Migration from Sidero-hosted Omni to self-hosted Omni.

[shrinedogg]

Was trying to do this migration this entire weekend, and is at a hard stop. 😮‍💨

omnictl cluster import requires os:admin access to read Talos sensitive resources, but you only have access to os:operator (max allowed by hosted Omni). Break-glass is either not enabled or I cannot activate it.

I minted the kubernetesTalosAPIAccess ServiceAccount and hit a node directly. version works, but get machineconfig > PermissionDenied: not authorized. And Omni forbids os:admin in allowedRoles (the config apply was rejected, so I had to use os:operator). Ceiling confirmed.

Has anyone tried and accomplished this feat? How do I get Break-Glass on my account? 😞

[rothgar]

Sorry but Omni to Omni migration is not possible at this point in time. We would need to implement a cluster export feature from Omni first.

[shrinedogg]

😞

[cicklolwut]

Was trying to do the same thing - was hoping to do omnictl cluster import, but without break-glass, impossible, and there's no support contact to enable break-glass (business or enterprise only?)

[rothgar]

break glass is currently an optional flag on Omni and we'll be enabling it for all SaaS accounts in the future (no support ticket needed). I don't know the timeline to deploy that change, but it's been discussed internally.