Merge branch 'main' into f-gh-13120-sso-umbrella-merged-main

.changelog/13539.txt

@@ -0,0 +1,3 @@
+```release-note:improvement
+build: Update go toolchain to 1.18.5
+```

.changelog/13670.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixed a bug where task memory was reported as zero on systems using cgroups v2
+```

.changelog/13755.txt

@@ -0,0 +1,3 @@
+```release-note:improvement
+template: Templates support new uid/gid parameter pair
+```

.changelog/13907.txt

@@ -0,0 +1,3 @@
+```release-note:improvement
+template: Expose consul-template configuration options at the client level for `nomad_retry`.
+```

.changelog/13919.txt

@@ -0,0 +1,3 @@
+```release-note:improvement
+csi: Add `stage_publish_base_dir` field to `csi_plugin` block to support plugins that require a specific staging/publishing directory for mounts
+```

.changelog/13971.txt

@@ -0,0 +1,3 @@
+```release-note:improvement
+qemu: use shorter socket file names to reduce the chance of hitting the max path length
+```

.changelog/13972.txt

@@ -0,0 +1,3 @@
+```release-note:improvement
+template: add script change_mode that allows scripts to be executed on template change
+```

.changelog/13991.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+ui: when creating a secure variable, check against your namespaces rather than assuming default
+```

.changelog/14000.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+qemu: restore the monitor socket path when restoring a QEMU task.
+```

.changelog/14001.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+deployments: Fixed a bug that prevented auto-approval if canaries were marked as unhealthy during deployment
+```

.changelog/14025.txt

@@ -0,0 +1,3 @@
+```release-note:improvement
+deps: Update go.etcd.io/bbolt to v1.3.6
+```

.changelog/14065.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+cli: Fixed a bug where job validation requeset was not sent to leader
+```

.changelog/14069.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+cli: Fixed a bug where the memory usage reported by Allocation Resource Utilization is zero on systems using cgroups v2
+```

.changelog/14088.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+cli: Fixed a bug where vault token not respected in plan command
+```

.changelog/14089.txt

@@ -0,0 +1,3 @@
+```release-note:improvement
+driver/docker: Added config option to disable container healthcheck
+```

.changelog/14103.txt

@@ -0,0 +1,3 @@
+```release-note:improvement
+deps: Update google.golang.org/grpc to v1.48.0
+```

.changelog/14112.txt

@@ -0,0 +1,3 @@
+```release-note:improvement
+deps: Update fsouza/go-dockerclient to v1.8.2
+```

.changelog/14115.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Removes duplicate breadcrumb header when navigating from child job back to parent.
+```

.changelog/14127.txt

@@ -0,0 +1,7 @@
+```release-note:improvement
+client: add option to restart all tasks of an allocation, regardless of lifecycle type or state.
+```
+
+```release-note:improvement
+client: only start poststop tasks after poststart tasks are done.
+```

.changelog/14132.txt

@@ -0,0 +1,3 @@
+```release-note:improvement
+build: update to go1.19
+```

.changelog/14138.txt

@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: add general keyboard navigation to the Nomad UI
+```

.changelog/14140.txt

@@ -0,0 +1,3 @@
+```release-note:improvement
+cli: `acl policy info` output format has changed to improve readability with large policy documents
+```

.changelog/14145.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+api: cleanup whitespace from failed api response body
+```

.changelog/14171.txt

@@ -0,0 +1,3 @@
+```release-note:improvement
+sentinel: add the ability to reference the namespace and Nomad acl token in policies
+```

.changelog/14199.txt

@@ -0,0 +1,3 @@
+```release-note:feature
+[ui] Services table: Display task-level services in addition to group-level services.
+```

.changelog/14203.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+template: Fixed a bug where job templates would use `uid` and `gid` 0 after upgrading to Nomad 1.3.3, causing tasks to fail with the error `failed looking up user: managing file ownership is not supported on Windows`.
+```

.changelog/14212.txt

@@ -0,0 +1,3 @@
+```release-note:breaking-change
+audit (Enterprise): fixed inconsistency in event filter logic
+```

.changelog/14223.txt

@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Add button to restart all tasks in an allocation.
+```

.changelog/14224.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixed a bug that caused the allocation details page to display the stats bar chart even if the task was pending.
+```

.changelog/14248.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+client: Fixed a bug where user lookups would hang or panic
+```

.changelog/14297.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+client/logmon: fixed a bug where logmon cannot find nomad executable
+```

.changelog/14298.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+vault: Fixed a bug where changing the Vault configuration `namespace` field was not detected as a change during server configuration reload.
+```
+
+```release-note:bug
+vault: Fixed a bug where Vault clients were recreated when the server configuration was reloaded, even if there were no changes to the Vault configuration.
+```

.circleci/config.yml

@@ -171,7 +171,11 @@ jobs:
             mkdir -p $GOTESTSUM_PATH
       - install-golang:
           target_directory: "c:"
-      - run: go version
+      - run:
+          name: Show installed Go version
+          command: |
+            export PATH=/c/go/bin:/c/gopath/bin:$PATH
+            go version
       - install-vault:
           version: $VAULT_VERSION
       - run: vault version
@@ -457,7 +461,7 @@ executors:
   go:
     working_directory: /go/src/github.com/hashicorp/nomad
     docker:
-      - image: docker.mirror.hashicorp.services/golang:1.18.3
+      - image: docker.mirror.hashicorp.services/golang:1.19
     resource_class: medium
     environment:
       <<: *common_envs
@@ -470,7 +474,7 @@ executors:
       resource_class: large
     environment: &machine_env
       <<: *common_envs
-      GOLANG_VERSION: 1.18.3
+      GOLANG_VERSION: 1.19
 
   go-macos:
     working_directory: ~/go/src/github.com/hashicorp/nomad
@@ -479,7 +483,7 @@ executors:
     environment:
       <<: *common_envs
       GOPATH: /Users/distiller/go
-      GOLANG_VERSION: 1.18.3
+      GOLANG_VERSION: 1.19
 
   go-windows:
     machine:
@@ -491,7 +495,7 @@ executors:
       GOPATH: c:\gopath
       GOBIN: c:\gopath\bin
       GOTESTSUM_PATH: c:\tmp\test-reports
-      GOLANG_VERSION: 1.18.3
+      GOLANG_VERSION: 1.19
       GOTESTSUM_VERSION: 1.7.0
       VAULT_VERSION: 1.4.1
 

.github/workflows/release.yml

@@ -186,10 +186,18 @@ jobs:
             echo "Version ${{ github.event.inputs.version }} is a prerelease, skipping update of LAST_RELEASE"
           fi
 
+      - name: Remove generated files
+        run: |
+          # These generated files are only needed when building the final
+          # binary and should be not be present in the repository afterwards.
+          find . -name '*.generated.go' | xargs git rm
+          git status
+
       - name: Commit post-release changes
         run: |
-          # Display stated and unstaged diffs.
-          git diff --color=always HEAD
+          # Display staged and unstaged diffs, skipping deleted files to avoid
+          # cluttering the output with the generated files.
+          git diff --diff-filter=d --color=always HEAD
           git add -A .
           if ! git diff-index --quiet HEAD --; then
             git commit --message 'Prepare for next release'

.github/workflows/test-core.yaml

@@ -21,7 +21,7 @@ on:
       - 'website/**'
 env:
   VERBOSE: 1
-  GO_VERSION: 1.18.3
+  GO_VERSION: 1.19
   GOBIN: /usr/local/bin
   GOTESTARCH: amd64
   CONSUL_VERSION: 1.11.3

.go-version

@@ -1 +1 @@
-1.18.3
+1.19.0

.release/ci.hcl

@@ -13,10 +13,7 @@ project "nomad" {
 
     release_branches = [
       "main",
-      "release/1.0.x",
-      "release/1.1.x",
-      "release/1.2.x",
-      "release/1.3.x",
+      "release/**",
     ]
   }
 }
@@ -225,3 +222,17 @@ event "promote-production-packaging" {
     on = "always"
   }
 }
+
+event "post-publish-website" {
+  depends = ["promote-production-packaging"]
+
+  action "post-publish-website" {
+    organization = "hashicorp"
+    repository   = "crt-workflows-common"
+    workflow     = "post-publish-website"
+  }
+
+  notification {
+    on = "always"
+  }
+}

.semgrep/api_errorf.yml

@@ -0,0 +1,11 @@
+rules:
+  - id: "fmt_errorf_unformatted_use"
+    patterns:
+      - pattern: fmt.Errorf("...")
+    message: "Use of fmt.Errorf without formatting. Please use errors.New"
+    languages:
+      - "go"
+    severity: "WARNING"
+    paths:
+      include:
+        - "./api/*"

CHANGELOG.md

@@ -1,3 +1,25 @@
+## 1.3.3 (August 05, 2022)
+
+IMPROVEMENTS:
+
+* build: Update go toolchain to 1.18.5 [[GH-13956](https://github.com/hashicorp/nomad/pull/13956)]
+* csi: Add `stage_publish_base_dir` field to `csi_plugin` block to support plugins that require a specific staging/publishing directory for mounts [[GH-13919](https://github.com/hashicorp/nomad/issues/13919)]
+* qemu: use shorter socket file names to reduce the chance of hitting the max path length [[GH-13971](https://github.com/hashicorp/nomad/issues/13971)]
+* template: Expose consul-template configuration options at the client level for `nomad_retry`. [[GH-13907](https://github.com/hashicorp/nomad/issues/13907)]
+* template: Templates support new uid/gid parameter pair [[GH-13755](https://github.com/hashicorp/nomad/issues/13755)]
+* ui: Reorder and apply the same style to the Evaluations list page filters to match the Job list page. [[GH-13866](https://github.com/hashicorp/nomad/issues/13866)]
+
+BUG FIXES:
+
+* acl: Fixed a bug where the timestamp for expiring one-time tokens was not deterministic between servers [[GH-13737](https://github.com/hashicorp/nomad/issues/13737)]
+* deployments: Fixed a bug that prevented auto-approval if canaries were marked as unhealthy during deployment [[GH-14001](https://github.com/hashicorp/nomad/issues/14001)]
+* metrics: Fixed a bug where blocked evals with no class produced no dc:class scope metrics [[GH-13786](https://github.com/hashicorp/nomad/issues/13786)]
+* namespaces: Fixed a bug that allowed deleting a namespace that contained a CSI volume [[GH-13880](https://github.com/hashicorp/nomad/issues/13880)]
+* qemu: restore the monitor socket path when restoring a QEMU task. [[GH-14000](https://github.com/hashicorp/nomad/issues/14000)]
+* servicedisco: Fixed a bug where non-unique services would escape job validation [[GH-13869](https://github.com/hashicorp/nomad/issues/13869)]
+* ui: Add missing breadcrumb in the Evaluations page. [[GH-13865](https://github.com/hashicorp/nomad/issues/13865)]
+* ui: Fixed a bug where task memory was reported as zero on systems using cgroups v2 [[GH-13670](https://github.com/hashicorp/nomad/issues/13670)]
+
 ## 1.3.2 (July 13, 2022)
 
 IMPROVEMENTS:
@@ -204,6 +226,17 @@ BUG FIXES:
 * ui: fix broken link to task-groups in the Recent Allocations table in the Job Detail overview page. [[GH-12765](https://github.com/hashicorp/nomad/issues/12765)]
 * ui: fix the unit for the task row memory usage metric [[GH-11980](https://github.com/hashicorp/nomad/issues/11980)]
 
+## 1.2.10 (August 05, 2022)
+
+BUG FIXES:
+
+* acl: Fixed a bug where the timestamp for expiring one-time tokens was not deterministic between servers [[GH-13737](https://github.com/hashicorp/nomad/issues/13737)]
+* build: Update go toolchain to 1.18.5 [[GH-13956](https://github.com/hashicorp/nomad/pull/13956)]
+* deployments: Fixed a bug that prevented auto-approval if canaries were marked as unhealthy during deployment [[GH-14001](https://github.com/hashicorp/nomad/issues/14001)]
+* metrics: Fixed a bug where blocked evals with no class produced no dc:class scope metrics [[GH-13786](https://github.com/hashicorp/nomad/issues/13786)]
+* namespaces: Fixed a bug that allowed deleting a namespace that contained a CSI volume [[GH-13880](https://github.com/hashicorp/nomad/issues/13880)]
+* qemu: restore the monitor socket path when restoring a QEMU task. [[GH-14000](https://github.com/hashicorp/nomad/issues/14000)]
+
 ## 1.2.9 (July 13, 2022)
 
 BUG FIXES:
@@ -453,6 +486,15 @@ BUG FIXES:
 * server: Fixed a panic on arm64 platform when dispatching a job with a payload [[GH-11396](https://github.com/hashicorp/nomad/issues/11396)]
 * server: Fixed a panic that may occur when preempting multiple allocations on the same node [[GH-11346](https://github.com/hashicorp/nomad/issues/11346)]
 
+## 1.1.16 (August 05, 2022)
+
+BUG FIXES:
+
+* acl: Fixed a bug where the timestamp for expiring one-time tokens was not deterministic between servers [[GH-13737](https://github.com/hashicorp/nomad/issues/13737)]
+* deployments: Fixed a bug that prevented auto-approval if canaries were marked as unhealthy during deployment [[GH-14001](https://github.com/hashicorp/nomad/issues/14001)]
+* namespaces: Fixed a bug that allowed deleting a namespace that contained a CSI volume [[GH-13880](https://github.com/hashicorp/nomad/issues/13880)]
+* qemu: restore the monitor socket path when restoring a QEMU task. [[GH-14000](https://github.com/hashicorp/nomad/issues/14000)]
+
 ## 1.1.15 (July 13, 2022)
 
 BUG FIXES: