feat: add a way to switch gRPC tunnel mode for the connected machines

client/api/omni/specs/siderolink.proto

@@ -166,3 +166,8 @@ message JoinTokenUsageSpec {
 message DefaultJoinTokenSpec {
   string token_id = 1;
 }
+
+// GRPCTunnelConfig is the user managed resource that allows configuring gRPC tunnel per machine.
+message GRPCTunnelConfigSpec {
+  bool enabled = 1;
+}

client/pkg/omni/resources/common/common.go

@@ -22,6 +22,7 @@ var UserManagedResourceTypes = []resource.Type{
 	authres.SAMLLabelRuleType,
 	siderolink.JoinTokenType,
 	siderolink.DefaultJoinTokenType,
+	siderolink.GRPCTunnelConfigType,
 	omni.ClusterType,
 	omni.ConfigPatchType,
 	omni.EtcdManualBackupType,

client/pkg/omni/resources/siderolink/grpc_tunnel_config.go

@@ -0,0 +1,47 @@
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at http://mozilla.org/MPL/2.0/.
+
+package siderolink
+
+import (
+	"github.com/cosi-project/runtime/pkg/resource"
+	"github.com/cosi-project/runtime/pkg/resource/meta"
+	"github.com/cosi-project/runtime/pkg/resource/protobuf"
+	"github.com/cosi-project/runtime/pkg/resource/typed"
+
+	"github.com/siderolabs/omni/client/api/omni/specs"
+	"github.com/siderolabs/omni/client/pkg/omni/resources"
+)
+
+// NewGRPCTunnelConfig creates new GRPCTunnelConfig state.
+func NewGRPCTunnelConfig(id string) *GRPCTunnelConfig {
+	return typed.NewResource[GRPCTunnelConfigSpec, GRPCTunnelConfigExtension](
+		resource.NewMetadata(resources.DefaultNamespace, GRPCTunnelConfigType, id, resource.VersionUndefined),
+		protobuf.NewResourceSpec(&specs.GRPCTunnelConfigSpec{}),
+	)
+}
+
+// GRPCTunnelConfigType is the type of GRPCTunnelConfig resource.
+//
+// tsgen:GRPCTunnelConfigType
+const GRPCTunnelConfigType = resource.Type("GRPCTunnelConfigs.omni.sidero.dev")
+
+// GRPCTunnelConfig resource is the per machine gRPC tunnel mode config.
+type GRPCTunnelConfig = typed.Resource[GRPCTunnelConfigSpec, GRPCTunnelConfigExtension]
+
+// GRPCTunnelConfigSpec wraps specs.GRPCTunnelConfigSpec.
+type GRPCTunnelConfigSpec = protobuf.ResourceSpec[specs.GRPCTunnelConfigSpec, *specs.GRPCTunnelConfigSpec]
+
+// GRPCTunnelConfigExtension providers auxiliary methods for GRPCTunnelConfig resource.
+type GRPCTunnelConfigExtension struct{}
+
+// ResourceDefinition implements [typed.Extension] interface.
+func (GRPCTunnelConfigExtension) ResourceDefinition() meta.ResourceDefinitionSpec {
+	return meta.ResourceDefinitionSpec{
+		Type:             GRPCTunnelConfigType,
+		Aliases:          []resource.Type{},
+		DefaultNamespace: resources.DefaultNamespace,
+		PrintColumns:     nil,
+	}
+}

client/pkg/omni/resources/siderolink/siderolink.go

@@ -34,6 +34,7 @@ func init() {
 	registry.MustRegisterResource(DefaultJoinTokenType, &DefaultJoinToken{})
 	registry.MustRegisterResource(NodeUniqueTokenType, &NodeUniqueToken{})
 	registry.MustRegisterResource(NodeUniqueTokenStatusType, &NodeUniqueTokenStatus{})
+	registry.MustRegisterResource(GRPCTunnelConfigType, &GRPCTunnelConfig{})
 
 	// NOTE: this resource is not used anymore, but still used in the migration code.
 	registry.MustRegisterResource(DeprecatedLinkCounterType, &DeprecatedLinkCounter{})