Diego v1.6.2

Changes from v1.6.1 to v1.6.2

• Verified with garden-runc-release v1.1.1.
• Verified with garden-windows-bosh-release v0.2.0.
• Verified with etcd-release v90.
• Verified with cf-mysql-release v32.
• Verified with cflinuxfs2-rootfs-release v1.48.0.

IMPORTANT: For consumers of the experimental container networking release, the format of the stub for the -N argument to Diego manifest generation has changed significantly, and the release itself has been renamed "cf-networking". Please consult the manifest changelog for v0.15.0 for instructions on migrating values from a previous stub.

NOTE: This version of Diego contains an experimental new BOSH job, locket, intended to serve as a new distributed-lock service for other Diego components such as the BBS and the auctioneer. This service and the integration of other components with it is still under heavy development, and is not yet even recommended for developmental use.

Significant changes

Container Placement

• As a Diego operator, I expect cells not to abandon unplaceable replacement work during evacuation

Local Route Emitters (Experimental)

• As an app developer, I expect that a Diego with local route-emitters correctly registers routes quickly for crashed apps
• local route emitter tests are flaky because evacuation causes the entire parallel group to exit as soon as one fo the reps exit

De-Consuling Locks (Experimental)

• As a Diego operator, I can configure the BBS to elect its leader using a lock in the BBS DB

Container Networking Support (Experimental)

• Simplify / consolidate BOSH properties
• cloudfoundry/diego-release #266: Rename netman to cf-networking

Windows Support

• cloudfoundry/diego-release #268: Use ca_certs_for_downloads in rep_windows

CC-Bridge Transfer

• TPS: As an Operator, I would like communication between CC and Diego to always use Mututal TLS
• cloudfoundry/diego-release #264: Manifest generation: -B flag disables tps_listener

Test Suites and Tooling

• Look into locket flakes
• Slow guardian container creation

BOSH job changes

Added experimental locket job.

BOSH property changes

• Added diego.bbs.locket.api_location: Location of locket API server. Experimental.
• Added diego.bbs.skip_consul_lock: Whether the BBS is to skip acquiring the Consul lock. Experimental.
• Added diego.locket.listen_addr: Address on which the locket API server should listen.
• Added diego.locket.debug_addr: Address on which the locket debug server should listen.
• Added diego.locket.log_level: Log level for the locket API server.
• Added diego.locket.sql.db_host: Hostname of the SQL DB for the locket API server.
• Added diego.locket.sql.db_port: Port of the SQL DB for the locket API server.
• Added diego.locket.sql.db_schema: Database name of the SQL DB for the locket API server.
• Added diego.locket.sql.db_username: Username for the locket API server to use to connect to its SQL DB.
• Added diego.locket.sql.db_password: Password for the locket API server to use to connect to its SQL DB.
• Added diego.locket.sql.db_driver: Dialect (MySQL or Postgres) of the SQL DB for the locket API server.