Here you will find the release notes for Isolation Segment v4.0.
VMware Tanzu Application Service for VMs (TAS for VMs) is certified by the Cloud Foundry Foundation for 2023.
For more information about the Cloud Foundry Certified Provider Program, see How Do I Become a Certified Provider? on the Cloud Foundry website.
Because VMware uses the Percona Distribution for MySQL, expect a time lag between Oracle releasing a MySQL patch and VMware releasing TAS for VMs containing that patch.
Releases
4.0.13
Release Date: 11/29/2023
- [Bug Fix] Suppress syslog-agent warnings for invalid syslog drains
- Bump cf-networking to version
3.38.0 - Bump cflinuxfs3 to version
0.379.0 - Bump cflinuxfs4 to version
1.54.0 - Bump cf-cli to version
1.53.0 - Bump diego to version
2.85.0 - Bump loggregator-agent to version
7.7.2 - Bump mapfs to version
1.2.52 - Bump nfs-volume to version
7.1.44 - Bump silk to version
3.38.0 - Bump smb-volume to version
3.1.43
| Component | Version | Release Notes |
|---|---|---|
| ubuntu-jammy stemcell | 1.309 | |
| bpm | 1.2.11 | |
| cf-networking | 3.38.0 |
v3.38.0
## Changes
- The `policy-server-internal` job's healthcheck endpoint is now available only via localhost.
- Go package dependency bumps
## ✨ Built with go 1.21.4
**Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.37.0...v3.38.0
## Resources
- [Download release 3.38.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.38.0).
v3.37.0
## Changes
- Bump dependencies
## ✨ Built with go 1.21.4
**Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.36.0...v3.37.0
## Resources
- [Download release 3.37.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.37.0).
v3.36.0
## Changes
- Bump golang to 1.21.4
- Package Dependency Bumps
## ✨ Built with go 1.21.4
**Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.35.0...v3.36.0
## Resources
- [Download release 3.36.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.36.0).
|
| cflinuxfs3 | 0.379.0 |
v0.379.0
This release ships with cflinuxfs3 version 0.379.0. For more information, see the [release notes](https://github.com/pivotal-cf/tanzu-cflinuxfs3/releases/tag/0.379.0)
|
| cflinuxfs4 | 1.54.0 | |
| cf-cli | 1.53.0 |
v1.53.0
### This release contains the following versions of the CF CLI
Major version | Prior version | Current version
-- | -- | --
v8 | 8.7.4 | [8.7.5](https://github.com/cloudfoundry/cli/releases/tag/v8.7.5)
v7 | 7.7.4 | [7.7.5](https://github.com/cloudfoundry/cli/releases/tag/v7.7.5)
v6 | 6.53.0 | [6.53.0](https://github.com/cloudfoundry/cli/releases/tag/v6.53.0)
|
| count-cores-indicator | 2.0.0 | |
| diego | 2.85.0 |
v2.85.0
## Changes
- Bump garden Grootfs, Guardian, and idmapper
- Bump golang to 1.21.4
## ✨ Built with go 1.21.4
**Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.84.0...v2.85.0
## Resources
- [Download release v2.85.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.85.0).
|
| garden-runc | 1.44.0 | |
| loggregator-agent | 7.7.2 |
v7.7.2
* Bump dependencies.
### Experimental OTel Collector changes
* Bump otel-collector to v0.89.0. See the [opentelemetry-collector](https://github.com/open-telemetry/opentelemetry-collector/releases/tag/v0.89.0) and [opentelemetry-collector-contrib](https://github.com/open-telemetry/opentelemetry-collector-contrib/releases/tag/v0.89.0) release notes for more details.
v7.7.1
## What's Changed
* Added `warn_on_invalid_drains` property to Windows Syslog Agent to allow warnings for invalid drains to be suppressed.
* Bump to [go1.20.11](https://groups.google.com/g/golang-announce/c/4tU8LZfBFkY/m/d-jSKR_jBwAJ)
* Bump dependencies.
**Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v7.7.0...v7.7.1
|
| mapfs | 1.2.52 |
v1.2.52## Dependencies * **mapfs:** Updated to v`9134eb1`. v1.2.51## Dependencies * **v2:** Updated to v2.13.1. v1.2.50## Changes * Golang: Updated to v1.21.4. (#179) ## Dependencies * **gomega:** Updated to v1.30.0. |
| metrics-discovery | 3.2.20 | |
| nfs-volume | 7.1.44 |
v7.1.44## Changes * +Golang: Updated to v1.21.4 (#662) * Bump Openldap to v2.6.6 (#659) ## Dependencies * **gomega:** Updated to v1.30.0. v7.1.42
## Changes
* +Golang: Updated to v1.21.4 (#661)
* Bump openssl- from to 3.1.4 (#657)
|
| routing | 0.284.0 | |
| silk | 3.38.0 |
v3.38.0
## Changes
- Go package dependency bumps
## ✨ Built with go 1.21.4
**Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.37.0...v3.38.0
## Resources
- [Download release 3.38.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.38.0).
v3.37.0
## Changes
- [Remove unused property rep_listen_addr_admin](https://github.com/cloudfoundry/silk-release/commit/ee98f5a9d1e1f7c82a3c8055b0e5aacf087538f8)
## Bosh Job Spec changes:
```diff
diff --git a/jobs/silk-daemon/spec b/jobs/silk-daemon/spec
index 7a070202..70be43f2 100644
--- a/jobs/silk-daemon/spec
+++ b/jobs/silk-daemon/spec
@@ -36,10 +36,6 @@ properties:
description: "Host port used for receiving VXLAN packets"
default: 4789
- rep_listen_addr_admin:
- description: "Admin endpoint on diego rep. Silk daemon job drain waits for the rep to exit before tearing down the network. See diego.rep.listen_addr_admin"
- default: 127.0.0.1:1800
-
partition_tolerance_hours:
description: "When silk controller is unavailable, silk daemon will remain healthy and allow creation of new containers for this number of hours. Should be no larger than cf_networking.subnet_lease_expiration_hours."
default: 168
```
## ✨ Built with go 1.21.4
**Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.35.0...v3.37.0
## Resources
- [Download release 3.37.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.37.0).
v3.36.0
## Changes
- Bump golang to 1.21.4
- Package dependency bumps
## ✨ Built with go 1.21.4
**Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.35.0...v3.36.0
## Resources
- [Download release 3.36.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.36.0).
|
| smb-volume | 3.1.43 |
v3.1.43## Dependencies * **smbbroker:** Updated to v`0733e9b`. v3.1.42## Dependencies * **v2:** Updated to v2.13.1. v3.1.41## Changes * +Golang: Updated to v1.21.4 (#278) ## Dependencies * **gomega:** Updated to v1.30.0. |
| smoke-tests | 4.8.4 | |
| syslog | 12.2.0 |
4.0.12
Release Date: 11/10/2023
- [Feature] Expose a custom environment identifier on component logs forwarded via syslog
- [Feature Improvement] Allow to configure w3c tracing headers in router
- [Bug Fix] Remove inoperative errand syslog drains
- Bump bpm to version
1.2.11 - Bump cf-networking to version
3.35.0 - Bump cflinuxfs3 to version
0.378.0 - Bump cflinuxfs4 to version
1.50.0 - Bump diego to version
2.84.0 - Bump garden-runc to version
1.44.0 - Bump loggregator-agent to version
7.7.0 - Bump mapfs to version
1.2.49 - Bump metrics-discovery to version
3.2.20 - Bump nfs-volume to version
7.1.41 - Bump routing to version
0.284.0 - Bump silk to version
3.35.0 - Bump smb-volume to version
3.1.40 - Bump syslog to version
12.2.0
| Component | Version | Release Notes |
|---|---|---|
| ubuntu-jammy stemcell | 1.289 | |
| bpm | 1.2.11 | |
| cf-networking | 3.35.0 |
v3.35.0
## Changes
- Increase default value for `max_policies_per_app_source` from 50 to 150. Thanks SO MUCH @ameowlia !
- 🐛 Bug fix: update the policy-server `last_updated` timestamp to have microsecond precision. Previously it had second level precision, this created a race condition when multiple c2c policies were updated at nearly the same time, but the vxlan-policy-agent would only pick up the first update. Thank you @geofffranks [for this PR](https://github.com/cloudfoundry/cf-networking-release/pull/247)!
## Bosh Job Spec changes:
```diff
diff --git a/jobs/policy-server/spec b/jobs/policy-server/spec
index a6043136..0d9f5157 100644
--- a/jobs/policy-server/spec
+++ b/jobs/policy-server/spec
@@ -58,7 +58,7 @@ properties:
max_policies_per_app_source:
description: "Maximum policies a space developer may configure for an application source. Does not affect admin users."
- default: 50
+ default: 150
```
## ✨ Built with go 1.21.3
**Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.34.0...v3.35.0
## Resources
- [Download release 3.35.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.35.0).
|
| cflinuxfs3 | 0.378.0 |
v0.378.0
This release ships with cflinuxfs3 version 0.378.0. For more information, see the [release notes](https://github.com/pivotal-cf/tanzu-cflinuxfs3/releases/tag/0.378.0)
v0.377.0
This release ships with cflinuxfs3 version 0.377.0. For more information, see the [release notes](https://github.com/pivotal-cf/tanzu-cflinuxfs3/releases/tag/0.377.0)
|
| cflinuxfs4 | 1.50.0 | |
| cf-cli | 1.50.0 | |
| count-cores-indicator | 2.0.0 | |
| diego | 2.84.0 |
v2.84.0
## Changes
- Bumps envoy to [v1.28.0](https://github.com/envoyproxy/envoy/releases/tag/v1.28.0)
- BBS DesiredLRPHandler now sends Stop/Update LRP requests to rep in parallel - Thanks @vlast3k!
- Log rate limit metrics are no longer generated for tasks - Thanks @mkocher!
- App Logs will now emit messages for when they run pre-start scripts and when they invoke the startup command, to make troubleshooting just that much easier - Thanks @Gerg!
## Bosh Job Spec changes:
```diff
diff --git a/jobs/vizzini/spec b/jobs/vizzini/spec
index 6ff53c654..a3bbc5fb2 100644
--- a/jobs/vizzini/spec
+++ b/jobs/vizzini/spec
@@ -1,7 +1,7 @@
---
name: vizzini
packages:
- - golang-1-linux
+ - golang-1.21-linux
- vizzini
templates:
```
## ✨ Built with go 1.21.3
**Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.83.0...v2.84.0
## Resources
- [Download release v2.84.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.84.0).
|
| garden-runc | 1.44.0 |
v1.44.0
## Changes
- Change user for grootfs test
- Bump golang to 1.21.4
## ✨ Built with go 1.21.4
**Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.43.0...v1.44.0
## Resources
- [Download release v1.44.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.44.0).
v1.43.0
## Changes
- The `garden-healthchecker` process was found to be too aggressive when evaluating and acting upon failed healthchecks. It has been removed.
## Bosh Job Spec changes:
```diff
diff --git a/jobs/garden/spec b/jobs/garden/spec
index 125909ed..0d2a8fb4 100644
--- a/jobs/garden/spec
+++ b/jobs/garden/spec
@@ -23,7 +23,6 @@ templates:
bin/containerd_utils.erb: bin/containerd_utils
bin/pre-start: bin/pre-start
bin/post-start: bin/post-start
- config/healthchecker.yml.erb: config/healthchecker.yml
packages:
- guardian
@@ -309,7 +308,3 @@ properties:
logging.format.timestamp:
description: "Format for timestamp in component logs. Valid values are 'unix-epoch' and 'rfc3339'."
default: "unix-epoch"
-
- healthchecker.failure_counter_file:
- description: "File used by the healthchecker to monitor consecutive failures."
- default: /var/vcap/data/garden/counters/consecutive_healthchecker_failures.count
```
## ✨ Built with go 1.21.3
**Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.42.0...v1.43.0
## Resources
- [Download release v1.43.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.43.0).
v1.42.0
## Changes
- Bump golang dependencies
- Bump ruby testing dependencies
## ✨ Built with go 1.21.3
**Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.41.0...v1.42.0
## Resources
- [Download release v1.42.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.42.0).
|
| loggregator-agent | 7.7.0 |
v7.7.0
## What's Changed
* Added `warn_on_invalid_drains` property to Syslog Agent to allow warnings for invalid drains to be suppressed.
* Bump dependencies.
### Experimental OTel Collector changes
* Bump otel-collector to v0.88.0. See the [opentelemetry-collector](https://github.com/open-telemetry/opentelemetry-collector/releases/tag/v0.88.0) and [opentelemetry-collector-contrib](https://github.com/open-telemetry/opentelemetry-collector-contrib/releases/tag/v0.88.0) release notes for more details.
**Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v7.6.4...v7.7.0
|
| mapfs | 1.2.49 |
v1.2.49## Dependencies * **mapfs:** Updated to v`039d1ca`. v1.2.48## Dependencies * **gomega:** Updated to v1.29.0. |
| metrics-discovery | 3.2.20 |
v3.2.20
## What's Changed
* Bump to [go1.20.11](https://groups.google.com/g/golang-announce/c/4tU8LZfBFkY/m/d-jSKR_jBwAJ)
**Full Changelog**: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.19...v3.2.20
v3.2.19
## What's Changed
* Bump dependencies
**Full Changelog**: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.18...v3.2.19
|
| nfs-volume | 7.1.41 |
v7.1.41## Dependencies * **gomega:** Updated to v1.29.0. v7.1.40## Dependencies * **gomega:** Updated to v1.28.1. |
| routing | 0.284.0 |
v0.284.0
## Changes
- Upgrade to Golang 1.21.4
- Bump dependencies
## ✨ Built with go 1.21.4
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.283.0...v0.284.0
## Resources
- [Download release 0.284.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.284.0).
|
| silk | 3.35.0 |
v3.35.0
## Changes
- no big changes :)
## ✨ Built with go 1.21.3
**Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.34.0...v3.35.0
## Resources
- [Download release 3.35.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.35.0).
|
| smb-volume | 3.1.40 |
v3.1.40## Dependencies * **smbbroker:** Updated to v`c94aea7`. v3.1.39## Dependencies * **gomega:** Updated to v1.29.0. |
| smoke-tests | 4.8.4 | |
| syslog | 12.2.0 |
v12.2.0
## What's Changed
### Features
* Add a new, optional, structured data param key, `environment`, to `instance@47450`. This is useful for cases where log lines should be tagged with an operator provided string but need to vary from the director name.
### Maintenance
* Bump blackbox dependencies.
**Full Changelog**: https://github.com/cloudfoundry/syslog-release/compare/v12.1.10...v12.2.0
v12.1.10
## What's Changed
* Update golang packages to use go1.20.10
**Full Changelog**: https://github.com/cloudfoundry/syslog-release/compare/v12.1.9...v12.1.10
|
4.0.11
Release Date: 10/25/2023
- [Feature Improvement] Option to enable w3c tracing headers in router
- [Bug Fix] Prevent retired app instances from receiving traffic by ensuring rep emits events to cleanup routes when
cf restart-app-instanceis invoked. - [Feature] Forwarder Agent emits a new metric, egress_expired_total, per egress destination to track the number of envelopes dropped from that designation’s diode
- Bump bpm to version
1.2.9 - Bump cf-networking to version
3.34.0 - Bump cflinuxfs3 to version
0.376.0 - Bump cflinuxfs4 to version
1.46.0 - Bump cf-cli to version
1.50.0 - Bump diego to version
2.83.0 - Bump garden-runc to version
1.41.0 - Bump loggregator-agent to version
7.6.4 - Bump mapfs to version
1.2.47 - Bump metrics-discovery to version
3.2.18 - Bump nfs-volume to version
7.1.38 - Bump routing to version
0.283.0 - Bump silk to version
3.34.0 - Bump smb-volume to version
3.1.38 - Bump syslog to version
12.1.9
| Component | Version | Release Notes |
|---|---|---|
| ubuntu-jammy stemcell | 1.260 | |
| bpm | 1.2.9 | |
| cf-networking | 3.34.0 |
v3.34.0
## Changes
- Bumped to golang 1.21.3
- Testing updates
- CI Enhancements
- Package dependency bumps
- The `proxy` test/example app's `/dumprequest` endpoint will now return headers back to client via the `returnHeaders` query parameter. It also adds an `X-Proxy-Settable-Debug-Header` header if the upstream server doesn't set it explicitly, and `X-Proxy-Immutable-Debug-Header` which will override any value set by upstream servers.
## Bosh Job Spec changes:
```diff
diff --git a/jobs/performance-test-sd/spec b/jobs/performance-test-sd/spec
index 0223d87e..c89d50f5 100644
--- a/jobs/performance-test-sd/spec
+++ b/jobs/performance-test-sd/spec
@@ -6,7 +6,7 @@ templates:
config.json.erb: config.json
packages:
- - golang-1.20-linux
+ - golang-1.21-linux
- performance-test-sd
consumes:
```
## ✨ Built with go 1.21.3
**Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.33.0...v3.34.0
## Resources
- [Download release 3.34.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.34.0).
v3.33.0
## Changes
- Bumped to golang 1.20.7
- The `garden-cni` job's `garden-external-networker` has been updated to support returning interface name data handling CNI v0.4.0 data from CNI plugins it wraps. This allows for garden-runc-release to make use of the interface info for pulling networking statistics. (https://github.com/cloudfoundry/cf-networking-release/pull/229)
- Thanks @JVecsei1, @geigerj0!
## ✨ Built with go 1.20.7
**Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.32.0...v3.33.0
## Resources
- [Download release v3.33.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.33.0).
|
| cflinuxfs3 | 0.376.0 |
v0.376.0
This release ships with cflinuxfs3 version 0.376.0. For more information, see the [release notes](https://github.com/pivotal-cf/tanzu-cflinuxfs3/releases/tag/0.376.0)
|
| cflinuxfs4 | 1.46.0 | |
| cf-cli | 1.50.0 |
v1.50.0
### This release contains the following versions of the CF CLI
Major version | Prior version | Current version
-- | -- | --
v8 | 8.7.3 | [8.7.4](https://github.com/cloudfoundry/cli/releases/tag/v8.7.4)
v7 | 7.7.3 | [7.7.4](https://github.com/cloudfoundry/cli/releases/tag/v7.7.4)
v6 | 6.53.0 | [6.53.0](https://github.com/cloudfoundry/cli/releases/tag/v6.53.0)
v1.49.0
### This release contains the following versions of the CF CLI
Major version | Prior version | Current version
-- | -- | --
v8 | 8.7.2 | [8.7.3](https://github.com/cloudfoundry/cli/releases/tag/v8.7.3)
v7 | 7.7.2 | [7.7.3](https://github.com/cloudfoundry/cli/releases/tag/v7.7.3)
v6 | 6.53.0 | [6.53.0](https://github.com/cloudfoundry/cli/releases/tag/v6.53.0)
v1.47.0
### This release contains the following versions of the CF CLI
Major version | Prior version | Current version
-- | -- | --
v8 | 8.7.1 | [8.7.2](https://github.com/cloudfoundry/cli/releases/tag/v8.7.2)
v7 | 7.7.1 | [7.7.2](https://github.com/cloudfoundry/cli/releases/tag/v7.7.2)
v6 | 6.53.0 | [6.53.0](https://github.com/cloudfoundry/cli/releases/tag/v6.53.0)
|
| count-cores-indicator | 2.0.0 | |
| diego | 2.83.0 |
v2.83.0
## Changes
- **[Bug Fix]** Prevent retired app instances from receiving traffic by ensuring rep emits events to cleanup routes when RetireActualLRP is called. (https://github.com/cloudfoundry/bbs/pull/72) (Fixes #820)
- Thanks @vlast3k!
- Cleans up stderr output from rep's `setup_mounted_data_dirs` script (#689)
- Thanks @romain-dartigues!
- Docs updates for the container metrics changes from 2.82.0 (https://github.com/cloudfoundry/diego-release/pull/813)
- Thanks @geigerj0!
- Bump Golang to 1.21.3
- Bump Envoy to 1.25.9
- Bump Package Dependencies
- CI Enhancments
## ✨ Built with go 1.21.3
**Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.82.0...v2.83.0
## Resources
- [Download release v2.83.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.83.0).
v2.82.0
## Changes
- Diego now supports reading container networking metrics from garden, and publishing them along with other app container metrics. (https://github.com/cloudfoundry/diego-logging-client/pull/82, https://github.com/cloudfoundry/executor/pull/83)
- Requires [garden-runc-release v1.38.0](https://github.com/cloudfoundry/garden-runc-release/releases/tag/v1.38.0) and [cf-networking-release v3.33.0](https://github.com/cloudfoundry/cf-networking-release/releases/tag/v3.33.0).
- Thanks @geigerj0 and @jvecsei1!
- Removed usage of the `code.cloudfoundry.org/systemcerts` package in favor of golang's builtin functionality.
- Bumped to golang 1.21.0
## ✨ Built with go 1.21.0
**Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.81.0...v2.82.0
## Resources
- [Download release v2.82.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.82.0).
|
| garden-runc | 1.41.0 |
v1.41.0
## Changes
- Bump go to 1.21.3
## ✨ Built with go 1.21.3
**Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.40.0...v1.41.0
## Resources
- [Download release v1.41.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.41.0).
v1.40.0
## Changes
- Bump Golang to 1.21.1
## ✨ Built with go 1.21.1
**Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.39.0...v1.40.0
## Resources
- [Download release v1.40.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.40.0).
v1.39.0
## Changes
- Garden on Linux now supports propagating extended attributes from root filesystem images + when adding filesystem data to an existing container.
- Bumped to golang 1.21.1
## ✨ Built with go 1.21.1
**Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.38.0...v1.39.0
## Resources
- [Download release v1.39.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.39.0).
v1.38.0
## Changes
- Garden now supports advertising container networking metrics on Linux containers via the `garden.enable_container_network_metrics` property.
- Requires [cf-networking-release v3.33.0](https://github.com/cloudfoundry/cf-networking-release/releases/tag/v3.33.0) or newer, and [diego v2.82.0](https://github.com/cloudfoundry/diego-release/releases/tag/v2.82.0) or newer.
- Thanks @JVecsei1 and @geigerj0!!
## Bosh Job Spec changes:
```diff
diff --git a/jobs/garden/spec b/jobs/garden/spec
index 3bffb2f7..125909ed 100644
--- a/jobs/garden/spec
+++ b/jobs/garden/spec
@@ -119,6 +119,10 @@ properties:
description: "Additional hosts file entries to be used in containers."
default: []
+ garden.enable_container_network_metrics:
+ description: "Enable container network metrics. This feature is only available on Linux."
+ default: false
+
garden.insecure_docker_registry_list:
description: "DEPRECATED in favour of grootfs property."
default: []
```
## ✨ Built with go 1.20.7
**Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.37.0...v1.38.0
## Resources
- [Download release v1.38.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.38.0).
|
| loggregator-agent | 7.6.4 |
v7.6.4
## What's Changed
* Feat(Forwarder Agent): Add a counter to track drops from egress diodes by @ctlong in https://github.com/cloudfoundry/loggregator-agent-release/pull/399
* Bump golang to v1.20.10
**Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v7.6.3...v7.6.4
v7.6.3
## What's Changed
* Bump dependencies
### Experimental OTel Collector changes
* Forwarder Agent now batches metrics sent to the co-located OTel Collector to improve performance.
**Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v7.6.2...v7.6.3
v7.6.2
## What's Changed
* Bump to [go1.20.8](https://groups.google.com/g/golang-announce/c/Fm51GRLNRvM/m/F5bwBlXMAQAJ)
* Bump dependencies
**Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v7.6.1...v7.6.2
|
| mapfs | 1.2.47 |
v1.2.47## Dependencies * **mapfs:** Updated to v`9fead8e`. v1.2.46## Changes * Golang: Updated to v1.21.3 (#162) ## Dependencies * **v2:** Updated to v2.13.0. v1.2.45## Changes * Golang: Updated to v1.21.1. (#149) ## Dependencies * **gomega:** Updated to v1.28.0. v1.2.41## Changes ## Dependencies * **mapfs:** Updated to v`dd24f4a`. v1.2.40## Dependencies * **mapfs:** Updated to v`1eb4e0c`. v1.2.39## Dependencies * **mapfs:** Updated to v`799c2e9`. v1.2.38## Changes * Golang: Updated to v1.21.1. (#140) ## Dependencies * **mapfs:** Updated to v`641ed35`. v1.2.37## Changes * Golang: Updated to v1.21.0. (#135) ## Dependencies * **mapfs:** Updated to v`9758d39`. v1.2.36## Dependencies * **v2:** Updated to v2.12.0. |
| metrics-discovery | 3.2.18 |
v3.2.18
## What's Changed
* Bump golang to v1.20.10
**Full Changelog**: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.17...v3.2.18
v3.2.17
## What's Changed
* Don't configure prom scraper to scrape when metrics-discovery-registrar or metrics-agent are disabled.
* Bump dependencies
**Full Changelog**: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.16...v3.2.17
|
| nfs-volume | 7.1.38 |
v7.1.38## Dependencies * **nfsbroker:** Updated to v`08fd348`. v7.1.37## Changes * Golang: Updated to v1.21.3 (#607) ## Dependencies * **gomega:** Updated to v1.28.0. v7.1.35## Dependencies * **nfsbroker:** Updated to v`4fe73b5`. v7.1.34## Changes ## Dependencies * **nfsbroker:** Updated to v`75e8459`. v7.1.33## Changes * +Golang: Updated to v1.21.1 (#558) ## Dependencies * **nfsbroker:** Updated to v`4974c87`. v7.1.32## Changes * +Golang: Updated to v1.21.0 (#541) * Update README.md (#549) ## Dependencies * **nfsbroker:** Updated to v`64e07ac`. v7.1.31## Changes ## Dependencies * **nfsbroker:** Updated to v`ca7c06c`. |
| routing | 0.283.0 |
v0.283.0
## Changes
- Adds missing timings to non-http backend requests, e.g. websockets. (https://github.com/cloudfoundry/gorouter/pull/363) (Fixes: https://github.com/cloudfoundry/routing-release/issues/278)
- Thanks @domdom82!
- Adds ability for gorouter to verify mTLS Client Certificate metadata (https://github.com/cloudfoundry/routing-release/pull/355)
- Thanks @peanball!
- CI Enhancements and updates
- Package Dependency bumps
## Bosh Job Spec changes:
```diff
diff --git a/jobs/gorouter/spec b/jobs/gorouter/spec
index 2bb394e9..e9a9dd73 100644
--- a/jobs/gorouter/spec
+++ b/jobs/gorouter/spec
@@ -415,7 +415,7 @@ properties:
default: 5
websocket_dial_timeout_in_seconds:
description: |
- Maximum time in seconds for gorouter to establish a websocket upgrade for the websocket ForwardIO connection with a backend.
+ Maximum time in seconds for gorouter to establish a websocket upgrade for the websocket ForwardIO connection with a backend.
This timeout comes before `tls_handshake_timeout_in_seconds` and `request_timeout_in_seconds`. When not set, defaults to `endpoint_dial_timeout_in_seconds`.
default: endpoint_dial_timeout_in_seconds
tls_handshake_timeout_in_seconds:
@@ -518,6 +518,36 @@ properties:
description: "The number of file descriptors a router can have open at one time"
default: 100000
+ router.enable_verify_client_certificate_metadata:
+ description: |
+ Enable additional client certificate verification via verify_client_certificate_metadata (see below).
+ default: false
+ router.verify_client_certificate_metadata:
+ description: |
+ Additional client certificate verification, after the certificate was validated using the regular mTLS mechanism and is issued using one of the CAs in `client_ca_certs`.
+ The additional verification limits the allowed client certificates for a given signing CA (identified by its distinguished name) to certificates with subjects provided in the list of valid subjects. Within the certificate chain there may be more than one CA certificates (e.g. intermediate CA certificates). The `issuer_in_chain` must match one of the CA certificates in the chain.
+ Each list entry contains an issuer_in_chain with a corresponding list of valid subjects. Each issuer_in_chain must match one of the certificates in `client_ca_certs`. When an issuer_in_chain is defined that does not match, this raises an error during templating time and at startup in gorouter.
+ - issuer_in_chain:
+ common_name: ""
+ serial_number: ""
+ country: []
+ organization: []
+ organizational_unit: []
+ locality: []
+ province: []
+ street_address: []
+ postal_code: []
+ valid_cert_subjects:
+ - common_name: ""
+ serial_number: ""
+ country: []
+ organization: []
+ organizational_unit: []
+ locality: []
+ province: []
+ street_address: []
+ postal_code: []
+ default: []
healthchecker.failure_counter_file:
description: "File used by the healthchecker to monitor consecutive failures."
default: /var/vcap/data/gorouter/counters/consecutive_healthchecker_failures.count
```
## ✨ Built with go 1.21.3
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.282.0...v0.283.0
## Resources
- [Download release 0.283.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.283.0).
|
| silk | 3.34.0 |
v3.34.0
## Changes
- Bumped to golang 1.21.3
- Fixes a crash in `silk-datastore-syncer` when garden listed containers not present in the CNI metadata file managed by silk.
- CI Enhancements
- Package dependency bumps
## ✨ Built with go 1.21.3
**Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.33.0...v3.34.0
## Resources
- [Download release 3.34.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.34.0).
v3.33.0
## Changes
- Bumped to golang 1.20.7
## ✨ Built with go 1.20.7
**Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.32.0...v3.33.0
## Resources
- [Download release v3.33.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.33.0).
|
| smb-volume | 3.1.38 |
v3.1.38## Dependencies * **v2:** Updated to v2.13.0. v3.1.37## Changes * Golang: Updated to v1.21.3 (#254) ## Dependencies * **smbbroker:** Updated to v`47d1912`. v3.1.36## Changes * +Golang: Updated to v1.21.2 (#247) ## Dependencies * **smbbroker:** Updated to v`af9461b`. v3.1.35## Dependencies * **smbbroker:** Updated to v`6d1303d`. v3.1.34## Dependencies * **smbbroker:** Updated to v`91e5d63`. v3.1.33## Changes * fix race condition (#225) ## Dependencies * **smbbroker:** Updated to v`4be065e`. v3.1.32## Changes * +Golang: Updated to v1.21.0 (#220) * Add final release 3.1.31 [ci skip] ## Dependencies * **smbbroker:** Updated to v`c6764c2`. v3.1.31## Changes ## Dependencies * **smbbroker:** Updated to v`d8cd6a7`. |
| smoke-tests | 4.8.4 | |
| syslog | 12.1.9 |
v12.1.9
## What's Changed
* Update golang packages to use go1.20.8
**Full Changelog**: https://github.com/cloudfoundry/syslog-release/compare/v12.1.8...v12.1.9
|
4.0.10
Release Date: 10/12/2023
- [Security Fix] Bump routing-release to v0.282.0
- Bump cflinuxfs3 to version
0.375.0 - Bump cflinuxfs4 to version
1.44.0 - Bump routing to version
0.282.0
| Component | Version | Release Notes |
|---|---|---|
| ubuntu-jammy stemcell | 1.250 | |
| bpm | 1.2.6 | |
| cf-networking | 3.32.0 | |
| cflinuxfs3 | 0.375.0 |
v0.375.0
This release ships with cflinuxfs3 version 0.375.0. For more information, see the [release notes](https://github.com/pivotal-cf/tanzu-cflinuxfs3/releases/tag/0.375.0)
|
| cflinuxfs4 | 1.44.0 | |
| cf-cli | 1.45.0 | |
| count-cores-indicator | 2.0.0 | |
| diego | 2.81.0 | |
| garden-runc | 1.37.0 | |
| loggregator-agent | 7.6.1 | |
| mapfs | 1.2.35 | |
| metrics-discovery | 3.2.16 | |
| nfs-volume | 7.1.30 | |
| routing | 0.282.0 |
v0.282.0
## Changes
- Bumped to golang 1.21.3
- CI Enhancements and updates
- Package Dependency bumps
- Resolves [gorouter/#346](https://github.com/cloudfoundry/routing-release/issues/346) by validating trace ID length prior to parsing it as a UUID
## ✨ Built with go 1.21.3
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.281.0...0.282.0
## Resources
- [Download release 0.282.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.282.0).
v0.281.0
## Changes
- Check trace ID length before parsing the UUID (#365)
- Bump go to 1.21.1
## ✨ Built with go 1.21.1
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.280.0...v0.281.0
## Resources
- [Download release 0.281.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.281.0).
v0.280.0
## Changes
- Bumped CF CLI to v8.7.2
- Gorouter now logs the IP of the NATS server its connecting to/disconnecting from (instead of just the BOSH DNS name) for troubleshooting clarity. Thanks @domdom82!!
## ✨ Built with go 1.21.0
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.279.0...v0.280.0
## Resources
- [Download release v0.280.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.280.0).
v0.279.0
## Changes
- Bumped to golang 1.21.0!
- Refactor of proxy config properties. Thanks @domdom82!
## Bosh Job Spec changes:
```diff
diff --git a/jobs/acceptance_tests/spec b/jobs/acceptance_tests/spec
index db508ca3..e1a6a9ae 100644
--- a/jobs/acceptance_tests/spec
+++ b/jobs/acceptance_tests/spec
@@ -7,7 +7,7 @@ templates:
bpm.yml.erb: config/bpm.yml
packages:
- - golang-1.20-linux
+ - golang-1.21-linux
- acceptance_tests
- rtr
- cf-cli-8-linux
diff --git a/jobs/smoke_tests/spec b/jobs/smoke_tests/spec
index 5776a9c8..b230192b 100644
--- a/jobs/smoke_tests/spec
+++ b/jobs/smoke_tests/spec
@@ -7,7 +7,7 @@ templates:
bpm.yml.erb: config/bpm.yml
packages:
- - golang-1.20-linux
+ - golang-1.21-linux
- acceptance_tests
- cf-cli-8-linux
```
## ✨ Built with go 1.21.0
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.278.0...v0.279.0
## Resources
- [Download release v0.279.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.279.0).
|
| silk | 3.32.0 | |
| smb-volume | 3.1.30 | |
| smoke-tests | 4.8.4 | |
| syslog | 12.1.8 |
4.0.9
Release Date: 09/26/2023
- [Security Fix] Bump smoke-tests to address Go CVE-2023-39533
- [Bug Fix] Fixed an issue preventing processes in app containers from running the ping command
| Component | Version |
|---|---|
| ubuntu-jammy stemcell | 1.222 |
| bpm | 1.2.6 |
| cf-networking | 3.32.0 |
| cflinuxfs3 | 0.374.0 |
| cflinuxfs4 | 1.36.0 |
| cf-cli | 1.45.0 |
| count-cores-indicator | 2.0.0 |
| diego | 2.81.0 |
| garden-runc | 1.37.0 |
| loggregator-agent | 7.6.1 |
| mapfs | 1.2.35 |
| metrics-discovery | 3.2.16 |
| nfs-volume | 7.1.30 |
| routing | 0.278.0 |
| silk | 3.32.0 |
| smb-volume | 3.1.30 |
| smoke-tests | 4.8.4 |
| syslog | 12.1.8 |
4.0.8
Release Date: 09/11/2023
- [Security Fix] Continue to forward relevant headers by removing hop-by-hop headers that could interfere with gorouter when proxying client requests
- Bump bpm to version
1.2.6 - Bump cflinuxfs3 to version
0.373.0 - Bump cflinuxfs4 to version
1.32.0 - Bump diego to version
2.81.0 - Bump loggregator-agent to version
7.6.1 - Bump metrics-discovery to version
3.2.14 - Bump nfs-volume to version
7.1.30 - Bump routing to version
0.278.0 - Bump syslog to version
12.1.8
| Component | Version | Release Notes |
|---|---|---|
| ubuntu-jammy stemcell | 1.207 | |
| bpm | 1.2.6 | |
| cf-networking | 3.32.0 | |
| cflinuxfs3 | 0.373.0 |
v0.373.0
This release ships with cflinuxfs3 version 0.373.0. For more information, see the [release notes](https://github.com/pivotal-cf/tanzu-cflinuxfs3/releases/tag/0.373.0)
|
| cflinuxfs4 | 1.32.0 | |
| cf-cli | 1.45.0 | |
| count-cores-indicator | 2.0.0 | |
| diego | 2.81.0 |
v2.81.0
## Changes
- Healthchecks for process startup have been renamed from "readiness" to "startup" to better indicate that it is the initial liveness check to ensure the process has started. After completing, it is superceded by the liveness check, which has had no changes.
- Adds support for "readiness" checks on processes. The purpose of readiness checks are to determine whether a process is capable of serving traffic or not. This is contrasted now with liveness checks which determine if the process is in a state that requires it to be restarted. Readiness checks can be used to pull a process out of service when they fail, while not restarting the process. Once readiness is passing again, the process will be re-added into the service pool. Removal/addition of processes to the service pool is done via route-emitter.
- `cfdot actual-lrps` now behaves in a more expected behavior regarding the display of `host_tls_proxy_port`. It should always be preset, even if the value is `0`.
- Bumped to golang 1.20.7.
## ✨ Built with go 1.20.7
**Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.80.0...v2.81.0
## Resources
- [Download release v2.81.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.81.0).
|
| garden-runc | 1.37.0 | |
| loggregator-agent | 7.6.1 |
v7.6.1
## What's Changed
### Experimental OTel Collector changes
* Prevent prometheus exporter from claiming BBS API port. For more context, see here: https://github.com/cloudfoundry/diego-release/issues/812
**Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v7.6.0...v7.6.1
v7.6.0
## What's Changed
### Experimental OTel Collector changes
* ⚠️ Do not forward Timers ⚠️
* Set the `service_version` for OTel Collector telemetry to v0.1.0
* Add the prometheus exporter
* Bump collector to v0.83.0
**Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v7.5.0...v7.6.0
v7.5.0
## What's Changed
* Bump dependencies
#### Experimental OTel Collector changes
* Bump to OTel Collector v0.82.0
* ⚠️ Remove all the exporters except for `otlp` and `file` ⚠️
* ⚠️ Change default for the OTel Collector port for gRPC ingress to `9100` ⚠️
* Reserve `cf-internal` prefix for internal metric exporters for the future
* Configure Prom Scraper to scrape OTel Collector metrics
**Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v7.4.0...v7.5.0
|
| mapfs | 1.2.35 | |
| metrics-discovery | 3.2.14 |
v3.2.14
## What's Changed
* add disable property to metrics-agent & metrics-discovery-registrar by @mkocher in https://github.com/cloudfoundry/metrics-discovery-release/pull/169
* Bump dependencies
**Full Changelog**: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.13...v3.2.14
v3.2.13
## What's Changed
* Fix metrics-agent on windows
* Bump to [go1.20.7](https://groups.google.com/g/golang-announce/c/X0b6CsSAaYI/m/Efv5DbZ9AwAJ)
* Bump dependencies
**Full Changelog**: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.12...v3.2.13
|
| nfs-volume | 7.1.30 |
v7.1.30## Dependencies * **nfsbroker:** Updated to v`90b8c05`. |
| routing | 0.278.0 |
v0.278.0
## Changes
- Continue to forward relevant headers by removing hop-by-hop headers that could interfere with gorouter when proxying client requests
- See: https://github.com/cloudfoundry/gorouter/pull/356, https://github.com/cloudfoundry/routing-release/pull/331
- Go mod dependency updates
## Bosh Job Spec changes:
```diff
diff --git a/jobs/gorouter/spec b/jobs/gorouter/spec
index a14133ed..2bb394e9 100644
--- a/jobs/gorouter/spec
+++ b/jobs/gorouter/spec
@@ -282,6 +282,27 @@ properties:
example:
- name: X-Vcap-Request-Id
- name: Accept-Ranges
+ router.hop_by_hop_headers_to_filter:
+ description: |
+ (optional, array value) List of HTTP Headers that are filtered for
+ Hop-By-Hop Connection header.
+ When clients make requests to the gorouter and the gorouter proxies
+ their request, these HTTP Headers will be automatically be removed from
+ the request's Connection header and sent as normal headers to the
+ target backend. This list *also* specificies the Headers that can be
+ returned by the backend; i.e. if a client attempts to send one of these
+ Headers in their Connection Header to gorouter and it's *NOT* filtered,
+ the header will *NOT* be returned to client properly after proxying the
+ request.
+ default:
+ - X-Forwarded-For
+ - X-Forwarded-Proto
+ - B3
+ - X-B3
+ - X-B3-SpanID
+ - X-B3-TraceID
+ - X-Request-Start
+ - X-Forwarded-Client-Cert
router.frontend_idle_timeout:
description: |
(optional, integer) Duration in seconds to maintain an open connection when client supports keep-alive.
```
## ✨ Built with go 1.20.7
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.277.0...v0.278.0
## Resources
- [Download release v0.278.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.278.0).
|
| silk | 3.32.0 | |
| smb-volume | 3.1.30 | |
| smoke-tests | 4.8.3 | |
| syslog | 12.1.8 |
v12.1.8
## What's Changed
* Bump Go to v1.20.7
**Full Changelog**: https://github.com/cloudfoundry/syslog-release/compare/v12.1.7...v12.1.8
|
4.0.7
Release Date: 08/22/2023
- [Bug Fix] Disable silk-datastore-syncer when using NCP
- [Bug Fix] Garden Healthchecks have been re-enabled after fixing a bug during deployments causing failed diego-cells.
- Bump cflinuxfs4 to version
1.30.0 - Bump garden-runc to version
1.37.0 - Bump mapfs to version
1.2.35 - Bump nfs-volume to version
7.1.29 - Bump routing to version
0.277.0 - Bump smb-volume to version
3.1.30
| Component | Version | Release Notes |
|---|---|---|
| ubuntu-jammy stemcell | 1.199 | |
| bpm | 1.2.5 | |
| cf-networking | 3.32.0 | |
| cflinuxfs3 | 0.372.0 | |
| cflinuxfs4 | 1.30.0 | |
| cf-cli | 1.45.0 | |
| count-cores-indicator | 2.0.0 | |
| diego | 2.80.0 | |
| garden-runc | 1.37.0 |
v1.37.0
## Changes
- 🐛Fixed a bug with garden-windows where process directories were being leaked in the garden depot. This adds a `garden.cleanup_process_dirs_on_wait` property to mimic cleanup logic from garden-linux. This property is defaulted to true on garden-windows, to keep the desired behavior for CF/Diego. If garden-windows is ever used with Concourse, users will want to set this to false.
## Bosh Job Spec changes:
```diff
diff --git a/jobs/garden-windows/spec b/jobs/garden-windows/spec
index ef1ce54e..004e4e7f 100644
--- a/jobs/garden-windows/spec
+++ b/jobs/garden-windows/spec
@@ -69,6 +69,12 @@ properties:
description: "path to the rootfs to use when a container specifies no rootfs"
default: ""
+ # Since garden-windows is not currently used in Concourse, we are setting this to 'true' to make life easier for diego/cf users.
+ # https://github.com/cloudfoundry/garden-runc-release/releases/tag/v1.5.0
+ garden.cleanup_process_dirs_on_wait:
+ description: A boolean stating whether or not to cleanup process state after waiting for it. If set a process can be waited for only once.
+ default: true
+
logging.format.timestamp:
description: "Format for timestamp in component logs. Valid values are 'unix-epoch' and 'rfc3339'."
default: "unix-epoch"
diff --git a/jobs/garden/spec b/jobs/garden/spec
index 259bba46..3bffb2f7 100644
--- a/jobs/garden/spec
+++ b/jobs/garden/spec
@@ -201,6 +201,8 @@ properties:
description: A boolean stating whether or not to run garden-server as a non-root user
default: false
+ # We believe this defaults to false to help concourse: https://github.com/cloudfoundry/garden-runc-release/releases/tag/v1.5.0
+ # For diego/cf, this should be set to true
garden.cleanup_process_dirs_on_wait:
description: A boolean stating whether or not to cleanup process state after waiting for it. If set a process can be waited for only once.
default: false
```
## ✨ Built with go 1.20.7
**Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.36.0...v1.37.0
## Resources
- [Download release v1.37.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.37.0).
v1.36.0
## Changes
- [Pin opencontainer/runc to version v1.1.7](https://github.com/cloudfoundry/guardian/commit/f2b3d5ec72dee482f63068124cd6b3592dd6d74b)
- Resolves a compilation issue with `xenial` stemcells
- Dependency bumps
## ✨ Built with go 1.20.7
**Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.35.0...v1.36.0
## Resources
- [Download release v1.36.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.36.0).
v1.35.0
# ⚠️ We recommend skipping to [1.36.0](https://github.com/cloudfoundry/garden-runc-release/releases/tag/v1.35.0)
Especially if you're still running `xenial` stemcells, in which this release version will fail to compile.
## Changes
- [Bug Fix] Re-implemented HTTP health checks of the `gdn` process in the `garden` job.
- These were disabled in [1.29.0](https://github.com/cloudfoundry/garden-runc-release/releases/tag/v1.29.0) due to issues during deployment.
- Bumped golang to 1.20.7
## ✨ Built with go 1.20.7
**Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.34.0...v1.35.0
## Resources
- [Download release v1.35.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.35.0).
|
| loggregator-agent | 7.4.0 | |
| mapfs | 1.2.35 |
v1.2.35## Dependencies * **mapfs:** Updated to v`53ab9fc`. v1.2.34## Changes ## Dependencies * **mapfs:** Updated to v`b83d1af`. |
| metrics-discovery | 3.2.12 | |
| nfs-volume | 7.1.29 |
v7.1.29## Changes * **nfsbroker:** Updated to v`af16846`. v7.1.28## Changes * +Golang: Updated to v1.20.7 (#511) ## Dependencies * **nfsbroker:** Updated to v`7a437dc`. |
| routing | 0.277.0 |
v0.277.0
## Changes
- Additional metrics/logging component ports have been reserved from gorouter's ephemeral port range.
## ✨ Built with go 1.20.7
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.276.0...v0.277.0
## Resources
- [Download release v0.277.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.277.0).
v0.276.0
## Changes
- Bumped golang to 1.20.7
- 🐛 Added new loggregator ports to gorouter's list of ports to exclude from ephemeral ranges. Thanks @ctlong!
## ✨ Built with go 1.20.7
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.275.0...v0.276.0
## Resources
- [Download release v0.276.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.276.0).
|
| silk | 3.32.0 | |
| smb-volume | 3.1.30 |
v3.1.30## Changes ## Dependencies * **smbbroker:** Updated to v`9ab3087`. v3.1.29## Changes ## Dependencies * **smbbroker:** Updated to v`6d49181`. |
| smoke-tests | 4.8.3 | |
| syslog | 12.1.7 |
4.0.6
Release Date: 08/18/2023
- [Feature Improvement] Allow to configure Silk policy polling interval
- Bump bpm to version
1.2.5 - Bump cf-networking to version
3.32.0 - Bump cflinuxfs4 to version
1.29.0 - Bump loggregator-agent to version
7.4.0 - Bump mapfs to version
1.2.33 - Bump nfs-volume to version
7.1.27 - Bump silk to version
3.32.0 - Bump smb-volume to version
3.1.28 - Bump syslog to version
12.1.7
| Component | Version | Release Notes |
|---|---|---|
| ubuntu-jammy stemcell | 1.181 | |
| bpm | 1.2.5 | |
| cf-networking | 3.32.0 |
v3.32.0
## Changes
- [Feature Improvement/Bug Fix] C2C Networking Policies are synced _only_ if they were actually updated to minimize load on the system (#231)
- Also see related `silk-release` PR: https://github.com/cloudfoundry/silk-release/pull/88
- And related `policy_client` PR: https://github.com/cloudfoundry/policy_client/pull/6
- Bumps dependencies
- Fixes a typo in [contributing.md](/docs/contributing.md) (#228)
- Thanks @geigerj0!
## ✨ Built with go 1.20.6
**Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.31.0...v3.32.0
## Resources
- [Download release v3.32.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.32.0).
v3.31.0
## Changes
- Updates a DB schema used with dynamic ASGs to resolve/prevent issues when frequently syncing hundreds of thousands of ASGs. Thanks @ZPascal!
## ✨ Built with go 1.20.6
**Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.30.0...v3.31.0
## Resources
- [Download release v3.31.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.31.0).
|
| cflinuxfs3 | 0.372.0 | |
| cflinuxfs4 | 1.29.0 | |
| cf-cli | 1.45.0 | |
| count-cores-indicator | 2.0.0 | |
| diego | 2.80.0 | |
| garden-runc | 1.34.0 | |
| loggregator-agent | 7.4.0 |
v7.4.0
## What's Changed
* Bump to go 1.20.7
* Bump dependencies
* Adds experimental `otel-collector` and `otel-collector-windows` jobs. See the following [RFC](https://github.com/cloudfoundry/community/blob/3ec376e4345787bc0e9e25e7965c5083b63db822/toc/rfc/rfc-0018-aggregate-metric-egress-with-opentelemetry-collector.md) for more information.
### Forwarder Agent log format change
Previously when the `logging.format.timestamp` property was set to `rfc3339` it would be ignored for ingress client logs emitted by the Forwarder Agent. This release applies the correct timestamp format when `rfc3339` is selected, which may affect you if you depend on the format of the logs.
Old log line format:
```
[INGRESS CLIENT] -> 127.0.0.1:3459: 2023/08/04 21:59:31 Error while flushing: EOF
```
New log line format:
```
2023-08-04T22:23:53.099290367Z [INGRESS CLIENT] -> 127.0.0.1:3459: Error while flushing: EOF
```
**Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v7.3.0...v7.4.0
v7.3.0
## What's Changed
* Make keepalives for api polling configurable by @fhambrec in https://github.com/cloudfoundry/loggregator-agent-release/pull/336
* flatten aggregate drain array by @Benjamintf1 in https://github.com/cloudfoundry/loggregator-agent-release/pull/346
* Update syslog binding params by @Benjamintf1 in https://github.com/cloudfoundry/loggregator-agent-release/pull/339
## New Contributors
* @fhambrec made their first contribution in https://github.com/cloudfoundry/loggregator-agent-release/pull/336
**Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v7.2.3...v7.3.0
v7.2.3
## What's Changed
* Bump dependencies
* Update packaged Golang version to v1.20.6
**Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v7.2.2...v7.2.3
|
| mapfs | 1.2.33 |
v1.2.33## Changes * Golang: Updated to v1.20.7. (#120) ## Dependencies * **mapfs:** Updated to v`055c79a`. v1.2.32## Dependencies * **gomega:** Updated to v1.27.10. v1.2.31## Dependencies * **mapfs:** Updated to v`ea4d3ff`. v1.2.30## Changes * Golang: Updated to v1.20.6. ## Dependencies * **mapfs:** Updated to v`0e79358`. |
| metrics-discovery | 3.2.12 | |
| nfs-volume | 7.1.27 |
v7.1.27## Changes * use latest available linuxfs stack for push (#500) ## Dependencies * **nfsbroker:** Updated to v`ca6114b`. v7.1.26## Dependencies * **gomega:** Updated to v1.27.9. v7.1.25## Changes * +Golang: Updated to v1.20.6 ## Dependencies * **nfsbroker:** Updated to v`0affd58`. |
| routing | 0.275.0 | |
| silk | 3.32.0 |
v3.32.0
## Changes
- [Feature Improvement/Bug Fix] C2C Networking Policies are synced _only_ if they were actually updated to minimize load on the system (#88)
- Also see related `cf-networking` release PR: https://github.com/cloudfoundry/cf-networking-release/pull/231
- And related `policy_client` PR: https://github.com/cloudfoundry/policy_client/pull/6
- Bumps dependencies
## ✨ Built with go 1.20.6
**Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.31.0...v3.32.0
## Resources
- [Download release v3.32.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.32.0).
v3.31.0
## Changes
- No changes, released along cf-networking 3.31.0
## ✨ Built with go 1.20.6
**Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.30.0...v3.31.0
## Resources
- [Download release v3.31.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.31.0).
|
| smb-volume | 3.1.28 |
v3.1.28## Changes * +Golang: Updated to v1.20.7 (#206) ## Dependencies * **smbbroker:** Updated to v`f869023`. v3.1.27## Changes * use latest available linuxfs stack for push (#201) ## Dependencies * **smbbroker:** Updated to v`2463ad2`. v3.1.26## Changes * Bump autoconf from 2.69 to 2.71 ## Dependencies * **smbbroker:** Updated to v`25e62f9`. v3.1.25## Dependencies * **smbbroker:** Updated to v`1e068da`. |
| smoke-tests | 4.8.3 | |
| syslog | 12.1.7 |
v12.1.7
## What's Changed
* Update packaged Golang version to v1.20.6
**Full Changelog**: https://github.com/cloudfoundry/syslog-release/compare/v12.1.6...v12.1.7
|
4.0.5
Release Date: 07/21/2023
- [Feature Improvement] Dynamic App renaming takes effect for Silk Security Group log entries
- [Feature Improvement] Use routing_info for desired_lrps when there are missing actual_lrps.
- [Feature] Add distributed tracing to Diego component logs.
- [Bug Fix] Prevents cachedownloader from erroneously deleting old entries.
- [Bug Fix] Resolves a race condition in BBS when the replacement for a suspect LRP has started.
- [Bug Fix] Resolves a bug in gorouter where path-based routes could return 503s when no backend endpoints remain, rather than falling back to non-path (hostname-only) routes.
- [Bug Fix] Resolves a known issue around multiple “Expect 100-Continue” responses
- Bump bpm to version
1.2.3 - Bump cf-networking to version
3.30.0 - Bump cflinuxfs3 to version
0.372.0 - Bump cflinuxfs4 to version
1.22.0 - Bump cf-cli to version
1.45.0 - Bump diego to version
2.80.0 - Bump garden-runc to version
1.34.0 - Bump mapfs to version
1.2.29 - Bump metrics-discovery to version
3.2.12 - Bump nfs-volume to version
7.1.24 - Bump routing to version
0.275.0 - Bump silk to version
3.30.0 - Bump smb-volume to version
3.1.24 - Bump smoke-tests to version
4.8.3 - Bump syslog to version
12.1.6
| Component | Version | Release Notes |
|---|---|---|
| ubuntu-jammy stemcell | 1.148 | |
| bpm | 1.2.3 | |
| cf-networking | 3.30.0 |
v3.30.0
## Changes
- Bumped golang to 1.20.6
## ✨ Built with go 1.20.6
**Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.29.0...v3.30.0
## Resources
- [Download release v3.30.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.30.0).
v3.29.0
## Changes
- Updated dependancies.
## ✨ Built with go 1.20.5
**Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.28.0...v3.29.0
## Resources
- [Download release v3.29.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.29.0).
|
| cflinuxfs3 | 0.372.0 |
v0.372.0
This release ships with cflinuxfs3 version 0.372.0. For more information, see the [release notes](https://github.com/pivotal-cf/tanzu-cflinuxfs3/releases/tag/0.372.0)
v0.371.0
This release ships with cflinuxfs3 version 0.371.0. For more information, see the [release notes](https://github.com/pivotal-cf/tanzu-cflinuxfs3/releases/tag/0.371.0)
v0.370.0
This release ships with cflinuxfs3 version 0.370.0. For more information, see the [release notes](https://github.com/pivotal-cf/tanzu-cflinuxfs3/releases/tag/0.370.0)
v0.368.0
This release ships with cflinuxfs3 version 0.368.0. For more information, see the [release notes](https://github.com/pivotal-cf/tanzu-cflinuxfs3/releases/tag/0.368.0)
|
| cflinuxfs4 | 1.22.0 | |
| cf-cli | 1.45.0 | |
| count-cores-indicator | 2.0.0 | |
| diego | 2.80.0 |
v2.80.0
## Changes
- Bumped to golang 1.20.6
## ✨ Built with go 1.20.6
**Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.79.0...v2.80.0
## Resources
- [Download release v2.80.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.80.0).
v2.79.0
## Changes
- [Feature Improvement]: Use routing_info for desired_lrp's when there are missing actual_lrp's https://github.com/cloudfoundry/route-emitter/pull/26. Thank you for this contribution @klapkov!
- [Feature]: Support distributed tracing https://github.com/cloudfoundry/route-emitter/pull/24. Thank you @mariash for this contribution!
- [Bug Fix]: Fix bug with cachedownloader in PR https://github.com/cloudfoundry/cacheddownloader/pull/26. Fixes issue https://github.com/cloudfoundry/diego-release/issues/773. Thank you @vlast3k for this contribution!
- [Bug Fix]: Resolves a race condition in BBS when the replacement for a suspect LRP has started.
## ✨ Built with go 1.20.5
**Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.78.0...v2.79.0
## Resources
- [Download release v2.79.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.79.0).
|
| garden-runc | 1.34.0 |
v1.34.0
## Changes
- Bumped golang to 1.20.6
- Refactors, enhancements, and fixes to CI scripts and garden-integration-tests
## ✨ Built with go 1.20.6
**Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.33.0...v1.34.0
## Resources
- [Download release v1.34.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.34.0).
|
| loggregator-agent | 7.2.2 | |
| mapfs | 1.2.29 |
v1.2.29## Dependencies * **mapfs:** Updated to v`725be75`. v1.2.28## Dependencies * **mapfs:** Updated to v`ae0c0a5`. v1.2.27## Dependencies * **ginkgo** Updated to v2.11.0. v1.2.26## Dependencies * **mapfs:** Updated to v`8b733f2`. v1.2.25## Changes * Golang: Updated to v1.20.5. (#96) ## Dependencies * **v2:** Updated to v2.10.0. |
| metrics-discovery | 3.2.12 |
v3.2.12
## What's Changed
* Bump dependencies
* Bump Go to v1.20.6
**Full Changelog**: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.11...v3.2.12
v3.2.11
## What's Changed
* bump dependencies by @mkocher in https://github.com/cloudfoundry/metrics-discovery-release/pull/151
## New Contributors
* @mkocher made their first contribution in https://github.com/cloudfoundry/metrics-discovery-release/pull/151
**Full Changelog**: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.10...v3.2.11
v3.2.10
## What's Changed
* Add CODEOWNERS file in preparation for branch protection rules by @geofffranks in https://github.com/cloudfoundry/metrics-discovery-release/pull/144
* Bump dependencies
* Bump to golang 1.20.5
## New Contributors
* @geofffranks made their first contribution in https://github.com/cloudfoundry/metrics-discovery-release/pull/144
**Full Changelog**: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.9...v3.2.10
|
| nfs-volume | 7.1.24 |
v7.1.24## Changes * Add final release 7.1.23 [ci skip] ## Dependencies * **nfsbroker:** Updated to v`65ba4de`. v7.1.23## Dependencies * **nfsbroker:** Updated to v`4e37165`. v7.1.22## Dependencies * **nfsbroker:** Updated to v`48619ba`. v7.1.21## Changes * +Golang: Updated to v1.20.5 (#446) ## Dependencies * **gomega:** Updated to v1.27.8. |
| routing | 0.275.0 |
v0.275.0
## Changes
- Bumps golang to 1.20.6
- Resolves a bug in gorouter where path-based routes could return 503s when no backend endpoints remain, rather than falling back to non-path (hostname-only) routes. Thanks @domdom82!
## ✨ Built with go 1.20.6
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.274.0...v0.275.0
## Resources
- [Download release v0.275.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.275.0).
v0.274.0
## Changes
- 🐛 **Bug Fix:** This release fixes [this known issue](https://github.com/cloudfoundry/routing-release/blob/develop/docs/go-1.20-expect-100-continue-known-issue.md) around multiple expect 100-continue responses.
## ✨ Built with go 1.20.5
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.273.0...v0.274.0
## Resources
- [Download release v0.274.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.274.0).
v0.273.0
## Known Issue
⚠️ This release is vulnerable to [this known issue](https://github.com/cloudfoundry/routing-release/blob/develop/docs/go-1.20-expect-100-continue-known-issue.md) around handling expect 100-continue responses. We recommend skipping this version and upgrading to 0.274.0 instead.
## Changes
- **Bug Fix**: Set Gorouter's ExpectContinueTimeout to 1 sec. This fixes bug 1 of [this known issue](https://github.com/cloudfoundry/routing-release/blob/develop/docs/go-1.20-expect-100-continue-known-issue.md)
- **Dependency Bump**: Bump the cf cli version in the acceptance test errand and the smoke test errand from v6 to v8.
## Bosh Job Spec changes:
```diff
diff --git a/jobs/acceptance_tests/spec b/jobs/acceptance_tests/spec
index 6a73b9ae..db508ca3 100644
--- a/jobs/acceptance_tests/spec
+++ b/jobs/acceptance_tests/spec
@@ -10,7 +10,7 @@ packages:
- golang-1.20-linux
- acceptance_tests
- rtr
- - cf-cli-6-linux
+ - cf-cli-8-linux
properties:
acceptance_tests.nodes:
diff --git a/jobs/smoke_tests/spec b/jobs/smoke_tests/spec
index 0426dc99..5776a9c8 100644
--- a/jobs/smoke_tests/spec
+++ b/jobs/smoke_tests/spec
@@ -9,7 +9,7 @@ templates:
packages:
- golang-1.20-linux
- acceptance_tests
- - cf-cli-6-linux
+ - cf-cli-8-linux
properties:
acceptance_tests.verbose:
```
## ✨ Built with go 1.20.5
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.272.0...v0.273.0
## Resources
- [Download release v0.273.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.273.0).
v0.272.0
## Known issue
⚠️ This release is vulnerable to [this known issue](https://github.com/cloudfoundry/routing-release/blob/develop/docs/go-1.20-expect-100-continue-known-issue.md) around handling expect 100-continue responses. We recommend skipping this version and upgrading to 0.274.0 instead.
## Changes
- ✨ `route_registrar` now emites route registration events immediately upon startup, rather than waiting for a full registration interval to pass. This will cut down on accidental TTL expiry incurred by restarting route-registrar.
- ✨ The `router.enable_log_attempts_details` property has been added to allow operators to configure Gorouter to log additional information about retried attempts to send requests to backends. Thanks @maxmoehl!
- 🐛Specifying multiple CA certs to route_registrar via `route_registrar.routing_api.ca_certs` will now render correctly as multiple certs in a single CA file.
- 🐛 Routing API clients now correctly refresh their UAA tokens prior to expiry. This should help prevent `route_registrar` from crashing whenever the token expires.
- Golang package dependency bumps
## Bosh Job Spec changes:
```diff
diff --git a/jobs/gorouter/spec b/jobs/gorouter/spec
index 0f61e044..a14133ed 100644
--- a/jobs/gorouter/spec
+++ b/jobs/gorouter/spec
@@ -236,6 +236,9 @@ properties:
router.logging_level:
description: "Log level for router"
default: "info"
+ router.enable_log_attempts_details:
+ description: "Log additional fields in the access log that provide more details on the specific timings and attempts performed towards endpoints."
+ default: false
router.logging.format.timestamp:
description: |
Format for timestamp in component logs. Valid values are 'rfc3339', 'deprecated', and 'unix-epoch'."
```
## ✨ Built with go 1.20.5
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.271.0...v0.272.0
## Resources
- [Download release v0.272.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.272.0).
|
| silk | 3.30.0 |
v3.30.0
## Changes
- Bumped to golang 1.20.6
## ✨ Built with go 1.20.6
**Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.29.0...v3.30.0
## Resources
- [Download release v3.30.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.30.0).
v3.29.0
## Changes
- Updated dependancies.
## ✨ Built with go 1.20.5
**Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.28.0...v3.29.0
## Resources
- [Download release v3.29.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.29.0).
|
| smb-volume | 3.1.24 |
v3.1.24## Changes * Golang: Updated to v1.20.6 (#188) ## Dependencies * **smbbroker:** Updated to v`a6df845`. v3.1.23## Dependencies * **smbbroker:** Updated to v`784a01e`. v3.1.22## Changes * remove python, update dependencies (#178) * update xenial talloc to 2.3.1 (#181) ## Dependencies * **smbbroker:** Updated to v`c6c8767`. v3.1.21## Changes * +Golang: Updated to v1.20.5 (#169) ## Dependencies * **smbbroker:** Updated to v`64a5e57`. v3.1.20## Dependencies * **smbbroker:** Updated to v`23b4700`. |
| smoke-tests | 4.8.3 |
4.8.3
Create bosh final release 4.8.3
|
| syslog | 12.1.6 |
v12.1.6
## What's Changed
* Dependency bumps
* Update packaged Golang version to v1.20.5
**Full Changelog**: https://github.com/cloudfoundry/syslog-release/compare/v12.1.5...v12.1.6
|
4.0.4
Release Date: 06/26/2023
Caution This release is susceptible to a known issue around multiple "HTTP 100 Continue" responses. For information about this issue, see Multiple HTTP Expect: 100-continue responses sent from gorouter to client may cause unexpected failures in the VMware Tanzu Support Hub. To address this issue, VMware advises upgrading to Tanzu Application Service v4.0.5 and Isolation Segment Tile v4.0.5 instead.
- [Bug Fix]: SMB configuration from the TAS tile will now also be applied to the IST tile if installed
- [Feature] Adds support for W3C Trace ID logging across Diego component requests
- [Bug Fix] Timeouts in for executor’s uploader have been increased to 500ms
- [Bug Fix] Byte-based logging limits for LRPs and Tasks now emit only once per second
-
[Bug Fix/Improvement] Garden now ships with Busybox 1.36.1 as the default filesystem
-
Bump cf-networking to version
3.28.0 - Bump cflinuxfs4 to version
1.17.0 - Bump diego to version
2.78.0 - Bump garden-runc to version
1.33.0 - Bump loggregator-agent to version
7.2.2 - Bump mapfs to version
1.2.24 - Bump nfs-volume to version
7.1.20 - Bump routing to version
0.271.0 - Bump silk to version
3.28.0 - Bump smb-volume to version
3.1.19
| Component | Version | Release Notes |
|---|---|---|
| ubuntu-jammy stemcell | 1.125 | |
| bpm | 1.2.2 | |
| cf-networking | 3.28.0 |
v3.28.0
## Changes
- Bumped to golang 1.20.5
## ✨ Built with go 1.20.5
**Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.27.0...v3.28.0
## Resources
- [Download release v3.28.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.28.0).
|
| cflinuxfs3 | 0.367.0 | |
| cflinuxfs4 | 1.17.0 | |
| count-cores-indicator | 2.0.0 | |
| diego | 2.78.0 |
v2.78.0
## Changes
- Bumped to golang 1.20.5
- Vizzini now defaults to cflinuxfs4
## Bosh Job Spec changes:
```diff
diff --git a/jobs/vizzini/spec b/jobs/vizzini/spec
index 40b5eb74b..6ff53c654 100644
--- a/jobs/vizzini/spec
+++ b/jobs/vizzini/spec
@@ -73,7 +73,7 @@ properties:
default_rootfs:
description: "Default preloaded rootfs to target for running Tasks and LRPs"
- default: "preloaded:cflinuxfs3"
+ default: "preloaded:cflinuxfs4"
grace_tarball_url:
description: "URL for the grace test asset"
```
## ✨ Built with go 1.20.5
**Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.77.0...v2.78.0
## Resources
- [Download release v2.78.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.78.0).
v2.77.0
## Changes
- Adds support for W3C Trace ID logging across diego component requests
- Timeouts in for executor's uploader have been increased to 500ms
- Byte-based logging limits for LRPs and Tasks now emit only once per second
- LRPs can now have liveness and readiness check intervals defined when the LRP is created.
- Dependency Bumps:
- code.cloudfoundry.org/archiver a23cadd462ce
- code.cloudfoundry.org/certsplitter a2c6caf14c29
- code.cloudfoundry.org/cf-tcp-router ecebe81f2c0c
- code.cloudfoundry.org/credhub-cli 439bdb2
- code.cloudfoundry.org/debugserver 70a733dc508f
- code.cloudfoundry.org/diego-logging-client 40495b68ac2e
- code.cloudfoundry.org/durationjson 7a601daf48ee
- code.cloudfoundry.org/eventhub 8efdeac72e14
- code.cloudfoundry.org/garden 8444ff5a31d7
- code.cloudfoundry.org/goshims v0.17.0
- code.cloudfoundry.org/grootfs 79fecf24
- code.cloudfoundry.org/guardian 98f55817772e
- code.cloudfoundry.org/idmapper a410520
- code.cloudfoundry.org/localip 2ea90d997658
- github.com/aws/aws-sdk-go v1.44.269
- github.com/awslabs/amazon-ecr-credential-helper/ecr-login 7f2db5bd753e
- github.com/cloudfoundry/dropsonde v1.1.0
- github.com/docker/docker v24.0.1+incompatible
- github.com/envoyproxy/go-control-plane ba92d50b6596
- github.com/nats-io/nats-server/v2 v2.9.17
- github.com/nats-io/nats.go v1.26.0
- github.com/onsi/ginkgo/v2 v2.9.5
- github.com/onsi/gomega v1.27.7
- github.com/tedsuo/ifrit 7862c310ad26
- golang.org/x/sys v0.8.0
- google.golang.org/grpc v1.55.0
## ✨ Built with go 1.20.4
**Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.76.0...v2.77.0
## Resources
- [Download release v2.77.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.77.0).
|
| garden-runc | 1.33.0 |
v1.33.0
## Changes
- Bumped to golang 1.20.5
## ✨ Built with go 1.20.5
**Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.32.0...v1.33.0
## Resources
- [Download release v1.33.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.33.0).
v1.32.0
## Changes
- The grootfs package no longer ships with test asset tarballs (those are only used for unit tests and don't need to be installed as part of the package).
## ✨ Built with go 1.20.4
**Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.31.0...v1.32.0
## Resources
- [Download release v1.32.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.32.0).
v1.31.0
## Changes
- Garden now ships with Busybox 1.36.1 as the default filesystem
- Dependency Bumps
- healthchecker boshrelease v0.8.0
- github.com/onsi/gomega v1.27.7
- go.opentelemetry.io/otel v1.15.1
- github.com/burntsushi/toml v1.3.0
- github.com/docker/docker v24.0.2+incompatible
- github.com/urfave/cli/v2 v2.25.5
- github.com/cloudfoundry/dropsonde v1.1.0
- github.com/sirupsen/logrus v1.9.2
## Bosh Job Spec changes:
```diff
diff --git a/jobs/garden/spec b/jobs/garden/spec
index c69f4080..259bba46 100644
--- a/jobs/garden/spec
+++ b/jobs/garden/spec
@@ -89,7 +89,7 @@ properties:
garden.default_container_rootfs:
description: "path to the rootfs to use when a container specifies no rootfs"
- default: /var/vcap/packages/busybox/busybox-1.35.0.tar
+ default: /var/vcap/packages/busybox/busybox-1.36.1.tar
garden.graph_cleanup_threshold_in_mb:
description: "DEPRECATED in favour of grootfs.reserved_space_for_other_jobs_in_mb."
```
## ✨ Built with go 1.20.4
**Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.30.0...v1.31.0
## Resources
- [Download release v1.31.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.31.0).
|
| loggregator-agent | 7.2.2 |
v7.2.2
## What's Changed
* Add CODEOWNERS file in preparation for branch protection rules by @geofffranks in https://github.com/cloudfoundry/loggregator-agent-release/pull/313
* Bump dependencies
* Bump to golang 1.20.5
## New Contributors
* @geofffranks made their first contribution in https://github.com/cloudfoundry/loggregator-agent-release/pull/313
**Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v7.2.1...v7.2.2
|
| mapfs | 1.2.24 |
v1.2.24## Dependencies * **ginkgo:** Updated to v2.9.7. |
| metrics-discovery | 3.2.9 | |
| nfs-volume | 7.1.20 |
v7.1.20## Dependencies * **nfsv3driver:** Updated to v`006aa43`. v7.1.19## Changes * Fix possible log cred leak (#442) ## Dependencies * **nfsbroker:** Updated to v`803017f`. |
| routing | 0.271.0 |
v0.271.0
## Changes
- Bumped to golang 1.20.5
## ✨ Built with go 1.20.5
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.270.0...v0.271.0
## Resources
- [Download release v0.271.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.271.0).
|
| silk | 3.28.0 |
v3.28.0
## Changes
- Bumped to golang 1.20.5
## ✨ Built with go 1.20.5
**Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.27.0...v3.28.0
## Resources
- [Download release v3.28.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.28.0).
|
| smb-volume | 3.1.19 |
v3.1.19## Changes * Fix possible log cred leak (#442) (#124) ## Dependencies * **smbbroker:** Updated to v`73b69db`. v3.1.18## Dependencies * **smbbroker:** Updated to v`01e4eb6`. |
| smoke-tests | 4.8.2 | |
| syslog | 12.1.5 |
4.0.3
Release Date: 06/02/2023
Caution This release is susceptible to a known issue around multiple "HTTP 100 Continue" responses. For information about this issue, see Multiple HTTP Expect: 100-continue responses sent from gorouter to client may cause unexpected failures in the VMware Tanzu Support Hub. To address this issue, VMware advises upgrading to Tanzu Application Service v4.0.5 and Isolation Segment Tile v4.0.5 instead.
- [Bug Fix] Operators can disable gorouter request timeouts (i.e. for streaming applications) by configuring them to 0
- [Bug Fix/Improvement] “Back end request timeout for the Gorouter” property no longer affects idle timeout of long lived requests. Idle timeouts now configurable by “Front end idle timeout for the Gorouter” property.
- Bump bpm to version
1.2.2 - Bump cf-networking to version
3.27.0 - Bump cflinuxfs3 to version
0.367.0 - Bump cflinuxfs4 to version
1.13.0 - Bump garden-runc to version
1.30.0 - Bump mapfs to version
1.2.23 - Bump nfs-volume to version
7.1.18 - Bump routing to version
0.270.0 - Bump silk to version
3.27.0 - Bump smb-volume to version
3.1.17
| Component | Version | Release Notes |
|---|---|---|
| ubuntu-jammy stemcell | 1.117 | |
| bpm | 1.2.2 | |
| cf-networking | 3.27.0 |
v3.27.0
## Changes
- Bumped vendored healthchecker-release to v0.8.0
## ✨ Built with go 1.20.4
**Full changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.26.0...v3.27.0
## Resources
- [Download release v3.27.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.27.0).
v3.26.0
## Changes
- Dependency updates:
- code.cloudfoundry.org/bbs 08ff19fb906a
- code.cloudfoundry.org/cf-networking-helpers ebb4c931f5d5
- code.cloudfoundry.org/clock v1.1.0
- code.cloudfoundry.org/debugserver c4fc5f67e21e
- code.cloudfoundry.org/filelock 470838d066c5
- code.cloudfoundry.org/garden 234178722499
- code.cloudfoundry.org/locket 6cd5416498b6
- github.com/containernetworking/cni v1.1.2
- github.com/containernetworking/plugin v1.3.0
- github.com/nats-io/go-nats v1.8.1
- github.com/onsi/ginkgo/v2 2.9.5
- github.com/onsi/gomega v1.27.7
- golang.org/x/net v0.10.0
- golang.org/x/sys v0.8.0
- google.golang.org/grpc v1.55.0
- github.com/st3v/glager v0.4.0
- github.com/tedsuo/ifrit 7862c310ad26
## ✨ Built with go 1.20.4
**Full changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/3.25.1...v3.26.0
## Resources
- [Download release v3.26.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.26.0).
|
| cflinuxfs3 | 0.367.0 | |
| cflinuxfs4 | 1.13.0 | |
| count-cores-indicator | 2.0.0 | |
| diego | 2.76.0 | |
| garden-runc | 1.30.0 |
v1.30.0
## Changes
- Bump dependencies:
- github.com/onsi/ginkgo 2.9.5
- golang.org/x/sys 0.8.0
- Add support for including request trace IDs in garden/guardian
## ✨ Built with go 1.20.4
**Full changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.29.0...v1.30.0
## Resources
- [Download release v1.30.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.30.0).
|
| loggregator-agent | 7.2.1 | |
| mapfs | 1.2.23 |
v1.2.23## Dependencies * **gomega:** Updated to v1.27.7. |
| metrics-discovery | 3.2.9 | |
| nfs-volume | 7.1.18 |
v7.1.18## Changes * chore: rename templates to match target files names (#428) * fix: remove config file on stop (#431) * Remove unmaintained docker tests (#432) ## Dependencies * **nfsbroker:** Updated to v`dd36f39`. v7.1.17## Dependency updates * **gomega:** Updated to v1.27.7. |
| routing | 0.270.0 |
v0.270.0
## Changes
- CI now tests CATS + RATS against cflinuxfs4
- 🐛Gorouter's `request_timeout_in_seconds` now only affects request timeout and is not used for idle timeout, which is set by `frontend_idle_timeout`
- routing-utils now passes `go vet`
- Dependency Bumps:
- The vendored healthchecker boshrelease is now v0.8.0
- go.step.sm/crypto v0.31.0
-
- Go dependency bumps for the routing-utils package:
- code.cloudfoundry.org/tlsconfig 8f91c367795b
- github.com/nats-io/nats.go v1.26.0
## Bosh Job Spec changes:
```diff
diff --git a/jobs/gorouter/spec b/jobs/gorouter/spec
index 4fa13ae3..0f61e044 100644
--- a/jobs/gorouter/spec
+++ b/jobs/gorouter/spec
@@ -380,11 +380,9 @@ properties:
default: 22
request_timeout_in_seconds:
description: |
- This configures a "request timeout" and a "backend idle timeout".
+ This configures an entire request timeout.
Requests from router to backend endpoints that are longer than this duration will be canceled and logged as
- `backend-request-timeout` errors. In addition, TCP connections between router and backend endpoints that
- are idle for longer than this duration will be closed. Related properties: `router.max_idle_connections`
- and `router.keep_alive_probe_interval`.
+ `backend-request-timeout` errors. If set to 0 this timeout is disabled.
default: 900
endpoint_dial_timeout_in_seconds:
description: |
```
## ✨ Built with go 1.20.4
**Full changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.269.0...v0.270.0
## Resources
- [Download release v0.270.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.270.0).
v0.269.0
## Changes
- Update sync-package-specs to install gosub
- Remove `trace-logger` update in sync-submodule-config
- Remove unused files
## ✨ Built with go 1.20.4
**Full changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.268.0...v0.269.0
## Resources
- [Download release v0.269.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.269.0).
|
| silk | 3.27.0 |
v3.27.0
## Changes
- Bumped vendored healthchecker release to v0.8.0
- Updated silk, silk-cni, and cni-wrapper-plugin for compatibility with v1.0.0 of the CNI spec
- Bumped github.com/containernetworking/cni to 1.1.2 and github.com/containernetworking/plugins to 1.3.0
- Removed the `externalmods` code as it's no longer needed now that everything is on the latest CNI versions.
## ✨ Built with go 1.20.4
**Full changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.26.0...v3.27.0
## Resources
- [Download release v3.27.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.27.0).
v3.26.0
## Changes
- Dependency Bumps:
- code.cloudfoundry.org/cf-networking-helpers ebb4c931f5d5
- code.cloudfoundry.org/debugserver c4fc5f67e21e
- code.cloudfoundry.org/diego-logging-client efc368ee68d3
- code.cloudfoundry.org/filelock 470838d066c5
- code.cloudfoundry.org/garden234178722499
- code.cloudfoundry.org/runtimeschema 5366865eed76
- code.cloudfoundry.org/silk 886eb5a013ef
- github.com/containernetworking/cni v1.1.2
- github.com/onsi/ginkgo/v2 v2.9.5
- github.com/onsi/gomega v1.27.7
- github.com/tedsuo/ifrit 7862c310ad26
## ✨ Built with go 1.20.4
**Full changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/3.25.1...v3.26.0
## Resources
- [Download release v3.26.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.26.0).
|
| smb-volume | 3.1.17 |
v3.1.17## Dependencies * **smbbroker:** Updated to v`de6049f`. |
| smoke-tests | 4.8.2 | |
| syslog | 12.1.5 |
4.0.2
Release Date: 05/25/2023
Caution This release is susceptible to a known issue around multiple "HTTP 100 Continue" responses. For information about this issue, see Multiple HTTP Expect: 100-continue responses sent from gorouter to client may cause unexpected failures in the VMware Tanzu Support Hub. To address this issue, VMware advises upgrading to Tanzu Application Service v4.0.5 and Isolation Segment Tile v4.0.5 instead.
- [Bug Fix]: SMB configuration from the TAS tile will now also be applied to the IST tile if installed
- [Feature Improvement] Migrate stop of rsyslogd to post-stop step, so that logs during stopping of Bosh jobs are still forwarded to configured targets.
- Bump cflinuxfs3 to version
0.366.0 - Bump cflinuxfs4 to version
1.9.0 - Bump mapfs to version
1.2.22 - Bump nfs-volume to version
7.1.16 - Bump routing to version
0.268.0 - Bump silk to version
3.25.1 - Bump smb-volume to version
3.1.16 - Bump syslog to version
12.1.5
| Component | Version | Release Notes |
|---|---|---|
| ubuntu-jammy stemcell | 1.108 | |
| bpm | 1.2.0 | |
| cf-networking | 3.25.1 | |
| cflinuxfs3 | 0.366.0 | |
| cflinuxfs4 | 1.9.0 | |
| count-cores-indicator | 2.0.0 | |
| diego | 2.76.0 | |
| garden-runc | 1.29.0 | |
| loggregator-agent | 7.2.1 | |
| mapfs | 1.2.22 |
v1.2.22## Dependencies * **v2:** Updated to v2.9.5. v1.2.21## Dependencies * **ginkgo v2:** Updated ginkgo to v2.9.4. |
| metrics-discovery | 3.2.9 | |
| nfs-volume | 7.1.16 |
v7.1.16## Changes * Use default CF stack when pushing nfsbroker (#400) * fix: NFS-volume service nfsbroker cred leak (#395) ## Dependencies * **nfsbroker:** Updated to v`7376460`. v7.1.15## Changes * Golang: Updated to v1.20.4 (#388) ## Dependencies * **nfsbroker:** Updated to v`cbe8c5f`. |
| routing | 0.268.0 |
v0.268.0
## Changes
- Adds support for `route_registrar` to advertise HTTP2 based routes to gorouter. If not specified on a route, http1 is used by default. Thanks @peanball @plowin and @b1tamara!!
## Bosh Job Spec changes:
```diff
diff --git a/jobs/route_registrar/spec b/jobs/route_registrar/spec
index 595f2075..bf3d9a03 100644
--- a/jobs/route_registrar/spec
+++ b/jobs/route_registrar/spec
@@ -101,6 +101,7 @@ properties:
tls_port (required, integer, for http routes): Either `port` or `tls_port` are required; if both are provided, Gorouter will prefer tls_port.
Requests for associated URIs will be forwarded over TLS by the router to this port.
The IP is determined automatically from the host on which route-registrar is run.
+ protocol (optional, string): 'http1' or 'http2'. If not provided, Gorouter uses 'http1' as default.
route_service_url (optional, string, for http routes): When valid route service URL is provided, Gorouter will proxy requests received for the uris above to the specified route service URL.
server_cert_domain_san (conditional, string, for http routes): Required if tls_port is present.
Gorouter will validate that the TLS certificate presented by the destination host contains this as a Subject Alternative Name (SAN).
```
## ✨ Built with go 1.20.4
**Full changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.267.0...v0.268.0
## Resources
- [Download release v0.268.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.268.0).
v0.267.0
## Changes
- The veresion of HAProxy used in tcp-router was bumped from 2.7.6 to 2.7.8.
## ✨ Built with go 1.20.4
**Full changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.266.0...v0.267.0
## Resources
- [Download release v0.267.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.267.0).
|
| silk | 3.25.1 |
3.25.1
## Changes
- Fixes compilation errors for `silk-datastore-syncer`
## ✨ Built with go 1.20.4
**Full changelog**: https://github.com/cloudfoundry/silk-release/compare/3.24.0...v3.25.1
## Resources
- [Download release v3.25.1 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.25.1).
3.24.0
## Changes
- ⚠️ The new `silk-data-syncer` job is missing some files that cause compilation to fail. This is not a problem if you are deploying without that job. If you need the job, please upgrade to 3.25.1.
- Add new `silk-datastore-syncer` job to sync app log metadata from garden to silk datastore
- Bump to Go 1.20.4
- Bump to Silk 20230501162532-6ab8d30026c6
- Bump dependencies such that Ginkgo V2 and Lager V3 are used
## Bosh Job Spec changes:
```diff
diff --git a/jobs/silk-datastore-syncer/spec b/jobs/silk-datastore-syncer/spec
new file mode 100644
index 0000000..9aa1813
--- /dev/null
+++ b/jobs/silk-datastore-syncer/spec
@@ -0,0 +1,26 @@
+---
+name: silk-datastore-syncer
+
+templates:
+ bpm.yml.erb: config/bpm.yml
+ start.erb: bin/start
+
+packages:
+ - silk-datastore-syncer
+
+properties:
+ disable:
+ description: "Disable this monit job. It will not run. Required for backwards compatability."
+ default: false
+ sync_interval_in_seconds:
+ description: "Interval to check garden for new metadata."
+ default: 30
+ garden.address:
+ description: "Garden server listening address."
+ default: /var/vcap/data/garden/garden.sock
+ garden.network:
+ description: "Network type for the garden server connection (tcp or unix)."
+ default: unix
+ log_level:
+ description: "Logging level (debug, info, warn, error)."
+ default: info
```
## ✨ Built with go 1.20.4
**Full changelog**: https://github.com/cloudfoundry/silk-release/compare/3.23.0...v3.24.0
## Resources
- [Download release v3.24.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.24.0).
|
| smb-volume | 3.1.16 |
v3.1.16## Dependencies * **smbbroker:** Updated to v`e30a49e`. v3.1.15## Changes * +Golang: Updated to v1.20.4 (#144) * Use default CF stack when pushing smbbroker (#149) ## Dependencies * **smbbroker:** Updated to v`a586257`. |
| smoke-tests | 4.8.2 | |
| syslog | 12.1.5 |
v12.1.5
## What's changed
* Dependency bumps
* Migrate stop of rsyslogd to post-stop by @KarstenSchnitter in https://github.com/cloudfoundry/syslog-release/pull/133
## New contributors
* @KarstenSchnitter made their first contribution in https://github.com/cloudfoundry/syslog-release/pull/133
**Full changelog**: https://github.com/cloudfoundry/syslog-release/compare/v12.1.4...v12.1.5
|
4.0.1
Release Date: 05/17/2023
Caution This release is susceptible to a known issue around multiple "HTTP 100 Continue" responses. For information about this issue, see Multiple HTTP Expect: 100-continue responses sent from gorouter to client may cause unexpected failures in the VMware Tanzu Support Hub. To address this issue, VMware advises upgrading to Tanzu Application Service v4.0.5 and Isolation Segment Tile v4.0.5 instead.
- [Security Fix] Whereas TAS 4.0.0 was unaffected by CVE-2023-20882, IST 4.0.1 updates to a routing-release version containing the fix.
- [Bug Fix] Fixes an issue in gorouter where requests that should have returned 496, 499, 503, 525, or 526 HTTP status codes may instead have returned as 502s, potentially preventing stale route pruning.
- [Bug Fix] Resolve Issue where Garden failed during BOSH/Operations Manager deploys due to healthcheck
- Bump bpm to version
1.2.0 - Bump cf-networking to version
3.25.1 - Bump cflinuxfs3 to version
0.364.0 - Bump cflinuxfs4 to version
1.8.0 - Bump count-cores-indicator to version
2.0.0 - Bump diego to version
2.76.0 - Bump garden-runc to version
1.29.0 - Bump loggregator-agent to version
7.2.1 - Bump mapfs to version
1.2.20 - Bump metrics-discovery to version
3.2.9 - Bump nfs-volume to version
7.1.14 - Bump routing to version
0.266.0 - Bump smb-volume to version
3.1.14 - Bump syslog to version
12.1.4
| Component | Version | Release Notes |
|---|---|---|
| ubuntu-jammy stemcell | 1.108 | |
| bpm | 1.2.0 | |
| cf-networking | 3.25.1 |
3.25.1
## Changes
- None!
## ✨ Built with go 1.20.4
**Full changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/3.24.0...v3.25.1
## Resources
- [Download release v3.25.1 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.25.1).
3.24.0
## Changes
- Bump to Go 1.20.4
- Bump all dependencies such that only Ginkgo V2 and Lager V3 are used
- Use [new docker images](https://github.com/cloudfoundry/cf-networking-release/commit/4b69f0a5690611dfa730a70e641f5c1f8145c66c) for local testing
## ✨ Built with go 1.20.4
**Full changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/3.23.0...v3.24.0
## Resources
- [Download release v3.24.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.24.0).
|
| cflinuxfs3 | 0.364.0 | |
| cflinuxfs4 | 1.8.0 | |
| count-cores-indicator | 2.0.0 | |
| diego | 2.76.0 |
v2.76.0
## Changes
- Bump to Go 1.20.4
- Bump dependencies
## Bosh Job Spec changes:
```diff
diff --git a/jobs/auctioneer/spec b/jobs/auctioneer/spec
index ae685ceb9..1fac48936 100644
--- a/jobs/auctioneer/spec
+++ b/jobs/auctioneer/spec
@@ -88,6 +88,12 @@ properties:
diego.auctioneer.locket.api_location:
description: "Hostname and port of the Locket server. When set, the auctioneer attempts to claim a lock from the Locket API."
default: locket.service.cf.internal:8891
+ diego.auctioneer.locket.client_keepalive_time:
+ description: "Period in seconds after which the locket gRPC client sends keepalive ping requests to the locket server it is connected to."
+ default: 10
+ diego.auctioneer.locket.client_keepalive_timeout:
+ description: "Timeout in seconds to receive a response to the keepalive ping. If a response is not received within this time, the locket client will reconnect to another server."
+ default: 22
locks.locket.enabled:
description: When set, the auctioneer attempts to claim a lock from the Locket API.
diff --git a/jobs/bbs/spec b/jobs/bbs/spec
index b6f1040c2..9204a8d4c 100644
--- a/jobs/bbs/spec
+++ b/jobs/bbs/spec
@@ -140,6 +140,12 @@ properties:
diego.bbs.locket.api_location:
description: "Hostname and port of the Locket server. When set, the BBS attempts to claim a lock from the Locket API and will detect Diego cells registered with the Locket API."
default: locket.service.cf.internal:8891
+ diego.bbs.locket.client_keepalive_time:
+ description: "Period in seconds after which the locket gRPC client sends keepalive ping requests to the locket server it is connected to."
+ default: 10
+ diego.bbs.locket.client_keepalive_timeout:
+ description: "Timeout in seconds to receive a response to the keepalive ping. If a response is not received within this time, the locket client will reconnect to another server."
+ default: 22
limits.open_files:
description: Maximum number of files (including sockets) the BBS process may have open.
diff --git a/jobs/rep/spec b/jobs/rep/spec
index df7bd7c49..1383b67c0 100644
--- a/jobs/rep/spec
+++ b/jobs/rep/spec
@@ -217,6 +217,12 @@ properties:
diego.rep.locket.api_location:
description: "Hostname and port of the Locket server. When set, the cell rep will establish its cell registration in the Locket API."
default: locket.service.cf.internal:8891
+ diego.rep.locket.client_keepalive_time:
+ description: "Period in seconds after which the locket gRPC client sends keepalive ping requests to the locket server it is connected to."
+ default: 10
+ diego.rep.locket.client_keepalive_timeout:
+ description: "Timeout in seconds to receive a response to the keepalive ping. If a response is not received within this time, the locket client will reconnect to another server."
+ default: 22
enable_declarative_healthcheck:
description: "When set, enables the rep to prefer the LRP CheckDefinition to healthcheck instances over the Monitor action. Requires Garden-Runc v1.10.0+"
diff --git a/jobs/rep_windows/spec b/jobs/rep_windows/spec
index 4fc4504bf..023d76f18 100644
--- a/jobs/rep_windows/spec
+++ b/jobs/rep_windows/spec
@@ -227,7 +227,13 @@ properties:
diego.rep.locket.api_location:
description: "Hostname and port of the locket server"
default: locket.service.cf.internal:8891
-
+ diego.rep.locket.client_keepalive_time:
+ description: "Period in seconds after which the locket gRPC client sends keepalive ping requests to the locket server it is connected to."
+ default: 10
+ diego.rep.locket.client_keepalive_timeout:
+ description: "Timeout in seconds to receive a response to the keepalive ping. If a response is not received within this time, the locket client will reconnect to another server."
+ default: 22
+
enable_declarative_healthcheck:
description: "When set, enables the rep to prefer the LRP CheckDefinition to healthcheck instances over the Monitor action."
default: false
diff --git a/jobs/vizzini/spec b/jobs/vizzini/spec
index fa6c8d0d0..40b5eb74b 100644
--- a/jobs/vizzini/spec
+++ b/jobs/vizzini/spec
@@ -47,9 +47,6 @@ properties:
vizzini.verbose:
description: Run tests in verbose mode
default: false
- vizzini.stream:
- description: Stream output from parallel test nodes. This option will lead to less coherent output but is useful when debugging
- default: false
enable_declarative_healthcheck:
description: "When set, enables the declarative check tests in vizzini"
```
## ✨ Built with go 1.20.4
**Full changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.75.0...v2.76.0
## Resources
- [Download release v2.76.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.76.0).
v2.75.0
## Changes
* Bump ginkgo to v2 and lager to v3
* [Bug fix] Rep does not clean up resources when deleting container fails
## ✨ Built with go 1.20.3
**Full changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.73.0...v2.75.0
## Resources
- [Download release v2.75.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.75.0).
|
| garden-runc | 1.29.0 |
v1.29.0
## Changes
⚠️We have removed the garden-healthcheck job from garden while we investigate a way to make it less painful. From v1.22.6 through v1.28.0, garden restarts with a high container count could result in BOSH deploys failing due to a race condition between garden, bpm, monit, and garden-healthchecker. This will be re-enabled at a later time when we resolve the race condition.
## ✨ Built with go 1.20.4
**Full changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.28.0...v1.29.0
## Resources
- [Download release v1.29.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.29.0).
v1.28.0
## Changes
- Bump to golang 1.20.4
- Bump dependencies
## ✨ Built with go 1.20.4
**Full changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.27.0...v1.28.0
## Resources
- [Download release v1.28.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.28.0).
v1.27.0
## Changes
* Bump ginkgo to v2 and lager to v3
## ✨ Built with go 1.20.3
**Full changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.26.0...v1.27.0
## Resources
- [Download release v1.27.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.27.0).
v1.26.0
## Changes
- Bump runc version to 1.1.4
- Bump containerd version to 1.6.19
- Fix cloudfoundry/garden-runc-release#233
## ✨ Built with go 1.20.1
**Full changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.25.0...v1.26.0
## Resources
- [Download release v1.26.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.26.0).
|
| loggregator-agent | 7.2.1 |
v7.2.1
## What's changed
* Bump to [go1.20.4](https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU/m/QvrjqM4XAgAJ)
* Bump dependencies
**Full changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v7.2.0...v7.2.1
v7.2.0
## What's changed
* Bump golang.org/x/net from 0.8.0 to 0.9.0 in /src by @dependabot in https://github.com/cloudfoundry/loggregator-agent-release/pull/283
* Add mtls options to aggregate drains. by @Benjamintf1 in https://github.com/cloudfoundry/loggregator-agent-release/pull/276
* switch gorilla with chi by @Benjamintf1 in https://github.com/cloudfoundry/loggregator-agent-release/pull/285
**Full changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v7.1.3...v7.2.0
v7.1.3
* Upgrade to go 1.20.2
* Bump dependencies
**Full changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v7.1.2...v7.1.3
|
| mapfs | 1.2.20 |
v1.2.20## Changes * Golang: Updated to v1.20.4 (#77, #78) ## Dependencies * **ginkgo v2:** Updated to v2.9.3. v1.2.16## Changes * Golang: Updated to v1.20.3 (#64, #65, #71) ## Dependencies * **gomega:** Updated to v1.27.6. |
| metrics-discovery | 3.2.9 |
v3.2.9
## What's changed
* Bump to [go1.20.4](https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU/m/QvrjqM4XAgAJ)
* Bump dependencies
**Full changelog**: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.8...v3.2.9
v3.2.8
* Upgrade to go1.20.2.
* Bump dependencies.
**Full changelog**: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.7...v3.2.8
|
| nfs-volume | 7.1.14 |
v7.1.14## Dependencies * **nfsbroker:** Updated to v`2c64157`. v7.1.12## Changes * Golang: Updated to v1.20.3 (#355, #357) * Fix possible log leak of CF password (#335) ## Dependencies * **gomega:** Updated to v1.27.6. v7.1.10## Changes ## Dependencies * **nfsbroker:** Updated to v`7946962`. |
| routing | 0.266.0 |
v0.266.0
## Change
- 🐛Fixes a bug that may cause routing failures to apps. Thanks @maxmoehl and @domdom82!!
- Many go dependency updates across all routing packages. Thanks @winkingturtle-vmw!!
## ✨ Built with go 1.20.4
**Full changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.265.1...v0.266.0
## Resources
- [Download release v0.266.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.266.0).
v0.265.1
:warning::warning::warning:
**There is a known issue with this release’s routing logic which may cause routing failures to apps. It is advised to use routing-release [0.266.0](https://github.com/cloudfoundry/routing-release/releases/tag/v0.266.0) or later instead of this release.**
## Changes
- Bump healthchecker
## ✨ Built with go 1.20.4
**Full changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.265.0...v0.265.1
## Resources
- [Download release v0.265.1 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.265.1).
v0.265.0
:warning::warning::warning:
**There is a known issue with this release’s routing logic which may cause routing failures to apps. It is advised to use routing-release [0.266.0](https://github.com/cloudfoundry/routing-release/releases/tag/v0.266.0) or later instead of this release.**
## Changes
- Bump to Go 1.20.4
## ✨ Built with go 1.20.4
**Full changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.264.0...v0.265.0
## Resources
- [Download release v0.265.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.265.0).
v0.264.0
:warning::warning::warning:
**There is a known issue with this release’s routing logic which may cause routing failures to apps. It is advised to use routing-release [0.266.0](https://github.com/cloudfoundry/routing-release/releases/tag/v0.266.0) or later instead of this release.**
## Changes
- Addresses the issue in routing-release 0.263.0 where `bosh export-releases` would fail to compile the `acceptance-tests` package.
## ✨ Built with go 1.20.3
**Full changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.263.0...v0.264.0
## Resources
- [Download release v0.264.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.264.0).
v0.263.0
⚠️⚠️⚠️
**This version does not compile, it will be fixed with the next release**
**There is a known issue with this release’s routing logic which may cause routing failures to apps. It is advised to use routing-release [0.266.0](https://github.com/cloudfoundry/routing-release/releases/tag/v0.266.0) or later instead of this release.**
## Changes
- 🐛Fixed a bug present since v0.262.0 that caused CATs to intermittently fail on apps using `nc` as their server.
- 🐛Bumped haproxy to 2.7.6 in cf-tcp-router, to resolve a bug preventing haproxy from properly transferring open connections to the new haproxy process when a reload occurred - [haproxy/#1883](https://github.com/haproxy/haproxy/issues/1883)
## ✨ Built with go 1.20.3
**Full changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.262.0...v0.263.0
## Resources
- [Download release v0.263.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.263.0).
v0.262.0
⚠️⚠️⚠️
**There is a known issue with this release’s routing logic which may cause routing failures to apps. It is advised to use routing-release [0.266.0](https://github.com/cloudfoundry/routing-release/releases/tag/v0.266.0) or later instead of this release.**
## Changes
- 🐛Fixes the of golang has a known issue that causes backend request failures which previously returned 496, 499, 503, 525, or 526 to instead return a 502. Additionally stale routes may not have been pruned properly. Thanks @domdom82!!
- 🚗Gorouter now retries requests which fail prior to any HTTP content being sent (since no backend received the HTTP content, they're by definition retriable). Thanks for the [PR](https://github.com/cloudfoundry/gorouter/pull/337). Thanks @maxmoehl and @domdom82!!
## ✨ Built with go 1.20.2
**Full changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.261.0...v0.262.0
## Resources
- [Download release v0.262.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.262.0).
v0.261.0
⚠️⚠️⚠️
**This version of golang has a known issue that may cause backend request failures that previously returned 496, 499, 503, 525, or 526 to instead return a 502. Additionally stale routes may not get pruned properly. This will be addressed in an upcoming release.**
## Changes
- Bug fix: add healthcheck to routing-api for route-registrar
## Bosh Job Spec changes:
```diff
diff --git a/jobs/routing-api/spec b/jobs/routing-api/spec
index 5717f88f..f6a2175d 100644
--- a/jobs/routing-api/spec
+++ b/jobs/routing-api/spec
@@ -6,12 +6,15 @@ templates:
uaa_ca.crt.erb: config/certs/uaa/ca.crt
routing-api.yml.erb: config/routing-api.yml
+ routing_api_health_check.erb: bin/routing_api_health_check
locket_ca.crt.erb: config/certs/locket/ca.crt
locket_client.crt.erb: config/certs/locket/client.crt
locket_client.key.erb: config/certs/locket/client.key
api_mtls_client_ca.crt.erb: config/certs/routing-api/client_ca.crt
+ api_mtls_client.crt.erb: config/certs/routing-api/client.crt
+ api_mtls_client.key.erb: config/certs/routing-api/client.key
api_mtls_server.crt.erb: config/certs/routing-api/server.crt
api_mtls_server.key.erb: config/certs/routing-api/server.key
@@ -107,6 +110,13 @@ properties:
routing_api.mtls_client_key:
description: "Routing API client key (provided to clients by bosh link)"
+ routing_api.health_check_timeout_per_retry:
+ default: 2
+ description: "Maximum health check timeout (in seconds) for each retry attempt in the Routing API's route registration health check"
+ routing_api.health_check_total_timeout:
+ default: 6
+ description: "Maximum health check timeout (in seconds). Health checks will be retried until this time limit is reached. This should be less than or equal to your route_registrar.routes.api.health_check.timeout"
+
metron.port:
description: "The port used to emit dropsonde messages to the Metron agent."
default: 3457
```
## ✨ Built with go 1.20.2
**Full changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.260.0...v0.261.0
## Resources
- [Download release v0.261.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.261.0).
|
| silk | 3.23.0 | |
| smb-volume | 3.1.14 |
v3.1.14## Dependencies * **smbbroker:** Updated to v`6b6727c`. v3.1.13## Dependencies * **smbbroker:** Updated to v`62b84b6`. v3.1.12## Changes * Golang: Updated to v1.20.3 (#120, #128, #129) * Fix potential cred leak (#119) ## Dependencies * **smbbroker:** Updated to v`093c496`. v3.1.11## Changes ## Dependencies * **smbbroker:** Updated to v`c5b6f5e`. |
| smoke-tests | 4.8.2 | |
| syslog | 12.1.4 |
v12.1.4
## What's changed
* update golang to 1.20.4
**Full changelog**: https://github.com/cloudfoundry/syslog-release/compare/v12.1.3...v12.1.4
|
4.0.0
Release Date: 04/18/2023
Caution This release is susceptible to a known issue around multiple "HTTP 100 Continue" responses. For information about this issue, see Multiple HTTP Expect: 100-continue responses sent from gorouter to client may cause unexpected failures in the VMware Tanzu Support Hub. To address this issue, VMware advises upgrading to Tanzu Application Service v4.0.5 and Isolation Segment Tile v4.0.5 instead.
- [Breaking Change] Remove deprecated global log rate limit
- Bump bpm to version
1.1.21 - Bump garden-runc to version
1.25.0 - Bump loggregator-agent to version
7.1.2 - Bump metrics-discovery to version
3.2.7 - Bump nfs-volume to version
7.1.9 - Bump routing to version
0.260.0 - Bump smb-volume to version
3.1.10
| Component | Version | Release Notes |
|---|---|---|
| ubuntu-jammy stemcell | 1.95 | |
| bpm | 1.1.21 | |
| cf-networking | 3.23.0 | |
| cflinuxfs3 | 0.361.0 | |
| cflinuxfs4 | 1.5.0 | |
| diego | 2.73.0 | |
| garden-runc | 1.25.0 | |
| loggregator-agent | 7.1.2 |
v7.1.2
## What's changed
* update to golang 1.20.1
**Full changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v7.1.1...v7.1.2
v7.1.1
## What's changed
* update dependencies
* Add error messages for better traceability of filtered out syslog drain bindings by @chombium in https://github.com/cloudfoundry/loggregator-agent-release/pull/216
* Upgrade to go 1.20 by @rroberts2222 in https://github.com/cloudfoundry/loggregator-agent-release/pull/223
**Full changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v7.1.0...v7.1.1
v7.1.0
## What's changed
* Add app-id and drain url in the error message by @chombium in https://github.com/cloudfoundry/loggregator-agent-release/pull/212
## New contributors
* @chombium made their first contribution in https://github.com/cloudfoundry/loggregator-agent-release/pull/212
**Full changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v7.0.2...v7.1.0
v7.0.2
## What's changed
* Sanitize ProcID in syslog messages so messages with utf-8 in the source_type are not dropped by @Benjamintf1 in https://github.com/cloudfoundry/loggregator-agent-release/pull/200
* Update dependencies
**Full changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v7.0.1...v7.0.2
v7.0.1
## What's changed
* Fix: anonymize URL in syslog drain logs and metrics by @ctlong in https://github.com/cloudfoundry/loggregator-agent-release/pull/186
**Full changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v7.0.0...v7.0.1
v7.0.0
## What's changed
* Allow application developers to set client certs and keys, as well as server cas, to be used for authentication in syslog-tls drains by @fhambrec, @dark5un in https://github.com/cloudfoundry/loggregator-agent-release/pull/177 / https://github.com/cloudfoundry/loggregator-agent-release/pull/119. Breaking change: requires new version of capi
* Add drain scope and url tags to syslog egress metrics by @skaur20 in https://github.com/cloudfoundry/loggregator-agent-release/pull/123, Breaking change: might effect metrics dashboards and calculations.
## New contributors
* @skaur20 made their first contribution in https://github.com/cloudfoundry/loggregator-agent-release/pull/123
**Full changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v6.5.6...v7.0.0
|
| mapfs | 1.2.13 | |
| metrics-discovery | 3.2.7 | |
| nfs-volume | 7.1.9 | |
| routing | 0.260.0 | |
| silk | 3.23.0 | |
| smb-volume | 3.1.10 | |
| smoke-tests | 4.8.2 | |
| syslog | 12.1.3 |
How to install
To install Isolation Segment v4.0, see Installing Isolation Segment.
To install Isolation Segment v4.0, you must first install Tanzu Operations Manager v4.0. For more information, on how to install Tanzu Operations Manager, see the VMware Tanzu Operations Manager documentation.
New features in Isolation Segment v4.0
Breaking changes
Max request header size now defaults to 48 KB
When you Upgrade to IST v4.0 it automatically sets Max request header size in KB to 48 KB, unless the pre-existing configuration was already lower. Lowering this value establishes better security for TAS for VMs and applications. If necessary, this value can still be configured back up to 1024 KB in the Networking tab. Any requests with headers larger than this value receive a 431 status code.
Add validation for Certificate Authorities trusted by the Gorouter property
IST 4.0 contains validations for the Certificate Authorities (CA) trusted by the Gorouter property in the Networking tab. Any entries that are not valid CA certificates can result in an error in Tanzu Operations Manager. You must remove or replace invalid entries.
Option to activate (deprecated) Global Log Rate Limit is removed
This feature was in beta until IST v3.0, when it was deprecated following the introduction of app log rate limits.
For details, see Isolation Segment v3.0 Release Notes and also App Log Rate Feature. The option to enable this feature has now been removed, and you must apply app log rate limits instead.
Note: If you were using this feature to limit your overall app log throughput, then you might see an increase in log load after you upgrade.
To mitigate this, either:-
Scale up your logging system before you upgrade to IST v4.0 to compensate for the increased log load.
Or
-
Upgrade to TAS/IST v3.0 first to set app-level log rate limits while retaining the global log rate limit. For details, see App Log Rate Limits.
Known issues
Isolation Segment v4.0 includes the following known issues:
Stale routes might not be pruned properly in Gorouter
In addition, request failures that previously resulted in 496, 499, 503, 525, or 526 HTTP Status codes might now return Status Code 502 instead
