Diego v2.25.0

Resources

• Download release v2.25.0 from bosh.io.
• Verified with cloudfoundry/cf-deployment @ 6056a1ad6868c7f5953915d95fce07bd553a62c5.

Changes from v2.24.0 to v2.25.0

Significant changes

BBS API

• As a CF operator, I expect the Diego cell rep to use the new "flattened" ActualLRP API endpoints instead of ActualLRPGroup-based ones so that it will continue to function after their future removal

Volume Support

• nfs, smb, efs drivers have TLS configured in ops files

Garden OCI Image Support (Experimental)

• As a CF operator, I expect to be able to opt the Diego cells into converting some declarative resources into a 2-layer Garden OCI image spec so that I can assess its operational differences

Per-Instance Proxy

• As a CF operator, I expect the rep to recognize all CA certs in the container proxy trusted CA certs list so that the container Envoy proxies use them to validate clients

Dependencies

• As a CF operator, I expect Diego components to use Golang 1.11.4 so that they are up to date with this important dependency
• bump golang.org/x/* packages for go1.11
• Upgrade our GRPC version
• As a CF operator, I expect the cfdot job to use the latest version of jq so that I have access to new jq features, bugfixes, and security updates

Test Suites and Tooling

• add ability to opt vizzini into producing ginkgo output that tells us about panicked tests

Documentation

• Document in contributing how to use mysql/postgres docker images to run units tests locally

Cleanup

• replace hacky eventually check in the bbs convergence tests when flattened actual lrp is introduced

BOSH job changes

None.

BOSH property changes

rep and rep_windows

• Added containers.layering_mode: Configures downloaded container asset management mode. Valid values are 'single-layer' and 'two-layer'. Setting this property to 'two-layer' enables the conversion of some downloaded Task and LRP assets to container image layers. Defaults to single-layer.

vizzini

• Added vizzini.stream: Stream output from parallel test nodes. This option will lead to less coherent output but is useful when debugging. Defaults to false.

BOSH link changes

None.