-
Notifications
You must be signed in to change notification settings - Fork 2k
Docs: Nomad 1.11.0 release notes #26983
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
Merged
Changes from all commits
Commits
Show all changes
6 commits
Select commit
Hold shift + click to select a range
309fd37
Add 1.11 release notes
aimeeu b4d9751
Merge remote-tracking branch 'origin' into nmd684relnotes
aimeeu 77742f9
add page description
aimeeu 497adcf
fix content-check failure
aimeeu 23e7941
update based on doc for Support
aimeeu 7c447de
implemented Daniel's suggestions
aimeeu File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Some comments aren't visible on the classic Files Changed page.
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,124 @@ | ||
| --- | ||
| layout: docs | ||
| page_title: Nomad v1.11.x release notes | ||
| description: >- | ||
| HashiCorp Nomad version 1.11.x release notes. Release highlights include client node identity, client node introduction, job specification secret block, and system job deployment support. | ||
| --- | ||
|
|
||
| # Nomad 1.11.x release notes | ||
|
|
||
| We are pleased to announce the following Nomad updates. | ||
|
|
||
| ## 1.11.0 release highlights | ||
|
|
||
| ### Client node introduction and identity | ||
|
|
||
| Nomad's client node identity feature uniquely identities each Nomad client node | ||
| and provides an authentication mechanism for nodes to make RPC calls to the | ||
| Nomad servers. | ||
|
|
||
| Introduce Nomad clients to the cluster with JWT tokens. Configure Nomad servers | ||
| with introduction enforcement levels that dictate how clients join the cluster. | ||
| This approach results in logs and metrics to detail introduction violations. | ||
| Once registered, Nomad clients are now provided with an identity token, used for | ||
| RPC communication which is periodically renewed. | ||
|
|
||
| #### Relevant documentation | ||
|
|
||
| - [Client node identity concepts](/nomad/docs/architecture/cluster/node-identity) | ||
| - [Client identity node pool TTL configuration option](/nomad/docs/other-specifications/node-pool#node_identity_ttl) | ||
| - [Client Introduction server configuration options](/nomad/docs/configuration/server#client_introduction-parameters) | ||
| - [Client introduction monitoring detail](/nomad/docs/monitor#client-introduction) | ||
| - [Client introduction agent CLI token flag](/nomad/commands/agent#client-intro-token) | ||
|
|
||
| Commands: | ||
|
|
||
| - [`nomad node intro create`](/nomad/commands/node/intro/create): Generates a node introduction token which is a signed JWT. | ||
| - [`nomad node identity get`](/nomad/commands/node/identity/get): View the identity claims for a node. | ||
| - [`nomad node identity renew`](/nomad/commands/node/identity/renew): Instruct a node to renew its identity of its next heartbeat. | ||
| - [`nomad node pool info`](/nomad/commands/node-pool/info): View the identity TTL for nodes in the provided pool. | ||
| - [`nomad operator client-state`](/nomad/commands/operator/client-state): View | ||
| the client persistent state in JSON, which includes the client identity. | ||
| - [`nomad agent` command's `-client-intro-token` parameter](/nomad/commands/agent#client-intro-token): Set the JWT token used to authenticate with servers during the client's initial registration. | ||
|
|
||
| API: | ||
|
|
||
| - [`/v1/acl/identity/client-introduction-token`](/nomad/api-docs/acl/identities#create-client-introduction-identity): Generates a node introduction token which is a signed JWT. | ||
| - [`/v1/client/identity`](/nomad/api-docs/client#read-a-node-s-identity-claims): View the identity claims for a node. | ||
| - [`/v1/client/identity/renew`](/nomad/api-docs/client#renew-a-node-s-identity): Instruct a node to renew its identity of its next heartbeat. | ||
| - [`/v1/node/pool/:node_pool`](/nomad/api-docs/node-pools#read-node-pool): View the identity TTL for nodes in the provided pool. | ||
|
|
||
| ### Artifact secrets | ||
|
|
||
| Use the new job specification secrets block to fetch and interpolate secrets | ||
| from a specified location. Nomad automatically retrieves the contents of the | ||
| secret. In your task specification, reference the variable with | ||
| `${secret.secret_name.key}` format. | ||
|
|
||
| Nomad provides built-in support to fetch secrets from Nomad and | ||
| Vault. Alternately, you may build your own custom secret provider. | ||
|
|
||
| #### Relevant documentation | ||
|
|
||
| - [Job specification `secret` block](/nomad/docs/job-specification/secret) | ||
| - [Secret provider plugin authoring guide](/nomad/plugins/author/secret-provider) | ||
|
|
||
|
|
||
| ### System job deployments | ||
|
|
||
| Jobs of type “system” now support deployment functionality, so you may roll out | ||
| job updates in a more controlled manner. Additionally, you may now view system | ||
| job deployment status in the web UI. | ||
|
|
||
| #### Relevant documentation | ||
|
|
||
| - [Job specification `update` block](/nomad/docs/job-specification/update) | ||
| - [Blue/Green deployment detail](/nomad/docs/job-declare/strategy/blue-green-canary) | ||
| - [`nomad deployment` commands](/nomad/commands/deployment) for interacting with Nomad job deployments | ||
|
|
||
| ### Scheduler improvements | ||
|
|
||
| We improved Nomad's scheduler observability for job authors. | ||
|
|
||
| #### Relevant documentation | ||
|
|
||
| - [`nomad eval status` command](/nomad/commands/eval/status): View more details | ||
| on an evaluation including related evaluations, successful placements, | ||
| scheduler annotations, failed placements, and preemptions. | ||
|
|
||
| - The **Plan Annotations** table represents the intended plan before Nomad | ||
| checks nodes for feasibility. This can help you narrow down where in the | ||
| scheduling pipeline unexpected results are coming from. | ||
| - The [Nomad repository scheduler | ||
| README](https://github.com/hashicorp/nomad/blob/v1.11.0/scheduler/README.md) | ||
| has architectural details. | ||
| - [`nomad alloc status` command](/nomad/commands/alloc/status): When you run the | ||
| command with the `-verbose` flag, the output includes information about the | ||
| scheduler's placement decision, including the number of nodes evaluated and | ||
| rejected, and the scoring of each node considered. | ||
|
|
||
| ### Additional census usage metrics <EnterpriseAlert inline/> | ||
|
|
||
| We added several Enterprise reporting metrics. | ||
|
|
||
| #### Relevant documentation | ||
|
|
||
| - [Automated license utilization | ||
| reporting](/nomad/docs/enterprise/license/utilization-reporting) | ||
| - Agent reporting configuration [`disable_product_usage_reporting` | ||
| parameter](/nomad/docs/configuration/reporting#disable_product_usage_reporting): | ||
| Disable detailed product usage metrics. | ||
| - [`nomad operator utilization` command](/nomad/commands/operator/utilization): | ||
| If you have disabled automated reporting, use this command to manually | ||
| generate the report and send it to HashiCorp. | ||
|
|
||
| ### Upgrade details | ||
|
|
||
| Refer to the [upgrade details | ||
| page](/nomad/docs/upgrade/upgrade-specific#nomad-1-11-0) for more information. | ||
|
|
||
| ### Changelog | ||
|
|
||
| Review improvements, security fixes, and breaking changes in the changelog. | ||
|
|
||
| - [v1.11.0](https://github.com/hashicorp/nomad/releases/tag/v1.11.0) | ||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
these pages don't have the updated content, but I suspect that's just because those doc changes were made after this branch was split off from main. just noting in case that matters to you somehow.
Uh oh!
There was an error while loading. Please reload this page.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is merging to main, which does have the updated content - which is not in stable-website until after the release. Note that this PR is not backporting to stable-website.