Diego v1.26.2

Changes from v1.26.1 to v1.26.2

• Verified with garden-runc-release v1.9.4.
• Verified with garden-windows-bosh-release v0.8.0.
• Verified with etcd-release v117.
• Verified with cf-mysql-release v35.
• Verified with cflinuxfs2-release v1.156.0.

NOTE: Turns out we weren't quite finished regenerating BOSH-Lite certificates in Diego v1.26.1, and we flubbed the ones that the Diego components use to communicate to their local metron agents via the v2 Loggregator API. Those certificates should now be fixed in this release.

Significant changes

De-Consuling Locks

• When the HA CF-MySQL cluster is upgraded, BBS loses its lock, and developers are unable to push apps until it recovers

Per-Instance Proxy (Experimental)

• As a Diego operator, I expect the in-container Envoy proxy to terminate TLS using the instance-identity credentials so that I can verify instance-identity in-band on the connection

Test Suites and Tooling

• cf-release-lite has failed

BOSH job changes

None.

BOSH property changes

None.

BOSH link changes

None.