Here you will find the release notes for Isolation Segment v6.0.

VMware Tanzu Application Service for VMs (TAS for VMs) is certified by the Cloud Foundry Foundation for 2023.

For more information about the Cloud Foundry Certified Provider Program, see How Do I Become a Certified Provider? on the Cloud Foundry website.

Because VMware uses the Percona Distribution for MySQL, expect a time lag between Oracle releasing a MySQL patch and VMware releasing TAS for VMs containing that patch.


Deprecation Notice: Cloud Foundry Command-Line Interface (cf CLI) v7 is deprecated and will lose support. For how to upgrade to cf CLI v8 see Upgrading to cf CLI v8.

Important

For release 6.0.0 to 6.0.3, CVE-2024-22279. (VMware Tanzu Application Service for VMs GoRouter contains an RFC protocol issue that can lead to a denial of service) has been fixed. For details, see TNZ-2024-0100.

Releases

6.0.5

Release Date: 07/08/2024

  • [Bug Fix] Route Registrar only sends 5 unregistration messages in a row when a route becomes unhealthy. This prevents Gorouter’s logs from filling up with unnecessary, repetitive log messages.
  • Bump bpm to version 1.2.22
  • Bump cflinuxfs3 to version 0.390.0
  • Bump cflinuxfs4 to version 1.103.0
  • Bump cf-cli to version 1.64.0
  • Bump diego to version 2.100.0
  • Bump mapfs to version 1.2.79
  • Bump nfs-volume to version 7.1.74
  • Bump otel-collector to version 0.5.0
  • Bump routing to version 0.301.0
  • Bump smb-volume to version 3.1.73
  • Bump syslog to version 12.3.0
Component Version Release Notes
ubuntu-jammy stemcell 1.486
bpm 1.2.22
cf-networking 3.46.0
cflinuxfs3 0.390.0
v0.390.0
  This release ships with cflinuxfs3 version 0.390.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.390.0)
          
v0.389.0
  This release ships with cflinuxfs3 version 0.389.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.389.0)
          
v0.388.0
  This release ships with cflinuxfs3 version 0.388.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.388.0)
          
cflinuxfs4 1.103.0
v1.103.0
  This release ships with cflinuxfs4 version 1.103.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.103.0)
          
v1.102.0
  This release ships with cflinuxfs4 version 1.102.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.102.0)
          
v1.101.0
  This release ships with cflinuxfs4 version 1.101.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.101.0)
          
v1.100.0
  This release ships with cflinuxfs4 version 1.100.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.100.0)
          
v1.99.0
  This release ships with cflinuxfs4 version 1.99.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.99.0)
          
v1.98.0
  This release ships with cflinuxfs4 version 1.98.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.98.0)
          
v1.97.0
  This release ships with cflinuxfs4 version 1.97.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.97.0)
          
v1.96.0
  This release ships with cflinuxfs4 version 1.96.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.96.0)
          
v1.95.0
  This release ships with cflinuxfs4 version 1.95.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.95.0)
          
v1.94.0
  This release ships with cflinuxfs4 version 1.94.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.94.0)
          
v1.93.0
  This release ships with cflinuxfs4 version 1.93.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.93.0)
          
v1.92.0
  This release ships with cflinuxfs4 version 1.92.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.92.0)
          
cf-cli 1.64.0
v1.64.0
  ### Included CF CLI versions:
  7.7.10
  8.7.10
          
count-cores-indicator 2.0.0
diego 2.100.0
v2.100.0
  ## Changes
  - Bumped loggregator usage to loggregator v9 - Thanks @Birdrock!
  - Bumped cfhttp usage to cfhttp v2 - Thanks @jrussett !
  - Bumped go dependency bumps
  ## ✨  Built with go 1.22.3
  **Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.99.0...v2.100.0
  ## Resources
  - [Download release 2.100.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.100.0).
          
garden-runc 1.53.0
loggregator-agent 8.1.1
mapfs 1.2.79
v1.2.79
  ## Changes
  * Add final release 1.2.72 [ci skip]
  * Golang: Updated to v1.22.4 (#269)
  * bump mapfs
  ## Dependencies
  * **v2:** Updated to v2.19.0.
For more information, see [v2](https://github.com/onsi/ginkgo). * **mapfs:** Updated to v`756bafb`.
For more information, see [mapfs](https://github.com/cloudfoundry/mapfs).
v1.2.72
  ## Changes
  * Add final release 1.2.71 [ci skip]
  * Bump mapfs (#263)
  ## Dependencies
  * **mapfs:** Updated to v`ac01341`.
For more information, see [mapfs](https://github.com/cloudfoundry/mapfs).
nfs-volume 7.1.74
v7.1.74
  ## Changes
  * Golang: Updated to v1.22.4 (#963)
          
v7.1.73
  ## Changes
  * Add final release 7.1.72 [ci skip]
  * Use cf create|update-service-broker to register the service (#972)
  * Bump openssl- from 3.3.0 to 3.3.1 (https://github.com/cloudfoundry/nfs-volume-release/pull/959)
  * Golang: Updated to v1.22.4 (https://github.com/cloudfoundry/nfs-volume-release/pull/962)
          
v7.1.72
  ## Changes
  * Add final release 7.1.71 [ci skip]
  * Bump openssl- from 3.3.0 to 3.3.1 (#959)
  * Golang: Updated to v1.22.4 (#962)
          
v7.1.71
  ## Changes
  ## Dependencies
  * **nfsbroker:** Updated to v`b8a1e4c`.
For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker).
v7.1.68
  ## Changes
  * Add final release 7.1.66 [ci skip]
  * Bump submodules (#938)
  ## Dependencies
  * **nfsbroker:** Updated to v`e1d14e4`.
For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker).
otel-collector 0.5.0
v0.5.0
  ## What's Changed
  * Bump otel-collector to v0.103.0 in https://github.com/cloudfoundry/otel-collector-release/pull/28.
  * If you have configured exporters to use persistent queues note that [re-enqueuing of failed batches has been removed](https://github.com/open-telemetry/opentelemetry-collector/releases/tag/v0.92.0).
  * Bump to [go1.21.11](https://groups.google.com/g/golang-announce/c/XbxouI9gY7k/m/TuoGEhxIEwAJ).
  **Full Changelog**: https://github.com/cloudfoundry/otel-collector-release/compare/v0.4.1...v0.5.0
          
routing 0.301.0
v0.301.0
  ## Changes
  - 🐛Fixes a bug introduced in [v0.298.0](https://github.com/cloudfoundry/routing-release/releases/tag/v0.298.0) where the `X-Forwarded-Host` header was incorrectly set for requests containing an `Expect: 100-continue` header. Thanks @maxmoehl !
  ## ✨  Built with go 1.22.4
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.300.0...v0.301.0
  ## Resources
  - [Download release 0.301.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.301.0).
          
v0.300.0
  ## Changes
  - Update route registrar to only send 5 unregistration messages for an unhealthy route - https://github.com/cloudfoundry/route-registrar/pull/46 . Thanks @andy-a-d-nguyen for your first contribution to CF!
  ## ✨  Built with go 1.22.4
  ## Resources
  - [Download release 0.300.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.300.0).
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.299.0...v0.300.0
          
v0.299.0
  ## Changes
  - Bumped to Golang 1.22.4
  - Added ability to enforce strict validation of route service signature. Thanks @maxmoehl, @b1tamara and @plowin !
  ## Bosh Job Spec changes:
  ```diff
  diff --git a/jobs/gorouter/spec b/jobs/gorouter/spec
  index 8269440b..60c7b520 100644
  --- a/jobs/gorouter/spec
  +++ b/jobs/gorouter/spec
  @@ -262,6 +262,9 @@ properties:
  router.route_services_timeout:
  description: "Expiry time of a route service signature in seconds"
  default: 60
  +  router.route_services_strict_signature_validation:
  +      description: "Enforce strict validation of a route service signature"
  +      default: false
  router.max_header_kb:
  description: |
  This value controls the maximum number of bytes (in KB) the gorouter will read
  ```
  ## ✨  Built with go 1.22.4
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.298.0...v0.299.0
  ## Resources
  - [Download release 0.299.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.299.0).
          
silk 3.46.0
smb-volume 3.1.73
v3.1.73
  ## Changes
  ## Dependencies
  * **smbdriver:** Updated to v`9ec4dc3`.
For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver).
v3.1.72
  ## Changes
  * Bump smbdriver (#414)
  * Golang: Updated to v1.22.4 (#422)
  * Use cf create|update-service-broker to register the service (#424)
  ## Dependencies
  * **v2:** Updated to v2.19.0.
For more information, see [v2](https://github.com/onsi/ginkgo). * **smbdriver:** Updated to v`4b6cce2`.
For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver).
v3.1.69
  ## Changes
  * Add final release 3.1.68 [ci skip]
  ## Dependencies
  * **smbbroker:** Updated to v`da19354`.
For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * **smbdriver:** Updated to v`6a0de14`.
For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver).
smoke-tests 4.10.0
syslog 12.3.0
v12.3.0
  ## What's Changed
  ### Features
  * Use service command to restart rsyslog, enabling BOSH Lite deployment by @ohkyle in https://github.com/cloudfoundry/syslog-release/pull/178
  ### Maintenance
  * Bump blackbox dependencies
  * Bump packaged Golang to go1.21.11
  ## New Contributors
  * @ohkyle made their first contribution in https://github.com/cloudfoundry/syslog-release/pull/178
  **Full Changelog**: https://github.com/cloudfoundry/syslog-release/compare/v12.2.5...v12.3.0
          
tanzu-jammy-stack 1.0.1

6.0.4

Release Date: 05/29/2024

  • [Bug Fix] Remove replication-canary
  • Bump bpm to version 1.2.19
  • Bump cflinuxfs4 to version 1.91.0
  • Bump diego to version 2.99.0
  • Bump garden-runc to version 1.53.0
  • Bump mapfs to version 1.2.70
  • Bump nfs-volume to version 7.1.66
  • Bump routing to version 0.298.0
  • Bump smb-volume to version 3.1.68
Component Version Release Notes
ubuntu-jammy stemcell 1.445
bpm 1.2.19
cf-networking 3.46.0
cflinuxfs3 0.387.0
cflinuxfs4 1.91.0
v1.91.0
  This release ships with cflinuxfs4 version 1.91.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.91.0)
          
v1.90.0
  This release ships with cflinuxfs4 version 1.90.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.90.0)
          
v1.89.0
  This release ships with cflinuxfs4 version 1.89.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.89.0)
          
v1.88.0
  This release ships with cflinuxfs4 version 1.88.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.88.0)
          
v1.87.0
  This release ships with cflinuxfs4 version 1.87.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.87.0)
          
v1.86.0
  This release ships with cflinuxfs4 version 1.86.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.86.0)
          
v1.85.0
  This release ships with cflinuxfs4 version 1.85.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.85.0)
          
v1.84.0
  This release ships with cflinuxfs4 version 1.84.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.84.0)
          
v1.83.0
  This release ships with cflinuxfs4 version 1.83.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.83.0)
          
cf-cli 1.60.0
count-cores-indicator 2.0.0
diego 2.99.0
v2.99.0
  ## Changes
  - Do not remove evacuating actual LRP during cleanup ([rep#53](https://github.com/cloudfoundry/rep/pull/53))
  - Add additional retries when apps make use of credhub for credentials. ([buildpackapplifecycle#71](https://github.com/cloudfoundry/buildpackapplifecycle/pull/71))
  - Prevent panics in BBS by checking for all types of errors ([bbs#95](https://github.com/cloudfoundry/bbs/pull/95))
  - Add retry logic and more explicit failure in router emitter start-up ([router-emitter#34](https://github.com/cloudfoundry/route-emitter/pull/34))
  - Bump envoy blob version to `1.28.3`
  - Go mod dependency bumps
  ## ✨  Built with go 1.22.3
  **Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.98.0...v2.99.0
  ## Resources
  - [Download release 2.99.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.99.0).
          
garden-runc 1.53.0
v1.53.0
  ## Changes
  - **DEPRECATION NOTICE** The `garden.experimental_use_containerd_mode_for_processes` property and usage of Garden when run in containerd mode for processes is now deprecated and no longer tested.
  -  **DEFAULT CHANGE** - The default mode for garden containers is now containerd. This has been the default in cf-deployment since 2018.
  -  **REMOVAL OF EXPERIMENTAL FUNCTIONALITY NOTICE**  The experimental option to run the garden server process in rootless mode has been removed, as it did not work as expected and was an abandoned feature.
  - Go package dependency bumps
  ## Bosh Job Spec changes:
  ```diff
  diff --git a/jobs/garden-binaries/spec b/jobs/garden-binaries/spec
  index 0433639a..a8a96bae 100644
  --- a/jobs/garden-binaries/spec
  +++ b/jobs/garden-binaries/spec
  @@ -15,7 +15,6 @@ packages:
  - grootfs
  - xfs-progs
  - thresholder
  -  - netplugin-shim
  - dontpanic
  - tini
  diff --git a/jobs/garden/spec b/jobs/garden/spec
  index 027df351..093e53e1 100644
  --- a/jobs/garden/spec
  +++ b/jobs/garden/spec
  @@ -36,7 +36,6 @@ packages:
  - grootfs
  - xfs-progs
  - thresholder
  -  - netplugin-shim
  - dontpanic
  - tini
  @@ -199,10 +198,6 @@ properties:
  description: AppArmor profile to use for unprivileged container processes
  default: garden-default
  -  garden.experimental_rootless_mode:
  -    description: A boolean stating whether or not to run garden-server as a non-root user
  -    default: false
  -
  # We believe this defaults to false to help concourse: https://github.com/cloudfoundry/garden-runc-release/releases/tag/v1.5.0
  # For diego/cf, this should be set to true
  garden.cleanup_process_dirs_on_wait:
  @@ -210,8 +205,8 @@ properties:
  default: false
  garden.containerd_mode:
  -    description: "Use containerd for container lifecycle management. NOTE: cannot be used in combination with bpm or rootless"
  -    default: false
  +    description: "Use containerd for container lifecycle management. NOTE: cannot be used in combination with bpm"
  +    default: true
  garden.tcp_keepalive_time:
  description: Sets the `net.ipv4.tcp_keepalive_time` kernel parameter in containers. If not specified, the value from the linux init_net namespace is used.
  @@ -229,7 +224,7 @@ properties:
  description: Sets the `net.ipv4.tcp_retries2` kernel parameter in containers. If not specified, the value from the linux init_net namespace is used.
  garden.experimental_use_containerd_mode_for_processes:
  -    description: "(Under development) Use containerd for container process management. Must be used with containerd_mode also set to true. NOTE: cannot be used in combination with bpm or rootless"
  +    description: "(Deprecated) No longer used/tested."
  default: false
  garden.experimental_cpu_throttling:
  diff --git a/jobs/gats/spec b/jobs/gats/spec
  index 916a35eb..065e3ace 100644
  --- a/jobs/gats/spec
  +++ b/jobs/gats/spec
  @@ -22,12 +22,6 @@ properties:
  garden_test_rootfs:
  description: Test rootfs to use
  default: 'docker:///cloudfoundry/garden-rootfs'
  -  containerd_for_processes:
  -    description: Run GATS with CONTAINERD_FOR_PROCESSES_ENABLED
  -    default: false
  -  rootless:
  -    description: Run GATS with ROOTLESS env var
  -    default: false
  cpu_throttling:
  description: Run GATS with CPU_THROTTLING_ENABLED
  default: false
  ```
  ## ✨  Built with go 1.22.3
  **Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.52.0...v1.53.0
  ## Resources
  - [Download release 1.53.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.53.0).
          
loggregator-agent 8.1.1
mapfs 1.2.70
v1.2.70
  ## Changes
  * Golang: Updated to v1.22.3. (#259)
  ## Dependencies
  * **v2:** Updated to v2.17.3.
For more information, see [v2](https://github.com/onsi/ginkgo). * **mapfs:** Updated to v`0de16f2`.
For more information, see [mapfs](https://github.com/cloudfoundry/mapfs).
v1.2.69
  ## Dependencies
  * **v2:** Updated to v2.17.2.
For more information, see [v2](https://github.com/onsi/ginkgo). * **gomega:** Updated to v1.33.1.
For more information, see [gomega](https://github.com/onsi/gomega). * **mapfs:** Updated to v`7f382bc`.
For more information, see [mapfs](https://github.com/cloudfoundry/mapfs).
nfs-volume 7.1.66
v7.1.66
  ## Dependencies
  * **v2:** Updated to v2.17.3.
For more information, see [v2](https://github.com/onsi/ginkgo). * **nfsbroker:** Updated to v`90964d1`.
For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). * **nfsv3driver:** Updated to v`4d13326`.
For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver).
v7.1.65
  ## Changes
  * Golang: Updated to v1.22.3 (#920)
  * Bump util-linux from 2.40 to 2.40.1 (#922)
  * Change nfsv3driver statd default port to `41793` (non-ephemeral) (#909)
  * Use newest cf-cli available (#913)
  ## Dependencies
  * **nfsbroker:** Updated to v`071d3d8`.
For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). * **nfsv3driver:** Updated to v`49ad37b`.
For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver).
v7.1.64
  ## Dependencies
  * **gomega:** Updated to v1.33.1.
For more information, see [gomega](https://github.com/onsi/gomega). * **nfsbroker:** Updated to v`33b1b44`.
For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). * **nfsv3driver:** Updated to v`2e98b36`.
For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver).
otel-collector 0.4.1
routing 0.298.0
v0.298.0
  ## Changes
  - :bug: Improve support for requests using the Expect: 100-continue header.
  - :bug: The missing_content_length_header metric introduced in 0.297.0 has been renamed  to empty_content_length_header for more accuracy. Thanks @peanball!
  - :bug: The empty_content_length_header was fixed to more accurately capture events when the content-length header of a request was empty. Previously extra request types were being included erroneously.
  ## Bosh Job Spec changes:
  ```diff
  diff --git a/jobs/gorouter/spec b/jobs/gorouter/spec
  index 712a761f..8269440b 100644
  --- a/jobs/gorouter/spec
  +++ b/jobs/gorouter/spec
  @@ -306,6 +306,9 @@ properties:
  router.keep_alive_probe_interval:
  default: 1s
  description: Interval between TCP keep alive probes. Value is a string (e.g. "10s")
  +  router.keep_alive_100_continue_requests:
  +    description: "If set gorouter reuses backend connection for requests expecting 100-Continue"
  +    default: false
  router.force_forwarded_proto_https:
  description: "Enables setting X-Forwarded-Proto header if SSL termination happened upstream and incorrectly set the header value. When this property is set to true gorouter sets the header X-Forwarded-Proto to https. When this value set to false, gorouter set the header X-Forwarded-Proto to the protocol of the incoming request"
  default: false
  ```
  ## ✨  Built with go 1.22.3
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.297.0...v0.298.0
  ## Resources
  - [Download release 0.298.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.298.0).
          
v0.297.0
  ## Changes
  - **🐛FIXES KNOWN ISSUE** Gorouter now correctly returns the status code provided by backends for workflows using 100-continue, or other 1xx interim status codes.  Thanks for catching this @plowin @domdom82 and thanks @geofffranks for the quick fix!
  - 🐛The TLS listener for the health status endpoint in gorouter now handles custom cipher-suites that do not include any of the required HTTP/2 ciphers. Thanks @MarcPaquette + @geofffranks!
  - 🐛 Failing to establish a TCP connection to a backend no longer causes a panic when setting up a WebSocket connection. Thanks @domdom82!
  - ✨The health status endpoint for gorouter is now able to log error messages encountered when it starts up, to aid in troubleshooting. Thanks @MarcPaquette and @geofffranks !
  - ✨Gorouter now provides a `missing_content_length_header` metric that will flag requests that would have been hit by Golang 1.22's new check to reject requests that have an empty content-length header. This can be used to determine if an environment will be affected by disabling the `go.httplaxcontentlength` gorouter property. Thanks @mariash!
  - **NOTE:** The metric is counting requests unaffected by the new golang behavior and will be updated in 0.298.0+, where it is also renamed to `empty_content_length_header`.
  - ✨Route registrar now allows operators to specify load blancing algorithms for individual routes. Thanks @b1tamara and @domdom82 !
  - Bumped to golang 1.22.3
  ## Bosh Job Spec changes:
  ```diff
  diff --git a/jobs/route_registrar/spec b/jobs/route_registrar/spec
  index c51dbb9f..de81a0e8 100644
  --- a/jobs/route_registrar/spec
  +++ b/jobs/route_registrar/spec
  @@ -125,7 +125,8 @@ properties:
  with error, the route is unregistered.
  router_group (required, string, for tcp routes): Name of the router group to which the TCP route should be added.
  external_port (required, string, for tcp routes): Port that the TCP router will listen on.
  -        server_cert_domain_name_modifier (optional, string, for sni routes): a regex replace to help with complicated hostnames
  +        server_cert_domain_name_modifier (optional, string, for sni routes): a regex replace to help with complicated hostnames.
  +        options (optional, object, for http routes): Custom per-route options
  health_check object
  name (required, string): Human-readable reference for the healthcheck
  @@ -135,6 +136,9 @@ properties:
  the script is terminated with `SIGKILL` and the route is unregistered. Value is a string (e.g. "10s") and must parse to a positive time duration i.e. "-5s" is not permitted. Must be less than the value of `registration_interval`.
  Default: Half of the value of `registration_interval`
  +      options object
  +        lb_algo (optional, string): Load balancing algorithm for routing incoming requests to the backend: 'round-robin' or 'least-connection'. In cases where this option is not specified, the algorithm defined in gorouter spec is applied.
  +
  example: |
  - name: my-service
  uris:
  @@ -150,6 +154,8 @@ properties:
  script_path: /path/to/script
  timeout: 5s
  route_service_url: https://my-oauth-proxy-route-service.example.com
  +        options:
  +          lb_algo: least-connection
  - name: my-tls-endpoint
  tls_port: 12346
  server_cert_domain_san: "my-tls-endpoint.internal.com"
  ```
  ## ✨  Built with go 1.22.3
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.296.0...v0.297.0
  ## Resources
  - [Download release 0.297.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.297.0).
          
silk 3.46.0
smb-volume 3.1.68
v3.1.68
  ## Changes
  * Golang: Updated to v1.22.3 (#408)
  ## Dependencies
  * **v2:** Updated to v2.17.3.
For more information, see [v2](https://github.com/onsi/ginkgo). * **smbbroker:** Updated to v`17a844f`.
For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * **smbdriver:** Updated to v`9ccf77c`.
For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver).
v3.1.67
  ## Changes
  * Use newest cf-cli available (#405)
  ## Dependencies
  * **v2:** Updated to v2.17.2.
For more information, see [v2](https://github.com/onsi/ginkgo). * **gomega:** Updated to v1.33.1.
For more information, see [gomega](https://github.com/onsi/gomega). * **smbbroker:** Updated to v`490615c`.
For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * **smbdriver:** Updated to v`fa2b5d0`.
For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver).
smoke-tests 4.10.0
syslog 12.2.5
tanzu-jammy-stack 1.0.1

6.0.3

Release Date: 05/03/2024

Caution This release is susceptible to a known issue where Gorouter returns an incorrect HTTP status code in response to requests with an "HTTP 100 Continue" interim status header. To resolve this issue, see the Broadcom Knowledge Base article Gorouter Returns wrong HTTP response code to client when the request flow uses HTTP 100-continue.

  • Bump loggregator-agent to version 8.1.1
Component Version Release Notes
ubuntu-jammy stemcell 1.423
bpm 1.2.18
cf-networking 3.46.0
cflinuxfs3 0.387.0
cflinuxfs4 1.82.0
cf-cli 1.60.0
count-cores-indicator 2.0.0
diego 2.98.0
garden-runc 1.52.0
loggregator-agent 8.1.1
v8.1.1
  ## What's Changed
  * Bump dependencies
  * Fix Syslog Binding Cache polling to wait for the entire polling interval between each operation in https://github.com/cloudfoundry/loggregator-agent-release/pull/572
  **Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.1.0...v8.1.1
          
mapfs 1.2.68
nfs-volume 7.1.63
otel-collector 0.4.1
routing 0.296.0
silk 3.46.0
smb-volume 3.1.66
smoke-tests 4.10.0
syslog 12.2.5
tanzu-jammy-stack 1.0.1

6.0.2

Release Date: 05/01/2024

Caution This release is susceptible to a known issue where Gorouter returns an incorrect HTTP status code in response to requests with an "HTTP 100 Continue" interim status header. To resolve this issue, see the Broadcom Knowledge Base article Gorouter Returns wrong HTTP response code to client when the request flow uses HTTP 100-continue.

  • Bump cf-networking to version 3.46.0
  • Bump diego to version 2.98.0
  • Bump garden-runc to version 1.52.0
  • Bump loggregator-agent to version 8.1.0
  • Bump mapfs to version 1.2.68
  • Bump nfs-volume to version 7.1.63
  • Bump routing to version 0.296.0
  • Bump silk to version 3.46.0
  • Bump smb-volume to version 3.1.66
  • Bump syslog to version 12.2.5
Component Version Release Notes
ubuntu-jammy stemcell 1.423
bpm 1.2.18
cf-networking 3.46.0
v3.46.0
  ## Changes
  - Bump Golang to 1.22
  ## Bosh Job Spec changes:
  ```diff
  diff --git a/jobs/performance-test-sd/spec b/jobs/performance-test-sd/spec
  index c89d50f5..0583340e 100644
  --- a/jobs/performance-test-sd/spec
  +++ b/jobs/performance-test-sd/spec
  @@ -6,7 +6,7 @@ templates:
  config.json.erb: config.json
  packages:
  -  - golang-1.21-linux
  +  - golang-1.22-linux
  - performance-test-sd
  consumes:
  ```
  ## ✨  Built with go 1.22.2
  **Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.45.0...v3.46.0
  ## Resources
  - [Download release 3.46.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.46.0).
          
cflinuxfs3 0.387.0
cflinuxfs4 1.82.0
cf-cli 1.60.0
count-cores-indicator 2.0.0
diego 2.98.0
v2.98.0
  ## Changes
  - Update Golang to 1.22
  ## Bosh Job Spec changes:
  ```diff
  diff --git a/jobs/vizzini/spec b/jobs/vizzini/spec
  index 7eb920159..d61278357 100644
  --- a/jobs/vizzini/spec
  +++ b/jobs/vizzini/spec
  @@ -1,7 +1,7 @@
  ---
  name: vizzini
  packages:
  -  - golang-1.21-linux
  +  - golang-1.22-linux
  - vizzini
  templates:
  ```
  ## ✨  Built with go 1.22.2
  **Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.97.0...v2.98.0
  ## Resources
  - [Download release 2.98.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.98.0).
          
garden-runc 1.52.0
v1.52.0
  ## Changes
  - Bump Golang to 1.22
  ## ✨  Built with go 1.22.2
  **Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.51.0...v1.52.0
  ## Resources
  - [Download release 1.52.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.52.0).
          
loggregator-agent 8.1.0
v8.1.0
  ## What's Changed
  * Replace usages of `grpc.Dial` with `grpc.NewClient` which does not open connections until necessary
  * Bump dependencies
  ### Experimental OTel Collector changes
  * Added `temporary_emit_otel_traces` property to the loggr-forwarder-agent and loggr-forwarder-agent-windows jobs. Setting this property to `true` activates conversion of appropriately tagged http timers to OpenTelemetry traces (it defaults to `false`). See cloudfoundry/gorouter#407.
  **Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.0.3...v8.1.0
          
v8.0.4
  Don't use. It contains the code changes from v8.1.0 but without a semver minor bump to indicate new functionality.
          
mapfs 1.2.68
v1.2.68
  ## Dependencies
  * **gomega:** Updated to v1.33.0.
For more information, see [gomega](https://github.com/onsi/gomega). * **mapfs:** Updated to v`3fb73af`.
For more information, see [mapfs](https://github.com/cloudfoundry/mapfs).
v1.2.67
  ## Dependencies
  * **mapfs:** Updated to v`b5baec0`.
For more information, see [mapfs](https://github.com/cloudfoundry/mapfs).
nfs-volume 7.1.63
v7.1.63
  ## Changes
  * Add final release 7.1.62 [ci skip]
  ## Dependencies
  * **gomega:** Updated to v1.33.0.
For more information, see [gomega](https://github.com/onsi/gomega). * **nfsbroker:** Updated to v`5d71277`.
For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). * **nfsv3driver:** Updated to v`31062e6`.
For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver).
v7.1.62
  ## Changes
  * Bump sqlite from 3.45.2 to 3.45.3 (#881)
  ## Dependencies
  * **nfsbroker:** Updated to v`680bc33`.
For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). * **nfsv3driver:** Updated to v`279655c`.
For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver).
otel-collector 0.4.1
routing 0.296.0
v0.296.0
  ## Changes
  - Pass availability zone in route-registrar for AZ-aware routing of system components
  - Bump Golang to 1.22
  ## Bosh Job Spec changes:
  ```diff
  diff --git a/jobs/acceptance_tests/spec b/jobs/acceptance_tests/spec
  index e1a6a9ae..8122ddaf 100644
  --- a/jobs/acceptance_tests/spec
  +++ b/jobs/acceptance_tests/spec
  @@ -7,7 +7,7 @@ templates:
  bpm.yml.erb: config/bpm.yml
  packages:
  - - golang-1.21-linux
  + - golang-1.22-linux
  - acceptance_tests
  - rtr
  - cf-cli-8-linux
  diff --git a/jobs/smoke_tests/spec b/jobs/smoke_tests/spec
  index b230192b..02edfd9d 100644
  --- a/jobs/smoke_tests/spec
  +++ b/jobs/smoke_tests/spec
  @@ -7,7 +7,7 @@ templates:
  bpm.yml.erb: config/bpm.yml
  packages:
  - - golang-1.21-linux
  + - golang-1.22-linux
  - acceptance_tests
  - cf-cli-8-linux
  ```
  ## ✨  Built with go 1.22.2
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.295.0...v0.296.0
  ## Resources
  - [Download release 0.296.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.296.0).
          
silk 3.46.0
v3.46.0
  ## Changes
  - Bump Golang to 1.22
  ## ✨  Built with go 1.22.2
  **Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.45.0...v3.46.0
  ## Resources
  - [Download release 3.46.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.46.0).
          
smb-volume 3.1.66
v3.1.66
  ## Changes
  * Add final release 3.1.65 [ci skip]
  ## Dependencies
  * **smbbroker:** Updated to v`b2fb57d`.
For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * **smbdriver:** Updated to v`2335f8e`.
For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver).
smoke-tests 4.10.0
syslog 12.2.5
v12.2.5
  ## What's Changed
  * Bump dependencies
  **Full Changelog**: https://github.com/cloudfoundry/syslog-release/compare/v12.2.4...v12.2.5
          
tanzu-jammy-stack 1.0.1

6.0.1

Release Date: 04/17/2024

Caution This release is susceptible to a known issue where Gorouter returns an incorrect HTTP status code in response to requests with an "HTTP 100 Continue" interim status header. To resolve this issue, see the Broadcom Knowledge Base article Gorouter Returns wrong HTTP response code to client when the request flow uses HTTP 100-continue.

  • [Feature] Add option to enable concurrent read/writes for HTTP/1
  • Bump bpm to version 1.2.18
  • Bump diego to version 2.97.0
  • Bump loggregator-agent to version 8.0.3
  • Bump mapfs to version 1.2.66
  • Bump nfs-volume to version 7.1.61
  • Bump otel-collector to version 0.4.1
  • Bump smb-volume to version 3.1.64
  • Bump smoke-tests to version 4.10.0
  • Bump syslog to version 12.2.4
Component Version Release Notes
ubuntu-jammy stemcell 1.423
bpm 1.2.18
cf-networking 3.45.0
cflinuxfs3 0.387.0
cflinuxfs4 1.82.0
cf-cli 1.60.0
count-cores-indicator 2.0.0
diego 2.97.0
v2.97.0
  ## Changes
  - Adds support for comma-delimited destinations in ASGs
  - See: https://github.com/cloudfoundry/executor/pull/96 and https://github.com/cloudfoundry/bbs/pull/94
  - Bump bosh package blobs
  - Bumps `jq` to `1.7.1`
  - Bumps `tar`
  - Bump go.mod dependencies
  ## ✨  Built with go 1.21.8
  **Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.96.0...v2.97.0
  ## Resources
  - [Download release 2.97.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.97.0).
          
garden-runc 1.51.0
loggregator-agent 8.0.3
v8.0.3
  ## What's Changed
  * Bump dependencies
  * Bump to [go1.21.9](https://groups.google.com/g/golang-announce/c/YgW0sx8mN3M/m/khALNYGdAAAJ)
  **Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.0.2...v8.0.3
          
mapfs 1.2.66
v1.2.66
  ## Dependencies
  * **mapfs:** Updated to v`b0b6bfa`.
For more information, see [mapfs](https://github.com/cloudfoundry/mapfs).
v1.2.65
  ## Changes
  * Golang: Updated to v1.22.2. (#241)
  ## Dependencies
  * **mapfs:** Updated to v`a80b833`.
For more information, see [mapfs](https://github.com/cloudfoundry/mapfs).
v1.2.64
  ## Dependencies
  * **v2:** Updated to v2.17.1.
For more information, see [v2](https://github.com/onsi/ginkgo). * **mapfs:** Updated to v`cd8e7e6`.
For more information, see [mapfs](https://github.com/cloudfoundry/mapfs).
nfs-volume 7.1.61
v7.1.61
  ## Changes
  * Golang: Updated to v1.22.2 (#860)
  * Bump openssl- from 3.2.1 to 3.3.0 (#871)
  ## Dependencies
  * **nfsbroker:** Updated to v`1a70719`.
For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). * **nfsv3driver:** Updated to v`35b8c6f`.
For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver).
v7.1.60
  ## Dependencies
  * **nfsbroker:** Updated to v`8aec99d`.
For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). * **nfsv3driver:** Updated to v`fb67285`.
For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver).
otel-collector 0.4.1
v0.4.1
  ## What's Changed
  * Bump dependencies
  * Bump to [go1.21.9](https://groups.google.com/g/golang-announce/c/YgW0sx8mN3M/m/khALNYGdAAAJ)
  **Full Changelog**: https://github.com/cloudfoundry/otel-collector-release/compare/v0.4.0...v0.4.1
          
routing 0.295.0
silk 3.45.0
smb-volume 3.1.64
v3.1.64
  ## Dependencies
  * **smbbroker:** Updated to v`02f340b`.
For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * **smbdriver:** Updated to v`fb88dd0`.
For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver).
v3.1.63
  ## Changes
  * Golang: Updated to v1.22.2 (#381)
  ## Dependencies
  * **smbbroker:** Updated to v`b380e77`.
For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * **smbdriver:** Updated to v`0c36c10`.
For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver).
v3.1.62
  ## Dependencies
  * **v2:** Updated to v2.17.1.
For more information, see [v2](https://github.com/onsi/ginkgo). * **smbbroker:** Updated to v`f176916`.
For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * **smbdriver:** Updated to v`5ee16dc`.
For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver).
smoke-tests 4.10.0
4.10.0
  Create bosh final release 4.10.0
          
4.9.5
  Create bosh final release 4.9.5
  ## What's Changed
  * Upgrade Golang to 1.22 by @tas-operability-bot in https://github.com/pivotal/smoke-tests/pull/138
  **Full Changelog**: https://github.com/pivotal/smoke-tests/compare/4.9.5...4.9.5
          
syslog 12.2.4
v12.2.4
  ## What's Changed
  * Bump dependencies
  * Bump packaged Golang to go1.21.9
  **Full Changelog**: https://github.com/cloudfoundry/syslog-release/compare/v12.2.3...v12.2.4
          
tanzu-jammy-stack 1.0.1

6.0.0

Release Date: 04/09/2024

Caution This release is susceptible to a known issue where Gorouter returns an incorrect HTTP status code in response to requests with an "HTTP 100 Continue" interim status header. To resolve this issue, see the Broadcom Knowledge Base article Gorouter Returns wrong HTTP response code to client when the request flow uses HTTP 100-continue.

  • [Breaking Change] Change default internal route service port to 7070
  • [Breaking Change] Replace cpu entitlement counters with cpu_entitlement percentage gauge
  • [Breaking Change] Remove (deprecated) Metrics Agent and Metrics Discovery Release
  • [Breaking Change] Gorouter’s deprecated /varz and /healthz endpoints on port 8080 have been removed
  • [Feature] Add support for NTLM authentication in Gorouter
  • [Feature] Adds Diego support for Docker workloads using OCI images
  • [Feature]: Gorouters can be configured to prefer routing to app instances in the same AZ as the router
  • [Feature] Operators can now turn off non-TLS load balancer health check endpoints for Gorouter and TCP Router via the “Enable HTTP load balancer health checks” properties in the “Networking” tab
  • [Feature] Gorouter now supports LB Health Checks over TLS on port 8443
  • [Feature] Expose a custom environment identifier on component logs forwarded via syslog
  • [Feature Improvement] Make database “encrypt key” setting more intentional, to avoid password-manager autofilling of the field
  • [Feature Improvement] Reintroduce global log rate limit
  • [Feature Improvement] Apps using readiness health checks will now see audit.app.process.notready and audit.app.process.ready events reported to cf events
  • [Feature Improvement] Garden now emits an UnkillableContainers metric to help identify cells that will be unable to redeploy successfully without operator intervention
  • [Feature Improvement] Adds opt-in support for NTLM + other challenge-response based authentication using Authorization: Negotiate flows by automatically enabling sticky sessions for those requests.
  • [Feature Improvement] Adds support for Partitioned cookies to allow for sticky sessions in embedded contexts.
  • [Feature Improvement] OTel Collector marks OTLP Sums as monotonic if they originate from a Loggregator counter
  • [Feature Improvement] Allow to configure w3c tracing headers in router
Component Version Release Notes
ubuntu-jammy stemcell 1.406
bpm 1.2.17
cf-networking 3.45.0
v3.45.0
  ## Changes
  - Go dependency bumps
  - Added config for staticcheck
  - Removed references to consul from documentation
  ## Bosh Job Spec changes:
  ```diff
  diff --git a/jobs/policy-server-asg-syncer/spec b/jobs/policy-server-asg-syncer/spec
  index 748c39a7..4c6c9a4e 100644
  --- a/jobs/policy-server-asg-syncer/spec
  +++ b/jobs/policy-server-asg-syncer/spec
  @@ -109,7 +109,7 @@ properties:
  description: "Trusted CA for UAA server."
  uaa_hostname:
  -    description: "Host name for the UAA server.  E.g. the service advertised via Consul DNS.  Must match common name in the UAA server cert. Must be listed in `uaa.zones.internal.hostnames`."
  +    description: "Host name for the UAA server.  E.g. the service advertised via Bosh DNS.  Must match common name in the UAA server cert. Must be listed in `uaa.zones.internal.hostnames`."
  default: uaa.service.cf.internal
  uaa_port:
  diff --git a/jobs/policy-server-internal/spec b/jobs/policy-server-internal/spec
  index 7095775d..029e723f 100644
  --- a/jobs/policy-server-internal/spec
  +++ b/jobs/policy-server-internal/spec
  @@ -41,7 +41,7 @@ properties:
  default: 31946
  health_check_timeout_seconds:
  -    description: "Health check timeout for Consul DNS."
  +    description: "Health check timeout"
  default: 5
  internal_listen_port:
  @@ -52,7 +52,7 @@ properties:
  description: "Trusted CA certificate that was used to sign the vxlan policy agent's client cert and key."
  server_cert:
  -    description: "Server certificate for TLS. Must have common name that matches the Consul DNS name of the policy server, eg `policy-server.service.cf.internal`."
  +    description: "Server certificate for TLS. Must have common name that matches the Bosh DNS name of the policy server, eg `policy-server.service.cf.internal`."
  server_key:
  description: "Server key for TLS."
  diff --git a/jobs/policy-server/spec b/jobs/policy-server/spec
  index 0d9f5157..8e2ccfa8 100644
  --- a/jobs/policy-server/spec
  +++ b/jobs/policy-server/spec
  @@ -101,7 +101,7 @@ properties:
  description: "Trusted CA for UAA server."
  uaa_hostname:
  -    description: "Host name for the UAA server.  E.g. the service advertised via Consul DNS.  Must match common name in the UAA server cert. Must be listed in `uaa.zones.internal.hostnames`."
  +    description: "Host name for the UAA server.  E.g. the service advertised via Bosh DNS.  Must match common name in the UAA server cert. Must be listed in `uaa.zones.internal.hostnames`."
  default: uaa.service.cf.internal
  uaa_port:
  ```
  ## ✨  Built with go 1.21.8
  **Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.44.0...v3.45.0
  ## Resources
  - [Download release 3.45.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.45.0).
          
cflinuxfs3 0.387.0
cflinuxfs4 1.82.0
cf-cli 1.60.0
count-cores-indicator 2.0.0
diego 2.96.0
v2.96.0
  ## Changes
  - Bump to golang 1.21.8
  - Golang package dependency bumps
  - Includes moving from docker v20 to docker v26
  - Includes moving from pgx v3 to pgx v5
  - Remove references to Consul from boshrelease + documentation
  - Many fixes to remove deprecated code and otherwise fix linter violations.
  ## ✨  Built with go 1.21.8
  **Full Changelog**: https://github.com/cloudfoundry/diego-release/compare/v2.95.0...v2.96.0
  ## Resources
  - [Download release 2.96.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.96.0).
          
garden-runc 1.51.0
v1.51.0
  ## Changes
  - Bumped Golang to 1.21.8
  - Golang package dependency bumps
  - Many updates to get codebase passing the staticcheck linker
  - Updated garden-integration-tests to be a little less flakey
  ## ✨  Built with go 1.21.8
  **Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.50.0...v1.51.0
  ## Resources
  - [Download release 1.51.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.51.0).
          
loggregator-agent 8.0.2
mapfs 1.2.63
v1.2.63
  ## Dependencies
  * **v2:** Updated to v2.17.0.
For more information, see [v2](https://github.com/onsi/ginkgo). * **mapfs:** Updated to v`5381efc`.
For more information, see [mapfs](https://github.com/cloudfoundry/mapfs).
nfs-volume 7.1.59
v7.1.59
  ## Changes
  * Bump util-linux from 2.39.3 to 2.40 (#853)
  ## Dependencies
  * **nfsbroker:** Updated to v`7bc7bb0`.
For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). * **nfsv3driver:** Updated to v`15c152b`.
For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver).
v7.1.58
  ## Dependencies
  * **nfsbroker:** Updated to v`e850d95`.
For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). * **nfsv3driver:** Updated to v`8af81b5`.
For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver).
otel-collector 0.4.0
routing 0.295.0
v0.295.0
  ## Changes
  - Resolves #401 by reverting the removal of the deprecated BuildNameToCertificate() call
  - Bumps to golang 1.21.9 + golang.org/x/net 0.23.0 to patch CVE-2023-45288
  ## ✨  Built with go 1.21.9
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.294.0...v0.295.0
  ## Resources
  - [Download release 0.295.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.295.0).
          
v0.294.0
  ⚠️ This release contains a known issue: gorouter will no longer present the most specific certificate match but rather the first certificate that matches. See https://github.com/cloudfoundry/routing-release/issues/401 for details. Upgrading to routing-release 0.295.0 is advised. ⚠️
  ## Changes
  - [Bump haproxy to 2.8.7](https://github.com/cloudfoundry/routing-release/commit/13b39eb5185656c3557c1ab15b5b13752b2ff6d8)
  - [update templates to not refer to consul](https://github.com/cloudfoundry/routing-release/commit/8216c056b1463bd1d7bf636a749568f70cb924d2)
  - [Default the routing_api.enabled_api_endpoints to mtls](https://github.com/cloudfoundry/routing-release/commit/2e96c2c932f7f945c3c7c15a768d0affc80de446)
  - [Update template test for mTLS routing api default](https://github.com/cloudfoundry/routing-release/commit/469d9e0a4eb0ac6015695ba27c6da80576b29801)
  - [Upgrade cf-cli-8-linux](https://github.com/cloudfoundry/routing-release/commit/b19a25052ed7982c83524ac87d22ed2f316201a2)
  ## Bosh Job Spec changes:
  ```diff
  diff --git a/jobs/routing-api/spec b/jobs/routing-api/spec
  index 1d7efe3c..2e5cd361 100644
  --- a/jobs/routing-api/spec
  +++ b/jobs/routing-api/spec
  @@ -95,7 +95,7 @@ properties:
  routing_api.enabled_api_endpoints:
  description: "Protocols that the routing api will listen on. Possible values: 'mtls', or 'both' (mTLS + HTTP)"
  -    default: "both"
  +    default: "mtls"
  routing_api.mtls_port:
  description: "Port on which Routing API is running, listening with mTLS."
  default: 3001
  ```
  ## ✨  Built with go 1.21.8
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.293.0...v0.294.0
  ## Resources
  - [Download release 0.294.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.294.0).
          
silk 3.45.0
v3.45.0
  ## Changes
  - Fixes to stop using deprecated code in tests (`net.Error.Temporary()`)
  - Remove consul references from documentation
  - Fix issues bumping the code.cloudfoundry.org/executor package
  - Go package bumps
  ## Bosh Job Spec changes:
  ```diff
  diff --git a/jobs/silk-controller/spec b/jobs/silk-controller/spec
  index a0966a01..cc7529a8 100644
  --- a/jobs/silk-controller/spec
  +++ b/jobs/silk-controller/spec
  @@ -45,11 +45,11 @@ properties:
  default: 46455
  health_check_port:
  -    description: "Health check port for silk controller. Used by the Consul DNS health check."
  +    description: "Health check port for silk controller. Used by the Bosh DNS health check."
  default: 19683
  health_check_timeout_seconds:
  -    description: "Health check timeout for Consul DNS."
  +    description: "Health check timeout"
  default: 5
  listen_ip:
  @@ -64,7 +64,7 @@ properties:
  description: "Trusted CA certificate that was used to sign the silk daemon client cert and key."
  server_cert:
  -    description: "Server certificate for TLS. Must have common name that matches the Consul DNS name of the silk controller, eg silk-controller.service.cf.internal"
  +    description: "Server certificate for TLS. Must have common name that matches the Bosh DNS name of the silk controller, eg silk-controller.service.cf.internal"
  server_key:
  description: "Server key for TLS."
  diff --git a/jobs/silk-daemon/spec b/jobs/silk-daemon/spec
  index 7a1525b3..e3786357 100644
  --- a/jobs/silk-daemon/spec
  +++ b/jobs/silk-daemon/spec
  @@ -70,7 +70,7 @@ properties:
  default: 3457
  silk_controller.hostname:
  -    description: "Host name for the silk controller.  E.g. the service advertised via Consul DNS.  Must match common name in the silk_controller.server_cert"
  +    description: "Host name for the silk controller.  E.g. the service advertised via Bosh DNS.  Must match common name in the silk_controller.server_cert"
  default: "silk-controller.service.cf.internal"
  silk_controller.listen_port:
  diff --git a/jobs/vxlan-policy-agent/spec b/jobs/vxlan-policy-agent/spec
  index 3118022b..802f04bb 100644
  --- a/jobs/vxlan-policy-agent/spec
  +++ b/jobs/vxlan-policy-agent/spec
  @@ -41,7 +41,7 @@ properties:
  default: false
  policy_server.hostname:
  -    description: "Host name for the policy server.  E.g. the service advertised via Consul DNS.  Must match common name in the policy_server.server_cert"
  +    description: "Host name for the policy server.  E.g. the service advertised via Bosh DNS.  Must match common name in the policy_server.server_cert"
  default: "policy-server.service.cf.internal"
  policy_server.internal_listen_port:
  ```
  ## ✨  Built with go 1.21.8
  **Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.44.0...v3.45.0
  ## Resources
  - [Download release 3.45.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.45.0).
          
smb-volume 3.1.61
v3.1.61
  ## Dependencies
  * **v2:** Updated to v2.17.0.
For more information, see [v2](https://github.com/onsi/ginkgo). * **gomega:** Updated to v1.32.0.
For more information, see [gomega](https://github.com/onsi/gomega). * **smbbroker:** Updated to v`bab4864`.
For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * **smbdriver:** Updated to v`7f3242d`.
For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver).
smoke-tests 4.8.5
syslog 12.2.3
tanzu-jammy-stack 1.0.1

How to install

To install Isolation Segment v6.0, see Installing Isolation Segment.

To install Isolation Segment v6.0, you must first install Tanzu Operations Manager v6.0. For more information, see the VMware Tanzu Operations Manager documentation.

New features in Isolation Segment v6.0

These are the new features for Isolation Segment v6.0.

Reintroduction of global log rate limit

TAS v3.0 introduced granular app log rate limits for fine-grained control over application log rates.

Isolation Segment v4.0 removed the older global log rate limit feature App log rate limit (deprecated) under App Containers. This was problematic for operators who were performing a jump upgrade to Isolation Segment v4.0 (skipping v3.0), as logs would not be rate limited until application-based log rate limits were applied.

Isolation Segment v6.0 restores the global log rate limit, so that operators can perform upgrades while retaining log rate limits. Operators must configure the same setting separately for both VMware Tanzu Application Service for VMs and TAS for VMs [Windows].

If you had previously set a global log rate limit, this limit is re-applied following the upgrade to Isolation Segment v6.0.

Breaking changes

There are no breaking changes for Isolation Segment v6.0.

Known issues

There are no known issues for Isolation Segment v6.0.

check-circle-line exclamation-circle-line close-line
Scroll to top icon