1.3.2 (July 13, 2022)
IMPROVEMENTS:
- agent: Added delete support to the eval HTTP API [GH-13492]
- agent: emit a warning message if the agent starts with
bootstrap_expect
set to an even number. [GH-12961] - agent: logs are no longer buffered at startup when logging in JSON format [GH-13076]
- api: enable setting
?choose
parameter when querying services [GH-12862] - api: refactor ACL check when using the all namespaces wildcard in the job and alloc list endpoints [GH-13608]
- api: support Authorization Bearer header in lieu of X-Nomad-Token header [GH-12534]
- bootstrap: Added option to allow for an operator generated bootstrap token to be passed to the
acl bootstrap
command [GH-12520] - cli: Added
delete
command to the eval CLI [GH-13492] - cli: Added
scheduler get-config
andscheduler set-config
commands to the operator CLI [GH-13045] - cli: always display job ID and namespace in the
eval status
command [GH-13581] - cli: display namespace and node ID in the
eval list
command and wheneval status
matches multiple evals [GH-13581] - cli: update default redis and use nomad service discovery [GH-13044]
- client: added more fault tolerant defaults for template configuration [GH-13041]
- core: Added the ability to pause and un-pause the eval broker and blocked eval broker [GH-13045]
- core: On node updates skip creating evaluations for jobs not in the node's datacenter. [GH-12955]
- core: automatically mark clients with recurring plan rejections as ineligible [GH-13421]
- driver/docker: Eliminate excess Docker registry pulls for the
infra_image
when it already exists locally. [GH-13265] - fingerprint: add support for detecting kernel architecture of clients. (attribute:
kernel.arch
) [GH-13182] - hcl: added support for using the
filebase64
function in jobspecs [GH-11791] - metrics: emit
nomad.nomad.plan.rejection_tracker.node_score
metric for the number of times a node had a plan rejection within the past time window [GH-13421] - qemu: add support for guest agent socket [GH-12800]
- ui: Namespace filter query paramters are now isolated by route [GH-13679]
BUG FIXES:
- api: Fix listing evaluations with the wildcard namespace and an ACL token [GH-13530]
- api: Fixed a bug where Consul token was not respected for job revert API [GH-13065]
- cli: Fixed a bug in the names of the
node drain
andnode status
sub-commands [GH-13656] - cli: Fixed a bug where job validate did not respect vault token or namespace [GH-13070]
- client: Fixed a bug where max_kill_timeout client config was ignored [GH-13626]
- client: Fixed a bug where network.dns block was not interpolated [GH-12817]
- cni: Fixed a bug where loopback address was not set for all drivers [GH-13428]
- connect: Added missing ability of setting Connect upstream destination namespace [GH-13125]
- core: Fixed a bug where an evicted batch job would not be rescheduled [GH-13205]
- core: Fixed a bug where blocked eval resources were incorrectly computed [GH-13104]
- core: Fixed a bug where reserved ports on multiple node networks would be treated as a collision.
client.reserved.reserved_ports
is now merged into eachhost_network
's reserved ports instead of being treated as a collision. [GH-13651] - core: Fixed a bug where the plan applier could deadlock if leader's state lagged behind plan's creation index for more than 5 seconds. [GH-13407]
- csi: Fixed a regression where a timeout was introduced that prevented some plugins from running by marking them as unhealthy after 30s by introducing a configurable
health_timeout
field [GH-13340] - csi: Fixed a scheduler bug where failed feasibility checks would return early and prevent processing additional nodes [GH-13274]
- docker: Fixed a bug where cgroups-v1 parent was being set [GH-13058]
- lifecycle: fixed a bug where sidecar tasks were not being stopped last [GH-13055]
- state: Fix listing evaluations from all namespaces [GH-13551]
- ui: Allow running jobs from a namespace-limited token [GH-13659]
- ui: Fix a bug that prevented viewing the details of an evaluation in a non-default namespace [GH-13530]
- ui: Fixed a bug that prevented the UI task exec functionality to work from behind a reverse proxy. [GH-12925]
- ui: Fixed an issue where editing or running a job with a namespace via the UI would throw a 404 on redirect. [GH-13588]
- ui: fixed a bug where links to jobs with "@" in their name would mis-identify namespace and 404 [GH-13012]
- volumes: Fixed a bug where additions, updates, or removals of host volumes or CSI volumes were not treated as destructive updates [GH-13008]