v1.2.0

Omni 1.2.0 (2025-09-30)

Welcome to the v1.2.0 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Cluster Locking

Cluster locking is a feature that pauses/disables all cluster related operations on a cluster.

Visual Feedback on Copy

Added visual feedback when copying text to the clipboard.

Generate Join Config for a Specific Join Token

Added the ability to generate a join configuration for a specific join token.

kubeconfig with grant-type=authcode-keyboard

New configs generated with the latest Omni version and authcode-keyboard
enabled now work for oidc-login v1.33+.
See int128/kubelogin#1263

Newly generated configs won't work for oidc-login below v1.33. You can:

• keep using the old configs.
• generate the new configs and drop oidc-redirect-url param.
• update the oidc-login module.

Redesigned Machine List Page

The Machines list page has been redesigned to provide a better user experience.

Minimum Talos version for new clusters

The minimum Talos version required to create new clusters has been raised to v1.6.0.

New exported metrics for cluster features and machine details

New prometheus metrics are added for:

• Enabled cluster features: disk encryption, embedded discovery service, workload proxying.
• Machines' platforms, their secure boot status and whether they were booted with UKI.

OIDC Authentication Support

Added support for OIDC authentication in Omni.

Toast Messages

Replaced the notification banner feature with toast messages.

User Consent Form for Userpilot

Added a user consent form for Userpilot to allow opting in/out for data collection.

Userpilot Reporting Integration

Integrated Userpilot reporting to help track user interactions.

Contributors

• Edward Sammut Alessi
• Oguz Kilcan
• Utku Ozdemir
• Andrey Smirnov
• Artem Chernyshev
• Mateusz Urbanek
• Noel Georgi
• Orzelius

Changes

77 commits

• ea874abe release(v1.2.0): prepare release
• 75593be6 chore: bump min Talos version
• 5e9b7e2f release(v1.2.0-beta.3): prepare release
• 0a30aea6 fix(frontend): adjust spacing of items in infraproviders
• 3f1b96d4 test: fix the data race in TestEtcdElectionsLost
• 17d03943 feat: add more cluster and machine metrics
• 442e0a25 chore: add codeowners file
• 48daa1e2 refactor: resource server runtimes
• d060544c refactor: remove listitembox
• ad9481c0 refactor: simplify tslidedownwrapper
• 9a13ba57 release(1.2.0-beta.2): prepare release
• 10829faf fix: fix local resource server access auth check
• 789913ff fix: adjust the grid alignment for clusters to have all phases lined up
• ff35c35a fix: alignment of oidc login not being centered
• d2158773 release(v1.2.0-beta.1): prepare release
• 5beb24f7 fix: fix the order in the grpc interceptor chain
• ecb9e7d1 fix: add oidc-redirect-url arg to the generated kubeconfigs
• 958d1ee0 fix: inline the css from clusters-grid
• 7856de3e fix: use correct indentation in the generate-certs scripts
• d01738ea test: introduce msw to mock api calls
• b801f688 test: query string for saml login is forwarded
• 120d9b24 chore: colocate tests with their tested components
• dbe39ea1 feat: check on start up if the account has Talos < 1.6 and strict tokens
• 99f1506f fix: keep query parameters encoded in the oidc/saml login flows
• a1cd4729 chore: use storage composables from vueuse
• 4c03a10a chore: replace hardcoded colors with vars
• 95f1f879 chore: improve e2e selectors
• db939c6e release(1.2.0-beta.0): prepare release
• 1f098cfa test: improve test cluster creation for e2e tests
• a035908a test: write more comprehensive e2e tests for home page
• 21cd3915 chore: rekres and fix e2e test runs
• 900e5e95 chore: strip comments from generated ClusterMachineConfig
• 5ab4fe41 chore: migrate omni e2e tests to javascript
• ca93da3e fix: fix switch user button for Auth0
• fbf89ac5 test: fix cluster-import e2e test
• 58217d6f feat: implement user consent form for the UserPilot
• 1b4de5b7 feat: abort ongoing cluster import process
• 39089938 fix: use correct order to determine SideroV1 keys directory path
• 9b5e5523 chore: rekres and bump deps
• 1ca61f2a fix: alignment on home no access
• 2d30614c chore(ci): rekres to use action runner groups
• c5054794 fix: active link style for nodes and machines
• 5298efbe chore(ci): rekres to use action runner groups
• 8cd15f01 chore: lazy load routes, modals, and code editor
• 977c316d chore: ignore html whitespace
• 4e63cc80 fix: create join token modal margin
• c87b45b6 fix: home general info error & loading
• 672e410d feat: support generating join configs with searching join tokens by name
• f675205b chore: update vite to 7.1.5
• cc231e5e chore: remove /omni root route
• 906df9a6 chore: remove the usage of --input-dir flag in tests
• 7e1ec6b1 feat: add visual feedback when copying
• 7a6ba5f9 chore: replace deprecated libraries with vueuse
• b70560c1 feat: implement OIDC auth support
• 55296073 chore: rekres providing lint-fmt and fixing frontend
• 7b1f4260 feat: redesign machines page
• 43ec5b04 fix: do not make not running lazy workload proxy healthchecker block
• 122903f2 chore: rekres to bring in lint-eslint-fmt
• b867332e fix: sidebar showing when it should not
• cc03488a feat: implement cluster locking
• e9aba459 fix: sidebar styles missing on mobile
• 0603af9e chore: refactor routes to remove withPrefix
• bbeebd7e feat: implement toast messages
• 6e6c30cd fix: alignment on error pages
• a6ed371a fix: route size on login and machine classes
• e215b37c fix: route resizing issue
• faf54325 refactor: use new qruntime with mapping of destroyed resources
• ef3eac7c fix: respect app.vue padding in routes
• ffd98593 fix: console warning about invalid watch value
• b5c68259 fix: fix the log spam caused by the expensive reqs to embedded etcd
• bce3ba27 chore: improve tbutton typings
• de144e3f feat: support Userpilot reports
• 9f0f15aa fix: copy buttons on omni home page
• c76b003b refactor: make cluster/machineset destroy status controllers QController
• a40500e6 test: use clustermachineconfig sha for omni upgrade e2e test
• 6f98fca0 fix: make useWatch respect reactivity
• 825e669c chore: use vue specific rules for dot-notation and eqeqeq

Changes since v1.2.0-beta.3

2 commits

• ea874abe release(v1.2.0): prepare release
• 75593be6 chore: bump min Talos version

Changes from siderolabs/go-api-signature

1 commit

• 68478e2 fix: return invalid signature error when a signature is required

Changes from siderolabs/go-kubernetes

1 commit

• 40e5536 feat: update checks for Kubernetes 1.34

Changes from siderolabs/image-factory

7 commits

• a3a7661 release(v0.8.4): prepare release
• 075aa3f fix: update Talos to 1.11.1
• 02723cd fix: translation ID
• 94c6df1 release(v0.8.3): prepare release
• 7254abf fix: disable redirects to PXE
• 251aee0 release(v0.8.2): prepare release
• 418eebb fix: don't filter out rc versions

Dependency Changes

• github.com/aws/aws-sdk-go-v2 v1.38.0 -> v1.39.0
• github.com/aws/aws-sdk-go-v2/config v1.29.17 -> v1.31.8
• github.com/aws/aws-sdk-go-v2/credentials v1.17.70 -> v1.18.12
• github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.49 -> v1.19.6
• github.com/aws/aws-sdk-go-v2/service/s3 v1.72.3 -> v1.88.1
• github.com/aws/smithy-go v1.22.5 -> v1.23.0
• github.com/containers/image/v5 v5.36.1 -> v5.36.2
• github.com/coreos/go-oidc/v3 v3.15.0 new
• github.com/cosi-project/runtime v1.10.7 -> v1.11.0
• github.com/emicklei/dot v1.9.0 -> v1.9.1
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.1 -> v2.27.2
• github.com/hashicorp/vault/api v1.20.0 -> v1.21.0
• github.com/johannesboyne/gofakes3 ed9094be7668 -> 6555d310c473
• github.com/prometheus/client_golang v1.23.0 -> v1.23.2
• github.com/prometheus/common v0.65.0 -> v0.66.1
• github.com/siderolabs/go-api-signature v0.3.7 -> v0.3.8
• github.com/siderolabs/go-kubernetes v0.2.25 -> v0.2.26
• github.com/siderolabs/image-factory v0.8.1 -> v0.8.4
• github.com/siderolabs/omni/client v1.0.1 -> v1.1.2
• github.com/siderolabs/talos/pkg/machinery v1.11.0-rc.0 -> v1.11.1
• github.com/spf13/cobra v1.9.1 -> v1.10.1
• github.com/stretchr/testify v1.10.0 -> v1.11.1
• go.etcd.io/bbolt v1.4.2 -> v1.4.3
• golang.org/x/crypto v0.41.0 -> v0.42.0
• golang.org/x/net v0.43.0 -> v0.44.0
• golang.org/x/oauth2 v0.31.0 new
• golang.org/x/sync v0.16.0 -> v0.17.0
• golang.org/x/text v0.28.0 -> v0.29.0
• golang.org/x/time v0.12.0 -> v0.13.0
• golang.org/x/tools v0.36.0 -> v0.37.0
• google.golang.org/grpc v1.74.2 -> v1.75.1
• google.golang.org/protobuf v1.36.7 -> v1.36.9
• sigs.k8s.io/controller-runtime v0.21.0 -> v0.22.1

Previous release can be found at v1.1.0