Releases · cloudfoundry/silk-release

31 Jan 15:26

tas-runtime-bot

v3.65.0

730c14b

3.65.0 Latest

Latest

3.65.0

Release Date: January 31, 2025

Changes

Bump dependancies
New feature: the overlay network (as defined in the silk-controller job as the "network" property) can now be an array of CIDR addresses instead of just one CIDR address. For backwards compatibility reasons providing a string of one CIDR is still an allowed format. See here for more info on this effort. Thanks @ameowlia ! 🎉

Bosh Job Spec changes:

diff --git a/jobs/silk-cni/spec b/jobs/silk-cni/spec
index 670763da..75936752 100644
--- a/jobs/silk-cni/spec
+++ b/jobs/silk-cni/spec
@@ -10,8 +10,6 @@ packages:
   - silk-cni
 
 consumes:
-- name: cf_network
-  type: cf_network
 - name: vpa
   type: policy-agent
 
@@ -31,7 +29,10 @@ provides:
 
 properties:
   no_masquerade_cidr_range:
-    description: "CIDR address block that should not be masqueraded.  Fallsback to cf_network.network link property if property is not provided."
+    description: |
+        When set, app traffic sent to this CIDR will not be masqueraded. If this
+        property is not set, then silk-cni will not masquerade traffic sent to the
+        overlay network, which allows container-to-container networking to work.
     default: ""
 
   mtu:
diff --git a/jobs/silk-controller/spec b/jobs/silk-controller/spec
index cc7529a8..cb66a1e8 100644
--- a/jobs/silk-controller/spec
+++ b/jobs/silk-controller/spec
@@ -29,8 +29,12 @@ provides:
 
 properties:
   network:
-    description: "CIDR address block for overlay network.  Subnets for each diego cell are allocated out of this network."
-    default: "10.255.0.0/16"
+    description: |
+      A single CIDR address block as a string, or an array of CIDR address
+      blocks for overlay network as an array of strings. Subnets for each diego
+      cell are allocated out of this network. The "subnet_prefix_length"
+      property must be smaller than the smallest CIDR address block.
+    default: ["10.255.0.0/16"]
 
   subnet_prefix_length:
     description: "Length, in bits, of the prefix for subnets allocated per Diego cell, e.g. '24' for a '/24' subnet."
diff --git a/jobs/silk-daemon/spec b/jobs/silk-daemon/spec
index e3786357..572b08c9 100644
--- a/jobs/silk-daemon/spec
+++ b/jobs/silk-daemon/spec
@@ -88,7 +88,13 @@ properties:
     default: false
 
   single_ip_only:
-    description: "When true, this VM will get assigned exactly one IP address on the Silk network.  Use this to connect this VM to the Silk network without acquiring a whole block of addresses (as would be required for a Diego Cell)."
+    description: |
+        When true, this VM will get assigned exactly one IP address on the Silk
+        network.  Use this to connect this VM to the Silk network without
+        acquiring a whole block of addresses (as would be required for a Diego
+        Cell). WARNING: Do not use single_ip_only mode when the overylay network has
+        more than one CIDR. The overlay network is set on the silk-controller
+        job via the "network" bosh property.
     default: false
 
   policy_server_url: