nomad

mirror of https://github.com/kemko/nomad.git synced 2026-01-02 00:15:43 +03:00

Files

Tim Gross 08a6f870ad cni: use check command when restoring from restart (#24658 )

When the Nomad client restarts and restores allocations, the network namespace
for an allocation may exist but no longer be correctly configured. For example,
if the host is rebooted and the task was a Docker task using a pause container,
the network namespace may be recreated by the docker daemon.

When we restore an allocation, use the CNI "check" command to verify that any
existing network namespace matches the expected configuration. This requires CNI
plugins of at least version 1.2.0 to avoid a bug in older plugin versions that
would cause the check to fail.

If the check fails, destroy the network namespace and try to recreate it from
scratch once. If that fails in the second pass, fail the restore so that the
allocation can be recreated (rather than silently having networking fail).

This should fix the gap left #24650 for Docker task drivers and any other
drivers with the `MustInitiateNetwork` capability.

Fixes: https://github.com/hashicorp/nomad/issues/24292
Ref: https://github.com/hashicorp/nomad/pull/24650

2025-01-07 09:38:39 -05:00

api-docs

keyring: warn if removing a key that was used for encrypting variables (#24766 )

2025-01-07 10:15:02 +01:00

docs

cni: use check command when restoring from restart (#24658 )

2025-01-07 09:38:39 -05:00

intro

docs: Migrate link formats (#15779 )

2023-01-25 09:31:14 -08:00

partials

cni: use check command when restoring from restart (#24658 )