Diego v1.28.0

Changes from v1.27.0 to v1.28.0

• Verified with garden-runc-release v1.9.4.
• Verified with garden-windows-bosh-release v0.9.0.
• Verified with etcd-release v117.
• Verified with cf-mysql-release v35.
• Verified with cflinuxfs2-release v1.161.0.

Significant changes

v2 Loggregator API Adoption (Experimental)

• As a Diego operator, I expect the ssh-proxy to emit its component and Golang metrics and app logs via the v2 loggregator API if so configured

Per-Instance Proxy (Experimental)

• As a CF operator, I expect the envoy proxy only in buildpack-app containers for now so that I can apply this configuration without breaking busybox-based Docker-image apps
• As a CF operator, I expect the gorouter to register TLS-proxied endpoints for app instances on proxy-enabled cells so that it can make TLS connections to them when appropriate

Secure Service Instance Credentials (Experimental)

• As a Docker app developer, I expect my Docker image to run unmodified on CredHub-enabled CF deployments so that I can take advantage of CredHub-integrated services

Dependencies

• Upgrade Golang to 1.9.1+ in diego-release

Test Suites and Tooling

• Change to use image resource for docker images in diego-ci (take 2)
• fix dusts loggregator client cert & key
• cloudfoundry/locket #4: Add 'localhost' to SAN in cert fixtures [#151767177]
• fix the flaky ssh tests on warp-drive and electron-cannon

BOSH job changes

None.

BOSH property changes

None.

BOSH link changes

None.