Isolation Segment v3.0 Release Notes

This topic contains release notes for Isolation Segment v3.0.

VMware Tanzu Application Service for VMs (TAS for VMs) is certified by the Cloud Foundry Foundation for 2023.

For more information about the Cloud Foundry Certified Provider Program, see How Do I Become a Certified Provider? on the Cloud Foundry website.

Because VMware uses the Percona Distribution for MySQL, expect a time lag between Oracle releasing a MySQL patch and VMware releasing TAS for VMs containing that patch.

Releases

3.0.11

Release Date: 05/25/2023

[Bug Fix]: SMB configuration from the TAS tile will now also be applied to the IST tile if installed
[Feature Improvement] Migrate stop of rsyslogd to post-stop step, so that logs during stopping of Bosh jobs are still forwarded to configured targets.
Bump cflinuxfs3 to version 0.366.0
Bump cflinuxfs4 to version 1.9.0
Bump mapfs to version 1.2.22
Bump nfs-volume to version 7.1.16
Bump routing to version 0.268.0
Bump silk to version 3.25.1
Bump smb-volume to version 3.1.16
Bump syslog to version 12.1.5

Component	Version	Release Notes
ubuntu-jammy stemcell	1.108
bpm	1.2.0
cf-networking	3.25.1
cflinuxfs3	0.366.0
cflinuxfs4	1.9.0
count-cores-indicator	2.0.0
diego	2.76.0
garden-runc	1.29.0
loggregator-agent	6.5.10
mapfs	1.2.22	v1.2.22 ## Dependencies * v2: Updated to v2.9.5. For more information, see [v2](https://github.com/onsi/ginkgo). * mapfs: Updated to v`83b48da`. For more information, see [mapfs](https://github.com/cloudfoundry/mapfs). v1.2.21 ## Dependencies * ginkgo v2: Updated ginkgo to v2.9.4. For more information, see [v2](https://github.com/onsi/ginkgo). * mapfs: Updated to v`4a99f4a`. For more information, see [mapfs](https://github.com/cloudfoundry/mapfs).
metrics-discovery	3.2.9
nfs-volume	7.1.16	v7.1.16 ## Changes * Use default CF stack when pushing nfsbroker (#400) * fix: NFS-volume service nfsbroker cred leak (#395) ## Dependencies * nfsbroker: Updated to v`7376460`. For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). * nfsv3driver: Updated to v`b375568`. For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver). v7.1.15 ## Changes * Golang: Updated to v1.20.4 (#388) ## Dependencies * nfsbroker: Updated to v`cbe8c5f`. For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker).
routing	0.268.0	v0.268.0 ## Changes - Adds support for `route_registrar` to advertise HTTP2 based routes to gorouter. If not specified on a route, http1 is used by default. Thanks @peanball @plowin and @b1tamara!! ## Bosh Job Spec changes: ```diff diff --git a/jobs/route_registrar/spec b/jobs/route_registrar/spec index 595f2075..bf3d9a03 100644 --- a/jobs/route_registrar/spec +++ b/jobs/route_registrar/spec @@ -101,6 +101,7 @@ properties: tls_port (required, integer, for http routes): Either `port` or `tls_port` are required; if both are provided, Gorouter will prefer tls_port. Requests for associated URIs will be forwarded over TLS by the router to this port. The IP is determined automatically from the host on which route-registrar is run. + protocol (optional, string): 'http1' or 'http2'. If not provided, Gorouter uses 'http1' as default. route_service_url (optional, string, for http routes): When valid route service URL is provided, Gorouter will proxy requests received for the uris above to the specified route service URL. server_cert_domain_san (conditional, string, for http routes): Required if tls_port is present. Gorouter will validate that the TLS certificate presented by the destination host contains this as a Subject Alternative Name (SAN). ``` ## ✨ Built with go 1.20.4 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.267.0...v0.268.0 ## Resources - [Download release v0.268.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.268.0). v0.267.0 ## Changes - The veresion of HAProxy used in tcp-router was bumped from 2.7.6 to 2.7.8. ## ✨ Built with go 1.20.4 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.266.0...v0.267.0 ## Resources - [Download release v0.267.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.267.0).
silk	3.25.1	3.25.1 ## Changes - Fixes compilation errors for `silk-datastore-syncer` ## ✨ Built with go 1.20.4 Full Changelog: https://github.com/cloudfoundry/silk-release/compare/3.24.0...v3.25.1 ## Resources - [Download release v3.25.1 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.25.1). 3.24.0 ## Changes - ⚠️ The new `silk-data-syncer` job is missing some files that cause compilation to fail. This is not a problem if you are deploying without that job. If you need the job, please upgrade to 3.25.1. - Add new `silk-datastore-syncer` job to sync app log metadata from garden to silk datastore - Bump to Go 1.20.4 - Bump to Silk 20230501162532-6ab8d30026c6 - Bump dependencies such that Ginkgo V2 and Lager V3 are used ## Bosh Job Spec changes: ```diff diff --git a/jobs/silk-datastore-syncer/spec b/jobs/silk-datastore-syncer/spec new file mode 100644 index 0000000..9aa1813 --- /dev/null +++ b/jobs/silk-datastore-syncer/spec @@ -0,0 +1,26 @@ +--- +name: silk-datastore-syncer + +templates: + bpm.yml.erb: config/bpm.yml + start.erb: bin/start + +packages: + - silk-datastore-syncer + +properties: + disable: + description: "Disable this monit job. It will not run. Required for backwards compatability." + default: false + sync_interval_in_seconds: + description: "Interval to check garden for new metadata." + default: 30 + garden.address: + description: "Garden server listening address." + default: /var/vcap/data/garden/garden.sock + garden.network: + description: "Network type for the garden server connection (tcp or unix)." + default: unix + log_level: + description: "Logging level (debug, info, warn, error)." + default: info ``` ## ✨ Built with go 1.20.4 Full Changelog: https://github.com/cloudfoundry/silk-release/compare/3.23.0...v3.24.0 ## Resources - [Download release v3.24.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.24.0).
smb-volume	3.1.16	v3.1.16 ## Dependencies * smbbroker: Updated to v`e30a49e`. For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * smbdriver: Updated to v`a10f57f`. For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver). v3.1.15 ## Changes * +Golang: Updated to v1.20.4 (#144) * Use default CF stack when pushing smbbroker (#149) ## Dependencies * smbbroker: Updated to v`a586257`. For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * smbdriver: Updated to v`17ef13d`. For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver).
smoke-tests	4.8.2
syslog	12.1.5	v12.1.5 ## What's Changed * Dependency bumps * Migrate stop of rsyslogd to post-stop by @KarstenSchnitter in https://github.com/cloudfoundry/syslog-release/pull/133 ## New Contributors * @KarstenSchnitter made their first contribution in https://github.com/cloudfoundry/syslog-release/pull/133 Full Changelog: https://github.com/cloudfoundry/syslog-release/compare/v12.1.4...v12.1.5

3.0.10

Release Date: 05/17/2023

[Security Fix] Resolve issue in gorouter where canceled requests can result in apps becoming unavailable (CVE-2023-20882)
[Bug Fix] Fixes an issue in gorouter where requests that should have returned 496, 499, 503, 525, or 526 HTTP status codes may instead have returned as 502s, potentially preventing stale route pruning.
[Bug Fix] Resolve Issue where Garden failed during BOSH/OpsMan deploys due to healthcheck
Bump bpm to version 1.2.0
Bump cf-networking to version 3.25.1
Bump cflinuxfs3 to version 0.364.0
Bump cflinuxfs4 to version 1.8.0
Bump count-cores-indicator to version 2.0.0
Bump diego to version 2.76.0
Bump garden-runc to version 1.29.0
Bump loggregator-agent to version 6.5.10
Bump mapfs to version 1.2.20
Bump metrics-discovery to version 3.2.9
Bump nfs-volume to version 7.1.14
Bump routing to version 0.266.0
Bump smb-volume to version 3.1.14
Bump syslog to version 12.1.4

Component	Version	Release Notes
ubuntu-jammy stemcell	1.108
bpm	1.2.0
cf-networking	3.25.1	3.25.1 ## Changes - None! ## ✨ Built with go 1.20.4 Full Changelog: https://github.com/cloudfoundry/cf-networking-release/compare/3.24.0...v3.25.1 ## Resources - [Download release v3.25.1 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.25.1). 3.24.0 ## Changes - Bump to Go 1.20.4 - Bump all dependencies such that only Ginkgo V2 and Lager V3 are used - Use [new docker images](https://github.com/cloudfoundry/cf-networking-release/commit/4b69f0a5690611dfa730a70e641f5c1f8145c66c) for local testing ## ✨ Built with go 1.20.4 Full Changelog: https://github.com/cloudfoundry/cf-networking-release/compare/3.23.0...v3.24.0 ## Resources - [Download release v3.24.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.24.0).
cflinuxfs3	0.364.0
cflinuxfs4	1.8.0
count-cores-indicator	2.0.0
diego	2.76.0	v2.76.0 ## Changes - Bump to Go 1.20.4 - Bump dependencies ## Bosh Job Spec changes: ```diff diff --git a/jobs/auctioneer/spec b/jobs/auctioneer/spec index ae685ceb9..1fac48936 100644 --- a/jobs/auctioneer/spec +++ b/jobs/auctioneer/spec @@ -88,6 +88,12 @@ properties: diego.auctioneer.locket.api_location: description: "Hostname and port of the Locket server. When set, the auctioneer attempts to claim a lock from the Locket API." default: locket.service.cf.internal:8891 + diego.auctioneer.locket.client_keepalive_time: + description: "Period in seconds after which the locket gRPC client sends keepalive ping requests to the locket server it is connected to." + default: 10 + diego.auctioneer.locket.client_keepalive_timeout: + description: "Timeout in seconds to receive a response to the keepalive ping. If a response is not received within this time, the locket client will reconnect to another server." + default: 22 locks.locket.enabled: description: When set, the auctioneer attempts to claim a lock from the Locket API. diff --git a/jobs/bbs/spec b/jobs/bbs/spec index b6f1040c2..9204a8d4c 100644 --- a/jobs/bbs/spec +++ b/jobs/bbs/spec @@ -140,6 +140,12 @@ properties: diego.bbs.locket.api_location: description: "Hostname and port of the Locket server. When set, the BBS attempts to claim a lock from the Locket API and will detect Diego cells registered with the Locket API." default: locket.service.cf.internal:8891 + diego.bbs.locket.client_keepalive_time: + description: "Period in seconds after which the locket gRPC client sends keepalive ping requests to the locket server it is connected to." + default: 10 + diego.bbs.locket.client_keepalive_timeout: + description: "Timeout in seconds to receive a response to the keepalive ping. If a response is not received within this time, the locket client will reconnect to another server." + default: 22 limits.open_files: description: Maximum number of files (including sockets) the BBS process may have open. diff --git a/jobs/rep/spec b/jobs/rep/spec index df7bd7c49..1383b67c0 100644 --- a/jobs/rep/spec +++ b/jobs/rep/spec @@ -217,6 +217,12 @@ properties: diego.rep.locket.api_location: description: "Hostname and port of the Locket server. When set, the cell rep will establish its cell registration in the Locket API." default: locket.service.cf.internal:8891 + diego.rep.locket.client_keepalive_time: + description: "Period in seconds after which the locket gRPC client sends keepalive ping requests to the locket server it is connected to." + default: 10 + diego.rep.locket.client_keepalive_timeout: + description: "Timeout in seconds to receive a response to the keepalive ping. If a response is not received within this time, the locket client will reconnect to another server." + default: 22 enable_declarative_healthcheck: description: "When set, enables the rep to prefer the LRP CheckDefinition to healthcheck instances over the Monitor action. Requires Garden-Runc v1.10.0+" diff --git a/jobs/rep_windows/spec b/jobs/rep_windows/spec index 4fc4504bf..023d76f18 100644 --- a/jobs/rep_windows/spec +++ b/jobs/rep_windows/spec @@ -227,7 +227,13 @@ properties: diego.rep.locket.api_location: description: "Hostname and port of the locket server" default: locket.service.cf.internal:8891 - + diego.rep.locket.client_keepalive_time: + description: "Period in seconds after which the locket gRPC client sends keepalive ping requests to the locket server it is connected to." + default: 10 + diego.rep.locket.client_keepalive_timeout: + description: "Timeout in seconds to receive a response to the keepalive ping. If a response is not received within this time, the locket client will reconnect to another server." + default: 22 + enable_declarative_healthcheck: description: "When set, enables the rep to prefer the LRP CheckDefinition to healthcheck instances over the Monitor action." default: false diff --git a/jobs/vizzini/spec b/jobs/vizzini/spec index fa6c8d0d0..40b5eb74b 100644 --- a/jobs/vizzini/spec +++ b/jobs/vizzini/spec @@ -47,9 +47,6 @@ properties: vizzini.verbose: description: Run tests in verbose mode default: false - vizzini.stream: - description: Stream output from parallel test nodes. This option will lead to less coherent output but is useful when debugging - default: false enable_declarative_healthcheck: description: "When set, enables the declarative check tests in vizzini" ``` ## ✨ Built with go 1.20.4 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.75.0...v2.76.0 ## Resources - [Download release v2.76.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.76.0). v2.75.0 ## Changes * Bump ginkgo to v2 and lager to v3 * [Bug fix] Rep does not clean up resources when deleting container fails ## ✨ Built with go 1.20.3 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.73.0...v2.75.0 ## Resources - [Download release v2.75.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.75.0).
garden-runc	1.29.0	v1.29.0 ## Changes ⚠️We have removed the garden-healthcheck job from garden while we investigate a way to make it less painful. From v1.22.6 through v1.28.0, garden restarts with a high container count could result in BOSH deploys failing due to a race condition between garden, bpm, monit, and garden-healthchecker. This will be re-enabled at a later time when we resolve the race condition. ## ✨ Built with go 1.20.4 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.28.0...v1.29.0 ## Resources - [Download release v1.29.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.29.0). v1.28.0 ## Changes - Bump to golang 1.20.4 - Bump dependencies ## ✨ Built with go 1.20.4 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.27.0...v1.28.0 ## Resources - [Download release v1.28.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.28.0).
loggregator-agent	6.5.10	v6.5.10 ## What's Changed * Bump to [go1.20.4](https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU/m/QvrjqM4XAgAJ) * Bump dependencies Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v6.5.9...v6.5.10
mapfs	1.2.20	v1.2.20 ## Changes * Golang: Updated to v1.20.4 (#77, #78) ## Dependencies * ginkgo v2: Updated to v2.9.3. For more information, see [v2](https://github.com/onsi/ginkgo). * mapfs: Updated to v`25c1e86`. For more information, see [mapfs](https://github.com/cloudfoundry/mapfs). v1.2.16 ## Changes * Golang: Updated to v1.20.3 (#64, #65, #71) ## Dependencies * gomega: Updated to v1.27.6. For more information, see [gomega](https://github.com/onsi/gomega). * mapfs: Updated to v`4c0a84d`. For more information, see [mapfs](https://github.com/cloudfoundry/mapfs).
metrics-discovery	3.2.9	v3.2.9 ## What's Changed * Bump to [go1.20.4](https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU/m/QvrjqM4XAgAJ) * Bump dependencies Full Changelog: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.8...v3.2.9
nfs-volume	7.1.14	v7.1.14 ## Dependencies * nfsbroker: Updated to v`2c64157`. For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). * nfsv3driver: Updated to v`14c2d4e`. For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver). v7.1.12 ## Changes * Golang: Updated to v1.20.3 (#355, #357) * Fix possible log leak of CF password (#335) ## Dependencies * gomega: Updated to v1.27.6. For more information, see [gomega](https://github.com/onsi/gomega). * nfsbroker: Updated to v`0e58c8e`. For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). * nfsv3driver: Updated to v`bd396bf`. For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver).
routing	0.266.0	v0.266.0 ## Change - 🐛Fixes a bug that may cause routing failures to apps. Thanks @maxmoehl and @domdom82!! - Many go dependency updates across all routing packages. Thanks @winkingturtle-vmw!! ## ✨ Built with go 1.20.4 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.265.1...v0.266.0 ## Resources - [Download release v0.266.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.266.0). v0.265.1 :warning::warning::warning: There is a known issue with this release’s routing logic which may cause routing failures to apps. It is advised to use routing-release [0.266.0](https://github.com/cloudfoundry/routing-release/releases/tag/v0.266.0) or later instead of this release. ## Changes - Bump healthchecker ## ✨ Built with go 1.20.4 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.265.0...v0.265.1 ## Resources - [Download release v0.265.1 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.265.1). v0.265.0 :warning::warning::warning: There is a known issue with this release’s routing logic which may cause routing failures to apps. It is advised to use routing-release [0.266.0](https://github.com/cloudfoundry/routing-release/releases/tag/v0.266.0) or later instead of this release. ## Changes - Bump to Go 1.20.4 ## ✨ Built with go 1.20.4 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.264.0...v0.265.0 ## Resources - [Download release v0.265.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.265.0). v0.264.0 :warning::warning::warning: There is a known issue with this release’s routing logic which may cause routing failures to apps. It is advised to use routing-release [0.266.0](https://github.com/cloudfoundry/routing-release/releases/tag/v0.266.0) or later instead of this release. ## Changes - Addresses the issue in routing-release 0.263.0 where `bosh export-releases` would fail to compile the `acceptance-tests` package. ## ✨ Built with go 1.20.3 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.263.0...v0.264.0 ## Resources - [Download release v0.264.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.264.0). v0.263.0 ⚠️⚠️⚠️ This version does not compile, it will be fixed with the next release There is a known issue with this release’s routing logic which may cause routing failures to apps. It is advised to use routing-release [0.266.0](https://github.com/cloudfoundry/routing-release/releases/tag/v0.266.0) or later instead of this release. ## Changes - 🐛Fixed a bug present since v0.262.0 that caused CATs to intermittently fail on apps using `nc` as their server. - 🐛Bumped haproxy to 2.7.6 in cf-tcp-router, to resolve a bug preventing haproxy from properly transferring open connections to the new haproxy process when a reload occurred - [haproxy/#1883](https://github.com/haproxy/haproxy/issues/1883) ## ✨ Built with go 1.20.3 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.262.0...v0.263.0 ## Resources - [Download release v0.263.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.263.0).
silk	3.23.0
smb-volume	3.1.14	v3.1.14 ## Dependencies * smbbroker: Updated to v`6b6727c`. For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * smbdriver: Updated to v`9923294`. For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver). v3.1.13 ## Dependencies * smbbroker: Updated to v`62b84b6`. For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * smbdriver: Updated to v`124f398`. For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver). v3.1.12 ## Changes * Golang: Updated to v1.20.3 (#120, #128, #129) * Fix potential cred leak (#119) ## Dependencies * smbbroker: Updated to v`093c496`. For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * smbdriver: Updated to v`b7faa12`. For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver).
smoke-tests	4.8.2
syslog	12.1.4	v12.1.4 ## What's Changed * update golang to 1.20.4 Full Changelog: https://github.com/cloudfoundry/syslog-release/compare/v12.1.3...v12.1.4

3.0.9

Release Date: 04/20/2023

Caution: This release is susceptible to CVE-2023-20882, which may cause routing failures to apps. To address this issue, VMware advises using TAS v3.0.10 and IST v3.0.10 instead.

[Bug Fix] Fixed issues in route_registrar and tcp_router that led to unnecessary haproxy reloads
Bump bpm to version 1.1.23
Bump cflinuxfs3 to version 0.361.0
Bump cflinuxfs4 to version 1.5.0
Bump diego to version 2.73.0
Bump garden-runc to version 1.27.0
Bump loggregator-agent to version 6.5.9
Bump metrics-discovery to version 3.2.8
Bump nfs-volume to version 7.1.10
Bump routing to version 0.262.0
Bump smb-volume to version 3.1.11

Component	Version	Release Notes
ubuntu-jammy stemcell	1.95
bpm	1.1.23
cf-networking	3.23.0
cflinuxfs3	0.361.0
cflinuxfs4	1.5.0
diego	2.73.0
garden-runc	1.27.0
loggregator-agent	6.5.9	v6.5.9 * Upgrade to go 1.20.2 * Bump dependencies Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v6.5.8...v6.5.9
mapfs	1.2.13
metrics-discovery	3.2.8	v3.2.8 * Upgrade to go1.20.2. * Bump dependencies. Full Changelog: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.7...v3.2.8
nfs-volume	7.1.10	v7.1.10 ## Changes ## Dependencies * nfsbroker: Updated to v`7946962`. For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). * nfsv3driver: Updated to v`d9aee47`. For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver).
routing	0.262.0	v0.262.0 ## Changes - 🐛Fixes the of golang has a known issue that causes backend request failures which previously returned 496, 499, 503, 525, or 526 to instead return a 502. Additionally stale routes may not have been pruned properly. Thanks @domdom82!! - 🚗Gorouter now retries requests which fail prior to any HTTP content being sent (since no backend received the HTTP content, they're by definition retriable). Thanks for the [PR](https://github.com/cloudfoundry/gorouter/pull/337). Thanks @maxmoehl and @domdom82!! ## ✨ Built with go 1.20.2 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.261.0...v0.262.0 ## Resources - [Download release v0.262.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.262.0). v0.261.0 ⚠️⚠️⚠️ This version of golang has a known issue that may cause backend request failures that previously returned 496, 499, 503, 525, or 526 to instead return a 502. Additionally stale routes may not get pruned properly. This will be addressed in an upcoming release. ## Changes - Bug fix: add healthcheck to routing-api for route-registrar ## Bosh Job Spec changes: ```diff diff --git a/jobs/routing-api/spec b/jobs/routing-api/spec index 5717f88f..f6a2175d 100644 --- a/jobs/routing-api/spec +++ b/jobs/routing-api/spec @@ -6,12 +6,15 @@ templates: uaa_ca.crt.erb: config/certs/uaa/ca.crt routing-api.yml.erb: config/routing-api.yml + routing_api_health_check.erb: bin/routing_api_health_check locket_ca.crt.erb: config/certs/locket/ca.crt locket_client.crt.erb: config/certs/locket/client.crt locket_client.key.erb: config/certs/locket/client.key api_mtls_client_ca.crt.erb: config/certs/routing-api/client_ca.crt + api_mtls_client.crt.erb: config/certs/routing-api/client.crt + api_mtls_client.key.erb: config/certs/routing-api/client.key api_mtls_server.crt.erb: config/certs/routing-api/server.crt api_mtls_server.key.erb: config/certs/routing-api/server.key @@ -107,6 +110,13 @@ properties: routing_api.mtls_client_key: description: "Routing API client key (provided to clients by bosh link)" + routing_api.health_check_timeout_per_retry: + default: 2 + description: "Maximum health check timeout (in seconds) for each retry attempt in the Routing API's route registration health check" + routing_api.health_check_total_timeout: + default: 6 + description: "Maximum health check timeout (in seconds). Health checks will be retried until this time limit is reached. This should be less than or equal to your route_registrar.routes.api.health_check.timeout" + metron.port: description: "The port used to emit dropsonde messages to the Metron agent." default: 3457 ``` ## ✨ Built with go 1.20.2 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.260.0...v0.261.0 ## Resources - [Download release v0.261.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.261.0). v0.260.0 ⚠️⚠️⚠️ This version of golang has a known issue that may cause backend request failures that previously returned 496, 499, 503, 525, or 526 to instead return a 502. Additionally stale routes may not get pruned properly. This will be addressed in an upcoming release. ## Changes - Dependency updates (cf cli, healthchecker, golang) - Many CI Updates - Thanks @jrussett! - 🐛[#310]The routing_utils route loader now sets the route service url when loading. Thanks @domdom82 ! - 🐛Two issues in route_registrar were fixed that led to routes expiring and then being re-registered with the same details: - Starting in v0.x.x, route_registrar no longer retried UAA connections when getting a token from UAA. Instead, the failure would cause route_registrar to restart, and reset it's emitter intervals. - The built in route expiry has been increased from RegistrationInterval + 2 seconds to 2.1 * RegistrationInterval. This prevent routes from expiring during the course of a route_registrar restart. - 🐛If tcp_router received routing events during its BulkSync cycle, it would always rewrite the haproxy configuration, and reload the haproxy process. This would occur regardless of whether the events required a new haproxy config. It now only updates the config + reloads haproxy if changes are necessary. ## ✨ Built with go 1.20.2 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.259.0...v0.260.0 ## Resources - [Download release v0.260.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.260.0).
silk	3.23.0
smb-volume	3.1.11	v3.1.11 ## Changes ## Dependencies * smbbroker: Updated to v`c5b6f5e`. For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * smbdriver: Updated to v`73a24c2`. For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver).
smoke-tests	4.8.2
syslog	12.1.3

3.0.8

Release Date: 03/21/2023

Note: This version of TAS for VMs contains a known issue with Gorouter error handling for backend app requests. Failures that previously returned HTTP Status Codes 496, 499, 503, 525, or 526 may instead return 502. Additionally, stale routes may fail to be pruned properly, which could result in apps unexpectedly returning HTTP Status Codes 502.

Bump cf-networking to version 3.23.0
Bump cflinuxfs3 to version 0.356.0
Bump cflinuxfs4 to version 0.72.0
Bump diego to version 2.72.0
Bump garden-runc to version 1.25.0
Bump mapfs to version 1.2.13
Bump nfs-volume to version 7.1.9
Bump routing to version 0.259.0
Bump silk to version 3.23.0
Bump smb-volume to version 3.1.10
Bump syslog to version 12.1.3

Component	Version	Release Notes
ubuntu-jammy stemcell	1.93
bpm	1.1.21
cf-networking	3.23.0
cflinuxfs3	0.356.0
cflinuxfs4	0.72.0
diego	2.72.0
garden-runc	1.25.0
loggregator-agent	6.5.8
mapfs	1.2.13	v1.2.13 ## Changes * Golang: Updated to v1.19.4 (#32) * Golang: Updated to v1.19.5 (#37) * Golang: Updated to v1.19.5 (#44) * Golang: Updated to v1.20.1 (#48) ## Dependencies * mapfs: Updated to v`98da9f0`. For more information, see [mapfs](https://github.com/cloudfoundry/mapfs).
metrics-discovery	3.2.7
nfs-volume	7.1.9	v7.1.9 ## Changes * Golang: Updated to v1.19.4 (#259) * Golang: Updated to v1.19.5 (#279) * Golang: Updated to v1.19.5 (#298) * Simplify submodule names (#278) ## Dependencies * bosh-template: Updated to v2.4.0. For more information, see [bosh-template](https://github.com/cloudfoundry/bosh). * gomega: Updated to v1.27.2. For more information, see [gomega](https://github.com/onsi/gomega). * nfsbroker: Updated to v`c403422`. For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). * nfsv3driver: Updated to v`5075cc5`. For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver).
routing	0.259.0	v0.259.0 ## Changes - No changes from last version. - Fixing CI so that artifacts are generated correctly for github release. ## ✨ Built with go 1.20.1 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.258.0...v0.259.0 ## Resources - [Download release v0.259.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.259.0). v0.258.0 ## Changes - Update healthchecker to [0.4.0](https://github.com/cloudfoundry/healthchecker-release/releases/tag/v0.4.0) - Increase startup delay default to 30 seconds [PR](https://github.com/cloudfoundry/healthchecker-release/pull/2) - Upgrade golang to 1.20.1 ## Bosh Job Spec changes: ```diff diff --git a/jobs/acceptance_tests/spec b/jobs/acceptance_tests/spec index 65bf4c30..6a73b9ae 100644 --- a/jobs/acceptance_tests/spec +++ b/jobs/acceptance_tests/spec @@ -7,7 +7,7 @@ templates: bpm.yml.erb: config/bpm.yml packages: - - golang-1.19-linux + - golang-1.20-linux - acceptance_tests - rtr - cf-cli-6-linux diff --git a/jobs/smoke_tests/spec b/jobs/smoke_tests/spec index b16357ed..0426dc99 100644 --- a/jobs/smoke_tests/spec +++ b/jobs/smoke_tests/spec @@ -7,7 +7,7 @@ templates: bpm.yml.erb: config/bpm.yml packages: - - golang-1.19-linux + - golang-1.20-linux - acceptance_tests - cf-cli-6-linux ``` ## ✨ Built with go 1.20.1 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.257.0...v0.258.0 ## Resources - [Download release v0.258.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.258.0). v0.257.0 ## Changes - Bumped to build with golang 1.19.6 ## ✨ Built with go 1.19.6 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.256.0...v0.257.0 ## Resources - [Download release v0.257.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.257.0).
silk	3.23.0
smb-volume	3.1.10	v3.1.10 ## Changes * Backfill property tests for force_noserverino (#103) ## Dependencies * smbbroker: Updated to v`17e471d`. For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * smbdriver: Updated to v`fcb9ca4`. For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver).
smoke-tests	4.8.2
syslog	12.1.3	v12.1.3 * update golang to 1.20.1 Full Changelog: https://github.com/cloudfoundry/syslog-release/compare/v12.1.2...v12.1.3### v12.1.2 ## What's Changed * update dependencies * upgrade to go 1.20 by @rroberts2222 in https://github.com/cloudfoundry/syslog-release/pull/118 Full Changelog: https://github.com/cloudfoundry/syslog-release/compare/v12.1.1...v12.1.2

3.0.7

Release Date: 02/28/2023

[Bug Fix] Include updated version of cflinuxfs3 and cflinuxfs4
Bump bpm to version 1.1.21
Bump cf-networking to version 3.22.0
Bump cflinuxfs3 to version 0.352.0
Bump cflinuxfs4 to version 0.64.0
Bump garden-runc to version 1.23.0
Bump loggregator-agent to version 6.5.8
Bump metrics-discovery to version 3.2.7
Bump routing to version 0.256.0
Bump silk to version 3.22.0
Bump smb-volume to version 3.1.9

Component	Version	Release Notes
ubuntu-jammy stemcell	1.83
bpm	1.1.21
cf-networking	3.22.0
cflinuxfs3	0.352.0
cflinuxfs4	0.64.0
diego	2.71.0
garden-runc	1.23.0
loggregator-agent	6.5.8	v6.5.8 ## What's Changed * update dependencies * Upgrade to go 1.20.1 by @rroberts2222 in https://github.com/cloudfoundry/loggregator-agent-release/pull/224 Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v6.5.7...v6.5.8
mapfs	1.2.12
metrics-discovery	3.2.7	v3.2.7 * update golang to 1.20.1 Full Changelog: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.6...v3.2.7### v3.2.6 ## What's Changed * Upgrade to go 1.20 by @rroberts2222 in https://github.com/cloudfoundry/metrics-discovery-release/pull/104 Full Changelog: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.5...v3.2.6 v3.2.5 ## What's Changed * Update dependencies * Expire individual metrics by @rroberts2222 in https://github.com/cloudfoundry/metrics-discovery-release/pull/103 Full Changelog: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.4...v3.2.5
nfs-volume	7.1.8
routing	0.256.0	v0.256.0 ## Changes - Update healthchecker in release to stable version ## ✨ Built with go 1.19.5 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.255.0...v0.256.0 ## Resources - [Download release v0.256.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.256.0).
silk	3.22.0
smb-volume	3.1.9	v3.1.9 ## Changes * Add force_noserverino property in smbdriver job (#102) ## Dependencies * bosh-template: Updated to v2.4.0. For more information, see [bosh-template](https://github.com/cloudfoundry/bosh). * smbdriver: Updated to v`adc77c7`. For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver). v3.1.8 ## Dependencies * smbdriver: Updated to v`6cc617a`. For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver). v3.1.7 ## Changes * Golang: Updated to v1.19.4 (#76) ## Dependencies * rspec: Updated to v3.12.0. For more information, see [rspec](https://github.com/rspec/rspec-metagem). * smbbroker: Updated to v`114bb05`. For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * smbdriver: Updated to v`f0b92e3`. For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver).
smoke-tests	4.8.2
syslog	12.1.1

v3.0.6

Release Date: 02/09/2023

[Bug Fix] Allows docker app workloads without a sh binary in the docker image to execute properly.
Bump loggregator-agent to version 6.5.7
Bump routing to version 0.255.0

Component	Version	Release Notes
ubuntu-jammy stemcell	1.80
bpm	1.1.19
cf-networking	3.19.0
cflinuxfs3	0.321.0
cflinuxfs4	0.28.0
diego	2.71.0
garden-runc	1.22.9
loggregator-agent	6.5.7	v6.5.7 ## What's Changed * Sanitize ProcID in syslog messages so messages with utf-8 in the source_type are not dropped by @Benjamintf1 in https://github.com/cloudfoundry/loggregator-agent-release/pull/202 * Update dependencies Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v6.5.6...v6.5.7
mapfs	1.2.12
metrics-discovery	3.2.4
nfs-volume	7.1.8
routing	0.255.0	v0.255.0 [Upgrade healthchecker in release](https://github.com/cloudfoundry/routing-release/commit/ddb43e9e746b009d0ea6e6cf8cf8e7eb059ffafc). In order to limit the scope of packages brought in with the introduction of http healthchecker, we migrated the healthchecker package out of cf-networking-helpers into its own release. Full Changelog: https://github.com/cloudfoundry/routing-release/compare/0.254.0...v0.255.0 ✨ Built with go 1.19.5
silk	3.19.0
smb-volume	3.1.6
smoke-tests	4.8.2
syslog	12.1.1

v3.0.5

Release Date: 01/30/2023

Bump cf-networking to version 3.19.0
Bump garden-runc to version 1.22.9
Bump silk to version 3.19.0

Component	Version
ubuntu-jammy stemcell	1.75
bpm	1.1.19
cf-networking	3.19.0
cflinuxfs3	0.321.0
cflinuxfs4	0.28.0
diego	2.71.0
garden-runc	1.22.9
loggregator-agent	6.5.6
mapfs	1.2.12
metrics-discovery	3.2.4
nfs-volume	7.1.8
routing	0.254.0
silk	3.19.0
smb-volume	3.1.6
smoke-tests	4.8.2
syslog	12.1.1

v3.0.4

Release Date: 01/16/2023

[Feature Improvement] vxlan-policy-agent logs when asgs are updated
Bump cf-networking to version 3.18.0
Bump diego to version 2.71.0
Bump garden-runc to version 1.22.7
Bump loggregator-agent to version 6.5.6
Bump routing to version 0.254.0
Bump silk to version 3.18.0
Bump smoke-tests to version 4.8.2

Component	Version	Release Notes
ubuntu-jammy stemcell	1.75
bpm	1.1.19
cf-networking	3.18.0
cflinuxfs3	0.321.0
cflinuxfs4	0.28.0
diego	2.71.0
garden-runc	1.22.7
loggregator-agent	6.5.6	v6.5.6 ## What's Changed * fix scraping with non-positive intervals to preserve non-scraping behavior by @Benjamintf1 in https://github.com/cloudfoundry/loggregator-agent-release/pull/174 * updated some dependencies. Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v6.5.5...v6.5.6
mapfs	1.2.12
metrics-discovery	3.2.4
nfs-volume	7.1.8
routing	0.254.0	v0.254.0 ✨ Built with go 1.19.5 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/0.253.0...v0.254.0 v0.253.0 ## What's Changed * Specs to make maxRetries configurable for endpoints and route-services by @domdom82 in https://github.com/cloudfoundry/routing-release/pull/298 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/0.252.0...v0.253.0 v0.252.0 ## What's Changed - Improve random source for least connection pool to be thread safe. Thanks Daniel Lynch! Full Changelog: https://github.com/cloudfoundry/routing-release/compare/0.251.0...v0.252.0
silk	3.18.0
smb-volume	3.1.6
smoke-tests	4.8.2	4.8.2 Port assets/ruby_simple to Ruby 3
syslog	12.1.1

v3.0.3

Release Date: 12/15/2022

[Security Fix] Fix CVE-2022-31733: Unsecured Application Port
Bump cf-networking to version 3.16.0
Bump diego to version 2.70.0
Bump loggregator-agent to version 6.5.5
Bump metrics-discovery to version 3.2.4
Bump routing to version 0.251.0
Bump silk to version 3.15.1
Bump smoke-tests to version 4.8.1
Bump syslog to version 12.1.1

Component	Version	Release Notes
ubuntu-jammy stemcell	1.64
bpm	1.1.19
cf-networking	3.16.0
cflinuxfs3	0.321.0
cflinuxfs4	0.28.0
diego	2.70.0
garden-runc	1.22.5
loggregator-agent	6.5.5	v6.5.5 - bump-golang to v0.114.0 for golang 1.19.4 - Bump google.golang.org/grpc from 1.50.1 to 1.51.0 in /src - Bump github.com/valyala/fasthttp from 1.41.0 to 1.43.0 in /src - Bump github.com/onsi/ginkgo/v2 from 2.5.0 to 2.5.1 in /src - Bump github.com/onsi/gomega from 1.24.0 to 1.24.1 in /src - Bump github.com/prometheus/client_model from 0.2.0 to 0.3.0 in /src - Bump golangci/golangci-lint-action from 3.3.0 to 3.3.1 v6.5.4 ## What's Changed - Bump to go1.19.3 - Bump dependencies Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v6.5.3...v6.5.4 v6.5.3 ## What's Changed * Fix logs for forwarder agent drops by @rroberts2222 in https://github.com/cloudfoundry/loggregator-agent-release/pull/156 Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v6.5.2...v6.5.3 v6.5.2 ## What's Changed * Bump golang to 1.19.2 Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v6.5.1...v6.5.2 v6.5.1 ## What's Changed * remove the use of sha1 by @duanemay in https://github.com/cloudfoundry/loggregator-agent-release/pull/133 * Bump github.com/valyala/fasthttp from 1.39.0 to 1.40.0 in /src by @dependabot in https://github.com/cloudfoundry/loggregator-agent-release/pull/129 * Upgrade ginkgo to v2 by @ctlong in https://github.com/cloudfoundry/loggregator-agent-release/pull/135 * Golang 1.19.1 by @rroberts2222 in https://github.com/cloudfoundry/loggregator-agent-release/pull/138 ## New Contributors * @duanemay made their first contribution in https://github.com/cloudfoundry/loggregator-agent-release/pull/133 * @rroberts2222 made their first contribution in https://github.com/cloudfoundry/loggregator-agent-release/pull/138 Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v6.5.0...v6.5.1
mapfs	1.2.12
metrics-discovery	3.2.4	v3.2.4 - bump-golang to v0.114.0 for golang 1.19.4 - Bump github.com/nats-io/nats.go from 1.19.0 to 1.21.0 in /src - Bump google.golang.org/grpc from 1.50.1 to 1.51.0 in /src - Bump github.com/onsi/ginkgo/v2 from 2.5.0 to 2.5.1 in /src - Bump github.com/prometheus/client_golang from 1.13.1 to 1.14.0 in /src - Bump github.com/onsi/gomega from 1.24.0 to 1.24.1 in /src - Bump golangci/golangci-lint-action from 3.3.0 to 3.3.1 v3.2.3 ## What's Changed * Bump to go1.19.3 * Bump dependencies Full Changelog: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.2...v3.2.3 v3.2.2 ## What's Changed * update golang to 1.19.2 Full Changelog: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.1...v3.2.2 v3.2.1 ## What's Changed * Bump github.com/onsi/ginkgo/v2 from 2.1.6 to 2.2.0 in /src by @dependabot in https://github.com/cloudfoundry/metrics-discovery-release/pull/51 * Bump github.com/nats-io/nats.go from 1.16.0 to 1.17.0 in /src by @dependabot in https://github.com/cloudfoundry/metrics-discovery-release/pull/50 * Replace `ioutil` use with `io` and `os` by @ctlong in https://github.com/cloudfoundry/metrics-discovery-release/pull/52 * Bump to golang 1.19.1 by @Benjamintf1 in https://github.com/cloudfoundry/metrics-discovery-release/pull/54 ## New Contributors * @rroberts2222 made their first contribution in https://github.com/cloudfoundry/metrics-discovery-release/pull/55 Full Changelog: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.0...v3.2.1
nfs-volume	7.1.8
routing	0.251.0	v0.251.0 ## What's Changed - When the `router.ca_certs` property switched from a multi-line string of certs, to an array of certs, gorouter started failing to start up if any of the certs provided were invalid. Previously they were ignored. This has been reverted, so that any invalid CA certs are ignored during startup. Thanks @ameowlia! Full Changelog: https://github.com/cloudfoundry/routing-release/compare/0.250.0...v0.251.0 v0.250.0 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/0.249.0...v0.250.0 ## ✨ Built with go 1.19.4 v0.249.0 ## What's Changed * Switch to healthecker package in cf-networking-helpers by @mariash in https://github.com/cloudfoundry/routing-release/pull/302 * Add healthchecker package to sync-package-specs file by @mariash in https://github.com/cloudfoundry/routing-release/pull/303 * Potential Breaking Change: In preperation for mtls between gorouter and routing api, add gorouter backends ca to routing-api. Rendering these certs depends on routing-api consuming a link from gorouter. If you have multiple gorouter instance groups (for example in the case of isolation segments), you will need to rename bosh links to prevent the error "Multiple link providers found. For an example of link renaming, see [this ops file](https://github.com/cloudfoundry/cf-deployment/blob/main/operations/test/add-persistent-isolation-segment-router.yml#L74) by @reneighbor in https://github.com/cloudfoundry/routing-release/pull/300 * Ensure gorouter-healthchecker doesn't restart gorouter forever on failure by @geofffranks in https://github.com/cloudfoundry/routing-release/pull/305 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/0.248.0...v0.249.0 v0.248.0 ## What's Changed * Handle nil ca cert in ca_certs property list v0.247.0 ## What's Changed * gorouter template cleans `router.ca_certs` property to remove empty certificates v0.246.0 ## What's Changed * Update `router.ca_certs` property to accept and array of certificates instead of a string block. Thanks @peanball! v0.245.0 ## What's Changed * Gorouter's pre-start script now reserves ports used by other CF components when it increases the number of ephemeral ports available via `/proc/sys/net/ipv4/ip_local_reserved_ports`. This resolves issues when components fail to start up during deploys/monit restarts due to accidental port collisions with outbound traffic from the VM. Thanks @ameowlia ! * Routing-release no longer makes use of the deprecated uaa-go-client, and uses go-uaa instead * The `routing_utils/nats_client` helper utility now supports saving + loading gorouter's routing tables! Thanks @domdom82 ! * Fixed a memory leak with `gorouter` that resulted in HTTP request objects being held open if a client canceled the connection before the App responded. Thanks @geofffranks ! * Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.244.0...v0.245.0 ## ✨ Built with go 1.19.3
silk	3.15.1
smb-volume	3.1.6
smoke-tests	4.8.1	4.8.1 Create bosh final release 4.8.1 4.8.0 Create bosh final release 4.8.0
syslog	12.1.1	v12.1.1 ## What's Changed * Update golang to 1.19.4 Full Changelog: https://github.com/cloudfoundry/syslog-release/compare/v12.1.0...v12.1.1 v12.1.0 ## What's Changed * allow setting tls library by @rroberts2222 in https://github.com/cloudfoundry/syslog-release/pull/105 ## New Contributors * @acrmp made their first contribution in https://github.com/cloudfoundry/syslog-release/pull/102 * @rroberts2222 made their first contribution in https://github.com/cloudfoundry/syslog-release/pull/105 Full Changelog: https://github.com/cloudfoundry/syslog-release/compare/v12.0.6...v12.1.0 v12.0.6 ## What's Changed * update dependencies * update golang to 1.19.3 Full Changelog: https://github.com/cloudfoundry/syslog-release/compare/v12.0.5...v12.0.6 v12.0.5 ## What's Changed * update to golang 1.19.2 Full Changelog: https://github.com/cloudfoundry/syslog-release/compare/v12.0.4...v12.0.5

v3.0.2

Release Date: 12/01/2022

[Feature Improvement] GA CPU Burst Optimization feature. This feature can be enabled via the App Containers tab.
Bump diego to version 2.69.0

Component	Version
ubuntu-jammy stemcell	1.8
bpm	1.1.19
cf-networking	3.14.0
cflinuxfs3	0.321.0
cflinuxfs4	0.28.0
diego	2.69.0
garden-runc	1.22.5
loggregator-agent	6.5.0
mapfs	1.2.12
metrics-discovery	3.2.0
nfs-volume	7.1.8
routing	0.244.0
silk	3.14.0
smb-volume	3.1.6
smoke-tests	4.7.0
syslog	12.0.4

v3.0.1

Release Date: 11/15/2022

[Feature] Add “Max request header size in kb” property to Networking tab to allow operators to specify a limit on the aggregate size of request headers. Requests over this limit receive a 431 status code.
Bump cf-networking to version 3.14.0
Bump garden-runc to version 1.22.5
Bump mapfs to version 1.2.12
Bump nfs-volume to version 7.1.8
Bump routing to version 0.244.0
Bump silk to version 3.14.0
Bump smb-volume to version 3.1.6

Component	Version	Release Notes
ubuntu-jammy stemcell	1.8
bpm	1.1.19
cf-networking	3.14.0
cflinuxfs3	0.321.0
cflinuxfs4	0.28.0
diego	2.66.3
garden-runc	1.22.5
loggregator-agent	6.5.0
mapfs	1.2.12	v1.2.12 ## Changes * Replace `go get` with `go install` (#23) * Update vendored package golang-1-linux (#26) * Update vendored package golang-1-linux (#27) ## Dependencies * mapfs: Updated to v`27f8711`. For more information, see [mapfs](https://github.com/cloudfoundry/mapfs).
metrics-discovery	3.2.0
nfs-volume	7.1.8	v7.1.8 ## Changes * Fix upgrade from 7.1.6 (#253) * Include openldap 2.4.44 blob in release to use it in Xenial (#254) v7.1.7 ## Changes * Add final release 7.1.6 [ci skip] * Bump OpenLDAP package to 2.5.13 LTS, which supports xenial (#241) * Remove libnfsidmap from jammy. Was replaced by new nfs-utils (#220) * Replace `go get` with `go install` (#209) ## Dependencies * bosh-template: Updated to v2.3.0. For more information, see [bosh-template](https://github.com/cloudfoundry/bosh). * gomega: Updated to v1.20.2. For more information, see [gomega](https://github.com/onsi/gomega). * nfsbroker: Updated to v`2e74bed`. For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). * nfsv3driver: Updated to v`e206602`. For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver).
routing	0.244.0	v0.244.0 ## What's Changed * Emit access logs for 431 responses to Loggegator [gorouter PR #331](https://github.com/cloudfoundry/gorouter/pull/331). Thanks @dsabeti ! * Always suspend pruning when nats is down https://github.com/cloudfoundry/routing-release/pull/287. Thanks @ameowlia ! * Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.243.0...v0.244.0 ## ✨ Built with go 1.19.2 v0.243.0 🎉 Bumped to go1.19.2 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.242.0...v0.243.0 v0.242.0 ## What's Changed - `tcp_router` is now more verbose when running `haproxy_reloader` to assist in diagnosting failed reloads. Thanks @geofffranks! 🎉 ([PR 9](https://github.com/cloudfoundry/cf-tcp-router/pull/9)) - `gorouter` will now truncate access logs that exceed loggregator + UDP packet limits, so that we no longer drop access log messages sent to the firehose. Thanks @ameowlia @ebroberson! 😻 ([PR 328](https://github.com/cloudfoundry/gorouter/pull/328) and [PR 329](https://github.com/cloudfoundry/gorouter/pull/329)) Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.241.0...v0.242.0 ## ✨ Built with go 1.18 * despite what the docs/go.version says * because the go 1.18 package is present v0.241.0 🎉 ~~Bumped to go1.19.1~~ * Still using go 1.18 * despite what the docs/go.version says * because the go 1.18 package is present * @plowin submitted [gorouter PR 327](https://github.com/cloudfoundry/gorouter/pull/327) to adjust endpoint-not-unregistered log-level to 'info' Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.240.0...v0.241.0 v0.240.0 ## What's Changed * @geofffranks and @ameowlia added property `router.max_header_bytes` to the gorouter job. * This value controls the maximum number of bytes the gorouter will read parsing the request header's keys and values, including the request line. * It does not limit the size of the request body. * An additional padding of 4096 bytes is added to this value by go. * Requests with larger headers will result in a 431 status code. Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.239.0...v0.240.0 ## Manifest Property Changes \| Job \| Property \| 0.237.0 \| 0.238.0 \| \| --- \| --- \| --- \| --- \| \| `gorouter` \| `router.max_header_bytes` \| didn't exist \| 1048576 (1MB) \| ## ✨ Built with go 1.18.6
silk	3.14.0
smb-volume	3.1.6	v3.1.6 ## Changes * Update vendored package golang-1-linux (#67) * Update vendored package golang-1-linux (#70) ## Dependencies * bosh-template: Updated to v2.3.0. For more information, see [bosh-template](https://github.com/cloudfoundry/bosh). * smbbroker: Updated to v`89a0251`. For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * smbdriver: Updated to v`68ff9d8`. For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver).
smoke-tests	4.7.0
syslog	12.0.4

v3.0.0

Release Date: 10/06/2022

[Feature Improvement] Bump component releases in time for Isolation Segment v3.0
[Feature Improvement] Bump golang to 1.18 for diego, routing, cf-networking, and silk
[Feature Improvement] Gorouter Metrics Toggle
[Breaking Change] HAProxy removed
Bump garden-runc to version 1.22.2
Bump metrics-discovery to version 3.2.0
Bump smoke-tests to version 4.7.0

Component	Version	Release Notes
ubuntu-jammy stemcell	1.8
bpm	1.1.19
cf-networking	3.12.0
cflinuxfs3	0.321.0
cflinuxfs4	0.28.0
diego	2.66.3
garden-runc	1.22.2
loggregator-agent	6.5.0
mapfs	1.2.11
metrics-discovery	3.2.0
nfs-volume	7.1.6
routing	0.239.0
silk	3.12.0
smb-volume	3.1.5
smoke-tests	4.7.0	4.7.0 Create bosh final release 4.7.0
syslog	12.0.4

How to Install

To install Isolation Segment v3.0, see Installing Isolation Segment.

To install Isolation Segment v3.0, you must first install Ops Manager v3.0. For more information, see the Ops Manager documentation.

New Features in Isolation Segment v3.0

There are no new features for Isolation Segment v3.0.

Breaking Changes

Jammy Stemcell Used For All Instance Groups

All VMs that TAS for VMs v3.0 deploys run on the Jammy Jellyfish stemcell described in Jammy Jellyfish Stemcell Support above. Because of this, any add-ons from other tiles or configured in the BOSH Director that are colocated on TAS for VMs VMs do not function unless they support the Jammy Jellyfish stemcell.

Tiles that are compatible TAS for VMs v3.0 already work with Jammy Jellyfish stemcells.

Further, the use of the Jammy Stemcell means TAS now requires an Ops Manager with Jammy support, which means Ops Manager version 2.10.33 or greater.

Isolation Segment v3.0 includes the following breaking changes:

HAProxy is Removed

In Isolation Segment v3.0, HAProxy is removed.

If you are upgrading to Isolation Segment v3.0 from Isolation Segment v2.13 or earlier, you must re-configure the following settings in the Isolation Segment tile before you upgrade:

In the Networking pane:
- If you previously selected HAProxy under TLS termination point, you must select Gorouter instead.
- If you previously configured the HAProxy IPs field, you may need to configure the Gorouter IPs field instead. Depending on how you configured the Allow SSH access to app containers and TCP routing settings, you may also need to configure the SSH Proxy IPs or TCP router IPs fields.
In the Resource Config pane:
- If you previously configured load balancers under the HAProxy, you must configure load balancers under the Router job instead. Depending on how you configured the Allow SSH access to app containers and TCP routing settings in the Networking pane, you may also need to configure load balancers under the Diego Brain or TCP Router jobs.

For more information about configuring these settings, see Configure Networking and Configure Resources in Installing Isolation Segment.

Global Log Rate Limit is Deprecated

The global log rate limit that measures app log rates in lines per second is deprecated in favor of per-app log rate limits that measure app log rates in bytes per second.

If you have configured a global log rate limit in lines per second, VMware recommends that you re-configure your apps to use log rate limits in bytes per second.

If you still want to use the global log rate limit, logs that exceed the log rate limit are immediately dropped. Previously, logs that exceeded the log rate limit were buffered and released at the configured log rate.

For more information about app log rate limits, see App Log Rate Limiting.

Known Issues

There are no known issues for Isolation Segment v3.0.