VMware Tanzu Application Service for Windows v2.11 Release Notes

This topic contains release notes for VMware Tanzu Application Service for VMs [Windows] v2.11.

Because VMware uses the Percona Distribution for MySQL, expect a time lag between Oracle releasing a MySQL patch and VMware releasing TAS for VMs [Windows] containing that patch.

Warning: Windows stemcells v2019.44 and later include a version of tar that is incompatible with winfs2019-release v2.33.1 and earlier. For more information, see Windows Stemcell v2019.44 is Incompatible with winfs2019-release v2.33.1 and Earlier below.

Before you install the tile, review the Windows Stemcell Compatibility Matrix.

Releases

2.11.51

Release Date: 05/29/2024

[Bug Fix] Remove replication-canary
Bump diego to version 2.99.0
Bump garden-runc to version 1.53.0

Component	Version	Release Notes
windows2019 stemcell	2019.73
count-cores-indicator	2.0.0
diego	2.99.0	v2.99.0 ## Changes - Do not remove evacuating actual LRP during cleanup ([rep#53](https://github.com/cloudfoundry/rep/pull/53)) - Add additional retries when apps make use of credhub for credentials. ([buildpackapplifecycle#71](https://github.com/cloudfoundry/buildpackapplifecycle/pull/71)) - Prevent panics in BBS by checking for all types of errors ([bbs#95](https://github.com/cloudfoundry/bbs/pull/95)) - Add retry logic and more explicit failure in router emitter start-up ([router-emitter#34](https://github.com/cloudfoundry/route-emitter/pull/34)) - Bump envoy blob version to `1.28.3` - Go mod dependency bumps ## ✨ Built with go 1.22.3 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.98.0...v2.99.0 ## Resources - [Download release 2.99.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.99.0).
envoy-nginx	0.25.0
event-log	0.9.0
garden-runc	1.53.0	v1.53.0 ## Changes - DEPRECATION NOTICE The `garden.experimental_use_containerd_mode_for_processes` property and usage of Garden when run in containerd mode for processes is now deprecated and no longer tested. - DEFAULT CHANGE - The default mode for garden containers is now containerd. This has been the default in cf-deployment since 2018. - REMOVAL OF EXPERIMENTAL FUNCTIONALITY NOTICE The experimental option to run the garden server process in rootless mode has been removed, as it did not work as expected and was an abandoned feature. - Go package dependency bumps ## Bosh Job Spec changes: ```diff diff --git a/jobs/garden-binaries/spec b/jobs/garden-binaries/spec index 0433639a..a8a96bae 100644 --- a/jobs/garden-binaries/spec +++ b/jobs/garden-binaries/spec @@ -15,7 +15,6 @@ packages: - grootfs - xfs-progs - thresholder - - netplugin-shim - dontpanic - tini diff --git a/jobs/garden/spec b/jobs/garden/spec index 027df351..093e53e1 100644 --- a/jobs/garden/spec +++ b/jobs/garden/spec @@ -36,7 +36,6 @@ packages: - grootfs - xfs-progs - thresholder - - netplugin-shim - dontpanic - tini @@ -199,10 +198,6 @@ properties: description: AppArmor profile to use for unprivileged container processes default: garden-default - garden.experimental_rootless_mode: - description: A boolean stating whether or not to run garden-server as a non-root user - default: false - # We believe this defaults to false to help concourse: https://github.com/cloudfoundry/garden-runc-release/releases/tag/v1.5.0 # For diego/cf, this should be set to true garden.cleanup_process_dirs_on_wait: @@ -210,8 +205,8 @@ properties: default: false garden.containerd_mode: - description: "Use containerd for container lifecycle management. NOTE: cannot be used in combination with bpm or rootless" - default: false + description: "Use containerd for container lifecycle management. NOTE: cannot be used in combination with bpm" + default: true garden.tcp_keepalive_time: description: Sets the `net.ipv4.tcp_keepalive_time` kernel parameter in containers. If not specified, the value from the linux init_net namespace is used. @@ -229,7 +224,7 @@ properties: description: Sets the `net.ipv4.tcp_retries2` kernel parameter in containers. If not specified, the value from the linux init_net namespace is used. garden.experimental_use_containerd_mode_for_processes: - description: "(Under development) Use containerd for container process management. Must be used with containerd_mode also set to true. NOTE: cannot be used in combination with bpm or rootless" + description: "(Deprecated) No longer used/tested." default: false garden.experimental_cpu_throttling: diff --git a/jobs/gats/spec b/jobs/gats/spec index 916a35eb..065e3ace 100644 --- a/jobs/gats/spec +++ b/jobs/gats/spec @@ -22,12 +22,6 @@ properties: garden_test_rootfs: description: Test rootfs to use default: 'docker:///cloudfoundry/garden-rootfs' - containerd_for_processes: - description: Run GATS with CONTAINERD_FOR_PROCESSES_ENABLED - default: false - rootless: - description: Run GATS with ROOTLESS env var - default: false cpu_throttling: description: Run GATS with CPU_THROTTLING_ENABLED default: false ``` ## ✨ Built with go 1.22.3 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.52.0...v1.53.0 ## Resources - [Download release 1.53.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.53.0).
windows-syslog	1.3.0
hwc-offline-buildpack	3.1.36
loggregator-agent	6.5.19
metrics-discovery	3.2.24
smoke-tests	4.10.0
winc	2.24.0
windows-utilities	0.14.0
windowsfs-release	2.66.0

2.11.50

Release Date: 05/01/2024

[Bug Fix] Windows syslog forwarder handles case when remote syslog endpoints are unavailable by backing off and eventually restarting.
Bump diego to version 2.98.0
Bump envoy-nginx to version 0.25.0
Bump garden-runc to version 1.52.0
Bump windows-syslog to version 1.3.0
Bump hwc-offline-buildpack to version 3.1.36

Component	Version	Release Notes
windows2019 stemcell	2019.72
count-cores-indicator	2.0.0
diego	2.98.0	v2.98.0 ## Changes - Update Golang to 1.22 ## Bosh Job Spec changes: ```diff diff --git a/jobs/vizzini/spec b/jobs/vizzini/spec index 7eb920159..d61278357 100644 --- a/jobs/vizzini/spec +++ b/jobs/vizzini/spec @@ -1,7 +1,7 @@ --- name: vizzini packages: - - golang-1.21-linux + - golang-1.22-linux - vizzini templates: ``` ## ✨ Built with go 1.22.2 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.97.0...v2.98.0 ## Resources - [Download release 2.98.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.98.0).
envoy-nginx	0.25.0	v0.25.0 ## Changes - Bump Golang to 1.22 ## ✨ Built with go 1.22.2 Full Changelog: https://github.com/cloudfoundry/envoy-nginx-release/compare/v0.24.0...v0.25.0 ## Resources - [Download release 0.25.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry-incubator/envoy-nginx-release?version=0.25.0).
event-log	0.9.0
garden-runc	1.52.0	v1.52.0 ## Changes - Bump Golang to 1.22 ## ✨ Built with go 1.22.2 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.51.0...v1.52.0 ## Resources - [Download release 1.52.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.52.0).
windows-syslog	1.3.0	v1.3.0 ## What's Changed * Fix errors stemming from a hanging blackbox client when forwarding syslog messages to an unresponsive server over TCP or TLS in https://github.com/cloudfoundry/windows-syslog-release/pull/56 * Adds an exponential backoff when attempting to connect to servers * Adds a configurable property to control the maximum number of connection retries (default: 10) before the job fatally exits Full Changelog: https://github.com/cloudfoundry/windows-syslog-release/compare/v1.2.5...v1.3.0
hwc-offline-buildpack	3.1.36	3.1.36 * Updating github-config * add codeowners (#165) \| name \| version \| cf_stacks \| \|-\|-\|-\| \| hwc \| 27.0.0 \| windows, windows2016 \| Default binary versions: \| name \| version \| \|-\|-\| \| hwc \| 27.0.0 \| * Uncached buildpack SHA256: 30d59d5cff56d1768d1a48146e821ecfd7de75ed3f092590a09aa153a0d79c34 * Uncached buildpack SHA256: 4001012ed375f339109bad48a0b95c819e0ca3e9b0e7b76d52bf339ddd7f2072
loggregator-agent	6.5.19
metrics-discovery	3.2.24
smoke-tests	4.10.0
winc	2.22.0
windows-utilities	0.14.0
windowsfs-release	2.66.0

2.11.49

Release Date: 04/17/2024

Bump diego to version 2.97.0
Bump garden-runc to version 1.51.0
Bump windows-syslog to version 1.2.5
Bump loggregator-agent to version 6.5.19
Bump metrics-discovery to version 3.2.24
Bump smoke-tests to version 4.10.0
Bump winc to version 2.22.0
Bump windowsfs-release to version 2.66.0

Component	Version	Release Notes
windows2019 stemcell	2019.72
count-cores-indicator	2.0.0
diego	2.97.0	v2.97.0 ## Changes - Adds support for comma-delimited destinations in ASGs - See: https://github.com/cloudfoundry/executor/pull/96 and https://github.com/cloudfoundry/bbs/pull/94 - Bump bosh package blobs - Bumps `jq` to `1.7.1` - Bumps `tar` - Bump go.mod dependencies ## ✨ Built with go 1.21.8 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.96.0...v2.97.0 ## Resources - [Download release 2.97.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.97.0). v2.96.0 ## Changes - Bump to golang 1.21.8 - Golang package dependency bumps - Includes moving from docker v20 to docker v26 - Includes moving from pgx v3 to pgx v5 - Remove references to Consul from boshrelease + documentation - Many fixes to remove deprecated code and otherwise fix linter violations. ## ✨ Built with go 1.21.8 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.95.0...v2.96.0 ## Resources - [Download release 2.96.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.96.0).
envoy-nginx	0.24.0
event-log	0.9.0
garden-runc	1.51.0	v1.51.0 ## Changes - Bumped Golang to 1.21.8 - Golang package dependency bumps - Many updates to get codebase passing the staticcheck linker - Updated garden-integration-tests to be a little less flakey ## ✨ Built with go 1.21.8 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.50.0...v1.51.0 ## Resources - [Download release 1.51.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.51.0).
windows-syslog	1.2.5	v1.2.5 ## What's Changed * Bump dependencies * Bump packaged Golang to go1.21.9 Full Changelog: https://github.com/cloudfoundry/windows-syslog-release/compare/v1.2.4...v1.2.5
hwc-offline-buildpack	3.1.35
loggregator-agent	6.5.19	v6.5.19 ## What's Changed * Bump dependencies * Bump to [go1.21.9](https://groups.google.com/g/golang-announce/c/YgW0sx8mN3M/m/khALNYGdAAAJ) Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v6.5.18...v6.5.19
metrics-discovery	3.2.24	v3.2.24 ## What's Changed * Bump dependencies * Bump to [go1.21.9](https://groups.google.com/g/golang-announce/c/YgW0sx8mN3M/m/khALNYGdAAAJ) Full Changelog: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.23...v3.2.24
smoke-tests	4.10.0	4.10.0 Create bosh final release 4.10.0 4.9.5 Create bosh final release 4.9.5 ## What's Changed * Upgrade Golang to 1.22 by @tas-operability-bot in https://github.com/pivotal/smoke-tests/pull/138 Full Changelog: https://github.com/pivotal/smoke-tests/compare/4.9.5...4.9.5
winc	2.22.0	v2.22.0 ## Changes - Many changes to remove usage of deprecated code + fix linting errors - Bump to golang 1.21.8 - Golang package dependency bumps ## ✨ Built with go 1.21.8 Full Changelog: https://github.com/cloudfoundry/winc-release/compare/v2.21.0...v2.22.0 ## Resources - [Download release 2.22.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/winc-release?version=2.22.0).
windows-utilities	0.14.0
windowsfs-release	2.66.0

2.11.48

Release Date: 03/22/2024

Bump diego to version 2.95.0
Bump garden-runc to version 1.50.0
Bump windows-syslog to version 1.2.4
Bump hwc-offline-buildpack to version 3.1.35
Bump loggregator-agent to version 6.5.18
Bump metrics-discovery to version 3.2.23
Bump windowsfs-release to version 2.64.0

Component	Version	Release Notes
windows2019 stemcell	2019.71
count-cores-indicator	2.0.0
diego	2.95.0	v2.95.0 ## Changes - bbs: ([Issue](https://github.com/cloudfoundry/diego-release/issues/883)) Now uses `DesiredLRPSchedulingInfo` instead of the entire `DesiredLRP` when only the scheduling info is needed, resulting in a 95% decrease in time spent for relevant calls. Thanks @klapkov! ## ✨ Built with go 1.21.7 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.94.0...v2.95.0 ## Resources - [Download release 2.95.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.95.0).
envoy-nginx	0.24.0
event-log	0.9.0
garden-runc	1.50.0	v1.50.0 ## Changes - Adds `grootfs.routine_gc` property, which allows operators to configure garden to grootfs to clean up unused container image layers whenever new containers are created. - Previously, to achieve this, operators had to set `grootfs.reserved_space_for_other_jobs_in_mb` to the same value as the ephemeral disk, which is not always easy to obtain programatically. - Bump go dependencies ## Bosh Job Spec changes: ```diff diff --git a/jobs/garden/spec b/jobs/garden/spec index c84b5c43..027df351 100644 --- a/jobs/garden/spec +++ b/jobs/garden/spec @@ -292,6 +292,10 @@ properties: grootfs.tls.ca_cert: description: "PEM-encoded tls client CA certificate for asset upload/download" + grootfs.routine_gc: + description: "Set to true if you want grootfs to perform garbage collection on unused container image layers whenever a new container is created." + default: false + grootfs.reserved_space_for_other_jobs_in_mb: description: "Amount of space that will be kept free for other jobs. The GrootFS store will be able to grow up to a maximum size of its disk minus this reserved space. Where the reserved space does not allow sufficient size for GrootFS to store container images and root filesystems (currently 15GB), the limit will be a soft limit, and garbage collection will attempt to keep disk space available for other jobs. -1 disables GC and allows GrootFS to potentially use the whole disk." default: 15360 ``` ## ✨ Built with go 1.21.7 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.49.0...v1.50.0 ## Resources - [Download release 1.50.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.50.0).
windows-syslog	1.2.4	v1.2.4 ## What's Changed * Bump dependencies * Bump packaged Golang to go1.21.8 Full Changelog: https://github.com/cloudfoundry/windows-syslog-release/compare/v1.2.3...v1.2.4
hwc-offline-buildpack	3.1.35	3.1.35 * Add hwc 27.0.0, remove hwc 26.0.0 for stack(s) windows2016, windows \| name \| version \| cf_stacks \| \|-\|-\|-\| \| hwc \| 27.0.0 \| windows, windows2016 \| Default binary versions: \| name \| version \| \|-\|-\| \| hwc \| 27.0.0 \| * Uncached buildpack SHA256: 5c505af4ca255d8b138c7319fee7e52b6473aec081472315c9d8afefdc173674 * Uncached buildpack SHA256: 7f08a228fb23baf746e599365950cc8ef9edb50f4eb636bd78222bbba4f6d6af
loggregator-agent	6.5.18	v6.5.18 ## What's Changed * Bump dependencies * Bump to [go1.21.8](https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg/m/46oA5yPABQAJ) Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v6.5.17...v6.5.18
metrics-discovery	3.2.23	v3.2.23 ## What's Changed - Bump dependencies - Bump to [go1.21.8](https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg/m/46oA5yPABQAJ) Full Changelog: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.22...v3.2.23
smoke-tests	4.8.5
winc	2.21.0
windows-utilities	0.14.0
windowsfs-release	2.64.0

2.11.47

Release Date: 03/04/2024

[Security Fix] Bump docker to address GHSA-jq35-85cj-fj4p
[Feature Improvement] Garden now emits an UnkillableContainers metric to help identify cells that will be unable to redeploy successfully without operator intervention
[Feature Improvement] A more useful error is now thrown if the (windows) stemcell has not been configured with the necessary CCG support.
Bump diego to version 2.94.0
Bump envoy-nginx to version 0.24.0
Bump garden-runc to version 1.49.0
Bump winc to version 2.21.0
Bump windowsfs-release to version 2.63.0

Component	Version	Release Notes
windows2019 stemcell	2019.70
count-cores-indicator	2.0.0
diego	2.94.0	v2.94.0 ## Changes - Fix bosh job spec description for `container_max_cpu_shares` - dockerapplifecycle: Add OCI image spec index type to Accept header - vizzini: Remove CPUWeight test - bbs: Remove cpu_weight limits - guardian: Add tests for unkillable containers ## Bosh Job Spec changes: ```diff diff --git a/jobs/rep/spec b/jobs/rep/spec index 24ce303d4..405f90f46 100644 --- a/jobs/rep/spec +++ b/jobs/rep/spec @@ -120,7 +120,7 @@ properties: description: "the max concurrent download steps that can be active" default: 5 diego.executor.container_max_cpu_shares: - description: "the maximum number of cpu shares for a container." + description: "number of CPU shares per 100 CPU weight" default: 1024 diego.executor.container_inode_limit: description: "the inode limit enforced on each garden container." diff --git a/jobs/rep_windows/spec b/jobs/rep_windows/spec index bd5e1db9f..0521d1061 100644 --- a/jobs/rep_windows/spec +++ b/jobs/rep_windows/spec @@ -116,7 +116,7 @@ properties: description: "the max concurrent download steps that can be active" default: 5 diego.executor.container_max_cpu_shares: - description: "the maximum number of cpu shares for a container." + description: "number of CPU shares per 100 CPU weight" default: 10000 diego.executor.container_inode_limit: description: "the inode limit enforced on each garden container." ``` ## ✨ Built with go 1.21.7 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.93.0...v2.94.0 ## Resources - [Download release 2.94.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.94.0). v2.93.0 ## Changes - Add CPU Entitlement gauge metric & Deprecate CPU Entitlement counter metric #897 - Bump docker to 20.10.27 to address GHSA-jq35-85cj-fj4p #906 - [golang-1.21-linux (1.21.7)](https://github.com/cloudfoundry/diego-release/commit/36f42cd578ecc742e9d9ad63af599ded1d939f81) ## Bosh Job Spec changes: ```diff diff --git a/jobs/rep/spec b/jobs/rep/spec index 8fb49517a..24ce303d4 100644 --- a/jobs/rep/spec +++ b/jobs/rep/spec @@ -79,6 +79,10 @@ properties: description: "Cert used to communicate with local metron agent over gRPC" loggregator.key: description: "Key used to communicate with local metron agent over gRPC" + loggregator.app_metric_exclusion_filter: + description: "Array of application metrics to not emit" + default: + - cpu_entitlement diego.rep.listen_addr_admin: description: "serve (insecure) ping and evacuate requests on this address and port" diff --git a/jobs/rep_windows/spec b/jobs/rep_windows/spec index 023d76f18..bd5e1db9f 100644 --- a/jobs/rep_windows/spec +++ b/jobs/rep_windows/spec @@ -75,6 +75,10 @@ properties: description: "Cert used to communicate with local metron agent over gRPC" loggregator.key: description: "Key used to communicate with local metron agent over gRPC" + loggregator.app_metric_exclusion_filter: + description: "Array of application metrics to not emit" + default: + - cpu_entitlement diego.rep.advertise_domain: description: "base domain at which the rep should advertise its secure API" ``` ## ✨ Built with go 1.21.7 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.92.0...v2.93.0 ## Resources - [Download release 2.93.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.93.0).
envoy-nginx	0.24.0	v0.24.0 ## Changes - Bumps `nginx` version from `1.17.x` → `1.25.3` ## ✨ Built with go 1.21.7 Full Changelog: https://github.com/cloudfoundry/envoy-nginx-release/compare/v0.23.0...v0.24.0 ## Resources - [Download release 0.24.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry-incubator/envoy-nginx-release?version=0.24.0).
event-log	0.9.0
garden-runc	1.49.0	v1.49.0 ## Changes - ✨guardian is a little more helpful when logging messages about containers that could not be killed, even after sending multiple SIGKILLs. In situations such as this, the only recourse is to reboot the VM, if the container processes are stuck in an unkillable state in the kernel. In addition to making this error stand out more, we've added a new metric for `UnkillableContainers` that guardian emits. When nonzero, there is a container that cannot be killed. See the [CloudFoundrydocs for Component metrics](https://docs.cloudfoundry.org/running/all_metrics.html#garden-linux) for more info. - Golang package dependency bumps - Bumped to Golang 1.21.7 ## ✨ Built with go 1.21.7 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.48.0...v1.49.0 ## Resources - [Download release 1.49.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.49.0).
windows-syslog	1.2.3
hwc-offline-buildpack	3.1.34
loggregator-agent	6.5.17
metrics-discovery	3.2.22
smoke-tests	4.8.5
winc	2.21.0	v2.21.0 ## Changes - ✨The `ccg-plugin` job will now provide a more useful error in its pre-start script if the stemcell has not been configured with the necessary CCG support. - Go package dependency bumps - Golang bumped to v1.21.7 ## ✨ Built with go 1.21.7 Full Changelog: https://github.com/cloudfoundry/winc-release/compare/v2.20.0...v2.21.0 ## Resources - [Download release 2.21.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/winc-release?version=2.21.0).
windows-utilities	0.14.0
windowsfs-release	2.63.0

2.11.46

Release Date: 02/05/2024

Bump garden-runc to version 1.48.0
Bump windows-syslog to version 1.2.3
Bump metrics-discovery to version 3.2.22
Bump windowsfs-release to version 2.62.0

Component	Version	Release Notes
windows2019 stemcell	2019.69
count-cores-indicator	2.0.0
diego	2.92.0
envoy-nginx	0.23.0
event-log	0.9.0
garden-runc	1.48.0	v1.48.0 ## Changes - 🔒[runc](https://github.com/opencontainers/runc) + [container](https://github.com/containerd/containerd) have been bumped to address [CVE-2024-21626](https://github.com/advisories/GHSA-xr7r-f8xq-vfvv) - ✈️Many updates to get garden-runc-release's CI configuration working in the [wg-app-platform-runtime-ci](https://github.com/cloudfoundry/wg-app-platform-runtime-ci) repo Thank you @winkingturtle-vmw @ebroberson @MarcPaquette !!! - Docs updates - Thank you @MarcPaquette !!! - Many golang package dependency bumps ## ✨ Built with go 1.21.6 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.47.0...v1.48.0 ## Resources - [Download release 1.48.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.48.0).
windows-syslog	1.2.3	v1.2.3 ## What's Changed * Bump dependencies * Bump packaged Golang to go1.21.6 Full Changelog: https://github.com/cloudfoundry/windows-syslog-release/compare/v1.2.2...v1.2.3
hwc-offline-buildpack	3.1.34
loggregator-agent	6.5.17
metrics-discovery	3.2.22	v3.2.22 ## What's Changed * Bump dependencies * Bump packaged Golang to go1.21.6 Full Changelog: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.21...v3.2.22
smoke-tests	4.8.5
winc	2.20.0
windows-utilities	0.14.0
windowsfs-release	2.62.0

2.11.45

Release Date: 01/31/2024

[Feature] Adds Diego support for Docker workloads using OCI images
Bump diego to version 2.92.0
Bump loggregator-agent to version 6.5.17

Component	Version	Release Notes
windows2019 stemcell	2019.69
count-cores-indicator	2.0.0
diego	2.92.0	v2.92.0 ## Changes - Buildpack path cache hash has 16 bytes ## ✨ Built with go 1.21.6 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.91.0...v2.92.0 ## Resources - [Download release 2.92.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.92.0). v2.91.0 ## Changes ✨ The `dockerapplifecycle` now supports workloads using the OCI image format. Thanks @jrussett and @ebroberson! ## Bosh Job Spec changes: ```diff diff --git a/jobs/vizzini/spec b/jobs/vizzini/spec index a3bbc5fb2..7eb920159 100644 --- a/jobs/vizzini/spec +++ b/jobs/vizzini/spec @@ -85,3 +85,7 @@ properties: grace_busybox_image_url: description: "grace test asset busybox container image" default: "docker:///cloudfoundry/grace" + + diego_docker_oci_image_url: + description: "diego docker app in OCI image format" + default: "docker:///cloudfoundry/diego-docker-app:oci" ``` ## ✨ Built with go 1.21.6 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.90.0...v2.91.0 ## Resources - [Download release 2.91.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.91.0). v2.90.0 ## Changes - Set Content-Digest header when uploading droplets to support environment that don't have md5 available ## ✨ Built with go 1.21.6 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.89.0...v2.90.0 ## Resources - [Download release 2.90.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.90.0). v2.89.0 ## Changes - Fix BBS Port issues(https://github.com/cloudfoundry/diego-release/pull/878 & https://github.com/cloudfoundry/diego-release/pull/879) - Make `max_containers` configurable (https://github.com/cloudfoundry/diego-release/pull/876) - Add xxhash as a dependency (https://github.com/cloudfoundry/diego-release/pull/885) - Use major/minor versions of Go, instead of specific versions (https://github.com/cloudfoundry/diego-release/pull/891) - Make jitter interval configurable. Add new config parameter: JitterFactor (https://github.com/cloudfoundry/route-emitter/pull/31) ## Bosh Job Spec changes: ```diff diff --git a/jobs/rep/spec b/jobs/rep/spec index 1383b67c0..8fb49517a 100644 --- a/jobs/rep/spec +++ b/jobs/rep/spec @@ -224,6 +224,10 @@ properties: description: "Timeout in seconds to receive a response to the keepalive ping. If a response is not received within this time, the locket client will reconnect to another server." default: 22 + diego.rep.max_containers: + description: "Maximum container capacity per rep" + default: 250 + enable_declarative_healthcheck: description: "When set, enables the rep to prefer the LRP CheckDefinition to healthcheck instances over the Monitor action. Requires Garden-Runc v1.10.0+" default: false diff --git a/jobs/route_emitter/spec b/jobs/route_emitter/spec index faac3b0c5..11dae3aec 100644 --- a/jobs/route_emitter/spec +++ b/jobs/route_emitter/spec @@ -93,6 +93,10 @@ properties: diego.route_emitter.bbs.max_idle_conns_per_host: description: "maximum number of idle http connections" + diego.route_emitter.jitter_factor: + description: "The jitter factor is the percentage of register interval used in determining the jitter interval (the time for which the emitter sleeps)" + default: 0.2 + diego.route_emitter.job_name: description: "The name of the Diego job referenced by this spec (DO NOT override)" default: "route_emitter" diff --git a/jobs/route_emitter_windows/spec b/jobs/route_emitter_windows/spec index 404c9f518..cec39c995 100644 --- a/jobs/route_emitter_windows/spec +++ b/jobs/route_emitter_windows/spec @@ -83,6 +83,10 @@ properties: diego.route_emitter.bbs.max_idle_conns_per_host: description: "maximum number of idle http connections" + diego.route_emitter.jitter_factor: + description: "The jitter factor is the percentage of register interval used in determining the jitter interval (the time for which the emitter sleeps)" + default: 0.2 + diego.route_emitter.job_name: description: "The name of the Diego job referenced by this spec (DO NOT override)" default: "route_emitter_windows" ``` ## ✨ Built with go 1.21.6 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.88.0...v2.89.0 ## Resources - [Download release 2.89.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.89.0).
envoy-nginx	0.23.0
event-log	0.9.0
garden-runc	1.47.0
windows-syslog	1.2.2
hwc-offline-buildpack	3.1.34
loggregator-agent	6.5.17	v6.5.17 ## What's Changed ### Fixes * Bump dependencies * Bump packaged Go version to go1.21.6 Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v6.5.16...v6.5.17
metrics-discovery	3.2.21
smoke-tests	4.8.5
winc	2.20.0
windows-utilities	0.14.0
windowsfs-release	2.61.0

2.11.44

Release Date: 01/25/2024

Bump diego to version 2.88.0
Bump envoy-nginx to version 0.23.0
Bump garden-runc to version 1.47.0
Bump hwc-offline-buildpack to version 3.1.34
Bump smoke-tests to version 4.8.5
Bump winc to version 2.20.0
Bump windowsfs-release to version 2.61.0

Component	Version	Release Notes
windows2019 stemcell	2019.69
count-cores-indicator	2.0.0
diego	2.88.0	v2.88.0 ## Changes -Bumps golang.org/x/crypto/ssh to v0.17.0 to address CVE-2023-48795. ## ✨ Built with go 1.21.5 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.87.0...v2.88.0 ## Resources - [Download release 2.88.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.88.0). v2.87.0 ## Changes Reverted max_containers changes https://github.com/cloudfoundry/diego-release/pull/873 ## Bosh Job Spec changes: ```diff diff --git a/jobs/rep/spec b/jobs/rep/spec index 5c0ec9576..1383b67c0 100644 --- a/jobs/rep/spec +++ b/jobs/rep/spec @@ -30,11 +30,6 @@ packages: - proxy - certsplitter -consumes: -- name: max_containers - type: max_containers - optional: true - properties: bpm.enabled: description: "use the BOSH Process Manager to manage the cell rep process." ``` ## ✨ Built with go 1.21.5 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.86.0...v2.87.0 ## Resources - [Download release 2.87.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.87.0). v2.86.0 ## Changes - BBS [Run migration and save migration version in single transaction](https://github.com/cloudfoundry/bbs/pull/76) - Rep [Make max_containers configurable](https://github.com/cloudfoundry/diego-release/pull/868) - Executor [Ignore EntryNotFound and AlreadyClosed errors when cleaning up cache](https://github.com/cloudfoundry/executor/pull/89) - Route-emitter [Add AZ to registry message](https://github.com/cloudfoundry/route-emitter/pull/29) - Rep [Send AZ in StartActualLRP/EvacuateRunningActualLRP requests to BBS](https://github.com/cloudfoundry/rep/pull/48) ## Bosh Job Spec changes: ```diff diff --git a/jobs/rep/spec b/jobs/rep/spec index 1383b67c0..5c0ec9576 100644 --- a/jobs/rep/spec +++ b/jobs/rep/spec @@ -30,6 +30,11 @@ packages: - proxy - certsplitter +consumes: +- name: max_containers + type: max_containers + optional: true + properties: bpm.enabled: description: "use the BOSH Process Manager to manage the cell rep process." ``` ## ✨ Built with go 1.21.5 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.85.0...v2.86.0 ## Resources - [Download release 2.86.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.86.0).
envoy-nginx	0.23.0	v0.23.0 ## Changes - bump to go 1.21.5 ## ✨ Built with go 1.21.5 Full Changelog: https://github.com/cloudfoundry/envoy-nginx-release/compare/v0.22.0...v0.23.0 ## Resources - [Download release 0.23.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry-incubator/envoy-nginx-release?version=0.23.0).
event-log	0.9.0
garden-runc	1.47.0	v1.47.0 ## Changes - [Revert "Add max_containers bosh link](https://github.com/cloudfoundry/garden-runc-release/pull/327) ## Bosh Job Spec changes: ```diff diff --git a/jobs/garden/spec b/jobs/garden/spec index abf22f8a..c84b5c43 100644 --- a/jobs/garden/spec +++ b/jobs/garden/spec @@ -45,11 +45,6 @@ provides: type: iptables properties: - garden.iptables_bin_dir - -- name: max_containers - type: max_containers - properties: - - garden.max_containers properties: garden.listen_network: ``` ## ✨ Built with go 1.21.5 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.46.0...v1.47.0 ## Resources - [Download release 1.47.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.47.0). v1.46.0 ## Changes - https://github.com/cloudfoundry/garden-runc-release/pull/314 - Add `max_containers` property. It is provided in a link so it is used in rep as well. Now you can increase containers past 250! Thanks @klapkov! - https://github.com/cloudfoundry/garden-runc-release/pull/323 - Lots of refactoring by @winkingturtle-vmw, including the ability to run the test suite in parallel! Thank you! ## Bosh Job Spec changes: ```diff diff --git a/jobs/garden/spec b/jobs/garden/spec index c84b5c43..abf22f8a 100644 --- a/jobs/garden/spec +++ b/jobs/garden/spec @@ -45,6 +45,11 @@ provides: type: iptables properties: - garden.iptables_bin_dir + +- name: max_containers + type: max_containers + properties: + - garden.max_containers properties: garden.listen_network: diff --git a/jobs/gats/spec b/jobs/gats/spec index 4f59d675..916a35eb 100644 --- a/jobs/gats/spec +++ b/jobs/gats/spec @@ -19,6 +19,9 @@ properties: garden_port: description: Port Garden is listening on default: 7777 + garden_test_rootfs: + description: Test rootfs to use + default: 'docker:///cloudfoundry/garden-rootfs' containerd_for_processes: description: Run GATS with CONTAINERD_FOR_PROCESSES_ENABLED default: false @@ -28,6 +31,9 @@ properties: cpu_throttling: description: Run GATS with CPU_THROTTLING_ENABLED default: false + limits_test_uri: + description: Limists Test rootfs to use + default: 'docker:///busybox' windows_rootfs: description: URL to pull the windows rootfs from default: "" ``` ## ✨ Built with go 1.21.5 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.45.0...v1.46.0 ## Resources - [Download release 1.46.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.46.0).
windows-syslog	1.2.2
hwc-offline-buildpack	3.1.34	3.1.34 * Updating github-config \| name \| version \| cf_stacks \| \|-\|-\|-\| \| hwc \| 26.0.0 \| windows, windows2016 \| Default binary versions: \| name \| version \| \|-\|-\| \| hwc \| 26.0.0 \| * Uncached buildpack SHA256: 3b4b22929af056a7dcb132505fb27e80c92e2c276bfc74f890db42d6a4994707 * Uncached buildpack SHA256: 57a632e04abfe877b87a075c98ba2382e30c89ba37fd759d5ac9a1327ac35357
loggregator-agent	6.5.16
metrics-discovery	3.2.21
smoke-tests	4.8.5	4.8.5 Create bosh final release 4.8.5 ## What's Changed * Upgrade Golang by @tas-operability-bot in https://github.com/pivotal/smoke-tests/pull/126 * Upgrade Golang by @tas-operability-bot in https://github.com/pivotal/smoke-tests/pull/127 Full Changelog: https://github.com/pivotal/smoke-tests/compare/4.8.4...4.8.5
winc	2.20.0	v2.20.0 ## Changes - Dependency bumps - Test improvements ## ✨ Built with go 1.21.5 Full Changelog: https://github.com/cloudfoundry/winc-release/compare/v2.19.0...v2.20.0 ## Resources - [Download release 2.20.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry-incubator/winc-release?version=2.20.0).
windows-utilities	0.14.0
windowsfs-release	2.61.0

2.11.43

Release Date: 12/08/2023

Bump garden-runc to version 1.45.0
Bump windows-syslog to version 1.2.2
Bump hwc-offline-buildpack to version 3.1.33
Bump loggregator-agent to version 6.5.16
Bump metrics-discovery to version 3.2.21

Component	Version	Release Notes
windows2019 stemcell	2019.67
count-cores-indicator	2.0.0
diego	2.85.0
envoy-nginx	0.22.0
event-log	0.9.0
garden-runc	1.45.0	v1.45.0 ## Changes - Resolved an issue where container networking statistics could not be retrieved for apps running in containers that did not have a `bash` executable. Thanks @JVecsei1! - Removed the garden-healthchecker package after it had been removed from the boshrelease in v1.43.0 ## Bosh Job Spec changes: ```diff diff --git a/jobs/garden/spec b/jobs/garden/spec index 0d2a8fb4..c84b5c43 100644 --- a/jobs/garden/spec +++ b/jobs/garden/spec @@ -39,7 +39,6 @@ packages: - netplugin-shim - dontpanic - tini - - garden-runc-healthchecker provides: - name: iptables ``` ## ✨ Built with go 1.21.4 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.44.0...v1.45.0 ## Resources - [Download release 1.45.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.45.0).
windows-syslog	1.2.2	v1.2.2 ## What's Changed * Bump packaged Golang to go1.20.12 Full Changelog: https://github.com/cloudfoundry/windows-syslog-release/compare/v1.2.1...v1.2.2
hwc-offline-buildpack	3.1.33	3.1.33 * Updating github-config (#148) \| name \| version \| cf_stacks \| \|-\|-\|-\| \| hwc \| 26.0.0 \| windows, windows2016 \| Default binary versions: \| name \| version \| \|-\|-\| \| hwc \| 26.0.0 \| * Uncached buildpack SHA256: b7c8e7043cbaafa1488abc114ddbd259882e7c1caf3c87dc7aeeae4f86f7de2c * Uncached buildpack SHA256: c5b44a86786cfc5e8f3027c4f321fc4a0d07ba45b0628c304b24cae7bffa2479
loggregator-agent	6.5.16	v6.5.16 ## What's Changed * Bump dependencies * Bump packaged Golang to go1.20.12 Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v6.5.15...v6.5.16
metrics-discovery	3.2.21	v3.2.21 ## What's Changed * Bump dependencies * Bump packaged Golang to go1.20.12 Full Changelog: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.20...v3.2.21
smoke-tests	4.8.4
winc	2.19.0
windows-utilities	0.14.0
windowsfs-release	2.60.0

2.11.42

Release Date: 11/29/2023

Bump diego to version 2.85.0
Bump windows-syslog to version 1.2.1
Bump winc to version 2.19.0
Bump windowsfs-release to version 2.60.0

Component	Version	Release Notes
windows2019 stemcell	2019.67
count-cores-indicator	2.0.0
diego	2.85.0	v2.85.0 ## Changes - Bump garden Grootfs, Guardian, and idmapper - Bump golang to 1.21.4 ## ✨ Built with go 1.21.4 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.84.0...v2.85.0 ## Resources - [Download release v2.85.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.85.0).
envoy-nginx	0.22.0
event-log	0.9.0
garden-runc	1.44.0
windows-syslog	1.2.1	v1.2.1 ## What's Changed ### Fixes * Bump included golang package to go1.20.11 Full Changelog: https://github.com/cloudfoundry/windows-syslog-release/compare/v1.2.0...v1.2.1
hwc-offline-buildpack	3.1.32
loggregator-agent	6.5.15
metrics-discovery	3.2.20
smoke-tests	4.8.4
winc	2.19.0	v2.19.0 ## Changes - Bump cert-injector, certsplitter, diff-exporter, groot-windows, and winc - Bumped to golang 1.21.4 ## ✨ Built with go 1.21.4 Full Changelog: https://github.com/cloudfoundry/winc-release/compare/v2.18.0...v2.19.0 ## Resources - [Download release v2.19.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/winc-release?version=2.19.0).
windows-utilities	0.14.0
windowsfs-release	2.60.0

2.11.41

Release Date: 11/10/2023

Bump diego to version 2.84.0
Bump envoy-nginx to version 0.22.0
Bump garden-runc to version 1.44.0
Bump windows-syslog to version 1.2.0
Bump metrics-discovery to version 3.2.20
Bump winc to version 2.18.0
Bump windowsfs-release to version 2.59.0

Component	Version	Release Notes
windows2019 stemcell	2019.66
count-cores-indicator	2.0.0
diego	2.84.0	v2.84.0 ## Changes - Bumps envoy to [v1.28.0](https://github.com/envoyproxy/envoy/releases/tag/v1.28.0) - BBS DesiredLRPHandler now sends Stop/Update LRP requests to rep in parallel - Thanks @vlast3k! - Log rate limit metrics are no longer generated for tasks - Thanks @mkocher! - App Logs will now emit messages for when they run pre-start scripts and when they invoke the startup command, to make troubleshooting just that much easier - Thanks @Gerg! ## Bosh Job Spec changes: ```diff diff --git a/jobs/vizzini/spec b/jobs/vizzini/spec index 6ff53c654..a3bbc5fb2 100644 --- a/jobs/vizzini/spec +++ b/jobs/vizzini/spec @@ -1,7 +1,7 @@ --- name: vizzini packages: - - golang-1-linux + - golang-1.21-linux - vizzini templates: ``` ## ✨ Built with go 1.21.3 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.83.0...v2.84.0 ## Resources - [Download release v2.84.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.84.0).
envoy-nginx	0.22.0	v0.22.0 ## Changes - Bump go to 1.21.4 ## ✨ Built with go 1.21.4 Full Changelog: https://github.com/cloudfoundry/envoy-nginx-release/compare/v0.21.0...v0.22.0 ## Resources - [Download release 0.22.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry-incubator/envoy-nginx-release?version=0.22.0).
event-log	0.9.0
garden-runc	1.44.0	v1.44.0 ## Changes - Change user for grootfs test - Bump golang to 1.21.4 ## ✨ Built with go 1.21.4 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.43.0...v1.44.0 ## Resources - [Download release v1.44.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.44.0). v1.43.0 ## Changes - The `garden-healthchecker` process was found to be too aggressive when evaluating and acting upon failed healthchecks. It has been removed. ## Bosh Job Spec changes: ```diff diff --git a/jobs/garden/spec b/jobs/garden/spec index 125909ed..0d2a8fb4 100644 --- a/jobs/garden/spec +++ b/jobs/garden/spec @@ -23,7 +23,6 @@ templates: bin/containerd_utils.erb: bin/containerd_utils bin/pre-start: bin/pre-start bin/post-start: bin/post-start - config/healthchecker.yml.erb: config/healthchecker.yml packages: - guardian @@ -309,7 +308,3 @@ properties: logging.format.timestamp: description: "Format for timestamp in component logs. Valid values are 'unix-epoch' and 'rfc3339'." default: "unix-epoch" - - healthchecker.failure_counter_file: - description: "File used by the healthchecker to monitor consecutive failures." - default: /var/vcap/data/garden/counters/consecutive_healthchecker_failures.count ``` ## ✨ Built with go 1.21.3 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.42.0...v1.43.0 ## Resources - [Download release v1.43.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.43.0). v1.42.0 ## Changes - Bump golang dependencies - Bump ruby testing dependencies ## ✨ Built with go 1.21.3 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.41.0...v1.42.0 ## Resources - [Download release v1.42.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.42.0).
windows-syslog	1.2.0	v1.2.0 ## What's Changed ### Features * Add a new, optional, structured data param key, `environment`, to `instance@47450`. This is useful for cases where log lines should be tagged with an operator provided string but need to vary from the director name (https://github.com/cloudfoundry/windows-syslog-release/pull/42) ### Maintenance * Bump blackbox dependencies * README: Address, port and transport all need to be provided (https://github.com/cloudfoundry/windows-syslog-release/pull/43) Full Changelog: https://github.com/cloudfoundry/windows-syslog-release/compare/v1.1.19...v1.2.0 v1.1.19 ## What's Changed * Bump included golang package to go1.20.10 Full Changelog: https://github.com/cloudfoundry/windows-syslog-release/compare/v1.1.18...v1.1.19
hwc-offline-buildpack	3.1.32
loggregator-agent	6.5.15
metrics-discovery	3.2.20	v3.2.20 ## What's Changed * Bump to [go1.20.11](https://groups.google.com/g/golang-announce/c/4tU8LZfBFkY/m/d-jSKR_jBwAJ) Full Changelog: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.19...v3.2.20 v3.2.19 ## What's Changed * Bump dependencies Full Changelog: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.18...v3.2.19
smoke-tests	4.8.4
winc	2.18.0	v2.18.0 ## Changes - Resolves an bug in `cert-injector` introduced in [v2.17.0](https://github.com/cloudfoundry/winc-release/releases/tag/v2.18.0) where the `windows2019fs` job's `pre-start` script would fail when the `rootfs-windows.trusted_certs` property was set. ## ✨ Built with go 1.21.3 Full Changelog: https://github.com/cloudfoundry/winc-release/compare/v2.17.0...v2.18.0 ## Resources - [Download release v2.18.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/winc-release?version=2.18.0). v2.17.0 ❗❗❗ DO NOT USE THIS VERSION PLEASE USE 2.18.0 INSTEAD❗❗❗ ❗❗❗ THIS VERSION OF WINC-RELEASE HAS A KNOWN ISSUE CAUSING PRE-START FAILURES ON THE WINDOWS2019FS JOB WHEN `windows-rootfs.trusted_certs` is set ❗❗❗ ## Changes - 🐞 Bug fix: prevent ccg-plugin pre-start script from running when `ccg.enabled` is set to false. - Bump dependencies ## ✨ Built with go 1.21.3 Full Changelog: https://github.com/cloudfoundry/winc-release/compare/v2.16.0...v2.17.0 ## Resources - [Download release v2.17.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/winc-release?version=2.17.0).
windows-utilities	0.14.0
windowsfs-release	2.59.0

2.11.40

Release Date: 10/25/2023

[Bug Fix] Prevent retired app instances from receiving traffic by ensuring rep emits events to cleanup routes when cf restart-app-instance is invoked.
Bump diego to version 2.83.0
Bump envoy-nginx to version 0.21.0
Bump garden-runc to version 1.41.0
Bump windows-syslog to version 1.1.18
Bump loggregator-agent to version 6.5.15
Bump metrics-discovery to version 3.2.18
Bump winc to version 2.16.0
Bump windowsfs-release to version 2.58.0

Component	Version	Release Notes
windows2019 stemcell	2019.66
count-cores-indicator	2.0.0
diego	2.83.0	v2.83.0 ## Changes - [Bug Fix] Prevent retired app instances from receiving traffic by ensuring rep emits events to cleanup routes when RetireActualLRP is called. (https://github.com/cloudfoundry/bbs/pull/72) (Fixes #820) - Thanks @vlast3k! - Cleans up stderr output from rep's `setup_mounted_data_dirs` script (#689) - Thanks @romain-dartigues! - Docs updates for the container metrics changes from 2.82.0 (https://github.com/cloudfoundry/diego-release/pull/813) - Thanks @geigerj0! - Bump Golang to 1.21.3 - Bump Envoy to 1.25.9 - Bump Package Dependencies - CI Enhancments ## ✨ Built with go 1.21.3 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.82.0...v2.83.0 ## Resources - [Download release v2.83.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.83.0). v2.82.0 ## Changes - Diego now supports reading container networking metrics from garden, and publishing them along with other app container metrics. (https://github.com/cloudfoundry/diego-logging-client/pull/82, https://github.com/cloudfoundry/executor/pull/83) - Requires [garden-runc-release v1.38.0](https://github.com/cloudfoundry/garden-runc-release/releases/tag/v1.38.0) and [cf-networking-release v3.33.0](https://github.com/cloudfoundry/cf-networking-release/releases/tag/v3.33.0). - Thanks @geigerj0 and @jvecsei1! - Removed usage of the `code.cloudfoundry.org/systemcerts` package in favor of golang's builtin functionality. - Bumped to golang 1.21.0 ## ✨ Built with go 1.21.0 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.81.0...v2.82.0 ## Resources - [Download release v2.82.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.82.0).
envoy-nginx	0.21.0	v0.21.0 ## Changes - Bumped to golang 1.21.3 ## ✨ Built with go 1.21.3 Full Changelog: https://github.com/cloudfoundry/envoy-nginx-release/compare/v0.20.0...v0.21.0 ## Resources - [Download release 0.21.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/envoy-nginx-release?version=0.21.0). v0.20.0 ## Changes - Bump golang to 1.21.1 ## ✨ Built with go 1.21.1 Full Changelog: https://github.com/cloudfoundry/envoy-nginx-release/compare/v0.19.0...v0.20.0 ## Resources - [Download release v0.20.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/envoy-nginx-release?version=0.20.0).
event-log	0.9.0
garden-runc	1.41.0	v1.41.0 ## Changes - Bump go to 1.21.3 ## ✨ Built with go 1.21.3 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.40.0...v1.41.0 ## Resources - [Download release v1.41.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.41.0). v1.40.0 ## Changes - Bump Golang to 1.21.1 ## ✨ Built with go 1.21.1 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.39.0...v1.40.0 ## Resources - [Download release v1.40.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.40.0). v1.39.0 ## Changes - Garden on Linux now supports propagating extended attributes from root filesystem images + when adding filesystem data to an existing container. - Bumped to golang 1.21.1 ## ✨ Built with go 1.21.1 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.38.0...v1.39.0 ## Resources - [Download release v1.39.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.39.0). v1.38.0 ## Changes - Garden now supports advertising container networking metrics on Linux containers via the `garden.enable_container_network_metrics` property. - Requires [cf-networking-release v3.33.0](https://github.com/cloudfoundry/cf-networking-release/releases/tag/v3.33.0) or newer, and [diego v2.82.0](https://github.com/cloudfoundry/diego-release/releases/tag/v2.82.0) or newer. - Thanks @JVecsei1 and @geigerj0!! ## Bosh Job Spec changes: ```diff diff --git a/jobs/garden/spec b/jobs/garden/spec index 3bffb2f7..125909ed 100644 --- a/jobs/garden/spec +++ b/jobs/garden/spec @@ -119,6 +119,10 @@ properties: description: "Additional hosts file entries to be used in containers." default: [] + garden.enable_container_network_metrics: + description: "Enable container network metrics. This feature is only available on Linux." + default: false + garden.insecure_docker_registry_list: description: "DEPRECATED in favour of grootfs property." default: [] ``` ## ✨ Built with go 1.20.7 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.37.0...v1.38.0 ## Resources - [Download release v1.38.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.38.0).
windows-syslog	1.1.18	v1.1.18 ## What's Changed * Update golang packages to use go1.20.8 Full Changelog: https://github.com/cloudfoundry/windows-syslog-release/compare/v1.1.17...v1.1.18
hwc-offline-buildpack	3.1.32
loggregator-agent	6.5.15	v6.5.15 ## What's Changed * Bump dependencies * Bump golang to v1.20.10 Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v6.5.14...v6.5.15
metrics-discovery	3.2.18	v3.2.18 ## What's Changed * Bump golang to v1.20.10 Full Changelog: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.17...v3.2.18 v3.2.17 ## What's Changed * Don't configure prom scraper to scrape when metrics-discovery-registrar or metrics-agent are disabled. * Bump dependencies Full Changelog: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.16...v3.2.17
smoke-tests	4.8.4
winc	2.16.0	v2.16.0 ## Changes - Bumped to golang 1.21.3 - CI Enhancements - Dependency Bumps ## ✨ Built with go 1.21.3 Full Changelog: https://github.com/cloudfoundry/winc-release/compare/v2.15.0...v2.16.0 ## Resources - [Download release v2.16.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/winc-release?version=2.16.0).
windows-utilities	0.14.0
windowsfs-release	2.58.0

2.11.39

Release Date: 10/12/2023

Bump windowsfs-release to version 2.57.0

Component	Version
windows2019 stemcell	2019.65
count-cores-indicator	2.0.0
diego	2.81.0
envoy-nginx	0.19.0
event-log	0.9.0
garden-runc	1.37.0
windows-syslog	1.1.17
hwc-offline-buildpack	3.1.32
loggregator-agent	6.5.14
metrics-discovery	3.2.16
smoke-tests	4.8.4
winc	2.15.0
windows-utilities	0.14.0
windowsfs-release	2.57.0

2.11.38

Release Date: 09/26/2023

[Security Fix] Bump smoke-tests to address Go CVE-2023-39533
Bump loggregator-agent to version 6.5.14
Bump metrics-discovery to version 3.2.16
Bump smoke-tests to version 4.8.4

Component	Version	Release Notes
windows2019 stemcell	2019.65
count-cores-indicator	2.0.0
diego	2.81.0
envoy-nginx	0.19.0
event-log	0.9.0
garden-runc	1.37.0
windows-syslog	1.1.17
hwc-offline-buildpack	3.1.32
loggregator-agent	6.5.14	v6.5.14 ## What's Changed * Bump to [go1.20.8](https://groups.google.com/g/golang-announce/c/Fm51GRLNRvM/m/F5bwBlXMAQAJ) * Bump dependencies Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v6.5.13...v6.5.14
metrics-discovery	3.2.16	v3.2.16 ## What's Changed * Add check for disable flag for metrics agent ingress_port Full Changelog: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.15...v3.2.16 v3.2.15 ## What's Changed * Bump to [go1.20.8](https://groups.google.com/g/golang-announce/c/Fm51GRLNRvM/m/F5bwBlXMAQAJ) * Bump dependencies Full Changelog: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.14...v3.2.15
smoke-tests	4.8.4	4.8.4 Create bosh final release 4.8.4 ## What's Changed * feat: CI to autobump golang by @pabloarodas in https://github.com/pivotal/smoke-tests/pull/106 * Upgrade Golang by @pvaramballypivot in https://github.com/pivotal/smoke-tests/pull/111 * test: skip jobs to test automerge by @pabloarodas in https://github.com/pivotal/smoke-tests/pull/113 * Upgrade Golang by @pvaramballypivot in https://github.com/pivotal/smoke-tests/pull/114 * Upgrade Golang by @pvaramballypivot in https://github.com/pivotal/smoke-tests/pull/116 * Bump cf-cli to 8.7.3 by @xtremerui in https://github.com/pivotal/smoke-tests/pull/117 Full Changelog: https://github.com/pivotal/smoke-tests/compare/4.8.3...4.8.4
winc	2.15.0
windows-utilities	0.14.0
windowsfs-release	2.55.0

2.11.37

Release Date: 09/11/2023

Bump diego to version 2.81.0
Bump garden-runc to version 1.37.0
Bump windows-syslog to version 1.1.17
Bump hwc-offline-buildpack to version 3.1.32
Bump loggregator-agent to version 6.5.13
Bump metrics-discovery to version 3.2.14
Bump winc to version 2.15.0

Component	Version	Release Notes
windows2019 stemcell	2019.64
count-cores-indicator	2.0.0
diego	2.81.0	v2.81.0 ## Changes - Healthchecks for process startup have been renamed from "readiness" to "startup" to better indicate that it is the initial liveness check to ensure the process has started. After completing, it is superceded by the liveness check, which has had no changes. - Adds support for "readiness" checks on processes. The purpose of readiness checks are to determine whether a process is capable of serving traffic or not. This is contrasted now with liveness checks which determine if the process is in a state that requires it to be restarted. Readiness checks can be used to pull a process out of service when they fail, while not restarting the process. Once readiness is passing again, the process will be re-added into the service pool. Removal/addition of processes to the service pool is done via route-emitter. - `cfdot actual-lrps` now behaves in a more expected behavior regarding the display of `host_tls_proxy_port`. It should always be preset, even if the value is `0`. - Bumped to golang 1.20.7. ## ✨ Built with go 1.20.7 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.80.0...v2.81.0 ## Resources - [Download release v2.81.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.81.0).
envoy-nginx	0.19.0
event-log	0.9.0
garden-runc	1.37.0	v1.37.0 ## Changes - 🐛Fixed a bug with garden-windows where process directories were being leaked in the garden depot. This adds a `garden.cleanup_process_dirs_on_wait` property to mimic cleanup logic from garden-linux. This property is defaulted to true on garden-windows, to keep the desired behavior for CF/Diego. If garden-windows is ever used with Concourse, users will want to set this to false. ## Bosh Job Spec changes: ```diff diff --git a/jobs/garden-windows/spec b/jobs/garden-windows/spec index ef1ce54e..004e4e7f 100644 --- a/jobs/garden-windows/spec +++ b/jobs/garden-windows/spec @@ -69,6 +69,12 @@ properties: description: "path to the rootfs to use when a container specifies no rootfs" default: "" + # Since garden-windows is not currently used in Concourse, we are setting this to 'true' to make life easier for diego/cf users. + # https://github.com/cloudfoundry/garden-runc-release/releases/tag/v1.5.0 + garden.cleanup_process_dirs_on_wait: + description: A boolean stating whether or not to cleanup process state after waiting for it. If set a process can be waited for only once. + default: true + logging.format.timestamp: description: "Format for timestamp in component logs. Valid values are 'unix-epoch' and 'rfc3339'." default: "unix-epoch" diff --git a/jobs/garden/spec b/jobs/garden/spec index 259bba46..3bffb2f7 100644 --- a/jobs/garden/spec +++ b/jobs/garden/spec @@ -201,6 +201,8 @@ properties: description: A boolean stating whether or not to run garden-server as a non-root user default: false + # We believe this defaults to false to help concourse: https://github.com/cloudfoundry/garden-runc-release/releases/tag/v1.5.0 + # For diego/cf, this should be set to true garden.cleanup_process_dirs_on_wait: description: A boolean stating whether or not to cleanup process state after waiting for it. If set a process can be waited for only once. default: false ``` ## ✨ Built with go 1.20.7 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.36.0...v1.37.0 ## Resources - [Download release v1.37.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.37.0). v1.36.0 ## Changes - [Pin opencontainer/runc to version v1.1.7](https://github.com/cloudfoundry/guardian/commit/f2b3d5ec72dee482f63068124cd6b3592dd6d74b) - Resolves a compilation issue with `xenial` stemcells - Dependency bumps ## ✨ Built with go 1.20.7 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.35.0...v1.36.0 ## Resources - [Download release v1.36.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.36.0). v1.35.0 # ⚠️ We recommend skipping to [1.36.0](https://github.com/cloudfoundry/garden-runc-release/releases/tag/v1.35.0) Especially if you're still running `xenial` stemcells, in which this release version will fail to compile. ## Changes - [Bug Fix] Re-implemented HTTP health checks of the `gdn` process in the `garden` job. - These were disabled in [1.29.0](https://github.com/cloudfoundry/garden-runc-release/releases/tag/v1.29.0) due to issues during deployment. - Bumped golang to 1.20.7 ## ✨ Built with go 1.20.7 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.34.0...v1.35.0 ## Resources - [Download release v1.35.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.35.0).
windows-syslog	1.1.17	v1.1.17 ## What's Changed * Bump Go to v1.20.7 Full Changelog: https://github.com/cloudfoundry/windows-syslog-release/compare/v1.1.16...v1.1.17
hwc-offline-buildpack	3.1.32	3.1.32 * Add hwc 26.0.0, remove hwc 23.0.0 (#136) for stack(s) windows2016, windows (https://www.pivotaltracker.com/story/show/185693627) Packaged binaries: \| name \| version \| cf_stacks \| \|-\|-\|-\| \| hwc \| 26.0.0 \| windows, windows2016 \| Default binary versions: \| name \| version \| \|-\|-\| \| hwc \| 26.0.0 \| * Uncached buildpack SHA256: e48a64f378fe3ebf4ca159e62ff31c621e2297ca651821e0ad8ad17366596494 * Uncached buildpack SHA256: 85bf9307601c6bd24112547551c03f9b1ba833348c54ba60dcf6d936ec58bd11
loggregator-agent	6.5.13	v6.5.13 ## What's Changed * Bump to [go1.20.7](https://groups.google.com/g/golang-announce/c/X0b6CsSAaYI/m/Efv5DbZ9AwAJ) * Bump dependencies Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v6.5.12...v6.5.13
metrics-discovery	3.2.14	v3.2.14 ## What's Changed * add disable property to metrics-agent & metrics-discovery-registrar by @mkocher in https://github.com/cloudfoundry/metrics-discovery-release/pull/169 * Bump dependencies Full Changelog: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.13...v3.2.14 v3.2.13 ## What's Changed * Fix metrics-agent on windows * Bump to [go1.20.7](https://groups.google.com/g/golang-announce/c/X0b6CsSAaYI/m/Efv5DbZ9AwAJ) * Bump dependencies Full Changelog: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.12...v3.2.13
smoke-tests	4.8.3
winc	2.15.0	v2.15.0 ## Changes - Adds support for customizing the timestamp format used in the `groot` job's logging via the `groot.log_format` property. - Bumped to golang 1.20.7 ## Bosh Job Spec changes: ```diff diff --git a/jobs/groot/spec b/jobs/groot/spec index ec4aac2..a73f967 100644 --- a/jobs/groot/spec +++ b/jobs/groot/spec @@ -31,6 +31,10 @@ properties: description: "Can be debug, info, error or fatal" default: "info" + groot.log_format: + description: "Can be rfc3339 or epoch" + default: "epoch" + groot.refresh_base_layer: description: "EXPERIMENTAL: Delete size file in order to pull fresh base layer." default: false ``` ## ✨ Built with go 1.20.7 Full Changelog: https://github.com/cloudfoundry/winc-release/compare/v2.14.0...v2.15.0 ## Resources - [Download release v2.15.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/winc-release?version=2.15.0).
windows-utilities	0.14.0
windowsfs-release	2.55.0

2.11.36

Release Date: 08/17/2023

Bump envoy-nginx to version 0.19.0
Bump windows-syslog to version 1.1.16
Bump loggregator-agent to version 6.5.12
Bump metrics-discovery to version 3.2.12
Bump winc to version 2.14.0

Component	Version	Release Notes
windows2019 stemcell	2019.63
count-cores-indicator	2.0.0
diego	2.80.0
envoy-nginx	0.19.0	v0.19.0 ## Changes - No code changes - testing new CI credentials ## ✨ Built with go 1.20.6 Full Changelog: https://github.com/cloudfoundry/envoy-nginx-release/compare/v0.18.0...v0.19.0 ## Resources - [Download release v0.19.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/envoy-nginx-release?version=0.19.0).
event-log	0.9.0
garden-runc	1.34.0
windows-syslog	1.1.16	v1.1.16 ## What's Changed * Update packaged Golang version to v1.20.6 Full Changelog: https://github.com/cloudfoundry/windows-syslog-release/compare/v1.1.15...v1.1.16
hwc-offline-buildpack	3.1.31
loggregator-agent	6.5.12	v6.5.12 ## What's Changed * Bump dependencies * Update packaged Golang version to v1.20.6 Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v6.5.11...v6.5.12
metrics-discovery	3.2.12	v3.2.12 ## What's Changed * Bump dependencies * Bump Go to v1.20.6 Full Changelog: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.11...v3.2.12
smoke-tests	4.8.3
winc	2.14.0	v2.14.0 ## Changes - Bumped to golang 1.20.6 - Added an endpoint to the sample WindowsAuth app included for testing SQL Server endpoints. ## ✨ Built with go 1.20.6 Full Changelog: https://github.com/cloudfoundry/winc-release/compare/v2.13.0...v2.14.0 ## Resources - [Download release v2.14.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/winc-release?version=2.14.0).
windows-utilities	0.14.0
windowsfs-release	2.55.0

2.11.35

Release Date: 07/21/2023

[Feature Improvement] Use routing_info for desired_lrps when there are missing actual_lrps.
[Feature] Add distributed tracing to Diego component logs.
[Bug Fix] Prevents cachedownloader from erroneously deleting old entries.
[Bug Fix] Resolves a race condition in BBS when the replacement for a suspect LRP has started.
Bump diego to version 2.80.0
Bump envoy-nginx to version 0.18.0
Bump garden-runc to version 1.34.0
Bump windows-syslog to version 1.1.15
Bump metrics-discovery to version 3.2.11
Bump smoke-tests to version 4.8.3
Bump windowsfs-release to version 2.55.0

Component	Version	Release Notes
windows2019 stemcell	2019.63
count-cores-indicator	2.0.0
diego	2.80.0	v2.80.0 ## Changes - Bumped to golang 1.20.6 ## ✨ Built with go 1.20.6 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.79.0...v2.80.0 ## Resources - [Download release v2.80.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.80.0). v2.79.0 ## Changes - [Feature Improvement]: Use routing_info for desired_lrp's when there are missing actual_lrp's https://github.com/cloudfoundry/route-emitter/pull/26. Thank you for this contribution @klapkov! - [Feature]: Support distributed tracing https://github.com/cloudfoundry/route-emitter/pull/24. Thank you @mariash for this contribution! - [Bug Fix]: Fix bug with cachedownloader in PR https://github.com/cloudfoundry/cacheddownloader/pull/26. Fixes issue https://github.com/cloudfoundry/diego-release/issues/773. Thank you @vlast3k for this contribution! - [Bug Fix]: Resolves a race condition in BBS when the replacement for a suspect LRP has started. ## ✨ Built with go 1.20.5 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.78.0...v2.79.0 ## Resources - [Download release v2.79.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.79.0).
envoy-nginx	0.18.0	v0.18.0 ## Changes - Bumped golang to 1.20.6 ## ✨ Built with go 1.20.6 Full Changelog: https://github.com/cloudfoundry/envoy-nginx-release/compare/v0.17.0...v0.18.0 ## Resources - [Download release v0.18.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/envoy-nginx-release?version=0.18.0).
event-log	0.9.0
garden-runc	1.34.0	v1.34.0 ## Changes - Bumped golang to 1.20.6 - Refactors, enhancements, and fixes to CI scripts and garden-integration-tests ## ✨ Built with go 1.20.6 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.33.0...v1.34.0 ## Resources - [Download release v1.34.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.34.0).
windows-syslog	1.1.15	v1.1.15 ## What's Changed * Dependency bumps * Update packaged Golang version to v1.20.5 Full Changelog: https://github.com/cloudfoundry/windows-syslog-release/compare/v1.1.14...v1.1.15
hwc-offline-buildpack	3.1.31
loggregator-agent	6.5.11
metrics-discovery	3.2.11	v3.2.11 ## What's Changed * bump dependencies by @mkocher in https://github.com/cloudfoundry/metrics-discovery-release/pull/151 ## New Contributors * @mkocher made their first contribution in https://github.com/cloudfoundry/metrics-discovery-release/pull/151 Full Changelog: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.10...v3.2.11 v3.2.10 ## What's Changed * Add CODEOWNERS file in preparation for branch protection rules by @geofffranks in https://github.com/cloudfoundry/metrics-discovery-release/pull/144 * Bump dependencies * Bump to golang 1.20.5 ## New Contributors * @geofffranks made their first contribution in https://github.com/cloudfoundry/metrics-discovery-release/pull/144 Full Changelog: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.9...v3.2.10
smoke-tests	4.8.3	4.8.3 Create bosh final release 4.8.3
winc	2.13.0
windows-utilities	0.14.0
windowsfs-release	2.55.0

2.11.34

Release Date: 06/26/2023

[Feature] Adds support for W3C Trace ID logging across Diego component requests
[Bug Fix] Timeouts in for executor’s uploader have been increased to 500ms
[Bug Fix] Byte-based logging limits for LRPs and Tasks now emit only once per second
[Bug Fix/Improvement] Garden now ships with Busybox 1.36.1 as the default filesystem
Bump diego to version 2.78.0
Bump envoy-nginx to version 0.17.0
Bump garden-runc to version 1.33.0
Bump loggregator-agent to version 6.5.11
Bump winc to version 2.13.0
Bump windowsfs-release to version 2.53.0

Component	Version	Release Notes
windows2019 stemcell	2019.61
count-cores-indicator	2.0.0
diego	2.78.0	v2.78.0 ## Changes - Bumped to golang 1.20.5 - Vizzini now defaults to cflinuxfs4 ## Bosh Job Spec changes: ```diff diff --git a/jobs/vizzini/spec b/jobs/vizzini/spec index 40b5eb74b..6ff53c654 100644 --- a/jobs/vizzini/spec +++ b/jobs/vizzini/spec @@ -73,7 +73,7 @@ properties: default_rootfs: description: "Default preloaded rootfs to target for running Tasks and LRPs" - default: "preloaded:cflinuxfs3" + default: "preloaded:cflinuxfs4" grace_tarball_url: description: "URL for the grace test asset" ``` ## ✨ Built with go 1.20.5 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.77.0...v2.78.0 ## Resources - [Download release v2.78.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.78.0). v2.77.0 ## Changes - Adds support for W3C Trace ID logging across diego component requests - Timeouts in for executor's uploader have been increased to 500ms - Byte-based logging limits for LRPs and Tasks now emit only once per second - LRPs can now have liveness and readiness check intervals defined when the LRP is created. - Dependency Bumps: - code.cloudfoundry.org/archiver a23cadd462ce - code.cloudfoundry.org/certsplitter a2c6caf14c29 - code.cloudfoundry.org/cf-tcp-router ecebe81f2c0c - code.cloudfoundry.org/credhub-cli 439bdb2 - code.cloudfoundry.org/debugserver 70a733dc508f - code.cloudfoundry.org/diego-logging-client 40495b68ac2e - code.cloudfoundry.org/durationjson 7a601daf48ee - code.cloudfoundry.org/eventhub 8efdeac72e14 - code.cloudfoundry.org/garden 8444ff5a31d7 - code.cloudfoundry.org/goshims v0.17.0 - code.cloudfoundry.org/grootfs 79fecf24 - code.cloudfoundry.org/guardian 98f55817772e - code.cloudfoundry.org/idmapper a410520 - code.cloudfoundry.org/localip 2ea90d997658 - github.com/aws/aws-sdk-go v1.44.269 - github.com/awslabs/amazon-ecr-credential-helper/ecr-login 7f2db5bd753e - github.com/cloudfoundry/dropsonde v1.1.0 - github.com/docker/docker v24.0.1+incompatible - github.com/envoyproxy/go-control-plane ba92d50b6596 - github.com/nats-io/nats-server/v2 v2.9.17 - github.com/nats-io/nats.go v1.26.0 - github.com/onsi/ginkgo/v2 v2.9.5 - github.com/onsi/gomega v1.27.7 - github.com/tedsuo/ifrit 7862c310ad26 - golang.org/x/sys v0.8.0 - google.golang.org/grpc v1.55.0 ## ✨ Built with go 1.20.4 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.76.0...v2.77.0 ## Resources - [Download release v2.77.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.77.0).
envoy-nginx	0.17.0	v0.17.0 ## Changes - Bumped golang to 1.20.5 ## ✨ Built with go 1.20.5 Full Changelog: https://github.com/cloudfoundry/envoy-nginx-release/compare/v0.16.0...v0.17.0 ## Resources - [Download release v0.17.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/envoy-nginx-release?version=0.17.0).
event-log	0.9.0
garden-runc	1.33.0	v1.33.0 ## Changes - Bumped to golang 1.20.5 ## ✨ Built with go 1.20.5 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.32.0...v1.33.0 ## Resources - [Download release v1.33.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.33.0). v1.32.0 ## Changes - The grootfs package no longer ships with test asset tarballs (those are only used for unit tests and don't need to be installed as part of the package). ## ✨ Built with go 1.20.4 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.31.0...v1.32.0 ## Resources - [Download release v1.32.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.32.0). v1.31.0 ## Changes - Garden now ships with Busybox 1.36.1 as the default filesystem - Dependency Bumps - healthchecker boshrelease v0.8.0 - github.com/onsi/gomega v1.27.7 - go.opentelemetry.io/otel v1.15.1 - github.com/burntsushi/toml v1.3.0 - github.com/docker/docker v24.0.2+incompatible - github.com/urfave/cli/v2 v2.25.5 - github.com/cloudfoundry/dropsonde v1.1.0 - github.com/sirupsen/logrus v1.9.2 ## Bosh Job Spec changes: ```diff diff --git a/jobs/garden/spec b/jobs/garden/spec index c69f4080..259bba46 100644 --- a/jobs/garden/spec +++ b/jobs/garden/spec @@ -89,7 +89,7 @@ properties: garden.default_container_rootfs: description: "path to the rootfs to use when a container specifies no rootfs" - default: /var/vcap/packages/busybox/busybox-1.35.0.tar + default: /var/vcap/packages/busybox/busybox-1.36.1.tar garden.graph_cleanup_threshold_in_mb: description: "DEPRECATED in favour of grootfs.reserved_space_for_other_jobs_in_mb." ``` ## ✨ Built with go 1.20.4 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.30.0...v1.31.0 ## Resources - [Download release v1.31.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.31.0).
windows-syslog	1.1.14
hwc-offline-buildpack	3.1.31
loggregator-agent	6.5.11	v6.5.11 ## What's Changed * bump dependencies * bump to golang 1.20.5 Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v6.5.10...v6.5.11
metrics-discovery	3.2.9
smoke-tests	4.8.2
winc	2.13.0	v2.13.0 ## Changes - Bumped go to 1.20.5 ## ✨ Built with go 1.20.5 Full Changelog: https://github.com/cloudfoundry/winc-release/compare/v2.12.0...v2.13.0 ## Resources - [Download release v2.13.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/winc-release?version=2.13.0).
windows-utilities	0.14.0
windowsfs-release	2.53.0

2.11.33

Release Date: 06/02/2023

Bump envoy-nginx to version 0.16.0
Bump garden-runc to version 1.30.0
Bump hwc-offline-buildpack to version 3.1.31
Bump winc to version 2.12.0

Component	Version	Release Notes
windows2019 stemcell	2019.61
count-cores-indicator	2.0.0
diego	2.76.0
envoy-nginx	0.16.0	v0.16.0 ## Changes - Dependency bumps: - go 1.20.4 - github.com/fsnotify/fsnotify 1.6.0 - github.com/onsi/ginkgo 2.9.5 - github.com/onsi/gomega 1.27.6 - gpkg.in/yaml.v2 2.4.0 - updated CI testing scripts for better error handling ## ✨ Built with go 1.20.4 Full Changelog: https://github.com/cloudfoundry/envoy-nginx-release/compare/v0.15.0...v0.16.0 ## Resources - [Download release v0.16.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/envoy-nginx-release?version=0.16.0).
event-log	0.9.0
garden-runc	1.30.0	v1.30.0 ## Changes - Bump dependencies: - github.com/onsi/ginkgo 2.9.5 - golang.org/x/sys 0.8.0 - Add support for including request trace IDs in garden/guardian ## ✨ Built with go 1.20.4 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.29.0...v1.30.0 ## Resources - [Download release v1.30.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.30.0).
windows-syslog	1.1.14
hwc-offline-buildpack	3.1.31	3.1.31 * Updating github-config (#127) Packaged binaries: \| name \| version \| cf_stacks \| \|-\|-\|-\| \| hwc \| 23.0.0 \| windows, windows2016 \| Default binary versions: \| name \| version \| \|-\|-\| \| hwc \| 23.0.0 \| * Uncached buildpack SHA256: 22b3e864d959aa711d10503788a01946fc7be9d29c8252a64de5dfa4c396ae90 * Uncached buildpack SHA256: dbe18078d9fe47acbb6485876e2c67547995976943e47b5c1637d72e9ea9bf58
loggregator-agent	6.5.10
metrics-discovery	3.2.9
smoke-tests	4.8.2
winc	2.12.0	v2.12.0 ## Changes - Removes the deprecated-since-2019 `winc-network` job. Please use `winc-network-hns-acls` instead. - CI testing updates - Dependency Bumps: - github.com/hectane/go-acl ca0b05cb1adb - code.cloudfoundry.org/winc 4302f985e6d0b575bc1024b4a1c5a174a8cff1c8 - code.cloudfoundry.org/cert-injector f66dd1e - code.cloudfoundry.org/diff-exporter 925b0b8 - code.cloudfoundry.org/groot-windows 5225dd5 - code.cloudfoundry.org/winc 2d0fe6e - code.cloudfoundry.org/certsplitter 906ffdf32df6e823dabb31a5f6572aca72e52be6 ## ✨ Built with go 1.20.4 Full Changelog: https://github.com/cloudfoundry/winc-release/compare/v2.11.1...v2.12.0 ## Resources - [Download release v2.12.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/winc-release?version=2.12.0).
windows-utilities	0.14.0
windowsfs-release	2.53.0

2.11.32

Release Date: 05/25/2023

Component	Version
windows2019 stemcell	2019.61
count-cores-indicator	2.0.0
diego	2.76.0
envoy-nginx	0.15.0
event-log	0.9.0
garden-runc	1.29.0
windows-syslog	1.1.14
hwc-offline-buildpack	3.1.30
loggregator-agent	6.5.10
metrics-discovery	3.2.9
smoke-tests	4.8.2
winc	2.11.1
windows-utilities	0.14.0
windowsfs-release	2.53.0

2.11.31

Release Date: 05/12/2023

Bump count-cores-indicator to version 2.0.0
Bump diego to version 2.76.0
Bump garden-runc to version 1.29.0
Bump windows-syslog to version 1.1.14
Bump hwc-offline-buildpack to version 3.1.30
Bump loggregator-agent to version 6.5.10
Bump metrics-discovery to version 3.2.9
Bump winc to version 2.11.1
Bump windowsfs-release to version 2.52.0

Component	Version	Release Notes
windows2019 stemcell	2019.60
count-cores-indicator	2.0.0
diego	2.76.0	v2.76.0 ## Changes - Bump to Go 1.20.4 - Bump dependencies ## Bosh Job Spec changes: ```diff diff --git a/jobs/auctioneer/spec b/jobs/auctioneer/spec index ae685ceb9..1fac48936 100644 --- a/jobs/auctioneer/spec +++ b/jobs/auctioneer/spec @@ -88,6 +88,12 @@ properties: diego.auctioneer.locket.api_location: description: "Hostname and port of the Locket server. When set, the auctioneer attempts to claim a lock from the Locket API." default: locket.service.cf.internal:8891 + diego.auctioneer.locket.client_keepalive_time: + description: "Period in seconds after which the locket gRPC client sends keepalive ping requests to the locket server it is connected to." + default: 10 + diego.auctioneer.locket.client_keepalive_timeout: + description: "Timeout in seconds to receive a response to the keepalive ping. If a response is not received within this time, the locket client will reconnect to another server." + default: 22 locks.locket.enabled: description: When set, the auctioneer attempts to claim a lock from the Locket API. diff --git a/jobs/bbs/spec b/jobs/bbs/spec index b6f1040c2..9204a8d4c 100644 --- a/jobs/bbs/spec +++ b/jobs/bbs/spec @@ -140,6 +140,12 @@ properties: diego.bbs.locket.api_location: description: "Hostname and port of the Locket server. When set, the BBS attempts to claim a lock from the Locket API and will detect Diego cells registered with the Locket API." default: locket.service.cf.internal:8891 + diego.bbs.locket.client_keepalive_time: + description: "Period in seconds after which the locket gRPC client sends keepalive ping requests to the locket server it is connected to." + default: 10 + diego.bbs.locket.client_keepalive_timeout: + description: "Timeout in seconds to receive a response to the keepalive ping. If a response is not received within this time, the locket client will reconnect to another server." + default: 22 limits.open_files: description: Maximum number of files (including sockets) the BBS process may have open. diff --git a/jobs/rep/spec b/jobs/rep/spec index df7bd7c49..1383b67c0 100644 --- a/jobs/rep/spec +++ b/jobs/rep/spec @@ -217,6 +217,12 @@ properties: diego.rep.locket.api_location: description: "Hostname and port of the Locket server. When set, the cell rep will establish its cell registration in the Locket API." default: locket.service.cf.internal:8891 + diego.rep.locket.client_keepalive_time: + description: "Period in seconds after which the locket gRPC client sends keepalive ping requests to the locket server it is connected to." + default: 10 + diego.rep.locket.client_keepalive_timeout: + description: "Timeout in seconds to receive a response to the keepalive ping. If a response is not received within this time, the locket client will reconnect to another server." + default: 22 enable_declarative_healthcheck: description: "When set, enables the rep to prefer the LRP CheckDefinition to healthcheck instances over the Monitor action. Requires Garden-Runc v1.10.0+" diff --git a/jobs/rep_windows/spec b/jobs/rep_windows/spec index 4fc4504bf..023d76f18 100644 --- a/jobs/rep_windows/spec +++ b/jobs/rep_windows/spec @@ -227,7 +227,13 @@ properties: diego.rep.locket.api_location: description: "Hostname and port of the locket server" default: locket.service.cf.internal:8891 - + diego.rep.locket.client_keepalive_time: + description: "Period in seconds after which the locket gRPC client sends keepalive ping requests to the locket server it is connected to." + default: 10 + diego.rep.locket.client_keepalive_timeout: + description: "Timeout in seconds to receive a response to the keepalive ping. If a response is not received within this time, the locket client will reconnect to another server." + default: 22 + enable_declarative_healthcheck: description: "When set, enables the rep to prefer the LRP CheckDefinition to healthcheck instances over the Monitor action." default: false diff --git a/jobs/vizzini/spec b/jobs/vizzini/spec index fa6c8d0d0..40b5eb74b 100644 --- a/jobs/vizzini/spec +++ b/jobs/vizzini/spec @@ -47,9 +47,6 @@ properties: vizzini.verbose: description: Run tests in verbose mode default: false - vizzini.stream: - description: Stream output from parallel test nodes. This option will lead to less coherent output but is useful when debugging - default: false enable_declarative_healthcheck: description: "When set, enables the declarative check tests in vizzini" ``` ## ✨ Built with go 1.20.4 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.75.0...v2.76.0 ## Resources - [Download release v2.76.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.76.0). v2.75.0 ## Changes * Bump ginkgo to v2 and lager to v3 * [Bug fix] Rep does not clean up resources when deleting container fails ## ✨ Built with go 1.20.3 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.73.0...v2.75.0 ## Resources - [Download release v2.75.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.75.0).
envoy-nginx	0.15.0
event-log	0.9.0
garden-runc	1.29.0	v1.29.0 ## Changes ⚠️We have removed the garden-healthcheck job from garden while we investigate a way to make it less painful. From v1.22.6 through v1.28.0, garden restarts with a high container count could result in BOSH deploys failing due to a race condition between garden, bpm, monit, and garden-healthchecker. This will be re-enabled at a later time when we resolve the race condition. ## ✨ Built with go 1.20.4 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.28.0...v1.29.0 ## Resources - [Download release v1.29.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.29.0). v1.28.0 ## Changes - Bump to golang 1.20.4 - Bump dependencies ## ✨ Built with go 1.20.4 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.27.0...v1.28.0 ## Resources - [Download release v1.28.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.28.0). v1.27.0 ## Changes * Bump ginkgo to v2 and lager to v3 ## ✨ Built with go 1.20.3 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.26.0...v1.27.0 ## Resources - [Download release v1.27.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.27.0).
windows-syslog	1.1.14	v1.1.14 ## What's Changed * update dependencies * update golang to 1.20.4 Full Changelog: https://github.com/cloudfoundry/windows-syslog-release/compare/v1.1.13...v1.1.14
hwc-offline-buildpack	3.1.30	3.1.30 * Update libbuildpack * Bump github.com/onsi/gomega from 1.27.4 to 1.27.6 * Bump github.com/onsi/gomega from 1.26.0 to 1.27.4 Packaged binaries: \| name \| version \| cf_stacks \| \|-\|-\|-\| \| hwc \| 23.0.0 \| windows, windows2016 \| Default binary versions: \| name \| version \| \|-\|-\| \| hwc \| 23.0.0 \| * Uncached buildpack SHA256: 6f4ed709322d792dfe1ac4d28dd1d488e7db2807ef372bff1bfe1cfe23672373 * Uncached buildpack SHA256: 470d6da338b0bdd646ddda4e7da5f5394eb535cef5923df6da4ec8e306652819
loggregator-agent	6.5.10	v6.5.10 ## What's Changed * Bump to [go1.20.4](https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU/m/QvrjqM4XAgAJ) * Bump dependencies Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v6.5.9...v6.5.10
metrics-discovery	3.2.9	v3.2.9 ## What's Changed * Bump to [go1.20.4](https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU/m/QvrjqM4XAgAJ) * Bump dependencies Full Changelog: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.8...v3.2.9
smoke-tests	4.8.2
winc	2.11.1	v2.11.1 ## Changes - There were no changes in this release. It was created to test the release pipeline. ## ✨ Built with go 1.20.4 Full Changelog: https://github.com/cloudfoundry/winc-release/compare/v2.11.0...v2.11.1 ## Resources - [Download release v2.11.1 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/winc-release?version=2.11.1). v2.11.0 ## Changes - Bump to go 1.20.4 ## ✨ Built with go 1.20.4 Full Changelog: https://github.com/cloudfoundry/winc-release/compare/v2.10.0...v2.11.0 ## Resources - [Download release v2.11.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry-incubator/winc-release?version=2.11.0).
windows-utilities	0.14.0
windowsfs-release	2.52.0

2.11.30

Release Date: 04/20/2023

Bump diego to version 2.73.0
Bump garden-runc to version 1.26.0
Bump hwc-offline-buildpack to version 3.1.29
Bump loggregator-agent to version 6.5.9
Bump metrics-discovery to version 3.2.8

Component	Version	Release Notes
windows2019 stemcell	2019.44
diego	2.73.0
envoy-nginx	0.15.0
event-log	0.9.0
garden-runc	1.26.0
windows-syslog	1.1.13
hwc-offline-buildpack	3.1.29	3.1.29 * Add hwc 23.0.0, remove hwc 21.0.0 for stack(s) windows2016, windows (https://www.pivotaltracker.com/story/show/184616166) * Buildpack dependencies are built with go 1.20 (See https://github.com/cloudfoundry/binary-builder/pull/68) Packaged binaries: \| name \| version \| cf_stacks \| \|-\|-\|-\| \| hwc \| 23.0.0 \| windows, windows2016 \| Default binary versions: \| name \| version \| \|-\|-\| \| hwc \| 23.0.0 \| * Uncached buildpack SHA256: 2e619938370b92d1091fee37ec926e77dd602223f846063a3dc037851a368c51 * Uncached buildpack SHA256: 1944089ab21fb921709dc3dd28e2c9085384dbb867e4929207e41ebd03fd6733
loggregator-agent	6.5.9	v6.5.9 * Upgrade to go 1.20.2 * Bump dependencies Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v6.5.8...v6.5.9
metrics-discovery	3.2.8	v3.2.8 * Upgrade to go1.20.2. * Bump dependencies. Full Changelog: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.7...v3.2.8
smoke-tests	4.8.2
winc	2.10.0
windows-utilities	0.14.0
windowsfs-release	2.46.0

2.11.29

Release Date: 03/21/2023

Bump diego to version 2.72.0
Bump envoy-nginx to version 0.15.0
Bump garden-runc to version 1.25.0
Bump winc to version 2.10.0
Bump windowsfs-release to version 2.46.0

Component	Version
windows2019 stemcell	2019.44
diego	2.72.0
envoy-nginx	0.15.0
event-log	0.9.0
garden-runc	1.25.0
windows-syslog	1.1.13
hwc-offline-buildpack	3.1.28
loggregator-agent	6.5.8
metrics-discovery	3.2.7
smoke-tests	4.8.2
winc	2.10.0
windows-utilities	0.14.0
windowsfs-release	2.46.0

2.11.28

Release Date: 02/27/2023

Bump garden-runc to version 1.23.0
Bump windows-syslog to version 1.1.13
Bump hwc-offline-buildpack to version 3.1.28
Bump loggregator-agent to version 6.5.8
Bump metrics-discovery to version 3.2.7
Bump windowsfs-release to version 2.44.0

Component	Version	Release Notes
windows2019 stemcell	2019.44
diego	2.71.0
envoy-nginx	0.14.0
event-log	0.9.0
garden-runc	1.23.0
windows-syslog	1.1.13
windowsfs-release	2.44.0	v1.1.13 * update golang to 1.20.1 Full Changelog: https://github.com/cloudfoundry/windows-syslog-release/compare/v1.1.12...v1.1.13 v1.1.12 ## What's Changed * use go 1.20 by @rroberts2222 in https://github.com/cloudfoundry/windows-syslog-release/pull/18 Full Changelog: https://github.com/cloudfoundry/windows-syslog-release/compare/v1.1.11...v1.1.12
hwc-offline-buildpack	3.1.28	3.1.28 * Updates github-config (#104) * Bump github.com/onsi/gomega from 1.24.2 to 1.26.0 Packaged binaries: \| name \| version \| cf_stacks \| \|-\|-\|-\| \| hwc \| 21.0.0 \| windows, windows2016 \| Default binary versions: \| name \| version \| \|-\|-\| \| hwc \| 21.0.0 \| * Uncached buildpack SHA256: 92a52f3346131abbe2472b1f12a2ff4e304aeb6c497b7e3f10a3537be8c1e721 * Uncached buildpack SHA256: 37813ac6ded74a0e87924a3a9cec19afb6d4e6dfc6a8ef8da83f7d02fecfdc82
loggregator-agent	6.5.8	v6.5.8 ## What's Changed * update dependencies * Upgrade to go 1.20.1 by @rroberts2222 in https://github.com/cloudfoundry/loggregator-agent-release/pull/224 Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v6.5.7...v6.5.8
metrics-discovery	3.2.7	v3.2.7 * update golang to 1.20.1 Full Changelog: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.6...v3.2.7### v3.2.6 ## What's Changed * Upgrade to go 1.20 by @rroberts2222 in https://github.com/cloudfoundry/metrics-discovery-release/pull/104 Full Changelog: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.5...v3.2.6 v3.2.5 ## What's Changed * Update dependencies * Expire individual metrics by @rroberts2222 in https://github.com/cloudfoundry/metrics-discovery-release/pull/103 Full Changelog: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.4...v3.2.5
smoke-tests	4.8.2
winc	2.9.0
windows-utilities	0.14.0
windowsfs-release	2.44.0

v2.11.27

Release Date: 02/09/2023

[Bug Fix] Allows docker app workloads without a sh binary in the docker image to execute properly.
Bump loggregator-agent to version 6.5.7

Component	Version	Release Notes
windows2019 stemcell	2019.44
diego	2.71.0
envoy-nginx	0.14.0
event-log	0.9.0
garden-runc	1.22.9
windows-syslog	1.1.11
hwc-offline-buildpack	3.1.27
loggregator-agent	6.5.7	v6.5.7 ## What's Changed * Sanitize ProcID in syslog messages so messages with utf-8 in the source_type are not dropped by @Benjamintf1 in https://github.com/cloudfoundry/loggregator-agent-release/pull/202 * Update dependencies Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v6.5.6...v6.5.7
metrics-discovery	3.2.4
smoke-tests	4.8.2
winc	2.9.0
windows-utilities	0.14.0
windowsfs-release	2.42.0

v2.11.26

Release Date: 01/31/2023

Bump garden-runc to version 1.22.9
Bump windowsfs-release to version 2.42.0

Component	Version
windows2019 stemcell	2019.44
diego	2.71.0
envoy-nginx	0.14.0
event-log	0.9.0
garden-runc	1.22.9
windows-syslog	1.1.11
hwc-offline-buildpack	3.1.27
loggregator-agent	6.5.6
metrics-discovery	3.2.4
smoke-tests	4.8.2
winc	2.9.0
windows-utilities	0.14.0
windowsfs-release	2.42.0

v2.11.25

Release Date: 01/17/2023

Bump diego to version 2.71.0
Bump garden-runc to version 1.22.7
Bump loggregator-agent to version 6.5.6
Bump smoke-tests to version 4.8.2

Component	Version	Release Notes
windows2019 stemcell	2019.44
diego	2.71.0
envoy-nginx	0.14.0
event-log	0.9.0
garden-runc	1.22.7
windows-syslog	1.1.11
hwc-offline-buildpack	3.1.27
loggregator-agent	6.5.6	v6.5.6 ## What's Changed * fix scraping with non-positive intervals to preserve non-scraping behavior by @Benjamintf1 in https://github.com/cloudfoundry/loggregator-agent-release/pull/174 * updated some dependencies. Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v6.5.5...v6.5.6
metrics-discovery	3.2.4
smoke-tests	4.8.2	4.8.2 Port assets/ruby_simple to Ruby 3
winc	2.9.0
windows-utilities	0.14.0
windowsfs-release	2.41.0

v2.11.24

Release Date: 12/15/2022

[Security Fix] Fix CVE-2022-31733: Unsecured Application Port
Bump diego to version 2.70.0
Bump envoy-nginx to version 0.14.0
Bump hwc-offline-buildpack to version 3.1.27
Bump loggregator-agent to version 6.5.5
Bump metrics-discovery to version 3.2.4
Bump winc to version 2.9.0
Bump windowsfs-release to version 2.40.0

Component	Version	Release Notes
windows2019 stemcell	2019.44
diego	2.70.0
envoy-nginx	0.14.0
event-log	0.9.0
garden-runc	1.22.5
windows-syslog	1.1.11
hwc-offline-buildpack	3.1.27	3.1.27 * Add hwc 21.0.0, remove hwc 20.0.0 for stack(s) windows2016, windows (https://www.pivotaltracker.com/story/show/183726731) * Bumps default version to match new HWC version * Bumps go.mod go version to 1.19 Packaged binaries: \| name \| version \| cf_stacks \| \|-\|-\|-\| \| hwc \| 21.0.0 \| windows, windows2016 \| Default binary versions: \| name \| version \| \|-\|-\| \| hwc \| 21.0.0 \| * Uncached buildpack SHA256: ae83488a72f50d1725fb37fc35e819133ed07af82d872b9fe7fb34e9de18b92e * Uncached buildpack SHA256: 2e2e474d7677112021cc892627eddef0768e28835b6ad98117a260ea022e4463
loggregator-agent	6.5.5	v6.5.5 - bump-golang to v0.114.0 for golang 1.19.4 - Bump google.golang.org/grpc from 1.50.1 to 1.51.0 in /src - Bump github.com/valyala/fasthttp from 1.41.0 to 1.43.0 in /src - Bump github.com/onsi/ginkgo/v2 from 2.5.0 to 2.5.1 in /src - Bump github.com/onsi/gomega from 1.24.0 to 1.24.1 in /src - Bump github.com/prometheus/client_model from 0.2.0 to 0.3.0 in /src - Bump golangci/golangci-lint-action from 3.3.0 to 3.3.1
metrics-discovery	3.2.4	v3.2.4 - bump-golang to v0.114.0 for golang 1.19.4 - Bump github.com/nats-io/nats.go from 1.19.0 to 1.21.0 in /src - Bump google.golang.org/grpc from 1.50.1 to 1.51.0 in /src - Bump github.com/onsi/ginkgo/v2 from 2.5.0 to 2.5.1 in /src - Bump github.com/prometheus/client_golang from 1.13.1 to 1.14.0 in /src - Bump github.com/onsi/gomega from 1.24.0 to 1.24.1 in /src - Bump golangci/golangci-lint-action from 3.3.0 to 3.3.1
smoke-tests	4.8.1
winc	2.9.0
windows-utilities	0.14.0
windowsfs-release	2.40.0

v2.11.23

Release Date: 12/01/2022

Component	Version
windows2019 stemcell	2019.44
diego	2.66.3
envoy-nginx	0.13.0
event-log	0.9.0
garden-runc	1.22.5
windows-syslog	1.1.11
hwc-offline-buildpack	3.1.26
loggregator-agent	6.5.4
metrics-discovery	3.2.3
smoke-tests	4.8.1
winc	2.8.0
windows-utilities	0.14.0
windowsfs-release	2.39.0

v2.11.22

Release Date: 11/10/2022

Bump envoy-nginx to version 0.13.0
Bump garden-runc to version 1.22.5
Bump windows-syslog to version 1.1.11
Bump hwc-offline-buildpack to version 3.1.26
Bump loggregator-agent to version 6.5.4
Bump metrics-discovery to version 3.2.3
Bump smoke-tests to version 4.8.1

Component	Version	Release Notes
windows2019 stemcell	2019.44
diego	2.66.3
envoy-nginx	0.13.0
event-log	0.9.0
garden-runc	1.22.5
windows-syslog	1.1.11
windowsfs-release	2.39.0
hwc-offline-buildpack	3.1.26	3.1.26 * Update libbuildpack Packaged binaries: \| name \| version \| cf_stacks \| \|-\|-\|-\| \| hwc \| 20.0.0 \| windows, windows2016 \| Default binary versions: \| name \| version \| \|-\|-\| \| hwc \| 20.0.0 \| * Uncached buildpack SHA256: b9b2cec9ada73d9a2933a14e8e56f025c35b02d8bed7e74e20b093a23e13ec43 * Uncached buildpack SHA256: f633f0f686fc9539ec8f4ef205e778c820602e51434730fd69f7caad4cfb3d4f 3.1.25 * Update libbuildpack * Bump github.com/onsi/gomega from 1.19.0 to 1.20.2 Packaged binaries: \| name \| version \| cf_stacks \| \|-\|-\|-\| \| hwc \| 20.0.0 \| windows, windows2016 \| Default binary versions: \| name \| version \| \|-\|-\| \| hwc \| 20.0.0 \| * Uncached buildpack SHA256: 5a0c73cda7fe06118e554a93d78b0587f581e3eb2a4d108274814d372935469b * Uncached buildpack SHA256: fa7565740a5f73f2b87cbce06104517fcbc69bb513497ed8db492cb7d42f3dd1
loggregator-agent	6.5.4
metrics-discovery	3.2.3
smoke-tests	4.8.1	4.8.1 Create bosh final release 4.8.1 4.8.0 Create bosh final release 4.8.0 4.7.0 Create bosh final release 4.7.0
winc	2.8.0
windows-utilities	0.14.0

v2.11.21

Release Date: 10/12/2022

[Feature Improvement] Add option for file logging and improved event logging. For more information about syslog, see Optional TAS for VMs [Windows] 3.0 compatible syslog option.
Bump envoy-nginx to version 0.12.0
Bump garden-runc to version 1.22.4
Bump windows-syslog to version 1.1.9
Bump loggregator-agent to version 6.5.1
Bump metrics-discovery to version 3.2.1
Bump winc to version 2.8.0

Component	Version
windows2019 stemcell	2019.44
diego	2.66.3
envoy-nginx	0.12.0
event-log	0.9.0
garden-runc	1.22.4
windows-syslog	1.1.9
hwc-offline-buildpack	3.1.24
loggregator-agent	6.5.1
metrics-discovery	3.2.1
smoke-tests	4.5.0
winc	2.8.0
windows-utilities	0.14.0
windowsfs-release	2.37.0

v2.11.20

Release Date: 09/20/2022

[Breaking Change] If you have configured an app log rate limit that measures app log rates in lines per second, Diego immediately drops app logs that exceed the app log rate limit. For more information, see Diego Drops App Logs That Exceed the App Log Rate Limit below.
[Feature Improvement] Bump golang to 1.18 for diego, routing, cf-networking, and silk
[Known Issue] If Git is not installed in the PATH environment variable for your Windows stemcell when you deploy TAS for VMs [Windows], you may encounter a version control system (VCS) stamping failure. For more information, see Windows Stemcells Without Git Installed Cause VSC Stamping Failures below.
Bump diego to version 2.66.3
Bump envoy-nginx to version 0.10.0
Bump garden-runc to version 1.22.0
Bump loggregator-agent to version 6.4.4
Bump metrics-discovery to version 3.1.2
Bump winc to version 2.7.0

Component	Version
windows2019 stemcell	2019.44
diego	2.66.3
envoy-nginx	0.10.0
event-log	0.9.0
garden-runc	1.22.0
hwc-offline-buildpack	3.1.24
loggregator-agent	6.4.4
metrics-discovery	3.1.2
smoke-tests	4.5.0
winc	2.7.0
windows-utilities	0.14.0

v2.11.17

Release Date: 08/10/2022

Bump loggregator-agent to version 6.4.3
Bump metrics-discovery to version 3.1.1

Component	Version
windows2019 stemcell	2019.44
diego	2.62.0
envoy-nginx	0.9.0
event-log	0.9.0
garden-runc	1.20.8
hwc-offline-buildpack	3.1.24
loggregator-agent	6.4.3
metrics-discovery	3.1.1
smoke-tests	4.5.0
winc	2.5.0
windows-utilities	0.14.0

v2.11.16

Release Date: 07/18/2022

Bump diego to version 2.62.0
Bump garden-runc to version 1.20.8
Bump loggregator-agent to version 6.4.2
Bump metrics-discovery to version 3.1.0

Component	Version
windows2019 stemcell	2019.44
diego	2.62.0
envoy-nginx	0.9.0
event-log	0.9.0
garden-runc	1.20.8
hwc-offline-buildpack	3.1.24
loggregator-agent	6.4.2
metrics-discovery	3.1.0
smoke-tests	4.5.0
winc	2.5.0
windows-utilities	0.14.0
windowsfs-release	2.35.0

v2.11.15

Release Date: 06/23/2022

Warning: Upcoming breaking changes! In future patches, no sooner than July 1st 2022, some components will become more strict about the protocols used in TLS communications, causing integrations with systems using older, insecure protocols to fail. Specifically, components using the Go programming language will be updated to Go 1.18, and will no longer support TLS 1.0 and 1.1 connections or certificates with a SHA-1 checksum. This is most likely to affect connections with external databases. However, the pre-existing configuration for "TLS versions supported by the Gorouter" will still work. This change may not arrive all at once, as Go is used in systems throughout TAS. There will be a VMware Knowledge Base article about this change published prior to the changes rolling out. These changes will be clearly designated in the release notes of the versions they ship in; a version of this warning will appear on all patch versions until we are confident no systems remain to be updated.

Bump diego to version 2.62.0

Component	Version
windows2019 stemcell	2019.44
diego	2.62.0
envoy-nginx	0.9.0
event-log	0.9.0
garden-runc	1.20.6
hwc-offline-buildpack	3.1.24
loggregator-agent	6.4.1
metrics-discovery	3.0.13
smoke-tests	4.5.0
winc	2.5.0
windows-utilities	0.14.0
windowsfs-release	2.35.0

v2.11.14

Release Date: 06/09/2022

Warning: Breaking change. This version contains Diego 2.64.0, which bumps to Go 1.18. Go 1.18 no longer supports TLS 1.0 and 1.1 connections or certificates with a SHA-1 checksum. This is most likely to affect connections with external databases. We stated earlier that we wouldn't bump to Go 1.18 until July 1, 2022. This TAS release with Diego 2.64.0 breaks that promise. We apologize. We are rolling back to Diego 2.62.0. If you already successfully deployed to this TAS release with Diego 2.64.0, then you are safe to continue using it.

Bump diego to version 2.64.0
Bump garden-runc to version 1.20.6
Bump loggregator-agent to version 6.4.1
Bump metrics-discovery to version 3.0.13

Component	Version
windows2019 stemcell	2019.44
diego	2.64.0
envoy-nginx	0.9.0
event-log	0.9.0
garden-runc	1.20.6
hwc-offline-buildpack	3.1.24
loggregator-agent	6.4.1
metrics-discovery	3.0.13
smoke-tests	4.5.0
winc	2.5.0
windows-utilities	0.14.0
windowsfs-release	2.35.0

v2.11.13

Release Date: 04/20/2022

[Breaking Change] Syslog drains configured to use TLS now reject certificates signed with the SHA-1 hash function.
Bump diego to version 2.62.0
Bump hwc-offline-buildpack to version 3.1.24
Bump loggregator-agent to version 6.3.11
Bump metrics-discovery to version 3.0.10
Bump winc to version 2.5.0

Component	Version	Release Notes
windows2019 stemcell	2019.44
diego	2.62.0
envoy-nginx	0.9.0
event-log	0.9.0
garden-runc	1.20.3
hwc-offline-buildpack	3.1.24
loggregator-agent	6.3.11	v6.3.11 - fix bug with large messages (#89) - bump-golang to v0.100.0(now 1.18)
metrics-discovery	3.0.10	v3.0.10 - fix bug with large messages (#22) - bump-golang to v0.100.0(now 1.18)
smoke-tests	4.5.0
winc	2.5.0
windows-utilities	0.14.0
windowsfs-release	2.35.0

v2.11.12

Release Date: 03/31/2022

[Feature Improvement] Move aggregate drains to the syslog-binding cache to improve deploy speed and reduce errors.
Bump diego to version 2.61.0
Bump garden-runc to version 1.20.3
Bump hwc-offline-buildpack to version 3.1.23
Bump loggregator-agent to version 6.3.10
Bump metrics-discovery to version 3.0.9
Bump windowsfs-release to version 2.35.0

Component	Version
windows2019 stemcell	2019.44
diego	2.61.0
envoy-nginx	0.9.0
event-log	0.9.0
garden-runc	1.20.3
hwc-offline-buildpack	3.1.23
loggregator-agent	6.3.10
metrics-discovery	3.0.9
smoke-tests	4.5.0
winc	2.2.0
windows-utilities	0.14.0
windowsfs-release	2.35.0

v2.11.11

Release Date: 02/28/2022

[Feature Improvement] Per Golang 1.17’s new and stricter IP parsing standards, any IP addrs with leading zeros in any octets will result in a BOSH template failure to allow operators to remove the leading zeros and try again (affects properties fed into diego-release, garden-runc-release, winc-release, nats-release, and routing-release),.
[Bug Fix] Smoke tests support for TLSv1.3 only option
Bump diego to version 2.58.1
Bump envoy-nginx to version 0.9.0
Bump garden-runc to version 1.20.0
Bump hwc-offline-buildpack to version 3.1.22
Bump loggregator-agent to version 6.3.8
Bump metrics-discovery to version 3.0.8
Bump smoke-tests to version 4.5.0

Component	Version
windows2019 stemcell	2019.44
diego	2.58.1
envoy-nginx	0.9.0
event-log	0.9.0
garden-runc	1.20.0
hwc-offline-buildpack	3.1.22
loggregator-agent	6.3.8
metrics-discovery	3.0.8
smoke-tests	4.5.0
winc	2.2.0
windows-utilities	0.14.0
windowsfs-release	2.33.2

v2.11.10

Release Date: 02/08/2022

[Security Fix] Diego - Bump containerd to v1.5.9 to fix CVE-2021-43816
[Feature Improvement] TAS for VMs [Windows] supports compiled releases
[Feature Improvement] Golang v1.17 contains stricter IP parsing standards, so syslog drains registered using user-provided services cannot contain IP addresses with leading zeros in any octets.
[Bug Fix] windowsfs-release compilation issue - Cannot extract through symlink
Bump diego to version 2.57.0
Bump hwc-offline-buildpack to version 3.1.21
Bump loggregator-agent to version 6.3.7
Bump metrics-discovery to version 3.0.7
Bump smoke-tests to version 4.4.0
Bump windowsfs-release to version 2.33.2

Component	Version
windows2019 stemcell	2019.44
diego	2.57.0
envoy-nginx	0.7.0
event-log	0.9.0
garden-runc	1.19.30
hwc-offline-buildpack	3.1.21
loggregator-agent	6.3.7
metrics-discovery	3.0.7
smoke-tests	4.4.0
winc	2.2.0
windows-utilities	0.14.0
windowsfs-release	2.33.2

v2.11.9 - Withdrawn

Warning: This release has been removed from VMware Tanzu Network due to a regression in Windows FS Injector 0.21.0.

Release Date: 12/15/2021

Note: Windows stemcells v2019.44 and later are not compatible with this version of TAS for VMs [Windows]. You must use a Windows stemcell version between v2019.0 and v2019.43 to install this release.

[Bug Fix] Diego - Envoy v1.19 uses the original TCP connection pool so that it can accept more than 1024 downstream connections
[Bug Fix] Smoke Tests uses specified domain for Isolation Segments
Bump diego to version 2.54.0
Bump loggregator-agent to version 6.3.5
Bump smoke-tests to version 4.3.1

Component	Version
windows2019 stemcell	~2019
diego	2.54.0
envoy-nginx	0.7.0
event-log	0.9.0
garden-runc	1.19.30
hwc-offline-buildpack	3.1.20
loggregator-agent	6.3.5
metrics-discovery	3.0.6
smoke-tests	4.3.1
winc	2.2.0
windows-utilities	0.14.0
windowsfs-release	2.31.0

v2.11.8

Release Date: 11/23/2021

Bump diego to version 2.53.1
Bump hwc-offline-buildpack to version 3.1.20
Bump windowsfs-release to version 2.31.0

Component	Version
windows2019 stemcell	2019.0
diego	2.53.1
envoy-nginx	0.7.0
event-log	0.9.0
garden-runc	1.19.30
hwc-offline-buildpack	3.1.20
loggregator-agent	6.3.4
metrics-discovery	3.0.6
smoke-tests	4.3.0
winc	2.2.0
windows-utilities	0.14.0
windowsfs-release	2.31.0

v2.11.7

Release Date: 10/19/2021

No BOSH release bumps

Component	Version
windows2019 stemcell	2019.0
diego	2.53.0
envoy-nginx	0.7.0
event-log	0.9.0
garden-runc	1.19.30
hwc-offline-buildpack	3.1.18
loggregator-agent	6.3.4
metrics-discovery	3.0.6
smoke-tests	4.3.0
winc	2.2.0
windows-utilities	0.14.0
windowsfs-release	2.29.0

v2.11.6

Release Date: 09/30/2021

[Security Fix] Fixes an issue where BBS socket connections could be kept alive unnecessarily
[Feature Improvement] Disable Diego container proxy ALPN
Bump diego to version 2.53.0

Component	Version
windows2019 stemcell	2019.0
diego	2.53.0
envoy-nginx	0.7.0
event-log	0.9.0
garden-runc	1.19.30
hwc-offline-buildpack	3.1.18
loggregator-agent	6.3.4
metrics-discovery	3.0.6
smoke-tests	4.3.0
winc	2.2.0
windows-utilities	0.14.0
windowsfs-release	2.29.0

v2.11.5

Release Date: 09/17/2021

[Bug Fix] garden-runc - Fix handling reserved space on ext4 and generating bundle mounts when SMB volumes are present
Bump garden-runc to version 1.19.30
Bump windowsfs-release to version 2.29.0

Component	Version
windows2019 stemcell	2019.0
diego	2.50.0
envoy-nginx	0.7.0
event-log	0.9.0
garden-runc	1.19.30
hwc-offline-buildpack	3.1.18
loggregator-agent	6.3.4
metrics-discovery	3.0.6
smoke-tests	4.3.0
winc	2.2.0
windows-utilities	0.14.0
windowsfs-release	2.29.0

v2.11.4

Release Date: 09/09/2021

[Bug Fix] garden-runc - recover after cell restarts
Bump garden-runc to version 1.19.29
Bump loggregator-agent to version 6.3.4
Bump windowsfs-release to version 2.28.0

Component	Version
windows2019 stemcell	2019.0
diego	2.50.0
envoy-nginx	0.7.0
event-log	0.9.0
garden-runc	1.19.29
hwc-offline-buildpack	3.1.18
loggregator-agent	6.3.4
metrics-discovery	3.0.6
smoke-tests	4.3.0
winc	2.2.0
windows-utilities	0.14.0
windowsfs-release	2.28.0

v2.11.3

Release Date: 07/15/2021

Bump garden-runc to version 1.19.28
Bump hwc-offline-buildpack to version 3.1.18
Bump metrics-discovery to version 3.0.6
Bump windowsfs-release to version 2.27.0

Component	Version
windows2019 stemcell	2019.0
diego	2.50.0
envoy-nginx	0.7.0
event-log	0.9.0
garden-runc	1.19.28
hwc-offline-buildpack	3.1.18
loggregator-agent	6.3.3
metrics-discovery	3.0.6
smoke-tests	4.3.0
winc	2.2.0
windows-utilities	0.14.0
windowsfs-release	2.27.0

v2.11.2

Release Date: 06/22/2021

[Security Fix] Bump some dependencies to resolve security vulnerabilities
Bump loggregator-agent to version 6.3.3
Bump metrics-discovery to version 3.0.5

Component	Version
windows2019 stemcell	2019.0
diego	2.50.0
envoy-nginx	0.7.0
event-log	0.9.0
garden-runc	1.19.25
hwc-offline-buildpack	3.1.13
loggregator-agent	6.3.3
metrics-discovery	3.0.5
smoke-tests	4.3.0
winc	2.2.0
windows-utilities	0.14.0
windowsfs-release	2.26.0

v2.11.1

Release Date: 05/27/2021

See Known Issues.
[Feature Improvement] Patch versions can be upgraded without a stemcell upgrade
[Bug Fix] Smoke Test allows the operator to provide the apps_domain property when deploying TAS and also properly configures user provided space when deploying an isolation segment
Bump diego to version 2.50.0
Bump garden-runc to version 1.19.25
Bump loggregator-agent to version 6.2.1
Bump smoke-tests to version 4.3.0
Bump windowsfs-release to version 2.26.0

Component	Version
windows2019 stemcell	2019.0
diego	2.50.0
envoy-nginx	0.7.0
event-log	0.9.0
garden-runc	1.19.25
hwc-offline-buildpack	3.1.13
loggregator-agent	6.2.1
metrics-discovery	3.0.3
smoke-tests	4.3.0
winc	2.2.0
windows-utilities	0.14.0
windowsfs-release	2.26.0

v2.11.0

Release Date: March 30, 2021

Component	Version
windows2019 stemcell	2019.32
diego	2.49.0
envoy-nginx	0.7.0
event-log	0.9.0
garden-runc	1.19.18
hwc-offline-buildpack	3.1.13
loggregator-agent	6.2.0
metrics-discovery	3.0.3
smoke-tests	2.2.0
winc	2.2.0
windows-utilities	0.14.0
windowsfs-release	2.23.0

How to Upgrade

The TAS for VMs [Windows] v2.11 tile is available with the release of Ops Manager v2.10. For more information, see the Ops Manager documentation.

To use the TAS for VMs [Windows] v2.11 tile, you must install Ops Manager v2.10 and VMware Tanzu Application Service for VMs (TAS for VMs) v2.11 or later.

New Features in TAS for VMs [Windows] v2.11

There are no new features in this release of TAS for VMs [Windows].

Breaking Changes

TAS for VMs [Windows] v2.11 includes the following breaking change:

Diego Drops App Logs That Exceed the App Log Rate Limit

As of TAS for VMs [Windows] v2.11.20, if you have configured an app log rate limit that measures app log rates in lines per second, Diego immediately drops app logs that exceed the app log rate limit.

In TAS for VMs [Windows] v2.11.19 and earlier, Diego buffers and releases approximately 5 MB to 10 MB of app logs that exceed the app log rate limit. This behavior has changed in TAS for VMs [Windows] v2.11.20 because Diego has been upgraded to a newer version.

If this change in behavior causes parts of your deployment to fail, VMware recommends that you either modify any automated scripts that rely on app log output or increase the app log rate limit.

For more information about app log rate limits, see App Log Rate Limiting.

Optional TAS for VMs [Windows] 3.0 compatible syslog option

TAS for VMs [Windows] 3.0 includes changes to syslog forwarding. These changes include:

Changes in syslog format to better match other tiles.
Allows securely forwarding logs with tls enabled.
Includes bosh logs to match other tiles and to aid in debugging and auditing the system.

These changes will only be enabled if you turn off compatibility_mode in the system logging window of the settings.

The formatting changes are detailed as follows:

The priority is changed from kernel/debug(7) to user/info(14).
The app name is changed from Microsoft-Windows-Security-Auditing to event_logger.
The process number is changed from a numerical process ID to rs2.
Logs contain structured data for instance and deployment details.
The event log JSON string includes additional fields.
In the event log JSON string, field names are written in camel case.
In the event log JSON string, fields may appear in a different order.

The following example shows the previous log format:

<7>1 2022-07-06T22:19:38.1413061Z 10.0.4.14 Microsoft-Windows-Security-Auditing 160 - - {"message":"A new process has been created.\r\n\r\nCreator Subject:\r\n\tSecurity ID:\t\tS-1-5-18\r\n\tAccount Name:\t\tVM-7F65ECCF-0D0$\r\n\tAccount Domain:\t\tWORKGROUP\r\n\tLogon ID:\t\t0x3e7\r\n\r\nTarget Subject:\r\n\tSecurity ID:\t\tS-1-0-0\r\n\tAccount Name:\t\t-\r\n\tAccount Domain:\t\t-\r\n\tLogon ID:\t\t0x0\r\n\r\nProcess Information:\r\n\tNew Process ID:\t\t0x1f7c\r\n\tNew Process Name:\tC\r\n\tToken Elevation Type:\t%%1936\r\n\tMandatory Label:\t\tS-1-16-16384\r\n\tCreator Process ID:\t0x248\r\n\tCreator Process Name:\tC\r\n\tProcess Command Line:\t\r\n\r\nToken Elevation Type indicates the type of token that was assigned to the new process in accordance with User Account Control policy.\r\n\r\nType 1 is a full token with no privileges removed or groups disabled.  A full token is only used if User Account Control is disabled or if the user is the built-in Administrator account or a service account.\r\n\r\nType 2 is an elevated token with no privileges removed or groups disabled.  An elevated token is used when User Account Control is enabled and the user chooses to start the program using Run as administrator.  An elevated token is also used when an application is configured to always require administrative privilege or to always require maximum privilege, and the user is a member of the Administrators group.\r\n\r\nType 3 is a limited token with administrative privileges removed and administrative groups disabled.  The limited token is used when User Account Control is enabled, the application does not require administrative privilege, and the user does not choose to start the program using Run as administrator.","source":"Microsoft-Windows-Security-Auditing"}

The following example shows the new log format:

<14>1 2022-07-11T22:27:08.279742Z 10.0.4.12 event_logger rs2 - [instance@47450 az="us-central1-b" deployment="pas-windows-dfc8956c7081f9369571" director="" group="windows_diego_cell" id="d0564a0e-684f-4b58-99ee-6a59d1e7caf8"] {"MachineName":"vm-c5547227-c4fa-44ae-79d0-ee56f96e82a4","Data":[],"Index":162257,"Category":"(13312)","CategoryNumber":13312,"EventID":4688,"EntryType":8,"Message":"A new process has been created.\r\n\r\nCreator Subject:\r\n\tSecurity ID:\t\tS-1-5-18\r\n\tAccount Name:\t\tVM-C5547227-C4F$\r\n\tAccount Domain:\t\tWORKGROUP\r\n\tLogon ID:\t\t0x3e7\r\n\r\nTarget Subject:\r\n\tSecurity ID:\t\tS-1-0-0\r\n\tAccount Name:\t\t-\r\n\tAccount Domain:\t\t-\r\n\tLogon ID:\t\t0x0\r\n\r\nProcess Information:\r\n\tNew Process ID:\t\t0x1590\r\n\tNew Process Name:\tC\r\n\tToken Elevation Type:\t%%1936\r\n\tMandatory Label:\t\tS-1-16-16384\r\n\tCreator Process ID:\t0x1120\r\n\tCreator Process Name:\tC\r\n\tProcess Command Line:\t\r\n\r\nToken Elevation Type indicates the type of token that was assigned to the new process in accordance with User Account Control policy.\r\n\r\nType 1 is a full token with no privileges removed or groups disabled.  A full token is only used if User Account Control is disabled or if the user is the built-in Administrator account or a service account.\r\n\r\nType 2 is an elevated token with no privileges removed or groups disabled.  An elevated token is used when User Account Control is enabled and the user chooses to start the program using Run as administrator.  An elevated token is also used when an application is configured to always require administrative privilege or to always require maximum privilege, and the user is a member of the Administrators group.\r\n\r\nType 3 is a limited token with administrative privileges removed and administrative groups disabled.  The limited token is used when User Account Control is enabled, the application does not require administrative privilege, and the user does not choose to start the program using Run as administrator.","Source":"Microsoft-Windows-Security-Auditing","ReplacementStrings":["S-1-5-18","VM-C5547227-C4F$","WORKGROUP","0x3e7","0x1590","C:\Windows\System32\wbem\WMIC.exe","%%1936","0x1120","","S-1-0-0","-","-","0x0","C:\bosh\bosh-agent.exe","S-1-16-16384"],"InstanceId":4688,"TimeGenerated":"\/Date(1657578421000)\/","TimeWritten":"\/Date(1657578421000)\/","UserName":null,"Site":null,"Container":null}

Known Issues

TAS for VMs [Windows] v2.11 includes the following known issues:

Upgrades Fail When the Stemcell Does Not Change

If you upgrade to a version of TAS for VMs [Windows] that uses the same stemcell, TAS for VMs [Windows] can fail to create containers, causing the deployment to fail. If there are stemcell changes or if the Microsoft base layer changes, this error is unlikely to occur.

For more information, see Failure to create containers when upgrading with shared Microsoft base image in the VMware Tanzu Knowledge Base.

Smoke Tests Fail When Isolation Segment is Deployed

The Smoke Test errand runs extra, failing tests when TAS for VMs [Windows] is deployed with Isolation Segment. They are “Compute isolation disabled” and “Application Workflow Linux Applications”.

To work around this issue, disable Smoke Tests. For more information, see Windows Tile smoke-tests fails for isolation segment segments in the VMware Tanzu Knowledge Base.

Windows Stemcell v2019.44 is Incompatible with winfs2019-release v2.33.1 and Earlier

Windows stemcells v2019.44 and later include a newer version of tar that is incompatible with winfs2019-release v2.33.1 and earlier. TAS for VMs [Windows] deployments that use Windows stemcells v2019.44 and later cannot untar winfs2019-release v2.33.1 and earlier. Compatible Windows stemcells for winfs2019-release v2.33.1 and earlier include v2019.0 through v2019.43.

Windows Stemcells Without Git Installed Cause VSC Stamping Failures

If Git is not installed either on your Windows stemcell or in the PATH environment variable for your Windows stemcell when you deploy TAS for VMs [Windows] v2.11.20, you may see the following error:

Stderr: 	Use -buildvcs=false to disable VCS stamping.

This occurs because some TAS for VMs [Windows] v2.11.20 use Go v1.18, which embeds VSC information in binaries. As a result, releases that contain .git files require that Git is installed either on your Windows stemcell or in the PATH for your Windows stemcell. If you do not have Git installed in either location and have not set the buildvcs property to false, Go v1.18 fails to build the release.

TAS for VMs [Windows] v2.11.20 contains windows2019fs-release. Because windows2019fs-release contains .git files, deployments of TAS for VMs [Windows] v2.11.20 using Windows stemcells that do not have Git installed on them or in their PATH fail with the VSC stamping error above.