fix: filter requests in the infra provision controller

Make each controller process only resources labeled with it's provider
ID.
Allow overriding gRPC tunnel options for the machine classes/request
sets.
Expose join configs to the infra providers.

Also publish Omni integration tests as the part of releases.

Signed-off-by: Artem Chernyshev <artem.chernyshev@talos-systems.com>

.github/workflows/ci.yaml

@@ -1,6 +1,6 @@
 # THIS FILE WAS AUTOMATICALLY GENERATED, PLEASE DO NOT EDIT.
 #
-# Generated on 2024-09-30T14:56:12Z by kres 8be5fa7.
+# Generated on 2024-10-07T18:59:07Z by kres 34e72ac.
 
 name: default
 concurrency:
@@ -190,8 +190,8 @@ jobs:
         if: startsWith(github.ref, 'refs/tags/')
         run: |
           cd _out
-          sha256sum omnictl-* omni-* > sha256sum.txt
-          sha512sum omnictl-* omni-* > sha512sum.txt
+          sha256sum omnictl-* omni-* integration-* > sha256sum.txt
+          sha512sum omnictl-* omni-* integration-* > sha512sum.txt
       - name: release-notes
         if: startsWith(github.ref, 'refs/tags/')
         run: |
@@ -205,6 +205,7 @@ jobs:
           files: |-
             _out/omnictl-*
             _out/omni-*
+            _out/integration-*
             _out/sha*.txt
   e2e-backups:
     runs-on:

.kres.yaml

@@ -486,6 +486,7 @@ spec:
   artifacts:
     - omnictl-*
     - omni-*
+    - integration-*
 ---
 kind: common.Image
 name: image-omni

Dockerfile

@@ -1,15 +1,15 @@
-# syntax = docker/dockerfile-upstream:1.9.0-labs
+# syntax = docker/dockerfile-upstream:1.10.0-labs
 
 # THIS FILE WAS AUTOMATICALLY GENERATED, PLEASE DO NOT EDIT.
 #
-# Generated on 2024-09-24T12:08:22Z by kres 8be5fa7.
+# Generated on 2024-10-07T18:59:07Z by kres 34e72ac.
 
 ARG JS_TOOLCHAIN
 ARG TOOLCHAIN
 
-FROM ghcr.io/siderolabs/ca-certificates:v1.7.0 AS image-ca-certificates
+FROM ghcr.io/siderolabs/ca-certificates:v1.8.0 AS image-ca-certificates
 
-FROM ghcr.io/siderolabs/fhs:v1.7.0 AS image-fhs
+FROM ghcr.io/siderolabs/fhs:v1.8.0 AS image-fhs
 
 # base toolchain image
 FROM --platform=${BUILDPLATFORM} ${JS_TOOLCHAIN} AS js-toolchain
@@ -20,7 +20,7 @@ ENV GOPATH=/go
 ENV PATH=${PATH}:/usr/local/go/bin
 
 # runs markdownlint
-FROM docker.io/oven/bun:1.1.26-alpine AS lint-markdown
+FROM docker.io/oven/bun:1.1.29-alpine AS lint-markdown
 WORKDIR /src
 RUN bun i markdownlint-cli@0.41.0 sentences-per-line@0.2.1
 COPY .markdownlint.json .

Makefile

@@ -1,6 +1,6 @@
 # THIS FILE WAS AUTOMATICALLY GENERATED, PLEASE DO NOT EDIT.
 #
-# Generated on 2024-09-04T17:29:43Z by kres b5ca957.
+# Generated on 2024-10-07T18:59:07Z by kres 34e72ac.
 
 # common variables
 
@@ -24,11 +24,11 @@ PROTOBUF_GO_VERSION ?= 1.34.2
 GRPC_GO_VERSION ?= 1.5.1
 GRPC_GATEWAY_VERSION ?= 2.22.0
 VTPROTOBUF_VERSION ?= 0.6.0
-GOIMPORTS_VERSION ?= 0.24.0
+GOIMPORTS_VERSION ?= 0.25.0
 DEEPCOPY_VERSION ?= v0.5.6
-GOLANGCILINT_VERSION ?= v1.60.3
+GOLANGCILINT_VERSION ?= v1.61.0
 GOFUMPT_VERSION ?= v0.7.0
-GO_VERSION ?= 1.23.0
+GO_VERSION ?= 1.23.2
 GO_BUILDFLAGS ?=
 GO_LDFLAGS ?=
 CGO_ENABLED ?= 0
@@ -72,7 +72,7 @@ COMMON_ARGS += --build-arg=DEEPCOPY_VERSION="$(DEEPCOPY_VERSION)"
 COMMON_ARGS += --build-arg=GOLANGCILINT_VERSION="$(GOLANGCILINT_VERSION)"
 COMMON_ARGS += --build-arg=GOFUMPT_VERSION="$(GOFUMPT_VERSION)"
 COMMON_ARGS += --build-arg=TESTPKGS="$(TESTPKGS)"
-JS_TOOLCHAIN ?= docker.io/oven/bun:1.1.26-alpine
+JS_TOOLCHAIN ?= docker.io/oven/bun:1.1.29-alpine
 TOOLCHAIN ?= docker.io/golang:1.23-alpine
 
 # extra variables

client/api/omni/specs/infra.proto

@@ -12,6 +12,7 @@ message MachineRequestSpec {
   repeated string kernel_args = 4;
   repeated specs.MetaValue meta_values = 5;
   string provider_data = 6;
+  GrpcTunnelMode grpc_tunnel = 7;
 }
 
 message MachineRequestStatusSpec {