NOMAD-2.0.5 release notes and known issues

Summary

BREAKING CHANGES: plugin: The DriverNetwork.Hash method has been removed from the plugin/drivers package. [ GH-28342 ] IMPROVEMENTS: build: Update Go to v1.26.5 [ GH-28260 ] checks: Nomad native service check IDs are now SHA256 [ GH-28361 ] cli: add -json-output and -t flags to nomad job plan for structured plan output [ GH-27369 ] consul: Added the issuing Nomad client's node ID to the metadata of Consul tokens created via workload identity [ GH-28133 ] consul: Check IDs are now derived from SHA256 instead of SHA1 [ GH-28362 ] jobspec: Removed the requirement that a variable validation error_message be a full English sentence, allowing messages written in any language [ GH-28246 ] planner: Added plan_apply_pipeline configuration that allows the leader to have more outstanding Raft writes when evaluating plans [ GH-28249 ] services: rendezvous hashes are now SHA256 [ GH-28363 ] template: Add run_on_first_render option to change_script to execute scripts on the initial template render via the task Poststart lifecycle hook. [ GH-27819 ] BUG FIXES: agent: Fixed a bug where the startup banner would display the wrong node ID for servers after restart [ GH-28276 ] api: Fixed a bug where the client allocation endpoints returned a 500 error instead of a 404 when the allocation's node could not be found [ GH-28261 ] auth: Fixed a bug where nodes could not sync allocations placed on them after being moved to a different node pool [ GH-28110 ] cli: Fixed a bug where nomad operator root keyring remove would not accept an abbreviated key ID [ GH-24148 ] client: Fix issue where deleted allocations may remain running [ GH-28394 ] client: Fixed a bug where a client could panic after an alloc is GC'd [ GH-28187 ] client: Fixed a bug where the client would not remount the secret and private tmpfs after a restart [ GH-28345 ] client: Fixed a bug where the previous allocation watcher would retry forever when the server returned a permanent error during data migration [ GH-28191 ] csi: Fixed a bug where evals blocked on missing CSI volumes would not unblock [ GH-28275 ] deployments: Fix garbage collection to respect threshold [ GH-28225 ] docker: Fixed a bug where tasks could execute outside of their assigned cpuset range [ GH-28272 ] drivers/java: Fixed a bug where the Java driver did not correctly decode the work_dir option [ GH-28330 ] jobspec: Fixed a bug where a negative cores value in a task's resource block was accepted during job validation and registration [ GH-10511 ] quota (Enterprise): Fixed a bug where disabling the use of cores in a quota would block the ability to use either cores or CPU in a job scheduler: Ensure deployment IDs are not written to an evaluation when the generated deployment is not persisted to state due to plan apply retries [ GH-28307 ] scheduler: Fixed a bug where the scheduler could panic with a nil pointer dereference when checking host volume feasibility for an allocation whose job had been purged [ GH-28301 ] secrets: Fixed hooks to allow refetch during prestart [ GH-28237 ] services: Fixed a bug where task secrets were not interpolated into service check Header and Args , or into service Tags [ GH-28212 ] ui: Fixed SSO sign in display not displaying when SSO enabled [ GH-28262 ] ui: Fixed a bug where the job status panel would show "Complete" instead of "Scaled Down" for system and sysbatch jobs with zero allocations [ GH-27949 ] ui: Fixed the region identifier header showing as empty in single region clusters [ GH-28310 ] ui: Fixed version diff display and missing deployment version numbers [ GH-28294 ] ui: check websocket upgrade headers with multiple values [ GH-28234 ] ui: refetch nomad license when logging in with new token [ GH-28284 ]

Improvements and security content

• BREAKING CHANGES: plugin: The DriverNetwork.Hash method has been removed from the plugin/drivers package. [ GH-28342 ] IMPROVEMENTS: build: Update Go to v1.26.5 [ GH-28260 ] checks: Nomad native service check IDs are now SHA256 [ GH-28361 ] cli: add -json-output and -t flags to nomad job plan for structured plan output [ GH-27369 ] consul: Added the issuing Nomad client's node ID to the metadata of Consul tokens created via workload identity [ GH-28133 ] consul: Check IDs are now derived from SHA256 instead of SHA1 [ GH-28362 ] jobspec: Removed the requirement that a variable validation error_message be a full English sentence, allowing messages written in any language [ GH-28246 ] planner: Added plan_apply_pipeline configuration that allows the leader to have more outstanding Raft writes when evaluating plans [ GH-28249 ] services: rendezvous hashes are now SHA256 [ GH-28363 ] template: Add run_on_first_render option to change_script to execute scripts on the initial template render via the task Poststart lifecycle hook. [ GH-27819 ] BUG FIXES: agent: Fixed a bug where the startup banner would display the wrong node ID for servers after restart [ GH-28276 ] api: Fixed a bug where the client allocation endpoints returned a 500 error instead of a 404 when the allocation's node could not be found [ GH-28261 ] auth: Fixed a bug where nodes could not sync allocations placed on them after being moved to a different node pool [ GH-28110 ] cli: Fixed a bug where nomad operator root keyring remove would not accept an abbreviated key ID [ GH-24148 ] client: Fix issue where deleted allocations may remain running [ GH-28394 ] client: Fixed a bug where a client could panic after an alloc is GC'd [ GH-28187 ] client: Fixed a bug where the client would not remount the secret and private tmpfs after a restart [ GH-28345 ] client: Fixed a bug where the previous allocation watcher would retry forever when the server returned a permanent error during data migration [ GH-28191 ] csi: Fixed a bug where evals blocked on missing CSI volumes would not unblock [ GH-28275 ] deployments: Fix garbage collection to respect threshold [ GH-28225 ] docker: Fixed a bug where tasks could execute outside of their assigned cpuset range [ GH-28272 ] drivers/java: Fixed a bug where the Java driver did not correctly decode the work_dir option [ GH-28330 ] jobspec: Fixed a bug where a negative cores value in a task's resource block was accepted during job validation and registration [ GH-10511 ] quota (Enterprise): Fixed a bug where disabling the use of cores in a quota would block the ability to use either cores or CPU in a job scheduler: Ensure deployment IDs are not written to an evaluation when the generated deployment is not persisted to state due to plan apply retries [ GH-28307 ] scheduler: Fixed a bug where the scheduler could panic with a nil pointer dereference when checking host volume feasibility for an allocation whose job had been purged [ GH-28301 ] secrets: Fixed hooks to allow refetch during prestart [ GH-28237 ] services: Fixed a bug where task secrets were not interpolated into service check Header and Args , or into service Tags [ GH-28212 ] ui: Fixed SSO sign in display not displaying when SSO enabled [ GH-28262 ] ui: Fixed a bug where the job status panel would show "Complete" instead of "Scaled Down" for system and sysbatch jobs with zero allocations [ GH-27949 ] ui: Fixed the region identifier header showing as empty in single region clusters [ GH-28310 ] ui: Fixed version diff display and missing deployment version numbers [ GH-28294 ] ui: check websocket upgrade headers with multiple values [ GH-28234 ] ui: refetch nomad license when logging in with new token [ GH-28284 ]

Affected products and versions

Recommended action

Review the official publisher document before deployment.

Official publisher evidence