Here you will find the release notes for Isolation Segment v5.0.
VMware Tanzu Application Service for VMs (TAS for VMs) is certified by the Cloud Foundry Foundation for 2023.
For more information about the Cloud Foundry Certified Provider Program, see How Do I Become a Certified Provider? on the Cloud Foundry website.
Because VMware uses the Percona Distribution for MySQL, expect a time lag between Oracle releasing a MySQL patch and VMware releasing TAS for VMs containing that patch.
ImportantFor release 5.0.0 to 5.0.13, CVE-2024-22279. (VMware Tanzu Application Service for VMs GoRouter contains an RFC protocol issue that can lead to a denial of service) has been fixed. For details, see TNZ-2024-0100.
Releases
5.0.15
Release Date: 07/08/2024
- [Bug Fix] Route Registrar only sends 5 unregistration messages in a row when a route becomes unhealthy. This prevents Gorouter’s logs from filling up with unnecessary, repetitive log messages.
- Bump bpm to version
1.2.21 - Bump cflinuxfs3 to version
0.390.0 - Bump cflinuxfs4 to version
1.103.0 - Bump cf-cli to version
1.64.0 - Bump diego to version
2.100.0 - Bump mapfs to version
1.2.79 - Bump nfs-volume to version
7.1.74 - Bump otel-collector to version
0.5.0 - Bump routing to version
0.301.0 - Bump smb-volume to version
3.1.73 - Bump syslog to version
12.3.0
| Component | Version | Release Notes |
|---|---|---|
| ubuntu-jammy stemcell | 1.486 | |
| bpm | 1.2.21 | |
| cf-networking | 3.46.0 | |
| cflinuxfs3 | 0.390.0 |
v0.390.0
This release ships with cflinuxfs3 version 0.390.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.390.0)
v0.389.0
This release ships with cflinuxfs3 version 0.389.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.389.0)
v0.388.0
This release ships with cflinuxfs3 version 0.388.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.388.0)
|
| cflinuxfs4 | 1.103.0 |
v1.103.0
This release ships with cflinuxfs4 version 1.103.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.103.0)
v1.102.0
This release ships with cflinuxfs4 version 1.102.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.102.0)
v1.101.0
This release ships with cflinuxfs4 version 1.101.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.101.0)
v1.100.0
This release ships with cflinuxfs4 version 1.100.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.100.0)
v1.99.0
This release ships with cflinuxfs4 version 1.99.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.99.0)
v1.98.0
This release ships with cflinuxfs4 version 1.98.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.98.0)
v1.97.0
This release ships with cflinuxfs4 version 1.97.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.97.0)
v1.96.0
This release ships with cflinuxfs4 version 1.96.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.96.0)
v1.95.0
This release ships with cflinuxfs4 version 1.95.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.95.0)
v1.94.0
This release ships with cflinuxfs4 version 1.94.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.94.0)
v1.93.0
This release ships with cflinuxfs4 version 1.93.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.93.0)
v1.92.0
This release ships with cflinuxfs4 version 1.92.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.92.0)
|
| cf-cli | 1.64.0 |
v1.64.0
### Included CF CLI versions:
7.7.10
8.7.10
|
| count-cores-indicator | 2.0.0 | |
| diego | 2.100.0 |
v2.100.0
## Changes
- Bumped loggregator usage to loggregator v9 - Thanks @Birdrock!
- Bumped cfhttp usage to cfhttp v2 - Thanks @jrussett !
- Bumped go dependency bumps
## ✨ Built with go 1.22.3
**Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.99.0...v2.100.0
## Resources
- [Download release 2.100.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.100.0).
|
| garden-runc | 1.53.0 | |
| loggregator-agent | 8.1.1 | |
| mapfs | 1.2.79 |
v1.2.79## Changes * Add final release 1.2.72 [ci skip] * Golang: Updated to v1.22.4 (#269) * bump mapfs ## Dependencies * **v2:** Updated to v2.19.0. v1.2.72## Changes * Add final release 1.2.71 [ci skip] * Bump mapfs (#263) ## Dependencies * **mapfs:** Updated to v`ac01341`. |
| metrics-discovery | 3.2.24 | |
| nfs-volume | 7.1.74 |
v7.1.74
## Changes
* Golang: Updated to v1.22.4 (#963)
v7.1.73
## Changes
* Add final release 7.1.72 [ci skip]
* Use cf create|update-service-broker to register the service (#972)
* Bump openssl- from 3.3.0 to 3.3.1 (https://github.com/cloudfoundry/nfs-volume-release/pull/959)
* Golang: Updated to v1.22.4 (https://github.com/cloudfoundry/nfs-volume-release/pull/962)
v7.1.72
## Changes
* Add final release 7.1.71 [ci skip]
* Bump openssl- from 3.3.0 to 3.3.1 (#959)
* Golang: Updated to v1.22.4 (#962)
v7.1.71## Changes ## Dependencies * **nfsbroker:** Updated to v`b8a1e4c`. v7.1.68## Changes * Add final release 7.1.66 [ci skip] * Bump submodules (#938) ## Dependencies * **nfsbroker:** Updated to v`e1d14e4`. |
| otel-collector | 0.5.0 |
v0.5.0
## What's Changed
* Bump otel-collector to v0.103.0 in https://github.com/cloudfoundry/otel-collector-release/pull/28.
* If you have configured exporters to use persistent queues note that [re-enqueuing of failed batches has been removed](https://github.com/open-telemetry/opentelemetry-collector/releases/tag/v0.92.0).
* Bump to [go1.21.11](https://groups.google.com/g/golang-announce/c/XbxouI9gY7k/m/TuoGEhxIEwAJ).
**Full Changelog**: https://github.com/cloudfoundry/otel-collector-release/compare/v0.4.1...v0.5.0
|
| routing | 0.301.0 |
v0.301.0
## Changes
- 🐛Fixes a bug introduced in [v0.298.0](https://github.com/cloudfoundry/routing-release/releases/tag/v0.298.0) where the `X-Forwarded-Host` header was incorrectly set for requests containing an `Expect: 100-continue` header. Thanks @maxmoehl !
## ✨ Built with go 1.22.4
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.300.0...v0.301.0
## Resources
- [Download release 0.301.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.301.0).
v0.300.0
## Changes
- Update route registrar to only send 5 unregistration messages for an unhealthy route - https://github.com/cloudfoundry/route-registrar/pull/46 . Thanks @andy-a-d-nguyen for your first contribution to CF!
## ✨ Built with go 1.22.4
## Resources
- [Download release 0.300.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.300.0).
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.299.0...v0.300.0
v0.299.0
## Changes
- Bumped to Golang 1.22.4
- Added ability to enforce strict validation of route service signature. Thanks @maxmoehl, @b1tamara and @plowin !
## Bosh Job Spec changes:
```diff
diff --git a/jobs/gorouter/spec b/jobs/gorouter/spec
index 8269440b..60c7b520 100644
--- a/jobs/gorouter/spec
+++ b/jobs/gorouter/spec
@@ -262,6 +262,9 @@ properties:
router.route_services_timeout:
description: "Expiry time of a route service signature in seconds"
default: 60
+ router.route_services_strict_signature_validation:
+ description: "Enforce strict validation of a route service signature"
+ default: false
router.max_header_kb:
description: |
This value controls the maximum number of bytes (in KB) the gorouter will read
```
## ✨ Built with go 1.22.4
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.298.0...v0.299.0
## Resources
- [Download release 0.299.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.299.0).
|
| silk | 3.46.0 | |
| smb-volume | 3.1.73 |
v3.1.73## Changes ## Dependencies * **smbdriver:** Updated to v`9ec4dc3`. v3.1.72## Changes * Bump smbdriver (#414) * Golang: Updated to v1.22.4 (#422) * Use cf create|update-service-broker to register the service (#424) ## Dependencies * **v2:** Updated to v2.19.0. v3.1.69## Changes * Add final release 3.1.68 [ci skip] ## Dependencies * **smbbroker:** Updated to v`da19354`. |
| smoke-tests | 4.10.0 | |
| syslog | 12.3.0 |
v12.3.0
## What's Changed
### Features
* Use service command to restart rsyslog, enabling BOSH Lite deployment by @ohkyle in https://github.com/cloudfoundry/syslog-release/pull/178
### Maintenance
* Bump blackbox dependencies
* Bump packaged Golang to go1.21.11
## New Contributors
* @ohkyle made their first contribution in https://github.com/cloudfoundry/syslog-release/pull/178
**Full Changelog**: https://github.com/cloudfoundry/syslog-release/compare/v12.2.5...v12.3.0
|
| tanzu-jammy-stack | 1.0.1 |
5.0.14
Release Date: 05/29/2024
- [Bug Fix] Remove replication-canary
- [Bug fix] Automatically restart Route Emitter after multiple failed attempts to greet Gorouter. This fixes a rare bug that prevented Route Emitter from being able to register routes.
- Bump bpm to version
1.2.19 - Bump cflinuxfs4 to version
1.91.0 - Bump diego to version
2.99.0 - Bump garden-runc to version
1.53.0 - Bump mapfs to version
1.2.70 - Bump nfs-volume to version
7.1.66 - Bump routing to version
0.298.0 - Bump smb-volume to version
3.1.68
| Component | Version | Release Notes |
|---|---|---|
| ubuntu-jammy stemcell | 1.445 | |
| bpm | 1.2.19 | |
| cf-networking | 3.46.0 | |
| cflinuxfs3 | 0.387.0 | |
| cflinuxfs4 | 1.91.0 |
v1.91.0
This release ships with cflinuxfs4 version 1.91.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.91.0)
v1.90.0
This release ships with cflinuxfs4 version 1.90.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.90.0)
v1.89.0
This release ships with cflinuxfs4 version 1.89.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.89.0)
v1.88.0
This release ships with cflinuxfs4 version 1.88.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.88.0)
v1.87.0
This release ships with cflinuxfs4 version 1.87.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.87.0)
v1.86.0
This release ships with cflinuxfs4 version 1.86.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.86.0)
v1.85.0
This release ships with cflinuxfs4 version 1.85.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.85.0)
v1.84.0
This release ships with cflinuxfs4 version 1.84.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.84.0)
v1.83.0
This release ships with cflinuxfs4 version 1.83.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.83.0)
|
| cf-cli | 1.60.0 | |
| count-cores-indicator | 2.0.0 | |
| diego | 2.99.0 |
v2.99.0
## Changes
- Do not remove evacuating actual LRP during cleanup ([rep#53](https://github.com/cloudfoundry/rep/pull/53))
- Add additional retries when apps make use of credhub for credentials. ([buildpackapplifecycle#71](https://github.com/cloudfoundry/buildpackapplifecycle/pull/71))
- Prevent panics in BBS by checking for all types of errors ([bbs#95](https://github.com/cloudfoundry/bbs/pull/95))
- Add retry logic and more explicit failure in router emitter start-up ([router-emitter#34](https://github.com/cloudfoundry/route-emitter/pull/34))
- Bump envoy blob version to `1.28.3`
- Go mod dependency bumps
## ✨ Built with go 1.22.3
**Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.98.0...v2.99.0
## Resources
- [Download release 2.99.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.99.0).
|
| garden-runc | 1.53.0 |
v1.53.0
## Changes
- **DEPRECATION NOTICE** The `garden.experimental_use_containerd_mode_for_processes` property and usage of Garden when run in containerd mode for processes is now deprecated and no longer tested.
- **DEFAULT CHANGE** - The default mode for garden containers is now containerd. This has been the default in cf-deployment since 2018.
- **REMOVAL OF EXPERIMENTAL FUNCTIONALITY NOTICE** The experimental option to run the garden server process in rootless mode has been removed, as it did not work as expected and was an abandoned feature.
- Go package dependency bumps
## Bosh Job Spec changes:
```diff
diff --git a/jobs/garden-binaries/spec b/jobs/garden-binaries/spec
index 0433639a..a8a96bae 100644
--- a/jobs/garden-binaries/spec
+++ b/jobs/garden-binaries/spec
@@ -15,7 +15,6 @@ packages:
- grootfs
- xfs-progs
- thresholder
- - netplugin-shim
- dontpanic
- tini
diff --git a/jobs/garden/spec b/jobs/garden/spec
index 027df351..093e53e1 100644
--- a/jobs/garden/spec
+++ b/jobs/garden/spec
@@ -36,7 +36,6 @@ packages:
- grootfs
- xfs-progs
- thresholder
- - netplugin-shim
- dontpanic
- tini
@@ -199,10 +198,6 @@ properties:
description: AppArmor profile to use for unprivileged container processes
default: garden-default
- garden.experimental_rootless_mode:
- description: A boolean stating whether or not to run garden-server as a non-root user
- default: false
-
# We believe this defaults to false to help concourse: https://github.com/cloudfoundry/garden-runc-release/releases/tag/v1.5.0
# For diego/cf, this should be set to true
garden.cleanup_process_dirs_on_wait:
@@ -210,8 +205,8 @@ properties:
default: false
garden.containerd_mode:
- description: "Use containerd for container lifecycle management. NOTE: cannot be used in combination with bpm or rootless"
- default: false
+ description: "Use containerd for container lifecycle management. NOTE: cannot be used in combination with bpm"
+ default: true
garden.tcp_keepalive_time:
description: Sets the `net.ipv4.tcp_keepalive_time` kernel parameter in containers. If not specified, the value from the linux init_net namespace is used.
@@ -229,7 +224,7 @@ properties:
description: Sets the `net.ipv4.tcp_retries2` kernel parameter in containers. If not specified, the value from the linux init_net namespace is used.
garden.experimental_use_containerd_mode_for_processes:
- description: "(Under development) Use containerd for container process management. Must be used with containerd_mode also set to true. NOTE: cannot be used in combination with bpm or rootless"
+ description: "(Deprecated) No longer used/tested."
default: false
garden.experimental_cpu_throttling:
diff --git a/jobs/gats/spec b/jobs/gats/spec
index 916a35eb..065e3ace 100644
--- a/jobs/gats/spec
+++ b/jobs/gats/spec
@@ -22,12 +22,6 @@ properties:
garden_test_rootfs:
description: Test rootfs to use
default: 'docker:///cloudfoundry/garden-rootfs'
- containerd_for_processes:
- description: Run GATS with CONTAINERD_FOR_PROCESSES_ENABLED
- default: false
- rootless:
- description: Run GATS with ROOTLESS env var
- default: false
cpu_throttling:
description: Run GATS with CPU_THROTTLING_ENABLED
default: false
```
## ✨ Built with go 1.22.3
**Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.52.0...v1.53.0
## Resources
- [Download release 1.53.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.53.0).
|
| loggregator-agent | 8.1.1 | |
| mapfs | 1.2.70 |
v1.2.70## Changes * Golang: Updated to v1.22.3. (#259) ## Dependencies * **v2:** Updated to v2.17.3. v1.2.69## Dependencies * **v2:** Updated to v2.17.2. |
| metrics-discovery | 3.2.24 | |
| nfs-volume | 7.1.66 |
v7.1.66## Dependencies * **v2:** Updated to v2.17.3. v7.1.65## Changes * Golang: Updated to v1.22.3 (#920) * Bump util-linux from 2.40 to 2.40.1 (#922) * Change nfsv3driver statd default port to `41793` (non-ephemeral) (#909) * Use newest cf-cli available (#913) ## Dependencies * **nfsbroker:** Updated to v`071d3d8`. v7.1.64## Dependencies * **gomega:** Updated to v1.33.1. |
| otel-collector | 0.4.1 | |
| routing | 0.298.0 |
v0.298.0
## Changes
- :bug: Improve support for requests using the Expect: 100-continue header.
- :bug: The missing_content_length_header metric introduced in 0.297.0 has been renamed to empty_content_length_header for more accuracy. Thanks @peanball!
- :bug: The empty_content_length_header was fixed to more accurately capture events when the content-length header of a request was empty. Previously extra request types were being included erroneously.
## Bosh Job Spec changes:
```diff
diff --git a/jobs/gorouter/spec b/jobs/gorouter/spec
index 712a761f..8269440b 100644
--- a/jobs/gorouter/spec
+++ b/jobs/gorouter/spec
@@ -306,6 +306,9 @@ properties:
router.keep_alive_probe_interval:
default: 1s
description: Interval between TCP keep alive probes. Value is a string (e.g. "10s")
+ router.keep_alive_100_continue_requests:
+ description: "If set gorouter reuses backend connection for requests expecting 100-Continue"
+ default: false
router.force_forwarded_proto_https:
description: "Enables setting X-Forwarded-Proto header if SSL termination happened upstream and incorrectly set the header value. When this property is set to true gorouter sets the header X-Forwarded-Proto to https. When this value set to false, gorouter set the header X-Forwarded-Proto to the protocol of the incoming request"
default: false
```
## ✨ Built with go 1.22.3
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.297.0...v0.298.0
## Resources
- [Download release 0.298.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.298.0).
v0.297.0
## Changes
- **🐛FIXES KNOWN ISSUE** Gorouter now correctly returns the status code provided by backends for workflows using 100-continue, or other 1xx interim status codes. Thanks for catching this @plowin @domdom82 and thanks @geofffranks for the quick fix!
- 🐛The TLS listener for the health status endpoint in gorouter now handles custom cipher-suites that do not include any of the required HTTP/2 ciphers. Thanks @MarcPaquette + @geofffranks!
- 🐛 Failing to establish a TCP connection to a backend no longer causes a panic when setting up a WebSocket connection. Thanks @domdom82!
- ✨The health status endpoint for gorouter is now able to log error messages encountered when it starts up, to aid in troubleshooting. Thanks @MarcPaquette and @geofffranks !
- ✨Gorouter now provides a `missing_content_length_header` metric that will flag requests that would have been hit by Golang 1.22's new check to reject requests that have an empty content-length header. This can be used to determine if an environment will be affected by disabling the `go.httplaxcontentlength` gorouter property. Thanks @mariash!
- **NOTE:** The metric is counting requests unaffected by the new golang behavior and will be updated in 0.298.0+, where it is also renamed to `empty_content_length_header`.
- ✨Route registrar now allows operators to specify load blancing algorithms for individual routes. Thanks @b1tamara and @domdom82 !
- Bumped to golang 1.22.3
## Bosh Job Spec changes:
```diff
diff --git a/jobs/route_registrar/spec b/jobs/route_registrar/spec
index c51dbb9f..de81a0e8 100644
--- a/jobs/route_registrar/spec
+++ b/jobs/route_registrar/spec
@@ -125,7 +125,8 @@ properties:
with error, the route is unregistered.
router_group (required, string, for tcp routes): Name of the router group to which the TCP route should be added.
external_port (required, string, for tcp routes): Port that the TCP router will listen on.
- server_cert_domain_name_modifier (optional, string, for sni routes): a regex replace to help with complicated hostnames
+ server_cert_domain_name_modifier (optional, string, for sni routes): a regex replace to help with complicated hostnames.
+ options (optional, object, for http routes): Custom per-route options
health_check object
name (required, string): Human-readable reference for the healthcheck
@@ -135,6 +136,9 @@ properties:
the script is terminated with `SIGKILL` and the route is unregistered. Value is a string (e.g. "10s") and must parse to a positive time duration i.e. "-5s" is not permitted. Must be less than the value of `registration_interval`.
Default: Half of the value of `registration_interval`
+ options object
+ lb_algo (optional, string): Load balancing algorithm for routing incoming requests to the backend: 'round-robin' or 'least-connection'. In cases where this option is not specified, the algorithm defined in gorouter spec is applied.
+
example: |
- name: my-service
uris:
@@ -150,6 +154,8 @@ properties:
script_path: /path/to/script
timeout: 5s
route_service_url: https://my-oauth-proxy-route-service.example.com
+ options:
+ lb_algo: least-connection
- name: my-tls-endpoint
tls_port: 12346
server_cert_domain_san: "my-tls-endpoint.internal.com"
```
## ✨ Built with go 1.22.3
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.296.0...v0.297.0
## Resources
- [Download release 0.297.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.297.0).
|
| silk | 3.46.0 | |
| smb-volume | 3.1.68 |
v3.1.68## Changes * Golang: Updated to v1.22.3 (#408) ## Dependencies * **v2:** Updated to v2.17.3. v3.1.67## Changes * Use newest cf-cli available (#405) ## Dependencies * **v2:** Updated to v2.17.2. |
| smoke-tests | 4.10.0 | |
| syslog | 12.2.5 | |
| tanzu-jammy-stack | 1.0.1 |
5.0.13
Release Date: 05/03/2024
Caution This release is susceptible to a known issue where Gorouter returns an incorrect HTTP status code in response to requests with an "HTTP 100 Continue" interim status header. To resolve this issue, see the Broadcom Knowledge Base article Gorouter Returns wrong HTTP response code to client when the request flow uses HTTP 100-continue.
- Bump loggregator-agent to version
8.1.1
| Component | Version | Release Notes |
|---|---|---|
| ubuntu-jammy stemcell | 1.423 | |
| bpm | 1.2.18 | |
| cf-networking | 3.46.0 | |
| cflinuxfs3 | 0.387.0 | |
| cflinuxfs4 | 1.82.0 | |
| cf-cli | 1.60.0 | |
| count-cores-indicator | 2.0.0 | |
| diego | 2.98.0 | |
| garden-runc | 1.52.0 | |
| loggregator-agent | 8.1.1 |
v8.1.1
## What's Changed
* Bump dependencies
* Fix Syslog Binding Cache polling to wait for the entire polling interval between each operation in https://github.com/cloudfoundry/loggregator-agent-release/pull/572
**Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.1.0...v8.1.1
|
| mapfs | 1.2.68 | |
| metrics-discovery | 3.2.24 | |
| nfs-volume | 7.1.63 | |
| otel-collector | 0.4.1 | |
| routing | 0.296.0 | |
| silk | 3.46.0 | |
| smb-volume | 3.1.66 | |
| smoke-tests | 4.10.0 | |
| syslog | 12.2.5 | |
| tanzu-jammy-stack | 1.0.1 |
5.0.12
Release Date: 05/01/2024
Caution This release is susceptible to a known issue where Gorouter returns an incorrect HTTP status code in response to requests with an "HTTP 100 Continue" interim status header. To resolve this issue, see the Broadcom Knowledge Base article Gorouter Returns wrong HTTP response code to client when the request flow uses HTTP 100-continue.
- Bump cf-networking to version
3.46.0 - Bump diego to version
2.98.0 - Bump garden-runc to version
1.52.0 - Bump loggregator-agent to version
8.1.0 - Bump mapfs to version
1.2.68 - Bump nfs-volume to version
7.1.63 - Bump routing to version
0.296.0 - Bump silk to version
3.46.0 - Bump smb-volume to version
3.1.66 - Bump syslog to version
12.2.5
| Component | Version | Release Notes |
|---|---|---|
| ubuntu-jammy stemcell | 1.423 | |
| bpm | 1.2.18 | |
| cf-networking | 3.46.0 |
v3.46.0
## Changes
- Bump Golang to 1.22
## Bosh Job Spec changes:
```diff
diff --git a/jobs/performance-test-sd/spec b/jobs/performance-test-sd/spec
index c89d50f5..0583340e 100644
--- a/jobs/performance-test-sd/spec
+++ b/jobs/performance-test-sd/spec
@@ -6,7 +6,7 @@ templates:
config.json.erb: config.json
packages:
- - golang-1.21-linux
+ - golang-1.22-linux
- performance-test-sd
consumes:
```
## ✨ Built with go 1.22.2
**Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.45.0...v3.46.0
## Resources
- [Download release 3.46.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.46.0).
|
| cflinuxfs3 | 0.387.0 | |
| cflinuxfs4 | 1.82.0 | |
| cf-cli | 1.60.0 | |
| count-cores-indicator | 2.0.0 | |
| diego | 2.98.0 |
v2.98.0
## Changes
- Update Golang to 1.22
## Bosh Job Spec changes:
```diff
diff --git a/jobs/vizzini/spec b/jobs/vizzini/spec
index 7eb920159..d61278357 100644
--- a/jobs/vizzini/spec
+++ b/jobs/vizzini/spec
@@ -1,7 +1,7 @@
---
name: vizzini
packages:
- - golang-1.21-linux
+ - golang-1.22-linux
- vizzini
templates:
```
## ✨ Built with go 1.22.2
**Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.97.0...v2.98.0
## Resources
- [Download release 2.98.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.98.0).
|
| garden-runc | 1.52.0 |
v1.52.0
## Changes
- Bump Golang to 1.22
## ✨ Built with go 1.22.2
**Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.51.0...v1.52.0
## Resources
- [Download release 1.52.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.52.0).
|
| loggregator-agent | 8.1.0 |
v8.1.0
## What's Changed
* Replace usages of `grpc.Dial` with `grpc.NewClient` which does not open connections until necessary
* Bump dependencies
### Experimental OTel Collector changes
* Added `temporary_emit_otel_traces` property to the loggr-forwarder-agent and loggr-forwarder-agent-windows jobs. Setting this property to `true` activates conversion of appropriately tagged http timers to OpenTelemetry traces (it defaults to `false`). See cloudfoundry/gorouter#407.
**Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.0.3...v8.1.0
v8.0.4
Don't use. It contains the code changes from v8.1.0 but without a semver minor bump to indicate new functionality.
|
| mapfs | 1.2.68 |
v1.2.68## Dependencies * **gomega:** Updated to v1.33.0. v1.2.67## Dependencies * **mapfs:** Updated to v`b5baec0`. |
| metrics-discovery | 3.2.24 | |
| nfs-volume | 7.1.63 |
v7.1.63## Changes * Add final release 7.1.62 [ci skip] ## Dependencies * **gomega:** Updated to v1.33.0. v7.1.62## Changes * Bump sqlite from 3.45.2 to 3.45.3 (#881) ## Dependencies * **nfsbroker:** Updated to v`680bc33`. |
| otel-collector | 0.4.1 | |
| routing | 0.296.0 |
v0.296.0
## Changes
- Pass availability zone in route-registrar for AZ-aware routing of system components
- Bump Golang to 1.22
## Bosh Job Spec changes:
```diff
diff --git a/jobs/acceptance_tests/spec b/jobs/acceptance_tests/spec
index e1a6a9ae..8122ddaf 100644
--- a/jobs/acceptance_tests/spec
+++ b/jobs/acceptance_tests/spec
@@ -7,7 +7,7 @@ templates:
bpm.yml.erb: config/bpm.yml
packages:
- - golang-1.21-linux
+ - golang-1.22-linux
- acceptance_tests
- rtr
- cf-cli-8-linux
diff --git a/jobs/smoke_tests/spec b/jobs/smoke_tests/spec
index b230192b..02edfd9d 100644
--- a/jobs/smoke_tests/spec
+++ b/jobs/smoke_tests/spec
@@ -7,7 +7,7 @@ templates:
bpm.yml.erb: config/bpm.yml
packages:
- - golang-1.21-linux
+ - golang-1.22-linux
- acceptance_tests
- cf-cli-8-linux
```
## ✨ Built with go 1.22.2
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.295.0...v0.296.0
## Resources
- [Download release 0.296.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.296.0).
|
| silk | 3.46.0 |
v3.46.0
## Changes
- Bump Golang to 1.22
## ✨ Built with go 1.22.2
**Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.45.0...v3.46.0
## Resources
- [Download release 3.46.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.46.0).
|
| smb-volume | 3.1.66 |
v3.1.66## Changes * Add final release 3.1.65 [ci skip] ## Dependencies * **smbbroker:** Updated to v`b2fb57d`. |
| smoke-tests | 4.10.0 | |
| syslog | 12.2.5 |
v12.2.5
## What's Changed
* Bump dependencies
**Full Changelog**: https://github.com/cloudfoundry/syslog-release/compare/v12.2.4...v12.2.5
|
| tanzu-jammy-stack | 1.0.1 |
5.0.11
Release Date: 04/17/2024
Caution This release is susceptible to a known issue where Gorouter returns an incorrect HTTP status code in response to requests with an "HTTP 100 Continue" interim status header. To resolve this issue, see the Broadcom Knowledge Base article Gorouter Returns wrong HTTP response code to client when the request flow uses HTTP 100-continue.
- [Feature] Add option to enable concurrent read/writes for HTTP/1
- [Feature Improvement] Emit cpu_entitlement metric
- Bump bpm to version
1.2.18 - Bump cf-networking to version
3.45.0 - Bump diego to version
2.97.0 - Bump garden-runc to version
1.51.0 - Bump loggregator-agent to version
8.0.3 - Bump mapfs to version
1.2.66 - Bump metrics-discovery to version
3.2.24 - Bump nfs-volume to version
7.1.61 - Bump otel-collector to version
0.4.1 - Bump routing to version
0.295.0 - Bump silk to version
3.45.0 - Bump smb-volume to version
3.1.64 - Bump smoke-tests to version
4.10.0 - Bump syslog to version
12.2.4
| Component | Version | Release Notes |
|---|---|---|
| ubuntu-jammy stemcell | 1.423 | |
| bpm | 1.2.18 | |
| cf-networking | 3.45.0 |
v3.45.0
## Changes
- Go dependency bumps
- Added config for staticcheck
- Removed references to consul from documentation
## Bosh Job Spec changes:
```diff
diff --git a/jobs/policy-server-asg-syncer/spec b/jobs/policy-server-asg-syncer/spec
index 748c39a7..4c6c9a4e 100644
--- a/jobs/policy-server-asg-syncer/spec
+++ b/jobs/policy-server-asg-syncer/spec
@@ -109,7 +109,7 @@ properties:
description: "Trusted CA for UAA server."
uaa_hostname:
- description: "Host name for the UAA server. E.g. the service advertised via Consul DNS. Must match common name in the UAA server cert. Must be listed in `uaa.zones.internal.hostnames`."
+ description: "Host name for the UAA server. E.g. the service advertised via Bosh DNS. Must match common name in the UAA server cert. Must be listed in `uaa.zones.internal.hostnames`."
default: uaa.service.cf.internal
uaa_port:
diff --git a/jobs/policy-server-internal/spec b/jobs/policy-server-internal/spec
index 7095775d..029e723f 100644
--- a/jobs/policy-server-internal/spec
+++ b/jobs/policy-server-internal/spec
@@ -41,7 +41,7 @@ properties:
default: 31946
health_check_timeout_seconds:
- description: "Health check timeout for Consul DNS."
+ description: "Health check timeout"
default: 5
internal_listen_port:
@@ -52,7 +52,7 @@ properties:
description: "Trusted CA certificate that was used to sign the vxlan policy agent's client cert and key."
server_cert:
- description: "Server certificate for TLS. Must have common name that matches the Consul DNS name of the policy server, eg `policy-server.service.cf.internal`."
+ description: "Server certificate for TLS. Must have common name that matches the Bosh DNS name of the policy server, eg `policy-server.service.cf.internal`."
server_key:
description: "Server key for TLS."
diff --git a/jobs/policy-server/spec b/jobs/policy-server/spec
index 0d9f5157..8e2ccfa8 100644
--- a/jobs/policy-server/spec
+++ b/jobs/policy-server/spec
@@ -101,7 +101,7 @@ properties:
description: "Trusted CA for UAA server."
uaa_hostname:
- description: "Host name for the UAA server. E.g. the service advertised via Consul DNS. Must match common name in the UAA server cert. Must be listed in `uaa.zones.internal.hostnames`."
+ description: "Host name for the UAA server. E.g. the service advertised via Bosh DNS. Must match common name in the UAA server cert. Must be listed in `uaa.zones.internal.hostnames`."
default: uaa.service.cf.internal
uaa_port:
```
## ✨ Built with go 1.21.8
**Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.44.0...v3.45.0
## Resources
- [Download release 3.45.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.45.0).
|
| cflinuxfs3 | 0.387.0 | |
| cflinuxfs4 | 1.82.0 | |
| cf-cli | 1.60.0 | |
| count-cores-indicator | 2.0.0 | |
| diego | 2.97.0 |
v2.97.0
## Changes
- Adds support for comma-delimited destinations in ASGs
- See: https://github.com/cloudfoundry/executor/pull/96 and https://github.com/cloudfoundry/bbs/pull/94
- Bump bosh package blobs
- Bumps `jq` to `1.7.1`
- Bumps `tar`
- Bump go.mod dependencies
## ✨ Built with go 1.21.8
**Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.96.0...v2.97.0
## Resources
- [Download release 2.97.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.97.0).
v2.96.0
## Changes
- Bump to golang 1.21.8
- Golang package dependency bumps
- Includes moving from docker v20 to docker v26
- Includes moving from pgx v3 to pgx v5
- Remove references to Consul from boshrelease + documentation
- Many fixes to remove deprecated code and otherwise fix linter violations.
## ✨ Built with go 1.21.8
**Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.95.0...v2.96.0
## Resources
- [Download release 2.96.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.96.0).
|
| garden-runc | 1.51.0 |
v1.51.0
## Changes
- Bumped Golang to 1.21.8
- Golang package dependency bumps
- Many updates to get codebase passing the staticcheck linker
- Updated garden-integration-tests to be a little less flakey
## ✨ Built with go 1.21.8
**Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.50.0...v1.51.0
## Resources
- [Download release 1.51.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.51.0).
|
| loggregator-agent | 8.0.3 |
v8.0.3
## What's Changed
* Bump dependencies
* Bump to [go1.21.9](https://groups.google.com/g/golang-announce/c/YgW0sx8mN3M/m/khALNYGdAAAJ)
**Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.0.2...v8.0.3
|
| mapfs | 1.2.66 |
v1.2.66## Dependencies * **mapfs:** Updated to v`b0b6bfa`. v1.2.65## Changes * Golang: Updated to v1.22.2. (#241) ## Dependencies * **mapfs:** Updated to v`a80b833`. v1.2.64## Dependencies * **v2:** Updated to v2.17.1. v1.2.63## Dependencies * **v2:** Updated to v2.17.0. |
| metrics-discovery | 3.2.24 |
v3.2.24
## What's Changed
* Bump dependencies
* Bump to [go1.21.9](https://groups.google.com/g/golang-announce/c/YgW0sx8mN3M/m/khALNYGdAAAJ)
**Full Changelog**: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.23...v3.2.24
|
| nfs-volume | 7.1.61 |
v7.1.61## Changes * Golang: Updated to v1.22.2 (#860) * Bump openssl- from 3.2.1 to 3.3.0 (#871) ## Dependencies * **nfsbroker:** Updated to v`1a70719`. v7.1.60## Dependencies * **nfsbroker:** Updated to v`8aec99d`. v7.1.59## Changes * Bump util-linux from 2.39.3 to 2.40 (#853) ## Dependencies * **nfsbroker:** Updated to v`7bc7bb0`. v7.1.58## Dependencies * **nfsbroker:** Updated to v`e850d95`. |
| otel-collector | 0.4.1 |
v0.4.1
## What's Changed
* Bump dependencies
* Bump to [go1.21.9](https://groups.google.com/g/golang-announce/c/YgW0sx8mN3M/m/khALNYGdAAAJ)
**Full Changelog**: https://github.com/cloudfoundry/otel-collector-release/compare/v0.4.0...v0.4.1
|
| routing | 0.295.0 |
v0.295.0
## Changes
- Resolves #401 by reverting the removal of the deprecated BuildNameToCertificate() call
- Bumps to golang 1.21.9 + golang.org/x/net 0.23.0 to patch CVE-2023-45288
## ✨ Built with go 1.21.9
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.294.0...v0.295.0
## Resources
- [Download release 0.295.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.295.0).
v0.294.0
⚠️ This release contains a known issue: gorouter will no longer present the most specific certificate match but rather the first certificate that matches. See https://github.com/cloudfoundry/routing-release/issues/401 for details. Upgrading to routing-release 0.295.0 is advised. ⚠️
## Changes
- [Bump haproxy to 2.8.7](https://github.com/cloudfoundry/routing-release/commit/13b39eb5185656c3557c1ab15b5b13752b2ff6d8)
- [update templates to not refer to consul](https://github.com/cloudfoundry/routing-release/commit/8216c056b1463bd1d7bf636a749568f70cb924d2)
- [Default the routing_api.enabled_api_endpoints to mtls](https://github.com/cloudfoundry/routing-release/commit/2e96c2c932f7f945c3c7c15a768d0affc80de446)
- [Update template test for mTLS routing api default](https://github.com/cloudfoundry/routing-release/commit/469d9e0a4eb0ac6015695ba27c6da80576b29801)
- [Upgrade cf-cli-8-linux](https://github.com/cloudfoundry/routing-release/commit/b19a25052ed7982c83524ac87d22ed2f316201a2)
## Bosh Job Spec changes:
```diff
diff --git a/jobs/routing-api/spec b/jobs/routing-api/spec
index 1d7efe3c..2e5cd361 100644
--- a/jobs/routing-api/spec
+++ b/jobs/routing-api/spec
@@ -95,7 +95,7 @@ properties:
routing_api.enabled_api_endpoints:
description: "Protocols that the routing api will listen on. Possible values: 'mtls', or 'both' (mTLS + HTTP)"
- default: "both"
+ default: "mtls"
routing_api.mtls_port:
description: "Port on which Routing API is running, listening with mTLS."
default: 3001
```
## ✨ Built with go 1.21.8
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.293.0...v0.294.0
## Resources
- [Download release 0.294.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.294.0).
|
| silk | 3.45.0 |
v3.45.0
## Changes
- Fixes to stop using deprecated code in tests (`net.Error.Temporary()`)
- Remove consul references from documentation
- Fix issues bumping the code.cloudfoundry.org/executor package
- Go package bumps
## Bosh Job Spec changes:
```diff
diff --git a/jobs/silk-controller/spec b/jobs/silk-controller/spec
index a0966a01..cc7529a8 100644
--- a/jobs/silk-controller/spec
+++ b/jobs/silk-controller/spec
@@ -45,11 +45,11 @@ properties:
default: 46455
health_check_port:
- description: "Health check port for silk controller. Used by the Consul DNS health check."
+ description: "Health check port for silk controller. Used by the Bosh DNS health check."
default: 19683
health_check_timeout_seconds:
- description: "Health check timeout for Consul DNS."
+ description: "Health check timeout"
default: 5
listen_ip:
@@ -64,7 +64,7 @@ properties:
description: "Trusted CA certificate that was used to sign the silk daemon client cert and key."
server_cert:
- description: "Server certificate for TLS. Must have common name that matches the Consul DNS name of the silk controller, eg silk-controller.service.cf.internal"
+ description: "Server certificate for TLS. Must have common name that matches the Bosh DNS name of the silk controller, eg silk-controller.service.cf.internal"
server_key:
description: "Server key for TLS."
diff --git a/jobs/silk-daemon/spec b/jobs/silk-daemon/spec
index 7a1525b3..e3786357 100644
--- a/jobs/silk-daemon/spec
+++ b/jobs/silk-daemon/spec
@@ -70,7 +70,7 @@ properties:
default: 3457
silk_controller.hostname:
- description: "Host name for the silk controller. E.g. the service advertised via Consul DNS. Must match common name in the silk_controller.server_cert"
+ description: "Host name for the silk controller. E.g. the service advertised via Bosh DNS. Must match common name in the silk_controller.server_cert"
default: "silk-controller.service.cf.internal"
silk_controller.listen_port:
diff --git a/jobs/vxlan-policy-agent/spec b/jobs/vxlan-policy-agent/spec
index 3118022b..802f04bb 100644
--- a/jobs/vxlan-policy-agent/spec
+++ b/jobs/vxlan-policy-agent/spec
@@ -41,7 +41,7 @@ properties:
default: false
policy_server.hostname:
- description: "Host name for the policy server. E.g. the service advertised via Consul DNS. Must match common name in the policy_server.server_cert"
+ description: "Host name for the policy server. E.g. the service advertised via Bosh DNS. Must match common name in the policy_server.server_cert"
default: "policy-server.service.cf.internal"
policy_server.internal_listen_port:
```
## ✨ Built with go 1.21.8
**Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.44.0...v3.45.0
## Resources
- [Download release 3.45.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.45.0).
|
| smb-volume | 3.1.64 |
v3.1.64## Dependencies * **smbbroker:** Updated to v`02f340b`. v3.1.63## Changes * Golang: Updated to v1.22.2 (#381) ## Dependencies * **smbbroker:** Updated to v`b380e77`. v3.1.62## Dependencies * **v2:** Updated to v2.17.1. v3.1.61## Dependencies * **v2:** Updated to v2.17.0. |
| smoke-tests | 4.10.0 |
4.10.0
Create bosh final release 4.10.0
4.9.5
Create bosh final release 4.9.5
## What's Changed
* Upgrade Golang to 1.22 by @tas-operability-bot in https://github.com/pivotal/smoke-tests/pull/138
**Full Changelog**: https://github.com/pivotal/smoke-tests/compare/4.9.5...4.9.5
|
| syslog | 12.2.4 |
v12.2.4
## What's Changed
* Bump dependencies
* Bump packaged Golang to go1.21.9
**Full Changelog**: https://github.com/cloudfoundry/syslog-release/compare/v12.2.3...v12.2.4
|
| tanzu-jammy-stack | 1.0.1 |
5.0.10
Release Date: 03/22/2024
Caution This release is susceptible to a known issue where Gorouter returns an incorrect HTTP status code in response to requests with an "HTTP 100 Continue" interim status header. To resolve this issue, see the Broadcom Knowledge Base article Gorouter Returns wrong HTTP response code to client when the request flow uses HTTP 100-continue.
- [Known Issue] A Gorouter bug can cause an incorrect certificate to be presented to clients, depending on the order in which the clients were specified in TAS configuration. This is fixed in routing-release version 0.295.0
- [Feature Improvement] Reintroduce global log rate limit
- [Bug Fix] Fix “routine” garden container disk cleanup option
- Bump bpm to version
1.2.17 - Bump cf-networking to version
3.44.0 - Bump cflinuxfs3 to version
0.387.0 - Bump cflinuxfs4 to version
1.82.0 - Bump loggregator-agent to version
8.0.2 - Bump mapfs to version
1.2.62 - Bump metrics-discovery to version
3.2.23 - Bump nfs-volume to version
7.1.57 - Bump otel-collector to version
0.4.0 - Bump routing to version
0.293.0 - Bump silk to version
3.44.0 - Bump smb-volume to version
3.1.60 - Bump syslog to version
12.2.3 - Bump tanzu-jammy-stack to version
1.0.1
| Component | Version | Release Notes |
|---|---|---|
| ubuntu-jammy stemcell | 1.406 | |
| bpm | 1.2.17 | |
| cf-networking | 3.44.0 |
v3.44.0
## Changes
- staticcheck improvements
## ✨ Built with go 1.21.8
**Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.43.0...v3.44.0
## Resources
- [Download release 3.44.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.44.0).
|
| cflinuxfs3 | 0.387.0 |
v0.387.0
This release ships with cflinuxfs3 version 0.387.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.387.0)
|
| cflinuxfs4 | 1.82.0 |
v1.82.0
This release ships with cflinuxfs4 version 1.82.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.82.0)
|
| cf-cli | 1.60.0 | |
| count-cores-indicator | 2.0.0 | |
| diego | 2.95.0 | |
| garden-runc | 1.50.0 | |
| loggregator-agent | 8.0.2 |
v8.0.2
## What's Changed
* Bump dependencies
* Bump to [go1.21.8](https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg/m/46oA5yPABQAJ)
**Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.0.1...v8.0.2
|
| mapfs | 1.2.62 |
v1.2.62## Dependencies * **mapfs:** Updated to v`599ec1c`. v1.2.61
Maintenance release
|
| metrics-discovery | 3.2.23 |
v3.2.23
## What's Changed
- Bump dependencies
- Bump to [go1.21.8](https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg/m/46oA5yPABQAJ)
**Full Changelog**: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.22...v3.2.23
|
| nfs-volume | 7.1.57 |
v7.1.57## Changes * Bump sqlite from 3.45.1 to 3.45.2 (#829) ## Dependencies * **nfsbroker:** Updated to v`422ac7a`. v7.1.56## Changes * Golang: Updated to v1.22.1 (#815) * Bump tcl from nfs-debs/tcl8.6.13-src.tar.gz to 8.6.14 (#809) ## Dependencies * **nfsbroker:** Updated to v`99e18a3`. |
| otel-collector | 0.4.0 |
v0.4.0
* Add spec property `ingress.grpc.address` to allow the listen address of the otel collector to be configured.
* Add spec property `trace_exporters` to allow exporters to be configured to handle traces. It is not currently possible to register the same exporter name in both metric and trace pipelines.
* Bump dependencies
* Bump to [go1.21.8](https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg/m/46oA5yPABQAJ)
|
| routing | 0.293.0 |
v0.293.0
## Changes
* [Add toggle to allow empty Content-Length headers](https://github.com/cloudfoundry/routing-release/commit/7f8762673e3b7dd564dc368855d053bd3703f895)
* [fix: Enable syslog forwarding for gorouter](https://github.com/cloudfoundry/routing-release/commit/550c9b2271154c620b43f65037d6558a0437ae9f)
* [fix: Don't retry more often than endpoints available](https://github.com/cloudfoundry/routing-release/commit/112f971405f85990f79509812afacec67771a5a2)
* [Add an option to enable concurrent reads and responses in HTTP/1](https://github.com/cloudfoundry/routing-release/commit/be5ea2fb059574f213b8d0739b0ce0f78be68bdb)
## Bosh Job Spec changes:
```diff
diff --git a/jobs/gorouter/spec b/jobs/gorouter/spec
index e7c33d66..712a761f 100644
--- a/jobs/gorouter/spec
+++ b/jobs/gorouter/spec
@@ -161,6 +161,9 @@ properties:
router.enable_http2:
description: Enables support for HTTP/2 ingress traffic to the Gorouter. Also enables the option to use the HTTP/2 protocol for traffic to specified backends.
default: true
+ router.enable_http1_concurrent_read_write:
+ description: Enables concurrent request reads and response writes for HTTP/1 requests
+ default: false
router.min_tls_version:
description: Minimum accepted version of TLS protocol. All versions above this, up to the max_tls_version, will also be accepted. Valid values are TLSv1.0, TLSv1.1, TLSv1.2, and TLSv1.3.
default: TLSv1.2
@@ -194,8 +197,9 @@ properties:
router.backends.max_attempts:
description: |
Maximum number of attempts on failing requests against backend routes.
+ The number of attempts per request is limited by the number of endpoints on the route, regardless of this setting.
This includes CF apps and route-registrar endpoints.
- A value of 0 implies indefinite retries, i.e. retry until success or endpoint list is exhausted.
+ The minimum value for this setting is 1. This prevents gorouter from getting blocked by indefinite retries.
default: 3
router.backends.ca:
description: Certificate authority that was used to sign certificates for TLS-registered backends. In PEM format.
@@ -274,6 +278,15 @@ properties:
router.enable_log_attempts_details:
description: "Log additional fields in the access log that provide more details on the specific timings and attempts performed towards endpoints."
default: false
+ router.logging.syslog_tag:
+ description: "Tag to use when writing syslog messages"
+ default: "vcap.gorouter"
+ router.logging.syslog_addr:
+ description: "Address of a syslog server to send access logs"
+ default: "localhost:514"
+ router.logging.syslog_network:
+ description: "Network protocol to use when connecting to the syslog server. Valid values are 'tcp', 'udp',
|
| silk | 3.44.0 |
v3.44.0
## Changes
- [Add property for check-timeout](https://github.com/cloudfoundry/silk-release/commit/1e44df842be2ff6832df5c2a6a5d23fd4db07987)
## Bosh Job Spec changes:
```diff
diff --git a/jobs/silk-daemon/spec b/jobs/silk-daemon/spec
index 70be43f2..7a1525b3 100644
--- a/jobs/silk-daemon/spec
+++ b/jobs/silk-daemon/spec
@@ -36,6 +36,10 @@ properties:
description: "Host port used for receiving VXLAN packets"
default: 4789
+ container_metadata_file_check_timeout:
+ description: "Timeout in seconds for checking the container metadata file during drain"
+ default: 600
+
partition_tolerance_hours:
description: "When silk controller is unavailable, silk daemon will remain healthy and allow creation of new containers for this number of hours. Should be no larger than cf_networking.subnet_lease_expiration_hours."
default: 168
```
## ✨ Built with go 1.21.8
**Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.43.0...v3.44.0
## Resources
- [Download release 3.44.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.44.0).
|
| smb-volume | 3.1.60 |
v3.1.60## Dependencies * **smbbroker:** Updated to v`7d3a9db`. v3.1.59## Changes * fix regression for DFS exposed SMB Shares (#366) ## Dependencies * **smbbroker:** Updated to v`281c0d3`. v3.1.58## Changes * +Golang: Updated to v1.22.1 (#360) ## Dependencies * **ginkgo/v2:** Updated to v2.16.0. |
| smoke-tests | 4.8.5 | |
| syslog | 12.2.3 |
v12.2.3
## What's Changed
* Bump dependencies
* Bump packaged Golang to go1.21.8
**Full Changelog**: https://github.com/cloudfoundry/syslog-release/compare/v12.2.2...v12.2.3
|
| tanzu-jammy-stack | 1.0.1 |
v1.0.1
# 1.0.1`tanzu-jammy-stack` bosh release
## Dependency image versions:
- [tanzu-jammy-base-stack-0.1.85](https://github.com/pivotal-cf/tanzu-jammy-base-stack/releases/tag/v0.1.85)
- [tanzu-jammy-full-stack-0.1.144](https://github.com/pivotal-cf/tanzu-jammy-full-stack/releases/tag/v0.1.144)
|
5.0.9
Release Date: 03/06/2024
- [Feature] Add support for ESM updates on cflinuxfs4 stack
- Bump cf-networking to version
3.43.0 - Bump cflinuxfs3 to version
0.386.0 - Bump cflinuxfs4 to version
1.81.0 - Bump cf-cli to version
1.60.0 - Bump diego to version
2.95.0 - Bump garden-runc to version
1.50.0 - Bump mapfs to version
1.2.59 - Bump nfs-volume to version
7.1.55 - Bump smb-volume to version
3.1.57
| Component | Version | Release Notes |
|---|---|---|
| ubuntu-jammy stemcell | 1.390 | |
| bpm | 1.2.16 | |
| cf-networking | 3.43.0 |
v3.43.0
## Changes
- Removes deprecated and unused/unworking istio code from the release.
- Go package dependency bumps
## Bosh Job Spec changes:
```diff
diff --git a/jobs/bosh-dns-adapter/spec b/jobs/bosh-dns-adapter/spec
index 8d73a6b4..fba2cdba 100644
--- a/jobs/bosh-dns-adapter/spec
+++ b/jobs/bosh-dns-adapter/spec
@@ -21,9 +21,6 @@ consumes:
- name: cloud_controller_container_networking_info
type: cloud_controller_container_networking_info
optional: true
- - name: vip_resolver_conn
- type: vip_resolver_conn
- optional: true
properties:
cf_app_sd_disable:
```
## ✨ Built with go 1.21.7
**Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.42.0...v3.43.0
## Resources
- [Download release 3.43.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.43.0).
|
| cflinuxfs3 | 0.386.0 |
v0.386.0
This release ships with cflinuxfs3 version 0.386.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.386.0)
|
| cflinuxfs4 | 1.81.0 |
v1.81.0
This release ships with cflinuxfs4 version 1.81.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.81.0)
v1.80.0
This release ships with cflinuxfs4 version 1.80.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.80.0)
v1.79.0
This release ships with cflinuxfs4 version 1.79.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.79.0)
v1.78.0
This release ships with cflinuxfs4 version 1.78.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.78.0)
v1.77.0
This release ships with cflinuxfs4 version 1.77.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.77.0)
v1.76.0
This release ships with cflinuxfs4 version 1.76.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.76.0)
v1.75.0
This release ships with cflinuxfs4 version 1.75.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.75.0)
v1.74.0
This release ships with cflinuxfs4 version 1.74.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.74.0)
|
| cf-cli | 1.60.0 |
1.60.0
### This release contains the following versions of the CF CLI
Major version | Prior version | Current version
-- | -- | --
v8 | 8.7.7 | [8.7.8](https://github.com/cloudfoundry/cli/releases/tag/v8.7.8)
v7 | 7.7.7 | [7.7.8](https://github.com/cloudfoundry/cli/releases/tag/v7.7.8)
v6 | 6.53.0 | [6.53.0](https://github.com/cloudfoundry/cli/releases/tag/v6.53.0)
|
| count-cores-indicator | 2.0.0 | |
| diego | 2.95.0 |
v2.95.0
## Changes
- bbs: ([Issue](https://github.com/cloudfoundry/diego-release/issues/883)) Now uses `DesiredLRPSchedulingInfo` instead of the entire `DesiredLRP` when only the scheduling info is needed, resulting in a 95% decrease in time spent for relevant calls. Thanks @klapkov!
## ✨ Built with go 1.21.7
**Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.94.0...v2.95.0
## Resources
- [Download release 2.95.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.95.0).
|
| garden-runc | 1.50.0 |
v1.50.0
## Changes
- Adds `grootfs.routine_gc` property, which allows operators to configure garden to grootfs to clean up unused container image layers whenever new containers are created.
- Previously, to achieve this, operators had to set `grootfs.reserved_space_for_other_jobs_in_mb` to the same value as the ephemeral disk, which is not always easy to obtain programatically.
- Bump go dependencies
## Bosh Job Spec changes:
```diff
diff --git a/jobs/garden/spec b/jobs/garden/spec
index c84b5c43..027df351 100644
--- a/jobs/garden/spec
+++ b/jobs/garden/spec
@@ -292,6 +292,10 @@ properties:
grootfs.tls.ca_cert:
description: "PEM-encoded tls client CA certificate for asset upload/download"
+ grootfs.routine_gc:
+ description: "Set to true if you want grootfs to perform garbage collection on unused container image layers whenever a new container is created."
+ default: false
+
grootfs.reserved_space_for_other_jobs_in_mb:
description: "Amount of space that will be kept free for other jobs. The GrootFS store will be able to grow up to a maximum size of its disk minus this reserved space. Where the reserved space does not allow sufficient size for GrootFS to store container images and root filesystems (currently 15GB), the limit will be a soft limit, and garbage collection will attempt to keep disk space available for other jobs. -1 disables GC and allows GrootFS to potentially use the whole disk."
default: 15360
```
## ✨ Built with go 1.21.7
**Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.49.0...v1.50.0
## Resources
- [Download release 1.50.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.50.0).
|
| loggregator-agent | 8.0.1 | |
| mapfs | 1.2.59 |
v1.2.59## Dependencies * **mapfs:** Updated to v`535cb52`. |
| metrics-discovery | 3.2.22 | |
| nfs-volume | 7.1.55 |
v7.1.55## Dependencies * **nfsbroker:** Updated to v`1c94cbf`. |
| otel-collector | 0.3.2 | |
| routing | 0.292.0 | |
| silk | 3.43.0 | |
| smb-volume | 3.1.57 |
v3.1.57## Dependencies * **smbbroker:** Updated to v`e379cb9`. v3.1.56## Dependencies * **smbbroker:** Updated to v`1385bd7`. |
| smoke-tests | 4.8.5 | |
| syslog | 12.2.2 | |
| tanzu-jammy-stack | 1.0.0 |
5.0.8
Release Date: 03/04/2024
- [Feature] Add support for NTLM authentication in Gorouter
- [Feature Improvement] Apps using readiness health checks will now see audit.app.process.notready and audit.app.process.ready events reported to
cf events - [Security Fix] Bump docker to address GHSA-jq35-85cj-fj4p
- [Feature Improvement] Garden now emits an
UnkillableContainersmetric to help identify cells that will be unable to redeploy successfully without operator intervention - [Feature Improvement] Adds opt-in support for NTLM + other challenge-response based authentication using
Authorization: Negotiateflows by automatically enabling sticky sessions for those requests. - [Feature Improvement] Adds support for
Partitionedcookies to allow for sticky sessions in embedded contexts. - Bump bpm to version
1.2.16 - Bump cf-networking to version
3.42.0 - Bump cflinuxfs3 to version
0.385.0 - Bump cflinuxfs4 to version
1.72.0 - Bump diego to version
2.94.0 - Bump garden-runc to version
1.49.0 - Bump mapfs to version
1.2.58 - Bump nfs-volume to version
7.1.54 - Bump routing to version
0.292.0 - Bump silk to version
3.43.0 - Bump smb-volume to version
3.1.55
| Component | Version | Release Notes |
|---|---|---|
| ubuntu-jammy stemcell | 1.379 | |
| bpm | 1.2.16 | |
| cf-networking | 3.42.0 |
v3.42.0
## Changes
- Bump healthchecker package
## ✨ Built with go 1.21.7
**Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.41.0...v3.42.0
## Resources
- [Download release 3.42.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.42.0).
|
| cflinuxfs3 | 0.385.0 |
v0.385.0
This release ships with cflinuxfs3 version 0.385.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.385.0)
|
| cflinuxfs4 | 1.72.0 | |
| cf-cli | 1.59.0 | |
| count-cores-indicator | 2.0.0 | |
| diego | 2.94.0 |
v2.94.0
## Changes
- Fix bosh job spec description for `container_max_cpu_shares`
- dockerapplifecycle: Add OCI image spec index type to Accept header
- vizzini: Remove CPUWeight test
- bbs: Remove cpu_weight limits
- guardian: Add tests for unkillable containers
## Bosh Job Spec changes:
```diff
diff --git a/jobs/rep/spec b/jobs/rep/spec
index 24ce303d4..405f90f46 100644
--- a/jobs/rep/spec
+++ b/jobs/rep/spec
@@ -120,7 +120,7 @@ properties:
description: "the max concurrent download steps that can be active"
default: 5
diego.executor.container_max_cpu_shares:
- description: "the maximum number of cpu shares for a container."
+ description: "number of CPU shares per 100 CPU weight"
default: 1024
diego.executor.container_inode_limit:
description: "the inode limit enforced on each garden container."
diff --git a/jobs/rep_windows/spec b/jobs/rep_windows/spec
index bd5e1db9f..0521d1061 100644
--- a/jobs/rep_windows/spec
+++ b/jobs/rep_windows/spec
@@ -116,7 +116,7 @@ properties:
description: "the max concurrent download steps that can be active"
default: 5
diego.executor.container_max_cpu_shares:
- description: "the maximum number of cpu shares for a container."
+ description: "number of CPU shares per 100 CPU weight"
default: 10000
diego.executor.container_inode_limit:
description: "the inode limit enforced on each garden container."
```
## ✨ Built with go 1.21.7
**Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.93.0...v2.94.0
## Resources
- [Download release 2.94.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.94.0).
v2.93.0
## Changes
- Add CPU Entitlement gauge metric & Deprecate CPU Entitlement counter metric #897
- Bump docker to 20.10.27 to address GHSA-jq35-85cj-fj4p #906
- [golang-1.21-linux (1.21.7)](https://github.com/cloudfoundry/diego-release/commit/36f42cd578ecc742e9d9ad63af599ded1d939f81)
## Bosh Job Spec changes:
```diff
diff --git a/jobs/rep/spec b/jobs/rep/spec
index 8fb49517a..24ce303d4 100644
--- a/jobs/rep/spec
+++ b/jobs/rep/spec
@@ -79,6 +79,10 @@ properties:
description: "Cert used to communicate with local metron agent over gRPC"
loggregator.key:
description: "Key used to communicate with local metron agent over gRPC"
+ loggregator.app_metric_exclusion_filter:
+ description: "Array of application metrics to not emit"
+ default:
+ - cpu_entitlement
diego.rep.listen_addr_admin:
description: "serve (insecure) ping and evacuate requests on this address and port"
diff --git a/jobs/rep_windows/spec b/jobs/rep_windows/spec
index 023d76f18..bd5e1db9f 100644
--- a/jobs/rep_windows/spec
+++ b/jobs/rep_windows/spec
@@ -75,6 +75,10 @@ properties:
description: "Cert used to communicate with local metron agent over gRPC"
loggregator.key:
description: "Key used to communicate with local metron agent over gRPC"
+ loggregator.app_metric_exclusion_filter:
+ description: "Array of application metrics to not emit"
+ default:
+ - cpu_entitlement
diego.rep.advertise_domain:
description: "base domain at which the rep should advertise its secure API"
```
## ✨ Built with go 1.21.7
**Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.92.0...v2.93.0
## Resources
- [Download release 2.93.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.93.0).
|
| garden-runc | 1.49.0 |
v1.49.0
## Changes
- ✨guardian is a little more helpful when logging messages about containers that could not be killed, even after sending multiple SIGKILLs. In situations such as this, the only recourse is to reboot the VM, if the container processes are stuck in an unkillable state in the kernel. In addition to making this error stand out more, we've added a new metric for `UnkillableContainers` that guardian emits. When nonzero, there is a container that cannot be killed. See the [CloudFoundrydocs for Component metrics](https://docs.cloudfoundry.org/running/all_metrics.html#garden-linux) for more info.
- Golang package dependency bumps
- Bumped to Golang 1.21.7
## ✨ Built with go 1.21.7
**Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.48.0...v1.49.0
## Resources
- [Download release 1.49.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.49.0).
|
| loggregator-agent | 8.0.1 | |
| mapfs | 1.2.58 |
v1.2.58## Dependencies * **mapfs:** Updated to v`31dcbd6`. v1.2.57## Changes * Golang: Updated to v1.22.0. (#219) ## Dependencies * **mapfs:** Updated to v`4f9c679`. v1.2.56
## Changes
* Golang: Updated to v1.21.7 (#215)
v1.2.55
## Changes
* Add final release 1.2.54 [ci skip]
* fix bug introduced in 964e4a7 (#214)
v1.2.53## Changes * Golang: Updated to v1.21.6. (#202) ## Dependencies * **v2:** Updated to v2.15.0. |
| metrics-discovery | 3.2.22 | |
| nfs-volume | 7.1.54 |
v7.1.54## Dependencies * **nfsbroker:** Updated to v`f3d20d4`. v7.1.53## Changes * Golang: Updated to v1.22.0 (#780) ## Dependencies * **nfsbroker:** Updated to v`539f3a9`. v7.1.52
## Changes
* +Golang: Updated to v1.21.7 (#778)
v7.1.48## Changes * +Golang: Updated to v1.21.7 (#777) * Add final release 7.1.47 [ci skip] ## Dependencies * **rspec:** Updated to v3.13.0. |
| otel-collector | 0.3.2 | |
| routing | 0.292.0 |
v0.292.0
## Changes
- Dependency updates
- ✨ Adds support for `Partitioned` cookies to gorouter to allow for sticky sessions in embedded contexts. [More information on 3rd-party cookie deprecation.](https://developers.google.com/privacy-sandbox/3pcd)
## ✨ Built with go 1.21.7
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.291.0...v0.292.0
## Resources
- [Download release 0.292.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.292.0).
v0.291.0
## Changes
- Bugfix: Mitigates issue when operators set `router.route_service_internal_server_port`. Previously, this configuration parameter was not passed through to the Gorouter configuration.
## ✨ Built with go 1.21.7
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.290.0...v0.291.0
## Resources
- [Download release 0.291.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.291.0).
v0.290.0
## Changes
- ✨Adds opt-in support for NTLM + other challenge-response based authentication using `Authorization: Negotiate` flows by automatically enabling sticky sessions for those requests.
- Golang bump to 1.21.7
- Go package dependency bumps
## Bosh Job Spec changes:
```diff
diff --git a/jobs/gorouter/spec b/jobs/gorouter/spec
index c291be45..e7c33d66 100644
--- a/jobs/gorouter/spec
+++ b/jobs/gorouter/spec
@@ -123,6 +123,9 @@ properties:
router.sticky_session_cookie_names:
description: "The names of the cookies to use for handling sticky sessions"
default: [ "JSESSIONID" ]
+ router.sticky_sessions_for_auth_negotiate:
+ description: "Controls whether or not gorouter will apply sticky sessions to request/response flows using 'Authorization: Negotiate'"
+ default: false
router.drain_wait:
description: |
Delay in seconds after shut down is initiated before server stops listening.
```
## ✨ Built with go 1.21.7
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.289.0...v0.290.0
## Resources
- [Download release 0.290.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.290.0).
|
| silk | 3.43.0 |
v3.43.0
## Changes
- Go package dependency bumps
## ✨ Built with go 1.21.7
**Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.42.0...v3.43.0
## Resources
- [Download release 3.43.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.43.0).
v3.42.0
## Changes
- Bump healthchecker package
## ✨ Built with go 1.21.7
**Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.41.0...v3.42.0
## Resources
- [Download release 3.42.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.42.0).
v3.41.0
## Changes
- Go package dependency bumps
## ✨ Built with go 1.21.6
**Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.40.0...v3.41.0
## Resources
- [Download release 3.41.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.41.0).
|
| smb-volume | 3.1.55 |
v3.1.55## Dependencies * **smbbroker:** Updated to v`635d659`. v3.1.54## Changes * +Golang: Updated to v1.22.0 (#343) ## Dependencies * **rspec:** Updated to v3.13.0. v3.1.53## Changes * Bump talloc from 2.4.1 to 2.4.2 (#338) ## Dependencies * **smbbroker:** Updated to v`21d0744`. |
| smoke-tests | 4.8.5 | |
| syslog | 12.2.2 | |
| tanzu-jammy-stack | 1.0.0 |
5.0.7
Release Date: 02/05/2024
- [Rollback] mapfs rolled back to v1.2.52 for upgrade bug
- Bump cf-networking to version
3.41.0 - Bump garden-runc to version
1.48.0 - Bump metrics-discovery to version
3.2.22 - Bump nfs-volume to version
7.1.47 - Bump routing to version
0.289.0 - Bump smb-volume to version
3.1.52 - Bump syslog to version
12.2.2
| Component | Version | Release Notes |
|---|---|---|
| ubuntu-jammy stemcell | 1.351 | |
| bpm | 1.2.13 | |
| cf-networking | 3.41.0 |
v3.41.0
## Changes
- Add GOVERSION env var to example apps
## ✨ Built with go 1.21.6
**Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.40.0...v3.41.0
## Resources
- [Download release 3.41.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.41.0).
|
| cflinuxfs3 | 0.384.0 | |
| cflinuxfs4 | 1.68.0 | |
| cf-cli | 1.59.0 | |
| count-cores-indicator | 2.0.0 | |
| diego | 2.92.0 | |
| garden-runc | 1.48.0 |
v1.48.0
## Changes
- 🔒[runc](https://github.com/opencontainers/runc) + [container](https://github.com/containerd/containerd) have been bumped to address [CVE-2024-21626](https://github.com/advisories/GHSA-xr7r-f8xq-vfvv)
- ✈️Many updates to get garden-runc-release's CI configuration working in the [wg-app-platform-runtime-ci](https://github.com/cloudfoundry/wg-app-platform-runtime-ci) repo Thank you @winkingturtle-vmw @ebroberson @MarcPaquette !!!
- Docs updates - Thank you @MarcPaquette !!!
- Many golang package dependency bumps
## ✨ Built with go 1.21.6
**Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.47.0...v1.48.0
## Resources
- [Download release 1.48.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.48.0).
|
| loggregator-agent | 8.0.1 | |
| mapfs | 1.2.52 | |
| metrics-discovery | 3.2.22 |
v3.2.22
## What's Changed
* Bump dependencies
* Bump packaged Golang to go1.21.6
**Full Changelog**: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.21...v3.2.22
|
| nfs-volume | 7.1.47 |
v7.1.47## Dependencies * **nfsbroker:** Updated to v`364dcca`. |
| otel-collector | 0.3.2 | |
| routing | 0.289.0 |
v0.289.0
## ❗**BREAKING CHANGES** ❗
- A new reserved port 7070 had been added - Thanks @domdom82!
- Before deploying, please double-check your [reserved ports settings](https://github.com/cloudfoundry/routing-release/blob/develop/jobs/gorouter/templates/pre-start.erb) for any clashes with port 7070, especially the `router.prometheus.port` property.
## Changes
- (Feature) [Add route_services_internal_server_port property](https://github.com/cloudfoundry/routing-release/pull/382)
- (Bug) [Add cipher-suites for TLS 1.3](https://github.com/cloudfoundry/gorouter/pull/390) and [auto-generate the list from now on](https://github.com/cloudfoundry/gorouter/pull/391)
## Bosh Job Spec changes:
```diff
diff --git a/jobs/gorouter/spec b/jobs/gorouter/spec
index 30f535b8..c291be45 100644
--- a/jobs/gorouter/spec
+++ b/jobs/gorouter/spec
@@ -207,7 +207,7 @@ properties:
description:
An ordered, colon-delimited list of golang supported TLS cipher suites in OpenSSL or RFC format.
The selected cipher suite will be negotiated according to the order of this list during a TLS handshake.
- See https://github.com/golang/go/blob/release-branch.go1.9/src/crypto/tls/cipher_suites.go#L369-L390 for golang supported cipher suites.
+ See https://github.com/golang/go/blob/release-branch.go1.21/src/crypto/tls/cipher_suites.go#L663-L690 for golang supported cipher suites.
The first four of these are supported for TLSv1.0/1.1 only.
See https://www.openssl.org/docs/man1.1.0/apps/ciphers.html for a mapping of OpenSSL and RFC suite names.
default: "ECDHE-RSA-AES128-GCM-SHA256:TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
@@ -243,6 +243,9 @@ properties:
router.route_services_internal_lookup_allowlist:
description: "a list of host names for route services that should be resolved internally. Each entry can be a fully qualified domain name or DNS wildcard (i.e. wildcard on 1 segment of a subdomain). If the list is empty, it is not in effect and internal lookup will be attempted for all host names, which can lead to CVE-2019-3789. Please turn on internal lookup only with an allowlist."
default: []
+ router.route_services_internal_server_port:
+ description: "Gorouter will use this port for internal route services."
+ default: 7070
router.route_services_secret_decrypt_only:
description: "To rotate keys, add your new key here and deploy. Then swap this key with the value of route_services_secret and deploy again."
default: ""
```
## ✨ Built with go 1.21.6
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.288.0...v0.289.0
## Resources
- [Download release 0.289.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.289.0).
|
| silk | 3.40.0 | |
| smb-volume | 3.1.52 |
v3.1.52## Dependencies * **gomega:** Updated to v1.31.1. |
| smoke-tests | 4.8.5 | |
| syslog | 12.2.2 |
v12.2.2
## What's Changed
* Bump dependencies
* Bump packaged Golang to go1.21.6
**Full Changelog**: https://github.com/cloudfoundry/syslog-release/compare/v12.2.1...v12.2.2
|
| tanzu-jammy-stack | 1.0.0 |
5.0.6
Release Date: 01/31/2024
- [Known Issue] We recommend upgrading from this version alongside a stemcell upgrade due to an issue in our mapfs release, causing possible failures in pre-start during an Apply Changes.
- [Feature] Adds Diego support for Docker workloads using OCI images
- [Bug Fix] Forwarder Agent does not attempt to forward logs and metrics to Loggregator Agent if both Firehose V1 and Firehose V2 are disabled
- [Bug Fix] Prom Scraper does not attempt to scrape metrics from Loggregator Agent if both Firehose V1 and Firehose V2 are disabled
- [Feature Improvement] OTel Collector marks OTLP Sums as monotonic if they originate from a Loggregator counter
- Bump cflinuxfs3 to version
0.384.0 - Bump cflinuxfs4 to version
1.68.0 - Bump diego to version
2.92.0 - Bump loggregator-agent to version
8.0.1 - Bump mapfs to version
1.2.53 - Bump nfs-volume to version
7.1.46 - Bump otel-collector to version
0.3.2 - Bump routing to version
0.288.0 - Bump smb-volume to version
3.1.51
| Component | Version | Release Notes |
|---|---|---|
| ubuntu-jammy stemcell | 1.351 | |
| bpm | 1.2.13 | |
| cf-networking | 3.40.0 | |
| cflinuxfs3 | 0.384.0 |
v0.384.0
This release ships with cflinuxfs3 version 0.384.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.384.0)
|
| cflinuxfs4 | 1.68.0 | |
| cf-cli | 1.59.0 | |
| count-cores-indicator | 2.0.0 | |
| diego | 2.92.0 |
v2.92.0
## Changes
- Buildpack path cache hash has 16 bytes
## ✨ Built with go 1.21.6
**Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.91.0...v2.92.0
## Resources
- [Download release 2.92.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.92.0).
v2.91.0
## Changes
✨ The `dockerapplifecycle` now supports workloads using the OCI image format. Thanks @jrussett and @ebroberson!
## Bosh Job Spec changes:
```diff
diff --git a/jobs/vizzini/spec b/jobs/vizzini/spec
index a3bbc5fb2..7eb920159 100644
--- a/jobs/vizzini/spec
+++ b/jobs/vizzini/spec
@@ -85,3 +85,7 @@ properties:
grace_busybox_image_url:
description: "grace test asset busybox container image"
default: "docker:///cloudfoundry/grace"
+
+ diego_docker_oci_image_url:
+ description: "diego docker app in OCI image format"
+ default: "docker:///cloudfoundry/diego-docker-app:oci"
```
## ✨ Built with go 1.21.6
**Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.90.0...v2.91.0
## Resources
- [Download release 2.91.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.91.0).
v2.90.0
## Changes
- Set Content-Digest header when uploading droplets to support environment that don't have md5 available
## ✨ Built with go 1.21.6
**Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.89.0...v2.90.0
## Resources
- [Download release 2.90.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.90.0).
v2.89.0
## Changes
- Fix BBS Port issues(https://github.com/cloudfoundry/diego-release/pull/878 & https://github.com/cloudfoundry/diego-release/pull/879)
- Make `max_containers` configurable (https://github.com/cloudfoundry/diego-release/pull/876)
- Add xxhash as a dependency (https://github.com/cloudfoundry/diego-release/pull/885)
- Use major/minor versions of Go, instead of specific versions (https://github.com/cloudfoundry/diego-release/pull/891)
- Make jitter interval configurable. Add new config parameter: JitterFactor (https://github.com/cloudfoundry/route-emitter/pull/31)
## Bosh Job Spec changes:
```diff
diff --git a/jobs/rep/spec b/jobs/rep/spec
index 1383b67c0..8fb49517a 100644
--- a/jobs/rep/spec
+++ b/jobs/rep/spec
@@ -224,6 +224,10 @@ properties:
description: "Timeout in seconds to receive a response to the keepalive ping. If a response is not received within this time, the locket client will reconnect to another server."
default: 22
+ diego.rep.max_containers:
+ description: "Maximum container capacity per rep"
+ default: 250
+
enable_declarative_healthcheck:
description: "When set, enables the rep to prefer the LRP CheckDefinition to healthcheck instances over the Monitor action. Requires Garden-Runc v1.10.0+"
default: false
diff --git a/jobs/route_emitter/spec b/jobs/route_emitter/spec
index faac3b0c5..11dae3aec 100644
--- a/jobs/route_emitter/spec
+++ b/jobs/route_emitter/spec
@@ -93,6 +93,10 @@ properties:
diego.route_emitter.bbs.max_idle_conns_per_host:
description: "maximum number of idle http connections"
+ diego.route_emitter.jitter_factor:
+ description: "The jitter factor is the percentage of register interval used in determining the jitter interval (the time for which the emitter sleeps)"
+ default: 0.2
+
diego.route_emitter.job_name:
description: "The name of the Diego job referenced by this spec (DO NOT override)"
default: "route_emitter"
diff --git a/jobs/route_emitter_windows/spec b/jobs/route_emitter_windows/spec
index 404c9f518..cec39c995 100644
--- a/jobs/route_emitter_windows/spec
+++ b/jobs/route_emitter_windows/spec
@@ -83,6 +83,10 @@ properties:
diego.route_emitter.bbs.max_idle_conns_per_host:
description: "maximum number of idle http connections"
+ diego.route_emitter.jitter_factor:
+ description: "The jitter factor is the percentage of register interval used in determining the jitter interval (the time for which the emitter sleeps)"
+ default: 0.2
+
diego.route_emitter.job_name:
description: "The name of the Diego job referenced by this spec (DO NOT override)"
default: "route_emitter_windows"
```
## ✨ Built with go 1.21.6
**Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.88.0...v2.89.0
## Resources
- [Download release 2.89.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.89.0).
|
| garden-runc | 1.47.0 | |
| loggregator-agent | 8.0.1 |
v8.0.1
## What's Changed
### Fixes
* Bump packaged Golang to go1.21.6
**Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.0.0...v8.0.1
v8.0.0
## What's Changed
### Breaking Changes
* Extract otel-collector jobs to [otel-collector-release](https://github.com/cloudfoundry/otel-collector-release) in https://github.com/cloudfoundry/loggregator-agent-release/pull/446
* Remove legacy syslog binding functionality in https://github.com/cloudfoundry/loggregator-agent-release/pull/438
* syslog-binding-cache no longer exposes v1 endpoints
* syslog-agent no longer falls back to v1 endpoints of syslog-binding-cache
### Fixes
* Forwarder Agent: otelcolclient specifies that loggregator counters are monotonic in OTLP translation in https://github.com/cloudfoundry/loggregator-agent-release/pull/442
* Bump dependencies
* Bump packaged Golang to go1.20.13
* Loggregator Agent: if disabled, do not register ingress for Forwarder Agent or scraping with Prom Scraper in https://github.com/cloudfoundry/loggregator-agent-release/pull/456
**Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v7.7.3...v8.0.0
v7.7.4
## What's Changed
### Fixes
* Bump packaged Golang to go1.21.6
* Bump dependencies
* Forwarder Agent: otelcolclient specifies that loggregator counters are monotonic in OTLP translation in https://github.com/cloudfoundry/loggregator-agent-release/pull/442
* Loggregator Agent: if disabled, do not register ingress for Forwarder Agent or scraping with Prom Scraper in https://github.com/cloudfoundry/loggregator-agent-release/pull/456
**Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v7.7.3...v7.7.4
|
| mapfs | 1.2.53 |
v1.2.53## Changes * Golang: Updated to v1.21.6. (#202) ## Dependencies * **v2:** Updated to v2.15.0. |
| metrics-discovery | 3.2.21 | |
| nfs-volume | 7.1.46 |
v7.1.46## Dependencies * **gomega:** Updated to v1.31.1. v7.1.45## Changes * +Golang: Updated to v1.21.6 (#732) * Bump Tcl to v8.6.13 (#707) * Bump openssl- from 3.1.4 to 3.2.0 (#694) * Bump sqlite from 3.44.0 to 3.44.2 (#702) * Bump sqlite from 3.44.2 to 3.45.0 (#742) * Bump util-linux from 2.39 to 2.39.3 (#736) ## Dependencies * **nfsbroker:** Updated to v`b71f08d`. |
| otel-collector | 0.3.2 |
v0.3.2
## What's Changed
* Bump packaged Golang to go1.21.6
**Full Changelog**: https://github.com/cloudfoundry/otel-collector-release/compare/v0.3.1...v0.3.2
|
| routing | 0.288.0 |
v0.288.0
## Changes
- ✨ **[Feature]** Operators can now configure to prefer AZ-local backends before proxying to backends in other availability zones (https://github.com/cloudfoundry/routing-release/issues/356)
- Protect against data race when ReverseProxy modifies response headers
- Fix ability to start gorouter with the default config (cloudfoundry/gorouter#387)
## Bosh Job Spec changes:
```diff
diff --git a/jobs/gorouter/spec b/jobs/gorouter/spec
index 8fc23a78..30f535b8 100644
--- a/jobs/gorouter/spec
+++ b/jobs/gorouter/spec
@@ -101,6 +101,16 @@ properties:
router.balancing_algorithm:
description: "Algorithm used to distribute requests for a route across backends. Supported values are round-robin and least-connection"
default: round-robin
+ router.balancing_algorithm_az_preference:
+ description: |
+ Configuration option used in conjunction with the `router.balancing_algorithm` to decide from which
+ availability zone to pick a suitable backend. Defaults to "None".
+ "none" - There is no preference regarding availability zones. The router uses the
+ `router.balancing_algorithm` across all possible backends in all existing AZs.
+ "locally-optimistic" - On the initial attempt to pick a backend, the router will use
+ `router.balancing_algorithm` across all backends in the same AZ as the router itself. Subsequent
+ retries, in the case of failure or unavailability, will use _all_ available AZs.
+ default: "none"
router.number_of_cpus:
description: "Number of CPUs to utilize, the default (-1) will equal the number of available CPUs"
default: -1
```
## ✨ Built with go 1.21.6
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.287.0...v0.288.0
## Resources
- [Download release 0.288.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.288.0).
v0.287.0
## Changes
- Route-Registrar now supports specifying a nats server CA via the `nats.tls.ca_cert` property if it is not present via a BOSH link. (https://github.com/cloudfoundry/routing-release/pull/379) Thanks @benjaminguttmann-avtq!!
## Bosh Job Spec changes:
```diff
diff --git a/jobs/route_registrar/spec b/jobs/route_registrar/spec
index be708025..c51dbb9f 100644
--- a/jobs/route_registrar/spec
+++ b/jobs/route_registrar/spec
@@ -53,6 +53,8 @@ properties:
description: "PEM-encoded certificate for the route-registrar to present to NATS for verification when connecting via TLS."
nats.tls.client_key:
description: "PEM-encoded private key for the route-registrar to present to NATS for verification when connecting via TLS."
+ nats.tls.ca_cert:
+ description: "The certificate authority certificate used for the route registrar"
nats.fail_if_using_nats_without_tls:
description: |
Connecting to nats (instead of nats-tls) is deprecated. The nats
```
## ✨ Built with go 1.21.6
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.286.0...v0.287.0
## Resources
- [Download release 0.287.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.287.0).
|
| silk | 3.40.0 | |
| smb-volume | 3.1.51 |
v3.1.51## Dependencies * **v2:** Updated to v2.15.0. |
| smoke-tests | 4.8.5 | |
| syslog | 12.2.1 | |
| tanzu-jammy-stack | 1.0.0 |
5.0.5
Release Date: 01/25/2024
- [Bug Fix] SMB volumes can be forced to mount with the nodfs flag
- Bump bpm to version
1.2.13 - Bump cf-networking to version
3.40.0 - Bump cflinuxfs3 to version
0.383.0 - Bump cflinuxfs4 to version
1.65.0 - Bump cf-cli to version
1.59.0 - Bump diego to version
2.88.0 - Bump garden-runc to version
1.47.0 - Bump otel-collector to version
0.3.1 - Bump routing to version
0.286.0 - Bump silk to version
3.40.0 - Bump smb-volume to version
3.1.50 - Bump smoke-tests to version
4.8.5
| Component | Version | Release Notes |
|---|---|---|
| ubuntu-jammy stemcell | 1.340 | |
| bpm | 1.2.13 | |
| cf-networking | 3.40.0 |
v3.40.0
## Changes
- nothing significant
## ✨ Built with go 1.21.5
**Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.39.0...v3.40.0
## Resources
- [Download release 3.40.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.40.0).
v3.39.0
## Changes
- Bump to go 1.21.5
## ✨ Built with go 1.21.5
**Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.38.0...v3.39.0
## Resources
- [Download release 3.39.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.39.0).
|
| cflinuxfs3 | 0.383.0 |
v0.383.0
This release ships with cflinuxfs3 version 0.383.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.383.0)
v0.382.0
This release ships with cflinuxfs3 version 0.382.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.382.0)
v0.381.0
This release ships with cflinuxfs3 version 0.381.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.381.0)
|
| cflinuxfs4 | 1.65.0 | |
| cf-cli | 1.59.0 |
v1.59.0
### This release contains the following versions of the CF CLI
Major version | Prior version | Current version
-- | -- | --
v8 | 8.7.6 | [8.7.7](https://github.com/cloudfoundry/cli/releases/tag/v8.7.7)
v7 | 7.7.6 | [7.7.7](https://github.com/cloudfoundry/cli/releases/tag/v7.7.7)
v6 | 6.53.0 | [6.53.0](https://github.com/cloudfoundry/cli/releases/tag/v6.53.0)
v1.56.0
### This release contains the following versions of the CF CLI
Major version | Prior version | Current version
-- | -- | --
v8 | 8.7.5 | [8.7.6](https://github.com/cloudfoundry/cli/releases/tag/v8.7.6)
v7 | 7.7.5 | [7.7.6](https://github.com/cloudfoundry/cli/releases/tag/v7.7.6)
v6 | 6.53.0 | [6.53.0](https://github.com/cloudfoundry/cli/releases/tag/v6.53.0)
|
| count-cores-indicator | 2.0.0 | |
| diego | 2.88.0 |
v2.88.0
## Changes
-Bumps golang.org/x/crypto/ssh to v0.17.0 to address CVE-2023-48795.
## ✨ Built with go 1.21.5
**Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.87.0...v2.88.0
## Resources
- [Download release 2.88.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.88.0).
v2.87.0
## Changes
Reverted max_containers changes https://github.com/cloudfoundry/diego-release/pull/873
## Bosh Job Spec changes:
```diff
diff --git a/jobs/rep/spec b/jobs/rep/spec
index 5c0ec9576..1383b67c0 100644
--- a/jobs/rep/spec
+++ b/jobs/rep/spec
@@ -30,11 +30,6 @@ packages:
- proxy
- certsplitter
-consumes:
-- name: max_containers
- type: max_containers
- optional: true
-
properties:
bpm.enabled:
description: "use the BOSH Process Manager to manage the cell rep process."
```
## ✨ Built with go 1.21.5
**Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.86.0...v2.87.0
## Resources
- [Download release 2.87.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.87.0).
v2.86.0
## Changes
- BBS [Run migration and save migration version in single transaction](https://github.com/cloudfoundry/bbs/pull/76)
- Rep [Make max_containers configurable](https://github.com/cloudfoundry/diego-release/pull/868)
- Executor [Ignore EntryNotFound and AlreadyClosed errors when cleaning up cache](https://github.com/cloudfoundry/executor/pull/89)
- Route-emitter [Add AZ to registry message](https://github.com/cloudfoundry/route-emitter/pull/29)
- Rep [Send AZ in StartActualLRP/EvacuateRunningActualLRP requests to BBS](https://github.com/cloudfoundry/rep/pull/48)
## Bosh Job Spec changes:
```diff
diff --git a/jobs/rep/spec b/jobs/rep/spec
index 1383b67c0..5c0ec9576 100644
--- a/jobs/rep/spec
+++ b/jobs/rep/spec
@@ -30,6 +30,11 @@ packages:
- proxy
- certsplitter
+consumes:
+- name: max_containers
+ type: max_containers
+ optional: true
+
properties:
bpm.enabled:
description: "use the BOSH Process Manager to manage the cell rep process."
```
## ✨ Built with go 1.21.5
**Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.85.0...v2.86.0
## Resources
- [Download release 2.86.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.86.0).
|
| garden-runc | 1.47.0 |
v1.47.0
## Changes
- [Revert "Add max_containers bosh link](https://github.com/cloudfoundry/garden-runc-release/pull/327)
## Bosh Job Spec changes:
```diff
diff --git a/jobs/garden/spec b/jobs/garden/spec
index abf22f8a..c84b5c43 100644
--- a/jobs/garden/spec
+++ b/jobs/garden/spec
@@ -45,11 +45,6 @@ provides:
type: iptables
properties:
- garden.iptables_bin_dir
-
-- name: max_containers
- type: max_containers
- properties:
- - garden.max_containers
properties:
garden.listen_network:
```
## ✨ Built with go 1.21.5
**Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.46.0...v1.47.0
## Resources
- [Download release 1.47.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.47.0).
v1.46.0
## Changes
- https://github.com/cloudfoundry/garden-runc-release/pull/314 - Add `max_containers` property. It is provided in a link so it is used in rep as well. Now you can increase containers past 250! Thanks @klapkov!
- https://github.com/cloudfoundry/garden-runc-release/pull/323 - Lots of refactoring by @winkingturtle-vmw, including the ability to run the test suite in parallel! Thank you!
## Bosh Job Spec changes:
```diff
diff --git a/jobs/garden/spec b/jobs/garden/spec
index c84b5c43..abf22f8a 100644
--- a/jobs/garden/spec
+++ b/jobs/garden/spec
@@ -45,6 +45,11 @@ provides:
type: iptables
properties:
- garden.iptables_bin_dir
+
+- name: max_containers
+ type: max_containers
+ properties:
+ - garden.max_containers
properties:
garden.listen_network:
diff --git a/jobs/gats/spec b/jobs/gats/spec
index 4f59d675..916a35eb 100644
--- a/jobs/gats/spec
+++ b/jobs/gats/spec
@@ -19,6 +19,9 @@ properties:
garden_port:
description: Port Garden is listening on
default: 7777
+ garden_test_rootfs:
+ description: Test rootfs to use
+ default: 'docker:///cloudfoundry/garden-rootfs'
containerd_for_processes:
description: Run GATS with CONTAINERD_FOR_PROCESSES_ENABLED
default: false
@@ -28,6 +31,9 @@ properties:
cpu_throttling:
description: Run GATS with CPU_THROTTLING_ENABLED
default: false
+ limits_test_uri:
+ description: Limists Test rootfs to use
+ default: 'docker:///busybox'
windows_rootfs:
description: URL to pull the windows rootfs from
default: ""
```
## ✨ Built with go 1.21.5
**Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.45.0...v1.46.0
## Resources
- [Download release 1.46.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.46.0).
|
| loggregator-agent | 7.7.3 | |
| mapfs | 1.2.52 | |
| metrics-discovery | 3.2.21 | |
| nfs-volume | 7.1.44 | |
| otel-collector | 0.3.1 | |
| routing | 0.286.0 |
v0.286.0
## ❗**BREAKING CHANGES** ❗
- The deprecated `/varz` and `/healthz` endpoints for gorouter on port 8080 have been removed - Thanks @ameowlia and @geofffranks!
- The `/routes` endpoint on gorouter's port 8080 has been moved to port 8082, and is available only on localhost - Thanks @ameowlia and @geofffranks!
- TLS certificates for gorouter + tcp_router's health endpoints are now required to deploy. Fortunately this is provided automatically in cf-deployment - Thanks @ameowlia and @geofffranks!
## Changes
- 🐛 Fix a nil panic in gorouter https://github.com/cloudfoundry/gorouter/pull/372 - Thanks @maxmoehl + @domdom82!
- ✨ Adds availability zone info to endpoint data in gorouter https://github.com/cloudfoundry/gorouter/pull/381 - Thanks @ameowlia!
- ✨ Speed up gorouter's route registry https://github.com/cloudfoundry/gorouter/pull/379 - Thanks @peanball and @domdom82 !
- ✨ Also more performance improvements to gorouter's route registry https://github.com/cloudfoundry/gorouter/pull/378 - Thanks @peanball and @domdom82!
- ✨ Adds an always-on TLS capable healthcheck endpoint for gorouter on port 8443 - Thanks @marc and @geofffranks!
- ✨ Adds an always-on TLS capable healthcheck endpoint for tcp_router on port 443 - Thanks @ameowlia and @geofffranks!
- ✨ Operators can now toggle off the non-tls healthcheck endpoint for gorouter via `router.status.enable_nontls_health_checks` - Thanks @ameowlia and @geofffranks!
- ✨ Operators can now toggle off the non-tls healthcheck endpoint for tcp_router via `tcp_router.enable_nontls_health_checks` - Thanks @ameowlia and @geofffranks!
## Bosh Job Spec changes:
```diff
diff --git a/jobs/gorouter/spec b/jobs/gorouter/spec
index 35576742..8fc23a78 100644
--- a/jobs/gorouter/spec
+++ b/jobs/gorouter/spec
@@ -57,11 +57,21 @@ properties:
default: router-status
router.status.password:
description: "Password for HTTP basic auth to the /varz and /routes endpoints."
+ router.status.enable_nontls_health_checks:
+ description: "Toggles whether or not gorouter will listen on a non-tls endpoint for load balancer health checks."
+ default: true
+ router.status.enable_deprecated_varz_healthz_endpoints:
+ description: |
+ Toggles whether or not gorouter will respond to the deprecated /healthz,
+ /varz, and /routes endpoints on its non-tls load balancer status port.
+ Requires 'router.status.enable_nontls_health_checks' to be true.
+ default: false
router.status.routes.port:
description: "Port used for the /routes endpoint (available on localhost-only)"
default: 8082
router.status.tls.port:
description: "Port used for the TLS listener of the LB healthcheck endpoint"
+ default: 8443
router.status.tls.certificate:
description: "TLS Certificate used for the TLS listener of the LB healthcheck endpoint"
router.status.tls.key:
diff --git a/jobs/tcp_router/spec b/jobs/tcp_router/spec
index dd3b8a4e..44fbb41a 100644
--- a/jobs/tcp_router/spec
+++ b/jobs/tcp_router/spec
@@ -10,6 +10,7 @@ templates:
routing_api_client_certificate.crt.erb: config/certs/routing-api/client.crt
routing_api_client_private.key.erb: config/keys/routing-api/client.key
routing_api_ca_certificate.crt.erb: config/certs/routing-api/ca_cert.crt
+ tcp_router_health_check_certificate.pem.erb: config/certs/health.pem
haproxy.conf.erb: config/haproxy.conf
haproxy.conf.template.erb: config/haproxy.conf.template
bpm.yml.erb: config/bpm.yml
@@ -66,9 +67,20 @@ properties:
tcp_router.request_timeout_in_seconds:
description: "Server and client timeouts in seconds"
default: 300
+
+ tcp_router.enable_nontls_health_checks:
+ description: "Toggles on/off whether or not to listen for load balancer health check requests on the non-tls `tcp_router.health_check_port` port"
+ default: true
tcp_router.health_check_port:
description: "Load balancer in front of TCP Routers should be configured to check the health of TCP Router instances by establishing a TCP connection on this port"
default: 80
+ tcp_router.tls_health_check_port:
+ description: "Load balancer in front of TCP Routers should be configured to check the health of TCP Router instances by establishing a TLS connection on this port"
+ default: 443
+ tcp_router.tls_health_check_cert:
+ description: "TLS certificate to use on the TCP Router's TLS health check port"
+ tcp_router.tls_health_check_key:
+ description: "TLS private key to use on the TCP Router's TLS health check port"
tcp_router.fail_on_router_port_conflicts:
description: "Fail the tcp router if routing_api.reserved_system_component_ports conflict with ports in existing router groups."
```
## ✨ Built with go 1.21.6
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.285.0...v0.286.0
## Resources
- [Download release 0.286.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.286.0).
|
| silk | 3.40.0 |
v3.40.0
## Changes
- Bug fix: silk-datastore-syncer: fix assignment to entry in nil map in Metadata field. https://github.com/cloudfoundry/silk-release/pull/105. Thank you @gmllt!
- Bug fix: Deduplicate Iptables Rules with Dynamic ASG's. https://github.com/cloudfoundry/silk-release/issues/102 https://github.com/cloudfoundry/silk-release/pull/101. Thanks @klapkov!
## ✨ Built with go 1.21.5
**Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.39.0...v3.40.0
## Resources
- [Download release 3.40.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.40.0).
v3.39.0
## Changes
- Bump to go 1.21.5
## ✨ Built with go 1.21.5
**Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.38.0...v3.39.0
## Resources
- [Download release 3.39.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.39.0).
|
| smb-volume | 3.1.50 |
v3.1.50## Dependencies * **smbbroker:** Updated to v`76db942`. v3.1.49
## Changes
* Golang: Updated to v1.21.6 (#320)
* Bump autoconf from 2.71 to 2.72 (#319)
v3.1.48## Dependencies * **smbbroker:** Updated to v`a270727`. v3.1.47## Dependencies * **smbbroker:** Updated to v`e8e4f6b`. v3.1.46## Dependencies * **smbbroker:** Updated to v`3110e8f`. v3.1.45## Changes * +Golang: Updated to v1.21.5 (#306) ## Dependencies * **smbbroker:** Updated to v`6b485cb`. |
| smoke-tests | 4.8.5 |
4.8.5
Create bosh final release 4.8.5
## What's Changed
* Upgrade Golang by @tas-operability-bot in https://github.com/pivotal/smoke-tests/pull/126
* Upgrade Golang by @tas-operability-bot in https://github.com/pivotal/smoke-tests/pull/127
**Full Changelog**: https://github.com/pivotal/smoke-tests/compare/4.8.4...4.8.5
|
| syslog | 12.2.1 | |
| tanzu-jammy-stack | 1.0.0 |
5.0.4
Release Date: 12/08/2023
- [Bug Fix] Loggregator Agent is disabled if both Firehose V1 and Firehose V2 are disabled
- Bump bpm to version
1.2.12 - Bump cflinuxfs3 to version
0.380.0 - Bump cflinuxfs4 to version
1.57.0 - Bump garden-runc to version
1.45.0 - Bump loggregator-agent to version
7.7.3 - Bump metrics-discovery to version
3.2.21 - Bump routing to version
0.285.0 - Bump smb-volume to version
3.1.44 - Bump syslog to version
12.2.1
| Component | Version | Release Notes |
|---|---|---|
| ubuntu-jammy stemcell | 1.318 | |
| bpm | 1.2.12 | |
| cf-networking | 3.38.0 | |
| cflinuxfs3 | 0.380.0 |
v0.380.0
This release ships with cflinuxfs3 version 0.380.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.380.0)
|
| cflinuxfs4 | 1.57.0 | |
| cf-cli | 1.53.0 | |
| count-cores-indicator | 2.0.0 | |
| diego | 2.85.0 | |
| garden-runc | 1.45.0 |
v1.45.0
## Changes
- Resolved an issue where container networking statistics could not be retrieved for apps running in containers that did not have a `bash` executable. Thanks @JVecsei1!
- Removed the garden-healthchecker package after it had been removed from the boshrelease in v1.43.0
## Bosh Job Spec changes:
```diff
diff --git a/jobs/garden/spec b/jobs/garden/spec
index 0d2a8fb4..c84b5c43 100644
--- a/jobs/garden/spec
+++ b/jobs/garden/spec
@@ -39,7 +39,6 @@ packages:
- netplugin-shim
- dontpanic
- tini
- - garden-runc-healthchecker
provides:
- name: iptables
```
## ✨ Built with go 1.21.4
**Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.44.0...v1.45.0
## Resources
- [Download release 1.45.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.45.0).
|
| loggregator-agent | 7.7.3 |
v7.7.3
## What's Changed
* Bump packaged Golang to v1.20.12
* Forwarder Agent removes `__v1_type` tag when forwarding metrics to OTel Collector, fixing an issue where metrics emitted as v1 envelopes were being dropped by the prometheusexporter
**Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v7.7.2...v7.7.3
|
| mapfs | 1.2.52 | |
| metrics-discovery | 3.2.21 |
v3.2.21
## What's Changed
* Bump dependencies
* Bump packaged Golang to go1.20.12
**Full Changelog**: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.20...v3.2.21
|
| nfs-volume | 7.1.44 | |
| routing | 0.285.0 |
v0.285.0
## Changes
- A new `localhost:8082` endpoint has been added for retrieving the routing table on gorouter. This is in preparation of removing non-LB-health check endpoints from the public `:8080` listener for increased security. `/var/vcap/jobs/gorouter/bin/retrieve-local-routes` is updated and still the official way to retrieve the local routing table on a gorouter. The port this listens on can be configured via the `router.status.routes.port` property.
- A new TLS-enabled endpoint for LB health checks has been added on `:8443`. This can be configured via the `router.status.tls.port`, `router.status.tls.certificate` and `router.status.tls.key` properties.
- routing-api has been updated to work towards supporting a TLS-only CF deployment. Thanks @reneighbor!
- gorouter's `proxy` package received some test enhancements for increased test stability. Thanks @domdom82!
- gorouter's `pool.Endpoint.Equals()` received a performance improvement thanks to @peanball!
- Route-registrar will now fail if it configured to talk to NATS without using TLS. This can be toggled via the `nats.fail_if_using_nats_without_tls` property. thanks @ameowlia!
## Bosh Job Spec changes:
```diff
diff --git a/jobs/gorouter/spec b/jobs/gorouter/spec
index e9a9dd73..35576742 100644
--- a/jobs/gorouter/spec
+++ b/jobs/gorouter/spec
@@ -57,6 +57,15 @@ properties:
default: router-status
router.status.password:
description: "Password for HTTP basic auth to the /varz and /routes endpoints."
+ router.status.routes.port:
+ description: "Port used for the /routes endpoint (available on localhost-only)"
+ default: 8082
+ router.status.tls.port:
+ description: "Port used for the TLS listener of the LB healthcheck endpoint"
+ router.status.tls.certificate:
+ description: "TLS Certificate used for the TLS listener of the LB healthcheck endpoint"
+ router.status.tls.key:
+ description: "Private Key used for the TLS listener of the LB healthcheck endpoint"
router.prometheus.port:
description: "Port for the prometheus endpoint."
router.prometheus.server_name:
diff --git a/jobs/route_registrar/spec b/jobs/route_registrar/spec
index bf3d9a03..be708025 100644
--- a/jobs/route_registrar/spec
+++ b/jobs/route_registrar/spec
@@ -53,6 +53,13 @@ properties:
description: "PEM-encoded certificate for the route-registrar to present to NATS for verification when connecting via TLS."
nats.tls.client_key:
description: "PEM-encoded private key for the route-registrar to present to NATS for verification when connecting via TLS."
+ nats.fail_if_using_nats_without_tls:
+ description: |
+ Connecting to nats (instead of nats-tls) is deprecated. The nats
+ process will be removed soon. Please migrate to using nats-tls as soon
+ as possible. If you must continue using nats for a short time you can
+ set this flag to false.
+ default: true
host:
description: (string, optional) By default, route_registrar will detect the IP of the VM and use it, in combination with port as the backend destination for each uri being registered. This property enables overriding the destination hostname or IP.
```
## ✨ Built with go 1.21.5
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.284.0...v0.285.0
## Resources
- [Download release 0.285.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.285.0).
|
| silk | 3.38.0 | |
| smb-volume | 3.1.44 |
v3.1.44## Changes * Bump talloc from 2.4.0 to 2.4.1 (#303) * Update keyutils tarball blob to 1.6.3 (#299) * compile keyutils from source (#292) ## Dependencies * **v2:** Updated to v2.13.2. |
| smoke-tests | 4.8.4 | |
| syslog | 12.2.1 |
v12.2.1
## What's Changed
* Bump dependencies
* Bump packaged Golang to go1.20.12
**Full Changelog**: https://github.com/cloudfoundry/syslog-release/compare/v12.2.0...v12.2.1
|
| tanzu-jammy-stack | 1.0.0 |
5.0.3
Release Date: 11/29/2023
- [Bug Fix] Correct property definition for compatibility with wider range of Ops Manager versions
- [Bug Fix] Suppress syslog-agent warnings for invalid syslog drains
- Bump cf-networking to version
3.38.0 - Bump cflinuxfs3 to version
0.379.0 - Bump cflinuxfs4 to version
1.54.0 - Bump cf-cli to version
1.53.0 - Bump diego to version
2.85.0 - Bump loggregator-agent to version
7.7.2 - Bump mapfs to version
1.2.52 - Bump nfs-volume to version
7.1.44 - Bump silk to version
3.38.0 - Bump smb-volume to version
3.1.43
| Component | Version | Release Notes |
|---|---|---|
| ubuntu-jammy stemcell | 1.309 | |
| bpm | 1.2.11 | |
| cf-networking | 3.38.0 |
v3.38.0
## Changes
- The `policy-server-internal` job's healthcheck endpoint is now available only via localhost.
- Go package dependency bumps
## ✨ Built with go 1.21.4
**Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.37.0...v3.38.0
## Resources
- [Download release 3.38.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.38.0).
v3.37.0
## Changes
- Bump dependencies
## ✨ Built with go 1.21.4
**Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.36.0...v3.37.0
## Resources
- [Download release 3.37.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.37.0).
v3.36.0
## Changes
- Bump golang to 1.21.4
- Package Dependency Bumps
## ✨ Built with go 1.21.4
**Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.35.0...v3.36.0
## Resources
- [Download release 3.36.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.36.0).
|
| cflinuxfs3 | 0.379.0 |
v0.379.0
This release ships with cflinuxfs3 version 0.379.0. For more information, see the [release notes](https://github.com/pivotal-cf/tanzu-cflinuxfs3/releases/tag/0.379.0)
|
| cflinuxfs4 | 1.54.0 | |
| cf-cli | 1.53.0 |
v1.53.0
### This release contains the following versions of the CF CLI
Major version | Prior version | Current version
-- | -- | --
v8 | 8.7.4 | [8.7.5](https://github.com/cloudfoundry/cli/releases/tag/v8.7.5)
v7 | 7.7.4 | [7.7.5](https://github.com/cloudfoundry/cli/releases/tag/v7.7.5)
v6 | 6.53.0 | [6.53.0](https://github.com/cloudfoundry/cli/releases/tag/v6.53.0)
|
| count-cores-indicator | 2.0.0 | |
| diego | 2.85.0 |
v2.85.0
## Changes
- Bump garden Grootfs, Guardian, and idmapper
- Bump golang to 1.21.4
## ✨ Built with go 1.21.4
**Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.84.0...v2.85.0
## Resources
- [Download release v2.85.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.85.0).
|
| garden-runc | 1.44.0 | |
| loggregator-agent | 7.7.2 |
v7.7.2
* Bump dependencies.
### Experimental OTel Collector changes
* Bump otel-collector to v0.89.0. See the [opentelemetry-collector](https://github.com/open-telemetry/opentelemetry-collector/releases/tag/v0.89.0) and [opentelemetry-collector-contrib](https://github.com/open-telemetry/opentelemetry-collector-contrib/releases/tag/v0.89.0) release notes for more details.
v7.7.1
## What's Changed
* Added `warn_on_invalid_drains` property to Windows Syslog Agent to allow warnings for invalid drains to be suppressed.
* Bump to [go1.20.11](https://groups.google.com/g/golang-announce/c/4tU8LZfBFkY/m/d-jSKR_jBwAJ)
* Bump dependencies.
**Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v7.7.0...v7.7.1
|
| mapfs | 1.2.52 |
v1.2.52## Dependencies * **mapfs:** Updated to v`9134eb1`. v1.2.51## Dependencies * **v2:** Updated to v2.13.1. v1.2.50## Changes * Golang: Updated to v1.21.4. (#179) ## Dependencies * **gomega:** Updated to v1.30.0. |
| metrics-discovery | 3.2.20 | |
| nfs-volume | 7.1.44 |
v7.1.44## Changes * +Golang: Updated to v1.21.4 (#662) * Bump Openldap to v2.6.6 (#659) ## Dependencies * **gomega:** Updated to v1.30.0. v7.1.42
## Changes
* +Golang: Updated to v1.21.4 (#661)
* Bump openssl- from to 3.1.4 (#657)
|
| routing | 0.284.0 | |
| silk | 3.38.0 |
v3.38.0
## Changes
- Go package dependency bumps
## ✨ Built with go 1.21.4
**Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.37.0...v3.38.0
## Resources
- [Download release 3.38.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.38.0).
v3.37.0
## Changes
- [Remove unused property rep_listen_addr_admin](https://github.com/cloudfoundry/silk-release/commit/ee98f5a9d1e1f7c82a3c8055b0e5aacf087538f8)
## Bosh Job Spec changes:
```diff
diff --git a/jobs/silk-daemon/spec b/jobs/silk-daemon/spec
index 7a070202..70be43f2 100644
--- a/jobs/silk-daemon/spec
+++ b/jobs/silk-daemon/spec
@@ -36,10 +36,6 @@ properties:
description: "Host port used for receiving VXLAN packets"
default: 4789
- rep_listen_addr_admin:
- description: "Admin endpoint on diego rep. Silk daemon job drain waits for the rep to exit before tearing down the network. See diego.rep.listen_addr_admin"
- default: 127.0.0.1:1800
-
partition_tolerance_hours:
description: "When silk controller is unavailable, silk daemon will remain healthy and allow creation of new containers for this number of hours. Should be no larger than cf_networking.subnet_lease_expiration_hours."
default: 168
```
## ✨ Built with go 1.21.4
**Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.35.0...v3.37.0
## Resources
- [Download release 3.37.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.37.0).
v3.36.0
## Changes
- Bump golang to 1.21.4
- Package dependency bumps
## ✨ Built with go 1.21.4
**Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.35.0...v3.36.0
## Resources
- [Download release 3.36.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.36.0).
|
| smb-volume | 3.1.43 |
v3.1.43## Dependencies * **smbbroker:** Updated to v`0733e9b`. v3.1.42## Dependencies * **v2:** Updated to v2.13.1. v3.1.41## Changes * +Golang: Updated to v1.21.4 (#278) ## Dependencies * **gomega:** Updated to v1.30.0. |
| smoke-tests | 4.8.4 | |
| syslog | 12.2.0 | |
| tanzu-jammy-stack | 1.0.0 |
5.0.2
Release Date: 11/10/2023
- [Known Issue] This release is only compatible with Ops Manager 3.0.11 - 3.0.20 and 2.10.59 - 2.10.66
- [Feature] Expose a custom environment identifier on component logs forwarded via syslog
- [Feature Improvement] Allow to configure w3c tracing headers in router
- [Bug Fix] Remove inoperative errand syslog drains
- Bump bpm to version
1.2.11 - Bump cf-networking to version
3.35.0 - Bump cflinuxfs3 to version
0.378.0 - Bump cflinuxfs4 to version
1.50.0 - Bump diego to version
2.84.0 - Bump garden-runc to version
1.44.0 - Bump loggregator-agent to version
7.7.0 - Bump mapfs to version
1.2.49 - Bump metrics-discovery to version
3.2.20 - Bump nfs-volume to version
7.1.41 - Bump routing to version
0.284.0 - Bump silk to version
3.35.0 - Bump smb-volume to version
3.1.40 - Bump syslog to version
12.2.0
| Component | Version | Release Notes |
|---|---|---|
| ubuntu-jammy stemcell | 1.289 | |
| bpm | 1.2.11 | |
| cf-networking | 3.35.0 |
v3.35.0
## Changes
- Increase default value for `max_policies_per_app_source` from 50 to 150. Thanks SO MUCH @ameowlia !
- 🐛 Bug fix: update the policy-server `last_updated` timestamp to have microsecond precision. Previously it had second level precision, this created a race condition when multiple c2c policies were updated at nearly the same time, but the vxlan-policy-agent would only pick up the first update. Thank you @geofffranks [for this PR](https://github.com/cloudfoundry/cf-networking-release/pull/247)!
## Bosh Job Spec changes:
```diff
diff --git a/jobs/policy-server/spec b/jobs/policy-server/spec
index a6043136..0d9f5157 100644
--- a/jobs/policy-server/spec
+++ b/jobs/policy-server/spec
@@ -58,7 +58,7 @@ properties:
max_policies_per_app_source:
description: "Maximum policies a space developer may configure for an application source. Does not affect admin users."
- default: 50
+ default: 150
```
## ✨ Built with go 1.21.3
**Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.34.0...v3.35.0
## Resources
- [Download release 3.35.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.35.0).
|
| cflinuxfs3 | 0.378.0 |
v0.378.0
This release ships with cflinuxfs3 version 0.378.0. For more information, see the [release notes](https://github.com/pivotal-cf/tanzu-cflinuxfs3/releases/tag/0.378.0)
v0.377.0
This release ships with cflinuxfs3 version 0.377.0. For more information, see the [release notes](https://github.com/pivotal-cf/tanzu-cflinuxfs3/releases/tag/0.377.0)
|
| cflinuxfs4 | 1.50.0 | |
| cf-cli | 1.50.0 | |
| count-cores-indicator | 2.0.0 | |
| diego | 2.84.0 |
v2.84.0
## Changes
- Bumps envoy to [v1.28.0](https://github.com/envoyproxy/envoy/releases/tag/v1.28.0)
- BBS DesiredLRPHandler now sends Stop/Update LRP requests to rep in parallel - Thanks @vlast3k!
- Log rate limit metrics are no longer generated for tasks - Thanks @mkocher!
- App Logs will now emit messages for when they run pre-start scripts and when they invoke the startup command, to make troubleshooting just that much easier - Thanks @Gerg!
## Bosh Job Spec changes:
```diff
diff --git a/jobs/vizzini/spec b/jobs/vizzini/spec
index 6ff53c654..a3bbc5fb2 100644
--- a/jobs/vizzini/spec
+++ b/jobs/vizzini/spec
@@ -1,7 +1,7 @@
---
name: vizzini
packages:
- - golang-1-linux
+ - golang-1.21-linux
- vizzini
templates:
```
## ✨ Built with go 1.21.3
**Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.83.0...v2.84.0
## Resources
- [Download release v2.84.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.84.0).
|
| garden-runc | 1.44.0 |
v1.44.0
## Changes
- Change user for grootfs test
- Bump golang to 1.21.4
## ✨ Built with go 1.21.4
**Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.43.0...v1.44.0
## Resources
- [Download release v1.44.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.44.0).
v1.43.0
## Changes
- The `garden-healthchecker` process was found to be too aggressive when evaluating and acting upon failed healthchecks. It has been removed.
## Bosh Job Spec changes:
```diff
diff --git a/jobs/garden/spec b/jobs/garden/spec
index 125909ed..0d2a8fb4 100644
--- a/jobs/garden/spec
+++ b/jobs/garden/spec
@@ -23,7 +23,6 @@ templates:
bin/containerd_utils.erb: bin/containerd_utils
bin/pre-start: bin/pre-start
bin/post-start: bin/post-start
- config/healthchecker.yml.erb: config/healthchecker.yml
packages:
- guardian
@@ -309,7 +308,3 @@ properties:
logging.format.timestamp:
description: "Format for timestamp in component logs. Valid values are 'unix-epoch' and 'rfc3339'."
default: "unix-epoch"
-
- healthchecker.failure_counter_file:
- description: "File used by the healthchecker to monitor consecutive failures."
- default: /var/vcap/data/garden/counters/consecutive_healthchecker_failures.count
```
## ✨ Built with go 1.21.3
**Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.42.0...v1.43.0
## Resources
- [Download release v1.43.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.43.0).
v1.42.0
## Changes
- Bump golang dependencies
- Bump ruby testing dependencies
## ✨ Built with go 1.21.3
**Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.41.0...v1.42.0
## Resources
- [Download release v1.42.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.42.0).
|
| loggregator-agent | 7.7.0 |
v7.7.0
## What's Changed
* Added `warn_on_invalid_drains` property to Syslog Agent to allow warnings for invalid drains to be suppressed.
* Bump dependencies.
### Experimental OTel Collector changes
* Bump otel-collector to v0.88.0. See the [opentelemetry-collector](https://github.com/open-telemetry/opentelemetry-collector/releases/tag/v0.88.0) and [opentelemetry-collector-contrib](https://github.com/open-telemetry/opentelemetry-collector-contrib/releases/tag/v0.88.0) release notes for more details.
**Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v7.6.4...v7.7.0
|
| mapfs | 1.2.49 |
v1.2.49## Dependencies * **mapfs:** Updated to v`039d1ca`. v1.2.48## Dependencies * **gomega:** Updated to v1.29.0. |
| metrics-discovery | 3.2.20 |
v3.2.20
## What's Changed
* Bump to [go1.20.11](https://groups.google.com/g/golang-announce/c/4tU8LZfBFkY/m/d-jSKR_jBwAJ)
**Full Changelog**: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.19...v3.2.20
v3.2.19
## What's Changed
* Bump dependencies
**Full Changelog**: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.18...v3.2.19
|
| nfs-volume | 7.1.41 |
v7.1.41## Dependencies * **gomega:** Updated to v1.29.0. v7.1.40## Dependencies * **gomega:** Updated to v1.28.1. |
| routing | 0.284.0 |
v0.284.0
## Changes
- Upgrade to Golang 1.21.4
- Bump dependencies
## ✨ Built with go 1.21.4
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.283.0...v0.284.0
## Resources
- [Download release 0.284.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.284.0).
|
| silk | 3.35.0 |
v3.35.0
## Changes
- no big changes :)
## ✨ Built with go 1.21.3
**Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.34.0...v3.35.0
## Resources
- [Download release 3.35.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.35.0).
|
| smb-volume | 3.1.40 |
v3.1.40## Dependencies * **smbbroker:** Updated to v`c94aea7`. v3.1.39## Dependencies * **gomega:** Updated to v1.29.0. |
| smoke-tests | 4.8.4 | |
| syslog | 12.2.0 |
v12.2.0
## What's Changed
### Features
* Add a new, optional, structured data param key, `environment`, to `instance@47450`. This is useful for cases where log lines should be tagged with an operator provided string but need to vary from the director name.
### Maintenance
* Bump blackbox dependencies.
**Full Changelog**: https://github.com/cloudfoundry/syslog-release/compare/v12.1.10...v12.2.0
v12.1.10
## What's Changed
* Update golang packages to use go1.20.10
**Full Changelog**: https://github.com/cloudfoundry/syslog-release/compare/v12.1.9...v12.1.10
|
| tanzu-jammy-stack | 1.0.0 |
5.0.1
Release Date: 10/25/2023
- [Known Issue] This release is only compatible with Ops Manager 3.0.11 - 3.0.20 and 2.10.59 - 2.10.66
- [Feature Improvement] Option to enable w3c tracing headers in router
- [Bug Fix] Prevent retired app instances from receiving traffic by ensuring rep emits events to cleanup routes when
cf restart-app-instanceis invoked. - [Feature] Forwarder Agent emits a new metric, egress_expired_total, per egress destination to track the number of envelopes dropped from that designation’s diode
- Bump bpm to version
1.2.9 - Bump cf-networking to version
3.34.0 - Bump cflinuxfs3 to version
0.376.0 - Bump cflinuxfs4 to version
1.46.0 - Bump cf-cli to version
1.50.0 - Bump diego to version
2.83.0 - Bump garden-runc to version
1.41.0 - Bump loggregator-agent to version
7.6.4 - Bump mapfs to version
1.2.47 - Bump metrics-discovery to version
3.2.18 - Bump nfs-volume to version
7.1.38 - Bump routing to version
0.283.0 - Bump silk to version
3.34.0 - Bump smb-volume to version
3.1.38 - Bump syslog to version
12.1.9
| Component | Version | Release Notes |
|---|---|---|
| ubuntu-jammy stemcell | 1.260 | |
| bpm | 1.2.9 | |
| cf-networking | 3.34.0 |
v3.34.0
## Changes
- Bumped to golang 1.21.3
- Testing updates
- CI Enhancements
- Package dependency bumps
- The `proxy` test/example app's `/dumprequest` endpoint will now return headers back to client via the `returnHeaders` query parameter. It also adds an `X-Proxy-Settable-Debug-Header` header if the upstream server doesn't set it explicitly, and `X-Proxy-Immutable-Debug-Header` which will override any value set by upstream servers.
## Bosh Job Spec changes:
```diff
diff --git a/jobs/performance-test-sd/spec b/jobs/performance-test-sd/spec
index 0223d87e..c89d50f5 100644
--- a/jobs/performance-test-sd/spec
+++ b/jobs/performance-test-sd/spec
@@ -6,7 +6,7 @@ templates:
config.json.erb: config.json
packages:
- - golang-1.20-linux
+ - golang-1.21-linux
- performance-test-sd
consumes:
```
## ✨ Built with go 1.21.3
**Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.33.0...v3.34.0
## Resources
- [Download release 3.34.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.34.0).
v3.33.0
## Changes
- Bumped to golang 1.20.7
- The `garden-cni` job's `garden-external-networker` has been updated to support returning interface name data handling CNI v0.4.0 data from CNI plugins it wraps. This allows for garden-runc-release to make use of the interface info for pulling networking statistics. (https://github.com/cloudfoundry/cf-networking-release/pull/229)
- Thanks @JVecsei1, @geigerj0!
## ✨ Built with go 1.20.7
**Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.32.0...v3.33.0
## Resources
- [Download release v3.33.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.33.0).
|
| cflinuxfs3 | 0.376.0 |
v0.376.0
This release ships with cflinuxfs3 version 0.376.0. For more information, see the [release notes](https://github.com/pivotal-cf/tanzu-cflinuxfs3/releases/tag/0.376.0)
|
| cflinuxfs4 | 1.46.0 | |
| cf-cli | 1.50.0 |
v1.50.0
### This release contains the following versions of the CF CLI
Major version | Prior version | Current version
-- | -- | --
v8 | 8.7.3 | [8.7.4](https://github.com/cloudfoundry/cli/releases/tag/v8.7.4)
v7 | 7.7.3 | [7.7.4](https://github.com/cloudfoundry/cli/releases/tag/v7.7.4)
v6 | 6.53.0 | [6.53.0](https://github.com/cloudfoundry/cli/releases/tag/v6.53.0)
v1.49.0
### This release contains the following versions of the CF CLI
Major version | Prior version | Current version
-- | -- | --
v8 | 8.7.2 | [8.7.3](https://github.com/cloudfoundry/cli/releases/tag/v8.7.3)
v7 | 7.7.2 | [7.7.3](https://github.com/cloudfoundry/cli/releases/tag/v7.7.3)
v6 | 6.53.0 | [6.53.0](https://github.com/cloudfoundry/cli/releases/tag/v6.53.0)
v1.47.0
### This release contains the following versions of the CF CLI
Major version | Prior version | Current version
-- | -- | --
v8 | 8.7.1 | [8.7.2](https://github.com/cloudfoundry/cli/releases/tag/v8.7.2)
v7 | 7.7.1 | [7.7.2](https://github.com/cloudfoundry/cli/releases/tag/v7.7.2)
v6 | 6.53.0 | [6.53.0](https://github.com/cloudfoundry/cli/releases/tag/v6.53.0)
|
| count-cores-indicator | 2.0.0 | |
| diego | 2.83.0 |
v2.83.0
## Changes
- **[Bug Fix]** Prevent retired app instances from receiving traffic by ensuring rep emits events to cleanup routes when RetireActualLRP is called. (https://github.com/cloudfoundry/bbs/pull/72) (Fixes #820)
- Thanks @vlast3k!
- Cleans up stderr output from rep's `setup_mounted_data_dirs` script (#689)
- Thanks @romain-dartigues!
- Docs updates for the container metrics changes from 2.82.0 (https://github.com/cloudfoundry/diego-release/pull/813)
- Thanks @geigerj0!
- Bump Golang to 1.21.3
- Bump Envoy to 1.25.9
- Bump Package Dependencies
- CI Enhancments
## ✨ Built with go 1.21.3
**Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.82.0...v2.83.0
## Resources
- [Download release v2.83.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.83.0).
v2.82.0
## Changes
- Diego now supports reading container networking metrics from garden, and publishing them along with other app container metrics. (https://github.com/cloudfoundry/diego-logging-client/pull/82, https://github.com/cloudfoundry/executor/pull/83)
- Requires [garden-runc-release v1.38.0](https://github.com/cloudfoundry/garden-runc-release/releases/tag/v1.38.0) and [cf-networking-release v3.33.0](https://github.com/cloudfoundry/cf-networking-release/releases/tag/v3.33.0).
- Thanks @geigerj0 and @jvecsei1!
- Removed usage of the `code.cloudfoundry.org/systemcerts` package in favor of golang's builtin functionality.
- Bumped to golang 1.21.0
## ✨ Built with go 1.21.0
**Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.81.0...v2.82.0
## Resources
- [Download release v2.82.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.82.0).
|
| garden-runc | 1.41.0 |
v1.41.0
## Changes
- Bump go to 1.21.3
## ✨ Built with go 1.21.3
**Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.40.0...v1.41.0
## Resources
- [Download release v1.41.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.41.0).
v1.40.0
## Changes
- Bump Golang to 1.21.1
## ✨ Built with go 1.21.1
**Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.39.0...v1.40.0
## Resources
- [Download release v1.40.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.40.0).
v1.39.0
## Changes
- Garden on Linux now supports propagating extended attributes from root filesystem images + when adding filesystem data to an existing container.
- Bumped to golang 1.21.1
## ✨ Built with go 1.21.1
**Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.38.0...v1.39.0
## Resources
- [Download release v1.39.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.39.0).
v1.38.0
## Changes
- Garden now supports advertising container networking metrics on Linux containers via the `garden.enable_container_network_metrics` property.
- Requires [cf-networking-release v3.33.0](https://github.com/cloudfoundry/cf-networking-release/releases/tag/v3.33.0) or newer, and [diego v2.82.0](https://github.com/cloudfoundry/diego-release/releases/tag/v2.82.0) or newer.
- Thanks @JVecsei1 and @geigerj0!!
## Bosh Job Spec changes:
```diff
diff --git a/jobs/garden/spec b/jobs/garden/spec
index 3bffb2f7..125909ed 100644
--- a/jobs/garden/spec
+++ b/jobs/garden/spec
@@ -119,6 +119,10 @@ properties:
description: "Additional hosts file entries to be used in containers."
default: []
+ garden.enable_container_network_metrics:
+ description: "Enable container network metrics. This feature is only available on Linux."
+ default: false
+
garden.insecure_docker_registry_list:
description: "DEPRECATED in favour of grootfs property."
default: []
```
## ✨ Built with go 1.20.7
**Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.37.0...v1.38.0
## Resources
- [Download release v1.38.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.38.0).
|
| loggregator-agent | 7.6.4 |
v7.6.4
## What's Changed
* Feat(Forwarder Agent): Add a counter to track drops from egress diodes by @ctlong in https://github.com/cloudfoundry/loggregator-agent-release/pull/399
* Bump golang to v1.20.10
**Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v7.6.3...v7.6.4
v7.6.3
## What's Changed
* Bump dependencies
### Experimental OTel Collector changes
* Forwarder Agent now batches metrics sent to the co-located OTel Collector to improve performance.
**Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v7.6.2...v7.6.3
v7.6.2
## What's Changed
* Bump to [go1.20.8](https://groups.google.com/g/golang-announce/c/Fm51GRLNRvM/m/F5bwBlXMAQAJ)
* Bump dependencies
**Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v7.6.1...v7.6.2
|
| mapfs | 1.2.47 |
v1.2.47## Dependencies * **mapfs:** Updated to v`9fead8e`. v1.2.46## Changes * Golang: Updated to v1.21.3 (#162) ## Dependencies * **v2:** Updated to v2.13.0. v1.2.45## Changes * Golang: Updated to v1.21.1. (#149) ## Dependencies * **gomega:** Updated to v1.28.0. v1.2.41## Changes ## Dependencies * **mapfs:** Updated to v`dd24f4a`. v1.2.40## Dependencies * **mapfs:** Updated to v`1eb4e0c`. v1.2.39## Dependencies * **mapfs:** Updated to v`799c2e9`. v1.2.38## Changes * Golang: Updated to v1.21.1. (#140) ## Dependencies * **mapfs:** Updated to v`641ed35`. v1.2.37## Changes * Golang: Updated to v1.21.0. (#135) ## Dependencies * **mapfs:** Updated to v`9758d39`. v1.2.36## Dependencies * **v2:** Updated to v2.12.0. |
| metrics-discovery | 3.2.18 |
v3.2.18
## What's Changed
* Bump golang to v1.20.10
**Full Changelog**: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.17...v3.2.18
v3.2.17
## What's Changed
* Don't configure prom scraper to scrape when metrics-discovery-registrar or metrics-agent are disabled.
* Bump dependencies
**Full Changelog**: https://github.com/cloudfoundry/metrics-discovery-release/compare/v3.2.16...v3.2.17
|
| nfs-volume | 7.1.38 |
v7.1.38## Dependencies * **nfsbroker:** Updated to v`08fd348`. v7.1.37## Changes * Golang: Updated to v1.21.3 (#607) ## Dependencies * **gomega:** Updated to v1.28.0. v7.1.35## Dependencies * **nfsbroker:** Updated to v`4fe73b5`. v7.1.34## Changes ## Dependencies * **nfsbroker:** Updated to v`75e8459`. v7.1.33## Changes * +Golang: Updated to v1.21.1 (#558) ## Dependencies * **nfsbroker:** Updated to v`4974c87`. v7.1.32## Changes * +Golang: Updated to v1.21.0 (#541) * Update README.md (#549) ## Dependencies * **nfsbroker:** Updated to v`64e07ac`. v7.1.31## Changes ## Dependencies * **nfsbroker:** Updated to v`ca7c06c`. |
| routing | 0.283.0 |
v0.283.0
## Changes
- Adds missing timings to non-http backend requests, e.g. websockets. (https://github.com/cloudfoundry/gorouter/pull/363) (Fixes: https://github.com/cloudfoundry/routing-release/issues/278)
- Thanks @domdom82!
- Adds ability for gorouter to verify mTLS Client Certificate metadata (https://github.com/cloudfoundry/routing-release/pull/355)
- Thanks @peanball!
- CI Enhancements and updates
- Package Dependency bumps
## Bosh Job Spec changes:
```diff
diff --git a/jobs/gorouter/spec b/jobs/gorouter/spec
index 2bb394e9..e9a9dd73 100644
--- a/jobs/gorouter/spec
+++ b/jobs/gorouter/spec
@@ -415,7 +415,7 @@ properties:
default: 5
websocket_dial_timeout_in_seconds:
description: |
- Maximum time in seconds for gorouter to establish a websocket upgrade for the websocket ForwardIO connection with a backend.
+ Maximum time in seconds for gorouter to establish a websocket upgrade for the websocket ForwardIO connection with a backend.
This timeout comes before `tls_handshake_timeout_in_seconds` and `request_timeout_in_seconds`. When not set, defaults to `endpoint_dial_timeout_in_seconds`.
default: endpoint_dial_timeout_in_seconds
tls_handshake_timeout_in_seconds:
@@ -518,6 +518,36 @@ properties:
description: "The number of file descriptors a router can have open at one time"
default: 100000
+ router.enable_verify_client_certificate_metadata:
+ description: |
+ Enable additional client certificate verification via verify_client_certificate_metadata (see below).
+ default: false
+ router.verify_client_certificate_metadata:
+ description: |
+ Additional client certificate verification, after the certificate was validated using the regular mTLS mechanism and is issued using one of the CAs in `client_ca_certs`.
+ The additional verification limits the allowed client certificates for a given signing CA (identified by its distinguished name) to certificates with subjects provided in the list of valid subjects. Within the certificate chain there may be more than one CA certificates (e.g. intermediate CA certificates). The `issuer_in_chain` must match one of the CA certificates in the chain.
+ Each list entry contains an issuer_in_chain with a corresponding list of valid subjects. Each issuer_in_chain must match one of the certificates in `client_ca_certs`. When an issuer_in_chain is defined that does not match, this raises an error during templating time and at startup in gorouter.
+ - issuer_in_chain:
+ common_name: ""
+ serial_number: ""
+ country: []
+ organization: []
+ organizational_unit: []
+ locality: []
+ province: []
+ street_address: []
+ postal_code: []
+ valid_cert_subjects:
+ - common_name: ""
+ serial_number: ""
+ country: []
+ organization: []
+ organizational_unit: []
+ locality: []
+ province: []
+ street_address: []
+ postal_code: []
+ default: []
healthchecker.failure_counter_file:
description: "File used by the healthchecker to monitor consecutive failures."
default: /var/vcap/data/gorouter/counters/consecutive_healthchecker_failures.count
```
## ✨ Built with go 1.21.3
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.282.0...v0.283.0
## Resources
- [Download release 0.283.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.283.0).
|
| silk | 3.34.0 |
v3.34.0
## Changes
- Bumped to golang 1.21.3
- Fixes a crash in `silk-datastore-syncer` when garden listed containers not present in the CNI metadata file managed by silk.
- CI Enhancements
- Package dependency bumps
## ✨ Built with go 1.21.3
**Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.33.0...v3.34.0
## Resources
- [Download release 3.34.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.34.0).
v3.33.0
## Changes
- Bumped to golang 1.20.7
## ✨ Built with go 1.20.7
**Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.32.0...v3.33.0
## Resources
- [Download release v3.33.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.33.0).
|
| smb-volume | 3.1.38 |
v3.1.38## Dependencies * **v2:** Updated to v2.13.0. v3.1.37## Changes * Golang: Updated to v1.21.3 (#254) ## Dependencies * **smbbroker:** Updated to v`47d1912`. v3.1.36## Changes * +Golang: Updated to v1.21.2 (#247) ## Dependencies * **smbbroker:** Updated to v`af9461b`. v3.1.35## Dependencies * **smbbroker:** Updated to v`6d1303d`. v3.1.34## Dependencies * **smbbroker:** Updated to v`91e5d63`. v3.1.33## Changes * fix race condition (#225) ## Dependencies * **smbbroker:** Updated to v`4be065e`. v3.1.32## Changes * +Golang: Updated to v1.21.0 (#220) * Add final release 3.1.31 [ci skip] ## Dependencies * **smbbroker:** Updated to v`c6764c2`. v3.1.31## Changes ## Dependencies * **smbbroker:** Updated to v`d8cd6a7`. |
| smoke-tests | 4.8.4 | |
| syslog | 12.1.9 |
v12.1.9
## What's Changed
* Update golang packages to use go1.20.8
**Full Changelog**: https://github.com/cloudfoundry/syslog-release/compare/v12.1.8...v12.1.9
|
| tanzu-jammy-stack | 1.0.0 |
5.0.0
Release Date: 10/17/2023
- [Known Issue] This release is only compatible with Ops Manager 3.0.11 - 3.0.20 and 2.10.59 - 2.10.66
- [Security Fix] Bump routing-release to v0.282.0
- [Security Fix] Bump smoke-tests to address Go CVE-2023-39533
- [Security Fix] Continue to forward relevant headers by removing hop-by-hop headers that could interfere with gorouter when proxying client requests
- [Breaking Change] metrics-agent and metrics-discovery-registrar disabled by default
- [Feature] (Beta) Operators can export metrics off TAS using OpenTelemetry
- [Feature] App readiness healthchecks are now supported to remove/add apps to routing pools without restarting, based on a configurable healthcheck.
- [Feature] Operators can configure TAS and IST to include tanzu-jammy-full-stack
- [Feature] Add distributed tracing to Diego component logs.
- [Feature] Adds support for W3C Trace ID logging across Diego component requests
- [Feature Improvement] Allow to configure Silk policy polling interval
- [Feature Improvement] Dynamic App renaming takes effect for Silk Security Group log entries
- [Feature Improvement] TAS/IST/TASW 5.0 UI text overhaul
- [Feature Improvement] Use routing_info for desired_lrps when there are missing actual_lrps.
- [Feature Improvement] “Back end request timeout for the Gorouter” property no longer affects idle timeout of long lived requests. Idle timeouts now configurable by “Front end idle timeout for the Gorouter” property
- [Bug Fix/Improvement] Updated silk, silk-cni, and cni-wrapper-plugin for compatibility with v1.0.0 of the CNI spec
| Component | Version | Release Notes |
|---|---|---|
| ubuntu-jammy stemcell | 1.250 | |
| bpm | 1.2.6 | |
| cf-networking | 3.32.0 | |
| cflinuxfs3 | 0.375.0 |
v0.375.0
This release ships with cflinuxfs3 version 0.375.0. For more information, see the [release notes](https://github.com/pivotal-cf/tanzu-cflinuxfs3/releases/tag/0.375.0)
|
| cflinuxfs4 | 1.44.0 | |
| cf-cli | 1.45.0 | |
| count-cores-indicator | 2.0.0 | |
| diego | 2.81.0 | |
| garden-runc | 1.37.0 | |
| loggregator-agent | 7.6.1 | |
| mapfs | 1.2.35 | |
| metrics-discovery | 3.2.16 | |
| nfs-volume | 7.1.30 | |
| routing | 0.282.0 |
v0.282.0
## Changes
- Bumped to golang 1.21.3
- CI Enhancements and updates
- Package Dependency bumps
- Resolves [gorouter/#346](https://github.com/cloudfoundry/routing-release/issues/346) by validating trace ID length prior to parsing it as a UUID
## ✨ Built with go 1.21.3
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.281.0...0.282.0
## Resources
- [Download release 0.282.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.282.0).
v0.281.0
## Changes
- Check trace ID length before parsing the UUID (#365)
- Bump go to 1.21.1
## ✨ Built with go 1.21.1
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.280.0...v0.281.0
## Resources
- [Download release 0.281.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.281.0).
v0.280.0
## Changes
- Bumped CF CLI to v8.7.2
- Gorouter now logs the IP of the NATS server its connecting to/disconnecting from (instead of just the BOSH DNS name) for troubleshooting clarity. Thanks @domdom82!!
## ✨ Built with go 1.21.0
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.279.0...v0.280.0
## Resources
- [Download release v0.280.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.280.0).
v0.279.0
## Changes
- Bumped to golang 1.21.0!
- Refactor of proxy config properties. Thanks @domdom82!
## Bosh Job Spec changes:
```diff
diff --git a/jobs/acceptance_tests/spec b/jobs/acceptance_tests/spec
index db508ca3..e1a6a9ae 100644
--- a/jobs/acceptance_tests/spec
+++ b/jobs/acceptance_tests/spec
@@ -7,7 +7,7 @@ templates:
bpm.yml.erb: config/bpm.yml
packages:
- - golang-1.20-linux
+ - golang-1.21-linux
- acceptance_tests
- rtr
- cf-cli-8-linux
diff --git a/jobs/smoke_tests/spec b/jobs/smoke_tests/spec
index 5776a9c8..b230192b 100644
--- a/jobs/smoke_tests/spec
+++ b/jobs/smoke_tests/spec
@@ -7,7 +7,7 @@ templates:
bpm.yml.erb: config/bpm.yml
packages:
- - golang-1.20-linux
+ - golang-1.21-linux
- acceptance_tests
- cf-cli-8-linux
```
## ✨ Built with go 1.21.0
**Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.278.0...v0.279.0
## Resources
- [Download release v0.279.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.279.0).
|
| silk | 3.32.0 | |
| smb-volume | 3.1.30 | |
| smoke-tests | 4.8.4 | |
| syslog | 12.1.8 | |
| tanzu-jammy-stack | 1.0.0 |
How to install
To install Isolation Segment v5.0, see Installing Isolation Segment.
To install Isolation Segment v5.0, you must first install Tanzu Operations Manager v5.0. For more information, see the VMware Tanzu Operations Manager documentation.
New features in Isolation Segment v5.0
There are no new features for Isolation Segment v5.0.
Breaking changes
There are no breaking changes for Isolation Segment v5.0.
Known issues
There are no known issues for Isolation Segment v5.0.
