Nomad

Fixed bugs where namespaces and node pools could stop replicating between federated regions or be deleted in a follower region by an invalid replication token. Also fixes task restarts skipping shutdown_delay, image_pull_timeout not being respected past 5min, and unchanged jobs creating new versions when submitted with a different ACL token.

Closes a security hole where the Alloc FS API could access a secret directory symlinked into a task, and fixes a scheduler bug where task groups with per_alloc volumes could skip feasibility checks for allocs after the first placement failure. Also includes a go-getter security dependency upgrade and a Vault change_mode trigger fix.

The DriverNetwork.Hash method is removed from the plugin/drivers package. Fixed a Docker bug where tasks could escape their assigned cpuset range, plus a fix preventing deleted allocations from remaining running.

Fixed a security bug where users with host-volume-delete permission in one namespace could delete claims from another namespace. Also fixed scheduler issues with sticky host volumes, a client panic after allocation garbage collection, and UI rendering of jobs with matching ModifyIndex values.

FEATURES:

FEATURES: