v0.51.0-beta.0

Omni 0.51.0-beta.0 (2025-06-13)

Welcome to the v0.51.0-beta.0 release of Omni!
This is a pre-release of Omni

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Contributors

• Utku Ozdemir
• Artem Chernyshev
• Andrew Rynhard
• Andrey Smirnov

Changes

18 commits

• bf6c38a release(v0.51.0-beta.0): prepare release
• 7a815ba fix: prevent zero machine count reports on controller shutdown
• 33e796e chore: rekres, bump Go to 1.24.4, SideroLink to v0.3.15
• f3cec18 fix: fix exposed service prefix conflict resolution
• 5e4c10b fix: use 0.0.0.0:8095 as the default bind endpoint for Kubernetes
• ccd55cc feat: rewrite Omni config management
• 05aad4d fix: check config patch creation time as well as updated on orphan check
• f3783ed fix: display unknown power state correctly on the machines screen
• 7c19c31 test: improve workload proxying tests
• c9c4c8e test: use go test to build and run Omni integration tests
• df5a2b9 fix: bump inmem COSI state history capacity
• aa5d89d fix: fix panic in maintenance upgrade
• 404bbd9 chore: allow running Omni programmatically from other Go code
• 9846622 fix: fix nil dereference in machine status controller
• 13bb8b5 docs: update SECURITY.md
• 178d2ad fix: make sure powering on stage is correctly set on infra machines
• e5d1b4b fix: properly detect infra provider service accounts
• d88bb1d test: use latest Talemu infra provider version in the integration tests

Changes from siderolabs/gen

3 commits

• dcb2b74 feat: add panicsafe package
• b36ee43 feat: make xyaml.CheckUnknownKeys public
• 3e319e7 feat: implement xyaml.UnmarshalStrict

Changes from siderolabs/siderolink

2 commits

• 5f46f65 feat: handle panics in goroutines
• d09ff45 fix: race in wait value

Dependency Changes

• github.com/go-logr/logr v1.4.2 new
• github.com/go-playground/validator/v10 v10.26.0 new
• github.com/siderolabs/gen v0.8.1 -> v0.8.4
• github.com/siderolabs/siderolink v0.3.14 -> v0.3.15
• golang.org/x/crypto v0.38.0 -> v0.39.0
• golang.org/x/net v0.40.0 -> v0.41.0
• golang.org/x/sync v0.14.0 -> v0.15.0
• golang.org/x/text v0.25.0 -> v0.26.0

Previous release can be found at v0.50.0

v0.50.1

Omni 0.50.1 (2025-05-27)

Welcome to the v0.50.1 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Contributors

• Artem Chernyshev

Changes

3 commits

• ca335cc release(v0.50.1): prepare release
• 1719ae3 test: use latest Talemu infra provider version in the integration tests
• 4d8f73a fix: properly detect infra provider service accounts

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.50.0

v0.50.0

Omni 0.50.0 (2025-05-23)

Welcome to the v0.50.0 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Infra Providers

Omni now has the UI for viewing and managing infra providers.
Additionally, the service accounts with the role InfraProvider are no longer displayed
in the UI and not returned in the omnictl serviceaccounts list CLI command.

Infra providers now got their own set of CLI commands under omnictl infraprovider.

Talos 1.10 Support

Omni now supports Talos 1.10.

Contributors

• Artem Chernyshev
• Noel Georgi
• Utku Ozdemir
• Andrey Smirnov
• Aleksandr Gamzin
• Dmitriy Matrenichev
• kalio007

Changes

16 commits

• e8b17cd release(v0.50.0): prepare release
• 7c17ed6 fix: use the correct schematic IP for maintenance upgrades
• 0020ee3 feat: allow managing infra providers in the UI
• 74a9ad3 fix: make cluster validations consistent between templates and UI
• 4792641 fix: do not show some menu elements for Reader users in the UI
• ca66bb8 release(v0.50.0-beta.0): prepare release
• 09f4468 fix: pin AWS s3 libs version to 1.72.3
• dc753f4 test: bump Talos version used in integration tests to v1.10
• f21cedc chore: introduce COSI state helpers to reduce boiler plate code count
• 9fcea4e test: add unit test for nextAvailableClusterName function
• c9b62c2 fix: update go-kubernetes library to the latest version
• daaec8d fix: remove deprecated controller finalizers from the machine classes
• eaeff1e fix: keep ClusterUUID resource alive until the cluster is destroyed
• aa24c7c fix: fix crash in the SAML ACS handler
• ccd5e7e chore: bump Go deps
• 47b6fb7 feat(ci): support releasing helm charts

Changes since v0.50.0-beta.0

5 commits

• e8b17cd release(v0.50.0): prepare release
• 7c17ed6 fix: use the correct schematic IP for maintenance upgrades
• 0020ee3 feat: allow managing infra providers in the UI
• 74a9ad3 fix: make cluster validations consistent between templates and UI
• 4792641 fix: do not show some menu elements for Reader users in the UI

Changes from siderolabs/gen

1 commit

• 7c0324f chore: future-proof HashTrieMap

Changes from siderolabs/go-circular

1 commit

• 5b39ef8 fix: do not log error if chunk zero was never written

Changes from siderolabs/go-kubernetes

2 commits

• 9070be4 fix: remove DynamicResourceAllocation feature gate
• 8cb588b fix: k8s 1.32->1.33 upgrade check

Changes from siderolabs/image-factory

8 commits

• f930246 release(v0.7.0): prepare release
• 5b85f95 chore: bump deps
• cdfab7d chore(ci): add an cron ci for talos main integration test
• 69525ba release(v0.6.9): prepare release
• 2820cb0 feat(i18n): frontend localization support
• f1187bc chore: bump deps
• ba8640b chore: bump deps
• b8308aa chore: bump talos machinery

Changes from siderolabs/siderolink

1 commit

• d2a79e0 fix: clean up device on failure

Dependency Changes

• github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.72 -> v1.17.49
• github.com/aws/aws-sdk-go-v2/service/s3 v1.79.2 -> v1.72.3
• github.com/cosi-project/runtime v0.10.2 -> v0.10.5
• github.com/cosi-project/state-etcd v0.5.1 -> v0.5.2
• github.com/siderolabs/gen v0.8.0 -> v0.8.1
• github.com/siderolabs/go-circular v0.2.2 -> v0.2.3
• github.com/siderolabs/go-kubernetes v0.2.21 -> v0.2.23
• github.com/siderolabs/image-factory v0.6.8 -> v0.7.0
• github.com/siderolabs/omni/client v0.48.3 -> v0.49.0
• github.com/siderolabs/siderolink v0.3.13 -> v0.3.14
• github.com/siderolabs/talos/pkg/machinery v1.10.0 -> v1.10.1
• github.com/zitadel/oidc/v3 v3.37.0 -> v3.38.1
• golang.org/x/crypto v0.37.0 -> v0.38.0
• golang.org/x/net v0.39.0 -> v0.40.0
• golang.org/x/sync v0.13.0 -> v0.14.0
• golang.org/x/text v0.24.0 -> v0.25.0
• golang.org/x/tools v0.32.0 -> v0.33.0
• golang.zx2c4.com/wireguard 12269c276173 -> 436f7fdc1670

Previous release can be found at v0.49.0

v0.50.0-beta.0

Omni 0.50.0-beta.0 (2025-05-15)

Welcome to the v0.50.0-beta.0 release of Omni!
This is a pre-release of Omni

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Contributors

• Noel Georgi
• Artem Chernyshev
• Andrey Smirnov
• Utku Ozdemir
• Aleksandr Gamzin
• Dmitriy Matrenichev
• kalio007

Changes

11 commits

• ca66bb8 release(v0.50.0-beta.0): prepare release
• 09f4468 fix: pin AWS s3 libs version to 1.72.3
• dc753f4 test: bump Talos version used in integration tests to v1.10
• f21cedc chore: introduce COSI state helpers to reduce boiler plate code count
• 9fcea4e test: add unit test for nextAvailableClusterName function
• c9b62c2 fix: update go-kubernetes library to the latest version
• daaec8d fix: remove deprecated controller finalizers from the machine classes
• eaeff1e fix: keep ClusterUUID resource alive until the cluster is destroyed
• aa24c7c fix: fix crash in the SAML ACS handler
• ccd5e7e chore: bump Go deps
• 47b6fb7 feat(ci): support releasing helm charts

Changes from siderolabs/gen

1 commit

• 7c0324f chore: future-proof HashTrieMap

Changes from siderolabs/go-circular

1 commit

• 5b39ef8 fix: do not log error if chunk zero was never written

Changes from siderolabs/go-kubernetes

2 commits

• 9070be4 fix: remove DynamicResourceAllocation feature gate
• 8cb588b fix: k8s 1.32->1.33 upgrade check

Changes from siderolabs/image-factory

8 commits

• f930246 release(v0.7.0): prepare release
• 5b85f95 chore: bump deps
• cdfab7d chore(ci): add an cron ci for talos main integration test
• 69525ba release(v0.6.9): prepare release
• 2820cb0 feat(i18n): frontend localization support
• f1187bc chore: bump deps
• ba8640b chore: bump deps
• b8308aa chore: bump talos machinery

Changes from siderolabs/siderolink

1 commit

• d2a79e0 fix: clean up device on failure

Dependency Changes

• github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.72 -> v1.17.49
• github.com/aws/aws-sdk-go-v2/service/s3 v1.79.2 -> v1.72.3
• github.com/cosi-project/runtime v0.10.2 -> v0.10.5
• github.com/cosi-project/state-etcd v0.5.1 -> v0.5.2
• github.com/siderolabs/gen v0.8.0 -> v0.8.1
• github.com/siderolabs/go-circular v0.2.2 -> v0.2.3
• github.com/siderolabs/go-kubernetes v0.2.21 -> v0.2.23
• github.com/siderolabs/image-factory v0.6.8 -> v0.7.0
• github.com/siderolabs/omni/client v0.48.3 -> v0.49.0
• github.com/siderolabs/siderolink v0.3.13 -> v0.3.14
• github.com/siderolabs/talos/pkg/machinery v1.10.0 -> v1.10.1
• github.com/zitadel/oidc/v3 v3.37.0 -> v3.38.1
• golang.org/x/crypto v0.37.0 -> v0.38.0
• golang.org/x/net v0.39.0 -> v0.40.0
• golang.org/x/sync v0.13.0 -> v0.14.0
• golang.org/x/text v0.24.0 -> v0.25.0
• golang.org/x/tools v0.32.0 -> v0.33.0
• golang.zx2c4.com/wireguard 12269c276173 -> 436f7fdc1670

Previous release can be found at v0.49.0

v0.49.1

Omni 0.49.1 (2025-05-07)

Welcome to the v0.49.1 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Contributors

• Artem Chernyshev

Changes

2 commits

• 32edf99 release(v0.49.1): prepare release
• e952f99 fix: fix crash in the SAML ACS handler

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.49.0

v0.49.0

Omni 0.49.0 (2025-05-07)

Welcome to the v0.49.0 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Async Discovery Service Cleanup

The machine teardown now no longer blocks on the discovery service being unavailable.
If failed, discovery service removal is now handled async.

Control Plane Force Delete

Omni now allows forcefully removing the control plane nodes from the cluster, where etcd is not healthy.

Contributors

• David Anderson
• Artem Chernyshev
• Utku Ozdemir
• Brad Fitzpatrick
• Noel Georgi
• Andrey Smirnov
• AdamEr8
• Andrey Smirnov
• Andrey Smirnov
• Dominic Evans
• Khionu Sybiern
• Nathan Johnson
• Ryan Cox
• Vincent Batts
• ignoramous

Changes

34 commits

• cd46283 release(v0.49.0): prepare release
• 5f55c05 fix: use the correct res order for the cluster operations in the UI
• 029ec05 test: bump Talemu tests timeout
• c9f9947 release(v0.49.0-beta.0): prepare release
• 68292cc chore: update JS deps, drop package-lock.json
• d3bbc2f fix: gracefully render exposed services errors
• c329668 fix: correctly encode exposed service redirect URL after auth
• 7acf2d9 feat: update machinery and specs to Talos 1.10.0
• ccf4bfb fix: use the correct sort order for the automatic install disk selection
• 34c96f2 fix: collect and handle UKI boot information
• ff03233 fix: remove machine set allocation source option
• e7ece82 fix: disable Talos >= 1.10 for now as Omni isn't ready for it yet
• 2606693 fix: remove "Generated by Omni..." comment from machine config
• 574a0b0 fix: sort Talos versions by semver on the cluster creation screen
• fbb80f0 feat: implement async delete from discovery service(s)
• 1722b4b fix: loosen s3 integrity check for etcd backups
• 1dce4ac feat: allow force-destroying a node in booting state
• 3897080 test: add config encoding stability tests
• 0fc7a16 test: fix the flaky key storage test
• 71cef7a fix: do not add omni api host to kube-apiserver cert SANs
• 5057ba9 chore: rekres, bump deps, satisfy linters, fix generated test headers
• 9a81546 fix: return proper errors for the SideroLink provision API
• 970dafc fix: correctly sort versions on the download installation media page
• e407b0a fix: move JSON schema forms validation to backend
• d96b2bc feat: improve logging/debugging of exposed services
• 21213d8 fix: properly skip the contract config patch removal migration
• 09a7d48 fix: add annotations on the ClusterMachines to force enable features
• 282fba4 fix: use correct version contract for machine config generation
• 3f3f8a9 fix: create config patches to prevent reboot on version contract revert
• 17129e5 fix: config patch cleanup
• d9b5dae fix: fix existing alias check for exposed services
• 09c80dd fix: mark all exposed services to have a non-explicit alias
• 3e07a88 fix: revert workload proxy LB refactoring
• b32f555 fix: use proper background for the sticky window in the code editor

Changes since v0.49.0-beta.0

3 commits

• cd46283 release(v0.49.0): prepare release
• 5f55c05 fix: use the correct res order for the cluster operations in the UI
• 029ec05 test: bump Talemu tests timeout

Changes from siderolabs/go-kubernetes

1 commit

• 2bdbda7 feat: adjust checks for Kubernetes v1.33.0

Changes from siderolabs/image-factory

6 commits

• 3e56929 release(v0.6.8): prepare release
• 1af002d feat: support platform specific installers
• e1d19df chore: add more tests for talos 1.10
• 0ecde68 fix(ci): image push
• 2460d03 fix(ci): image push
• a016223 feat: pull in new Talos machinery

Changes from siderolabs/tcpproxy

70 commits

• 3d4e7b8 chore: rename to siderolabs/tcpproxy
• 6f85d8e Implement correct half-close sequence for the connections.
• 8bea9a4 Add support for TCP_USER_TIMEOUT setting
• 91f8614 remove old ACME tls-sni-01 stuff that LetsEncrypt removed March 2019
• 74ca1dc add Proxy.AddSNIRouteFunc to do lookups by SNI dynamically
• 4e04b92 gofmt for Go 1.19
• be3ee21 (doc): s/tlsproxy/tcpproxy
• 2e577fe Modified TestProxyPROXYOut to conform with the fixed version of PROXY protocol header format
• 0f9bced Fixed HAProxy's PROXY protocol v1 Human-readable header format in DialProxy
• 2825d76 fix(test): update travis and e2e selfSignedCert fn
• b6bb9b5 Update import path to inet.af/tcpproxy
• dfa16c6 tlsrouter/README: fix the go get url
• f5c09fb Take advantage of Go 1.11's splice support, unwrap Conns in DialProxy.HandleConn
• ...

v0.49.0-beta.0

Omni 0.49.0-beta.0 (2025-05-05)

Welcome to the v0.49.0-beta.0 release of Omni!
This is a pre-release of Omni

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Async Discovery Service Cleanup

The machine teardown now no longer blocks on the discovery service being unavailable.
If failed, discovery service removal is now handled async.

Control Plane Force Delete

Omni now allows forcefully removing the control plane nodes from the cluster, where etcd is not healthy.

Contributors

• David Anderson
• Utku Ozdemir
• Artem Chernyshev
• Brad Fitzpatrick
• Noel Georgi
• Andrey Smirnov
• AdamEr8
• Andrey Smirnov
• Andrey Smirnov
• Dominic Evans
• Khionu Sybiern
• Nathan Johnson
• Ryan Cox
• Vincent Batts
• ignoramous

Changes

31 commits

• c9f9947 release(v0.49.0-beta.0): prepare release
• 68292cc chore: update JS deps, drop package-lock.json
• d3bbc2f fix: gracefully render exposed services errors
• c329668 fix: correctly encode exposed service redirect URL after auth
• 7acf2d9 feat: update machinery and specs to Talos 1.10.0
• ccf4bfb fix: use the correct sort order for the automatic install disk selection
• 34c96f2 fix: collect and handle UKI boot information
• ff03233 fix: remove machine set allocation source option
• e7ece82 fix: disable Talos >= 1.10 for now as Omni isn't ready for it yet
• 2606693 fix: remove "Generated by Omni..." comment from machine config
• 574a0b0 fix: sort Talos versions by semver on the cluster creation screen
• fbb80f0 feat: implement async delete from discovery service(s)
• 1722b4b fix: loosen s3 integrity check for etcd backups
• 1dce4ac feat: allow force-destroying a node in booting state
• 3897080 test: add config encoding stability tests
• 0fc7a16 test: fix the flaky key storage test
• 71cef7a fix: do not add omni api host to kube-apiserver cert SANs
• 5057ba9 chore: rekres, bump deps, satisfy linters, fix generated test headers
• 9a81546 fix: return proper errors for the SideroLink provision API
• 970dafc fix: correctly sort versions on the download installation media page
• e407b0a fix: move JSON schema forms validation to backend
• d96b2bc feat: improve logging/debugging of exposed services
• 21213d8 fix: properly skip the contract config patch removal migration
• 09a7d48 fix: add annotations on the ClusterMachines to force enable features
• 282fba4 fix: use correct version contract for machine config generation
• 3f3f8a9 fix: create config patches to prevent reboot on version contract revert
• 17129e5 fix: config patch cleanup
• d9b5dae fix: fix existing alias check for exposed services
• 09c80dd fix: mark all exposed services to have a non-explicit alias
• 3e07a88 fix: revert workload proxy LB refactoring
• b32f555 fix: use proper background for the sticky window in the code editor

Changes from siderolabs/go-kubernetes

1 commit

• 2bdbda7 feat: adjust checks for Kubernetes v1.33.0

Changes from siderolabs/image-factory

6 commits

• 3e56929 release(v0.6.8): prepare release
• 1af002d feat: support platform specific installers
• e1d19df chore: add more tests for talos 1.10
• 0ecde68 fix(ci): image push
• 2460d03 fix(ci): image push
• a016223 feat: pull in new Talos machinery

Changes from siderolabs/tcpproxy

70 commits

• 3d4e7b8 chore: rename to siderolabs/tcpproxy
• 6f85d8e Implement correct half-close sequence for the connections.
• 8bea9a4 Add support for TCP_USER_TIMEOUT setting
• 91f8614 remove old ACME tls-sni-01 stuff that LetsEncrypt removed March 2019
• 74ca1dc add Proxy.AddSNIRouteFunc to do lookups by SNI dynamically
• 4e04b92 gofmt for Go 1.19
• be3ee21 (doc): s/tlsproxy/tcpproxy
• 2e577fe Modified TestProxyPROXYOut to conform with the fixed version of PROXY protocol header format
• 0f9bced Fixed HAProxy's PROXY protocol v1 Human-readable header format in DialProxy
• 2825d76 fix(test): update travis and e2e selfSignedCert fn
• b6bb9b5 Update import path to inet.af/tcpproxy
• dfa16c6 tlsrouter/README: fix the go get url
• f5c09fb Take advantage of Go 1.11's splice support, unwrap Conns in DialProxy.HandleConn
• 7f81f77 Work around deadlock with Go tip (at Go rev f3f7bd5)
• 7efa37f Quiet log spam in test.
• dbc1514 Adding the HostName field to the Conn struct (#18)
• 2b928d9 Link to docs
• de1c7de Add support for arbitrary matching against HTTP and SNI hostnames.
• c6a0996 Support configurable routing of ACME tls-sni-01 challenges.
• [815c942](https://...

v0.48.4

Omni 0.48.4 (2025-04-29)

Welcome to the v0.48.4 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Contributors

• Artem Chernyshev

Changes

2 commits

• 888cca9 release(v0.48.4): prepare release
• 7407d7a fix: disable Talos >= 1.10 for now as Omni isn't ready for it yet

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.48.3

v0.48.3

Omni 0.48.3 (2025-04-16)

Welcome to the v0.48.3 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Contributors

• Artem Chernyshev

Changes

3 commits

• f1acdbd release(v0.48.3): prepare release
• 7e57fb8 fix: properly skip the contract config patch removal migration
• 4e00895 fix: add annotations on the ClusterMachines to force enable features

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.48.2

v0.48.2

Omni 0.48.2 (2025-04-15)

Welcome to the v0.48.2 release of Omni!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/omni/issues.

Contributors

• Andrey Smirnov
• Utku Ozdemir

Changes

4 commits

• 561a31b release(v0.48.2): prepare release
• 751d6f3 fix: use correct version contract for machine config generation
• ced66e5 fix: create config patches to prevent reboot on version contract revert
• 6b5f315 fix: config patch cleanup

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.48.1