Highlights

• Support for SSL connection to CCDB
• Resolve an issue where the non-bridge syncing component was marking successfully completed tasks as FAILED
• Always perform orphan blob cleanup

CC API Version: 2.95.0 and 3.30.0

Service Broker API Version: 2.12

CAPI Release

• Bump locket-client to v1.1 details
• Use BPM in capi-release details

Cloud Controller

• API client can view Features for an App details
• API client can view the SSH feature for an app details
• API client should NOT see 'endpoint' field for non-http health check types details
• As an operator, I'd like to be able to configure my database connection to use SSL details
• Delayed job workers keep crashing with "Attempt to delete object did not result in a single row modification" details
• Include a droplets link in the call to /v3 details
• Move off fork of delayed_jobs_sequel details
• Operator can find ASG guids on diego lrp and task egress rules details
• Operator can see that orphan blob cleanup is happening by default. details
• Tasks failed by sync job should create TASK_STOPPED usage events details
• We should not fail tasks that are actually still running on Diego details
• v2 Put/Post apps doesn't accept empty buildpack parameters anymore details

Pull Requests and Issues

• cloudfoundry/cloud_controller_ng #888: Fix infinite loop bug when UAA returns empty key map details
• cloudfoundry/cloud_controller_ng #871: Update v2.yml details
• cloudfoundry/cloud_controller_ng #886: Execute bpm from /var/vcap/jobs/bpm/bin details
• cloudfoundry/capi-release #51: Bump ruby version details
• cloudfoundry/capi-release #52: Execute bpm from /var/vcap/jobs/bpm/bin details

Job Spec Changes

Cloud Controller can now be configured to communicate with its database using SSL. All three components must be configured: cloud_controller_ng, cloud_controller_clock, cloud_controller_worker. Each component takes the same new properties described below.

• ccdb.ca_cert - The ca cert to use when communicating with the database over SSL
• ccdb.ssl_verify_hostname - Verify that the database SSL certificate matches the host to which the connection is attempted - defaults to true