Nomad 1.11.x release notes

We are pleased to announce the following Nomad updates.

1.11.0 release highlights

Client node introduction and identity

Nomad's client node identity feature uniquely identities each Nomad client node and provides an authentication mechanism for nodes to make RPC calls to the Nomad servers.

Introduce Nomad clients to the cluster with JWT tokens. Configure Nomad servers with introduction enforcement levels that dictate how clients join the cluster. This approach results in logs and metrics to detail introduction violations. Once registered, Nomad clients are now provided with an identity token, used for RPC communication which is periodically renewed.

Relevant documentation

• Client node identity concepts
• Client identity node pool TTL configuration option
• Client Introduction server configuration options
• Client introduction monitoring detail
• Client introduction agent CLI token flag

Commands:

• nomad node intro create: Generates a node introduction token which is a signed JWT.
• nomad node identity get: View the identity claims for a node.
• nomad node identity renew: Instruct a node to renew its identity of its next heartbeat.
• nomad node pool info: View the identity TTL for nodes in the provided pool.
• nomad operator client-state: View the client persistent state in JSON, which includes the client identity.
• nomad agent command's -client-intro-token parameter: Set the JWT token used to authenticate with servers during the client's initial registration.

API:

• /v1/acl/identity/client-introduction-token: Generates a node introduction token which is a signed JWT.
• /v1/client/identity: View the identity claims for a node.
• /v1/client/identity/renew: Instruct a node to renew its identity of its next heartbeat.
• /v1/node/pool/:node_pool: View the identity TTL for nodes in the provided pool.

Artifact secrets

Use the new job specification secrets block to fetch and interpolate secrets from a specified location. Nomad automatically retrieves the contents of the secret. In your task specification, reference the variable with ${secret.secret_name.key} format.

Nomad provides built-in support to fetch secrets from Nomad and Vault. Alternately, you may build your own custom secret provider.

Relevant documentation

• Job specification secret block
• Secret provider plugin authoring guide

System job deployments

Jobs of type “system” now support deployment functionality, so you may roll out job updates in a more controlled manner. Additionally, you may now view system job deployment status in the web UI.

Relevant documentation

• Job specification update block
• Blue/Green deployment detail
• nomad deployment commands for interacting with Nomad job deployments

Scheduler improvements

We improved Nomad's scheduler observability for job authors.

Relevant documentation

• nomad eval status command: View more details on an evaluation including related evaluations, successful placements, scheduler annotations, failed placements, and preemptions.

  • The Plan Annotations table represents the intended plan before Nomad checks nodes for feasibility. This can help you narrow down where in the scheduling pipeline unexpected results are coming from.
  • The Nomad repository scheduler README has architectural details.

• nomad alloc status command: When you run the command with the -verbose flag, the output includes information about the scheduler's placement decision, including the number of nodes evaluated and rejected, and the scoring of each node considered.

Additional census usage metrics EnterpriseEnterprise

We added several Enterprise reporting metrics.

Relevant documentation

• Automated license utilization reporting
• Agent reporting configuration disable_product_usage_reporting parameter: Disable detailed product usage metrics.
• nomad operator utilization command: If you have disabled automated reporting, use this command to manually generate the report and send it to HashiCorp.

Upgrade details

Refer to the upgrade details page for more information.

Changelog

Review improvements, security fixes, and breaking changes in the changelog.

• v1.11.0