Tim Gross

Just wanted to give a summary of where this is at. https://github.com/hashicorp/nomad/pull/14987 fixes some real bugs I've found while investigating, but I'm not 100% sure that it's _the_ fix we...

> Since I thankfully don't use any of the new 1.4 features, I'm inclined to roll everything back to 1.3.6... > That should work, right? Once any new raft log...

Based on some feedback from the internal user, I've got a clue that the underlying issue here is actually related to a bug in garbage collection, which is why I...

GC behavior fixes are https://github.com/hashicorp/nomad/pull/15009. I still haven't been able to reproduce the reported bug exactly, but this at least explains where the extraneous keys were coming from: not from...

We've landed our fixes for this and that'll go out in Nomad 1.4.2, which I'm in the process of prepping. Expect this shortly, and thanks for your patience all!

Several keyring fixes have shipped in Nomad 1.4.2 which should put this issue to rest. I'm going to close this out but please feel free to let us know here...

Hi folks, I'm going to re-open this issue. We've had a report from one of our internal users that they hit this again when upgrading from 1.4.1 to 1.4.2. It's...

Had a bit of a mid-weekend a-ha on this. When the keyring replicator queries the state store at [`encrypter.go#L458`](https://github.com/hashicorp/nomad/blob/main/nomad/encrypter.go#L458), it always receives the keys sorted in-order by KeyID. But if...

I'm working up a patch that does the following: * In replication, fix the early-exit-on-error problem described above. * Adds tracking for which keys have been used to sign live...

Draft PR is up https://github.com/hashicorp/nomad/pull/15092