NOMAD-2.0.3 release notes and known issues

Summary

FEATURES: core: timeouts for batch jobs [ GH-27803 ] SECURITY: cli: Redact token and certificate key CLI flags and environment variables when writing debug bundle [ GH-28063 ] IMPROVEMENTS: acl: Support uploading client ACL tokens [ GH-27741 ] alloc: don't restore when allocDir is inaccessible [ GH-27933 ] api: added agent reload endpoint [ GH-27106 ] build: Updated Go to 1.26.4 [ GH-28080 ] client: Adds default_ineligible configuration option [ GH-27965 ] identity: allow additional claims to be added to workload identities [ GH-27786 ] vault: adds token renewal retries [ GH-27947 ] BUG FIXES: audit (Enterprise): Fixed a bug where alloc exec and job actions requests from the webbrowser would be marked as anonymous in audit logs [ GH-28025 ] cli: Fixed job dispatch and job periodic force failing with a paginator error against servers older than the CLI [ GH-27680 ] client: Fixed a bug where tasks could accidentally get killed mid-restart on template re-render [ GH-27960 ] consul: re-write consul service identity token when reattaching to task [ GH-27936 ] job (Enterprise): Renabled use of multiple vault namespaces in a single job plugins: store verified and canonicalised plugin configuration in the agent [ GH-28083 ] template: Fixed a bug where templates with change_mode=noop would stop monitoring templates that fatally fail after initial rendering [ GH-28016 ] ui: Fix a bug where jobs with HCL variables submitted via Terraform could not be started or stopped in the web UI [ GH-28095 ] ui: Fix service detail page not rendering [ GH-28005 ] ui: Fixed flickering on the log streaming pop out when viewing them from job overview page [ GH-28074 ] ui: Fixed the client drain popover form to provide an accessible name for assistive technologies [ GH-28047 ] ui: Fixed the drain popover deadline field so its label is properly associated with the input for improved accessibility [ GH-28029 ] ui: Fixed the namespace list being continually fetched when on the job overview page [ GH-28074 ]

Improvements and security content

• FEATURES: core: timeouts for batch jobs [ GH-27803 ] SECURITY: cli: Redact token and certificate key CLI flags and environment variables when writing debug bundle [ GH-28063 ] IMPROVEMENTS: acl: Support uploading client ACL tokens [ GH-27741 ] alloc: don't restore when allocDir is inaccessible [ GH-27933 ] api: added agent reload endpoint [ GH-27106 ] build: Updated Go to 1.26.4 [ GH-28080 ] client: Adds default_ineligible configuration option [ GH-27965 ] identity: allow additional claims to be added to workload identities [ GH-27786 ] vault: adds token renewal retries [ GH-27947 ] BUG FIXES: audit (Enterprise): Fixed a bug where alloc exec and job actions requests from the webbrowser would be marked as anonymous in audit logs [ GH-28025 ] cli: Fixed job dispatch and job periodic force failing with a paginator error against servers older than the CLI [ GH-27680 ] client: Fixed a bug where tasks could accidentally get killed mid-restart on template re-render [ GH-27960 ] consul: re-write consul service identity token when reattaching to task [ GH-27936 ] job (Enterprise): Renabled use of multiple vault namespaces in a single job plugins: store verified and canonicalised plugin configuration in the agent [ GH-28083 ] template: Fixed a bug where templates with change_mode=noop would stop monitoring templates that fatally fail after initial rendering [ GH-28016 ] ui: Fix a bug where jobs with HCL variables submitted via Terraform could not be started or stopped in the web UI [ GH-28095 ] ui: Fix service detail page not rendering [ GH-28005 ] ui: Fixed flickering on the log streaming pop out when viewing them from job overview page [ GH-28074 ] ui: Fixed the client drain popover form to provide an accessible name for assistive technologies [ GH-28047 ] ui: Fixed the drain popover deadline field so its label is properly associated with the input for improved accessibility [ GH-28029 ] ui: Fixed the namespace list being continually fetched when on the job overview page [ GH-28074 ]

Affected products and versions

Recommended action

Review the official publisher document before deployment.

Official publisher evidence