v1.8.0-rc.1

IMPROVEMENTS:

• agent: Added support for systemd readiness notifications [GH-20528]
• api: new /v1/jobs/statuses endpoint collates details about jobs' allocs and latest deployment, intended for use in the updated UI jobs index page [GH-20130]
• artifact: Added support for downloading artifacts without validating the TLS certificate [GH-20126]
• autopilot: Added operator autopilot health command to review Autopilot health data [GH-20156]
• cli: Add -jwks-ca-file argument to setup consul/vault commands [GH-20518]
• client/volumes: Add a mount volume level option for selinux tags on volumes [GH-19839]
• client: expose network namespace bridge/cni configuration values as task env vars [GH-11810]
• connect: Added support for volume_mount blocks on sidecar task overrides [GH-20575]
• consul/connect: Attempt autodetection of podman task driver for Connect gateways [GH-20611]
• consul: provide tasks that have Consul tokens the CONSUL_HTTP_TOKEN environment variable [GH-20519]
• core: Do not create evaluations within batch deregister endpoint during job garbage collection [GH-20510]
• csi: Added support for wildcard namespace to plugin status command [GH-20551]
• deps: Update msgpack to v2 [GH-20173]
• deps: Updated docker dependency to 26.0.1 [GH-20389]
• driver/rawexec: Allow specifying custom cgroups [GH-20481]
• func: Allow custom paths to be added the the getter landlock [GH-20315]
• jobspec: Add a schedule{} block for time based task execution (Enterprise) [GH-22201]
• metrics: Added tracking of enqueue and dequeue times of evaluations to the broker [GH-20329]
• networking: Inject constraints on CNI plugins when using bridge networking [GH-15473]
• scheduler: Added a new configuration to avoid rescheduling allocations if a nodes misses one or more heartbits [GH-19101]
• server: Add new options for reconcilation in case of disconnected nodes [GH-20029]
• ui: Added a UI for creating, editing and deleting Sentinel Policies [GH-20483]
• ui: Added a copy button on Action output [GH-19496]
• ui: Added a new UI block to job spec in order to provide description and links in the Web UI [GH-18292]
• ui: Added token.name information to the top nav for ease of operator debugging [GH-20539]
• ui: Improve error and warning messages for invalid variable and job template paths/names [GH-19989]
• ui: Overhaul of the Jobs Index list page, with live updates, more informative statuses, filter expressions, and pagination [GH-20452]
• ui: Prompt a user before they close an exec window to prevent accidental close-browser-tab shortcuts that overlap with terminal ones [GH-19985]
• ui: Replaced single-line variable value fields with multi-line textarea blocks [GH-19544]
• ui: Updated the style of components in the Variables web ui [GH-19544]
• ui: change the State filter on clients page to split out eligibility and drain status [GH-18607]

BUG FIXES:

• cli: Fix handling of scaling jobs which don't generate evals [GH-20479]
• client: Fix unallocated CPU metric calculation when client reserved CPU is set [GH-20543]
• client: terminate old exec task processes before starting new ones, to avoid accidentally leaving running processes in case of an error [GH-20500]
• core: Fix multiple incorrect type conversion for potential overflows [GH-20553]
• csi: Fixed a bug where concurrent mount and unmount operations could unstage volumes needed by another allocation [GH-20550]
• csi: Fixed a bug where plugins would not be deleted on GC if their job updated the plugin ID [GH-20555]
• csi: Fixed a bug where volumes in different namespaces but the same ID would fail to stage on the same client [GH-20532]
• quota (Enterprise): Fixed a bug where quota usage would not be freed if a job was purged
• services: Added retry to Nomad service deregistration RPCs during alloc stop [GH-20596]
• services: Fixed bug where Nomad services might not be deregistered when nodes are marked down or allocations are terminal [GH-20590]
• structs: Fix job canonicalization for array type fields [GH-20522]
• ui: Fix a bug where the UI would prompt a user to promote a deployment with unplaced canaries [GH-20408]
• ui: Fixed an issue where keynav would not trigger evaluation sidebar expand [GH-20047]
• ui: Show the namespace in the web UI exec command hint [GH-20218]
• windows: Fixed a regression where scanning task processes was inefficient [GH-20619]

v1.8.0-beta.1

1.8.0 (Unreleased)

IMPROVEMENTS:

• agent: Added support for systemd readiness notifications [GH-20528]
• api: new /v1/jobs/statuses endpoint collates details about jobs' allocs and latest deployment, intended for use in the updated UI jobs index page [GH-20130]
• artifact: Added support for downloading artifacts without validating the TLS certificate [GH-20126]
• autopilot: Added operator autopilot health command to review Autopilot health data [GH-20156]
• cli: Add -jwks-ca-file argument to setup consul/vault commands [GH-20518]
• client/volumes: Add a mount volume level option for selinux tags on volumes [GH-19839]
• consul: provide tasks that have Consul tokens the CONSUL_HTTP_TOKEN environment variable [GH-20519]
• core: Do not create evaluations within batch deregister endpoint during job garbage collection [GH-20510]
• deps: Update msgpack to v2 [GH-20173]
• deps: Updated docker dependency to 26.0.1 [GH-20389]
• func: Allow custom paths to be added the the getter landlock [GH-20315]
• metrics: Added tracking of enqueue and dequeue times of evaluations to the broker [GH-20329]
• networking: Inject constraints on CNI plugins when using bridge networking [GH-15473]
• scheduler: Added a new configuration to avoid rescheduling allocations if a nodes misses one or more heartbits [GH-19101]
• server: Add new options for reconcilation in case of disconnected nodes [GH-20029]
• ui: Added a copy button on Action output [GH-19496]
• ui: Improve error and warning messages for invalid variable and job template paths/names [GH-19989]
• ui: Overhaul of the Jobs Index list page, with live updates, more informative statuses, filter expressions, and pagination [GH-20452]
• ui: Prompt a user before they close an exec window to prevent accidental close-browser-tab shortcuts that overlap with terminal ones [GH-19985]
• ui: Replaced single-line variable value fields with multi-line textarea blocks [GH-19544]
• ui: Updated the style of components in the Variables web ui [GH-19544]
• ui: change the State filter on clients page to split out eligibility and drain status [GH-18607]

BUG FIXES:

• cli: Fix handling of scaling jobs which don't generate evals [GH-20479]
• quota (Enterprise): Fixed a bug where quota usage would not be freed if a job was purged
• ui: Fix a bug where the UI would prompt a user to promote a deployment with unplaced canaries [GH-20408]
• ui: Fixed an issue where keynav would not trigger evaluation sidebar expand [GH-20047]
• ui: Show the namespace in the web UI exec command hint [GH-20218]

v1.7.7

1.7.7 (April 16, 2024)

SECURITY:

• artifact: Updated go-getter dependency to v1.7.4 to address CVE-2024-3817 [GH-20391]

IMPROVEMENTS:

• autopilot: add Enterprise health information to autopilot API [GH-20153]
• cli: Collect only one heap profile per operator debug interval [GH-20219]
• consul/connect: Added support for TLS configuration, headers configuration, and request limit configuration to ingress service block [GH-16753]
• consul/connect: Added support for destination partition in upstream block [GH-20167]
• scheduler: Record exhausted node metrics for devices when preemption fails to find an allocation to evict [GH-20346]
• ui: When you re-bind keyboard shortcuts they now correctly show up in shift-held hints [GH-20235]

BUG FIXES:

• agent: allow configuration of in-memory telemetry sink [GH-20166]
• api: Fixed a bug where AllocDirStats field was missing from Read Stats client API [GH-20261]
• cli: Fixed a bug where operator debug did not respect the -pprof-interval flag and would take only one profile [GH-20206]
• cni: Fixed a regression where default DNS set by dockerd or other task drivers was not respected [GH-20189]
• config: Fixed a bug where IPv6 addresses were not accepted without ports for client.servers blocks [GH-20324]
• consul: Fixed a bug where services with interpolation would not get correctly signed Workload Identities [GH-20344]
• deployments: Fixed a goroutine leak when jobs are purged [GH-20348]
• deps: Updated consul-template dependency to 0.37.4 to fix a resource leak [GH-20234]
• docker: Fixed a bug where cpuset cgroup would not be updated on cgroup v1 systems [GH-20294]
• docker: Fixed a bug where cpuset would not be updated on cgroup v2 systems using cgroupfs [GH-20276]
• drain: Fixed a bug where Workload Identity tokens could not be used to drain a node [GH-20317]
• namespace/node pool: Fixed a bug where the -region flag would not be respected for namespace and node pool updates if ACLs were disabled [GH-20220]
• state: Fixed a bug where restarting a server could fail if the Raft logs include a drain update that used a now-expired token [GH-20317]
• template: Fixed a bug where a partial client.template block would cause defaults for unspecified fields to be ignored [GH-20165]
• ui: Fix an issue where the job status box would error if an allocation had no task events [GH-20383]

v1.6.10

1.6.10 (April 16, 2024)

SECURITY:

• artifact: Updated go-getter dependency to v1.7.4 to address CVE-2024-3817 [GH-20391]

BUG FIXES:

• api: Fixed a bug where AllocDirStats field was missing from Read Stats client API [GH-20261]
• cli: Fixed a bug where operator debug did not respect the -pprof-interval flag and would take only one profile [GH-20206]
• cni: Fixed a regression where default DNS set by dockerd or other task drivers was not respected [GH-20189]
• config: Fixed a bug where IPv6 addresses were not accepted without ports for client.servers blocks [GH-20324]
• deployments: Fixed a goroutine leak when jobs are purged [GH-20348]
• deps: Updated consul-template dependency to 0.37.4 to fix a resource leak [GH-20234]
• drain: Fixed a bug where Workload Identity tokens could not be used to drain a node [GH-20317]
• namespace/node pool: Fixed a bug where the -region flag would not be respected for namespace and node pool updates if ACLs were disabled [GH-20220]
• state: Fixed a bug where restarting a server could fail if the Raft logs include a drain update that used a now-expired token [GH-20317]
• template: Fixed a bug where a partial client.template block would cause defaults for unspecified fields to be ignored [GH-20165]
• ui: Fix an issue where the job status box would error if an allocation had no task events [GH-20383]

v1.5.17

1.5.17 (April 16, 2024)

SECURITY:

• artifact: Updated go-getter dependency to v1.7.4 to address CVE-2024-3817 [GH-20391]

BUG FIXES:

• api: Fixed a bug where AllocDirStats field was missing from Read Stats client API [GH-20261]
• cli: Fixed a bug where operator debug did not respect the -pprof-interval flag and would take only one profile [GH-20206]
• cni: Fixed a regression where default DNS set by dockerd or other task drivers was not respected [GH-20189]
• config: Fixed a bug where IPv6 addresses were not accepted without ports for client.servers blocks [GH-20324]
• deployments: Fixed a goroutine leak when jobs are purged [GH-20348]
• deps: Updated consul-template dependency to 0.37.4 to fix a resource leak [GH-20234]
• drain: Fixed a bug where Workload Identity tokens could not be used to drain a node [GH-20317]
• state: Fixed a bug where restarting a server could fail if the Raft logs include a drain update that used a now-expired token [GH-20317]
• template: Fixed a bug where a partial client.template block would cause defaults for unspecified fields to be ignored [GH-20165]

v1.7.6

1.7.6 (March 12, 2024)

SECURITY:

• build: Update to go1.22 to address Go standard library vulnerabilities CVE-2024-24783, CVE-2023-45290, and CVE-2024-24785. [GH-20066]
• deps: Upgrade protobuf library to 1.33.0 to avoid scan alerts for CVE-2024-24786, which Nomad is not vulnerable to [GH-20100]

IMPROVEMENTS:

• cli: Added -json option on job status command [GH-18925]
• fingerprint: Added a fingerprint for Consul DNS address and port [GH-19969]

BUG FIXES:

• cli: Fixed a bug where the nomad job restart command could crash if the job type was not present in a response from the server [GH-20049]
• client: Fixed a bug where corrupt client state could panic the client [GH-19972]
• cni: Fixed a bug where DNS set by CNI plugins was not provided to task drivers [GH-20007]
• connect: Fixed a bug where expose blocks would not appear in job plan diff output [GH-19990]
• server: Prevent NPE when service lacks identity [GH-19986]

v1.6.9

1.6.9 (March 12, 2024)

SECURITY:

• build: Update to go1.22 to address Go standard library vulnerabilities CVE-2024-24783, CVE-2023-45290, and CVE-2024-24785. [GH-20066]
• deps: Upgrade protobuf library to 1.33.0 to avoid scan alerts for CVE-2024-24786, which Nomad is not vulnerable to [GH-20100]

BUG FIXES:

• cli: Fixed a bug where the nomad job restart command could crash if the job type was not present in a response from the server [GH-20049]
• client: Fixed a bug where corrupt client state could panic the client [GH-19972]
• cni: Fixed a bug where DNS set by CNI plugins was not provided to task drivers [GH-20007]
• connect: Fixed a bug where expose blocks would not appear in job plan diff output [GH-19990]

v1.5.16

1.5.16 (March 12, 2024)

SECURITY:

• build: Update to go1.22 to address Go standard library vulnerabilities CVE-2024-24783, CVE-2023-45290, and CVE-2024-24785. [GH-20066]
• deps: Upgrade protobuf library to 1.33.0 to avoid scan alerts for CVE-2024-24786, which Nomad is not vulnerable to [GH-20100]

BUG FIXES:

• cli: Fixed a bug where the nomad job restart command could crash if the job type was not present in a response from the server [GH-20049]
• client: Fixed a bug where corrupt client state could panic the client [GH-19972]
• cni: Fixed a bug where DNS set by CNI plugins was not provided to task drivers [GH-20007]
• connect: Fixed a bug where expose blocks would not appear in job plan diff output [GH-19990]

v1.7.5

1.7.5 (February 13, 2024)

SECURITY:

• windows: Remove LazyDLL calls for system modules to harden Nomad against attacks from the host [GH-19925]

IMPROVEMENTS:

• api: emit JobDeregistered event when job is deregistered with purge [GH-19903]

BUG FIXES:

• cli: Fix return code when nomad job run succeeds after a blocked eval [GH-19876]
• cli: Fixed a bug where the nomad tls ca create command failed when the -domain was used without other values [GH-19892]
• client: Ensure the value for CPU shares are within the allowed range [GH-19935]
• client: Prevent client from starting if cgroup initialization fails [GH-19915]
• connect: Fixed envoy sidecars being unable to restart after node reboots [GH-19787]
• driver/java: Ensure the OOM killed response is populated when the task exits [GH-19818]
• driver/qemu: Ensure the OOM killed response is populated when the task exits [GH-19830]
• driver/rawexec: Ensure the OOM killed response is populated when the task exits [GH-19829]
• exec: Fixed a bug in alloc exec where closing websocket streams could cause a panic [GH-19932]
• scheduler: Fixed a bug that caused blocked evaluations due to port conflict to not have a reason explaining why the evaluation was blocked [GH-19933]
• ui: Fix an issue where a same-named task from a different group could be selected when the user clicks Exec from a task group page where multiple allocations would be valid [GH-19878]

v1.6.8

1.6.8 (February 13, 2024)

SECURITY:

• windows: Remove LazyDLL calls for system modules to harden Nomad against attacks from the host [GH-19925]

BUG FIXES:

• cli: Fix return code when nomad job run succeeds after a blocked eval [GH-19876]
• cli: Fixed a bug where the nomad tls ca create command failed when the -domain was used without other values [GH-19892]
• connect: Fixed envoy sidecars being unable to restart after node reboots [GH-19787]
• exec: Fixed a bug in alloc exec where closing websocket streams could cause a panic [GH-19932]
• scheduler: Fixed a bug that caused blocked evaluations due to port conflict to not have a reason explaining why the evaluation was blocked [GH-19933]
• ui: Fix an issue where a same-named task from a different group could be selected when the user clicks Exec from a task group page where multiple allocations would be valid [GH-19878]