v1.1.0

Omni 1.1.0 (2025-08-27)

Welcome to the v1.1.0 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Improved Clusters Page Breadcrumbs

Breadcrumbs on the clusters page have been redesigned for better navigation.

CLI Support for Kernel Args and Join Configs

omnictl now supports commands to retrieve SideroLink kernel arguments and join configurations.

Default Config Location Change

The default location for storing Omni configuration files and user PGP keys has been changed.

Custom Volumes in Helm Chart

Added support for specifying custom volumes and volume mounts in the Omni Helm chart.

Home Page Design Update

Omni home page design was changed to have more useful information about the whole account status.

Join Token Usage Warning

Omni now warns users when a join token is currently in use during revoke or delete operations.

Collapsible Sidebar on Mobile

The sidebar can now be collapsed when viewed on mobile devices, improving usability on smaller screens.

Join Tokens CLI

A new CLI feature has been added to manage SideroLink join tokens directly using omnictl.

Unique Token Status per Node

Omni now computes and displays a unique join token status for each node.

Contributors

• Andrey Smirnov
• Edward Sammut Alessi
• Oguz Kilcan
• Mateusz Urbanek
• Artem Chernyshev
• Noel Georgi
• Utku Ozdemir
• Thomas Gosteli

Changes

42 commits

• 904ff163 release(v1.1.0): prepare release
• e92c3415 feat: home page redesign
• 587ac1bc fix: add missing card styles to machines list
• f56eaff6 chore: improve useWatch typings
• c9657cbb feat: add jitter and lazy health checks to exposed services
• 979f30de fix: fix alignment issue with TButton
• 98d2e409 release(v1.1.0-beta.0): prepare release
• 9daa2fa2 chore: create a useWatch composable
• 7ae7ea74 chore: rekres, bump deps, Go, satisfy linters
• 152db8fe feat: change default location for storing Omni config and user PGP keys
• 36430a26 feat: add custom volume and custom volume mount support for omni helm chart
• 150d61bf fix: better detect user identity in SAML responses
• 80a572fa chore: normalise font styles
• 82eba18b chore: update frontend dependencies
• 12a1d4d5 feat: make sidebar collapsible on mobile
• e108fb1c feat: support commands for getting kernel args and join configs in CLI
• 45a9d8c2 chore: types for route.meta.sidebar & title
• 110d551c chore: tailwind v4 upgrade
• 13d83648 chore: prepare omni for talos v1.11.0-beta.2
• 270eabf1 chore: commit vscode settings for frontend
• f264f1d1 fix: incorrect disabled icon color
• a268b8fd test: fix asserting etcd members test
• 69c4fd5d fix: prevent service account creation if name is already in use
• fe5d0280 feat: warn user about join token being in use during revoke/delete
• 73e42222 chore: more lint & formatting rules for omni/frontend
• 7e032266 chore: ts, lint, and formatting rules for omni frontend
• 928b7d89 test: fix omni upgrade e2e test
• 8e4f86f9 feat: rework breadcrumbs for clusters page
• 9521b302 chore: switch from bun to node
• 229e0060 fix: keep control plane status up to date
• 3f35ef23 chore: remove unused .eslintrc.yaml config
• 025c37f2 fix: stop enforcing talos version check on machine allocation
• c3b4f021 chore: rekres, bump talos and k8s versions
• 7e59f1ce fix: install frontend dependencies from lockfile
• 746c9662 chore: rekres to use correct slack channel for slack-notify
• 5047a625 feat: compute unique token status for each node
• e740c8b7 test: fix registry mirror config format in integration tests
• 0591d2ee feat: implement join token management CLI
• 4b0c32aa fix: remove MachineLabels when a Link is removed
• 9ac5cf4f fix: properly handle empty configs in omnictl config merge CLI command
• 0fc13bbf test: run Omni upgrade tests against latest stable
• 88f51163 chore: run inspector in the dev docker-compose

Changes since v1.1.0-beta.0

6 commits

• 904ff163 release(v1.1.0): prepare release
• e92c3415 feat: home page redesign
• 587ac1bc fix: add missing card styles to machines list
• f56eaff6 chore: improve useWatch typings
• c9657cbb feat: add jitter and lazy health checks to exposed services
• 979f30de fix: fix alignment issue with TButton

Changes from siderolabs/discovery-client

3 commits

• 0bffa6f fix: allow TLS config to be passed as a function
• 09c6687 chore: fix project name in release.toml
• 71b0c6d fix: add FIPS-140-3 strict compliance

Changes from siderolabs/discovery-service

2 commits

• d186f97 release(v1.10.11): prepare release
• 01e232a fix: pull in new client for FIPS-140-3 compliance

Changes from siderolabs/gen

1 commit

• 044d921 feat: add xslices.Deduplicate

Changes from siderolabs/go-api-signature

2 commits

• d22e33d feat: clarify fallback logic for fallback capable key provider
• dea3048 feat: allow configuring the provider with fallback location

Changes from siderolabs/go-debug

1 commit

• e21721b chore: add support for Go 1.25

Changes from siderolabs/go-kubernetes

2 commits

• 7887034 feat: add checks for Kubernetes 1.34 removals
• 657a74b feat: prepare for Kubernetes 1.34

Changes from siderolabs/go-loadbalancer

1 commit

• 5e7a8b2 feat: add jitter and initial health check wait support to upstreams

Changes from siderolabs/image-factory

33 commits

• 57ad419 release(v0.8.1): prepare release
• 6392086 fix: prevent failure on cache.Get
• a1e3707 feat: add fallback if S3 is missbehaving
• 9760ab0 release(v0.8.0): prepare release
• 7c6d261 fix: set content-disposition on S3
• f3e97df docs(image-factory): add info about S3 cache and CDN
• d25e7ac fix: add extra context to logs from s3 cache
• a3a0dff fix: add optional region to S3 client
• a9e2d08 feat: add support for Object Storage and CDN cache
• b8bfc19 docs: add air-gapped documentation
• f8b4ef0 docs: add new translation
• 0c83228 release(v0.7.6): prepare release
• 6f409ec fix: drop extractParams function
• 19ac9c2 release(v0.7.5): prepare release
• 3b2b97a fix: support iPXE aliases for architectures
• b838a44 feat: update to Talos 1.11.0-beta.0
• 953e217 docs: document source images used
• e1e80fd feat: serve talosctl from image factory
• 3e35f91 feat(secureboot): implement reading key material from AWS KMS
• f2bb870 release(v0.7.4): prepare release
• c035602 fix: hide kernel args warning for Talos >= 1.10
• a68433c test: capture test coverage for integration tests
• 28d9a30 fix: improve HTTP access log
• 1df0e9e release(v0.7.3): prepare release
• 50f8148 fix: default options on startup
• 29b022e release(v0.7.2): prepare release
• d9ebc5a fix: refresh remote pullers and pushers on interval
• f09f134 release(v0.7.1): prepare release
• 68d6660 fix: pull in overrides from the overlay profile
• 7dd34b7 fix: vmware ova generation
• 251c75e fix(ci): image factory cron
• ed0722d fix: specify each language natively
• a8b9073 chore: bump Talos version to proper in tests

Dependency Changes

• github.com/ProtonMail/gopenpgp/v2 v2.8.3 -> v2.9.0
• github.com/aws/aws-sdk-go-v2 v1.36.3 -> v1.38.0
• github.com/aws/aws-sdk-go-v2/config v1.29.14 -> v1.29.17
• github.com/aws/aws-sdk-go-v2/credentials v1.17.67 -> v1.17.70
• github.com/aws/smithy-go v1.22.3 -> v1.22.5
• github.com/cenkalti/backoff/v5 v5.0.2 -> v5.0.3
• github.com/containers/image/v5 v5.35.0 -> v5.36.1
• github.com/cosi-project/runtime v0.10.6 -> v1.10.7
• github.com/emicklei/dot v1.8.0 -> v1.9.0
• github.com/go-jose/go-jose/v4 v4.1.0 -> v4.1.2
• github.com/go-logr/logr v1.4.2 -> v1.4.3
• github.com/go-playground/validator/v10 v10.26.0 -> v10.27.0
• github.com/google/go-containerregistry v0.20.3 -> v0.20.6
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3 -> v2.27.1
• github.com/hashicorp/vault/api v1.16.0 -> v1.20.0
• github.com/hashicorp/vault/api/auth/kubernetes v0.9.0 -> v0.10.0
• github.com/johannesboyne/gofakes3 5c39aecd6999 -> ed9094be7668
• github.com/prometheus/client_golang v1.22.0 -> v1.23.0
• github.com/prometheus/common v0.63.0 -> v0.65.0
• github.com/santhosh-tekuri/jsonschema/v6 v6.0.1 -> v6.0.2
• github.com/siderolabs/discovery-client v0.1.11 -> v0.1.13
• github.com/siderolabs/discovery-service v1.0.10 -> v1.0.11
• github.com/siderolabs/gen v0.8.4 -> v0.8.5
• github.com/siderolabs/go-api-signature v0.3.6 -> v0.3.7
• github.com/siderolabs/go-debug v0.5.0 -> v0.6.0
• github.com/siderolabs/go-kubernetes v0.2.23 -> v0.2.25
• github.com/siderolabs/go-loadbalancer v0.4.0 -> v0.5.0
• github.com/siderolabs/image-factory v0.7.0 -> v0.8.1
• github.com/siderolabs/omni/client v0.49.0 -> v1.0.1
• github.com/siderolabs/talos/pkg/machinery da5a4449f1a9 -> v1.11.0-rc.0
• github.com/zitadel/oidc/v3 v3.38.1 -> v3.44.0
• go.etcd.io/bbolt v1.4.0 -> v1.4.2
• go.etcd.io/etcd/client/pkg/v3 v3.5.21 -> v3.6.4
• go.etcd.io/etcd/client/v3 v3.5.21 -> v3.6.4
• go.etcd.io/etcd/server/v3 v3.5.21 -> v3.6.4
• go.uber.org/mock v0.5.0 -> v0.6.0
• golang.org/x/crypto v0.39.0 -> v0.41.0
• golang.org/x/net v0.41.0 -> v0.43.0
• golang.org/x/sync v0.15.0 -> v0.16.0
• golang.org/x/text v0.26.0 -> v0.28.0
• golang.org/x/time v0.11.0 -> v0.12.0
• golang.org/x/tools v0.33.0 -> v0.36.0
• golang.zx2c4.com/wireguard 436f7fdc1670 -> f333402bd9cb
• google.golang.org/grpc v1.73.0 -> v1.74.2
• google.golang.org/protobuf v1.36.6 -> v1.36.7
• k8s.io/api v0.34.0-alpha.0 -> v0.35.0-alpha.0
• k8s.io/apimachinery v0.34.0-alpha.0 -> v0.35.0-alpha.0
• k8s.io/client-go v0.34.0-alpha.0 -> v0.35.0-alpha.0
• sigs.k8s.io/controller-runtime v0.20.4 -> v0.21.0

Previous release can be found at v1.0.0