v0.24.0

Manifest changes

• Use IaaS-agnostic vm_types. For environments created using bbl, make sure you've run bbl up with a version >= 3.2. If you're using the bosh-lite cloud-config in this directory, you need to re-upload the cloud-config

Ops-files

New ops-files

• Experimental ops-files for Bits Service. The following experimental ops-files have been added for integrating the upcoming Bits Service into the API vm:
  • operations/experimental/bits-service.yml
  • operations/experimental/bits-service-local.yml
  • operations/experimental/bits-service-s3.yml
  • operations/experimental/bits-service.yml-webdav

Release and Stemcell Updates

Release	New Version	Old Version
cf-networking	1.6.0	1.5.0
cflinuxfs2	1.151.0	1.150.0
java-buildpack	4.5	3.19
staticfile-buildpack	1.4.14	1.4.13
windows2012R2	1200.3	1200.2
postgres	20	16

v0.23.0

Manifest changes

• Loggregator v2 API enabled on by default in cells, BBS, and auctioneers.
• Split out cf-networking policy server into separate jobs for external and internal requests
• Updated gorouters tls_pem property to new format:

  tls_pem:
  - cert_chain: ...
    private_key: ...
  

• UAA and CC urls removed from log-api configuration

Ops-files

New Ops-files

• legacy/old-droplet-mitigation.yml - Adds a post-setup hook that "cleans" old droplets to mitigate an old buildpack that leaked sensitive information.

Ops-file updates

• windows-cell.yml uses the Loggregator v2 API.

Release and Stemcell Updates

Release	New Version	Old Version
cflinuxfs2	1.150.0	1.148.0
cf-smoke-tests	39	38
cf-networking	1.5.0	1.4.0
dotnet-core-buildpack	1.0.24	1.0.23
diego	1.25.2	1.25.1
loggregator	93	92
staticfile-buildpack	1.4.13	1.4.12
ruby-buildpack	1.6.47	1.6.46
routing	0.162.0	0.161.0
python-buildpack	1.5.24	1.5.22
php-buildpack	4.3.40	4.3.39
nodejs-buildpack	1.6.6	1.6.4
postgres	20	18
garden-windows	0.8.0	0.7.0

0.22.0

Ops-files

Updates to Ops-files

• Bug fix: scale-to-one-az.yml and bosh-lite.yml properly scale down cc-clock job to 1 instance
• Bug fix: disable-router-tls-termination.yml deletes the new tls_pem property. It also clears out the router_ssl and router_ca variables so that bosh int --var-errs-unused succeeds.
• enable-locket.yml, enable-locket-postgres.yml, and use-external-locket-db.yml provide error messages so that users can understand the order necessary to apply them.
• use-compiled-releases.yml updated to include new stemcells section. This update requires use of bosh CLI 2.0.30 or greater. This should fix a bug whereby updates to stemcell versions were not causing the bosh CLI to upload the newly compiled releases to the director.

Release and Stemcell Updates

Release	New Version	Old Version
capi	1.40.0	1.39.0
diego	1.25.1	1.25.0
consul	173	171
cflinuxfs2	1.148.0	1.146.0
cf-smoke-tests	38	37
garden-runc	1.9.2	1.9.0
routing	0.161.0	0.160.0
ubuntu-trusty	3445.2	3421.11

0.21.0

Manifest changes

• Added healthcheck for Cloud Controller
• Updated format for providing TLS certificates to router. Specifically, router_ssl.private_key and router_ssl.certificate have been replaced with tls_pem.
• cc-clock job is deployed with two instances.

Ops-files

New Ops-files

• operations/rename-deployment.yml allows operators to rename the their deployment. That includes updates to the metron deployment name, which was originally submitted by @jsievers from SAP. Thanks for the help!
• operations/rename-network.yml allows operators to choose a different network name for all jobs in the manifest.
• operations/enable-cc-rate-limiting.yml configured Cloud Controllers to rate limit requests. The ops-file requires operators to provide variables cc_rate_limiter_general_limit and cc_rate_limit_unauthenticated_limit.
• operations/experimental/skip-consul-locks.yml configures bbs, auctioneer, and tps to skip acquiring locks via consul, so that they can be configured to use locket instead. This is still an experimental feature.

Updated Ops-files

• operations/experimental/use-grootfs.yml has been updated to enable graph cleanup immediately.

Release and Stemcell Updates

Release	New Version	Old Version
capi	1.39.0	1.38.0
cf-smoke-tests	37	36
cf-networking	1.4.0	1.3.4
diego	1.25.0	1.24.0
routing	0.160.0	0.159.0
statsd-injector	1.0.30	1.0.29
windows2012R2	1200.2	1200.0

0.20.0

Ops-files

New Ops-files

• Experimental: enable-iptables-logger.yml enables the iptables logger provided by cf-networking-release.

Release	New Version	Old Version
cflinuxfs2	1.146.0	1.145.0
diego	1.24.0	1.23.2

0.19.0

Manifest changes

• Configures loggregator to use UAA's internal route instead of it's external route.
• Removes extraneous srv_api_uri from syslog drain binder configuration

Ops-files

Ops-file updates

• Experimental ops-files for enabling locket have been renamed to match naming conventions.
• Experimental ops-file enable-loggregator-v2-diego.yml uses the v2 loggregator API on BBS and Auctioneer jobs
• Experimental skip-consul-cell-registrations.yml configures BBS to ignore cell registration via consul.

Release and stemcell updates

Release	New Version	Old Version
capi	1.38.0	1.36.0
binary-buildpack	1.0.14	1.0.13
go-buildpack	1.8.6	1.8.5
php-buildpack	4.3.39	4.3.38
staticfile-buildpack	1.4.12	1.4.11
ruby-buildpack	1.6.46	1.6.45

0.18.0

Ops files

New Ops files

• Experimental ops-files. These features are still being vetted; include them at your own risk.
  • secure-service-credentials.yml uses CredHub for securing service credentials for apps

Release and Stemcell Updates

Release	New Version	Old Version
cf-networking	1.3.4	1.3.0
cflinuxfs2	1.145.0	1.141.0
loggregator	92	91
uaa	45	44
windows2012R2	1200.0	1089.0

0.17.0

Manifest changes

• log-api is configured to use mutual TLS with Cloud Controller

Release and Stemcell Updates

Release	New Version	Old Version
cf-networking	1.3.0	1.2.0
dotnet-core-buildpack	1.0.23	1.0.22
diego	1.23.2	1.23.1
nodejs-buildpack	1.6.4	1.6.3
python-buildpack	1.5.22	1.5.20
ruby-buildpack	1.6.45	1.6.44
hwc-buildpack	2.3.8	2.3.6

0.16.0

Manifest Changes

• Remove superfluous ephemeral disk VM extensions, as 10GB is the bbl default.

Ops-files

Ops-file updates

• operations/community/use-haproxy.yml uses the updated cf_admin_password variable.

Relase and Stemcell Updates

Release	New Version	Old Version
capi	1.36.0	1.35.0
cflinuxfs2	1.141.0	1.139.0
diego	1.23.1	1.22.0
java-buildpack	3.19	3.18
uaa	44	41
statsd-injector	1.0.29	1.0.28
garden-windows	0.7.0	0.6.0
hwc-buildpack	2.3.6	2.3.4

0.15.0

Release and Stemcell Updates

Release	New Version	Old Version
cflinuxfs2	1.139.0	1.138.0
nodejs-buildpack	1.6.3	1.6.2
nats	22	21
garden-windows	0.6.0	0.5.0