 55afa59 feat: add secure boot support
• 0bd2a42 docs: fix a typo in the on-prem installation link
• 247c165 fix: improve wording in authentication error messages
• e2f8407 chore: run rekres
• 4a8ebbf chore: enable codecov and rekres
• 2f1ab0d feat: show service events on the node overview page
• c68a836 fix: use proper name for fetching existing extension configuration
• 4b747f0 feat: add dedicated patch pages for machines and cluster machines
• 4bd0331 fix: get rid of duplicating label completion options
• 631f5c5 chore: always build frontend on BUILDPLATFORM

Changes from siderolabs/go-circular

3 commits

• cbce5c3 feat: add persistence support
• 3c48c53 feat: implement extra compressed chunks
• 835f04c chore: rekres, update dependencies

Changes from siderolabs/go-tail

1 commit

• 7cb7294 fix: remove unexpected short read error

Changes from siderolabs/image-factory

10 commits

• 819432c release(v0.4.1): prepare release
• 4f3206b release(v0.4.0): prepare release
• b0b6bff feat: implement wizard-like UI for the Image Factory
• 8ccd284 feat: allow key-based image verification as option
• 4643056 chore: rekres/update dependencies
• 116721a fix: workaround extension name inconsistencies
• f5bc497 release(v0.3.3): prepare release
• 221b442 feat: support zstd compression
• 40a13c5 release(v0.3.2): prepare release
• 2fe6825 fix: generation of overlay installer images

Changes from siderolabs/siderolink

1 commit

• 3a587fc fix: do not ever skip updates which have remove flag

Dependency Changes

• github.com/auth0/go-jwt-middleware/v2 v2.2.0 -> v2.2.1
• github.com/aws/aws-sdk-go-v2 v1.26.1 -> v1.27.0
• github.com/aws/aws-sdk-go-v2/config v1.27.10 -> v1.27.16
• github.com/aws/aws-sdk-go-v2/credentials v1.17.10 -> v1.17.16
• github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.15.8 -> v1.16.21
• github.com/aws/aws-sdk-go-v2/service/s3 v1.47.6 -> v1.54.3
• github.com/cosi-project/runtime v0.4.2 -> v0.4.3
• github.com/emicklei/dot v1.6.1 -> v1.6.2
• github.com/hashicorp/vault/api v1.10.0 -> v1.14.0
• github.com/hashicorp/vault/api/auth/kubernetes v0.5.0 -> v0.7.0
• github.com/johannesboyne/gofakes3 f005f5cc03aa -> 99de01ee122d
• github.com/prometheus/client_golang v1.19.0 -> v1.19.1
• github.com/siderolabs/go-circular v0.1.0 -> v0.2.0
• github.com/siderolabs/go-tail v0.1.0 -> v0.1.1
• github.com/siderolabs/image-factory v0.3.1 -> v0.4.1
• github.com/siderolabs/siderolink v0.3.7 -> v0.3.8
• github.com/siderolabs/talos/pkg/machinery v1.7.2 -> 4feb94ca0997
• github.com/zitadel/logging v0.5.0 -> v0.6.0
• go.etcd.io/bbolt v1.3.9 -> v1.3.10
• go.etcd.io/etcd/client/pkg/v3 v3.5.13 -> v3.5.14
• go.etcd.io/etcd/client/v3 v3.5.13 -> v3.5.14
• go.etcd.io/etcd/server/v3 v3.5.13 -> v3.5.14
• golang.org/x/tools v0.20.0 -> v0.21.0
• google.golang.org/grpc v1.63.2 -> v1.64.0
• k8s.io/api v0.30.0-rc.1 -> v0.30.1
• k8s.io/apimachinery v0.30.0-rc.1 -> v0.30.1
• k8s.io/client-go v0.30.0-rc.1 -> v0.30.1
• sigs.k8s.io/controller-runtime v0.16.3 -> v0.18.3

Previous release can be found at v0.36.0