cloudfoundry/diego-release v2.22.0

Diego v2.22.0

on GitHub

Resources

• Download release v2.22.0 from bosh.io.
• Verified with cloudfoundry/cf-deployment @ 86fd61b0cda17e71337758af26108ff66b5e4849.

Changes from v2.21.0 to v2.22.0

Significant changes

SSH

• As a CF operator, I expect to be able to opt the SSH proxy to connect to the TLS-proxied port with client credentials so that I can enable CF SSH with authenticated container ingress

Volume Support

• Rename voldriver to dockerdriver
• cloudfoundry/inigo #20: Update for dockerdriver repo rename (ne voldriver)

Per-Instance Proxy

• As a CF app developer, I expect my app instances to be placed reliably quickly when the Diego cells enable instance proxies so that my app instances start up consistently
• As a CF operator, I expect the properties and operations files to enable the Envoy proxy and to allocate extra memory for it to be marked as stable on the Linux rep job so that I feel comfortable enabling them by default

Component Logging and Metrics

• As a CF operator, I expect the BBS and the rep not to log app failure reasons of arbitrary length so that I do not end up with component log lines that are excessively long or log files that rotate too fast

Dependencies

• As a CF operator, I expect Diego components to use Golang 1.11.2 so that they are up to date with this important dependency

Test Suites and Tooling

• Update the cert fixtures in DUSTs that have expiration dates in 2018

Documentation

• As a Diego contributor, I would like to understand the system by which BBS endpoints are revised
• As a CF operator, I expect to find a polished version of the "cf start" LRP log-message guide in the diego-release docs so that I can understand the details of this important Diego service workflow
• Complete BBS API deprecation docs after #158949366
• cloudfoundry/bbs #35: Add deprecation comments to all route constants and entries
• cloudfoundry/bbs #36: Add _r0 to RemoveDesiredLRP route constant name

BOSH job changes

None.

BOSH property changes

bbs

• Added logging.max_data_string_length. Maximum length of string field to log before truncating the field. Default: 640.

rep

• Added logging.max_data_string_length. Maximum length of string field to log before truncating the field. Default: 640.
• Changed containers.proxy.enabled no longer to be experimental.
• Changed containers.proxy.additional_memory_allocation_mb no longer to be experimental.

rep_windows

• Added logging.max_data_string_length. Maximum length of string field to log before truncating the field. Default: 640.

ssh_proxy

• Added backends.tls.enabled: Whether to enable the SSH proxy to connect to backends via TLS. Default: false.
• Added backends.tls.ca_certificates: List of CA certificates to verify backends. Default: [].
• Added backends.tls.client_certificate: Optional, client certificate to use for TLS connections to backends.
• Added backends.tls.client_private_key: Optional, private key matching client certificate to use for TLS connections to backends.

BOSH link changes

None.