1.4.0 (Unreleased)

FEATURES:

• ACL Roles: Added support for ACL Roles. [GH-14320]
• Nomad Native Service Discovery: Add built-in support for checks on Nomad services [GH-13715]
• Variables: Added support for storing encrypted configuration values. [GH-13000]
• UI Services table: Display task-level services in addition to group-level services. [GH-14199]

BREAKING CHANGES:

• audit (Enterprise): fixed inconsistency in event filter logic [GH-14212]
• core: remove support for raft protocol version 2 [GH-13467]
• cli: eval status -json no longer supports listing all evals in JSON. Use eval list -json. [GH-14651]

SECURITY:

• client: recover from panics caused by artifact download to prevent the Nomad client from crashing [GH-14696]

IMPROVEMENTS:

• acl: ACL tokens can now be created with an expiration TTL. [GH-14320]
• api: return a more descriptive error when /v1/acl/bootstrap fails to decode request body [GH-14629]
• autopilot: upgrade to raft-autopilot library [GH-14441]
• build: Update go toolchain to 1.19 [GH-14132]
• cli: Removed deprecated network quota fields from quota status output [GH-14468]
• cli: acl policy info output format has changed to improve readability with large policy documents [GH-14140]
• cli: operator debug now writes newline-delimited JSON files for large collections [GH-14610]
• cli: ignore -hcl2-strict when -hcl1 is set. [GH-14426]
• cli: warn destructive update only when count is greater than 1 [GH-13103]
• client: Add built-in support for checks on nomad services [GH-13715]
• connect: add namespace, job, and group to Envoy stats [GH-14311]
• connect: add nomad environment variables to envoy bootstrap [GH-12959]
• consul: Allow interpolation of task environment values into Consul Service Mesh configuration [GH-14445]
• consul: Enable setting custom tagged_addresses field [GH-12951]
• core: constraint operands are now compared numerically if operands are numbers [GH-14722]
• deps: Update fsouza/go-dockerclient to v1.8.2 [GH-14112]
• deps: Update go.etcd.io/bbolt to v1.3.6 [GH-14025]
• deps: Update google.golang.org/grpc to v1.48.0 [GH-14103]
• deps: Update gopsutil for improvements in fingerprinting on non-Linux platforms [GH-14209]
• deps: Updated github.com/armon/go-metrics to v0.4.1 which includes a performance improvement for Prometheus sink [GH-14493]
• deps: Updated github.com/hashicorp/go-version to v1.6.0 [GH-14364]
• deps: remove unused darwin C library [GH-13894]
• fingerprint: Add node attribute for number of reservable cores: cpu.num_reservable_cores [GH-14694]
• fingerprint: Consul and Vault attributes are no longer cleared on fingerprinting failure [GH-14673]
• jobspec: Added strlen HCL2 function to determine the length of a string [GH-14463]
• server: Log when a node's eligibility changes [GH-14125]
• ui: Display different message when trying to exec into a job with no task running. [GH-14071]
• ui: add service discovery, along with health checks, to job and allocation routes [GH-14408]
• ui: adds a sidebar to show in-page logs for a given task, accessible via job, client, or task group routes [GH-14612]
• ui: allow deep-dive clicks to tasks from client, job, and task group routes. [GH-14592]
• ui: attach timestamps and a visual indicator on failure to health checks in the Web UI [GH-14677]

BUG FIXES:

• api: Fixed a bug where the List Volume API did not include the ControllerRequired and ResourceExhausted fields. [GH-14484]
• cli: Ignore Vault token when generating job diff. [GH-14424]
• cli: fixed a bug in the operator api command where the HTTPS scheme was not always correctly calculated [GH-14635]
• cli: return exit code 255 when nomad job plan fails job validation. [GH-14426]
• cli: set content length on POST requests when using the nomad operator api command [GH-14634]
• client: Fixed bug where clients could attempt to connect to servers with invalid addresses retrieved from Consul. [GH-14431]
• core: prevent new allocations from overlapping execution with stopping allocations [GH-10446]
• csi: Fixed a bug where a volume that was successfully unmounted by the client but then failed controller unpublishing would not be marked free until garbage collection ran. [GH-14675]
• csi: Fixed a bug where the server would not send controller unpublish for a failed allocation. [GH-14484]
• csi: Fixed a data race in the volume unpublish endpoint that could result in claims being incorrectly marked as freed before being persisted to raft. [GH-14484]
• helpers: Fixed a bug where random stagger func did not protect against negative inputs [GH-14497]
• jobspec: Fixed a bug where an artifact with headers configuration would fail to parse when using HCLv1 [GH-14637]
• metrics: Update client node_scheduling_eligibility value with server heartbeats. [GH-14483]
• quotas (Enterprise): Fixed a server crashing panic when updating and checking a quota concurrently.
• rpc (Enterprise): check for spec changes in all regions when registering multiregion jobs [GH-14519]
• scheduler (Enterprise): Fixed bug where the scheduler would treat multiregion jobs as paused for job types that don't use deployments [GH-14659]
• ui: Remove extra space when displaying the version in the menu footer. [GH-14457]