cloudfoundry/cf-networking-release v0.16.0

0.16.0

on GitHub

No big manifest changes in this release - key changes include a property to override the interface MTU, policy cleanup for deleted applications and spaces and CLI enhancements.

We do not recommend using cf-networking-release in production yet, but give it a try and give us your feedback in the #container-networking channel on cloudfoundry.slack.com. Take a look at known issues for current limitations and known issues.

Verified with the following:

• CF deployment

Significant Changes

Manifest Changes

• MTU for containers is configurable

Policy Cleanup

• Policy server cleanup works when I have 10000 apps but only few configured with policy

CLI

• Update CATS and runtime-ci docker image to use remove-access
• As a space developer I get a meaningful error message when I don't have network.write scope and try to configure a policy

Security

• As an attacker I can send a very large GUID in my call to the policy server API

Documentation

• Our docs include information about the policy server DB

Metrics

• As an operator I can set up an alert for when my cell has a Flannel watchdog error
• Investigate increased policy server response time on toque
• As an operator I have metrics to help evaluate policy server performance

Miscellaneous

• Build a demo to show UDP container networking
• Move httpClient test coverage from policy-server/cc_client to lib/json_client, and refactor