cloudfoundry/cf-networking-release v2.3.0

2.3.0

on GitHub

This release includes the following new features:

• New policy API endpoints to filter by source or destination ID
• Fixes to database and Consul timeout configurations
• For third party plugin authors - we removed support for multiple CNI configs

This release moves the SDC to the scheduler and will involve downtime. To avoid downtime, use this ops file

Tested with silk-release v2.3.0

Significant Changes

Manifest Changes

New Properties

• An optional parameter has been added to the policy-server and policy-server-internal jobs to configure the max number of
  open and idle connections to the policy-server database.
  • max_open_connections
  • max_idle_connections
• An optional parameter has been added to the policy-server-internal job to configure the consul dns health check timeout.
  Defaults to 5 seconds.
  • health_check_timeout_seconds

Changed Properties

• Namespaced the connect_timeout_seconds under database in the policy-server and policy-server-internal jobs.

API enhancements

• Policy Server API provides filtering by source app guid
• Policy Server API provides filtering by dest app guid

Timeout Stories

• An operator can limit the number of open and idle connections from policy server to the database
• Consul DNS healthcheck timeout should be independently configurable from the database connection timeout
• cloudfoundry/silk #4: Too many open connections error

Co-location

• Service Discovery should be co-located
• policy server internal should not require co-location with policy server

CNI Enhancements

• Only one CNI config is executed

Logging

• Iptables logging should work for apps on the same cell

Chores

• Remove sombrero from the pipeline