Avoids setting the node version in the release Dockerfile, by using
an alias.  This allows us to update the node version in one file only.
Co-authored-by: Michael Schurter <mschurter@hashicorp.com>

Assert that deregistering a volume works without errors following a volume
reap. Use CLI helpers where feasible to exercise CSI command line. Dump plugin
allocation logs on deregistration failures for debugging purposes.

build: upgrade from Go 1.15.4 to 1.15.5

Despite being a security release for Go, we do not believe Nomad is
impacted.

UI: Task lifecycle poststop phase.

This reverts commit f8a505ea.

changelog: added poststop to task lifecycle

Restrict HCL special casing of map[string]interface{} fields

The HCL2 parser needs to apply special parsing tweaks so it can parse
the task config the same way as HCL1. Particularly, it needs to
reinterprets `map[string]interface{}` fields and blocks that appear when
attributes are expected.

This commit restricts the special casing to the Job fields, and ignore
`variables` and `locals` block.

* operator debug - add client node filtering arguments

* add WaitForClient helper function

* use RPC in WaitForClient to avoid unnecessary imports

* guard against nil values

* move initialization up and shorten test duration

* cleanup nodeLookupFailCount logic

* only display max node notice if we actually tried to capture nodes

docs: update brige network subnet docs

Update the default value for `client.bridge_network_subnet` in docs
to match the new value from 99742f26. Was `172.26.66.0/23`, is
now `172.26.64.0/20`.

Fixes #9316

ui: Pin ui node version

Assorted changelog and docs changes

The cpuset_cpus flag may be subject to change when we revise cpu
management. Also, it's only available in 1.0.0 Beta.

UI: Add missing feature fixture that was introduced while DAS filtering was being implemented

consul: prevent re-registration churn by correctly comparing connect sidecar tags

Previously, connect sidecars would be re-registered with consul every cycle
of Nomad's reconciliation loop around Consul service registrations. This is
because part of the comparison used `reflect.DeepEqual` on []string objects,
which returns false when one object is `[]string{}` and the other is `[]string{}(nil)`.

Unforunately, this was always the case, and every Connect sidecar service
would be re-registered on every iteration, which happens every 30 seconds.

Add cpuset_cpus to docker driver.

UI: Add DAS summary table filtering

recs cli: fixed bad composition

When raw_exec is configured with [`no_cgroups`](https://www.nomadproject.io/docs/drivers/raw_exec#no_cgroups), raw_exec shouldn't attempt to create a cgroup.

Prior to this change, we accidentally always required freezer cgroup to do stats PID tracking. We already have the proper fallback in place for metrics, so only need to ensure that we don't create a cgroup for the task.

Fixes https://github.com/hashicorp/nomad/issues/8565

changelog addition and fixes

added changelog entry for 9311 and re-ordered changelog entries to respect secondary short-to-long ordering