cloudfoundry/bosh stable-3262

v257

on GitHub

Known Issues:

• spec.networks.send(...) calls in ERB templates do not work due to Ruby 2.3 changes. Expect v257.1 with the fix shortly.

New Features:

• Track Director task permissions separately from deployment permissions
  • Allows users to view tasks for deleted deployments if authorized
• Support version.latest (e.g. 3232.latest) version scheme for releases and stemcells
• Added bosh delete vm <vm-cid> command to easily delete VMs from the IaaS and the Director
  • Mostly used during recovery and debugging
  • CPI can delete VMs even not managed by the Director
• Added director.enable_dedicated_status_worker property (default false) to reserve one workers for just bosh vms and bosh ssh tasks
• Added --max-in-flight and --canaries flags for bosh start/stop/restart/recreate commands
  • These overrides take precedence over the manifest configuration
  • Mostly used during recovery and debugging

Improvements:

• Enable v1 and v2 manifests on same Director
  • If manifest specifies networks key the Director will not use cloud config for that deployment
• Events can be filtered by time via --before and --after flags
• Keep track of exported compiled releases and clean them up via bosh cleanup command
• Fix bosh restore command to remove tables that dont exists in the restored backup
• Removed 128MB limit from /tmp in stemcells
  • /tmp is still mounted to the ephemeral disk
  • nodev, nosuid, noexec options are now set for /tmp
• Director now automatically reserves its own IP so that it's no longer necessary to place it in the reserved range
• Completed variety of CIS hardening stories for the stemcell
• Raise meaningful error if non-existent vm_extension is requested
• Keep track of resurrection status globally when it's set via bosh vm resurrection off command
  • When temporarily turned off no new resurrection tasks will be enqueued
• Make sure none of the IPv6 configurations are enabled in stemcells
• Removed rpcbind package on CentOS stemcells
• Small cosmetic adjustments to the deployment diff
• Set an upper limit to the watch_schedule wait times

Version bumps:

• Updated Director & Blobstore nginx to 1.11.1
• Updated Postrges to 9.4.8
• Updated s3cli with S3 server side encryption configurations

Dev:

• Bumped bundler
• Switch to using JSON instead of Yajl for stricter JSON validations

This release includes 3262 stemcell series.