2.20.3

Added

• DB_EXTERNAL_USER_HOST_SUFFIX variable for Azure MySQL connectivity
• Added/fixed podAntiAffinity rules for various roles
• Set topologyKey for podAntiAffinity rule to kubernetes.io/hostname
• Advise operator of the need for CSR approval for Eirini internal registry in helm NOTEs

Changed

• Optimized startup time for various roles
• Bumped autoscaler to hotfix release 1.2.4
• Bumped cf-deployment to 12.17
• Bumped cflinuxfs3 release to 0.153.0
• Bumped eirini release to 0.0.26
• Bumped external UAA to 74.12 to match embedded UAA version
• Bumped go-buildpack release to 1.9.4
• Bumped nginx-buildpack release to 1.1.2
• Bumped java-buildpack release to 4.27.0
• Bumped nfs-volume release to 1.5.7
• Bumped nodejs-buildpack release to 1.7.7
• Bumped php-buildpack release to 4.4.2
• Bumped python-buildpack release to 1.7.3
• Bumped staticfile-buildpack release to 1.5.2
• Bumped ruby-buildpack release to 1.8.3
• Bumped scf-helper-release to 1.0.13
• Bumped SLE12 and SLE15 stack
• Changed loggregator-release to 105.6.3

Fixed

• Avoid pod restarts for many roles during UAA and SCF startup
• Expand GoRouter ciphersuite to be compatible with a wider range of clients
• Make helm chart compatible with kubernetes 1.16
• Use system cert store if UAA_CA_CERT is not specifiedFix suffix handling for mysql connection string
• Ensure the HTTP_PORT is exposed for file_server for upgrades
• Make TLS configurable for both Credhub & UAA (by default, TLS is on for database connectivity for both services)

2.19.1

Added

• Support for eirini SSH feature

Changed

• Bumped cflinuxfs3 release to 0.141.0
• Bumped eirini release to 0.0.23
• Bumped go-buildpack release to 1.9.2
• Bumped nodejs-buildpack release to 1.7.1
• Bumped java-buildpack release to 4.24.0
• Bumped SLE12 and SLE15 stack

Fixed

• Fixed apiVersion in Chart yaml(s) to point to Helm API version (v1)
• Turned binlog on for pxc config to enable transaction recovery

2.18.0

N.B: This release is the RC4 that became the released version. A previous 2.18.0 release unfortunately was tied to the wrong commit, so this release matches what was expected. If you had previously tried 2.18.0, please use this version instead. All apologies for any confusion.

Added

• Added a config.HA_strict flag to allow role size overrides on top of config.HA

Changed

• Bumped binary-buildpack release to 1.0.33
• Bumped cf-deployment to 9.5
• Bumped cflinuxfs3 to 0.118.0
• Bumped dotnet-core-buildpack release to 2.2.13
• Bumped eirini release to 0.0.15
• Bumped go-buildpack release to 1.8.42
• Bumped groot-btrfs release to 1.0.5
• Bumped java-buildpack release to 4.20.0
• Bumped nginx-buildpack release to 1.0.15
• Bump nodejs-buildpack release to 1.6.53
• Bumped PHP buildpack release to 4.3.80
• Bumped python-buildpack release to 1.6.36
• Bumped ruby-buildpack release to 1.7.42
• Bumped scf-helper release to 1.0.3
• Bumped SLE12 and SLE15 stacks
• Removed the cluster-admin role binding for the eirini service account
• Switched SCF over to PXC from cf-mysql for database management

2.17.1

Changed

• Set the default value of AZ_LABEL_NAME to failure-domain.beta.kubernetes.io/zone
• Bumped app-autoscaler to 1.2.1
• Bumped cf-deployment to 7.11
• Bumped CATS to 7.11
• Bumped cflinuxfs3 to 0.108.0
• Bumped dotnet-core-buildpack to 2.2.12
• Bumped go-buildpack to 1.8.41
• Bumped nginx-buildpack to 1.0.14
• Bumped nodejs-buildpack to 1.6.51
• Bumped php-buildpack to 4.3.77
• Bumped python-buildpack to 1.6.34
• Bumped ruby-buildpack to 1.7.40
• Bumped staticfile-buildpack to 1.4.43
• Bumped SLE15 stack
• Simplified service accounts and pod security policies
• Switched to log-cache for container metrics

Fixed

• Implemented a patch to squash Cloud Controller database migrations
• Fixed version and SHA1 of cf-mysql-release 36.15.0
• Fixed TLS issues in log-cache

2.17.0

Updated CHANGELOG for 2.17.0

2.16.4

Added

• Added Eirini Tech Preview (0.0.4)
• Added SLE15 stack
• Added feature flags to enable roles such as autoscaler, credhub, cf-usb, eirini
• Added SITS (Sync Integration Test Suite)
• Added support for Ingress Controller
• Added .net-core-buildpack (2.2.10)
• Added support for user supplied annotations for Ingress

Changed

• Added Helm labels to Ingress templates
• Bumped to cf-deployment 6.10
• Bumped CAPI to 1.79.0
• Bumped cflinuxfs2 to 1.281.0
• Bumped cflinuxfs3 to 0.81.0
• Bumped binary-buildpack to 1.0.32
• Bumped cf-cli to 6.42.0
• Bumped go-buildpack to 1.8.36
• Bumped java-buildpack to 4.19.1
• Bumped nfs-volume-release to 1.7.6
• Bumped nginx-buildpack to 1.0.11
• Bumped nodejs-buildpack to 1.6.49
• Bumped php-buildpack to 4.3.75
• Bumped python-buildpack to 1.6.32
• Bumped ruby-buildpack to 1.7.38
• Bumped staticfile-buildpack to 1.4.42
• Bumped up the nproc limits for vcap user
• Bumped SLE12 stack
• Doppler is communicating on port 443
• Enabled mutual TLS between cloud controller and GoRouter
• Changed cloud controller ports to be non-configurable
• Converted the cc-clock's wait-for-api functionality from a patch to a pre-start script

Fixed

• Fixed the test for an insecure docker registry (uses tcpdomain for the route)
• Fixed the diego-api readiness probe
• Fixed autoscaler to not skip SSL validation
• Reduced autoscaler database disk size
• Fixed autoscaler to listen to cluster internal CF API endpoint
• Cleaned up role readiness probe outputs
• Fix nfs-persi brain failures when running on NFS
• Reverted the incompatible changes in statefulsets
• Changed app autoscaler-postgres to a non-HA setup

2.15.2

Added

• cflinuxfs3 now available
• Support added for placement zones & isolation segments

Changed

• Bumped cflinuxfs2 to 1.266.0
• Bumped binary-buildpack to 1.0.30.1
• Bumped go-buildpack to 1.8.33.1
• Bumped java-buildpack to 4.17.2.1
• Bumped nginx-buildpack to 1.0.8.1
• Bumped nodejs-buildpack to 1.6.43.1
• Bumped php-buildpack to 4.3.70.1
• Bumped python-buildpack to 1.6.27.1
• Bumped ruby-buildpack to 1.7.31.1
• Bumped staticfile-buildpack to 1.4.39.1
• Bumped SLE12 & openSUSE stacks

Fixed

• Certificates rely on correct UAA FQDN
• Removed obsolete key from role-manifest.yml
• Removed diego-cell readiness probe from role-manifest.yml

2.15.1

Added

• Enabled experimental Ingress Controller
• Added nginx buildpack
• Set up default PSPs
• Specify SYS_RESOURCE capabilities for roles that need it

Changed

• Bumped SLE12 & openSUSE stacks
• Bumped nodejs buildpack to 1.6.41.1
• Bumped Go buildpack to 1.8.31.1
• Bumped Ruby buildpack to 1.7.30.1
• Bumped staticfile buildpack to 1.4.38.1
• v3 API now uses HTTPS instead of HTTP
• Bumped java-buildpack to 4.17.1.1
• Restored DEFAULT_STACK to cflinuxfs2
• Bumped php-buildpack to 4.3.68.2
• Bumped binary-buildpack to 1.0.29.1

Fixed

• klog.sh now supports multi-container pods
• Fixed stemcell to include latest pre start scripts

2.15.0

Added

• New variable appVersion available in Helm

Changed

• Bumped cf-deployment to 3.6.0
• Bumped staticfile buildpack to 1.4.36.1
• Bumped nodejs buildpack to 1.6.37.1
• Bumped php buildpack to 4.3.66.1
• Bumped binary buildpack to 1.0.28.1
• Bumped Java buildpack to 4.16.1.1
• Bumped python buildpack to 1.6.24.1
• Bumped Ruby buildpack to 1.7.27.1
• Bumped SLE12 & openSUSE stacks
• App-autoscaler no longer dependent on hairpin
• Using upstream credhub instead of our own fork
• Metron replaces loggregator as a new sidecar for those pods where loggregator ran as a service internally before

Fixed

• External URL for USB fixed whereby job name doesn't appear in service name anymore

2.14.5

Changed

• Bumped SLE12 stack
• Bumped java buildpack to 4.16.1
• Bumped binary buildpack to 1.0.27.1
• Bumped nodejs buildpack to 1.6.34.1

Fixed

• Corrected service name to work with syslog drains