Nomad - v1.4.5

1.4.5 (March 01, 2023)

BREAKING CHANGES:

• core: Ensure no leakage of evaluations for batch jobs. Prior to this change allocations and evaluations for batch jobs were never garbage collected until the batch job was explicitly stopped. The new batch_eval_gc_threshold server configuration controls how often they are collected. The default threshold is 24h. [GH-15097]

IMPROVEMENTS:

• api: improved error returned from AllocFS.Logs when response is not JSON [GH-15558]
• build: Update to go1.19.5 [GH-15769]
• build: Update to go1.20 [GH-16029]
• cli: Added -wait flag to deployment status for use with -monitor mode [GH-15262]
• cli: Added tls command to enable creating Certificate Authority and Self signed TLS certificates.
  There are two sub commands tls ca and tls cert that are helpers when creating certificates. [GH-14296]
• client: detect and cleanup leaked iptables rules [GH-15407]
• consul: add client configuration for grpc_ca_file [GH-15701]
• deps: Update google.golang.org/grpc to v1.51.0 [GH-15402]
• docs: link to an envoy troubleshooting doc when envoy bootstrap fails [GH-15908]
• env/ec2: update cpu metadata [GH-15770]
• fingerprint: Detect CNI plugins and set versions as node attributes [GH-15452]
• scheduler: allow using device IDs in affinity and constraint [GH-15455]
• ui: Add a button for expanding the Task sidebar to full width [GH-15735]
• ui: Made task rows in Allocation tables look more aligned with their parent [GH-15363]
• ui: Show events alongside logs in the Task sidebar [GH-15733]
• ui: The web UI will now show canary_tags of services anyplace we would normally show tags. [GH-15458]

DEPRECATIONS:

• api: The connect ConsulExposeConfig.Path field is deprecated in favor of ConsulExposeConfig.Paths [GH-15541]
• api: The connect ConsulProxy.ExposeConfig field is deprecated in favor of ConsulProxy.Expose [GH-15541]

BUG FIXES:

• acl: Fixed a bug in token creation which failed to parse expiration TTLs correctly [GH-15999]
• acl: Fixed a bug where creating/updating a policy which was invalid would return a 404 status code, not a 400 [GH-16000]
• agent: Make agent syslog log level follow log_level config [GH-15625]
• api: Added missing node states to NodeStatus constants [GH-16166]
• api: Fix stale querystring parameter value as boolean [GH-15605]
• api: Fixed a bug where exposeConfig field was not provided correctly when getting the jobs via the API [GH-15541]
• api: Fixed a nil pointer dereference when periodic jobs are missing their periodic spec [GH-13845]
• cgutil: handle panic coming from runc helper method [GH-16180]
• check: Add support for sending custom host header [GH-15337]
• cli: Fixed a bug where nomad fmt -check would overwrite the file being checked [GH-16174]
• cli: Fixed a panic in deployment status when rollback deployments are slow to appear [GH-16011]
• cli: corrected typos in ACL role create/delete CLI commands [GH-15382]
• cli: fix nomad fmt -check flag not returning error code [GH-15797]
• client: Fixed a bug where allocation cleanup hooks would not run [GH-15477]
• connect: ingress http/2/grpc listeners may exclude hosts [GH-15749]
• consul: Fixed a bug where acceptable service identity on Consul token was not accepted [GH-15928]
• consul: Fixed a bug where consul token was not respected when reverting a job [GH-15996]
• consul: Fixed a bug where services would continuously re-register when using ipv6 [GH-15411]
• consul: correctly interpret missing consul checks as unhealthy [GH-15822]
• core: enforce strict ordering that node status updates are recorded after allocation updates for reconnecting clients [GH-15808]
• csi: Fixed a bug where a crashing plugin could panic the Nomad client [GH-15518]
• csi: Fixed a bug where secrets that include '=' were incorrectly rejected [GH-15670]
• csi: Fixed a bug where volumes in non-default namespaces could not be scheduled for system or sysbatch jobs [GH-15372]
• csi: Fixed potential state store corruption when garbage collecting CSI volume claims or checking whether it's safe to force-deregister a volume [GH-16256]
• docker: Fixed a bug where images referenced by multiple tags would not be GC'd [GH-15962]
• docker: Fixed a bug where infra_image did not get alloc_id label [GH-15898]
• docker: configure restart policy for bridge network pause container [GH-15732]
• eval broker: Fixed a bug where the cancelable eval reaper used an incorrect lock when getting the set of cancelable evals from the broker [GH-16112]
• event stream: Fixed a bug where undefined ACL policies on the request's ACL would result in incorrect authentication errors [GH-15495]
• fix: Add the missing option propagation_mode for volume_mount [GH-15626]
• parser: Fixed a panic in the job spec parser when a variable validation block was missing its condition [GH-16018]
• scheduler (Enterprise): Fixed a bug that prevented new allocations from multiregion jobs to be placed in situations where other regions are not involved, such as node updates. [GH-15325]
• services: Fixed a bug where check_restart on nomad services on tasks failed with incorrect CheckIDs [GH-16240]
• template: Fixed a bug that caused the chage script to fail to run [GH-15915]
• template: Fixed a bug where the template runner's Nomad token would be erased by in-place updates to a task [GH-16266]
• ui: Fix allocation memory chart to display the same value as the CLI [GH-15909]
• ui: Fix navigation to pages for jobs that are not in the default namespace [GH-15906]
• ui: Fixed a bug where the exec window would not maintain namespace upon refresh [GH-15454]
• ui: Scale down logger height in the UI when the sidebar container also has task events [GH-15759]
• volumes: Fixed a bug where per_alloc was allowed for volume blocks on system and sysbatch jobs, which do not have an allocation index [GH-16030]