Skip to content
This repository has been archived by the owner on Jan 21, 2022. It is now read-only.

Releases: cloudfoundry-attic/cf-release

v277

13 Oct 17:57
v277
2ac35e8
Compare
Choose a tag to compare
v277

Contents

Notices

Job Spec Changes

  • consul_agent now supports the optional confab.timeout_in_seconds. This is to allow larger deployments to give Consul agent more time to boot, which can take especially long during a gossip encryption key rotation.

Security Notices

Affecting v277

  • None

Resolved in v277

  • Not yet updated

Subcomponent Updates

Compatible Releases and Stemcells

Assets 2
Loading

v276

04 Oct 21:03
v276
dcf0ccd
Compare
Choose a tag to compare
v276

Contents

Notices

  • Any issues with bosh-lite certificates from CF 274 and 275 should be resolved with this release.

Job Spec Changes

  • None

Security Notices

Affecting v276

  • None

Resolved in v276

  • None

Subcomponent Updates

Compatible Releases and Stemcells

Assets 2
Loading

v275

26 Sep 23:48
v275
4c1c236
Compare
Choose a tag to compare
v275

Contents

Notices

  • This release removes cf-syslog-drain-release and deploys dopplers to static IPs. This addresses the issue with CF 274 that moved us not to recommend it.
  • bosh-lite will likely have issues with this release. A fix will be included in CF 276.
  • Loggregator Metron Compatibility UDP from Metron to Doppler is removed in this release. In order to work with this release services must upgrade to a Metron of Loggregator v72 or greater. (Copied from CF 274)

Job Spec Changes

  • properties.uaa.clients.cc_service_key_client.secret: This release introduces a new UAA client. Operators must provide a client secret. Any sufficiently strong password-like string will suffice. (Copied from CF 274)
  • properties.uaa.clients.cc-service-dashboards.secret: capi-release 1.42.0 includes a regression that marked the previously optional properties.uaa.clients.cc-service-dashboards.secret property as required. Temporarily set this property to any strong password if you haven't already provided a value. The next capi-release will again mark this property as optional. (Copied from CF 274)

Security Notices

Affecting v275

  • None

Resolved in v275

  • Not yet updated

Subcomponent Updates

Compatible Releases and Stemcells

Assets 2
Loading

v274

25 Sep 21:49
v274
88bb92f
Compare
Choose a tag to compare
v274 Pre-release
Pre-release

UPDATE: Due to issues with putting dopplers on static IPs, we're not recommending this release for production use. Please use CF 275 instead.

Contents

Notices

  • cf-syslog-drain-release: This release includes the new cf-syslog-drain-release, which replaces the syslog drain functionality from Loggregator. There are two important notes for operators:
    • This update requires that the doppler jobs be deployed to static IPs. If you're using manifest generation provided by cf-release, the template should automatically help with this change.
    • The components use mutual TLS, so operators will need to generate keys and certificates. Documentation for generating certificates can be found here.
  • Loggregator Metron Compatibility UDP from Metron to Doppler is removed in this release. In order to work with this release services must upgrade to a Metron of Loggregator v72 or greater.

Job Spec Changes

  • properties.uaa.clients.cc_service_key_client.secret: This release introduces a new UAA client. Operators must provide a client secret. Any sufficiently strong password-like string will suffice.
  • properties.uaa.clients.cc-service-dashboards.secret: capi-release 1.42.0 includes a regression that marked the previously optional properties.uaa.clients.cc-service-dashboards.secret property as required. Temporarily set this property to any strong password if you haven't already provided a value. The next capi-release will again mark this property as optional.

Security Notices

Affecting v274

  • None

Resolved in v274

  • Not yet updated

Subcomponent Updates

Compatible Releases and Stemcells

Assets 2
Loading

v273

25 Sep 19:23
v273
0d3dff9
Compare
Choose a tag to compare
v273

Contents

Notices

  • cf-networking job name change: The job called silk-cni has been renamed to cni. Operators that include cf-networking in their Diego deployment will need to update their manifest generation stubs to reflect this change: 
    cf_networking_overrides:
  ...

  driver_templates:
  ...

- - name: silk-cni
+ - name: cni
    release: cf-networking
    Additionally, default values have been updated:
    • The value for cf_networking.garden_external_networker.cni_plugin_dir now defaults to /var/vcap/packages/cni/bin
    • The value for cf_networking.garden_external_networker.cni_config_dir now defaults to /var/vcap/jobs/cni/config/cni
  • The postgres job will upgrade PostgreSQL to version 9.6.4. This drops support for upgrading from PostgreSQL 9.4.9. Only upgrades from PostgreSQL 9.6.2 (since cf v256) and PostgreSQL 9.6.3 (since cf v260) are supported. Before deploying, please review considerations at postgres-release v20.
  • Container Metrics Issue - This release includes a bug in go-loggregator which causes container metrics to report 0 for multiple instances of of an app. This issue is addressed in cf-release 274

Job Spec Changes

  • None

Security Notices

Affecting v273

  • None

Resolved in v273

  • None

Subcomponent Updates

Compatible Releases and Stemcells

Assets 2
Loading

v272

24 Aug 22:28
v272
32b488d
Compare
Choose a tag to compare
v272

Contents

Notices

  • syslog-forwarder runtime-config: This version of cf-release introduces a runtime-config in the runtime-configs directory for adding a syslog-forwarder job from syslog-release. You can find more information about applying the runtime-config in the README of the runtime-configs directory.

  • For operators using syslog functionality in the metron agent: The plan is to deprecate metron's syslog functionality in CF 275, so we advise the use of this runtime-config for managing platform syslog drains.

Job Spec Changes

  • Add uaa.internal_url with a value of https://uaa.service.cf.internal:8443
  • The property cc.srv_api_url has been removed and replaced with a new secure interface
  • This uses new properties for cc.internal_service_hostname, cc.tls_port, cc.mutual_tls.ca_cert, loggregator.tls.cc_trafficcontroller.cert and loggregator.tls.cc_trafficcontroller.key
  • See Loggregator Traffic Controller spec for full change history.

Security Notices

Affecting v272

  • None

Resolved in v272

  • Not yet updated

Subcomponent Updates

Compatible Releases and Stemcells

Assets 2
Loading

v271

18 Aug 17:19
v271
b1c0ef2
Compare
Choose a tag to compare
v271

Contents

Notices

  • Not yet updated

Job Spec Changes

  • If you are using cf-networking release, there are mandatory manifest changes in v1.4.0. If you are using Diego manifest generation, you will need a Diego release > v1.24.0. The silk controller now provides a link for the silk daemon to configure the overlay network for cf-networking. The following examples show the changes to be applied to a stub file for bosh-lite manifest generation.
    Disambiguate the consumed link
    Disambiguate the link provider

Security Notices

Affecting v271

  • None

Resolved in v271

  • Not yet updated

Subcomponent Updates

Compatible Releases and Stemcells

Assets 2
Loading

v270

10 Aug 16:07
v270
eea95fc
Compare
Choose a tag to compare
v270

Contents

Notices

  • grootfs release v0.24.0 contains SHA2 hashes, and other releases will soon be following suit. Please be sure to use the latest bosh cli (gem or golang) to avoid deployment-time checksum errors.
    • Note that deploying grootfs release 0.24.0 using Concourse's bosh-deployment resource will result in checksum errors until the team has a chance to update their Docker image. The suggested workaround for this issue is to upload the grootfs release manually using the latest bosh cli.

Job Spec Changes

  • Loggregator requires new certificates. See Traffic Controller's job spec for specific property names.
  • To generate these certificates you can use the /loggregator/scripts/generate-loggregator-certs script with an existing loggregator ca.
  • The property cc.tls_port must be set to the port set by Cloud Controller

Security Notices

Affecting v270

  • None

Resolved in v270

Subcomponent Updates

Compatible Releases and Stemcells

Assets 2
Loading

v269

28 Jul 17:29
v269
b31611a
Compare
Choose a tag to compare
v269

Contents

Notices

  • Operators should begin migrating off of the legacy bridge components to enable secure communications between Cloud Controller and Diego. There will be a five release period to perform a migration that does not impact API availability. In release v274 we will enforce secure communication, and non-migrated environments will experience API downtime during deployment. See this document for a full list of changes and deployment guidelines.
  • Several Loggregator metric names were updated for consistency. See the Loggregator 91 release notes for details.

Job Spec Changes

  • None

Security Notices

Affecting v269

  • None

Resolved in v269

  • None

Subcomponent Updates

Compatible Releases and Stemcells

Assets 2
Loading

v268

18 Jul 17:04
v268
befcb8a
Compare
Choose a tag to compare
v268

Contents

Notices

  • Not yet updated

Job Spec Changes

  • Not yet updated

Security Notices

Affecting v268

  • None

Resolved in v268

  • Not yet updated

Subcomponent Updates

Compatible Releases and Stemcells

Assets 2
Loading