Tanzu Operations Manager v2.10 release notes

This topic contains release notes for VMware Tanzu Operations Manager v2.10.

Tanzu Operations Manager v2.10 is a long-term supported (LTS) version of Tanzu Operations Manager. For more information, see Long-Term Support for Tanzu Operations Manager v2.10 below. Starting with Tanzu Operations Manager v2.10.2, you can jump upgrade directly from previous versions of Tanzu Operations Manager to LTS versions of Tanzu Operations Manager. For more information, see Jump Upgrading to Tanzu Operations Manager v2.10.

For information about the feature highlights of this release, see the VMware Tanzu Blog and New Features in Tanzu Operations Manager v2.10.

Tanzu Operations Manager is certified by the Cloud Foundry Foundation for 2023.

For more information about the Cloud Foundry Certified Provider Program, see How Do I Become a Certified Provider? on the Cloud Foundry website.

Releases

v2.10.75

Release Date: June 20, 2024

[Feature] Customers using SAML with Ops Manager can rotate the internal SAML certificate
[Known Issue Fix] additional_cloud_properties is no longer unintentionally mutated when redacting secrets
[Known Issue Fix] NSX-T Certificate Authentication no longer fails during Apply Changes due to the private key being mutated
[Known Issue Fix] The Certificates page no longer returns a 500 status error when the Tanzu Gemfire tile is installed
[Bug Fix] Products that are marked as LTS-T in Broadcom Support should now appear in the list of available products when Broadcom Support integration is enabled

Component	Version
Tanzu Ops Manager	2.10.75-build.2113*
Stemcell (Bosh Director and Ops Manager)	621.969*
BBR SDK	1.19.22*
BOSH Director	280.1.0*
BOSH DNS	1.36.12
Metrics Server	0.1.22
System Metrics	3.0.7
CredHub	2.12.78*
CredHub Maestro	9.0.22*
Syslog	11.8.18
Windows Syslog	1.3.0
UAA	77.11.0*
BPM	1.2.20*
Networking	9
OS Conf	22.2.1
AWS CPI	104
Azure CPI	49.0.1*
Google CPI	50.0.0*
OpenStack CPI	55
vSphere CPI	97.0.13*
BOSH CLI	7.6.1*
Credhub CLI	2.9.31*
BBR CLI	1.9.66*
Telemetry	1.3.5
Core Consumption	0.3.15
* Components marked with an asterisk have been updated.

v2.10.74

Release Date: May 24, 2024

[Known Issue] Usage of additional_cloud_properties can unintentionally mutate credentials causing Apply Changes to fail.
[Known Issue] Configuring NSX-T with Certificate Authentication on vSphere results in CPI error “The URL https://<VCENTER_URL>/sdk/vimService does not have a valid SSL certificate” causing Apply Changes to fail.
[Bug Fix] The correct rotation procedure is now recommended for Antrea certificates in TKGI
[Bug Fix] Clean up sockets after crash to prevent Support Bundle from failing to generate
[Bug Fix] Fix links for special KB certificate rotation procedures
[Bug Fix] Ensure credentials are scrubbed from the BOSH Director manifest included in the support bundle

Component	Version
Tanzu Ops Manager	2.10.74-build.2070*
Stemcell (Bosh Director and Ops Manager)	621.958*
BBR SDK	1.19.16*
BOSH Director	280.0.23
BOSH DNS	1.36.12
Metrics Server	0.1.22
System Metrics	3.0.7
CredHub	2.12.74*
CredHub Maestro	9.0.20*
Syslog	11.8.18
Windows Syslog	1.3.0*
UAA	77.9.0*
BPM	1.2.19*
Networking	9
OS Conf	22.2.1
AWS CPI	104*
Azure CPI	49.0.0
Google CPI	49.0.18*
OpenStack CPI	55*
vSphere CPI	97.0.12*
BOSH CLI	7.5.7*
Credhub CLI	2.9.30*
BBR CLI	1.9.65*
Telemetry	1.3.5
Core Consumption	0.3.15
* Components marked with an asterisk have been updated.

v2.10.73

Release Date: April 26, 2024

[Known Issue Fix] The Healthwatch and RabbitMQ deployment issue in Tanzu Operations Manager v2.10.72+LTS-T is fixed with the inclusion of BOSH Director 280.0.23.

Component	Version
Tanzu Ops Manager	2.10.73-build.2037*
Stemcell (Bosh Director and Ops Manager)	621.924
BBR SDK	1.19.12*
BOSH Director	280.0.23*
BOSH DNS	1.36.12
Metrics Server	0.1.22
System Metrics	3.0.7
CredHub	2.12.71*
CredHub Maestro	9.0.19*
Syslog	11.8.18
Windows Syslog	1.2.5
UAA	77.5.0
BPM	1.2.18
Networking	9
OS Conf	22.2.1
AWS CPI	103*
Azure CPI	49.0.0
Google CPI	49.0.16
OpenStack CPI	54
vSphere CPI	97.0.10
BOSH CLI	7.5.6
Credhub CLI	2.9.29*
BBR CLI	1.9.64*
Telemetry	1.3.5
Core Consumption	0.3.15
* Components marked with an asterisk have been updated.

v2.10.72 - Withdrawn

Release Date: April 18, 2024

Caution This release has been removed from Broadcom Support because it included an issue in the BOSH Director that causes the Healthwatch and RabbitMQ tiles to fail to deploy with errors like "undefined method shellescape". This release includes a new version of System Metrics, which causes all VMs to redeploy.

[Bug Fix] BlobstoreVerifier on vSphere no longer fails with SocketError due to Tanzu Operations Manager loading before network configuration is applied
[Bug Fix] AZs and networks can be assigned to previously installed tiles without entering Advanced Mode if the tile is adding Jobs for the first time

Component	Version
Tanzu Ops Manager	2.10.72-build.2033*
Stemcell (Bosh Director and Ops Manager)	621.924*
BBR SDK	1.19.11*
BOSH Director	280.0.22*
BOSH DNS	1.36.12
Metrics Server	0.1.22*
System Metrics	3.0.7*
CredHub	2.12.69*
CredHub Maestro	9.0.18*
Syslog	11.8.18*
Windows Syslog	1.2.5*
UAA	77.5.0*
BPM	1.2.18*
Networking	9
OS Conf	22.2.1
AWS CPI	102*
Azure CPI	49.0.0*
Google CPI	49.0.16*
OpenStack CPI	54
vSphere CPI	97.0.10*
BOSH CLI	7.5.6*
Credhub CLI	2.9.28*
BBR CLI	1.9.63*
Telemetry	1.3.5
Core Consumption	0.3.15*
* Components marked with an asterisk have been updated.

v2.10.71

Release Date: March 19, 2024

Caution This release includes a new version of System Metrics, which will cause all VMs to redeploy.

[Bug Fix] The dashboard page provides notice of newer Jammy stemcells when integration with Broadcom Support is enabled
[Bug Fix] The background worker functions correctly when it starts during an upgrade of Tanzu Operations Manager
[Bug Fix] Correctly configure UAA with proxy configuration

Component	Version
Tanzu Ops Manager	2.10.71-build.2005*
Stemcell (Bosh Director and Ops Manager)	621.897*
BBR SDK	1.19.7*
BOSH Director	280.0.20*
BOSH DNS	1.36.12
Metrics Server	0.1.21*
System Metrics	3.0.6*
CredHub	2.12.66*
CredHub Maestro	9.0.17*
Syslog	11.8.17*
Windows Syslog	1.2.4*
UAA	76.31.0
BPM	1.2.17*
Networking	9
OS Conf	22.2.1
AWS CPI	101
Azure CPI	48.0.1*
Google CPI	49.0.14*
OpenStack CPI	54
vSphere CPI	97.0.8*
BOSH CLI	7.5.5*
Credhub CLI	2.9.27*
BBR CLI	1.9.61*
Telemetry	1.3.5*
Core Consumption	0.3.14*
* Components marked with an asterisk have been updated.

v2.10.70

Release Date: February 12, 2024

Caution This release includes a new version of System Metrics, which will cause all VMs to redeploy.

[Known Issue Fix] You can upgrade Tanzu Operations Manager when Telemetry v1.3.4 or v2.1.4 were previously installed
[Bug Fix] Prevent the Apply Changes log page from exhausting database connections
[Bug Fix] Stemcell comparisons are now performed correctly, preventing incorrect “Stemcell out-of-date” messages from being displayed
[Bug Fix] Fix “stemcell.MF: Not found” error when uploading a stemcell created with bosh repack-stemcell
[Bug Fix] Entering an incorrect passphrase during import no longer causes an unrecoverable 500 status error
[Bug Fix] Stemcells not present on disk are not assigned to the BOSH Director tile during upgrade
[Feature] You can configure Tanzu Operations Manager to enable duplicate IP detection in vSphere
[Feature] Improve Tanzu Operations Manager performance in large foundations

Component	Version
Tanzu Ops Manager	2.10.70-build.1953*
Stemcell (Bosh Director and Ops Manager)	621.813*
BBR SDK	1.19.0*
BOSH Director	280.0.15*
BOSH DNS	1.36.12
Metrics Server	0.1.20*
System Metrics	3.0.5*
CredHub	2.12.61*
CredHub Maestro	9.0.16*
Syslog	11.8.16*
Windows Syslog	1.2.3*
UAA	76.31.0
BPM	1.2.16*
Networking	9
OS Conf	22.2.1
AWS CPI	101
Azure CPI	47.0.1
Google CPI	49.0.12*
OpenStack CPI	54
vSphere CPI	97.0.7*
BOSH CLI	7.5.2
Credhub CLI	2.9.25
BBR CLI	1.9.59
Telemetry	1.3.3
Core Consumption	0.3.13*
* Components marked with an asterisk have been updated.

v2.10.69

Release Date: January 24, 2024

Caution This release includes a new version of BOSH DNS, which will cause all VMs to redeploy.

**[Known Issue] Customers that have installed Telemetry 1.3.4 or 2.1.4 are unable to upgrade to Tanzu Operations Manager 2.10.69
[Bug Fix] When upgrading Tanzu Operations Manager, additional HTTP requests during the import process no longer cause the import to fail
[Bug Fix] Restore Tile template validations. The validations were unintentionally deactivated in Tanzu Operations Manager v2.10.59
[Bug Fix] Tiles with instance counts defined as non-configurable no longer keep previously configured instance count values
[Bug Fix] HEAD requests to Tanzu Operations Manager no longer generate errors in the logs

Component	Version
Tanzu Ops Manager	2.10.69-build.1924*
Stemcell (Bosh Director and Ops Manager)	621.793*
BBR SDK	1.18.117*
BOSH Director	280.0.14*
BOSH DNS	1.36.12*
Metrics Server	0.1.19
System Metrics	3.0.4
CredHub	2.12.58*
CredHub Maestro	9.0.15*
Syslog	11.8.15
Windows Syslog	1.2.2
UAA	76.31.0*
BPM	1.2.13*
Networking	9
OS Conf	22.2.1
AWS CPI	101
Azure CPI	47.0.1*
Google CPI	49.0.10*
OpenStack CPI	54
vSphere CPI	97.0.5*
BOSH CLI	7.5.2*
Credhub CLI	2.9.25*
BBR CLI	1.9.59*
Telemetry	1.3.3*
Core Consumption	0.3.12
* Components marked with an asterisk have been updated.

v2.10.68

Release Date: December 21, 2023

[Known Issue Fix] The BOSH stemcell no longer shows as missing after upgrade if you had previously upgraded to the version that is shipped with the new Ops Manager release.

Component	Version
Tanzu Ops Manager	2.10.68-build.1873*
Stemcell (Bosh Director and Ops Manager)	621.782
BBR SDK	1.18.112*
BOSH Director	280.0.12
BOSH DNS	1.36.11
Metrics Server	0.1.19
System Metrics	3.0.4
CredHub	2.12.55
CredHub Maestro	9.0.14
Syslog	11.8.15
Windows Syslog	1.2.2
UAA	76.27.0
BPM	1.2.12
Networking	9
OS Conf	22.2.1
AWS CPI	101
Azure CPI	46.0.0
Google CPI	49.0.9
OpenStack CPI	54
vSphere CPI	97.0.3
BOSH CLI	7.5.1
Credhub CLI	2.9.24
BBR CLI	1.9.56
Telemetry	1.3.4
Core Consumption	0.3.12
* Components marked with an asterisk have been updated.

v2.10.67

Release Date: December 15, 2023

Caution This release includes new versions of BOSH DNS, System Metrics, which will cause all VMs to redeploy.

[Known Issue] If you have already installed stemcell 621.782 before upgrading to Tanzu Operations Manager v2.10.67, the BOSH Director shows “missing stemcell” incorrectly. To resolve this issue, contact Support.
[Known Issue Fix] Background jobs such as the temporary file cleaner and pruning feature run as expected
[Bug Fix] Prevent the Tomcat error page from listing the Tomcat version
[Bug Fix] Increase Puma web server timeouts to improve connection reliability under VM load

Component	Version
Tanzu Ops Manager	2.10.67-build.1850*
Stemcell (Bosh Director and Ops Manager)	621.782*
BBR SDK	1.18.111*
BOSH Director	280.0.12*
BOSH DNS	1.36.11*
Metrics Server	0.1.19*
System Metrics	3.0.4*
CredHub	2.12.55*
CredHub Maestro	9.0.14*
Syslog	11.8.15*
Windows Syslog	1.2.2*
UAA	76.27.0*
BPM	1.2.12*
Networking	9
OS Conf	22.2.1*
AWS CPI	101
Azure CPI	46.0.0
Google CPI	49.0.9*
OpenStack CPI	54
vSphere CPI	97.0.3*
BOSH CLI	7.5.1*
Credhub CLI	2.9.24*
BBR CLI	1.9.56
Telemetry	1.3.4*
Core Consumption	0.3.12*
* Components marked with an asterisk have been updated.

v2.10.66

Release Date: November 29, 2023

Caution This release includes a new version of System Metrics, which will cause all VMs to redeploy.

[Known Issue] Background jobs such as the temporary file cleaner and pruning feature are not being run
[Feature] Replace thin with Puma as the web server used by Ops Manager

Component	Version
Tanzu Operations Manager	2.10.66-build.1814*
Stemcell (Bosh Director and Ops Manager)	621.759*
BBR SDK	1.18.109*
BOSH Director	280.0.10*
BOSH DNS	1.36.10
Metrics Server	0.1.18
System Metrics	3.0.3*
CredHub	2.12.53*
CredHub Maestro	9.0.13*
Syslog	11.8.14
Windows Syslog	1.2.1
UAA	76.26.0*
BPM	1.2.11
Networking	9
OS Conf	22.2.0
AWS CPI	101*
Azure CPI	46.0.0
Google CPI	49.0.8*
OpenStack CPI	54
vSphere CPI	97.0.2
BOSH CLI	7.4.1
Credhub CLI	2.9.23*
BBR CLI	1.9.56*
Telemetry	1.3.3
Core Consumption	0.3.11
* Components marked with an asterisk have been updated.

v2.10.65

Release Date: November 13, 2023

Caution This release includes new versions of BOSH DNS, System Metrics, which will cause all VMs to redeploy.

[Feature] You can configure an environment identifier under the Syslog page for the BOSH Director and certain tiles
[Bug Fix] Downloading core consumption data no longer fails with a 500 status code error

Component	Version
Tanzu Operations Manager	2.10.65-build.1783*
Stemcell (Bosh Director and Ops Manager)	621.730*
BBR SDK	1.18.106*
BOSH Director	280.0.7*
BOSH DNS	1.36.10*
Metrics Server	0.1.18*
System Metrics	3.0.2*
CredHub	2.12.51*
CredHub Maestro	9.0.12
Syslog	11.8.14*
Windows Syslog	1.2.1*
UAA	76.25.0*
BPM	1.2.11*
Networking	9
OS Conf	22.2.0
AWS CPI	100
Azure CPI	46.0.0
Google CPI	49.0.7*
OpenStack CPI	54
vSphere CPI	97.0.2*
BOSH CLI	7.4.1*
Credhub CLI	2.9.22
BBR CLI	1.9.53
Telemetry	1.3.3
Core Consumption	0.3.11*
* Components marked with an asterisk have been updated.

v2.10.64

Release Date: October 23, 2023

[Known Issue Fix] The Healthwatch deployment issue in Tanzu Operations Manager v2.10.63 is fixed with the inclusion of BOSH Director 280.0.6.

Component	Version
Tanzu Operations Manager	2.10.64-build.1762*
Stemcell (Bosh Director and Tanzu Operations Manager)	621.699
BBR SDK	1.18.101
BOSH Director	280.0.6*
BOSH DNS	1.36.8
Metrics Server	0.1.17
System Metrics	3.0.1
CredHub	2.12.49*
CredHub Maestro	9.0.12*
Syslog	11.8.13
Windows Syslog	1.1.19
UAA	76.23.0*
BPM	1.2.9
Networking	9
OS Conf	22.2.0
AWS CPI	100
Azure CPI	46.0.0
Google CPI	49.0.5
OpenStack CPI	54
vSphere CPI	97.0.1
BOSH CLI	7.4.0
Credhub CLI	2.9.22*
BBR CLI	1.9.53*
Telemetry	1.3.3
Core Consumption	0.3.9
* Components marked with an asterisk have been updated.

v2.10.63 - Withdrawn

Release Date: October 18, 2023

Caution This release has been removed from the Broadcom Support portal because it included an issue in the BOSH Director that causes the Healthwatch tile to fail to deploy with errors like "undefined method present?".

Caution This release includes a new version of BOSH DNS, which will cause all VMs to redeploy.

[Known Issue] Healthwatch tile will fail to deploy with errors like “undefined method `present?’”
[Bug Fix] Remove unneeded monit restarts when deploying the BOSH Director

Component	Version
Tanzu Operations Manager	2.10.63-build.1749*
Stemcell (Bosh Director and Tanzu Operations Manager)	621.699
BBR SDK	1.18.101*
BOSH Director	280.0.5*
BOSH DNS	1.36.8*
Metrics Server	0.1.17*
System Metrics	3.0.1
CredHub	2.12.48*
CredHub Maestro	9.0.11
Syslog	11.8.13
Windows Syslog	1.1.19*
UAA	76.22.0*
BPM	1.2.9*
Networking	9
OS Conf	22.2.0
AWS CPI	100
Azure CPI	46.0.0
Google CPI	49.0.5*
OpenStack CPI	54*
vSphere CPI	97.0.1*
BOSH CLI	7.4.0
Credhub CLI	2.9.21
BBR CLI	1.9.51
Telemetry	1.3.3
Core Consumption	0.3.9*
* Components marked with an asterisk have been updated.

v2.10.62

Release Date: September 29, 2023

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Bug Fix] Tiles are unable to use a named manifest in a collection
[Feature] Introduces compatibility with products using tile metadata version 2.10.3.

Component	Version
Tanzu Operations Manager	2.10.62-build.1675*
Stemcell (Bosh Director and Ops Manager)	621.699*
BBR SDK	1.18.96*
BOSH Director	280.0.3*
BOSH DNS	1.36.6
Metrics Server	0.1.16
System Metrics	3.0.1
CredHub	2.12.46*
CredHub Maestro	9.0.11*
Syslog	11.8.13
Windows Syslog	1.1.18
UAA	76.21.0*
BPM	1.2.7
Networking	9
OS Conf	22.2.0
AWS CPI	100*
Azure CPI	46.0.0
Google CPI	49.0.3
OpenStack CPI	53
vSphere CPI	96.0.2
BOSH CLI	7.4.0
Credhub CLI	2.9.21*
BBR CLI	1.9.51*
Telemetry	1.3.3*
Core Consumption	0.3.8
* Components marked with an asterisk have been updated.

v2.10.61

Release Date: September 12, 2023

Caution This release includes new versions of BOSH DNS, System Metrics, which causes all VMs to redeploy.

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Feature] Improve color contrast of Tanzu Operations Manager UI.
[Feature] Add pagination to the Change Log page and improve performance of the installations API endpoint.
[Feature] Compilation VMs now have a default disk size of 64 GB or higher to better accommodate TAS for Windows.
[Feature] Generating a support bundle is now asynchronous. To download a support bundle, click the Generate button on the support bundle page. Then, when generation is complete, click the Download button for the support bundle entry.
[Bug Fix] Temporary files are now cleaned up after a support bundle is created.

Component	Version
Tanzu Operations Manager	2.10.61-build.1615*
Stemcell (Bosh Director and Tanzu Operations Manager)	621.676*
BBR SDK	1.18.91*
BOSH Director	280.0.1*
BOSH DNS	1.36.6*
Metrics Server	0.1.16*
System Metrics	3.0.1*
CredHub	2.12.43*
CredHub Maestro	9.0.10*
Syslog	11.8.13*
Windows Syslog	1.1.18*
UAA	76.20.0*
BPM	1.2.7*
Networking	9
OS Conf	22.2.0*
AWS CPI	99
Azure CPI	46.0.0
Google CPI	49.0.3*
OpenStack CPI	53
vSphere CPI	96.0.2*
BOSH CLI	7.4.0*
Credhub CLI	2.9.19*
BBR CLI	1.9.50*
Telemetry	1.3.2*
Core Consumption	0.3.8*
* Components marked with an asterisk have been updated.

v2.10.60

Release Date: July 27, 2023

Important This release includes new versions of BOSH DNS, System Metrics, which causes all VMs to redeploy.

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Feature] Introduces a bosh recover command that allows users to more quickly recover from IaaS problems. For more information, see the bosh recover documentation.
[Known Issue Fix] Apply Changes no longer fails with “Extracting compiled package archive failed” when using certain versions of tiles.
[Known Issue Fix] The scheduled bosh clean-up task runs successfully again.
[Bug Fix] API docs now load as expected. Javascript issues had previously caused loading problems.

Component	Version
Tanzu Operations Manager	2.10.60-build.1372*
Stemcell (Bosh Director and Tanzu Operations Manager)	621.615*
BBR SDK	1.18.85*
BOSH Director	277.4.3*
BOSH DNS	1.36.3*
Metrics Server	0.1.14*
System Metrics	2.3.3*
CredHub	2.12.37*
CredHub Maestro	9.0.8*
Syslog	11.8.11*
Windows Syslog	1.1.16*
UAA	76.17.0*
BPM	1.2.4*
Networking	9
OS Conf	22.1.3
AWS CPI	99
Azure CPI	46.0.0
Google CPI	49.0.0*
OpenStack CPI	53
vSphere CPI	95*
BOSH CLI	7.3.1*
Credhub CLI	2.9.18*
BBR CLI	1.9.47*
Telemetry	1.2.6*
Core Consumption	0.3.6*
* Components marked with an asterisk have been updated.

v2.10.59

Release Date: June 27, 2023

This release includes new versions of BOSH DNS and System Metrics, which causes all VMs to redeploy.

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Known Issue] Apply Changes can fail with “Extracting compiled package archive failed” when using certain versions of tiles. If you encounter this error, apply your changes a second time.
[Feature] The Tanzu Operations Manager Support Bundle now includes the full contents of /var/log and additional DNS configuration and information about disk space to help when diagnosing issues.
[Feature] The Tanzu Operations Manager Support Bundle now includes BOSH Director logs.
[Feature] Tiles can now be re-uploaded to Tanzu Operations Manager. You can re-upload tiles in cases where the BOSH releases or tile metadata currently on the Tanzu Operations Manager instance are missing or corrupted.
[Feature] You can now nest datastore clusters within folders in vSphere by entering the full path to the datastore cluster. Folder names must be followed by a forward slash character.
[Bug Fix] Downloading the Core Consumption report now takes log rotation into account to ensure that a complete report is always downloaded.
[Bug Fix] UAA is only restarted if there are changes to its configuration. Previously, re-configuring the Tanzu Operations Manager UAA configuration with the same values caused Tanzu Operations Manager to restart UAA.

Component	Version
Tanzu Operations Manager	2.10.59-build.1232*
Stemcell (Bosh Director and Tanzu Operations Manager)	621.584*
BBR SDK	1.18.80*
BOSH Director	277.3.4*
BOSH DNS	1.36.2*
Metrics Server	0.1.13*
System Metrics	2.3.2*
CredHub	2.12.34*
CredHub Maestro	8.0.9
Syslog	11.8.10*
Windows Syslog	1.1.15*
UAA	76.15.0*
BPM	1.2.3*
Networking	9
OS Conf	22.1.3
AWS CPI	99*
Azure CPI	46.0.0*
Google CPI	48.0.0*
OpenStack CPI	53*
vSphere CPI	94*
BOSH CLI	7.2.4*
Credhub CLI	2.9.17*
BBR CLI	1.9.46*
Telemetry	1.2.4
Core Consumption	0.3.5*
* Components marked with an asterisk have been updated.

v2.10.58

Release Date: May 26, 2023

Caution This release includes a new version of System Metrics, which causes all VMs to redeploy.

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Known Issue Fix] The bosh-cli, when uploading releases, no longer excludes releases that have the same fingerprint but a different name. This behavior caused the “Extracting compiled package archive failed” issue in Tanzu Operations Manager v2.10.57.
[Bug Fix] Configuring LDAP authentication via the API no longer fails when ldap_max_search_depth is not provided.
[Bug Fix] Configuring UAA expiration tokens no longer causes UAA to restart when the values are not changed.
[Feature] Core Consumption data can now be downloaded from the “Advanced Options” Settings page. The accuracy of this data depends on upgrading to Tanzu Operations Manager Tile versions of products that support this functionality.

Component	Version
Tanzu Operations Manager	2.10.58-build.1011*
Stemcell (Bosh Director and Tanzu Operations Manager)	621.543*
BBR SDK	1.18.76*
BOSH Director	277.3.2*
BOSH DNS	1.36.1
Metrics Server	0.1.12
System Metrics	2.3.1*
CredHub	2.12.28*
CredHub Maestro	8.0.9
Syslog	11.8.9
Windows Syslog	1.1.14
UAA	74.5.73*
BPM	1.2.2*
Networking	9
OS Conf	22.1.3
AWS CPI	98
Azure CPI	44.0.0
Google CPI	47.0.0
OpenStack CPI	52
vSphere CPI	92
BOSH CLI	7.2.3
Credhub CLI	2.9.15*
BBR CLI	1.9.45
Telemetry	1.2.4
Core Consumption	0.3.3
* Components marked with an asterisk have been updated.

v2.10.57

Release Date: May 08, 2023

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Feature] Tanzu Operations Manager allows users to download logs for the BOSH Director
[Feature] Upgrade to Ruby 3.1
[Known Issue] Deployment of TAS and related tiles (for example, Isolation Segment) fails during the first Apply Changes with the error, “Extracting compiled package archive failed”. If you encounter this error, run Apply Changes again. This issue is fixed in a following release of Tanzu Operations Manager.
[Known Issue Fix] The BOSH Director now looks up compiled packages by name in addition to fingerprint. For more information about this known issue, see BOSH Inappropriately Reuses Compiled Packages.
[Bug Fix] Blobstore credentials do not appear in IaaS metadata when signed URLs are used

Component	Version
Tanzu Operations Manager	2.10.57-build.911*
Stemcell (Bosh Director and Tanzu Operations Manager)	621.508*
BBR SDK	1.18.69*
BOSH Director	277.3.1*
BOSH DNS	1.36.1
Metrics Server	0.1.12*
System Metrics	2.2.7
CredHub	2.12.26*
CredHub Maestro	8.0.9
Syslog	11.8.9*
Windows Syslog	1.1.14*
UAA	74.5.71*
BPM	1.2.0
Networking	9
OS Conf	22.1.3
AWS CPI	98*
Azure CPI	44.0.0*
Google CPI	47.0.0*
OpenStack CPI	52*
vSphere CPI	92*
BOSH CLI	7.2.3*
Credhub CLI	2.9.14*
BBR CLI	1.9.45*
Telemetry	1.2.4
* Components marked with an asterisk have been updated.

v2.10.56

Release Date: April 10, 2023

This release includes a new version of BOSH DNS, which causes all VMs to redeploy.

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Feature] Tanzu Operations Manager allows users to download /var/log logs from deployed instances
[Bug Fix] Add descriptive ’aria-label’s to buttons in Tanzu Operations Manager “Delete Product” modal
[Feature] Tanzu Operations Manager allows users to download logs for the BOSH Director
[Feature] Improve internal Rails log by enabling log_tags
[Feature] Allow both gp3 and throughput (IOPS) to be set through API when creating custom disk types

Component	Version
Tanzu Operations Manager	2.10.56-build.762*
Stemcell (Bosh Director and Tanzu Operations Manager)	621.463
BBR SDK	1.18.65*
BOSH Director	277.3.0
BOSH DNS	1.36.1*
Metrics Server	0.1.11
System Metrics	2.2.7
CredHub	2.12.25*
CredHub Maestro	8.0.9
Syslog	11.8.8
Windows Syslog	1.1.13
UAA	74.5.68*
BPM	1.2.0*
Networking	9
OS Conf	22.1.3*
AWS CPI	97
Azure CPI	43.0.0*
Google CPI	46.0.2
OpenStack CPI	51
vSphere CPI	91*
BOSH CLI	7.2.2*
Credhub CLI	2.9.13*
BBR CLI	1.9.43*
Telemetry	1.2.4
* Components marked with an asterisk have been updated.

v2.10.55

Release Date: March 23, 2023

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Feature] Add support for AWS eu-central-2 region
[Bug Fix] Fix time synchronization on Azure-based Tanzu Operations Manager VMs

Component	Version
Tanzu Operations Manager	2.10.55-build.729*
Stemcell (Bosh Director and Tanzu Operations Manager)	621.463*
BBR SDK	1.18.62
BOSH Director	277.3.0
BOSH DNS	1.36.0
Metrics Server	0.1.11
System Metrics	2.2.7
CredHub	2.12.22*
CredHub Maestro	8.0.9
Syslog	11.8.8
Windows Syslog	1.1.13
UAA	74.5.65*
BPM	1.1.21
Networking	9
OS Conf	22.1.2
AWS CPI	97
Azure CPI	41.0.0
Google CPI	46.0.2*
OpenStack CPI	51
vSphere CPI	90
BOSH CLI	7.2.0*
Credhub CLI	2.9.12
BBR CLI	1.9.42*
Telemetry	1.2.4
* Components marked with an asterisk have been updated.

v2.10.54

Release Date: March 10, 2023

This release includes a new version of System Metrics. Upgrading to Tanzu Operations Manager v2.10.54 causes all VMs to redeploy.

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Feature Improvement] In the Tanzu Operations Manager Installation Dashboard, load times and caching for the Stemcell Library page are improved.
[Feature Improvement] Tanzu Operations Manager v2.10 supports vSphere 8.0 and NSX 4.0.
[Known Issue] The scheduled bosh clean-up task fails with a “Tried to load unspecified class: Bosh::Director::Jobs::DBJob” error.
[Bug Fix] Temporary verifier failures are properly exposed and do not cause a 500 error.
[Bug Fix] In the Tanzu Operations Manager Installation Dashboard, the Review Pending Changes page does not show a Stemcell Out of Date status when you are using the most recent stemcell versions.

Component	Version
Tanzu Operations Manager	2.10.54-build.726*
Stemcell (BOSH Director and Tanzu Operationss Manager)	621.448*
BBR SDK	1.18.62*
BOSH Director	277.3.0*
BOSH DNS	1.36.0
Metrics Server	0.1.11*
System Metrics	2.2.7*
CredHub	2.12.21*
CredHub Maestro	8.0.9
Syslog	11.8.8*
Windows Syslog	1.1.13*
UAA	74.5.64*
BPM	1.1.21
Networking	9
OS Conf	22.1.2
AWS CPI	97*
Azure CPI	41.0.0
Google CPI	46.0.1
OpenStack CPI	51
vSphere CPI	90*
BOSH CLI	7.1.3*
Credhub CLI	2.9.12*
BBR CLI	1.9.41*
Telemetry	1.2.4
* Components marked with an asterisk have been updated.

v2.10.53

Release Date: February 08, 2023

Caution

This release includes a new version of BOSH DNS. Upgrading to Tanzu Operations Manager v2.10.53 causes all VMs to redeploy.
In this release, the BOSH Director uses NATS v2.0.

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Bug Fix] Secrets correctly redacted from Tanzu Operations Manager production logs when “See Changes” is clicked.
[Feature] Remove non-inclusive language from the Tanzu Operations Manager UI

Component	Version
Tanzu Operations Manager	2.10.53-build.706*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.401*
BBR SDK	1.18.61*
BOSH Director	276.1.1*
BOSH DNS	1.36.0*
Metrics Server	0.1.9
System Metrics	2.2.5*
CredHub	2.12.19*
CredHub Maestro	8.0.9
Syslog	11.8.6
Windows Syslog	1.1.11
UAA	74.5.63*
BPM	1.1.21
Networking	9
OS Conf	22.1.2
AWS CPI	96
Azure CPI	41.0.0
Google CPI	46.0.1
OpenStack CPI	51
vSphere CPI	89*
BOSH CLI	7.1.2*
Credhub CLI	2.9.10
BBR CLI	1.9.39*
Telemetry	1.2.4
* Components marked with an asterisk have been updated.

v2.10.52

Release Date: January 09, 2023

This release includes a new version of BOSH DNS. Upgrading to Tanzu Operations Manager v2.10.52 causes all VMs to redeploy.

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Feature] Logs for instance and instance groups can be directly downloaded from a product tile’s “Status” tab.
[Feature] Added additional logging to track when Tile Migrations are applied. This allows to use logs to debug issues with Tile upgrade failures.

Component	Version
Tanzu Operations Manager	2.10.52-build.679*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.376*
BBR SDK	1.18.60*
BOSH Director	273.1.3
BOSH DNS	1.34.1*
Metrics Server	0.1.9
System Metrics	2.2.4
CredHub	2.12.18
CredHub Maestro	8.0.9*
Syslog	11.8.6
Windows Syslog	1.1.11
UAA	74.5.62*
BPM	1.1.21
Networking	9
OS Conf	22.1.2
AWS CPI	96
Azure CPI	41.0.0
Google CPI	46.0.1*
OpenStack CPI	51
vSphere CPI	88*
BOSH CLI	7.1.1*
Credhub CLI	2.9.10*
BBR CLI	1.9.38
Telemetry	1.2.4
* Components marked with an asterisk have been updated.

v2.10.51

Release Date: December 19, 2022

This release includes a new version of System Metrics. Upgrading to Tanzu Operations Manager v2.10.51 causes all VMs to redeploy.

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Bug Fix] Tanzu Operations Manager’s Export Installations Settings promptly cleans up files in /tmp, allowing users to do multiple exports within a day.
[Feature] Improve accessibility when navigating the Tanzu Operations Manager UI using a keyboard. With these changes, a thick blue outline is typically placed around the currently focused link.
[Feature] Deploy the BOSH Director using PostgreSQL 13. Previously the BOSH Director was deployed with PostgreSQL 10, which has gone out of support.

Component	Version
Tanzu Operations Manager	2.10.51-build.662*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.364*
BBR SDK	1.18.59*
BOSH Director	273.1.3*
BOSH DNS	1.34.0
Metrics Server	0.1.9*
System Metrics	2.2.4*
CredHub	2.12.18*
CredHub Maestro	8.0.8*
Syslog	11.8.6*
Windows Syslog	1.1.11
UAA	74.5.61*
BPM	1.1.21*
Networking	9
OS Conf	22.1.2
AWS CPI	96*
Azure CPI	41.0.0
Google CPI	45.0.0
OpenStack CPI	51
vSphere CPI	87
BOSH CLI	7.1.0*
Credhub CLI	2.9.9*
BBR CLI	1.9.38
Telemetry	1.2.4
* Components marked with an asterisk have been updated.

v2.10.50

Release Date: November 19, 2022

This release includes a new version of System Metrics. Upgrading to Tanzu Operations Manager v2.10.50 causes all VMs to redeploy.

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Bug Fix] WildcardDomainResolver does not cause timeouts when remote DNS server is unresponsive
[Feature] Improve UI feedback when deleting unused products

Component	Version
Tanzu Operations Manager	2.10.50-build.622*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.330*
BBR SDK	1.18.58*
BOSH Director	273.1.2*
BOSH DNS	1.34.0
Metrics Server	0.1.8*
System Metrics	2.2.2*
CredHub	2.12.14*
CredHub Maestro	8.0.7
Syslog	11.8.5*
Windows Syslog	1.1.11*
UAA	74.5.58*
BPM	1.1.19
Networking	9
OS Conf	22.1.2
AWS CPI	95*
Azure CPI	41.0.0*
Google CPI	45.0.0
OpenStack CPI	51*
vSphere CPI	87*
BOSH CLI	7.0.1
Credhub CLI	2.9.8*
BBR CLI	1.9.38
Telemetry	1.2.4
* Components marked with an asterisk have been updated.

v2.10.49

Release Date: November 02, 2022

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Bug Fix] Metrics server continues to accept old leaf certificate for mutual TLS during a CA rotation

Component	Version
Tanzu Operations Manager	2.10.49-build.594*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.305
BBR SDK	1.18.56*
BOSH Director	273.1.1
BOSH DNS	1.34.0
Metrics Server	0.1.7
System Metrics	2.0.18
CredHub	2.12.12
CredHub Maestro	8.0.7
Syslog	11.8.0
Windows Syslog	1.1.10
UAA	74.5.56*
BPM	1.1.19
Networking	9
OS Conf	22.1.2
AWS CPI	94
Azure CPI	40.0.0
Google CPI	45.0.0
OpenStack CPI	50
vSphere CPI	85*
BOSH CLI	7.0.1
Credhub CLI	2.9.7
BBR CLI	1.9.38
Telemetry	1.2.4
* Components marked with an asterisk have been updated.

v2.10.48

Release Date: October 27, 2022

Caution

This release includes a new version of BOSH DNS. Upgrading to Tanzu Operations Manager Tanzu Operations Manager v2.10.48 causes all VMs to redeploy.
This release contains a new end-user license agreement that you must manually accept when downloading the release binaries from VMware Tanzu Network.

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Feature] Improve accessibility within Tanzu Operations Manager UI
[Known Issue Fix] Upgrading from versions earlier than Tanzu Operations Manager v2.10.9 does not default to using the Policy API for NSX-T on vSphere
[Known Issue Fix] The issue beginning in Tanzu Operations Manager v2.10.41 that caused some Tanzu Operations Manager users to experience slow VM creation times is resolved with the vSphere CPI included in this release

Component	Version
Tanzu Operations Manager	2.10.48-build.590*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.305*
BBR SDK	1.18.55*
BOSH Director	273.1.1*
BOSH DNS	1.34.0*
Metrics Server	0.1.7*
System Metrics	2.0.18
CredHub	2.12.12*
CredHub Maestro	8.0.7*
Syslog	11.8.0
Windows Syslog	1.1.10*
UAA	74.5.55*
BPM	1.1.19
Networking	9
OS Conf	22.1.2
AWS CPI	94
Azure CPI	40.0.0
Google CPI	45.0.0*
OpenStack CPI	50*
vSphere CPI	81*
BOSH CLI	7.0.1
Credhub CLI	2.9.7*
BBR CLI	1.9.38
Telemetry	1.2.4
* Components marked with an asterisk have been updated.

v2.10.47

Release Date: September 28, 2022

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Bug Fix] Tanzu Operations Manager correctly removes temporary files created during an export
[Known Issue Fix] Fixes a bug preventing Azure configurations from being correctly saved/deployed when Storage Accounts are used for Cloud Storage (problem introduced in 2.10.44)
[Known Issue] vSphere deployments might create VMs much more slowly than Tanzu Operations Manager versions prior to 2.10.41 if there are multiple datastores attached to the target AZs.

Component	Version
Tanzu Operations Manager	2.10.47-build.562*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.280*
BBR SDK	1.18.53*
BOSH Director	273.1.0
BOSH DNS	1.31.0
Metrics Server	0.1.6*
System Metrics	2.0.18
CredHub	2.12.9*
CredHub Maestro	8.0.4
Syslog	11.8.0
Windows Syslog	1.1.9*
UAA	74.5.51*
BPM	1.1.19*
Networking	9
OS Conf	22.1.2
AWS CPI	94*
Azure CPI	40.0.0*
Google CPI	44.0.0*
OpenStack CPI	49*
vSphere CPI	80*
BOSH CLI	7.0.1
Credhub CLI	2.9.4*
BBR CLI	1.9.38*
Telemetry	1.2.4
* Components marked with an asterisk have been updated.

v2.10.46

Release Date: August 25, 2022

When upgrading from Tanzu Operations Manager v2.10.8 or earlier on vSphere, the NSX-T Policy API mode is configured by default. If you are not using the NSX-T Policy API, you must either deactivate the Use NSX-T Policy API check box in the vCenter Config pane of the BOSH Director tile or set the nsx_t_use_policy_api property in your manifest to false.

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Feature] Tanzu Operations Manager generated leaf certificates includes the keyEncipherment extension
[Change] New installs of OM on vSphere default to use policy-api
[Bug Fix] Upgrading stemcell, then upgrading Tanzu Operations Manager to version that does not include that stemcell does not fail
[Bug Fix] UI Fixes:
- Datastore cluster/datastore configuration form fields have been adjusted for clarity.
- Expired certificates do not display negative values for “expires in”
[Known Issue] Azure configurations cannot be correctly saved/deployed when Storage Accounts are used for Cloud Storage (this issue first appears in Tanzu Operations Manager 2.10.44)
[Known Issue] vSphere deployments might create VMs much more slowly than Tanzu Operations Manager versions prior to 2.10.41 if there are multiple datastores attached to the target AZs.

Component	Version
Tanzu Operations Manager	2.10.46-build.541*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.265*
BBR SDK	1.18.50*
BOSH Director	273.1.0*
BOSH DNS	1.31.0
Metrics Server	0.1.5*
System Metrics	2.0.18
CredHub	2.12.8*
CredHub Maestro	8.0.4*
Syslog	11.8.0
Windows Syslog	1.1.8*
UAA	74.5.48*
BPM	1.1.18
Networking	9
OS Conf	22.1.2
AWS CPI	93
Azure CPI	39.0.0*
Google CPI	43.0.0
OpenStack CPI	48*
vSphere CPI	79*
BOSH CLI	7.0.1
Credhub CLI	2.9.3
BBR CLI	1.9.37*
Telemetry	1.2.4*
* Components marked with an asterisk have been updated.

v2.10.45

Release Date: July 27, 2022

This release includes a new version of System Metrics. Upgrading to Tanzu Operations Manager v2.10.45 causes all VMs to redeploy.

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Fix] BOSH task cleanup occurs daily (rather than weekly). This change might alleviate issues seen in deployments where the BOSH Director runs tasks frequently (e.g. for monitoring).
[Known Issue] Azure configurations cannot be correctly saved/deployed when Storage Accounts are used for Cloud Storage (this issue first appears in Tanzu Operations Manager 2.10.44)
[Known Issue] vSphere deployments might create VMs much more slowly than Tanzu Operations Manager versions prior to 2.10.41 if there are multiple datastores attached to the target AZs.

Component	Version
Tanzu Operations Manager	2.10.45-build.512*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.256
BBR SDK	1.18.47*
BOSH Director	272.6.0
BOSH DNS	1.31.0
Metrics Server	0.1.4*
System Metrics	2.0.18*
CredHub	2.12.6
CredHub Maestro	8.0.3
Syslog	11.8.0
Windows Syslog	1.1.7
UAA	74.5.46
BPM	1.1.18
Networking	9
OS Conf	22.1.2
AWS CPI	93
Azure CPI	38.0.0
Google CPI	43.0.0
OpenStack CPI	47*
vSphere CPI	76
BOSH CLI	7.0.1
Credhub CLI	2.9.3
BBR CLI	1.9.35*
Telemetry	1.2.2
* Components marked with an asterisk have been updated.

v2.10.44

Release Date: July 14, 2022

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Security Fix] Remediated CVE-2022-23923 in the tile JavaScript migration process.
[Known Issue] Azure configurations cannot be correctly saved/deployed when Storage Accounts are used for Cloud Storage (this issue first appears in Tanzu Operations Manager 2.10.44)
[Known Issue] vSphere deployments might create VMs much more slowly than Tanzu Operations Manager versions prior to 2.10.41 if there are multiple datastores attached to the target AZs.

Component	Version
Tanzu Operations Manager	2.10.44-build.502*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.256*
BBR SDK	1.18.46*
BOSH Director	272.6.0*
BOSH DNS	1.31.0
Metrics Server	0.1.3
System Metrics	2.0.17
CredHub	2.12.6*
CredHub Maestro	8.0.3
Syslog	11.8.0*
Windows Syslog	1.1.7*
UAA	74.5.46*
BPM	1.1.18
Networking	9
OS Conf	22.1.2
AWS CPI	93
Azure CPI	38.0.0
Google CPI	43.0.0
OpenStack CPI	46
vSphere CPI	76*
BOSH CLI	7.0.1
Credhub CLI	2.9.3
BBR CLI	1.9.34*
Telemetry	1.2.2
* Components marked with an asterisk have been updated.

v2.10.43

Release Date: June 16, 2022

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Known Issue Fix] Certificates endpoint no longer returns a 500 error due to “nested asn” error. Issue is introduced in v2.10.40.
[Known Issue Fix] Deleting VM types using the API endpoint is allowed even when VMs are deployed with those types. Issue is introduced in v2.10.40.
[Known Issue Fix] Content-Security-Policy header does not prevent users logging in with SAML. Issue is introduced in v2.10.40.
[Known Issue] vSphere deployments might create VMs much more slowly than Tanzu Operations Manager versions prior to 2.10.41 if there are multiple datastores attached to the target AZs.

Component	Version
Tanzu Operations Manager	2.10.43-build.494*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.251*
BBR SDK	1.18.43
BOSH Director	272.5.0
BOSH DNS	1.31.0
Metrics Server	0.1.3
System Metrics	2.0.17
CredHub	2.12.5
CredHub Maestro	8.0.3
Syslog	11.7.11
Windows Syslog	1.1.6
UAA	74.5.41
BPM	1.1.18
Networking	9
OS Conf	22.1.2
AWS CPI	93
Azure CPI	38.0.0
Google CPI	43.0.0
OpenStack CPI	46
vSphere CPI	74
BOSH CLI	7.0.1
Credhub CLI	2.9.3
BBR CLI	1.9.32
Telemetry	1.2.2
* Components marked with an asterisk have been updated.

v2.10.42

Release Date: June 11, 2022

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Known Issue Fix] The expiring certificates API does not return a 500 status error when syslog certificates are not configured. Issue is introduced in v2.10.40.
[Known Issue Fix] The VM type deletion API endpoint does not return a 500 status error. Issue is introduced in v2.10.40.
[Known Issue] vSphere deployments might create VMs much more slowly than Tanzu Operations Manager versions prior to 2.10.41 if there are multiple datastores attached to the target AZs.

Component	Version
Tanzu Operations Manager	2.10.42-build.491*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.245
BBR SDK	1.18.43*
BOSH Director	272.5.0
BOSH DNS	1.31.0
Metrics Server	0.1.3
System Metrics	2.0.17
CredHub	2.12.5
CredHub Maestro	8.0.3
Syslog	11.7.11
Windows Syslog	1.1.6
UAA	74.5.41
BPM	1.1.18
Networking	9
OS Conf	22.1.2
AWS CPI	93
Azure CPI	38.0.0
Google CPI	43.0.0
OpenStack CPI	46
vSphere CPI	74
BOSH CLI	7.0.1
Credhub CLI	2.9.3
BBR CLI	1.9.32*
Telemetry	1.2.2
* Components marked with an asterisk have been updated.

v2.10.41

Release Date: June 07, 2022

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Bug Fix] The BOSH Director would fail to deploy if the persistent disk still contained the postgres 9 data directory. This data has not been in use since Tanzu Operations Manager 2.4, but there was no automated cleanup process.
[Known Issue] The expiring certificates API endpoint returns a 500 status error for customers that have the syslog feature configured without entering an SSL certificate. Additionally, attempting to generate a support bundle returns an error. To workaround this issue, see Support bundle download gives error undefined method strip and Tanzu Operations Manager certificate pane does not load
[Known Issue] Deleting custom VM types using the API always returns a 500 status error.
[Known Issue] vSphere deployments might create VMs much more slowly than Tanzu Operations Manager versions prior to 2.10.41 if there are multiple datastores attached to the target AZs.

Component	Version
Tanzu Operations Manager	2.10.41-build.487*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.245
BBR SDK	1.18.42
BOSH Director	272.5.0*
BOSH DNS	1.31.0
Metrics Server	0.1.3
System Metrics	2.0.17
CredHub	2.12.5
CredHub Maestro	8.0.3
Syslog	11.7.11*
Windows Syslog	1.1.6
UAA	74.5.41
BPM	1.1.18
Networking	9
OS Conf	22.1.2
AWS CPI	93
Azure CPI	38.0.0
Google CPI	43.0.0
OpenStack CPI	46
vSphere CPI	74
BOSH CLI	7.0.1
Credhub CLI	2.9.3
BBR CLI	1.9.31
Telemetry	1.2.2
* Components marked with an asterisk have been updated.

v2.10.40

Release Date: June 03, 2022

There is a known issue with the BOSH Director when upgrading from a Tanzu Operations Manager installation that was created before March 2019. If your Tanzu Operations Manager installation was originally created before Tanzu Operations Manager v2.5.0, even if you are now on a current patch, you do not upgrade to Tanzu Operations Manager v2.10.40. This issue if resolved in v2.10.41. This release includes a new version of System Metrics. Upgrading to Tanzu Operations Manager v2.10.40 causes all VMs to redeploy.

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Feature] The Certificates page and expiring certificates API endpoint now include configurable certificates that were not previously displayed. The new certificates include IaaS and trusted certificates within the BOSH Director tile, the Tanzu Operations Manager SSL certificate, syslog certificates, and certificates in plain-text fields within other tiles. After upgrading to this patch, the expiring certificates warning banner might appear if any of these certificates are close to their expiration date.
[Feature] Allow users to select a stemcell for the BOSH Director tile. This allows you to redeploy the BOSH Director with newer stemcells without upgrading to a new Tanzu Operations Manager patch. Users still need to upgrade to the latest Tanzu Operations Manager patch to receive CVE fixes for the Tanzu Operations Manager VM itself.
[Feature] Add Content-Security-Policy headers are returned when accessing Tanzu Operations Manager. These headers replace the previously used X-XSS-Protection headers to protect against cross-site scripting attacks.
[Feature] Tanzu Operations Manager no longer deploys the deprecated BOSH registry on the BOSH Director.
[Bug Fix] The BOSH Director on vSphere uses the selected CPI config instead of first CPI config.
[Bug Fix] Deleting in-use custom VM types no longer causes Tanzu Operations Manager to return 500 status code errors until you restart it.
[Bug Fix] Tile properties that have been frozen due to a deploy now remain frozen after upgrading that tile.
[Bug Fix] Principal Identity (certificate-based) authentication for NSX-T works when Policy API mode is activated.
[Bug Fix] BOSH Health Monitor no longer continues to report that a VM is unresponsive after it has been deleted.
[Known Issue] The expiring certificates API endpoint returns a 500 status error for customers that have the syslog feature configured without entering an SSL certificate. Additionally, attempting to generate a support bundle returns an error. To workaround this issue, see Support bundle download gives error undefined method strip and Tanzu Operations Manager certificate pane does not load
[Known Issue] Deleting custom VM types using the API always returns a 500 status error.

Component	Version
Tanzu Operations Manager	2.10.40-build.482*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.245*
BBR SDK	1.18.42*
BOSH Director	272.4.0*
BOSH DNS	1.31.0
Metrics Server	0.1.3
System Metrics	2.0.17*
CredHub	2.12.5*
CredHub Maestro	8.0.3
Syslog	11.7.10*
Windows Syslog	1.1.6*
UAA	74.5.41*
BPM	1.1.18*
Networking	9
OS Conf	22.1.2
AWS CPI	93
Azure CPI	38.0.0
Google CPI	43.0.0
OpenStack CPI	46
vSphere CPI	74*
BOSH CLI	7.0.1*
Credhub CLI	2.9.3
BBR CLI	1.9.31*
Telemetry	1.2.2
* Components marked with an asterisk have been updated.

v2.10.39

Release Date: April 25, 2022

This release includes a new version of System Metrics. Upgrading to Tanzu Operations Manager v2.10.39 causes all VMs to redeploy.

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Bug Fix] Changes to /api/v0/installation_asset_collection in 2.10.37 were inconsistent with Tanzu Operations Manager RBAC documentation. The endpoint is now unavailable for users without access to view credentials.
[Feature] Allow users to downgrade stemcells for Tiles. This makes it easier to recover from a stemcell/Tile compatibility problem.

Component	Version
Tanzu Operations Manager	2.10.39-build.450*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.236*
BBR SDK	1.18.39*
BOSH Director	271.20.0
BOSH DNS	1.31.0
Metrics Server	0.1.3*
System Metrics	2.0.14*
CredHub	2.9.9
CredHub Maestro	8.0.3
Syslog	11.7.8*
Windows Syslog	1.1.5*
UAA	74.5.37
BPM	1.1.17*
Networking	9
OS Conf	22.1.2
AWS CPI	93
Azure CPI	38.0.0
Google CPI	43.0.0*
OpenStack CPI	46
vSphere CPI	73
BOSH CLI	6.4.17
Credhub CLI	2.9.3
BBR CLI	1.9.28*
Telemetry	1.2.2
* Components marked with an asterisk have been updated.

v2.10.38 - Withdrawn

Release Date: April 09, 2022

Caution This release has been removed from the Broadcom Support portal because it included an unpublished stemcell. This stemcell is testing new security enhancements, and VMware has received reports of Diego Cell VMs in TAS for VMs deployments becoming unresponsive. If you are experiencing problems caused by the 621.230 stemcell, upgrade to Tanzu Operations Manager v2.10.39.

This release is primarily intended for OpenStack users as images are not available for Tanzu Operations Manager v2.10.37. There are no major functionality changes in this release.

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Bug Fix] Update dependencies in systemd config for the Tanzu Operations Manager VM. This was causing error messages to appear in /var/log/syslog

Component	Version
Tanzu Operations Manager	2.10.38-build.448*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.230*
BBR SDK	1.18.38*
BOSH Director	271.20.0
BOSH DNS	1.31.0
Metrics Server	0.1.2
System Metrics	2.0.13
CredHub	2.9.9
CredHub Maestro	8.0.3
Syslog	11.7.7
Windows Syslog	1.1.4
UAA	74.5.37
BPM	1.1.16
Networking	9
OS Conf	22.1.2
AWS CPI	93
Azure CPI	38.0.0
Google CPI	42.0.0
OpenStack CPI	46
vSphere CPI	73
BOSH CLI	6.4.17
Credhub CLI	2.9.3
BBR CLI	1.9.27
Telemetry	1.2.2
* Components marked with an asterisk have been updated.

v2.10.37

Release Date: April 06, 2022

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Security Fix] This release addresses CVE-2022-22965. We now consider this update necessary for secure operation, and recommend installation ASAP. We previously believed this was fixed in 2.10.35 but further investigation found it was not.
[Known Issue] OpenStack images are currently unavailable for 2.10.37. It’s recommended to follow the workaround instructions for OpenStack environments until we are able to publish the updated image.
[Breaking Change] [Security Fix] Restricted View users can no longer access the /api/v0/installation_asset_collection API endpoint. The output contains hashed credentials.
[Known Issue] Full View users cannot access the /api/v0/installation_asset_collection API endpoint.

Component	Version
Tanzu Operations Manager	2.10.37-build.445*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.224
BBR SDK	1.18.36
BOSH Director	271.20.0
BOSH DNS	1.31.0
Metrics Server	0.1.2
System Metrics	2.0.13
CredHub	2.9.9
CredHub Maestro	8.0.3
Syslog	11.7.7
Windows Syslog	1.1.4
UAA	74.5.37*
BPM	1.1.16
Networking	9
OS Conf	22.1.2
AWS CPI	93
Azure CPI	38.0.0
Google CPI	42.0.0
OpenStack CPI	46
vSphere CPI	73
BOSH CLI	6.4.17
Credhub CLI	2.9.3
BBR CLI	1.9.27*
Telemetry	1.2.2
* Components marked with an asterisk have been updated.

v2.10.36

Release Date: April 01, 2022

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Known Issue] This release is impacted by CVE-2022-22965. Please upgrade to 2.10.37 or higher.
[Known Issue Fix] Reverts Azure CPI to v38 to address a bug that required internet connectivity.

Component	Version
Tanzu Operations Manager	2.10.36-build.441*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.224
BBR SDK	1.18.36
BOSH Director	271.20.0
BOSH DNS	1.31.0
Metrics Server	0.1.2
System Metrics	2.0.13
CredHub	2.9.9
CredHub Maestro	8.0.3
Syslog	11.7.7
Windows Syslog	1.1.4
UAA	74.5.36
BPM	1.1.16
Networking	9
OS Conf	22.1.2
AWS CPI	93
Azure CPI	38.0.0*
Google CPI	42.0.0
OpenStack CPI	46
vSphere CPI	73
BOSH CLI	6.4.17
Credhub CLI	2.9.3
BBR CLI	1.9.26
Telemetry	1.2.2
* Components marked with an asterisk have been updated.

v2.10.35

Release Date: April 01, 2022

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Known Issue] This release originally addressed CVE-2022-22965. Additional investigation found that this vulnerability still exists. Upgrade to v2.10.37 or higher.
[Known Issue] On Azure, BOSH might fail to deploy if it does not have Internet access due to a problem with Azure CPI v39.

Component	Version
Tanzu Operations Manager	2.10.35-build.439*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.224
BBR SDK	1.18.36
BOSH Director	271.20.0
BOSH DNS	1.31.0
Metrics Server	0.1.2
System Metrics	2.0.13
CredHub	2.9.9
CredHub Maestro	8.0.3
Syslog	11.7.7
Windows Syslog	1.1.4
UAA	74.5.36*
BPM	1.1.16
Networking	9
OS Conf	22.1.2
AWS CPI	93
Azure CPI	39.0.0*
Google CPI	42.0.0
OpenStack CPI	46
vSphere CPI	73
BOSH CLI	6.4.17
Credhub CLI	2.9.3
BBR CLI	1.9.26
Telemetry	1.2.2
* Components marked with an asterisk have been updated.

v2.10.34

Release Date: March 28, 2022

Caution This release includes a new version of BOSH DNS. Upgrading to Tanzu Operations Manager v2.10.34 causes all VMs to redeploy. For more information, see v2.10.33 below.

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later

Component	Version
Tanzu Operations Manager	2.10.34-build.436*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.224*
BBR SDK	1.18.36*
BOSH Director	271.20.0
BOSH DNS	1.31.0
Metrics Server	0.1.2
System Metrics	2.0.13
CredHub	2.9.9
CredHub Maestro	8.0.3
Syslog	11.7.7
Windows Syslog	1.1.4
UAA	74.5.35
BPM	1.1.16
Networking	9
OS Conf	22.1.2
AWS CPI	93
Azure CPI	38.0.0
Google CPI	42.0.0
OpenStack CPI	46
vSphere CPI	73*
BOSH CLI	6.4.17
Credhub CLI	2.9.3
BBR CLI	1.9.26*
Telemetry	1.2.2
* Components marked with an asterisk have been updated.

v2.10.33

Release Date: March 07, 2022

This version of BOSH DNS requires every BOSH DNS certificate to have a Subject Alternative Name (SAN). A migration was introduced in Tanzu Operations Manager v2.10.9 to add SANs to these certificates. Upgrade to vTanzu Operations Manager v2.10.9 or later and redeploy all VMs before you upgrade to this patch. If you do not complete this migration first, you might experience BOSH DNS resolution issues until the change is rolled out to all VMs.

To see whether the migration has been succesfully run on all VMs, see How to Verify Bosh DNS Certificates Have Correct SAN Fields in the Knowledge Base.

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Feature] Certificate rotation procedures appear on the Certificates page and API endpoint
[Feature] The Certificates page can be filtered by both expiration date and rotation procedure
[Feature] Added support for Jammy Jellyfish (Ubuntu 22.04) stemcells.
[Feature] Introduces compatibility with products using tile metadata version 2.10.2.

Component	Version
Tanzu Operations Manager	2.10.33-build.426*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.211
BBR SDK	1.18.35*
BOSH Director	271.20.0
BOSH DNS	1.31.0*
Metrics Server	0.1.2
System Metrics	2.0.13
CredHub	2.9.9
CredHub Maestro	8.0.3
Syslog	11.7.7
Windows Syslog	1.1.4
UAA	74.5.35
BPM	1.1.16
Networking	9
OS Conf	22.1.2
AWS CPI	93
Azure CPI	38.0.0
Google CPI	42.0.0*
OpenStack CPI	46
vSphere CPI	72
BOSH CLI	6.4.17
Credhub CLI	2.9.3
BBR CLI	1.9.25
Telemetry	1.2.2
* Components marked with an asterisk have been updated.

v2.10.32

Release Date: February 25, 2022

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Bug Fix] An additional BOSH CLI issue introduced in v2.10.28 is resolved in this release. This issue caused deployment failures if a tile used a BOSH release with source packages that shared some packages with a BOSH release that was already uploaded to the BOSH Director. This was most commonly seen in BOSH releases for Windows components.

Component	Version
Tanzu Operations Manager	2.10.32-build.420*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.211
BBR SDK	1.18.34
BOSH Director	271.20.0
BOSH DNS	1.30.0
Metrics Server	0.1.2
System Metrics	2.0.13
CredHub	2.9.9
CredHub Maestro	8.0.3*
Syslog	11.7.7
Windows Syslog	1.1.4
UAA	74.5.35*
BPM	1.1.16
Networking	9
OS Conf	22.1.2
AWS CPI	93
Azure CPI	38.0.0
Google CPI	41.0.0
OpenStack CPI	46
vSphere CPI	72
BOSH CLI	6.4.17*
Credhub CLI	2.9.3
BBR CLI	1.9.25*
Telemetry	1.2.2
* Components marked with an asterisk have been updated.

v2.10.31

Release Date: February 23, 2022

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Bug Fix] Tanzu Operations Manager pre_deploy_check fails on vSphere

Component	Version
Tanzu Operations Manager	2.10.31-build.414*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.211*
BBR SDK	1.18.34*
BOSH Director	271.20.0
BOSH DNS	1.30.0
Metrics Server	0.1.2
System Metrics	2.0.13
CredHub	2.9.9
CredHub Maestro	8.0.2
Syslog	11.7.7
Windows Syslog	1.1.4
UAA	74.5.34
BPM	1.1.16
Networking	9
OS Conf	22.1.2
AWS CPI	93
Azure CPI	38.0.0
Google CPI	41.0.0
OpenStack CPI	46
vSphere CPI	72
BOSH CLI	6.4.16
Credhub CLI	2.9.3
BBR CLI	1.9.24
Telemetry	1.2.2
* Components marked with an asterisk have been updated.

v2.10.30

Release Date: February 16, 2022

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Known Issue] The API endpoint /api/v0/staged/director/pre_deploy_check fails in vSphere environments with an Internal Server Error.
[Bug Fix] An additional BOSH CLI issue introduced in v2.10.28 is resolved in this release. This issue caused deployment failures if a tile used a BOSH release with source packages that shared some packages with a BOSH release that was already uploaded to the BOSH Director.
[Bug Fix] BOSH deployments failing when enabling Spot Instances with VM Extensions is resolved in this release.
[Feature] The BOSH Blobstore is configured to allow TLS communication only. Communication was previously done via TLS, but non-TLS requests were still allowed.

Component	Version
Tanzu Operations Manager	2.10.30-build.408*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.208
BBR SDK	1.18.33
BOSH Director	271.20.0
BOSH DNS	1.30.0
Metrics Server	0.1.2
System Metrics	2.0.13
CredHub	2.9.9
CredHub Maestro	8.0.2
Syslog	11.7.7
Windows Syslog	1.1.4
UAA	74.5.34
BPM	1.1.16
Networking	9
OS Conf	22.1.2
AWS CPI	93
Azure CPI	38.0.0
Google CPI	41.0.0
OpenStack CPI	46
vSphere CPI	72
BOSH CLI	6.4.16*
Credhub CLI	2.9.3
BBR CLI	1.9.24
Telemetry	1.2.2
* Components marked with an asterisk have been updated.

v2.10.29

Release Date: February 11, 2022

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Known Issue] The API endpoint /api/v0/staged/director/pre_deploy_check fails in vSphere environments with an Internal Server Error.
[Bug Fix] The UAA issue introduced in v2.10.27 causing UAA startup to fail on air-gapped environments is resolved in this release.
[Bug Fix] An additional BOSH CLI issue introduced in v2.10.27 is resolved in this release. This issue caused deployment failures if a BOSH release that includes compiled packages was uploaded, and an identical BOSH release that includes source packages already existed on the BOSH Director.

Component	Version
Tanzu Operations Manager	2.10.29-build.402*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.208*
BBR SDK	1.18.33
BOSH Director	271.20.0
BOSH DNS	1.30.0
Metrics Server	0.1.2
System Metrics	2.0.13
CredHub	2.9.9
CredHub Maestro	8.0.2*
Syslog	11.7.7
Windows Syslog	1.1.4
UAA	74.5.34*
BPM	1.1.16
Networking	9
OS Conf	22.1.2
AWS CPI	93
Azure CPI	38.0.0
Google CPI	41.0.0
OpenStack CPI	46
vSphere CPI	72
BOSH CLI	6.4.15*
Credhub CLI	2.9.3*
BBR CLI	1.9.24
Telemetry	1.2.2
* Components marked with an asterisk have been updated.

v2.10.28

Release Date: February 04, 2022

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Known Issue] UAA fails to start in air-gapped Tanzu Operations Manager environments.
[Known Issue] The API endpoint /api/v0/staged/director/pre_deploy_check fails in vSphere environments with an Internal Server Error.
[Bug Fix] The BOSH CLI issue introduced in v2.10.27 is resolved in this release.
[Feature] The Azure CPI has been updated to allow load balancers to be specified using an array of hashes. This is not available in the UI, but can be configured manually with BOSH.

Component	Version
Tanzu Operations Manager	2.10.28-build.393*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.198
BBR SDK	1.18.33*
BOSH Director	271.20.0
BOSH DNS	1.30.0
Metrics Server	0.1.2
System Metrics	2.0.13
CredHub	2.9.9
CredHub Maestro	8.0.1
Syslog	11.7.7
Windows Syslog	1.1.4
UAA	74.5.33
BPM	1.1.16
Networking	9
OS Conf	22.1.2
AWS CPI	93*
Azure CPI	38.0.0*
Google CPI	41.0.0
OpenStack CPI	46
vSphere CPI	72
BOSH CLI	6.4.14*
Credhub CLI	2.9.1
BBR CLI	1.9.24*
Telemetry	1.2.2
* Components marked with an asterisk have been updated.

v2.10.27

Release Date: February 02, 2022

For more information about custom VM type catalogs for GCP deployments, see the Tanzu Operations Manager API documentation.

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Security Fix] Upgrades the Tanzu Operations Manager PostgreSQL to 13.5 and the BOSH Director PostgreSQL to 10.19 to fix a potential MITM vulnerability. (CVE-2021-23214)
[Bug Fix] For Azure deployments, Tanzu Operations Manager correctly respects the storage type you set in the UI.
[Bug Fix] For vSphere deployments, Tanzu Operations Manager does not generate a Too many open file handles error due to open vCenter connections.
[Feature] BOSH Director templating rendering speed up for large deployments.

Component	Version
Tanzu Operations Manager	2.10.27-build.387*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.198*
BBR SDK	1.18.32*
BOSH Director	271.20.0*
BOSH DNS	1.30.0
Metrics Server	0.1.2
System Metrics	2.0.13
CredHub	2.9.9
CredHub Maestro	8.0.1
Syslog	11.7.7
Windows Syslog	1.1.4
UAA	74.5.33*
BPM	1.1.16*
Networking	9
OS Conf	22.1.2
AWS CPI	92
Azure CPI	37.6.0
Google CPI	41.0.0
OpenStack CPI	46
vSphere CPI	72
BOSH CLI	6.4.13*
Credhub CLI	2.9.1
BBR CLI	1.9.22*
Telemetry	1.2.2
* Components marked with an asterisk have been updated.

v2.10.26

Release Date: January 13, 2022

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Bug Fix] Tanzu Operations Manager OpenAPI documentation fixes:
- Sample URLs in the documentation no longer have a duplicate and erroneous “/api/v0” component in their path.
- The hostname in the URLs is corrected and is no longer “{opsmanager-installation}}”.
- The warning in the API documentation about unsupported parallel API calls is clearer. Additional words added to mention that calls made by different users, but at the same time are just as unsupported as calls by the same user.
[Bug Fix] Includes BOSH Director v271.18.0. This fixes the incorrect handling of the NO_PROXY setting in Tanzu Operations Manager that might have been introduced in Tanzu Operations Manager v2.10.16. You can now enter hosts in the No Proxy field of the Tanzu Operations Manager’s Proxy Settings dialog and have Tanzu Operations Manager, BOSH, and BOSH-deployed VMs reach out to those hosts directly.

Component	Version
Tanzu Operations Manager	2.10.26-build.365*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.196*
BBR SDK	1.18.31*
BOSH Director	271.18.0*
BOSH DNS	1.30.0
Metrics Server	0.1.2*
System Metrics	2.0.13
CredHub	2.9.9*
CredHub Maestro	8.0.1
Syslog	11.7.7
Windows Syslog	1.1.4
UAA	74.5.31*
BPM	1.1.15
Networking	9
OS Conf	22.1.2
AWS CPI	92
Azure CPI	37.6.0
Google CPI	41.0.0
OpenStack CPI	46
vSphere CPI	72
BOSH CLI	6.4.11*
Credhub CLI	2.9.1
BBR CLI	1.9.21*
Telemetry	1.2.2*
* Components marked with an asterisk have been updated.

v2.10.25

Release Date: December 22, 2021

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Security Fix] Upgrades the included versions of CredHub and UAA to fix a potential Denial of Service vulnerability caused by Log4j2. (CVE-2021-45105)

Component	Version
Tanzu Operations Manager	2.10.25-build.362*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.192*
BBR SDK	1.18.29
BOSH Director	271.17.0
BOSH DNS	1.30.0
Metrics Server	0.1.1*
System Metrics	2.0.13
CredHub	2.9.8*
CredHub Maestro	8.0.1
Syslog	11.7.7
Windows Syslog	1.1.4
UAA	74.5.30*
BPM	1.1.15
Networking	9
OS Conf	22.1.2
AWS CPI	92*
Azure CPI	37.6.0
Google CPI	41.0.0
OpenStack CPI	46
vSphere CPI	72
BOSH CLI	6.4.8
Credhub CLI	2.9.1
BBR CLI	1.9.20
Telemetry	1.2.1
* Components marked with an asterisk have been updated.

v2.10.24

Release Date: December 16, 2021

Caution

VMware recommends upgrading to this Tanzu Operations Manager patch as soon as possible to address CVE-2021-44228. If you are unable to upgrade, you can mitigate this CVE manually. For more information, see Instructions to address CVE-2021-44228 in Tanzu Operations Manager in the Knowledge Base.
This vulnerability also affects TAS for VMs. VMware recommends upgrading to TAS for VMs v2.12.5 as soon as possible. For more information, see the v2.12.5 release notes.

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Security Fix] Fix remote code execution vulnerability related to Log4j (CVE-2021-44228)

Component	Version
Tanzu Operations Manager	2.10.24-build.360*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.183
BBR SDK	1.18.29
BOSH Director	271.17.0
BOSH DNS	1.30.0
Metrics Server	0.1.0
System Metrics	2.0.13
CredHub	2.9.7*
CredHub Maestro	8.0.1
Syslog	11.7.7
Windows Syslog	1.1.4
UAA	74.5.29*
BPM	1.1.15
Networking	9
OS Conf	22.1.2
AWS CPI	91
Azure CPI	37.6.0
Google CPI	41.0.0
OpenStack CPI	46
vSphere CPI	72
BOSH CLI	6.4.8
Credhub CLI	2.9.1
BBR CLI	1.9.20
Telemetry	1.2.1
* Components marked with an asterisk have been updated.

v2.10.23

Release Date: December 12, 2021

Caution This patch upgrades components using Log4j to version 2.15 in order to mitigate CVE-2021-44228. VMware recommends upgrading to Tanzu Operations Manager v2.10.24, which uses Log4j version 2.16 instead. If you are unable to upgrade, you can mitigate this CVE manually. See Instructions to address CVE-2021-44228 in Tanzu Operations Manager.

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Incomplete Security Fix] Fix remote code execution vulnerability related to Log4j (CVE-2021-44228)
[Feature] Allow configuration of OM UAA’s password policies
[Feature] Allow operators to require IMDSv2 in AWS. For more information, see Enable IMDSv2 in Tanzu Operations Manager.

Component	Version
Tanzu Operations Manager	2.10.23-build.356*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.183*
BBR SDK	1.18.29*
BOSH Director	271.17.0
BOSH DNS	1.30.0*
Metrics Server	0.1.0
System Metrics	2.0.13*
CredHub	2.9.6*
CredHub Maestro	8.0.1
Syslog	11.7.7*
Windows Syslog	1.1.4*
UAA	74.5.28*
BPM	1.1.15
Networking	9
OS Conf	22.1.2
AWS CPI	91
Azure CPI	37.6.0
Google CPI	41.0.0
OpenStack CPI	46
vSphere CPI	72
BOSH CLI	6.4.8
Credhub CLI	2.9.1
BBR CLI	1.9.20*
Telemetry	1.2.1
* Components marked with an asterisk have been updated.

v2.10.22

Release Date: November 29, 2021

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Feature] The IMDS Hop Limit can now be configured on AWS. See the metadata_options property on the bosh.io AWS CPI documentation
[Bug Fix] Tanzu Operations Manager does not re-apply Identification Tags to VMs on every deploy. This issue was introduced in v2.10.20. The tags must be applied one final time for any VMs deployed using Tanzu Operations Manager v2.10.20 or v2.10.21.
[Bug Fix] Tanzu Operations Manager scales the maximum database connections on the BOSH Director database with the number of BOSH workers specified. Previously, scaling the workers could lead to running out of database connections.

Component	Version
Tanzu Operations Manager	2.10.22-build.344*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.176*
BBR SDK	1.18.28*
BOSH Director	271.17.0*
BOSH DNS	1.29.0
Metrics Server	0.1.0
System Metrics	2.0.12
CredHub	2.9.5
CredHub Maestro	8.0.1
Syslog	11.7.6
Windows Syslog	1.1.3
UAA	74.5.26
BPM	1.1.15
Networking	9
OS Conf	22.1.2
AWS CPI	91*
Azure CPI	37.6.0
Google CPI	41.0.0
OpenStack CPI	46
vSphere CPI	72*
BOSH CLI	6.4.8*
Credhub CLI	2.9.1
BBR CLI	1.9.19*
Telemetry	1.2.1*
* Components marked with an asterisk have been updated.

v2.10.21

Release Date: November 10, 2021

[Known Issue] This version is incompatible with vSphere v8.0.3 and later. Upgrade to at least Tanzu Operations Manager v2.10.63 for compatibility with vSphere v8.0.3 and later
[Feature] Operators can clear the default trusted certificates store on BOSH-deployed VMs.
[Feature] Operators can specify trusted certificates for use with S3-compatible blobstores.
[Feature] Introduces compatibility with products using tile metadata version 2.10.1.
[Bug Fix] Root disks in AWS respect the AWS EBS disk type setting.
[Known Issue] If you use Identification Tags, Tanzu Operations Manager reapplies the tags on every deploy. This does not cause the VMs to be restarted, but causes slow deployments.

Component	Version
Tanzu Operations Manager	2.10.21-build.330*
Stemcell (BOSH Director and Tanzu Operations Manager)	621.171
BBR SDK	1.18.26*
BOSH Director	271.15.0*
BOSH DNS	1.29.0
Metrics Server	0.1.0
System Metrics	2.0.12
CredHub	2.9.5
CredHub Maestro	8.0.1
Syslog	11.7.6*
Windows Syslog	1.1.3
UAA	74.5.26
BPM	1.1.15
Networking	9
OS Conf	22.1.2
AWS CPI	90*
Azure CPI	37.6.0
Google CPI	41.0.0*
OpenStack CPI	46
vSphere CPI	70
BOSH CLI	6.4.7
Credhub CLI	2.9.1
BBR CLI	1.9.17
Telemetry	1.2.0
* Components marked with an asterisk have been updated.

How to upgrade

To upgrade to Tanzu Operations Manager v2.10, see Upgrading Tanzu Operations Manager.

New features in Tanzu Operations Manager v2.10

Tanzu Operations Manager v2.10 includes the following major features:

Long-term support for Tanzu Operations Manager v2.10

Tanzu Operations Manager v2.10 is a long-term support (LTS) version of Tanzu Operations Manager. Tanzu Operations Manager v2.10 is to be supported through March 2025.

Over the lifecycle of Tanzu Operations Manager v2.10, VMware releases security patches that occasionally include feature improvements and maintenance updates.

Versions and filenames for Tanzu Operations Manager v2.10 releases on Broadcom Support portal include a +LTS-T suffix to indicate its LTS status. If you use automation scripts to deploy Tanzu Operations Manager, you might need to update them to include this suffix in your version and filename patterns. For example, the filename for the Azure version of Tanzu Operations Manager v2.10.4 is ops-manager-azure-3.0.4-build.227.yml, while the filename for the Azure version of Tanzu Operations Manager v2.10.5+LTS-T is ops-manager-azure-3.0.5+LTS-T.yml.

You can jump upgrade directly from previous versions of Tanzu Operations Manager to Tanzu Operations Manager v2.10. For more information, see Jump Upgrading to Tanzu Operations Manager v2.10.

Jammy Jellyfish stemcell support

Tanzu Operations Manager v2.10 uses Jammy Jellyfish, a Jammy stemcell based on Ubuntu 22.04.

The previously-supported Xenial Xerus stemcells were based on Ubuntu 16.04. These stemcells are due to reach end of general support (EOGS) and stop receiving security updates in April 2024. You can still use Xenial stemcells with tiles installed on Tanzu Operations Manager v2.10 until they reach EOGS.

Tanzu Operations Manager v2.10 allows tile authors to upgrade from Xenial stemcells to Jammy Jellyfish stemcells. This ensures that Tanzu Operations Manager v2.10 users can maintain access to secure stemcells.

Review Pending Changes page includes applied runtime configurations

In the Tanzu Operations Manager Installation Dashboard, the Review Pending Changes page for a tile includes a list of runtime configurations to be applied to that tile.

Tiles can use runtime configurations to influence the behavior of VMs that other tiles deploy. For example, when you activate the Enable additional System Metrics check box in the Director Config pane of the BOSH Director tile, the BOSH Director applies a runtime configuration to the VMs that VMware Tanzu Application Service for VMs (TAS for VMs) deploys. This configuration allows the BOSH Director to collect detailed metrics from VMs managed by TAS for VMs.

Changes to a runtime configuration can cause longer deployment times when you redeploy a tile. By reviewing the runtime configurations that are to be applied to tiles during redeployment, you can determine in advance which tiles might take a longer time to redeploy.

AWS deployments use 5th-generation AMD instances

Tanzu Operations Manager v2.10 uses 5th-generation AMD instances for AWS deployments. 5th-generation AMD instances have better performance characteristics and are more cost-effective than previous instance types. Both Jammy Jellyfish stemcells and Xenial stemcells support 5th-generation AMD instances.

New installations of Tanzu Operations Manager v2.10 use 5th-generation AMD instances by default. If you upgrade to Tanzu Operations Manager v2.10 from Tanzu Operations Manager v2.10 or earlier, you can either keep your current VM types or convert your VMs to 5th-generation AMD instances in the AWS Config pane of the BOSH Director tile. For more information, see Step 2: AWS Config Page in Configuring BOSH Director on AWS.

If you are using a custom instance type catalog, the VM types that you can use do not change.

The 5th-generation AMD instances are closer to the recommended default size for tiles. Because of this, product tiles in Tanzu Operations Manager select VM types that are smaller than the previous sizes for their jobs. For example, Diego Cells select an instance type with 2 CPUs and 16 GB of RAM. When you convert your VMs to 5th-generation AMD instances, you might need to either scale up the number of Diego Cell instances or change the selected VM type of certain jobs to a larger VM type. You can configure both the number of instances and VM type of each job in the Resource Config pane of a product tile.

For more information about:

AWS Linux instance types, see the AWS documentation
AWS Windows instance types, see the AWS documentation.

AWS deployments use gp3 disks

Tanzu Operations Manager v2.10 uses gp3 disks for AWS deployments. The gp3 disks have better performance characteristics and are more cost-effective than gp2 disks.

New installations of Tanzu Operations Manager v2.10 use gp3 disks by default. If you upgrade to Tanzu Operations Manager v2.10 from Tanzu Operations Manager v2.10 or earlier, you can either keep your current disk types or convert your disks to gp3 in the AWS Config pane of the BOSH Director tile. For more information, see Step 2: AWS Config Page in Configuring BOSH Director on AWS.

GCP deployments use E2 Series instances

Tanzu Operations Manager v2.10 uses E2 Series instances for GCP deployments. E2 Series instances have better performance characteristics and are more cost-effective than previous instance types. Both Jammy Jellyfish stemcells and Xenial stemcells support E2 Series instances.

New installations of Tanzu Operations Manager v2.10 use E2 Series instances by default. If you upgrade to Tanzu Operations Manager v2.10 from Tanzu Operations Manager v2.10 or earlier, you can either keep your current VM types or convert your VMs to E2 Series instances in the Google Config pane of the BOSH Director tile. For more information, see Step 2: Configure GCP Tile in Configuring BOSH Director on GCP.

If you are using a custom instance type catalog, the VM types you can use do not change.

The E2 Series instances are closer to the recommended default size for tiles. Because of this, product tiles in Tanzu Operations Manager select VM types that are smaller than the previous sizes for their jobs. For example, Diego Cells select an instance type with 2 CPUs and 16 GB of RAM. When you convert your VMs to E2 Series instances, you might need to either scale up the number of Diego Cell instances or change the selected VM type of certain jobs to a larger VM type. You can configure both the number of instances and VM type of each job in the Resource Config pane of a product tile.

For more information about GCP instance types, see the GCP documentation.

GCP deployments allow machine types in custom VM type catalogs

Tanzu Operations Manager v2.10 allows you to include machine types in your custom VM type catalogs for GCP deployments. When you configure VMs to use a specific machine type, the BOSH Director creates VMs using that machine type, rather than creating a custom VM that matches the CPU and RAM specifications. This allows you to use specialized VM types that are not in the default Tanzu Operations Manager VM type catalog.

If you do not specify a machine type as a custom VM type, the BOSH Director continues to create VMs that match the CPU and RAM specifications.

For more information about custom VM type catalogs for GCP deployments, see the Tanzu Operations Manager API documentation.

Rotate non-configurable leaf certificates during redeployment

In Tanzu Operations Manager v2.10, the Review Pending Changes page in the Tanzu Operations Manager Installation Dashboard includes the Rotate All Non-Configurable Leaf Certificates check box. Selecting this check box allows you to rotate non-configurable leaf certificates when you redeploy your tiles through the Tanzu Operations Manager Installation Dashboard, instead of having to rotate them through the Tanzu Operations Manager API.

For more information about rotating non-configurable leaf certificates through the Tanzu Operations Manager Installation Dashboard, see Review Pending Changes Page in Reviewing Pending Product Changes.

Certificates page displays rotation status for each certificate

In Tanzu Operations Manager 3.0.28+LTS-T, the Certificates page has been redesigned to include the certificate rotation status for each certificate. This information indicates the next action necessary to rotate each certificate. It also links to a new page that lists the deployments associated with a certificate and a propagation status that indicates whether the certificate needs to be deployed.

In addition, leaf certificates are now nested under the CA certificate that signs them. This makes it easier to tell at a glance what a rotation procedure will affect.

For more information, see the Certificates page section of the Using the Tanzu Operations Manager interface page.

Breaking changes in Tanzu Operations Manager v2.10

Tanzu Operations Manager v2.10 includes the following breaking changes:

BOSH System Metrics Server is removed

The BOSH System Metrics Server is removed from Tanzu Operations Manager v2.10.

If you upgrade to Tanzu Operations Manager v2.10 from Tanzu Operations Manager v2.10 or earlier, and you previously configured the BOSH Director to deploy the BOSH System Metrics Server, you must make the following changes before upgrading:

un-select the Enable deprecated BOSH System Metrics Server check box, and
select the Enable additional System Metrics check box in the Director Config pane of the BOSH Director tile

In Tanzu Operations Manager v2.10, the Enable BOSH System Metrics Server check box is removed from the BOSH Director tile.

Override runtime config properties

In Tanzu Operations Manager v2.10, you can override the runtime config properties for BOSH DNS and System Metrics.

You must be in Advanced Mode to use this feature.

You use the /api/v0/staged/director/runtime_configs/overrides endpoint in the runtime configs to override properties:

Runtime Config Names	Add-on Names
`ops_manager_dns_runtime`	`bosh_dns` `bosh_dns_windows`
`ops_manager_system_metrics_runtime`	`system_metrics_agent` `system_metrics_agent_windows`

For example, although you cannot change the log level for the BOSH DNS logs through the Tanzu Operations Manager UI, you can change the log level using the /api/v0/staged/director/runtime_configs/overrides endpoint. Increase the log level to DEBUG for more information or decrease the level for less verbose logs.

For more information, see:

View certificates in the Tanzu Operations Manager UI

The Tanzu Operations Manager UI introduces a new page called Certificates. This page displays all the certificates listed by the /api/v0/deployed/certificates endpoint, as well as the following details:

Certificate name: The name of the certificate.
Product GUID: The product for which the certificate is issued, such as BOSH or MySQL.
Location: Whether the certificate is stored in Tanzu Operations Manager or CredHub.
Type: Whether the certificate is a leaf certificate or a certificate authority (CA).
Configurable: Whether the certificate is configurable.
Valid until: The expiration date of the certificate and the number of days before expiration.

For more information, see Using the Tanzu Operations Manager Interface.

CredHub Maestro runs safety checks during certificate rotation

CredHub Maestro v8.0, which is included in Tanzu Operations Manager v2.10, performs basic safety checks when rotating certificates to prevent unsafe operations.

The Tanzu Operations Manager API invokes the CredHub Maestro CLI when rotating certificates. If a Tanzu Operations Manager API certificate rotation command is out-of-order or unsafe, CredHub Maestro stops the command and returns one or more safety violation errors.

To observe this feature in Tanzu Operations Manager v2.10 certificate rotation API calls, you must not have any version of VMware Tanzu Kubernetes Grid Integrated Edition (TKGI) installed. If you are using an earlier version or have any version of TKGI installed, Tanzu Operations Manager still runs safety checks, but they are not as comprehensive as CredHub Maestro safety checks.

For more information, see Troubleshooting CredHub Maestro Safety Violations During Certificate Rotation, Overview of Certificate Rotation, and Advanced Certificate Rotation with CredHub Maestro.

Override duration for certificates

Tanzu Operations Manager v2.10.19 introduces the ability to override duration for both CA and leaf certificates.

By default, Tanzu Operations Manager and CredHub generate certificates using the duration requested by the product that creates the certificate. This duration can vary from product to product. In Tanzu Operations Manager v2.10.19 and later, you can set values to override the duration for CA and leaf certificates. This gives the you the option to increase certificate durations to reduce the frequency of required certificate rotations.

If you enable this feature and you configure a duration that is shorter than the minimum set for the product, the certificate is generated with the duration you set instead. If you configure a duration that is longer than the minimum setting, the certificate is generated with the longer duration.

After enabling the duration override feature, you must take additional steps to apply the setting to existing certificates, as well as any new certificates generated by CredHub. For more information, see Overriding Duration for Certificates.

IMDSv2 support for AWS

In Tanzu Operations Manager v2.10.23 and later, you can require that IMDSv2 is used on all VMs deployed in AWS. This security feature requires users to send a signed token header with any request to the instance metadata endpoint provided on AWS VMs.

After enabling IMDSv2, you must re-create all VMs for the setting to take effect. For more information, see Enabling IMDSv2 in Tanzu Operations Manager.

Breaking changes in Tanzu Operations Manager v2.10

Tanzu Operations Manager v2.10 includes the following breaking changes:

BOSH DNS certificates regeneration

In Tanzu Operations Manager v2.10.9 and later, BOSH DNS leaf certificates are automatically regenerated to include the SAN field. On upgrade, you must redeploy all tiles and upgrade all service instances to distribute the BOSH DNS leaf certificates to all VMs.

To allow DNS certificate regeneration and avoid communication issues between system components:

On upgrade, run the Upgrade service instances errand on all service tiles.
Apply Changes to all tiles.

If you do not redeploy all tiles and upgrade all service instances, you can experience downtime.

CredHub Maestro removes the “update-transitional latest” command

Tanzu Operations Manager v2.10 includes CredHub Maestro v8.0. In this version of CredHub Maestro, the maestro update-transitional latest command is removed.

If you have scripts that rely on the maestro update-transitional latest command, remove references to the command before you upgrade to Tanzu Operations Manager v2.10.

In CredHub Maestro v8.0, you run maestro regenerate ca to regenerate a certificate authority (CA) and mark the latest version of the CA as transitional. This command performs both actions, while previous versions of CredHub Maestro use a separate command for each task.

For information about rotating CAs and certificates using CredHub Maestro, see Advanced Certificate Rotation with CredHub Maestro.

Known issues

Tanzu Operations Manager v2.10 includes the following known issues:

Tanzu Operations Manager AMI does not appear in search or light stemcell fails to deploy on AWS

AWS automatically deprecates public AMIs that are older than 2 years. This includes the AMIs associated with each release of Tanzu Operations Manager on AWS, as well as the AMIs associated with AWS light stemcells. For more information, see Amazon EC2 now reduces visibility of public Amazon Machine Images (AMIs) older than two years.

Deprecated AMIs no longer appear when searching for the Tanzu Operations Manager AMI in AWS. However, it is still possible to launch the Tanzu Operations Manager AMI using either the aws CLI or Platform Automation.

Users that attempt to deploy a VM using a deprecated light stemcell may receive an error similar to the following:

Task 10 | 23:24:16 | Update stemcell: Uploading stemcell bosh-aws-xen-hvm-ubuntu-xenial-go_agent/621.125 to the cloud (cpi: 543ec2c1aa4f72578fa3) (00:00:02)
                   L Error: CPI error 'Bosh::Clouds::CloudError' with message 'Stemcell does not contain an AMI in region us-west-1' in 'create_stemcell' CPI method (CPI request ID: 'cpi-457127')

This error was fixed in AWS CPI v101 and above, but older versions of Tanzu Operations Manager may not include that version of the CPI.

We recommend upgrading to the latest patch of Tanzu Operations Manager as well as the latest version of each stemcell, rather than continuing to use older versions that are associated with deprecated AMIs.

If you are unable to upgrade, follow the steps in AWS AMIs Stemcells deprecate after 2 years, ERROR Stemcell does not contain an AMI.

BOSH Director disk is re-created unnecessarily

Due to an issue with the BOSH CLI, the BOSH Director disk can be re-created even when the size and properties for it have not changed. This issue does not cause data loss, but can slow the deployment time while the data migrates from the old disk to the new disk.

This issue is resolved in Tanzu Operations Manager v2.10.18.

Metrics Server configuration causes BOSH Director deployment to fail during upgrade

During an upgrade to Tanzu Operations Manager v2.10, the BOSH Director deployment and subsequent upgrade might fail due to the default enablement of the metrics-server job. An error similar to the following appears in the metrics-server logs.

Required property 'networks' was not specified in object ({"vm_extensions"=>[{"cloud_properties"=>{"vmx_options"=>{"disk.enableUUID"=>"1"}}, "name"=>"disk_enable_uuid"}, {"cloud_properties"=>{"upgrade_hw_version"=>true}, "name"=>"set_version_hardware"}]}) (Bosh::Director::ValidationMissingField)

The cause of this upgrade failure is the presence of a tile, such as any version of Tanzu Kubernetes Grid Integrated Edition (TKGI), that is incompatible with Tanzu Operations Manager v2.10 due to its default metrics-server enablement.

To workaround this issue, see the BOSH Director fails with non-running job during upgrade to Tanzu Operations Manager 2.10 Knowledge Base article.

This issue is resolved in Tanzu Operations Manager v2.10.1.

Increased logging slows platform functions

If your Loggregrator does not have sufficient memory to handle the increased system metrics emitted in Tanzu Operations Manager v2.8 and later, you may experience dropped logs and slow consumers. This can impact logging and metrics platform functions.

To solve this issue, do the following:

If you have TAS for VMs, scale Loggregrator to handle the increased volume. See Scaling TAS for VMs.
In Tanzu Operations Manager v2.9 or later, you can deactivate these system metrics if you do not need them. To do this, deactivate Enable additional System Metrics in the Director Config pane of the BOSH Director tile. For a list of metrics collected, see System Metrics Agent in GitHub.

For more information about this feature, see All Platform VMs Emit System Metrics.

Reset manually-set certificates in CredHub before rotating certificates with the Tanzu Operations Manager API

If you have manually set any certificates in CredHub on Tanzu Operations Manager v2.6 or earlier, you need to reset those certificates before using the Tanzu Operations Manager API to rotate CredHub certificates.

Resetting these certificates is not a required condition for the Tanzu Operations Manager v2.10 upgrade. You can reset them either before or after the upgrade.

To reset a certificate in CredHub, see Reviewing and Resetting Manually Set Certificates in CredHub.

For more information about rotating certificates using the Tanzu Operations Manager API, see Overview of Certificate Rotation. For more information about the certificate_authorities/active/regenerate endpoint, see Rotate Certificates in the Tanzu Operations Manager API documentation.

Maestro garbage collection error

When running maestro garbage collect, you might see an error like this:

$ maestro garbage-collect ca --all
not_deleted:
    - name: /services/tls_ca
      certificate_id: aaaaaaaa-bbbb-cccc-1111-aaaaaaaaaaa
      version_ids:
        - aaaaaaa-11111-22222-33333-bbbbbbbbbb
error: could not delete some certificate versions

You can ignore this error. The certificate is not deleted.

BOSH inappropriately reuses compiled packages

The BOSH Director attempts to match packages from an uploaded release to “similar” packages that have been previously uploaded. The match is made using the fingerprint on the uncompiled package contents. However, recently the packages in golang-release were modified to be templated. This led to packages that shared the same fingerprint to be used interchangeably even though they represented different versions of Golang. Reusing these packages could cause Apply Changes to fail if a tile expected one version of Golang but got another.

This issue is resolved in Tanzu Operations Manager v2.10.57.