Repository navigation
Cloud-Skeleton Prerequisites – v2.0 “NOMAD” Release
Release Date: August 25, 2025
🚀 What’s new
- HashiCorp Nomad as the orchestrator. End-to-end Nomad bootstrap and service configuration (install/init/start), replacing the Swarm-based setup. TLS is on by default.
- mTLS & PKI automation. Private CA generation, server/client/CLI cert issuance, cert validation and rotation/expiry handling; explicit mTLS controls.
- Identity & ACLs. Bootstrap and distribution of tokens, token-order fixes, workload identities wiring, and scoped policies for automation.
- Networking built for Nomad. CNI bridge networking (with hairpin mode), join/port fixes, safer defaults, and UFW allowances for CNI CIDRs; Web UI exposure tuned.
- Operational polish. Shell autocomplete, cleaner diagrams and configs, and lots of small fixes/refactors.
🔐 Security highlights
- Gossip encryption keys managed inside Nomad; certificate lifecycle (CA regen on expiry) and expiration config included.
- Admin access and token management tightened; TLS strictly enforced cluster-wide.
🌐 Networking highlights
- CNI bridge with hairpin support; UFW updated to allow CNI ranges; clarified naming to avoid iptables leftovers.
⚠️ Breaking changes
- Swarm → Nomad migration. The orchestrator, networking, and storage layers are Nomad-native now. Expect different network names, ACL/token flows, and TLS-first assumptions.