Nomad - v1.7.7

1.7.7 (April 16, 2024)

SECURITY:

• artifact: Updated go-getter dependency to v1.7.4 to address CVE-2024-3817 [GH-20391]

IMPROVEMENTS:

• autopilot: add Enterprise health information to autopilot API [GH-20153]
• cli: Collect only one heap profile per operator debug interval [GH-20219]
• consul/connect: Added support for TLS configuration, headers configuration, and request limit configuration to ingress service block [GH-16753]
• consul/connect: Added support for destination partition in upstream block [GH-20167]
• scheduler: Record exhausted node metrics for devices when preemption fails to find an allocation to evict [GH-20346]
• ui: When you re-bind keyboard shortcuts they now correctly show up in shift-held hints [GH-20235]

BUG FIXES:

• agent: allow configuration of in-memory telemetry sink [GH-20166]
• api: Fixed a bug where AllocDirStats field was missing from Read Stats client API [GH-20261]
• cli: Fixed a bug where operator debug did not respect the -pprof-interval flag and would take only one profile [GH-20206]
• cni: Fixed a regression where default DNS set by dockerd or other task drivers was not respected [GH-20189]
• config: Fixed a bug where IPv6 addresses were not accepted without ports for client.servers blocks [GH-20324]
• consul: Fixed a bug where services with interpolation would not get correctly signed Workload Identities [GH-20344]
• deployments: Fixed a goroutine leak when jobs are purged [GH-20348]
• deps: Updated consul-template dependency to 0.37.4 to fix a resource leak [GH-20234]
• docker: Fixed a bug where cpuset cgroup would not be updated on cgroup v1 systems [GH-20294]
• docker: Fixed a bug where cpuset would not be updated on cgroup v2 systems using cgroupfs [GH-20276]
• drain: Fixed a bug where Workload Identity tokens could not be used to drain a node [GH-20317]
• namespace/node pool: Fixed a bug where the -region flag would not be respected for namespace and node pool updates if ACLs were disabled [GH-20220]
• state: Fixed a bug where restarting a server could fail if the Raft logs include a drain update that used a now-expired token [GH-20317]
• template: Fixed a bug where a partial client.template block would cause defaults for unspecified fields to be ignored [GH-20165]
• ui: Fix an issue where the job status box would error if an allocation had no task events [GH-20383]