Important
This is an independent, community-built project and is not an official product of Sidero Labs. It is not affiliated with, endorsed by, or supported by Sidero Labs. Omni and Talos Linux are trademarks of Sidero Labs, Inc.
A GitOps operator for Sidero Omni — continuously reconciles MachineClasses and Clusters from Git to your Omni instance.
docker run -d \
-v omni-cd-data:/data \
-p 8080:8080 \
ghcr.io/ktijssen/omni-cd:latestOpen http://localhost:8080 — you will be redirected to /setup to create the admin account on first boot. The Omni endpoint and service account key can be configured there or via environment variables.
→ For Docker Compose and Helm see Installation.
- GitOps sync — MachineClasses and Clusters continuously reconciled from Git to Omni
- Multi-repo — Manage resources from multiple Git repositories in one instance
- Drift detection — Detects out-of-sync resources without applying changes; colour-coded diff view
- Live cluster status — Health badges for cluster, controlplane, API, etcd, and WireGuard
- Kubernetes manifest status — Per-cluster manifest sync status with group, mode, phase, and per-resource breakdown
- Machine graph — Visual DAG: Git → Omni → Cluster → MachineSets → Machines
- Per-cluster auto-sync — Enable or disable automatic sync per cluster from the UI
- Unmanaged clusters — Export externally-created clusters as YAML templates
- Authentication — Local login and OIDC/SSO; configurable roles, session management
- Audit log — Every user action recorded with actor, action, and resource; 30-day retention
- Real-time UI — WebSocket-driven dashboard; no page refreshes needed
- Persistent state — State and logs survive container restarts via volume mount
- Prometheus metrics —
/metricsendpoint with cluster, MC, reconcile, and Omni health metrics; includes Grafana dashboard and ServiceMonitor - Helm chart — Ingress, HTTPRoute (Gateway API), existing secrets, and Prometheus ServiceMonitor support
| Installation | Docker, Docker Compose, Helm, data layout |
| Configuration | Environment variables, repository structure |
| Authentication | Local login, OIDC/SSO, user roles |
| Web UI | Page-by-page reference with screenshots |
| API Reference | All endpoints with roles and payloads |
| Development | Task commands, troubleshooting, contributing |
Contributions are welcome. Please open an issue or submit a pull request on GitHub.
Have a question, idea, or found a bug? I'd love to hear from you. You can find me in the Sidero Labs Community Slack — feel free to reach out there.



