The Nomad team is excited to announce the release of Nomad v1.9.2, which includes a security patch and several bug fixes and improvements for Nomad and Nomad Enterprise.
This release includes, among other minor improvements and bug fixes:
-
Security patch for when a user with csi-write-volume permissions to one namespace can create volumes in another namespace (CVE-2024-10975)
-
A new parameterized dispatch endpoint that sends raw HTTP request body as Payload
-
Added support for service weight in Consul services
-
Added a possibility to restrict user and group for exec and rawexec
-
UI indication for prestart/poststart tasks by running/failed/pending status
-
UI now shows region in header when only one region exists, and set it immediately upon logging in with a token
-
Fixed a panic on server startup when decrypting AEAD key data with empty RSA block
-
Fixed a bug where resource calculation did not account correctly for poststart tasks
-
Fixed setting GC threshold to more than 72hrs being ignored
Please refer to the changelog for the complete list of improvements and bug fixes. We are also releasing backports of bug fixes to Nomad Enterprise v1.8.7 and v1.7.15
Thanks,
The Nomad Team
1.9.2 Binaries - Nomad v1.9.2 Binaries | HashiCorp Releases
1.9.2 Changelog - nomad/CHANGELOG.md at v1.9.2 · hashicorp/nomad · GitHub