Isolation Segment v6.0 Release notes

Here you will find the release notes for Isolation Segment v6.0.

VMware Tanzu Application Service for VMs (TAS for VMs) is certified by the Cloud Foundry Foundation for 2023.

For more information about the Cloud Foundry Certified Provider Program, see How Do I Become a Certified Provider? on the Cloud Foundry website.

Because VMware uses the Percona Distribution for MySQL, expect a time lag between Oracle releasing a MySQL patch and VMware releasing TAS for VMs containing that patch.

Deprecation Notice: Cloud Foundry Command-Line Interface (cf CLI) v7 is deprecated and will lose support. For how to upgrade to cf CLI v8 see Upgrading to cf CLI v8.

Important
For release 6.0.0 to 6.0.3, CVE-2024-22279. (VMware Tanzu Application Service for VMs GoRouter contains an RFC protocol issue that can lead to a denial of service) has been fixed. For details, see TNZ-2024-0100.

Releases

6.0.9

Release Date: 10/07/2024

Bump bpm to version 1.4.0
Bump cf-networking to version 3.51.0
Bump cflinuxfs3 to version 0.416.0
Bump cflinuxfs4 to version 1.130.0
Bump diego to version 2.105.0
Bump garden-runc to version 1.57.0
Bump mapfs to version 1.4.0
Bump nfs-volume to version 7.4.0
Bump silk to version 3.51.0
Bump smb-volume to version 3.5.0

Component	Version	Release Notes
ubuntu-jammy stemcell	1.572
bpm	1.4.0
cf-networking	3.51.0	v3.51.0 ## 3.51.0 Release Date: September 24, 2024 ## Changes - Bump to Go 1.23 - [Add ReadHeaderTimeout option on the server](https://github.com/cloudfoundry/cf-networking-release/commit/a32d19d7120dfec4037121232b84c238f3eaa2f3) - [Pass ReadHeaderTimeout to lagerlevel Server](https://github.com/cloudfoundry/cf-networking-release/commit/b1fc8c3ad3abfd94fbcafd9b2c4c32987c556222) - [Fix file/dir creation permissions](https://github.com/cloudfoundry/cf-networking-release/commit/2a095f5b94a449585a3082e60cd0d1466d1611ed) - [Catch or explicitly ignore unhandled errors](https://github.com/cloudfoundry/cf-networking-release/commit/a4d4085dfeb78c3ee06bad109ba073f6a853d80f) ## Bosh Job Spec changes: ```diff diff --git a/jobs/performance-test-sd/spec b/jobs/performance-test-sd/spec index 0583340e..fd83a044 100644 --- a/jobs/performance-test-sd/spec +++ b/jobs/performance-test-sd/spec @@ -6,7 +6,7 @@ templates: config.json.erb: config.json packages: - - golang-1.22-linux + - golang-1.23-linux - performance-test-sd consumes: diff --git a/jobs/service-discovery-controller/spec b/jobs/service-discovery-controller/spec index 6786aad9..46deb276 100644 --- a/jobs/service-discovery-controller/spec +++ b/jobs/service-discovery-controller/spec @@ -51,6 +51,10 @@ properties: description: "Interval in seconds for which the route emitter is told to emit all routes. This value should be less than the staleness_threshold_seconds" default: 60 + read_header_timeout: + description: "The amount of time allowed to read request headers" + default: 30s + dnshttps.server.tls: description: "Server-side mutual TLS configuration for dns over http" dnshttps.client.ca: ``` ## ✨ Built with go 1.23.1 Full Changelog: https://github.com/cloudfoundry/cf-networking-release/compare/v3.50.0...v3.51.0 ## Resources - [Download release 3.51.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.51.0).
cflinuxfs3	0.416.0	v0.416.0 This release ships with cflinuxfs3 version 0.416.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.416.0) v0.415.0 This release ships with cflinuxfs3 version 0.415.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.415.0) v0.414.0 This release ships with cflinuxfs3 version 0.414.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.414.0) v0.413.0 This release ships with cflinuxfs3 version 0.413.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.413.0) v0.412.0 This release ships with cflinuxfs3 version 0.412.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.412.0) v0.411.0 This release ships with cflinuxfs3 version 0.411.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.411.0) v0.410.0 This release ships with cflinuxfs3 version 0.410.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.410.0) v0.409.0 This release ships with cflinuxfs3 version 0.409.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.409.0) v0.408.0 This release ships with cflinuxfs3 version 0.408.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.408.0)
cflinuxfs4	1.130.0	v1.130.0 This release ships with cflinuxfs4 version 1.130.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.130.0) v1.129.0 This release ships with cflinuxfs4 version 1.129.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.129.0) v1.128.0 This release ships with cflinuxfs4 version 1.128.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.128.0) v1.127.0 This release ships with cflinuxfs4 version 1.127.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.127.0) v1.126.0 This release ships with cflinuxfs4 version 1.126.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.126.0) v1.125.0 This release ships with cflinuxfs4 version 1.125.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.125.0) v1.124.0 This release ships with cflinuxfs4 version 1.124.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.124.0) v1.122.0 This release ships with cflinuxfs4 version 1.122.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.122.0) v1.121.0 This release ships with cflinuxfs4 version 1.121.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.121.0) v1.120.0 This release ships with cflinuxfs4 version 1.120.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.120.0) v1.119.0 This release ships with cflinuxfs4 version 1.119.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.119.0) v1.118.0 This release ships with cflinuxfs4 version 1.118.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.118.0) v1.117.0 This release ships with cflinuxfs4 version 1.117.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.117.0) v1.115.0 This release ships with cflinuxfs4 version 1.115.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.115.0) v1.114.0 This release ships with cflinuxfs4 version 1.114.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.114.0) v1.113.0 This release ships with cflinuxfs4 version 1.113.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.113.0) v1.108.0 This release ships with cflinuxfs4 version 1.108.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.108.0)
cf-cli	1.67.0
count-cores-indicator	2.0.0
diego	2.105.0	v2.105.0 ## 2.105.0 Release Date: October 01, 2024 ## Changes - Upgrade to Go 1.23! - [add healtcheck metrics property](https://github.com/cloudfoundry/diego-release/commit/fe3aae75d48e6340b526e1d5d327732cd7bf1a8c) - [add healthcheck property to rep_windows config template](https://github.com/cloudfoundry/diego-release/commit/7dce01426b119d53d0b8923e2681884bb5a4cab7) - [add missing default params for linters](https://github.com/cloudfoundry/diego-release/commit/e9ccee2dd2bf78c83b15d27c711669c67261d103) - [add metadata to docs and reorder them](https://github.com/cloudfoundry/diego-release/commit/af178fa335254d47a8fd507822003c60bad4ba59) - Various dependency bumps ## Bosh Job Spec changes: ```diff diff --git a/jobs/rep/spec b/jobs/rep/spec index 405f90f46..0737d9d1a 100644 --- a/jobs/rep/spec +++ b/jobs/rep/spec @@ -235,7 +235,9 @@ properties: enable_declarative_healthcheck: description: "When set, enables the rep to prefer the LRP CheckDefinition to healthcheck instances over the Monitor action. Requires Garden-Runc v1.10.0+" default: false - + enable_healthcheck_metrics: + description: "When set, enables the rep to emit healtcheck failure metrics. Requires enable_declarative_healthcheck to be set to true." + default: false cell_registrations.locket.enabled: description: Enable the cell rep to register itself as a service with Locket. default: true diff --git a/jobs/rep_windows/spec b/jobs/rep_windows/spec index 0521d1061..4a7dfefc6 100644 --- a/jobs/rep_windows/spec +++ b/jobs/rep_windows/spec @@ -237,13 +237,16 @@ properties: diego.rep.locket.client_keepalive_timeout: description: "Timeout in seconds to receive a response to the keepalive ping. If a response is not received within this time, the locket client will reconnect to another server." default: 22 - + enable_declarative_healthcheck: description: "When set, enables the rep to prefer the LRP CheckDefinition to healthcheck instances over the Monitor action." default: false declarative_healthcheck_path: description: "The directory containing the declarative healthcheck binary" default: "/var/vcap/packages/healthcheck_windows/external" + enable_healthcheck_metrics: + description: "When set, enables the rep to emit healtcheck failure metrics. Requires enable_declarative_healthcheck to be set to true." + default: false cell_registrations.locket.enabled: description: Enable the cell rep to register itself as a service with Locket. diff --git a/jobs/vizzini/spec b/jobs/vizzini/spec index d61278357..901e5236d 100644 --- a/jobs/vizzini/spec +++ b/jobs/vizzini/spec @@ -1,7 +1,7 @@ --- name: vizzini packages: - - golang-1.22-linux + - golang-1.23-linux - vizzini templates: ``` ## ✨ Built with go 1.23.1 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.104.0...v2.105.0 ## Resources - [Download release 2.105.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.105.0). v2.104.0 ## 2.104.0 Release Date: September 24, 2024 ## Changes - Bumped to Envoy to 1.28.7 - [Update file permissions for BBS access log](https://github.com/cloudfoundry/bbs/compare/9be69c0199dbd4818203b7382454616d56463e69...4b574f98c713f8e77467ec6a4ac953ab52ddc718) - [Update file permissions for Buildpack App Lifecycle access log](https://github.com/cloudfoundry/bbs/compare/9be69c0199dbd4818203b7382454616d56463e69...4b574f98c713f8e77467ec6a4ac953ab52ddc718) - [Update file permissions for cacheddownloader](https://github.com/cloudfoundry/cacheddownloader/compare/09b8631e33d0adb38bbae81529b63fa3f92d0925...a52cc2a85daa3e138cead7c748881d24af914c4a) - [Update file permissions for Executor](https://github.com/cloudfoundry/executor/compare/0a01dbec448f78e493c86b0d2672a646f43e9a53...a8f0e01a67921c94cfabfc933bb436f1c101faae) - [Update file permissions for Inigo](https://github.com/cloudfoundry/inigo/compare/18074ea13ef2ca3a6195fed63ce639b2e677ee39...3d1daff34a1d91f50f1615cc6089658f953c7d59) - Various dependency bumps ## ✨ Built with go 1.22.7 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.103.0...v2.104.0 ## Resources - [Download release 2.104.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.104.0).
garden-runc	1.57.0	v1.57.0 ## 1.57.0 Release Date: October 02, 2024 ## Changes - Upgrade to Go 1.23 - [Create a top-level dir for libtool](https://github.com/cloudfoundry/garden-runc-release/commit/fb83c7757f43ec7d4f39b7a9d5fbacbdbd224b11) ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.56.0...v1.57.0 ## Resources - [Download release 1.57.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.57.0).
loggregator-agent	8.2.1
mapfs	1.4.0	v1.4.0 ## 1.4.0 Release Date: September 25, 2024 ## Changes - Bump to Go 1.23 - Minor dependency bumps ## ✨ Built with go 1.23.1 Full Changelog: https://github.com/cloudfoundry/mapfs-release/compare/v1.3.0...v1.4.0 ## Resources - [Download release 1.4.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/mapfs-release?version=1.4.0).
nfs-volume	7.4.0	v7.4.0 ## 7.4.0 Release Date: October 01, 2024 ## Changes - 🐛 Updates the nfsbrokerpush errand to apply the security group to staging containers as well as running, for greater success talking to credhub in test environments. Thanks @jochenehret! - 🐛 Updates the BBR metdata to add more CAPI dependencies to resolve intermittent lock/unlock race conditions when running pre-restore actions in BBR. Thanks @davewalter! ## ✨ Built with go 1.23.1 Full Changelog: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.3.0...v7.4.0 ## Resources - [Download release 7.4.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.4.0). v7.3.0 ## 7.3.0 Release Date: September 30, 2024 ## Changes - [Output rpcbind and statd logs to a sensible place](https://github.com/cloudfoundry/nfs-volume-release/commit/bb54df64b42100c5c64b98a2818258f2a51cb79e) - [Add retries for monit statd and rpcbind check](https://github.com/cloudfoundry/nfs-volume-release/commit/03f06e61244424593f34b446e0b7a7dce06d6773) - [Remove sqlite](https://github.com/cloudfoundry/nfs-volume-release/commit/86327f2336d4bfeadc2bb0389d981c41f6815750) - [Remove libevent and rpcsvc-proto](https://github.com/cloudfoundry/nfs-volume-release/commit/6e818a0ca00f79f8117d69eebab95a7273170239) - [Remove nfs-legacy option](https://github.com/cloudfoundry/nfs-volume-release/commit/bc3fbc7a609434acb966fab601df110be18a2f0b) - [Output rpcbind and statd logs to a sensible place #1024](https://github.com/cloudfoundry/nfs-volume-release/pull/1024) - [Add retries for monit statd and rpcbind check #1027](https://github.com/cloudfoundry/nfs-volume-release/pull/1027) - [Add retries for monit statd and rpcbind check #1027](https://github.com/cloudfoundry/nfs-volume-release/pull/1027) - [Remove unneeded packages for nfs-debs #1035 ](https://github.com/cloudfoundry/nfs-volume-release/pull/1035) - [Remove nfs-legacy option #1036 ](https://github.com/cloudfoundry/nfs-volume-release/pull/1036) - Various Dependency Bumps ## Bosh Job Spec changes: ```diff diff --git a/jobs/nfsbrokerpush/spec b/jobs/nfsbrokerpush/spec index 9bf3138..bb67a94 100644 --- a/jobs/nfsbrokerpush/spec +++ b/jobs/nfsbrokerpush/spec @@ -97,29 +97,6 @@ properties: nfsbrokerpush.services: description: "List of services and plans supported by broker" default: - - id: nfsbroker - name: "nfs-legacy" - description: "Existing NFSv3 volumes (Deprecated)" - bindable: true - plan_updatable: false - tags: ["nfs"] - requires: ["volume_mount"] - metadata: - display_name: "Legacy NFS V3 Volume Broker" - image_url: data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAABdCAYAAAA7ZEEJAAAKw2lDQ1BJQ0MgUHJvZmlsZQAASImVlgdUU1kax+976Y2WEIqUUEOR3gJICT2AgnSwEZKQhBJCCip2ZXAEx4KICNjQEREFxwLIWBALFgYBex2QQUVdBws2VPYBS9jZPbt79p9zc3/5ct/3vu+9e8/5A0B+z5VKs2ANALIlCllMaAAjKTmFgXsCIOSDB5aAwuXJpezo6EiAaHL+qz7cRtYiumE3luvf//+v0uQL5DwAoGiE0/hyXjbCx5FxnyeVKQBAbULiZgsV0jFG4oAmQwpE+PIYCyf44RinTfDQ+Jq4mEAA0GgA8GQuVyYEgIx0CBh5PCGSh+yIsKOEL5YgnIqwL0/E5SO8G+Hp2dk5Y9yBsFXaP+UR/iVnmionlytU8UQv48IHieXSLO7i//Nx/G9lZykn72GGDLJIFhaDzJZjzy0zJ0LFkrRZUZMs5o+vH2eRMix+knnywJRJ5nODIiZZmRnPnmSubOrafFFc4iTLcmJU+SVZsyJV+QUcFQvkwbGTnC4O4ajqUXDiJjlPnDBrkuWZsRFT9wpUxWXKGFXN2fKpetJlIap+RWKOar1CFBem6pE7VYNAnqSqjS8IClbFJfGqNVJFgCqnNCt6qpesUFVcnherulaBbLZJzuCGR0/liVb1COKACCiBBPCBAMhAGsgBWUABGCAIiIEcSJFfXIBsFYVgkWKsucAc6WKZWChSMNjIiRIwOBKe/XSGs6MTC4Cx8znx+t/Rx88dRL86FcttBcCzCAkKp2JcZJ+cfAoA9cNUzOwtsnWQs3W6i6eU5U3E0GNfGEAE6oAG9IARsr+sgB1wBu7AG/iDYBAOopBOksF8wEP6yUY6WQiWglWgEBSDTWArqAC7wF5wABwGR0ETOAXOgUvgGugCt8AD0AsGwEswBD6AEQiCcBAFokJ6kDFkAdlCzhAL8oWCoUgoBkqGUiEhJIGU0FJoDVQMlUAV0B6oFvoFOgmdg65A3dA9qA8ahN5CX2AUTIZpsCFsCTvALJgNR8Bx8DxYCOfC+XABvAEuh6vhQ3AjfA6+Bt+Ce+GX8DAKoEgoOsoEZYdioQJRUagUVDpKhlqOKkKVoapR9agWVDvqBqoX9Qr1GY1FU9EMtB3aGx2Gjkfz0Lno5ej16Ar0AXQj+gL6BroPPYT+jqFgDDC2GC8MB5OEEWIWYgoxZZj9mBOYi5hbmAHMBywWS8cysR7YMGwyNgO7BLseuwPbgG3FdmP7scM4HE4PZ4vzwUXhuDgFrhC3HXcIdxbXgxvAfcKT8MZ4Z3wIPgUvwa/Gl+EP4s/ge/DP8CMEDYIFwYsQReATFhM2EvYRWgjXCQOEEaImkUn0IcYRM4iriOXEeuJF4kPiOxKJZEryJM0miUkrSeWkI6TLpD7SZ7IW2YYcSJ5LVpI3kGvIreR75HcUCsWS4k9JoSgoGyi1lPOUx5RPalQ1ezWOGl9thVqlWqNaj9prdYK6hTpbfb56vnqZ+jH16+qvNAgalhqBGlyN5RqVGic17mgMa1I1nTSjNLM112se1Lyi+VwLp2WpFazF1yrQ2qt1XqufiqKaUQOpPOoa6j7qReoADUtj0ji0DFox7TCtkzakraXtqp2gvUi7Uvu0di8dRbekc+hZ9I30o/Tb9C86hjpsHYHOOp16nR6dj7rTdP11BbpFug26t3S/6DH0gvUy9TbrNek90kfr2+jP1l+ov1P/ov6rabRp3tN404qmHZ123wA2sDGIMVhisNegw2DY0Mgw1FBquN3wvOErI7qRv1GGUanRGaNBY6qxr7HYuNT4rPELhjaDzchilDMuMIZMDEzCTJQme0w6TUZMmabxpqtNG0wfmRHNWGbpZqVmbWZD5sbmM82XmteZ37cgWLAsRBbbLNotPloyLRMt11o2WT5n6jI5zHxmHfOhFcXKzyrXqtrqpjXWmmWdab3DussGtnGzEdlU2ly3hW3dbcW2O2y7p2Ome06XTK+efseObMe2y7Ors+uzp9tH2q+2b7J/7WDukOKw2aHd4bujm2OW4z7HB05aTuFOq51anN462zjznCudb7pQXEJcVrg0u7xxtXUVuO50vetGdZvpttatze2bu4e7zL3efdDD3CPVo8rjDovGimatZ132xHgGeK7wPOX52cvdS+F11OtPbzvvTO+D3s9nMGcIZuyb0e9j6sP12ePT68vwTfXd7dvrZ+LH9av2e+Jv5s/33+//jG3NzmAfYr8OcAyQBZwI+BjoFbgssDUIFRQaVBTUGawVHB9cEfw4xDREGFIXMhTqFroktDUMExYRtjnsDseQw+PUcobCPcKXhV+IIEfERlREPIm0iZRFtsyEZ4bP3DLz4SyLWZJZTVEgihO1JepRNDM6N/rX2djZ0bMrZz+NcYpZGtMeS41dEHsw9kNcQNzGuAfxVvHK+LYE9YS5CbUJHxODEksSe5MckpYlXUvWTxYnN6fgUhJS9qcMzwmes3XOwFy3uYVzb89jzls078p8/flZ808vUF/AXXAsFZOamHow9Ss3ilvNHU7jpFWlDfECedt4L/n+/FL+oMBHUCJ4lu6TXpL+XOgj3CIcFPmJykSvxIHiCvGbjLCMXRkfM6MyazJHsxKzGrLx2anZJyVakkzJhRyjnEU53VJbaaG0N9crd2vukCxCtl8OyefJmxU0xAh1KK2UPyj78nzzKvM+LUxYeGyR5iLJoo7FNovXLX6WH5L/8xL0Et6StqUmS1ct7VvGXrZnObQ8bXnbCrMVBSsGVoauPLCKuCpz1W+rHVeXrH6/JnFNS4FhwcqC/h9Cf6grVCuUFd5Z671214/oH8U/dq5zWbd93fciftHVYsfisuKv63nrr/7k9FP5T6Mb0jd0bnTfuHMTdpNk0+3NfpsPlGiW5Jf0b5m5pbGUUVpU+n7rgq1XylzLdm0jblNu6y2PLG/ebr590/avFaKKW5UBlQ1VBlXrqj7u4O/o2em/s36X4a7iXV92i3ff3RO6p7HasrpsL3Zv3t6n+xL2tf/M+rl2v/7+4v3faiQ1vQdiDlyo9aitPWhwcGMdXKesGzw091DX4aDDzfV29Xsa6A3FR8AR5ZEXv6T+cvtoxNG2Y6xj9cctjledoJ4oaoQaFzcONYmaepuTm7tPhp9sa/FuOfGr/a81p0xOVZ7WPr3xDPFMwZnRs/lnh1ulra/OCc/1ty1oe3A+6fzNC7MvdF6MuHj5Usil8+3s9rOXfS6fuuJ15eRV1tWma+7XGjvcOk785vbbiU73zsbrHtebuzy7WrpndJ/p8es5dyPoxqWbnJvXbs261X07/vbdO3Pv9N7l331+L+vem/t590cerHyIeVj0SONR2WODx9W/W//e0Ovee7ovqK/jSeyTB/28/pd/yP/4OlDwlPK07Jnxs9rnzs9PDYYMdr2Y82LgpfTlyKvCv2n+req11evjf/r/2TGUNDTwRvZm9O36d3rvat67vm8bjh5+/CH7w8jHok96nw58Zn1u/5L45dnIwq+4r+XfrL+1fI/4/nA0e3RUypVxx60AChlwejoAb2sAoCQj3qELAOKcCf88LmjC848T+E884bHH5Q5AjT8A8SsBiEQ8yk5kWCBMRuYxyxTnD2AXF9X4h+TpLs4TuciIC8V8Gh19ZwgArgWAb7LR0ZEdo6Pf9iHF3gOgNXfCt48Ji3jxEqaOCe5BpwNzJfgX/R2N5g2xmShwcwAAAZtpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADx4OnhtcG1ldGEgeG1sbnM6eD0iYWRvYmU6bnM6bWV0YS8iIHg6eG1wdGs9IlhNUCBDb3JlIDUuNC4wIj4KICAgPHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50YXgtbnMjIj4KICAgICAgPHJkZjpEZXNjcmlwdGlvbiByZGY6YWJvdXQ9IiIKICAgICAgICAgICAgeG1sbnM6ZXhpZj0iaHR0cDovL25zLmFkb2JlLmNvbS9leGlmLzEuMC8iPgogICAgICAgICA8ZXhpZjpQaXhlbFhEaW1lbnNpb24+ODQ8L2V4aWY6UGl4ZWxYRGltZW5zaW9uPgogICAgICAgICA8ZXhpZjpQaXhlbFlEaW1lbnNpb24+OTM8L2V4aWY6UGl4ZWxZRGltZW5zaW9uPgogICAgICA8L3JkZjpEZXNjcmlwdGlvbj4KICAgPC9yZGY6UkRGPgo8L3g6eG1wbWV0YT4KE9hEygAADTRJREFUeAHtXVtsHNUZ/ry7s3d7196s4xuJc3GEExpiQahCASWioJJSBdSkVdOqiAf61IqiSnlAPPJE2wceSiUUCfUiJGQqelEBJW3ltmlQiwIEGofimNgEG19315e9X9z/n9nZnZmd3aztsyYxc+Tjc5kz/5zzzX8u+885/9+0Qg6WE4aATRgli5CMgAWoYEawABUMqEMwvRK5fGEFc4tpzEQTWExksJTMks9hOZXFcoLjFCY5P4dMLo9srkBhAbliqKY5zOYLkOw2SA4bnOTV0KFJuyQ7fG4Hmj1O8hJ85Dls9nCehIDPiS0BD8IBN+y2plI9RUea1jMppTJ5fPzZEkY+W8C1mWXMLKRkAKeiKUSWUrgRp7smwrK12YWOVg+2Br3oaPOge4sPfZ0B7O5qgVNaX6ddFaDzS2mcfedTDH8Sw5UJAnE2bv6CqdIOhwS75ICDvcOBJhtVlP6ammywUaua2FMeJeU8OS3nU5rzi2UoAhtxVIE4nt8QL0pkXyjIL6yUXqF0gYtwfrFMXgkLK3nks+xzyLHP5WRaxsrTo9BD4O7uDmDf9lZ8daAbIQJ/Ne66gC6nchh6fxJnLnyK90bn5UbID6BGS05J8ZIEh4s8pwk8GwPYuF61mvaZluWek6dhJp/LIptRfK4YZtOZEtjchoFdITx4Rw+O3N4Fr+v6I2RVQHnceuXvH+NXZz8Cd212DpcTPr8PnmYfXJ7VvTnTlt2gmelkGonlZSSXEpABpnp6nHY89uAefPu+XXDYq3OLKaBv/28WP3v1fUxGEuBVf3NrC1ragjI33qAYNKxa2XQWi9EYlqKLYBi72rw49a39uKMvbPrMCkD/OxbFD3/xL/As7WnxozXc9oUE0ogWDw2xmXkkluLyKuGXP7oH/duCxmI8TZTdTCyFU6f/LYPZ0hpAe/dWC8wiPDxfhHs64CdcmNkYp2nCy+h0gL7yj1F5fehlzuzYYixrpQmBEOHibfYjFs9gkPAyOh2gH1yNyNf9wRZjOSutQcAfbJZTl8ajmlwlqgP0Mq0v2Tndm3cGV5q9vv9Ot1smwPON0ekAVS9mUmk1aoUmCGRSlWOnWswU0KXYonrdCk0QWK6BjymgycVlRKfnTUhZWZGpOXnpVA0J099SNrsdi5EYstksAqHWTf2rqBowxvw0DYMLs1Ekl+NoIsnXCv2SNHOmgHbu6EGUF7HEqUlayPIk5Q8GaLnghd1hN6OzKfPy+TxhEAd3cXVekZeU7SFMXBk3bbMpoCwhCtOiPk2L2AgBm0mSOG5qhjyIW91gom6vRxaIsORos7gCSU1y9FMzGU8QJyaQTiRLTXNRe/lXo8urzPClC4aIKaBqGb65s7ebBARZxJeWsbywhDSBy54di9gcxL0utxOSywUn/Zqw0cuwU5ew2ew3pMSJJU2FAkmaqMsWSIzHPymZ+9KpDLK8uuECRcfSM1+gmbwfEknU6nE1AVUJSCSaC7paEdzSSmCmkaI3l06kkEomkSVw2Zs5HovZ20myzgDbGGg5j0Mlbi/KPs3uX00ey0DzJCMtUDctMFjkeZzjbssAcn6epP8cVnNcN+6BbmIk5si1SNTqAlRbAX6I/KCQksviLQY5Q6EswCUZY46Eufz2lcblkSMR443kWF7roE8mqhDcSWJJbpNE4XrdqgE1PpArYVYR5hiWjjPIBZlzFK4pkES9QMLdUh5do35mJLuGNEn25aGGe0OxJ8hhuTcwiAxmI8f9dQNareU8vqoS/WplNmO+6cJ+MzZ0o9pkASoYaQtQC1DBCAgmZ3GoBahgBASTszjUAlQwAoLJWRxqASoYAcHkLA61ABWMgGByFodagApGQDA5i0MtQAUjIJicUAHz3ru248f99FVwxYb44gKe+v1k9eqG2vHcQ/SdiqTs8ZkInnpjWimr5nPfMf/0raMp2XJ4/c+jGNTuywi14cmvtGJfyAmvYbdxlk6hjE0tYfAvUxjWURKTENrlg14HvPSZwetsQnhLEM8e8lWvZZD2W7qprNSEoE/zXtV82oLt5evX8ZLTibB23+u+Hrz0aAcOtrsqwOTKSG4Jfb1tePqxXThWvXZrviIUUNDhCq3r7e/CCW2GNm7+oRQw5GfpJEdtn0NcvSe0FS8eaoH2g2+CTq6MfBbHyFwKC1nNtyvJhRPf34m7tXUSENewhgBqRhI2CUePd2Pw1QnjlfrS+TR++tJo3V1zb78fXpVyPovXz4zgZcOjD9+zA4/d6lFAd7px+HY3zl9U34h689pDsRxqrAeNgRJt4anZ9Y33GNLthnSt5IEtZf6YHZupAJPvHTp3FWfnyt/mw+HSK6hFuu5rjQW0SL1m179OVVf1SV8ziTlprKzmzl+jzRk0lCRSdCSyzh0h1WgZ88uv1HhlnemxKzE4dwTRxXvL1tz1V6Dsqa6vMu9FcjjarmxmC3S348XjPgxdnsPLl/Qn/sYujOPxC/XRXG2phgHqzC3g1DsSfntQmemVrh/DM2/pG1ezwnYXHjnSjcO09DHjtyztJH7h3FyJxPC5KCb7OpSXSLneoA9HaaVx9C7iRjrAO0FnUPlY5eCHq6hDiXp9kYYBSntdgIvjGNrZj8MhZYde7z6a9d8awWB9daNSTdi7K1C9dMGFYQJ0qFQiglN/tOG5r7ejS7urhl6Il85s9rHfFsCxQ3mM0VnV02emMFa6V0yksWMo1fH0a9OYLc0ByqwvV732rsC6W1cxxs7P4dSvh3H63RhGonSOs/RsDUnaFNa7rQ3Pfnf7TbZsktsQwfPvN+PZAW3Xn8czH2nWhJq26qKFLM6en8E4AWDe5dM4r7uhnBi6MImh4ji5d1cbDt7iR187HeVu0dDy+PDEN7tx/ncT5RvXGWtcl9dUjCeBoW3arn8Ljs3EkaUyZkCVbqWNZSMfLlQFrVSuGLn71jaEfRKcNLYOXlooXR4ejYC94gJ48jj9kgoqk5fU4pa5tNqLKRGpM9LwLq/Ww9j1HzlEm1g1yxy13JrD7i48cU8HTgyEcOy25hpkFvD8q9OYVJ9td2Jvd43iq7y0YYAC3PXLs6tE6izWqTxB31S3Zms6HT8/Wdy/qi+kprTDTR6kiEKY20BAAbnrz2sbI6wdwGgMEzyGyM6Oow+T8KMKqCcfolWA2vJ8Dpe0kiqVxBrDDRlDtXXjrr/n8fJaUXttffE4Xr6cxNP7PQoZFn482o8HY2lcnU9jNrWCYNCF3rAbYZKGqW52YrFuWYF6T61QfU+1ygi+FsELmq5fQdywnNIuJyvKGjKG/3MVg5+U2JSuNiEQdOMArWUf2BfEwW7SiqMBMzFPMtsz5R8GBnJrSgoGtNydM+ly3Fgz7vpaAYX25AWIk0qQ0O/tGePN10n/gSRML7y7gMlk9ednaZv68JUZ/OA1ccsltVo6jQ73/uRPcv72/l3q9Zs89OHwPuJKX3HtSSdAJqeWMTSx/llo/PKojM0/f/4NHUYbPobqnt7wRBxDBsFIox8puMs3uro3Pn0LUMHvyALUAlQwAoLJWRxqASoYAcHkLA61ABWMgGByFodagApGQDA5i0MtQAUjIJicxaEWoIIREEzO4lALUMEICCZncagFqGAEBJPTcSibc2CXyxg2ywt+6M1OjtW7sVPx0rZHB+gBsirALhkv7/DQFrbiCgKsaJDdwO5Kxd86QE8e6ZMtwSySnkz1LSgkrP8qAtx7F+eishGWk0d2q9mlUAfojg4/Tp3Yjxx9bp0emyCthRW7L0s3fhEjjMfU+KeygsJnvjOA3q3+ChgqPiN/7c5b8M6Vebzx9jVMXr0Gj88rm63w+ItbXCpIbO4M1n7J+kSXIgtIUcju4S9vk42tmLVct9FBLcCWBP52cQK/+esVXCV7SezYlI+HDKt42bAKqYNspEI+tR6fV8iKEFOkzpPNVLCWX1VF5s7OZnzv/t24/0APtd+8dqaAaouyoZU3yfTP0MVJ2SIXX2Pth6xf00nWtVidsIv0ut/MqoTzpJqTu7OimJX0o8aTZJtJ2UDqpqOW9+3vxEN39uDOPWEtNKbx6wKq3sUmgM5dmpLtKl38mPQzp/Wb1xlQPndpo1BRwkohAW+n7dx8jRVBq2ooWQNuox1rsGVQWCGrqpiVbShxnOcIWbcpm27LkN5TCrXO67LjwO4QHhjowb23dcK1io2sdQOqfSAb3+Kh4OLYPNjcxQcEsJmhEe09ujipwlTAVXR7qlbAuB+xmkybYgasaA1MyStZ8WLGoS7Jekg5jyL0x5a9ivpJCTDWTarbgKZ7eGWC15O37WjDl8jvp4O1Oztbqnbpyrv1OWsCVE9CSTHHTkeTmI0lMM226WJJ2U/LRv7YoB97xcgf49BoR+8FfjpN5ycjf34y8tfidaI96FF8qxtbyeAfpzvJPpKbTj6LcsIArbdCDGY8TcDKACtAZ+jsC1tMZCtjGfJai4lyPl1TLSXqQho62JoiW1Jkq4leArDZyyCSMmoyd8agbrTbcEA3uoEb/bzGzw4b3aLP+Xn/BwZ8DglkGHaWAAAAAElFTkSuQmCC - long_description: "Legacy broker for existing NFSv3 volumes (deprecated)" - provider_display_name: "Dell / Pivotal" - documentation_url: https://docs.cloudfoundry.org/devguide/services/using-vol-services.html - plans: - - id: Existing - name: "Existing" - description: "A preexisting filesystem" - metadata: - costs: - - amount: - usd: 0.0 - unit: "MONTHLY" - display_name: "Existing Filesystems" - id: "997f8f26-e10c-11e7-80c1-9a214cf093ae" name: "nfs" description: "Existing NFSv3 and v4 volumes (see: https://code.cloudfoundry.org/nfs-volume-release/)" ``` ## ✨ Built with go 1.23.1 Full Changelog: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.2.0...v7.3.0 ## Resources - [Download release 7.3.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.3.0).
otel-collector	0.10.1
routing	0.311.0
silk	3.51.0	v3.51.0 ## 3.51.0 Release Date: September 24, 2024 ## Changes - Bump to Go 1.23.1 - [Fix file/dir creation permissions](https://github.com/cloudfoundry/silk-release/commit/a085a2b0909ad849bce96e142381bdf67658990f) - [Catch or explicitly ignore unhandled errors](https://github.com/cloudfoundry/silk-release/commit/460ea10df9e8b8d32179b53ac5e22e1f1b58a4da) ## ✨ Built with go 1.23.1 Full Changelog: https://github.com/cloudfoundry/silk-release/compare/v3.50.0...v3.51.0 ## Resources - [Download release 3.51.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.51.0).
smb-volume	3.5.0	v3.5.0 ## 3.5.0 Release Date: September 26, 2024 ## Changes - Upgrade to Go 1.23! ## ✨ Built with go 1.23.1 Full Changelog: https://github.com/cloudfoundry/smb-volume-release/compare/v3.4.0...v3.5.0 ## Resources - [Download release 3.5.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.5.0).
smoke-tests	4.10.0
syslog	12.3.3
tanzu-jammy-stack	1.0.1

6.0.8

Release Date: 09/27/2024

[Bug Fix] Fixes a bug preventing TCP Routing from working on IST/TASW tiles when the TAS Routing API Endpoint Protocol is configured to be HTTPS only
Bump bpm to version 1.3.2
Bump cf-networking to version 3.50.0
Bump cflinuxfs3 to version 0.407.0
Bump cf-cli to version 1.67.0
Bump diego to version 2.103.0
Bump garden-runc to version 1.56.0
Bump loggregator-agent to version 8.2.1
Bump mapfs to version 1.3.0
Bump nfs-volume to version 7.2.0
Bump otel-collector to version 0.10.1
Bump routing to version 0.311.0
Bump silk to version 3.50.0
Bump smb-volume to version 3.4.0
Bump syslog to version 12.3.3

Component	Version	Release Notes
ubuntu-jammy stemcell	1.572
bpm	1.3.2
cf-networking	3.50.0	v3.50.0 ## 3.50.0 Release Date: September 11, 2024 ## Changes - Bump to golang 1.22.7 - Dependency updates ## ✨ Built with go 1.22.7 Full Changelog: https://github.com/cloudfoundry/cf-networking-release/compare/v3.49.0...v3.50.0 ## Resources - [Download release 3.50.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.50.0). v3.49.0 ## 3.49.0 Release Date: August 27, 2024 ## Changes - Bumps healthchecker-boshrelease vendored packages ## ✨ Built with go 1.22.6 Full Changelog: https://github.com/cloudfoundry/cf-networking-release/compare/v3.48.0...v3.49.0 ## Resources - [Download release 3.49.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.49.0). v3.48.0 ## 3.48.0 Release Date: August 20, 2024 ## Changes - Update dependancies ## ✨ Built with go 1.22.6 Full Changelog: https://github.com/cloudfoundry/cf-networking-release/compare/v3.47.0...v3.48.0 ## Resources - [Download release 3.48.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.48.0).
cflinuxfs3	0.407.0	v0.407.0 This release ships with cflinuxfs3 version 0.407.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.407.0) v0.406.0 This release ships with cflinuxfs3 version 0.406.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.406.0) v0.405.0 This release ships with cflinuxfs3 version 0.405.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.405.0) v0.404.0 This release ships with cflinuxfs3 version 0.404.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.404.0) v0.403.0 This release ships with cflinuxfs3 version 0.403.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.403.0) v0.402.0 This release ships with cflinuxfs3 version 0.402.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.402.0) v0.401.0 This release ships with cflinuxfs3 version 0.401.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.401.0) v0.400.0 This release ships with cflinuxfs3 version 0.400.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.400.0) v0.399.0 This release ships with cflinuxfs3 version 0.399.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.399.0) v0.392.0 This release ships with cflinuxfs3 version 0.392.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.392.0)
cflinuxfs4	1.107.0
cf-cli	1.67.0	v1.67.0 ### Included CF CLI versions: 7.7.14 8.8.2 v1.66.0 ### Included CF CLI versions: 7.7.12 8.8.0
count-cores-indicator	2.0.0
diego	2.103.0	v2.103.0 ## 2.103.0 Release Date: September 12, 2024 ## Changes - Go dependency bumps - Remove toolchain directive for compatibility when building binaries ## ✨ Built with go 1.22.7 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.102.0...v2.103.0 ## Resources - [Download release 2.103.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.103.0).
garden-runc	1.56.0	v1.56.0 ## 1.56.0 Release Date: September 11, 2024 ## Changes - ✨Introduces a new `garden.read_header_timeout` property to configure how long garden's HTTP server will wait to read all HTTP request headers. - Bumps to go 1.22.7 - Dependency Bumps ## Bosh Job Spec changes: ```diff diff --git a/jobs/garden-windows/spec b/jobs/garden-windows/spec index 004e4e7f..74f545db 100644 --- a/jobs/garden-windows/spec +++ b/jobs/garden-windows/spec @@ -36,6 +36,10 @@ properties: description: "An array of additional arguments which will be passed to the runtime plugin binary" default: [] + garden.read_header_timeout: + description: "The amount of time allowed to read request headers" + default: 30s + garden.image_plugin: description: "Path to an image plugin binary" diff --git a/jobs/garden/spec b/jobs/garden/spec index 093e53e1..5a78d357 100644 --- a/jobs/garden/spec +++ b/jobs/garden/spec @@ -128,6 +128,10 @@ properties: description: "Path to a runtime plugin binary" default: /var/vcap/packages/runc/bin/runc + garden.read_header_timeout: + description: "The amount of time allowed to read request headers" + default: 30s + garden.no_image_plugin: description: "If true, disables image plugin usage, thus ignoring other image plugin settings" default: false ``` ## ✨ Built with go 1.22.7 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.55.0...v1.56.0 ## Resources - [Download release 1.56.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.56.0). v1.55.0 ## 1.55.0 Release Date: August 27, 2024 ## Changes - Bump to golang 1.22.6 ## ✨ Built with go 1.22.6 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.54.0...v1.55.0 ## Resources - [Download release 1.55.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.55.0).
loggregator-agent	8.2.1	v8.2.1 ## What's Changed * Fix loggr-forwarder-agent-windows to emit all OTLP signals by default by @ctlong in https://github.com/cloudfoundry/loggregator-agent-release/pull/611 * Bump dependencies Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.2.0...v8.2.1 v8.2.0 ## What's Changed * Bump to Golang 1.22.7 * Emit all OTel signals by default by @mkocher in https://github.com/cloudfoundry/loggregator-agent-release/pull/609 * Bump dependencies Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.1.7...v8.2.0 v8.1.7 ## What's Changed * Bump dependencies * Fix flaky unit tests by @iprotsiuk in https://github.com/cloudfoundry/loggregator-agent-release/pull/604 * Ignore linter warnings for G115 by @iprotsiuk in https://github.com/cloudfoundry/loggregator-agent-release/pull/607 * Fix uint to int conversion for otelcolclient by @iprotsiuk in https://github.com/cloudfoundry/loggregator-agent-release/pull/608 Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.1.6...v8.1.7 v8.1.6 ## What's Changed * ⚠️ the `temporary_enable_otel_traces` property has been renamed to `enable_otel_traces`. Since this was prefixed as temporary this release is not a major version bump. * Add support to send LOG and EVENT to OtelCollector as logs by @mkocher in https://github.com/cloudfoundry/loggregator-agent-release/pull/603. For backwards compatibility `enable_otel_metrics` is true by default, and `enable_otel_traces` and `enable_otel_logs` are false by default. * Bump dependencies ## New Contributors * @iprotsiuk made their first contribution in https://github.com/cloudfoundry/loggregator-agent-release/pull/600 * @jriguera contributed log support for OTLP forwarding Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.1.5...v8.1.6
mapfs	1.3.0	v1.3.0 ## 1.3.0 Release Date: September 16, 2024 ## Changes - Mapfs-release has been refactored to remove submodules and localize all documentation ## ✨ Built with go 1.22.7 Full Changelog: https://github.com/cloudfoundry/mapfs-release/compare/v1.2.80...v1.3.0 ## Resources - [Download release 1.3.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/mapfs-release?version=1.3.0). v1.2.80 ## 1.2.80 Release Date: August 27, 2024 ## Changes - Bumped to golang 1.22.6 - Many CI + testing changes/improvements - Dependency bumps ## ✨ Built with go 1.22.6 Full Changelog: https://github.com/cloudfoundry/mapfs-release/compare/v1.2.79...v1.2.80 ## Resources - [Download release 1.2.80 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/mapfs-release?version=1.2.80).
nfs-volume	7.2.0	v7.2.0 ## 7.2.0 Release Date: September 11, 2024 ## Changes - Add dockerdriver-integration errand - Move nfsv3driver and nfsbroker into the release - Bump to go1.22.7 - Update processes to sync with [runtime ci](https://github.com/cloudfoundry/wg-app-platform-runtime-ci) and update release to be on Minor versions - Update bosh blobs to latest - Update ldap test server configuration to have the correct users for tests - Remove support for cf cli v6 ## Bosh Job Spec changes: ```diff diff --git a/jobs/dockerdriver-integration/spec b/jobs/dockerdriver-integration/spec new file mode 100644 index 0000000..51e7835 --- /dev/null +++ b/jobs/dockerdriver-integration/spec @@ -0,0 +1,22 @@ +--- +name: dockerdriver-integration + +templates: + pre-start.erb: bin/pre-start + run.erb: bin/run + config.json.erb: config/config.json + +packages: +- dockerdriver-integration +- nfs-debs +- nfsv3driver + + +properties: + nfs_remote_path: + description: Address for SMB Remote Path + default: nfs://nfstestserver.service.cf.internal/export + + mapfs_path: + description: "Path to mapfs binary" + default: /var/vcap/packages/mapfs/bin/mapfs diff --git a/jobs/nfstestldapserver/spec b/jobs/nfstestldapserver/spec index ec232e3..0408886 100644 --- a/jobs/nfstestldapserver/spec +++ b/jobs/nfstestldapserver/spec @@ -9,7 +9,8 @@ templates: config/core.ldif: config/core.ldif config/core.schema: config/core.schema config/addou.ldif: config/addou.ldif - config/adduser.ldif: config/adduser.ldif + config/adduser1000.ldif: config/adduser1000.ldif + config/adduser2000.ldif: config/adduser2000.ldif helpers/ctl_setup.sh: helpers/ctl_setup.sh helpers/ctl_utils.sh: helpers/ctl_utils.sh slapd.ldif.erb: config/slapd.ldif ``` ## ✨ Built with go 1.22.7 Full Changelog: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.1.75...v7.2.0 ## Resources - [Download release 7.2.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.2.0).
otel-collector	0.10.1	v0.10.1 ## What's Changed * Bump packaged Golang to go1.22.7 Full Changelog: https://github.com/cloudfoundry/otel-collector-release/compare/v0.10.0...v0.10.1 v0.10.0 ## What's Changed * Add 'splunk_hec' exporter, 'filter' processor, and 'transform' processor by @mkocher in https://github.com/cloudfoundry/otel-collector-release/pull/51 Full Changelog: https://github.com/cloudfoundry/otel-collector-release/compare/v0.9.0...v0.10.0 v0.9.0 ## What's Changed * feat: Add CPU limit by @aqstack in https://github.com/cloudfoundry/otel-collector-release/pull/46 * fix: config secret interpolation by @acosta11 in https://github.com/cloudfoundry/otel-collector-release/pull/49 ## New Contributors * @acosta11 made their first contribution in https://github.com/cloudfoundry/otel-collector-release/pull/49 Full Changelog: https://github.com/cloudfoundry/otel-collector-release/compare/v0.8.1...v0.9.0 v0.8.1 ## What's Changed * Automatically configure nop pipelines in config when necessary by @iprotsiuk in https://github.com/cloudfoundry/otel-collector-release/pull/48 ## New Contributors * @iprotsiuk made their first contribution in https://github.com/cloudfoundry/otel-collector-release/pull/48 Full Changelog: https://github.com/cloudfoundry/otel-collector-release/compare/v0.8.0...v0.8.1 v0.8.0 ## What's Changed * add integration tests by @mkocher in https://github.com/cloudfoundry/otel-collector-release/pull/45 * Feat: Add secrets property by @ctlong in https://github.com/cloudfoundry/otel-collector-release/pull/47 Full Changelog: https://github.com/cloudfoundry/otel-collector-release/compare/v0.7.0...v0.8.0
routing	0.311.0	v0.311.0 ## 0.311.0 Release Date: September 12, 2024 ## Changes - Fix route-registrar dynamic config YAML field names to match JSON names ## ✨ Built with go 1.22.7 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.310.0...v0.311.0 ## Resources - [Download release 0.311.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.311.0). v0.310.0 ## 0.310.0 Release Date: September 09, 2024 ## Changes - dep: bump gopkg.in/yaml from v2 to v3; adjusted submodules listed in [routing-release#435](https://github.com/cloudfoundry/routing-release/pull/435) - minor dependency bumps ## ✨ Built with go 1.22.7 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.309.0...v0.310.0 ## Resources - [Download release 0.310.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.310.0). v0.309.0 ## 0.309.0 Release Date: September 06, 2024 ## Changes - Dependency bumps ## ✨ Built with go 1.22.7 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.308.0...v0.309.0 ## Resources - [Download release 0.309.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.309.0). v0.308.0 ## 0.308.0 Release Date: September 04, 2024 ## Changes - Route Registrar now allows hosts to be configured per route - By default it will use the top level host config ## ✨ Built with go 1.22.6 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.307.0...v0.308.0 ## Resources - [Download release 0.308.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.308.0). v0.307.0 ## 0.307.0 Release Date: August 27, 2024 ## Changes - Bump healthchecker-boshrelease vendored packages ## ✨ Built with go 1.22.6 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.306.0...v0.307.0 ## Resources - [Download release 0.307.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.307.0). v0.306.0 ## 0.306.0 Release Date: August 26, 2024 ## Changes - 🐛Fixes a bug where TCP routes were incorrectly detected as existing records in routing-api when the only difference between the new route and existing record was that the SNI Hostname or TLS TCP Port were different. This resulted in backends for TLS TCP Routes being ignored in certain scenarios. ## ✨ Built with go 1.22.6 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.305.0...v0.306.0 ## Resources - [Download release 0.306.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.306.0). v0.305.0 ## 0.305.0 Release Date: August 23, 2024 ## Changes - Route-registrar can dynamically scan and register routes at paths matching `route_registrar.dynamic_config_globs` ## Bosh Job Spec changes: ```diff diff --git a/jobs/route_registrar/spec b/jobs/route_registrar/spec index feafaf10..4f887265 100644 --- a/jobs/route_registrar/spec +++ b/jobs/route_registrar/spec @@ -94,6 +94,10 @@ properties: route_registrar.routing_api.server_ca_cert: description: "Routing API Certificate Authority" + route_registrar.dynamic_config_globs: + description: "Files matching the globs contain routes configuration that will be loaded dynamically. Parent directory must exist for bpm to mount it." + default: [/var/vcap/jobs//config/route_registrar/config.yml] + route_registrar.routes: description: \| (required, array of objects): Routes that will be registered ``` ## ✨ Built with go 1.22.6 Full Changelog*: https://github.com/cloudfoundry/routing-release/compare/v0.304.0...v0.305.0 ## Resources - [Download release 0.305.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.305.0).
silk	3.50.0	v3.50.0 ## 3.50.0 Release Date: September 11, 2024 ## Changes - Bumps to go 1.22.7 - Dependency bumps - 🐛Fixes an issue in vxlan-policy-agent where certain chains were not cleaned up properly - 🐛Adjusts how ASG related iptables chain names are generated in vxlan-policy-agent to provide more uniqueness, and better error messaging on collisions. ## ✨ Built with go 1.22.7 Full Changelog: https://github.com/cloudfoundry/silk-release/compare/v3.49.0...v3.50.0 ## Resources - [Download release 3.50.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.50.0). v3.49.0 ## 3.49.0 Release Date: August 27, 2024 ## Changes - Bumps healthchecker-boshrelease vendored packages ## ✨ Built with go 1.22.6 Full Changelog: https://github.com/cloudfoundry/silk-release/compare/v3.48.0...v3.49.0 ## Resources - [Download release 3.49.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.49.0). v3.48.0 ## 3.48.0 Release Date: August 20, 2024 ## Changes - Update dependancies ## ✨ Built with go 1.22.6 Full Changelog: https://github.com/cloudfoundry/silk-release/compare/v3.47.0...v3.48.0 ## Resources - [Download release 3.48.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.48.0).
smb-volume	3.4.0	v3.4.0 ## 3.4.0 Release Date: September 17, 2024 ## Changes - Add documentation - Removed support for cf cli v6 ## ✨ Built with go 1.22.7 Full Changelog: https://github.com/cloudfoundry/smb-volume-release/compare/v3.2.0...v3.4.0 ## Resources - [Download release 3.4.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.4.0). v3.2.0 ## 3.2.0 Release Date: August 20, 2024 ## Changes - Added dockerdriver-integration errand - Moved `smbbroker` and `smbdriver` into the release instead of having them as submodule - Standardize blob name to match garden-runc and other releases - Fixed an error with smbtestserver when it couldn't be deployed twice in a row - Move config for smbtestserver into the bosh job instead - Allow consuming username and password for smbtestserver - Fix a bug with smbtestserver to allow the correct CIDR range for access - Allow SMB version 3.1.1 for broker since the move to Jammy stemcells [More context](https://learn.microsoft.com/en-us/azure/storage/files/storage-how-to-use-files-linux?tabs=Ubuntu%2Csmb311) - Bump to golang 1.22.6 - Update processes to sync with [runtime ci](https://github.com/cloudfoundry/wg-app-platform-runtime-ci) and update release to be on Minor versions ## Bosh Job Spec changes: ```diff diff --git a/jobs/dockerdriver-integration/spec b/jobs/dockerdriver-integration/spec new file mode 100644 index 0000000..a269658 --- /dev/null +++ b/jobs/dockerdriver-integration/spec @@ -0,0 +1,21 @@ +--- +name: dockerdriver-integration + +templates: + pre-start.erb: bin/pre-start + run.erb: bin/run + config.json.erb: config/config.json + +packages: +- cifs-utils +- dockerdriver-integration +- smbdriver + +consumes: +- name: smbtestserver + type: credentials + +properties: + smb_remote_path: + description: Address for SMB Remote Path + default: //smbtestserver.service.cf.internal/vol diff --git a/jobs/smbtestserver/spec b/jobs/smbtestserver/spec index 6e4d88d..de9a091 100755 --- a/jobs/smbtestserver/spec +++ b/jobs/smbtestserver/spec @@ -2,11 +2,19 @@ name: smbtestserver templates: - install.erb: bin/pre-start + smb.conf.erb: config/smb.conf + pre-start.erb: bin/pre-start ctl.erb: bin/smbtestserver_ctl packages: [] +provides: +- name: smbtestserver + type: credentials + properties: + - username + - password + properties: export_cidr: description: "cidr range to use for smb exports" ``` ## ✨ Built with go 1.22.6 Full Changelog: https://github.com/cloudfoundry/smb-volume-release/compare/v3.1.74...v3.2.0 ## Resources - [Download release 3.2.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.2.0).
smoke-tests	4.10.0
syslog	12.3.3	v12.3.3 ## What's Changed * Bump packaged Golang to go1.22.7 Full Changelog: https://github.com/cloudfoundry/syslog-release/compare/v12.3.2...v12.3.3 v12.3.2 ## What's Changed * Bump packaged Golang to go1.22.6 Full Changelog: https://github.com/cloudfoundry/syslog-release/compare/v12.3.1...v12.3.2
tanzu-jammy-stack	1.0.1

6.0.7

Release Date: 08/22/2024

Caution If you are upgrading from v6.0.5 or v6.0.6 to a later patch version, upgrade TAS for VMs and apply those changes before you upgrade Isolation Segment. Failure to upgrade TAS for VMs first will result in TCP route outages on Isolation Segment.
For more information, see Downtime for TCP Routes When Upgrading IST, TASW, and Services Tiles before TAS in TPCF in the Broadcom Support Knowledge Base.

[Bug Fix] Fixes known issue Downtime for TCP Routes When Upgrading IST, TASW, and Services Tiles before TAS in TPCF
Bump bpm to version 1.3.0
Bump cflinuxfs3 to version 0.391.0
Bump diego to version 2.102.0
Bump garden-runc to version 1.54.0
Bump loggregator-agent to version 8.1.5
Bump otel-collector to version 0.7.0
Bump routing to version 0.304.0
Bump syslog to version 12.3.1

Component	Version	Release Notes
ubuntu-jammy stemcell	1.506
bpm	1.3.0
cf-networking	3.47.0
cflinuxfs3	0.391.0	v0.391.0 This release ships with cflinuxfs3 version 0.391.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.391.0)
cflinuxfs4	1.107.0
cf-cli	1.65.0
count-cores-indicator	2.0.0
diego	2.102.0	v2.102.0 ## 2.102.0 Release Date: August 09, 2024 ## Changes - Add TLS support for tcp routes in route-emitter - Split metric_tags from run_info in desired LRP in BBS to minimize database queries issued by convergence ## Bosh Job Spec changes: ```diff diff --git a/jobs/route_emitter/spec b/jobs/route_emitter/spec index 11dae3aec..df1b8383c 100644 --- a/jobs/route_emitter/spec +++ b/jobs/route_emitter/spec @@ -112,6 +112,9 @@ properties: tcp.enabled: description: "Enable the route-emitter in cell-local mode to emit TCP routes for instances to the Routing API." default: false + tcp.enable_tls: + description: "When enabled route-emitter will include TLS port and instance GUID when emitting TCP routes." + default: false routing_api.url: description: "Routing API uri to be used by the tcp route-emitter" default: http://routing-api.service.cf.internal diff --git a/jobs/route_emitter_windows/spec b/jobs/route_emitter_windows/spec index cec39c995..9db9e8b69 100644 --- a/jobs/route_emitter_windows/spec +++ b/jobs/route_emitter_windows/spec @@ -112,6 +112,9 @@ properties: tcp.enabled: description: "Enable the route-emitter in cell-local mode to emit TCP routes for instances to the Routing API." default: false + tcp.enable_tls: + description: "When enabled route-emitter will include TLS port and instance GUID when emitting TCP routes." + default: false routing_api.url: description: "Routing API uri to be used by the tcp route-emitter" default: http://routing-api.service.cf.internal ``` ## ✨ Built with go 1.22.6 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.101.0...v2.102.0 ## Resources - [Download release 2.102.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.102.0). v2.101.0 ## 2.101.0 Release Date: July 31, 2024 ## Changes - ✨Adds the cnb-app-lifecycle package as a possible app lifecycle for diego. Thanks @pbusko @nicolasbender @modulo11 for this huge effort! - 🐛Resolves an issue where CPUWeight could be set to 0 on a container. This value will now always be at least 1, complying with the spec. - Bumped golang to 1.22.5 - Bumped envoy to 1.28.4 - Various testing enhancements ## Bosh Job Spec changes: ```diff diff --git a/jobs/file_server/spec b/jobs/file_server/spec index dddda86c2..f530805b3 100644 --- a/jobs/file_server/spec +++ b/jobs/file_server/spec @@ -20,6 +20,7 @@ packages: - buildpack_app_lifecycle - docker_app_lifecycle - windows_app_lifecycle + - cnb_app_lifecycle provides: - name: file_server ``` ## ✨ Built with go 1.22.5 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.100.0...v2.101.0 ## Resources - [Download release 2.101.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.101.0).
garden-runc	1.54.0	v1.54.0 ## 1.54.0 Release Date: July 31, 2024 ## Changes - Bump to golang 1.22.5 - Bump libnftnl to 1.2.8 ## ✨ Built with go 1.22.5 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.53.0...v1.54.0 ## Resources - [Download release 1.54.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.54.0).
loggregator-agent	8.1.5	v8.1.5 ## What's Changed * Bump go dependencies v8.1.4 ## What's Changed * Bump to Go1.22 by @aqstack in https://github.com/cloudfoundry/loggregator-agent-release/pull/598 * Bump go dependencies Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.1.3...v8.1.4
mapfs	1.2.79
nfs-volume	7.1.75
otel-collector	0.7.0	v0.7.0 ## What's Changed * feat: Add memory limits by @aqstack in https://github.com/cloudfoundry/otel-collector-release/pull/43 Full Changelog: https://github.com/cloudfoundry/otel-collector-release/compare/v0.6.2...v0.7.0 v0.6.2 ## What's Changed * Config to allow subset of processors and exporters by @oppegard in https://github.com/cloudfoundry/otel-collector-release/pull/40 Full Changelog: https://github.com/cloudfoundry/otel-collector-release/compare/v0.6.1...v0.6.2 v0.6.1 ## What's Changed * Move config.yaml and update scripting by @oppegard in https://github.com/cloudfoundry/otel-collector-release/pull/37 * chore: Bump to Go1.22 by @aqstack in https://github.com/cloudfoundry/otel-collector-release/pull/38 ## New Contributors * @oppegard made their first contribution in https://github.com/cloudfoundry/otel-collector-release/pull/37 * @aqstack made their first contribution in https://github.com/cloudfoundry/otel-collector-release/pull/38 Full Changelog: https://github.com/cloudfoundry/otel-collector-release/compare/v0.6.0...v0.6.1
routing	0.304.0	v0.304.0 ## 0.304.0 Release Date: August 13, 2024 ## Changes - Addresses issues with routing-api DB migration logic to fix the following bugs: - 🐛 Failed DB migrations would not re-run without manual intervention in the database - 🐛 DB migrations could run prior to the active routing-api server receiving code updates - 🐛 Failed DB migrations did not result in BOSH deployment failures - 🐛Works around an issue with Gorm + the V6 schema changes for TLS TCP Routing that did not always get applied properly. ## ✨ Built with go 1.22.6 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.303.0...v0.304.0 ## Resources - [Download release 0.304.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.304.0). v0.303.0 ## 0.303.0 Release Date: August 09, 2024 ## Changes * add additional unsafe params by @pnikonowicz in https://github.com/cloudfoundry/routing-release/pull/431 ## Bosh Job Spec changes: ```diff diff --git a/jobs/route_registrar/spec b/jobs/route_registrar/spec index de81a0e8..feafaf10 100644 --- a/jobs/route_registrar/spec +++ b/jobs/route_registrar/spec @@ -132,10 +132,16 @@ properties: name (required, string): Human-readable reference for the healthcheck script_path (required, string): Path to script that will be run periodically to determine service health + unrestricted_volumes (optional, array of unrestricted_volumes): Additional directories to be mounted in the bpm config for the route_registrar job. + privileged: (optional, boolean): Sets bpm privileged flag. defaults to false timeout (optional, string): The healthcheck script must exit within this timeout, otherwise the script is terminated with `SIGKILL` and the route is unregistered. Value is a string (e.g. "10s") and must parse to a positive time duration i.e. "-5s" is not permitted. Must be less than the value of `registration_interval`. Default: Half of the value of `registration_interval` + unrestricted_volume object + path (required, string): the path to be mounted + writable (optional, boolean): sets the writable flag. defaults to false + options object lb_algo (optional, string): Load balancing algorithm for routing incoming requests to the backend: 'round-robin' or 'least-connection'. In cases where this option is not specified, the algorithm defined in gorouter spec is applied. ``` ## ✨ Built with go 1.22.6 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.302.0...v0.303.0 v0.302.0 ## 0.302.0 Release Date: August 08, 2024 ## Changes - ✨Adds drain_wait + load_balancer_healthy_threshold properties behaving similarly to gorouter's to provide better uptime during BOSH deployments by waiting for LBs to pull nodes about to be shut down out of service, and re-add them before moving on to the next. - ✨Adds support for TLS backends with TCP routes. This enables TCP routes to use the envoy proxy settings on app containers used by HTTP routes, providing guaranteed TLS encryption between tcp-router + diego-cell VMs, without intervention from app teams. Additionally it allows for the disabling of the unproxied ports on containers since TCP route traffic can now go through envoy. - 🐛Fixed a bug with v0.301.0 that caused problems with TCP routes when a postgres database was used for the routing-api. Thanks for [finding this](https://github.com/cloudfoundry/routing-api/issues/57) @schmidtsv! - Bumped to golang 1.22.5 - Bumped tcp_router's haproxy to 2.8.10 - Testing + docs improvements ## Bosh Job Spec changes: ```diff diff --git a/jobs/tcp_router/spec b/jobs/tcp_router/spec index 44fbb41a..aa6b764c 100644 --- a/jobs/tcp_router/spec +++ b/jobs/tcp_router/spec @@ -10,10 +10,16 @@ templates: routing_api_client_certificate.crt.erb: config/certs/routing-api/client.crt routing_api_client_private.key.erb: config/keys/routing-api/client.key routing_api_ca_certificate.crt.erb: config/certs/routing-api/ca_cert.crt + tcp_router_backend_client_cert_and_key.pem.erb: config/keys/tcp-router/backend/client_cert_and_key.pem + tcp_router_backend_ca.crt.erb: config/certs/tcp-router/backend/ca.crt tcp_router_health_check_certificate.pem.erb: config/certs/health.pem + # config/haproxy.conf is used for initial haproxy config when starting up haproxy.conf.erb: config/haproxy.conf - haproxy.conf.template.erb: config/haproxy.conf.template + # config/haproxy.conf.template is rendered by tcp-router when routes are provided + haproxy.conf.template.erb: config/haproxy.conf.template bpm.yml.erb: config/bpm.yml + drain.erb: bin/drain + post-start.erb: bin/post-start packages: - routing_utils @@ -46,6 +52,18 @@ properties: default: "1m" tcp_router.oauth_secret: description: "OAuth client secret used to obtain token for Routing API from UAA." + tcp_router.backend_tls.enabled: + description: \| + Turns on support for TLS for TCP Router. Requires tcp_router.backend_tls.ca_cert to + be set. For mTLS also set tcp_router.backend_tls.client_cert and + tcp_router.backend_tls.client_key. + default: false + tcp_router.backend_tls.client_cert: + description: "TCP Router's TLS client cert used for mTLS with route backends" + tcp_router.backend_tls.client_key: + description: "TCP Router's TLS client private key used for mTLS with route backends" + tcp_router.backend_tls.ca_cert: + description: "TCP Router's TLS CA used with route backends" routing_api.uri: description: "URL where the routing API can be reached internally" @@ -86,6 +104,19 @@ properties: description: "Fail the tcp router if routing_api.reserved_system_component_ports conflict with ports in existing router groups." default: "false" + tcp_router.drain_wait: + description: \| + Delay in seconds after shut down is initiated before haproxy stops listening. + During this time haproxy will reject requests to the /health endpoint. + This accommodates requests forwarded by a load balancer until it considers the tcp_router unhealthy. + default: 20 + tcp_router.load_balancer_healthy_threshold: + description: \| + Time period in seconds to wait until declaring the tcp_router instance + started after starting the listener socket. This allows an external load + balancer time to register the instance as healthy." + default: 20 + uaa.token_endpoint: description: "UAA token endpoint host name. Do not include a scheme in this value; TCP Router will always use TLS to connect to UAA." default: uaa.service.cf.internal ``` ## ✨ Built with go 1.22.6 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.301.0...v0.302.0 ## Resources - [Download release 0.302.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.302.0).
silk	3.47.0
smb-volume	3.1.74
smoke-tests	4.10.0
syslog	12.3.1	v12.3.1 ## What's Changed * Bump packaged Golang to go1.22.5 Full Changelog: https://github.com/cloudfoundry/syslog-release/compare/v12.3.0...v12.3.1
tanzu-jammy-stack	1.0.1

6.0.6

Release Date: 07/29/2024

Caution This release is affected by a known issue for customers who use both Postgres for the TAS for VMs database and TCP Routes. Users who use both Postgres and TCP Routes should not upgrade to this version. This only applies if Postgres is used for the core Cloud Foundry databases, not if apps use Postgres services.

[Bug Fix] Resolves a rare issue leading to pre-start script failures in the garden-cni + vxlan-policy-agent jobs on diego-cells
[Bug Fix] Adds 2 minute caching for failed dns lookups in syslog agent to avoid dns load for malformed drain urls.
[Feature] Adds PrometheusRemoteWrite exporter and batch processor.
Bump bpm to version 1.2.23
Bump cf-networking to version 3.47.0
Bump cflinuxfs4 to version 1.107.0
Bump cf-cli to version 1.65.0
Bump loggregator-agent to version 8.1.3
Bump nfs-volume to version 7.1.75
Bump otel-collector to version 0.6.0
Bump silk to version 3.47.0
Bump smb-volume to version 3.1.74

Component	Version	Release Notes
ubuntu-jammy stemcell	1.486
bpm	1.2.23
cf-networking	3.47.0	v3.47.0 ## 3.47.0 Release Date: July 19, 2024 ## Changes - 🐛Fixed a bug in the pre-start script of garden-cni that deleted the iptables.lock file + directory unnecessarily, causing issues with the vxlan-policy-agent pre-start script - Refactored polling logic in policy-server - Bump to go 1.22.5 ## ✨ Built with go 1.22.5 Full Changelog: https://github.com/cloudfoundry/cf-networking-release/compare/v3.46.0...v3.47.0 ## Resources - [Download release 3.47.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.47.0).
cflinuxfs3	0.390.0
cflinuxfs4	1.107.0	v1.107.0 This release ships with cflinuxfs4 version 1.107.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.107.0) v1.106.0 This release ships with cflinuxfs4 version 1.106.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.106.0) v1.105.0 This release ships with cflinuxfs4 version 1.105.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.105.0) v1.104.0 This release ships with cflinuxfs4 version 1.104.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.104.0)
cf-cli	1.65.0	v1.65.0 ### Included CF CLI versions: 7.7.11 8.7.11
count-cores-indicator	2.0.0
diego	2.100.0
garden-runc	1.53.0
loggregator-agent	8.1.3	v8.1.3 ## What's Changed * Cache failed dns lookups for 120 seconds which reduced load on DNS system when invalid drains are present by @acosta11 in https://github.com/cloudfoundry/loggregator-agent-release/pull/596 Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.1.2...v8.1.3 v8.1.2 ## What's Changed * Bump dependencies * Bump packaged Golang to go1.21.12 Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.1.1...v8.1.2
mapfs	1.2.79
nfs-volume	7.1.75	v7.1.75 ## Changes ## Dependencies * nfsv3driver: Updated to v`44424a7`. For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver).
otel-collector	0.6.0	v0.6.0 ## What's Changed * Expose wider collector configuration by @acrmp in https://github.com/cloudfoundry/otel-collector-release/pull/31. This allows for configuring processors, pipelines & exporters which provides a lot more flexibility to platform engineers. * Add PrometheusRemoteWrite Exporter by @benjaminguttmann-avtq in https://github.com/cloudfoundry/otel-collector-release/pull/26 * Add batch processor by @acrmp in https://github.com/cloudfoundry/otel-collector-release/pull/32 * Bump go.opentelemetry.io/collector/cmd/builder from 0.103.0 to 0.104.0 in /src/otel-collector-builder by @dependabot in https://github.com/cloudfoundry/otel-collector-release/pull/30 ## New Contributors * @benjaminguttmann-avtq made their first contribution in https://github.com/cloudfoundry/otel-collector-release/pull/26 Full Changelog: https://github.com/cloudfoundry/otel-collector-release/compare/v0.5.0...v0.6.0
routing	0.301.0
silk	3.47.0	v3.47.0 ## 3.47.0 Release Date: July 19, 2024 ## Changes - 🐛 Fixed a race condition in the pre-start script of vxlan-policy-agent that would cause failures if the iptables.lock file's directory was deleted by another process while the pre-start was obtaining a lock. - Updated go-loggregator usage to v9 - Refactored polling logic of vxlan-policy-agent and silk-daemon - Bump to go 1.22.5 ## ✨ Built with go 1.22.5 Full Changelog: https://github.com/cloudfoundry/silk-release/compare/v3.46.0...v3.47.0 ## Resources - [Download release 3.47.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.47.0).
smb-volume	3.1.74	v3.1.74 ## Changes * Golang: Updated to v1.22.5 (#428)
smoke-tests	4.10.0
syslog	12.3.0
tanzu-jammy-stack	1.0.1

6.0.5

Release Date: 07/08/2024

[Bug Fix] Route Registrar only sends 5 unregistration messages in a row when a route becomes unhealthy. This prevents Gorouter’s logs from filling up with unnecessary, repetitive log messages.
Bump bpm to version 1.2.22
Bump cflinuxfs3 to version 0.390.0
Bump cflinuxfs4 to version 1.103.0
Bump cf-cli to version 1.64.0
Bump diego to version 2.100.0
Bump mapfs to version 1.2.79
Bump nfs-volume to version 7.1.74
Bump otel-collector to version 0.5.0
Bump routing to version 0.301.0
Bump smb-volume to version 3.1.73
Bump syslog to version 12.3.0

Component	Version	Release Notes
ubuntu-jammy stemcell	1.486
bpm	1.2.22
cf-networking	3.46.0
cflinuxfs3	0.390.0	v0.390.0 This release ships with cflinuxfs3 version 0.390.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.390.0) v0.389.0 This release ships with cflinuxfs3 version 0.389.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.389.0) v0.388.0 This release ships with cflinuxfs3 version 0.388.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.388.0)
cflinuxfs4	1.103.0	v1.103.0 This release ships with cflinuxfs4 version 1.103.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.103.0) v1.102.0 This release ships with cflinuxfs4 version 1.102.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.102.0) v1.101.0 This release ships with cflinuxfs4 version 1.101.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.101.0) v1.100.0 This release ships with cflinuxfs4 version 1.100.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.100.0) v1.99.0 This release ships with cflinuxfs4 version 1.99.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.99.0) v1.98.0 This release ships with cflinuxfs4 version 1.98.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.98.0) v1.97.0 This release ships with cflinuxfs4 version 1.97.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.97.0) v1.96.0 This release ships with cflinuxfs4 version 1.96.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.96.0) v1.95.0 This release ships with cflinuxfs4 version 1.95.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.95.0) v1.94.0 This release ships with cflinuxfs4 version 1.94.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.94.0) v1.93.0 This release ships with cflinuxfs4 version 1.93.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.93.0) v1.92.0 This release ships with cflinuxfs4 version 1.92.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.92.0)
cf-cli	1.64.0	v1.64.0 ### Included CF CLI versions: 7.7.10 8.7.10
count-cores-indicator	2.0.0
diego	2.100.0	v2.100.0 ## Changes - Bumped loggregator usage to loggregator v9 - Thanks @Birdrock! - Bumped cfhttp usage to cfhttp v2 - Thanks @jrussett ! - Bumped go dependency bumps ## ✨ Built with go 1.22.3 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.99.0...v2.100.0 ## Resources - [Download release 2.100.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.100.0).
garden-runc	1.53.0
loggregator-agent	8.1.1
mapfs	1.2.79	v1.2.79 ## Changes * Add final release 1.2.72 [ci skip] * Golang: Updated to v1.22.4 (#269) * bump mapfs ## Dependencies * v2: Updated to v2.19.0. For more information, see [v2](https://github.com/onsi/ginkgo). * mapfs: Updated to v`756bafb`. For more information, see [mapfs](https://github.com/cloudfoundry/mapfs). v1.2.72 ## Changes * Add final release 1.2.71 [ci skip] * Bump mapfs (#263) ## Dependencies * mapfs: Updated to v`ac01341`. For more information, see [mapfs](https://github.com/cloudfoundry/mapfs).
nfs-volume	7.1.74	v7.1.74 ## Changes * Golang: Updated to v1.22.4 (#963) v7.1.73 ## Changes * Add final release 7.1.72 [ci skip] * Use cf create\|update-service-broker to register the service (#972) * Bump openssl- from 3.3.0 to 3.3.1 (https://github.com/cloudfoundry/nfs-volume-release/pull/959) * Golang: Updated to v1.22.4 (https://github.com/cloudfoundry/nfs-volume-release/pull/962) v7.1.72 ## Changes * Add final release 7.1.71 [ci skip] * Bump openssl- from 3.3.0 to 3.3.1 (#959) * Golang: Updated to v1.22.4 (#962) v7.1.71 ## Changes ## Dependencies * nfsbroker: Updated to v`b8a1e4c`. For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). v7.1.68 ## Changes * Add final release 7.1.66 [ci skip] * Bump submodules (#938) ## Dependencies * nfsbroker: Updated to v`e1d14e4`. For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker).
otel-collector	0.5.0	v0.5.0 ## What's Changed * Bump otel-collector to v0.103.0 in https://github.com/cloudfoundry/otel-collector-release/pull/28. * If you have configured exporters to use persistent queues note that [re-enqueuing of failed batches has been removed](https://github.com/open-telemetry/opentelemetry-collector/releases/tag/v0.92.0). * Bump to [go1.21.11](https://groups.google.com/g/golang-announce/c/XbxouI9gY7k/m/TuoGEhxIEwAJ). Full Changelog: https://github.com/cloudfoundry/otel-collector-release/compare/v0.4.1...v0.5.0
routing	0.301.0	v0.301.0 ## Changes - 🐛Fixes a bug introduced in [v0.298.0](https://github.com/cloudfoundry/routing-release/releases/tag/v0.298.0) where the `X-Forwarded-Host` header was incorrectly set for requests containing an `Expect: 100-continue` header. Thanks @maxmoehl ! ## ✨ Built with go 1.22.4 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.300.0...v0.301.0 ## Resources - [Download release 0.301.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.301.0). v0.300.0 ## Changes - Update route registrar to only send 5 unregistration messages for an unhealthy route - https://github.com/cloudfoundry/route-registrar/pull/46 . Thanks @andy-a-d-nguyen for your first contribution to CF! ## ✨ Built with go 1.22.4 ## Resources - [Download release 0.300.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.300.0). Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.299.0...v0.300.0 v0.299.0 ## Changes - Bumped to Golang 1.22.4 - Added ability to enforce strict validation of route service signature. Thanks @maxmoehl, @b1tamara and @plowin ! ## Bosh Job Spec changes: ```diff diff --git a/jobs/gorouter/spec b/jobs/gorouter/spec index 8269440b..60c7b520 100644 --- a/jobs/gorouter/spec +++ b/jobs/gorouter/spec @@ -262,6 +262,9 @@ properties: router.route_services_timeout: description: "Expiry time of a route service signature in seconds" default: 60 + router.route_services_strict_signature_validation: + description: "Enforce strict validation of a route service signature" + default: false router.max_header_kb: description: \| This value controls the maximum number of bytes (in KB) the gorouter will read ``` ## ✨ Built with go 1.22.4 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.298.0...v0.299.0 ## Resources - [Download release 0.299.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.299.0).
silk	3.46.0
smb-volume	3.1.73	v3.1.73 ## Changes ## Dependencies * smbdriver: Updated to v`9ec4dc3`. For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver). v3.1.72 ## Changes * Bump smbdriver (#414) * Golang: Updated to v1.22.4 (#422) * Use cf create\|update-service-broker to register the service (#424) ## Dependencies * v2: Updated to v2.19.0. For more information, see [v2](https://github.com/onsi/ginkgo). * smbdriver: Updated to v`4b6cce2`. For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver). v3.1.69 ## Changes * Add final release 3.1.68 [ci skip] ## Dependencies * smbbroker: Updated to v`da19354`. For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * smbdriver: Updated to v`6a0de14`. For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver).
smoke-tests	4.10.0
syslog	12.3.0	v12.3.0 ## What's Changed ### Features * Use service command to restart rsyslog, enabling BOSH Lite deployment by @ohkyle in https://github.com/cloudfoundry/syslog-release/pull/178 ### Maintenance * Bump blackbox dependencies * Bump packaged Golang to go1.21.11 ## New Contributors * @ohkyle made their first contribution in https://github.com/cloudfoundry/syslog-release/pull/178 Full Changelog: https://github.com/cloudfoundry/syslog-release/compare/v12.2.5...v12.3.0
tanzu-jammy-stack	1.0.1

6.0.4

Release Date: 05/29/2024

[Bug Fix] Remove replication-canary
[Bug fix] Automatically restart Route Emitter after multiple failed attempts to greet Gorouter. This fixes a rare bug that prevented Route Emitter from being able to register routes.
Bump bpm to version 1.2.19
Bump cflinuxfs4 to version 1.91.0
Bump diego to version 2.99.0
Bump garden-runc to version 1.53.0
Bump mapfs to version 1.2.70
Bump nfs-volume to version 7.1.66
Bump routing to version 0.298.0
Bump smb-volume to version 3.1.68

Component	Version	Release Notes
ubuntu-jammy stemcell	1.445
bpm	1.2.19
cf-networking	3.46.0
cflinuxfs3	0.387.0
cflinuxfs4	1.91.0	v1.91.0 This release ships with cflinuxfs4 version 1.91.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.91.0) v1.90.0 This release ships with cflinuxfs4 version 1.90.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.90.0) v1.89.0 This release ships with cflinuxfs4 version 1.89.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.89.0) v1.88.0 This release ships with cflinuxfs4 version 1.88.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.88.0) v1.87.0 This release ships with cflinuxfs4 version 1.87.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.87.0) v1.86.0 This release ships with cflinuxfs4 version 1.86.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.86.0) v1.85.0 This release ships with cflinuxfs4 version 1.85.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.85.0) v1.84.0 This release ships with cflinuxfs4 version 1.84.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.84.0) v1.83.0 This release ships with cflinuxfs4 version 1.83.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.83.0)
cf-cli	1.60.0
count-cores-indicator	2.0.0
diego	2.99.0	v2.99.0 ## Changes - Do not remove evacuating actual LRP during cleanup ([rep#53](https://github.com/cloudfoundry/rep/pull/53)) - Add additional retries when apps make use of credhub for credentials. ([buildpackapplifecycle#71](https://github.com/cloudfoundry/buildpackapplifecycle/pull/71)) - Prevent panics in BBS by checking for all types of errors ([bbs#95](https://github.com/cloudfoundry/bbs/pull/95)) - Add retry logic and more explicit failure in router emitter start-up ([router-emitter#34](https://github.com/cloudfoundry/route-emitter/pull/34)) - Bump envoy blob version to `1.28.3` - Go mod dependency bumps ## ✨ Built with go 1.22.3 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.98.0...v2.99.0 ## Resources - [Download release 2.99.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.99.0).
garden-runc	1.53.0	v1.53.0 ## Changes - DEPRECATION NOTICE The `garden.experimental_use_containerd_mode_for_processes` property and usage of Garden when run in containerd mode for processes is now deprecated and no longer tested. - DEFAULT CHANGE - The default mode for garden containers is now containerd. This has been the default in cf-deployment since 2018. - REMOVAL OF EXPERIMENTAL FUNCTIONALITY NOTICE The experimental option to run the garden server process in rootless mode has been removed, as it did not work as expected and was an abandoned feature. - Go package dependency bumps ## Bosh Job Spec changes: ```diff diff --git a/jobs/garden-binaries/spec b/jobs/garden-binaries/spec index 0433639a..a8a96bae 100644 --- a/jobs/garden-binaries/spec +++ b/jobs/garden-binaries/spec @@ -15,7 +15,6 @@ packages: - grootfs - xfs-progs - thresholder - - netplugin-shim - dontpanic - tini diff --git a/jobs/garden/spec b/jobs/garden/spec index 027df351..093e53e1 100644 --- a/jobs/garden/spec +++ b/jobs/garden/spec @@ -36,7 +36,6 @@ packages: - grootfs - xfs-progs - thresholder - - netplugin-shim - dontpanic - tini @@ -199,10 +198,6 @@ properties: description: AppArmor profile to use for unprivileged container processes default: garden-default - garden.experimental_rootless_mode: - description: A boolean stating whether or not to run garden-server as a non-root user - default: false - # We believe this defaults to false to help concourse: https://github.com/cloudfoundry/garden-runc-release/releases/tag/v1.5.0 # For diego/cf, this should be set to true garden.cleanup_process_dirs_on_wait: @@ -210,8 +205,8 @@ properties: default: false garden.containerd_mode: - description: "Use containerd for container lifecycle management. NOTE: cannot be used in combination with bpm or rootless" - default: false + description: "Use containerd for container lifecycle management. NOTE: cannot be used in combination with bpm" + default: true garden.tcp_keepalive_time: description: Sets the `net.ipv4.tcp_keepalive_time` kernel parameter in containers. If not specified, the value from the linux init_net namespace is used. @@ -229,7 +224,7 @@ properties: description: Sets the `net.ipv4.tcp_retries2` kernel parameter in containers. If not specified, the value from the linux init_net namespace is used. garden.experimental_use_containerd_mode_for_processes: - description: "(Under development) Use containerd for container process management. Must be used with containerd_mode also set to true. NOTE: cannot be used in combination with bpm or rootless" + description: "(Deprecated) No longer used/tested." default: false garden.experimental_cpu_throttling: diff --git a/jobs/gats/spec b/jobs/gats/spec index 916a35eb..065e3ace 100644 --- a/jobs/gats/spec +++ b/jobs/gats/spec @@ -22,12 +22,6 @@ properties: garden_test_rootfs: description: Test rootfs to use default: 'docker:///cloudfoundry/garden-rootfs' - containerd_for_processes: - description: Run GATS with CONTAINERD_FOR_PROCESSES_ENABLED - default: false - rootless: - description: Run GATS with ROOTLESS env var - default: false cpu_throttling: description: Run GATS with CPU_THROTTLING_ENABLED default: false ``` ## ✨ Built with go 1.22.3 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.52.0...v1.53.0 ## Resources - [Download release 1.53.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.53.0).
loggregator-agent	8.1.1
mapfs	1.2.70	v1.2.70 ## Changes * Golang: Updated to v1.22.3. (#259) ## Dependencies * v2: Updated to v2.17.3. For more information, see [v2](https://github.com/onsi/ginkgo). * mapfs: Updated to v`0de16f2`. For more information, see [mapfs](https://github.com/cloudfoundry/mapfs). v1.2.69 ## Dependencies * v2: Updated to v2.17.2. For more information, see [v2](https://github.com/onsi/ginkgo). * gomega: Updated to v1.33.1. For more information, see [gomega](https://github.com/onsi/gomega). * mapfs: Updated to v`7f382bc`. For more information, see [mapfs](https://github.com/cloudfoundry/mapfs).
nfs-volume	7.1.66	v7.1.66 ## Dependencies * v2: Updated to v2.17.3. For more information, see [v2](https://github.com/onsi/ginkgo). * nfsbroker: Updated to v`90964d1`. For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). * nfsv3driver: Updated to v`4d13326`. For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver). v7.1.65 ## Changes * Golang: Updated to v1.22.3 (#920) * Bump util-linux from 2.40 to 2.40.1 (#922) * Change nfsv3driver statd default port to `41793` (non-ephemeral) (#909) * Use newest cf-cli available (#913) ## Dependencies * nfsbroker: Updated to v`071d3d8`. For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). * nfsv3driver: Updated to v`49ad37b`. For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver). v7.1.64 ## Dependencies * gomega: Updated to v1.33.1. For more information, see [gomega](https://github.com/onsi/gomega). * nfsbroker: Updated to v`33b1b44`. For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). * nfsv3driver: Updated to v`2e98b36`. For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver).
otel-collector	0.4.1
routing	0.298.0	v0.298.0 ## Changes - :bug: Improve support for requests using the Expect: 100-continue header. - :bug: The missing_content_length_header metric introduced in 0.297.0 has been renamed to empty_content_length_header for more accuracy. Thanks @peanball! - :bug: The empty_content_length_header was fixed to more accurately capture events when the content-length header of a request was empty. Previously extra request types were being included erroneously. ## Bosh Job Spec changes: ```diff diff --git a/jobs/gorouter/spec b/jobs/gorouter/spec index 712a761f..8269440b 100644 --- a/jobs/gorouter/spec +++ b/jobs/gorouter/spec @@ -306,6 +306,9 @@ properties: router.keep_alive_probe_interval: default: 1s description: Interval between TCP keep alive probes. Value is a string (e.g. "10s") + router.keep_alive_100_continue_requests: + description: "If set gorouter reuses backend connection for requests expecting 100-Continue" + default: false router.force_forwarded_proto_https: description: "Enables setting X-Forwarded-Proto header if SSL termination happened upstream and incorrectly set the header value. When this property is set to true gorouter sets the header X-Forwarded-Proto to https. When this value set to false, gorouter set the header X-Forwarded-Proto to the protocol of the incoming request" default: false ``` ## ✨ Built with go 1.22.3 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.297.0...v0.298.0 ## Resources - [Download release 0.298.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.298.0). v0.297.0 ## Changes - 🐛FIXES KNOWN ISSUE Gorouter now correctly returns the status code provided by backends for workflows using 100-continue, or other 1xx interim status codes. Thanks for catching this @plowin @domdom82 and thanks @geofffranks for the quick fix! - 🐛The TLS listener for the health status endpoint in gorouter now handles custom cipher-suites that do not include any of the required HTTP/2 ciphers. Thanks @MarcPaquette + @geofffranks! - 🐛 Failing to establish a TCP connection to a backend no longer causes a panic when setting up a WebSocket connection. Thanks @domdom82! - ✨The health status endpoint for gorouter is now able to log error messages encountered when it starts up, to aid in troubleshooting. Thanks @MarcPaquette and @geofffranks ! - ✨Gorouter now provides a `missing_content_length_header` metric that will flag requests that would have been hit by Golang 1.22's new check to reject requests that have an empty content-length header. This can be used to determine if an environment will be affected by disabling the `go.httplaxcontentlength` gorouter property. Thanks @mariash! - NOTE: The metric is counting requests unaffected by the new golang behavior and will be updated in 0.298.0+, where it is also renamed to `empty_content_length_header`. - ✨Route registrar now allows operators to specify load blancing algorithms for individual routes. Thanks @b1tamara and @domdom82 ! - Bumped to golang 1.22.3 ## Bosh Job Spec changes: ```diff diff --git a/jobs/route_registrar/spec b/jobs/route_registrar/spec index c51dbb9f..de81a0e8 100644 --- a/jobs/route_registrar/spec +++ b/jobs/route_registrar/spec @@ -125,7 +125,8 @@ properties: with error, the route is unregistered. router_group (required, string, for tcp routes): Name of the router group to which the TCP route should be added. external_port (required, string, for tcp routes): Port that the TCP router will listen on. - server_cert_domain_name_modifier (optional, string, for sni routes): a regex replace to help with complicated hostnames + server_cert_domain_name_modifier (optional, string, for sni routes): a regex replace to help with complicated hostnames. + options (optional, object, for http routes): Custom per-route options health_check object name (required, string): Human-readable reference for the healthcheck @@ -135,6 +136,9 @@ properties: the script is terminated with `SIGKILL` and the route is unregistered. Value is a string (e.g. "10s") and must parse to a positive time duration i.e. "-5s" is not permitted. Must be less than the value of `registration_interval`. Default: Half of the value of `registration_interval` + options object + lb_algo (optional, string): Load balancing algorithm for routing incoming requests to the backend: 'round-robin' or 'least-connection'. In cases where this option is not specified, the algorithm defined in gorouter spec is applied. + example: \| - name: my-service uris: @@ -150,6 +154,8 @@ properties: script_path: /path/to/script timeout: 5s route_service_url: https://my-oauth-proxy-route-service.example.com + options: + lb_algo: least-connection - name: my-tls-endpoint tls_port: 12346 server_cert_domain_san: "my-tls-endpoint.internal.com" ``` ## ✨ Built with go 1.22.3 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.296.0...v0.297.0 ## Resources - [Download release 0.297.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.297.0).
silk	3.46.0
smb-volume	3.1.68	v3.1.68 ## Changes * Golang: Updated to v1.22.3 (#408) ## Dependencies * v2: Updated to v2.17.3. For more information, see [v2](https://github.com/onsi/ginkgo). * smbbroker: Updated to v`17a844f`. For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * smbdriver: Updated to v`9ccf77c`. For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver). v3.1.67 ## Changes * Use newest cf-cli available (#405) ## Dependencies * v2: Updated to v2.17.2. For more information, see [v2](https://github.com/onsi/ginkgo). * gomega: Updated to v1.33.1. For more information, see [gomega](https://github.com/onsi/gomega). * smbbroker: Updated to v`490615c`. For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * smbdriver: Updated to v`fa2b5d0`. For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver).
smoke-tests	4.10.0
syslog	12.2.5
tanzu-jammy-stack	1.0.1

6.0.3

Release Date: 05/03/2024

Caution This release is susceptible to a known issue where Gorouter returns an incorrect HTTP status code in response to requests with an "HTTP 100 Continue" interim status header. To resolve this issue, see the Broadcom Knowledge Base article Gorouter Returns wrong HTTP response code to client when the request flow uses HTTP 100-continue.

Bump loggregator-agent to version 8.1.1

Component	Version	Release Notes
ubuntu-jammy stemcell	1.423
bpm	1.2.18
cf-networking	3.46.0
cflinuxfs3	0.387.0
cflinuxfs4	1.82.0
cf-cli	1.60.0
count-cores-indicator	2.0.0
diego	2.98.0
garden-runc	1.52.0
loggregator-agent	8.1.1	v8.1.1 ## What's Changed * Bump dependencies * Fix Syslog Binding Cache polling to wait for the entire polling interval between each operation in https://github.com/cloudfoundry/loggregator-agent-release/pull/572 Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.1.0...v8.1.1
mapfs	1.2.68
nfs-volume	7.1.63
otel-collector	0.4.1
routing	0.296.0
silk	3.46.0
smb-volume	3.1.66
smoke-tests	4.10.0
syslog	12.2.5
tanzu-jammy-stack	1.0.1

6.0.2

Release Date: 05/01/2024

Bump cf-networking to version 3.46.0
Bump diego to version 2.98.0
Bump garden-runc to version 1.52.0
Bump loggregator-agent to version 8.1.0
Bump mapfs to version 1.2.68
Bump nfs-volume to version 7.1.63
Bump routing to version 0.296.0
Bump silk to version 3.46.0
Bump smb-volume to version 3.1.66
Bump syslog to version 12.2.5

Component	Version	Release Notes
ubuntu-jammy stemcell	1.423
bpm	1.2.18
cf-networking	3.46.0	v3.46.0 ## Changes - Bump Golang to 1.22 ## Bosh Job Spec changes: ```diff diff --git a/jobs/performance-test-sd/spec b/jobs/performance-test-sd/spec index c89d50f5..0583340e 100644 --- a/jobs/performance-test-sd/spec +++ b/jobs/performance-test-sd/spec @@ -6,7 +6,7 @@ templates: config.json.erb: config.json packages: - - golang-1.21-linux + - golang-1.22-linux - performance-test-sd consumes: ``` ## ✨ Built with go 1.22.2 Full Changelog: https://github.com/cloudfoundry/cf-networking-release/compare/v3.45.0...v3.46.0 ## Resources - [Download release 3.46.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.46.0).
cflinuxfs3	0.387.0
cflinuxfs4	1.82.0
cf-cli	1.60.0
count-cores-indicator	2.0.0
diego	2.98.0	v2.98.0 ## Changes - Update Golang to 1.22 ## Bosh Job Spec changes: ```diff diff --git a/jobs/vizzini/spec b/jobs/vizzini/spec index 7eb920159..d61278357 100644 --- a/jobs/vizzini/spec +++ b/jobs/vizzini/spec @@ -1,7 +1,7 @@ --- name: vizzini packages: - - golang-1.21-linux + - golang-1.22-linux - vizzini templates: ``` ## ✨ Built with go 1.22.2 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.97.0...v2.98.0 ## Resources - [Download release 2.98.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.98.0).
garden-runc	1.52.0	v1.52.0 ## Changes - Bump Golang to 1.22 ## ✨ Built with go 1.22.2 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.51.0...v1.52.0 ## Resources - [Download release 1.52.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.52.0).
loggregator-agent	8.1.0	v8.1.0 ## What's Changed * Replace usages of `grpc.Dial` with `grpc.NewClient` which does not open connections until necessary * Bump dependencies ### Experimental OTel Collector changes * Added `temporary_emit_otel_traces` property to the loggr-forwarder-agent and loggr-forwarder-agent-windows jobs. Setting this property to `true` activates conversion of appropriately tagged http timers to OpenTelemetry traces (it defaults to `false`). See cloudfoundry/gorouter#407. Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.0.3...v8.1.0 v8.0.4 Don't use. It contains the code changes from v8.1.0 but without a semver minor bump to indicate new functionality.
mapfs	1.2.68	v1.2.68 ## Dependencies * gomega: Updated to v1.33.0. For more information, see [gomega](https://github.com/onsi/gomega). * mapfs: Updated to v`3fb73af`. For more information, see [mapfs](https://github.com/cloudfoundry/mapfs). v1.2.67 ## Dependencies * mapfs: Updated to v`b5baec0`. For more information, see [mapfs](https://github.com/cloudfoundry/mapfs).
nfs-volume	7.1.63	v7.1.63 ## Changes * Add final release 7.1.62 [ci skip] ## Dependencies * gomega: Updated to v1.33.0. For more information, see [gomega](https://github.com/onsi/gomega). * nfsbroker: Updated to v`5d71277`. For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). * nfsv3driver: Updated to v`31062e6`. For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver). v7.1.62 ## Changes * Bump sqlite from 3.45.2 to 3.45.3 (#881) ## Dependencies * nfsbroker: Updated to v`680bc33`. For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). * nfsv3driver: Updated to v`279655c`. For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver).
otel-collector	0.4.1
routing	0.296.0	v0.296.0 ## Changes - Pass availability zone in route-registrar for AZ-aware routing of system components - Bump Golang to 1.22 ## Bosh Job Spec changes: ```diff diff --git a/jobs/acceptance_tests/spec b/jobs/acceptance_tests/spec index e1a6a9ae..8122ddaf 100644 --- a/jobs/acceptance_tests/spec +++ b/jobs/acceptance_tests/spec @@ -7,7 +7,7 @@ templates: bpm.yml.erb: config/bpm.yml packages: - - golang-1.21-linux + - golang-1.22-linux - acceptance_tests - rtr - cf-cli-8-linux diff --git a/jobs/smoke_tests/spec b/jobs/smoke_tests/spec index b230192b..02edfd9d 100644 --- a/jobs/smoke_tests/spec +++ b/jobs/smoke_tests/spec @@ -7,7 +7,7 @@ templates: bpm.yml.erb: config/bpm.yml packages: - - golang-1.21-linux + - golang-1.22-linux - acceptance_tests - cf-cli-8-linux ``` ## ✨ Built with go 1.22.2 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.295.0...v0.296.0 ## Resources - [Download release 0.296.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.296.0).
silk	3.46.0	v3.46.0 ## Changes - Bump Golang to 1.22 ## ✨ Built with go 1.22.2 Full Changelog: https://github.com/cloudfoundry/silk-release/compare/v3.45.0...v3.46.0 ## Resources - [Download release 3.46.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.46.0).
smb-volume	3.1.66	v3.1.66 ## Changes * Add final release 3.1.65 [ci skip] ## Dependencies * smbbroker: Updated to v`b2fb57d`. For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * smbdriver: Updated to v`2335f8e`. For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver).
smoke-tests	4.10.0
syslog	12.2.5	v12.2.5 ## What's Changed * Bump dependencies Full Changelog: https://github.com/cloudfoundry/syslog-release/compare/v12.2.4...v12.2.5
tanzu-jammy-stack	1.0.1

6.0.1

Release Date: 04/17/2024

[Feature] Add option to enable concurrent read/writes for HTTP/1
Bump bpm to version 1.2.18
Bump diego to version 2.97.0
Bump loggregator-agent to version 8.0.3
Bump mapfs to version 1.2.66
Bump nfs-volume to version 7.1.61
Bump otel-collector to version 0.4.1
Bump smb-volume to version 3.1.64
Bump smoke-tests to version 4.10.0
Bump syslog to version 12.2.4

Component	Version	Release Notes
ubuntu-jammy stemcell	1.423
bpm	1.2.18
cf-networking	3.45.0
cflinuxfs3	0.387.0
cflinuxfs4	1.82.0
cf-cli	1.60.0
count-cores-indicator	2.0.0
diego	2.97.0	v2.97.0 ## Changes - Adds support for comma-delimited destinations in ASGs - See: https://github.com/cloudfoundry/executor/pull/96 and https://github.com/cloudfoundry/bbs/pull/94 - Bump bosh package blobs - Bumps `jq` to `1.7.1` - Bumps `tar` - Bump go.mod dependencies ## ✨ Built with go 1.21.8 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.96.0...v2.97.0 ## Resources - [Download release 2.97.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.97.0).
garden-runc	1.51.0
loggregator-agent	8.0.3	v8.0.3 ## What's Changed * Bump dependencies * Bump to [go1.21.9](https://groups.google.com/g/golang-announce/c/YgW0sx8mN3M/m/khALNYGdAAAJ) Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.0.2...v8.0.3
mapfs	1.2.66	v1.2.66 ## Dependencies * mapfs: Updated to v`b0b6bfa`. For more information, see [mapfs](https://github.com/cloudfoundry/mapfs). v1.2.65 ## Changes * Golang: Updated to v1.22.2. (#241) ## Dependencies * mapfs: Updated to v`a80b833`. For more information, see [mapfs](https://github.com/cloudfoundry/mapfs). v1.2.64 ## Dependencies * v2: Updated to v2.17.1. For more information, see [v2](https://github.com/onsi/ginkgo). * mapfs: Updated to v`cd8e7e6`. For more information, see [mapfs](https://github.com/cloudfoundry/mapfs).
nfs-volume	7.1.61	v7.1.61 ## Changes * Golang: Updated to v1.22.2 (#860) * Bump openssl- from 3.2.1 to 3.3.0 (#871) ## Dependencies * nfsbroker: Updated to v`1a70719`. For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). * nfsv3driver: Updated to v`35b8c6f`. For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver). v7.1.60 ## Dependencies * nfsbroker: Updated to v`8aec99d`. For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). * nfsv3driver: Updated to v`fb67285`. For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver).
otel-collector	0.4.1	v0.4.1 ## What's Changed * Bump dependencies * Bump to [go1.21.9](https://groups.google.com/g/golang-announce/c/YgW0sx8mN3M/m/khALNYGdAAAJ) Full Changelog: https://github.com/cloudfoundry/otel-collector-release/compare/v0.4.0...v0.4.1
routing	0.295.0
silk	3.45.0
smb-volume	3.1.64	v3.1.64 ## Dependencies * smbbroker: Updated to v`02f340b`. For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * smbdriver: Updated to v`fb88dd0`. For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver). v3.1.63 ## Changes * Golang: Updated to v1.22.2 (#381) ## Dependencies * smbbroker: Updated to v`b380e77`. For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * smbdriver: Updated to v`0c36c10`. For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver). v3.1.62 ## Dependencies * v2: Updated to v2.17.1. For more information, see [v2](https://github.com/onsi/ginkgo). * smbbroker: Updated to v`f176916`. For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * smbdriver: Updated to v`5ee16dc`. For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver).
smoke-tests	4.10.0	4.10.0 Create bosh final release 4.10.0 4.9.5 Create bosh final release 4.9.5 ## What's Changed * Upgrade Golang to 1.22 by @tas-operability-bot in https://github.com/pivotal/smoke-tests/pull/138 Full Changelog: https://github.com/pivotal/smoke-tests/compare/4.9.5...4.9.5
syslog	12.2.4	v12.2.4 ## What's Changed * Bump dependencies * Bump packaged Golang to go1.21.9 Full Changelog: https://github.com/cloudfoundry/syslog-release/compare/v12.2.3...v12.2.4
tanzu-jammy-stack	1.0.1

6.0.0

Release Date: 04/09/2024

[Breaking Change] Change default internal route service port to 7070
[Breaking Change] Replace cpu entitlement counters with cpu_entitlement percentage gauge
[Breaking Change] Remove (deprecated) Metrics Agent and Metrics Discovery Release
[Breaking Change] Gorouter’s deprecated /varz and /healthz endpoints on port 8080 have been removed
[Feature] Add support for NTLM authentication in Gorouter
[Feature] Adds Diego support for Docker workloads using OCI images
[Feature]: Gorouters can be configured to prefer routing to app instances in the same AZ as the router
[Feature] Operators can now turn off non-TLS load balancer health check endpoints for Gorouter and TCP Router via the “Enable HTTP load balancer health checks” properties in the “Networking” tab
[Feature] Gorouter now supports LB Health Checks over TLS on port 8443
[Feature] Expose a custom environment identifier on component logs forwarded via syslog
[Feature Improvement] Make database “encrypt key” setting more intentional, to avoid password-manager autofilling of the field
[Feature Improvement] Reintroduce global log rate limit
[Feature Improvement] Apps using readiness health checks will now see audit.app.process.notready and audit.app.process.ready events reported to cf events
[Feature Improvement] Garden now emits an UnkillableContainers metric to help identify cells that will be unable to redeploy successfully without operator intervention
[Feature Improvement] Adds opt-in support for NTLM + other challenge-response based authentication using Authorization: Negotiate flows by automatically enabling sticky sessions for those requests.
[Feature Improvement] Adds support for Partitioned cookies to allow for sticky sessions in embedded contexts.
[Feature Improvement] OTel Collector marks OTLP Sums as monotonic if they originate from a Loggregator counter
[Feature Improvement] Allow to configure w3c tracing headers in router

Component	Version	Release Notes
ubuntu-jammy stemcell	1.406
bpm	1.2.17
cf-networking	3.45.0	v3.45.0 ## Changes - Go dependency bumps - Added config for staticcheck - Removed references to consul from documentation ## Bosh Job Spec changes: ```diff diff --git a/jobs/policy-server-asg-syncer/spec b/jobs/policy-server-asg-syncer/spec index 748c39a7..4c6c9a4e 100644 --- a/jobs/policy-server-asg-syncer/spec +++ b/jobs/policy-server-asg-syncer/spec @@ -109,7 +109,7 @@ properties: description: "Trusted CA for UAA server." uaa_hostname: - description: "Host name for the UAA server. E.g. the service advertised via Consul DNS. Must match common name in the UAA server cert. Must be listed in `uaa.zones.internal.hostnames`." + description: "Host name for the UAA server. E.g. the service advertised via Bosh DNS. Must match common name in the UAA server cert. Must be listed in `uaa.zones.internal.hostnames`." default: uaa.service.cf.internal uaa_port: diff --git a/jobs/policy-server-internal/spec b/jobs/policy-server-internal/spec index 7095775d..029e723f 100644 --- a/jobs/policy-server-internal/spec +++ b/jobs/policy-server-internal/spec @@ -41,7 +41,7 @@ properties: default: 31946 health_check_timeout_seconds: - description: "Health check timeout for Consul DNS." + description: "Health check timeout" default: 5 internal_listen_port: @@ -52,7 +52,7 @@ properties: description: "Trusted CA certificate that was used to sign the vxlan policy agent's client cert and key." server_cert: - description: "Server certificate for TLS. Must have common name that matches the Consul DNS name of the policy server, eg `policy-server.service.cf.internal`." + description: "Server certificate for TLS. Must have common name that matches the Bosh DNS name of the policy server, eg `policy-server.service.cf.internal`." server_key: description: "Server key for TLS." diff --git a/jobs/policy-server/spec b/jobs/policy-server/spec index 0d9f5157..8e2ccfa8 100644 --- a/jobs/policy-server/spec +++ b/jobs/policy-server/spec @@ -101,7 +101,7 @@ properties: description: "Trusted CA for UAA server." uaa_hostname: - description: "Host name for the UAA server. E.g. the service advertised via Consul DNS. Must match common name in the UAA server cert. Must be listed in `uaa.zones.internal.hostnames`." + description: "Host name for the UAA server. E.g. the service advertised via Bosh DNS. Must match common name in the UAA server cert. Must be listed in `uaa.zones.internal.hostnames`." default: uaa.service.cf.internal uaa_port: ``` ## ✨ Built with go 1.21.8 Full Changelog: https://github.com/cloudfoundry/cf-networking-release/compare/v3.44.0...v3.45.0 ## Resources - [Download release 3.45.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.45.0).
cflinuxfs3	0.387.0
cflinuxfs4	1.82.0
cf-cli	1.60.0
count-cores-indicator	2.0.0
diego	2.96.0	v2.96.0 ## Changes - Bump to golang 1.21.8 - Golang package dependency bumps - Includes moving from docker v20 to docker v26 - Includes moving from pgx v3 to pgx v5 - Remove references to Consul from boshrelease + documentation - Many fixes to remove deprecated code and otherwise fix linter violations. ## ✨ Built with go 1.21.8 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.95.0...v2.96.0 ## Resources - [Download release 2.96.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.96.0).
garden-runc	1.51.0	v1.51.0 ## Changes - Bumped Golang to 1.21.8 - Golang package dependency bumps - Many updates to get codebase passing the staticcheck linker - Updated garden-integration-tests to be a little less flakey ## ✨ Built with go 1.21.8 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.50.0...v1.51.0 ## Resources - [Download release 1.51.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.51.0).
loggregator-agent	8.0.2
mapfs	1.2.63	v1.2.63 ## Dependencies * v2: Updated to v2.17.0. For more information, see [v2](https://github.com/onsi/ginkgo). * mapfs: Updated to v`5381efc`. For more information, see [mapfs](https://github.com/cloudfoundry/mapfs).
nfs-volume	7.1.59	v7.1.59 ## Changes * Bump util-linux from 2.39.3 to 2.40 (#853) ## Dependencies * nfsbroker: Updated to v`7bc7bb0`. For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). * nfsv3driver: Updated to v`15c152b`. For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver). v7.1.58 ## Dependencies * nfsbroker: Updated to v`e850d95`. For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). * nfsv3driver: Updated to v`8af81b5`. For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver).
otel-collector	0.4.0
routing	0.295.0	v0.295.0 ## Changes - Resolves #401 by reverting the removal of the deprecated BuildNameToCertificate() call - Bumps to golang 1.21.9 + golang.org/x/net 0.23.0 to patch CVE-2023-45288 ## ✨ Built with go 1.21.9 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.294.0...v0.295.0 ## Resources - [Download release 0.295.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.295.0). v0.294.0 ⚠️ This release contains a known issue: gorouter will no longer present the most specific certificate match but rather the first certificate that matches. See https://github.com/cloudfoundry/routing-release/issues/401 for details. Upgrading to routing-release 0.295.0 is advised. ⚠️ ## Changes - [Bump haproxy to 2.8.7](https://github.com/cloudfoundry/routing-release/commit/13b39eb5185656c3557c1ab15b5b13752b2ff6d8) - [update templates to not refer to consul](https://github.com/cloudfoundry/routing-release/commit/8216c056b1463bd1d7bf636a749568f70cb924d2) - [Default the routing_api.enabled_api_endpoints to mtls](https://github.com/cloudfoundry/routing-release/commit/2e96c2c932f7f945c3c7c15a768d0affc80de446) - [Update template test for mTLS routing api default](https://github.com/cloudfoundry/routing-release/commit/469d9e0a4eb0ac6015695ba27c6da80576b29801) - [Upgrade cf-cli-8-linux](https://github.com/cloudfoundry/routing-release/commit/b19a25052ed7982c83524ac87d22ed2f316201a2) ## Bosh Job Spec changes: ```diff diff --git a/jobs/routing-api/spec b/jobs/routing-api/spec index 1d7efe3c..2e5cd361 100644 --- a/jobs/routing-api/spec +++ b/jobs/routing-api/spec @@ -95,7 +95,7 @@ properties: routing_api.enabled_api_endpoints: description: "Protocols that the routing api will listen on. Possible values: 'mtls', or 'both' (mTLS + HTTP)" - default: "both" + default: "mtls" routing_api.mtls_port: description: "Port on which Routing API is running, listening with mTLS." default: 3001 ``` ## ✨ Built with go 1.21.8 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.293.0...v0.294.0 ## Resources - [Download release 0.294.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.294.0).
silk	3.45.0	v3.45.0 ## Changes - Fixes to stop using deprecated code in tests (`net.Error.Temporary()`) - Remove consul references from documentation - Fix issues bumping the code.cloudfoundry.org/executor package - Go package bumps ## Bosh Job Spec changes: ```diff diff --git a/jobs/silk-controller/spec b/jobs/silk-controller/spec index a0966a01..cc7529a8 100644 --- a/jobs/silk-controller/spec +++ b/jobs/silk-controller/spec @@ -45,11 +45,11 @@ properties: default: 46455 health_check_port: - description: "Health check port for silk controller. Used by the Consul DNS health check." + description: "Health check port for silk controller. Used by the Bosh DNS health check." default: 19683 health_check_timeout_seconds: - description: "Health check timeout for Consul DNS." + description: "Health check timeout" default: 5 listen_ip: @@ -64,7 +64,7 @@ properties: description: "Trusted CA certificate that was used to sign the silk daemon client cert and key." server_cert: - description: "Server certificate for TLS. Must have common name that matches the Consul DNS name of the silk controller, eg silk-controller.service.cf.internal" + description: "Server certificate for TLS. Must have common name that matches the Bosh DNS name of the silk controller, eg silk-controller.service.cf.internal" server_key: description: "Server key for TLS." diff --git a/jobs/silk-daemon/spec b/jobs/silk-daemon/spec index 7a1525b3..e3786357 100644 --- a/jobs/silk-daemon/spec +++ b/jobs/silk-daemon/spec @@ -70,7 +70,7 @@ properties: default: 3457 silk_controller.hostname: - description: "Host name for the silk controller. E.g. the service advertised via Consul DNS. Must match common name in the silk_controller.server_cert" + description: "Host name for the silk controller. E.g. the service advertised via Bosh DNS. Must match common name in the silk_controller.server_cert" default: "silk-controller.service.cf.internal" silk_controller.listen_port: diff --git a/jobs/vxlan-policy-agent/spec b/jobs/vxlan-policy-agent/spec index 3118022b..802f04bb 100644 --- a/jobs/vxlan-policy-agent/spec +++ b/jobs/vxlan-policy-agent/spec @@ -41,7 +41,7 @@ properties: default: false policy_server.hostname: - description: "Host name for the policy server. E.g. the service advertised via Consul DNS. Must match common name in the policy_server.server_cert" + description: "Host name for the policy server. E.g. the service advertised via Bosh DNS. Must match common name in the policy_server.server_cert" default: "policy-server.service.cf.internal" policy_server.internal_listen_port: ``` ## ✨ Built with go 1.21.8 Full Changelog: https://github.com/cloudfoundry/silk-release/compare/v3.44.0...v3.45.0 ## Resources - [Download release 3.45.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.45.0).
smb-volume	3.1.61	v3.1.61 ## Dependencies * v2: Updated to v2.17.0. For more information, see [v2](https://github.com/onsi/ginkgo). * gomega: Updated to v1.32.0. For more information, see [gomega](https://github.com/onsi/gomega). * smbbroker: Updated to v`bab4864`. For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * smbdriver: Updated to v`7f3242d`. For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver).
smoke-tests	4.8.5
syslog	12.2.3
tanzu-jammy-stack	1.0.1

How to install

To install Isolation Segment v6.0, see Installing Isolation Segment.

To install Isolation Segment v6.0, you must first install Tanzu Operations Manager v6.0. For more information, see the VMware Tanzu Operations Manager documentation.

New features in Isolation Segment v6.0

These are the new features for Isolation Segment v6.0.

Reintroduction of global log rate limit

TAS v3.0 introduced granular app log rate limits for fine-grained control over application log rates.

Isolation Segment v4.0 removed the older global log rate limit feature App log rate limit (deprecated) under App Containers. This was problematic for operators who were performing a jump upgrade to Isolation Segment v4.0 (skipping v3.0), as logs would not be rate limited until application-based log rate limits were applied.

Isolation Segment v6.0 restores the global log rate limit, so that operators can perform upgrades while retaining log rate limits. Operators must configure the same setting separately for both VMware Tanzu Application Service for VMs and TAS for VMs [Windows].

If you had previously set a global log rate limit, this limit is re-applied following the upgrade to Isolation Segment v6.0.

Breaking changes

There are no breaking changes for Isolation Segment v6.0.

Known issues

There are no known issues for Isolation Segment v6.0.