Nomad - v1.3.6

Security

1.3.6 (October 04, 2022)

SECURITY:

  • client: recover from panics caused by artifact download to prevent the Nomad client from crashing [GH-14696]

IMPROVEMENTS:

  • api: return a more descriptive error when /v1/acl/bootstrap fails to decode request body [GH-14629]
  • cli: ignore -hcl2-strict when -hcl1 is set. [GH-14426]
  • cli: warn destructive update only when count is greater than 1 [GH-13103]
  • consul: Allow interpolation of task environment values into Consul Service Mesh configuration [GH-14445]
  • ui: Display different message when trying to exec into a job with no task running. [GH-14071]

BUG FIXES:

  • api: Fixed a bug where the List Volume API did not include the ControllerRequired and ResourceExhausted fields. [GH-14484]
  • cli: Ignore Vault token when generating job diff. [GH-14424]
  • cli: fixed a bug in the operator api command where the HTTPS scheme was not always correctly calculated [GH-14635]
  • cli: return exit code 255 when nomad job plan fails job validation. [GH-14426]
  • cli: set content length on POST requests when using the nomad operator api command [GH-14634]
  • client: Fixed bug where clients could attempt to connect to servers with invalid addresses retrieved from Consul. [GH-14431]
  • csi: Fixed a bug where a volume that was successfully unmounted by the client but then failed controller unpublishing would not be marked free until garbage collection ran. [GH-14675]
  • csi: Fixed a bug where the server would not send controller unpublish for a failed allocation. [GH-14484]
  • csi: Fixed a data race in the volume unpublish endpoint that could result in claims being incorrectly marked as freed before being persisted to raft. [GH-14484]
  • helpers: Fixed a bug where random stagger func did not protect against negative inputs [GH-14497]
  • jobspec: Fixed a bug where an artifact with headers configuration would fail to parse when using HCLv1 [GH-14637]
  • metrics: Update client node_scheduling_eligibility value with server heartbeats. [GH-14483]
  • quotas (Enterprise): Fixed a server crashing panic when updating and checking a quota concurrently.
  • rpc: check for spec changes in all regions when registering multiregion jobs [GH-14519]
  • scheduler: Fixed bug where the scheduler would treat multiregion jobs as paused for job types that don't use deployments [GH-14659]
  • template: Fixed a bug where the splay timeout was not being applied when change_mode was set to script. [GH-14749]
  • ui: Remove extra space when displaying the version in the menu footer. [GH-14457]

Security

Security wording was detected, but no CVEs were found.

Details

date
Oct. 6, 2022, 3:02 a.m.
name
v1.3.6
type
Patch
👇
Register or login to:
  • 🔍View and search all Nomad releases.
  • 🛠️Create and share lists to track your tools.
  • 🚨Setup notifications for major, security, feature or patch updates.
  • 🚀Much more coming soon!
Continue with GitHub
Continue with Google
or