v0.42.3

Omni 0.42.3 (2024-09-17)

Welcome to the v0.42.3 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Contributors

• Artem Chernyshev

Changes

3 commits

• 12e9a65 release(v0.42.3): prepare release
• 89860d5 fix: call deprovision only after the machine request status is deleted
• 42218d0 release(v0.42.2): prepare release

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.42.2

v0.42.2

Omni 0.42.2 (2024-09-17)

Welcome to the v0.42.2 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Contributors

• Artem Chernyshev

Changes

3 commits

• 465f5a1 fix: update COSI runtime
• b2c9b61 release(v0.42.1): prepare release
• fefbb18 fix: pin apexcharts version to 3.45.2

Changes since v0.42.1

1 commit

• 465f5a1 fix: update COSI runtime

Dependency Changes

• github.com/cosi-project/runtime v0.6.1 -> v0.6.3
• github.com/cosi-project/state-etcd v0.3.1 -> v0.3.2

Previous release can be found at v0.42.0

v0.42.1

Omni 0.42.1 (2024-09-12)

Welcome to the v0.42.1 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Contributors

• Artem Chernyshev

Changes

2 commits

• b2c9b61 release(v0.42.1): prepare release
• fefbb18 fix: pin apexcharts version to 3.45.2

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.42.0

v0.42.0

Omni 0.42.0 (2024-09-10)

Welcome to the v0.42.0 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Allow multiple IP's in siderolink-wireguard-advertised-addr flag

The siderolink-wireguard-advertised-addr flag now accepts multiple IP addresses separated by commas. This is useful
when you have multiple IPs (IPv4 and IPv6) on the host machine and want to allow Talos nodes to connect to the Omni
using any of them.

Audit log

It is now possible to get the audit log from the Omni. By default it's disabled. To enable, pass
--audit-log-dir <dir> to the Omni. The audit log will be written to the specified directory, separated by day.

Retention is set to 30 days (including the current day). The audit log is written in JSON format, where each entry is
a JSON object.

There are two ways to get audit log, and for both you need Admin role:

1. By using the UI: Simply click "Download audit log" in the main menu.
2. Using omnictl audit-log command. This command will stream the audit log from the Omni to the local machine stdout.

Cluster Sort

Cluster list on Clusters page can now be sorted by name or creation date.
Before it was always sorted by creation date (newest first).

TLS Cert Reload

Omni service can now reload the TLS certs without restart.

Contributors

• Artem Chernyshev
• Dmitriy Matrenichev
• Andrey Smirnov
• Utku Ozdemir
• Noel Georgi
• Justin Garrison

Changes

31 commits

• 06a1553 release(v0.42.0): prepare release
• 4ed9049 fix: hide download audit log button if audit logs feature is disabled
• b6b252e fix: use YAML representation in omnictl get
• 44e1c5d release(v0.42.0-beta.0): prepare release
• c076c3c fix: filter readonly, CD and loop devices for 1.8
• 0360422 feat: support passing extra data through the siderolink join token
• 381021e fix: calculate requested and connected machines in the ClusterStatus
• 7abb0f5 chore: bump deps
• 464f699 chore: rename CloudProvider to InfraProvider
• bfe036e chore: allow to specify start and end time for audit-log
• e2f5795 chore: allow multiple IP's for siderolink-wireguard-advertised-addr flag
• 3c1defe fix: fix spelling for hover text
• 76ba670 chore: allow users with admin role to download audit log from UI
• e8d578a fix: add siderolink connection params to the infra provider interface
• 4a82cd0 chore: rewrite renamed extension names on Talos version updates
• 56c0394 fix: always remove finalizers from the ClusterMachineStatus
• ce45042 feat: implement MachineRequestSets and support links cleanup flow
• 85aaf1c feat: support sorting cluster by name, creation time
• 95c8210 feat: implement base infra provider library
• a32a6fa feat: reload TLS certs without restart
• 00ae084 fix: delete upgrade meta key from nodes after upgrades
• 3f5c0f8 chore: enable 'github.com/planetscale/vtprotobuf' encoding
• 34a8c36 chore: rekres to get BUSL license change date updated on releases
• bf188e4 chore: implement audit log reader
• 5d48547 chore: use range-over-func iterators for resource iteration
• dc349c1 chore: do a full generate with latest deps
• 67f2e8d chore: print error on closing secondary storage backing store
• 89e8a62 fix: pass the logger to machine logs circular buffer
• d2387d9 fix: use a separate phase for the extensions installation
• cbfe7c9 chore: add periodic cleanup of old log files
• aea900f fix: display machines in tearing down state

Changes since v0.42.0-beta.0

3 commits

• 06a1553 release(v0.42.0): prepare release
• 4ed9049 fix: hide download audit log button if audit logs feature is disabled
• b6b252e fix: use YAML representation in omnictl get

Changes from siderolabs/discovery-service

1 commit

• 270f257 chore: bump deps

Changes from siderolabs/go-api-signature

2 commits

• 8807c5e fix: account for time truncation to a second resolution
• 1b35ea8 chore: bump deps and fix data race

Changes from siderolabs/go-debug

1 commit

• c8f9b12 chore: add support for Go 1.23

Changes from siderolabs/go-talos-support

3 commits

• 58f4f0f chore: bump Go dependencies
• f9d46fd fix: add dns-resolve-cache to the list of logs gathered
• 69891cf chore: remove containerd dependency

Changes from siderolabs/image-factory

9 commits

• fe9134a release(v0.5.0): prepare release
• 7f09750 feat: update to Talos 1.8
• b985abc fix: cache generated system extension image correctly
• 9687413 fix: set SOURCE_DATA_EPOCH
• fef0833 chore: add in new helios64 overlay
• 03bd46f feat: support inclusion on well-known UEFI SecureBoot certs
• 608a6f0 chore: alias nvidia extensions to lts versions
• 8b4e0d9 chore: make metatadata pkg public
• 7a4de58 chore: build multi-arch image

Dependency Changes

• github.com/auth0/go-jwt-middleware/v2 v2.2.1 -> v2.2.2
• github.com/aws/aws-sdk-go-v2 ...

v0.42.0-beta.0

Omni 0.42.0-beta.0 (2024-09-06)

Welcome to the v0.42.0-beta.0 release of Omni!
This is a pre-release of Omni

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Allow multiple IP's in siderolink-wireguard-advertised-addr flag

The siderolink-wireguard-advertised-addr flag now accepts multiple IP addresses separated by commas. This is useful
when you have multiple IPs (IPv4 and IPv6) on the host machine and want to allow Talos nodes to connect to the Omni
using any of them.

Audit log

It is now possible to get the audit log from the Omni. By default it's disabled. To enable, pass
--audit-log-dir <dir> to the Omni. The audit log will be written to the specified directory, separated by day.

Retention is set to 30 days (including the current day). The audit log is written in JSON format, where each entry is
a JSON object.

There are two ways to get audit log, and for both you need Admin role:

1. By using the UI: Simply click "Download audit log" in the main menu.
2. Using omnictl audit-log command. This command will stream the audit log from the Omni to the local machine stdout.

Cluster Sort

Cluster list on Clusters page can now be sorted by name or creation date.
Before it was always sorted by creation date (newest first).

TLS Cert Reload

Omni service can now reload the TLS certs without restart.

Contributors

• Dmitriy Matrenichev
• Artem Chernyshev
• Andrey Smirnov
• Utku Ozdemir
• Noel Georgi
• Justin Garrison

Changes

28 commits

• 44e1c5d release(v0.42.0-beta.0): prepare release
• c076c3c fix: filter readonly, CD and loop devices for 1.8
• 0360422 feat: support passing extra data through the siderolink join token
• 381021e fix: calculate requested and connected machines in the ClusterStatus
• 7abb0f5 chore: bump deps
• 464f699 chore: rename CloudProvider to InfraProvider
• bfe036e chore: allow to specify start and end time for audit-log
• e2f5795 chore: allow multiple IP's for siderolink-wireguard-advertised-addr flag
• 3c1defe fix: fix spelling for hover text
• 76ba670 chore: allow users with admin role to download audit log from UI
• e8d578a fix: add siderolink connection params to the infra provider interface
• 4a82cd0 chore: rewrite renamed extension names on Talos version updates
• 56c0394 fix: always remove finalizers from the ClusterMachineStatus
• ce45042 feat: implement MachineRequestSets and support links cleanup flow
• 85aaf1c feat: support sorting cluster by name, creation time
• 95c8210 feat: implement base infra provider library
• a32a6fa feat: reload TLS certs without restart
• 00ae084 fix: delete upgrade meta key from nodes after upgrades
• 3f5c0f8 chore: enable 'github.com/planetscale/vtprotobuf' encoding
• 34a8c36 chore: rekres to get BUSL license change date updated on releases
• bf188e4 chore: implement audit log reader
• 5d48547 chore: use range-over-func iterators for resource iteration
• dc349c1 chore: do a full generate with latest deps
• 67f2e8d chore: print error on closing secondary storage backing store
• 89e8a62 fix: pass the logger to machine logs circular buffer
• d2387d9 fix: use a separate phase for the extensions installation
• cbfe7c9 chore: add periodic cleanup of old log files
• aea900f fix: display machines in tearing down state

Changes from siderolabs/discovery-service

1 commit

• 270f257 chore: bump deps

Changes from siderolabs/go-api-signature

2 commits

• 8807c5e fix: account for time truncation to a second resolution
• 1b35ea8 chore: bump deps and fix data race

Changes from siderolabs/go-debug

1 commit

• c8f9b12 chore: add support for Go 1.23

Changes from siderolabs/go-talos-support

3 commits

• 58f4f0f chore: bump Go dependencies
• f9d46fd fix: add dns-resolve-cache to the list of logs gathered
• 69891cf chore: remove containerd dependency

Changes from siderolabs/image-factory

9 commits

• fe9134a release(v0.5.0): prepare release
• 7f09750 feat: update to Talos 1.8
• b985abc fix: cache generated system extension image correctly
• 9687413 fix: set SOURCE_DATA_EPOCH
• fef0833 chore: add in new helios64 overlay
• 03bd46f feat: support inclusion on well-known UEFI SecureBoot certs
• 608a6f0 chore: alias nvidia extensions to lts versions
• 8b4e0d9 chore: make metatadata pkg public
• 7a4de58 chore: build multi-arch image

Dependency Changes

• github.com/auth0/go-jwt-middleware/v2 v2.2.1 -> v2.2.2
• github.com/aws/aws-sdk-go-v2 v1.30.3 -> v1.30.4
• github.com/aws/aws-sdk-go-v2/config v1.27.27 -> v1.27.31
• github.com/aws/aws-sdk-go-v2/credentials v1.17.27 -> v1.17.30
• github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.10 -> v1.17.16
• github.com/aws/aws-sdk-go-v2/service/s3 v1.58.3 -> v1.61.0
• github.com/aws/smithy-go v1.20.3 -> v1.20.4
• github.com/containers/image/v5 v5.32.1 -> v5.32.2
• github.com/cosi-project/runtime v0.5.5 -> v0.6.1
• github.com/cosi-project/state-etcd v0.3.0 -> v0.3.1
• github.com/fsnotify/fsnotify v1.7.0 new
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.21.0 -> v2.22.0
• github.com/prometheus/client_golang v1.19.1 -> v1.20.2
• github.com/prometheus/common v0.55.0 -> v0.57.0
• **github...

v0.41.0

Omni 0.41.0 (2024-08-19)

Welcome to the v0.41.0 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Contributors

• Artem Chernyshev
• Andrey Smirnov
• Dmitriy Matrenichev
• Utku Ozdemir
• Brant Gurganus
• Justin Garrison

Changes

19 commits

• 81b83d8 release(v0.41.0): prepare release
• dcd123d fix: workload service reconciler
• a173c8a docs: update doc urls
• daa6d26 release(v0.41.0-beta.0): prepare release
• 1cb1080 feat: bump kube-service-exposer to v0.2.0
• dd510e9 fix: properly cleanup tearing down exposed services
• 0bec3e4 chore: bump deps
• 6080c25 test: fix several flaky tests
• 99f9317 chore: implement audit log for several types
• ee73083 fix: properly remove MachineSetNode finalizer in the controller
• 16b008b fix: increase LRU cache size for Talos and Kubernetes clients
• 36c7b10 fix: skip reconciling redacted machine config on no input changes
• f0b44b1 fix: add gRPC read buffer pool for etcd client
• b1fceea fix: properly handle ExposedService resource finalizers
• 5e35cbe fix: fix nil pointer dereference in workload proxy reconciler
• 4746652 docs: add a stringArray example for extensions
• 7536191 chore: implement labels extractor controller for more efficient code
• 7df58fe chore: add request label to the links created by the cloud provider
• d194d59 feat: implement audit log

Changes since v0.41.0-beta.0

3 commits

• 81b83d8 release(v0.41.0): prepare release
• dcd123d fix: workload service reconciler
• a173c8a docs: update doc urls

Dependency Changes

• github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.8 -> v1.17.10
• github.com/aws/aws-sdk-go-v2/service/s3 v1.58.2 -> v1.58.3
• github.com/containers/image/v5 v5.31.1 -> v5.32.1
• github.com/go-jose/go-jose/v4 v4.0.3 -> v4.0.4
• github.com/google/go-containerregistry v0.20.1 -> v0.20.2
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.20.0 -> v2.21.0
• github.com/johannesboyne/gofakes3 99de01ee122d -> edd0227ffc37
• github.com/prometheus/common v0.55.0 new
• github.com/zitadel/oidc/v3 v3.26.0 -> v3.27.0
• go.etcd.io/etcd/client/pkg/v3 v3.5.14 -> v3.5.15
• go.etcd.io/etcd/client/v3 v3.5.14 -> v3.5.15
• go.etcd.io/etcd/server/v3 v3.5.14 -> v3.5.15
• golang.org/x/crypto v0.25.0 -> v0.26.0
• golang.org/x/net v0.27.0 -> v0.28.0
• golang.org/x/sync v0.7.0 -> v0.8.0
• golang.org/x/tools v0.22.0 -> v0.24.0
• k8s.io/api v0.30.3 -> v0.31.0
• k8s.io/apimachinery v0.30.3 -> v0.31.0
• k8s.io/client-go v0.30.3 -> v0.31.0
• sigs.k8s.io/controller-runtime v0.18.4 -> v0.18.5

Previous release can be found at v0.40.0

v0.41.0-beta.0

Omni 0.41.0-beta.0 (2024-08-16)

Welcome to the v0.41.0-beta.0 release of Omni!
This is a pre-release of Omni

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Contributors

• Artem Chernyshev
• Andrey Smirnov
• Dmitriy Matrenichev
• Utku Ozdemir
• Brant Gurganus

Changes

16 commits

• daa6d26 release(v0.41.0-beta.0): prepare release
• 1cb1080 feat: bump kube-service-exposer to v0.2.0
• dd510e9 fix: properly cleanup tearing down exposed services
• 0bec3e4 chore: bump deps
• 6080c25 test: fix several flaky tests
• 99f9317 chore: implement audit log for several types
• ee73083 fix: properly remove MachineSetNode finalizer in the controller
• 16b008b fix: increase LRU cache size for Talos and Kubernetes clients
• 36c7b10 fix: skip reconciling redacted machine config on no input changes
• f0b44b1 fix: add gRPC read buffer pool for etcd client
• b1fceea fix: properly handle ExposedService resource finalizers
• 5e35cbe fix: fix nil pointer dereference in workload proxy reconciler
• 4746652 docs: add a stringArray example for extensions
• 7536191 chore: implement labels extractor controller for more efficient code
• 7df58fe chore: add request label to the links created by the cloud provider
• d194d59 feat: implement audit log

Dependency Changes

• github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.8 -> v1.17.10
• github.com/aws/aws-sdk-go-v2/service/s3 v1.58.2 -> v1.58.3
• github.com/containers/image/v5 v5.31.1 -> v5.32.1
• github.com/go-jose/go-jose/v4 v4.0.3 -> v4.0.4
• github.com/google/go-containerregistry v0.20.1 -> v0.20.2
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.20.0 -> v2.21.0
• github.com/johannesboyne/gofakes3 99de01ee122d -> edd0227ffc37
• github.com/prometheus/common v0.55.0 new
• github.com/zitadel/oidc/v3 v3.26.0 -> v3.27.0
• go.etcd.io/etcd/client/pkg/v3 v3.5.14 -> v3.5.15
• go.etcd.io/etcd/client/v3 v3.5.14 -> v3.5.15
• go.etcd.io/etcd/server/v3 v3.5.14 -> v3.5.15
• golang.org/x/crypto v0.25.0 -> v0.26.0
• golang.org/x/net v0.27.0 -> v0.28.0
• golang.org/x/sync v0.7.0 -> v0.8.0
• golang.org/x/tools v0.22.0 -> v0.24.0
• k8s.io/api v0.30.3 -> v0.31.0
• k8s.io/apimachinery v0.30.3 -> v0.31.0
• k8s.io/client-go v0.30.3 -> v0.31.0
• sigs.k8s.io/controller-runtime v0.18.4 -> v0.18.5

Previous release can be found at v0.40.0

v0.40.2

Omni 0.40.2 (2024-08-08)

Welcome to the v0.40.2 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Contributors

• Artem Chernyshev
• Utku Ozdemir

Changes

2 commits

• 7e251d8 release(v0.40.2): prepare release
• adfcf92 fix: properly handle ExposedService resource finalizers

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.40.1

v0.40.1

Omni 0.40.1 (2024-08-08)

Welcome to the v0.40.1 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Contributors

• Utku Ozdemir

Changes

2 commits

• f48cb75 release(v0.40.1): prepare release
• 8fb9202 fix: fix nil pointer dereference in workload proxy reconciler

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.40.0

v0.40.0

Omni 0.40.0 (2024-07-29)

Welcome to the v0.40.0 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Support Bundle

Support downloading cluster support bundle from the UI.

Show Total Items

Display total number of clusters and machines on the corresponding pages.
Also show some basic stats there: the number of clusters not ready and allocated/available machines.

Contributors

• Artem Chernyshev
• Andrey Smirnov
• Dmitriy Matrenichev
• Utku Ozdemir
• Jubblin
• Maxime Brunet
• Sam
• Spencer Smith

Changes

33 commits

• 79220bb release(v0.40.0): prepare release
• 60355b6 test: run prometheus in tests and check metrics after talemu tests
• 111796a fix: do not divide by 0 on the machine stats page
• 4ec7a43 feat: add cloud provider resources and role
• 944923c fix: do not recreate MachineSetRequiredMachines in the controller
• 8e571f4 release(v0.40.0-beta.0): prepare release
• 8ef319c chore: bump kube-service-exposer version
• 743e67f chore: bump state-etcd module version
• 6759925 chore: deprecate Talos 1.3
• 5dd5259 chore: add rotating log for audit data
• 6f6e1a6 fix: do not allow deleting machine classes which are used anywhere
• aeb9322 fix: preserve labels on the MachineClass when editing it in the UI
• 641328c feat: show machine/cluster stats and total counts
• ad74f85 chore: bump deps
• 19a72be feat: add support bundle download button to cluster overview
• d76f8bd test: enable Talemu tests
• f67579f fix: properly update ClusterMachineIdentity resource
• d8e804f fix: use proper finalizer chain in the MachineClassStatusController
• 67bcc75 feat: compute machineclass machine requirement (pressure)
• 23fb0c1 fix: make image pre pull failure block the kubernetes update
• b8db949 chore: bump dependencies
• e484bca fix: improve resource deletion reliability, fix support bundle tests
• 6f73f58 fix: properly display icons on Safari browser
• 276c3f4 fix: use proper check for the machine set teardown flow
• 4cfc0e6 chore: rework auth.* keys, add ctxstore package
• 76263e1 fix: do not rely on MachineStatus updates when checking maintenance
• d271a8a fix: do not expect LB to be healthy when scaling down workers
• 085bc2e fix: add finalizer on MachineSetNode resource in the controller
• cbfb898 fix: add missing return err in the maintenance config drop migration
• a1a1d08 chore: bump deps
• 4369338 fix: update Talos machine config schema to v1.7
• b93ac81 fix: provide cached access to the state via Omni API
• 7602fde fix: update compose to fix missing information

Changes since v0.40.0-beta.0

5 commits

• 79220bb release(v0.40.0): prepare release
• 60355b6 test: run prometheus in tests and check metrics after talemu tests
• 111796a fix: do not divide by 0 on the machine stats page
• 4ec7a43 feat: add cloud provider resources and role
• 944923c fix: do not recreate MachineSetRequiredMachines in the controller

Changes from siderolabs/go-api-signature

1 commit

• 4bf0f02 fix: get rid of data race in the key sign interceptor

Changes from siderolabs/go-kubernetes

2 commits

• ee8c6b8 fix: add one more removed feature gate for 1.31
• 37dd61f feat: add support for Kubernetes 1.31

Changes from siderolabs/grpc-proxy

5 commits

• ec3b59c fix: address all gRPC deprecations
• 02f82db chore: rekres, bump deps
• 62b29be chore: rekres, update dependencies
• 2decdd1 chore: add no-op github workflow
• 77d7adc chore: bump deps

Changes from siderolabs/image-factory

4 commits

• e5686e2 release(v0.4.2): prepare release
• 1a2b64a feat: add Rock4 SE board to the mix of supported boards
• d07a780 fix: update wizard-versions.html
• f73a61e fix: update misreported error

Dependency Changes

• github.com/adrg/xdg v0.4.0 -> v0.5.0
• github.com/aws/aws-sdk-go-v2 v1.30.0 -> v1.30.3
• github.com/aws/aws-sdk-go-v2/config v1.27.21 -> v1.27.27
• github.com/aws/aws-sdk-go-v2/credentials v1.17.21 -> v1.17.27
• github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.1 -> v1.17.8
• github.com/aws/aws-sdk-go-v2/service/s3 v1.56.1 -> v1.58.2
• github.com/aws/smithy-go v1.20.2 -> v1.20.3
• github.com/cosi-project/runtime v0.5.0 -> v0.5.5
• github.com/cosi-project/state-etcd v0.2.9 -> v0.3.0
• github.com/go-jose/go-jose/v4 v4.0.2 -> v4.0.3
• github.com/google/go-containerregistry v0.19.2 -> v0.20.1
• github.com/siderolabs/go-api-signature v0.3.3 -> v0.3.4
• github.com/siderolabs/go-kubernetes v0.2.9 -> v0.2.11
• github.com/siderolabs/grpc-proxy v0.4.0 -> v0.4.1
• github.com/siderolabs/image-factory v0.4.1 -> v0.4.2
• github.com/siderolabs/omni/client 000000000000 -> v0.39.1
• github.com/siderolabs/talos/pkg/machinery 4feb94ca0997 -...