nomad

nomad copied to clipboard

Root signing key rotation and prepublishing

2

Nomad 1.7 uses a root encryption key to encrypt Variables at rest and a root signing key to sign Workload Identities. These root keys should be rotated automatically using the...

schmichael

keyring: keys stuck in `rekeying` after `rotate -full`

2

In https://github.com/hashicorp/nomad/issues/19340 @sbihel reported a behavior where keys would get stuck in `rekeying` after running `nomad operator root keyring rotate -full`. I was able to confirm this and build a...

tgross

keyring: replication tries to replicate rotated-away keys

2

In https://github.com/hashicorp/nomad/issues/19340 @sbihel reported a behavior where the followers would try to replicate keys that had been previously rotated out, and this would fail: > [WARN] nomad.keyring.replicator: failed to fetch...

tgross

Add the task group name to allocation hover and deployment/allocation history

3

### Proposal I think it would be very helpful and a great addition for UX to add the name of the task group to the hover state of a allocation...

octdanb

network fingerprinting can't detect changes without restart

2

### Nomad version Nomad v1.7.7 BuildDate 2024-04-16T19:26:43Z Revision 0f34c85ee63f6472bd2db1e2487611f4b176c70c ### Operating system and Environment details Debian 12.5 ### Issue When restarting a node, sometimes Nomad picks up incorrect or delayed...

elgatopanzon

Upgrade to docker-ce-cli 5:27.0.3 breaks nomad

2

### Nomad version Nomad v1.8.1 BuildDate 2024-06-19T06:43:57Z Revision 5022543e4b7b8dcec9df123f86630ae3fdcffbe6 ### Operating system and Environment details `lsb_release -a` No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 22.04.4 LTS Release:...

ebarriosjr

Conditional JobSpec Variables for Task Based on Node Architecture

3

We have the following problem - we need to deploy a job in an environment where nodes can be either amd64 or arm64. This isn't an issue when the jobspec...

valafon

Right now the `consul {}` block is optional and only particularly useful for Nomad Enterprise users. So this means in Nomad 1.7.0 we weren't able to reliably determine whether a...

tgross

DEBUG log level is extremely verbose due to quiescence behaviour bug in consul-template

2

### Nomad version ``` Nomad v1.7.7 BuildDate 2024-04-16T19:26:43Z Revision 0f34c85ee63f6472bd2db1e2487611f4b176c70c ``` ### Operating system and Environment details `N/A` ### Issue A longstanding consul-template [issue](https://github.com/hashicorp/consul-template/issues/1427) makes Nomad DEBUG logs extremely verbose...

lattwood

Workload identity : lack of usable user_claim when using Nomad namespaces and Vault entities

3

I'm working on migrating some clusters from the legacy Vault token based integration to the new workload identity based one. My aim is to be able to create a single...

the-nando