Nomad - v1.3.10

1.3.10 (March 01, 2023)

BREAKING CHANGES:

• core: Ensure no leakage of evaluations for batch jobs. Prior to this change allocations and evaluations for batch jobs were never garbage collected until the batch job was explicitly stopped. The new batch_eval_gc_threshold server configuration controls how often they are collected. The default threshold is 24h. [GH-15097]

IMPROVEMENTS:

• build: Update to go1.19.5 [GH-15769]
• build: Update to go1.20 [GH-16029]
• client: detect and cleanup leaked iptables rules [GH-15407]
• consul: add client configuration for grpc_ca_file [GH-15701]
• env/ec2: update cpu metadata [GH-15770]
• fingerprint: Detect CNI plugins and set versions as node attributes [GH-15452]

DEPRECATIONS:

• api: The connect ConsulExposeConfig.Path field is deprecated in favor of ConsulExposeConfig.Paths [GH-15541]
• api: The connect ConsulProxy.ExposeConfig field is deprecated in favor of ConsulProxy.Expose [GH-15541]

BUG FIXES:

• acl: Fixed a bug where creating/updating a policy which was invalid would return a 404 status code, not a 400 [GH-16000]
• agent: Make agent syslog log level follow log_level config [GH-15625]
• api: Added missing node states to NodeStatus constants [GH-16166]
• api: Fix stale querystring parameter value as boolean [GH-15605]
• api: Fixed a bug where exposeConfig field was not provided correctly when getting the jobs via the API [GH-15541]
• api: Fixed a nil pointer dereference when periodic jobs are missing their periodic spec [GH-13845]
• cgutil: handle panic coming from runc helper method [GH-16180]
• cli: Fixed a panic in deployment status when rollback deployments are slow to appear [GH-16011]
• connect: ingress http/2/grpc listeners may exclude hosts [GH-15749]
• consul: Fixed a bug where acceptable service identity on Consul token was not accepted [GH-15928]
• consul: Fixed a bug where consul token was not respected when reverting a job [GH-15996]
• consul: Fixed a bug where services would continuously re-register when using ipv6 [GH-15411]
• core: enforce strict ordering that node status updates are recorded after allocation updates for reconnecting clients [GH-15808]
• csi: Fixed a bug where a crashing plugin could panic the Nomad client [GH-15518]
• csi: Fixed a bug where secrets that include '=' were incorrectly rejected [GH-15670]
• csi: Fixed a bug where volumes in non-default namespaces could not be scheduled for system or sysbatch jobs [GH-15372]
• csi: Fixed potential state store corruption when garbage collecting CSI volume claims or checking whether it's safe to force-deregister a volume [GH-16256]
• docker: Fixed a bug where images referenced by multiple tags would not be GC'd [GH-15962]
• docker: Fixed a bug where infra_image did not get alloc_id label [GH-15898]
• docker: configure restart policy for bridge network pause container [GH-15732]
• event stream: Fixed a bug where undefined ACL policies on the request's ACL would result in incorrect authentication errors [GH-15495]
• fix: Add the missing option propagation_mode for volume_mount [GH-15626]
• parser: Fixed a panic in the job spec parser when a variable validation block was missing its condition [GH-16018]
• scheduler (Enterprise): Fixed a bug that prevented new allocations from multiregion jobs to be placed in situations where other regions are not involved, such as node updates. [GH-15325]
• template: Fixed a bug that caused the chage script to fail to run [GH-15915]
• ui: Fix allocation memory chart to display the same value as the CLI [GH-15909]
• ui: Fix navigation to pages for jobs that are not in the default namespace [GH-15906]
• volumes: Fixed a bug where per_alloc was allowed for volume blocks on system and sysbatch jobs, which do not have an allocation index [GH-16030]