v0.49.0-beta.0

Omni 0.49.0-beta.0 (2025-05-05)

Welcome to the v0.49.0-beta.0 release of Omni!
This is a pre-release of Omni

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Async Discovery Service Cleanup

The machine teardown now no longer blocks on the discovery service being unavailable.
If failed, discovery service removal is now handled async.

Control Plane Force Delete

Omni now allows forcefully removing the control plane nodes from the cluster, where etcd is not healthy.

Contributors

• David Anderson
• Utku Ozdemir
• Artem Chernyshev
• Brad Fitzpatrick
• Noel Georgi
• Andrey Smirnov
• AdamEr8
• Andrey Smirnov
• Andrey Smirnov
• Dominic Evans
• Khionu Sybiern
• Nathan Johnson
• Ryan Cox
• Vincent Batts
• ignoramous

Changes

31 commits

• c9f9947 release(v0.49.0-beta.0): prepare release
• 68292cc chore: update JS deps, drop package-lock.json
• d3bbc2f fix: gracefully render exposed services errors
• c329668 fix: correctly encode exposed service redirect URL after auth
• 7acf2d9 feat: update machinery and specs to Talos 1.10.0
• ccf4bfb fix: use the correct sort order for the automatic install disk selection
• 34c96f2 fix: collect and handle UKI boot information
• ff03233 fix: remove machine set allocation source option
• e7ece82 fix: disable Talos >= 1.10 for now as Omni isn't ready for it yet
• 2606693 fix: remove "Generated by Omni..." comment from machine config
• 574a0b0 fix: sort Talos versions by semver on the cluster creation screen
• fbb80f0 feat: implement async delete from discovery service(s)
• 1722b4b fix: loosen s3 integrity check for etcd backups
• 1dce4ac feat: allow force-destroying a node in booting state
• 3897080 test: add config encoding stability tests
• 0fc7a16 test: fix the flaky key storage test
• 71cef7a fix: do not add omni api host to kube-apiserver cert SANs
• 5057ba9 chore: rekres, bump deps, satisfy linters, fix generated test headers
• 9a81546 fix: return proper errors for the SideroLink provision API
• 970dafc fix: correctly sort versions on the download installation media page
• e407b0a fix: move JSON schema forms validation to backend
• d96b2bc feat: improve logging/debugging of exposed services
• 21213d8 fix: properly skip the contract config patch removal migration
• 09a7d48 fix: add annotations on the ClusterMachines to force enable features
• 282fba4 fix: use correct version contract for machine config generation
• 3f3f8a9 fix: create config patches to prevent reboot on version contract revert
• 17129e5 fix: config patch cleanup
• d9b5dae fix: fix existing alias check for exposed services
• 09c80dd fix: mark all exposed services to have a non-explicit alias
• 3e07a88 fix: revert workload proxy LB refactoring
• b32f555 fix: use proper background for the sticky window in the code editor

Changes from siderolabs/go-kubernetes

1 commit

• 2bdbda7 feat: adjust checks for Kubernetes v1.33.0

Changes from siderolabs/image-factory

6 commits

• 3e56929 release(v0.6.8): prepare release
• 1af002d feat: support platform specific installers
• e1d19df chore: add more tests for talos 1.10
• 0ecde68 fix(ci): image push
• 2460d03 fix(ci): image push
• a016223 feat: pull in new Talos machinery

Changes from siderolabs/tcpproxy

70 commits

• 3d4e7b8 chore: rename to siderolabs/tcpproxy
• 6f85d8e Implement correct half-close sequence for the connections.
• 8bea9a4 Add support for TCP_USER_TIMEOUT setting
• 91f8614 remove old ACME tls-sni-01 stuff that LetsEncrypt removed March 2019
• 74ca1dc add Proxy.AddSNIRouteFunc to do lookups by SNI dynamically
• 4e04b92 gofmt for Go 1.19
• be3ee21 (doc): s/tlsproxy/tcpproxy
• 2e577fe Modified TestProxyPROXYOut to conform with the fixed version of PROXY protocol header format
• 0f9bced Fixed HAProxy's PROXY protocol v1 Human-readable header format in DialProxy
• 2825d76 fix(test): update travis and e2e selfSignedCert fn
• b6bb9b5 Update import path to inet.af/tcpproxy
• dfa16c6 tlsrouter/README: fix the go get url
• f5c09fb Take advantage of Go 1.11's splice support, unwrap Conns in DialProxy.HandleConn
• 7f81f77 Work around deadlock with Go tip (at Go rev f3f7bd5)
• 7efa37f Quiet log spam in test.
• dbc1514 Adding the HostName field to the Conn struct (#18)
• 2b928d9 Link to docs
• de1c7de Add support for arbitrary matching against HTTP and SNI hostnames.
• c6a0996 Support configurable routing of ACME tls-sni-01 challenges.
• 815c942 Merge matcher and route into an interface that yields a Target.
• 2065af4 Support HAProxy's PROXY protocol v1 in DialProxy.
• e030359 Fix golint nits by adding docstrings and simplifying execution flow.
• 6d97c2a Correct the package building command, and only deploy for master branch commits.
• aa12504 Another attempt to fix Travis.
• f6af481 Make Travis test all packages, and remove the go.universe.tf import path.
• d7e343e Fix the godoc link to point to google/tcpproxy.
• bef9f6a Merge bradfitz's tcpproxy codebase with the software formerly known as tlsrouter.
• d86e96a Move tlsrouter's readme to the command's directory.
• 9e73877 Switch license to Apache2, add Google copyright headers.
• cbf137d Correct the travis build to kinda work.
• 3eb49e9 Move tlsrouter to cmd/tlsrouter, in preparation for rewrite as a pkg.
• af97cdd Fix copy/paste-o in doc example.
• 3273f40 Add vendor warning
• e387889 Add TargetListener
• 2eb0155 Start of tcpproxy. No Listener or reverse dialing yet.
• c58b44c Make golint fail if lint errors are found, and fix said lint.
• 4621df9 Clean up the Travis build a bit more, moving more stuff to the deploy stage.
• 96cc76f Test Travis's new build stage support.
• bbbede8 Make travis fetch the test-only dependency.
• 4b8641f Add support for HAProxy's PROXY protocol.
• d23eadc Upload packages based on Go 1.8, not 1.7.
• 7ef32e3 Add Go 1.8 to the build matrix.
• e07ecec typo
• aa3f9c9 Remove debug print in acme code.
• 6664640 Stop testing against Go 1.6.
• 728b8bc Add ACME routing support.
• a5c2ccd Use nogroup as the group, not nobody.
• a94dbd1 Port extra error checking over from netboot.
• 3cd4412 Clean up travis config a bit, and add missing copyright notice.
• aded796 Add a deploy step to garbage-collect old packagecloud files.
• 3e6354c Random change to force travis rebuild on latest code.
• 77fa998 Attempt to create a package with no version name.
• bfef4ba Revert to just debian/jessie. It's the same package anyway.
• 173db90 Try the obvious way to specify a matrix of package tags.
• ea58780 Limit the deploy to only the go 1.7 build.
• a2d0c96 Skip cleanup so travis doesn't delete the freshly built .deb.
• 73ee2e7 Attempt a packagecloud push.
• cbd4ea6 Attempt to build a debian package with FPM.
• 4f5b46f Add a systemd unit file to run tlsrouter.
• 8cc8cac Document -hello-timeout in README.
• e0a0158 Add slowloris protection, in the form of a ClientHello timeout.
• 09cc4bb Remove support for SSL 3.0.
• c41a68d Add tests for hostname matching, and make DNS matches match entire string.
• 6546db4 Fix vet errors in Go 1.6.
• e34c2a6 Add more words to README.
• b321571 Add godoc comments to appease golint.
• 55ba69d Add a Travis CI config.
• b8a3ed8 Add DNS name support to config
• 0a0a9f6 Add licensing and contributing information for release.
• b1edd90 Initial commit.

Dependency Changes

• github.com/aws/aws-sdk-go-v2/config v1.29.9 -> v1.29.14
• github.com/aws/aws-sdk-go-v2/credentials v1.17.62 -> v1.17.67
• github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.66 -> v1.17.72
• github.com/aws/aws-sdk-go-v2/service/s3 v1.78.2 -> v1.79.2
• github.com/containers/image/v5 v5.34.2 -> v5.35.0
• github.com/cosi-project/runtime v0.10.1 -> v0.10.2
• github.com/crewjam/saml v0.4.14 -> v0.5.1
• github.com/fsnotify/fsnotify v1.8.0 -> v1.9.0
• github.com/go-jose/go-jose/v4 v4.0.5 -> v4.1.0
• github.com/golang-jwt/jwt/v4 v4.5.1 -> v4.5.2
• github.com/jonboulle/clockwork v0.5.0 new
• github.com/prometheus/client_golang v1.21.1 -> v1.22.0
• github.com/siderolabs/go-kubernetes v0.2.20 -> v0.2.21
• github.com/siderolabs/image-factory v0.6.7 -> v0.6.8
• github.com/siderolabs/omni/client v0.47.1 -> v0.48.3
• github.com/siderolabs/talos/pkg/machinery v1.10.0-alpha.2 -> v1.10.0
• github.com/siderolabs/tcpproxy v0.1.0 new
• github.com/zitadel/logging v0.6.1 -> v0.6.2
• github.com/zitadel/oidc/v3 v3.36.1 -> v3.37.0
• go.etcd.io/etcd/client/pkg/v3 v3.5.19 -> v3.5.21
• go.etcd.io/etcd/client/v3 v3.5.19 -> v3.5.21
• go.etcd.io/etcd/server/v3 v3.5.19 -> v3.5.21
• golang.org/x/crypto v0.36.0 -> v0.37.0
• golang.org/x/net v0.37.0 -> v0.39.0
• golang.org/x/sync v0.12.0 -> v0.13.0
• golang.org/x/text v0.24.0 new
• golang.org/x/tools v0.31.0 -> v0.32.0
• google.golang.org/grpc v1.71.0 -> v1.72.0
• google.golang.org/protobuf v1.36.5 -> v1.36.6
• k8s.io/api v0.32.3 -> v0.34.0-alpha.0
• k8s.io/apimachinery v0.32.3 -> v0.34.0-alpha.0
• k8s.io/client-go v0.32.3 -> v0.34.0-alpha.0
• sigs.k8s.io/controller-runtime v0.20.3 -> v0.20.4

Previous release can be found at v0.48.0