Highlights
- Add checks to ensure database encryption key rotation occurs safely
CC API Version: 2.123.0 and 3.58.0
Service Broker API Version: 2.14
CAPI Release
- Operator can skip encryption key validation so they can avoid undeployable state details
- Operator is prevented from deleting in-use database encryption key from cc.database_encryption.keys details
- Operator is prevented from deleting in-use database encryption key from cc.db_encryption_key details
- operator should not be allowed to set current_key_label to an undefined label details
Cloud Controller
- API client can create a deployment while another deployment for that app is already in flight details
- As a Service Broker, if I return a ConcurrencyError on provision/bind, then CF does not perform orphan mitigation details
- Operator can't change value of an existing database encryption key details
- Operator is prevented from deleting in-use database encryption key from cc.database_encryption.keys details
- Operator is prevented from deleting in-use database encryption key from cc.db_encryption_key details