Ops Manager v2.10 Partners Release Notes

This topic describes the changes in VMware Tanzu Operations Manager (Ops Manager) v2.10 that might be relevant to partner service tiles.

For information about changes introduced in Ops Manager v2.10, see Ops Manager v2.10 Release Notes. For information about breaking changes introduced in VMware Tanzu Application Service for VMs v2.10, see Breaking Changes.

Features

New features and changes in this release that may affect tile development for partners:

Timestamp Format Change and Customizable TAS for VMs Component Logs

In TAS for VMs v2.10, operators can modify the timestamp format of TAS for VMs component logs.

TAS for VMs v2.10 removes the diego_log_timestamp_format tile property and replaces it with the logging_timestamp_format property, which allows operators to configure human-readable timestamps across TAS for VMs components. Most, but not all, TAS for VMs components can support the RFC3339 timestamp format.

For a list of components that use the RFC3339 timestamp format in TAS for VMs v2.10 , see Optionally Use Human-Readable Timestamps for Component Logs in the VMware Tanzu Application Service for VMs v2.10 Release Notes.

This feature may affect any partner tiles that parse or consume TAS for VMs component logs.

For more information, see Timestamp Format for Component Logs Replaces Timestamp Format for Diego Logs.

Support for CredHub Maestro and Ops Manager Bulk Rotation of Certificates

Ops Manager v2.10 invokes CredHub Maestro to perform the bulk rotation of various CAs and certificates within a foundation.

To ensure compatibility with Ops Manager API certificate rotation and CredHub Maestro, you must use the concatenated LEAF-CERTIFICATE-NAME.ca format when referencing CAs that sign leaf certificates in your tile’s property configuration. Do not reference the CA directly with the format CA-CERTIFICATE-NAME.certificate.

The .ca accessor format returns a concatenated version of the CA, which includes the older and newer CA. The concatenated version ensures that jobs using leaf certificates do not lose trusted state during CA rotation and results in the least amount of downtime for your tile’s services during certificate rotation.

For more information and configuration examples, see Reference Existing CAs and Certificates in CredHub Variables.

Known Issues

Known issues in this release that may affect tile development for partners:

Non-Configurable Certificates Are Invalid Within a Selector

An rsa_cert_credentials property with configurable: false is invalid within a selector property.

The tile does not raise any validation errors, but the following error appears during the pre-deploy check:

{
  "pre_deploy_check": {
    ...
    "properties": [
      {
        "name": ".properties.EXAMPLE-CERT-PROPERTY",
        "type": "rsa_cert_credentials",
        "errors": [
          "can't be blank",
          "can't be blank"
        ]
      }
    ],
    ...
  }
}

Where EXAMPLE-CERT-PROPERTY is the property you specify.