cloudfoundry/diego-release v2.2.0

Diego v2.2.0

on GitHub

Changes from v2.1.0 to v2.2.0

• Verified with cloudfoundry/cf-deployment @ 5c97d2f85481e23b953965b471fb2a137547edf5.
• Verified with garden-runc-release v1.12.1.
• Verified with garden-windows-bosh-release v0.13.0.
• Verified with cflinuxfs2-release v1.194.0.

Significant changes

SSH

• cloudfoundry/diego-ssh #41: Insecure default settings in sshConfig

Per-Instance Proxy (Experimental)

• As a Diego operator, I expect the rep to clean up proxy-manager config directories so that I do not run out of inodes on my cell VMs
• As a CF app developer, I expect that the envoy sidecar process does not have a limit on the number of files it can have open so that I am not artificially limited in the number of connections my app instances can handle

Component Logging and Metrics

• Spike: Explore approaches to changing Diego component logging to allow configuration for more human-readable output
• As a CF operator, I expect to be able experimentally to opt the Diego file-server into more human-readable lager output so that I can understand its timestamps and log severity more easily

Dependencies

• bump garden and guardian in diego-release

Test Suites and Tooling

• re-enable inigo and CATs private docker registry tests using our existing Azure private docker registry
• start-inigo-container should not start a docker container if the grub configuration isn't valid according to the comment that is printed in the script
• [Flake] inigo certs rotation test
• warp-drive-vizzini flakiness with lrps that are not supposed to crash when stopped

Documentation

• As a CF contributor, I expect cloudfoundry/systemcerts to be deprecated in favor of x509.SystemCertPool
• As a CF operator, I would like to know when diego-release properties were deprecated and when they were removed so that I can be certain about my manifest changes

Cleanup

• cloudfoundry/executor #29: No need to call gardenContainer.Info() twice between two pure memory operations

BOSH job changes

None.

BOSH property changes

file_server

• Added logging.format.timestamp: Controls the formatting style of the component log timestamp.

rep_windows

• Added diego.executor.volman.driver_paths: Paths for volman to inspect for voldriver plugins.
• Added diego.executor.volman.csi_paths: Paths for volman to inspect for CSI plugins.
• Added diego.executor.volman.csi_mount_root_dir: Path under which volman will mount CSI volumes.

BOSH link changes

None.