Highlights

• Audit events added for organization creation, update, and delete

CC API Version: 2.76.0 and 3.11.0

Service Broker API Version: 2.11

CAPI Release

Cloud Controller

• 422 errors are easier to read details
• API client can discover the isolation segment resource location to help construct urls details
• API client can discover the organization resource location to help construct urls details
• API client can discover the space resource location to help construct urls details
• API client can get the default isolation segment relationship for an org details
• API client can get the isolation segment relationship for a space details
• API client can unassign the default isolation segment for an organization in v2 details
• App Developer can scale app while staging on V2 details
• App developer should NOT see a vague message when stats are not available for stopped apps details
• As a CF Linux app operator, I expect the instance identity certificate to be associated with my CF app details
• CC Clock does not log errors during enqueuing details
• I can toggle the new local diego sync with a feature flag separate from temporary\_local\_{apps,tasks} flags, so that users can start using bridge consumption details
• I want CF + Diego to keep the desired and actual apps in sync, so that a mismatch is automatically corrected details
• Investigate deadlock during buildpack deletion details
• Modify GET /v3/isolation_segments/:guid/relationships/organizations response details
• Modify GET /v3/isolation_segments/:guid/relationships/spaces response details
• Space developers should not be able to assign an iso seg to a space details
• deleting an isolation segment with org associations returns a 422 error code details
• entitling an invalid organization returns a 422 error code details
• errors when removing entitlements are easy to understand and the logic around when i can remove an entitlement is simple details
• examples provided in tasks v3 require "Content-Type" details
• org entitlement should return a relationship response details
• remove link to space realtionship on iso seg b/c it doesn't return space resources details

Pull Requests and Issues

• cloudfoundry/cloud_controller_ng #784: specify certificate_properties on task and lrp definitions details
• cloudfoundry/cloud_controller_ng #768: API Docs (v2) should have anchor links details
• cloudfoundry/cloud_controller_ng #774: Add audit events for organizations details
• cloudfoundry/cloud_controller_ng #775: cloud controller reject valid service_broker_url details
• cloudfoundry/cloud_controller_ng #778: Add user role events at space, org creation time details

Job Spec Changes

• Cloud Controller Clock now requires SSL configuration with the following properties:
  • cc.mutual_tls.ca_cert: PEM-encoded CA certificate for secure, mutually authenticated TLS communication
  • cc.mutual_tls.public_cert: PEM-encoded certificate for secure, mutually authenticated TLS communication
  • cc.mutual_tls.private_key: PEM-encoded key for secure, mutually authenticated TLS communication