Releases · cloudfoundry/diego-release

12 Jun 17:54

appruntimeplatform-bot

v2.118.0

18646df

2.118.0 Latest

Latest

2.118.0

Release Date: June 12, 2025

Changes

Bumped to golang 1.24.4
Bumped to jq 1.8
Go Dependency bumps
⚠️ Removes the ability to configure logging.format.timestamp. All logging timestamps are now in rfc3339 format for readability. Thanks @kart2bc!
Adds the ability to specify a default timeout when using declarative healthchecks in the event an app does not specify one.

Bosh Job Spec changes:

diff --git a/jobs/auctioneer/spec b/jobs/auctioneer/spec
index 1fac48936..e7445644b 100644
--- a/jobs/auctioneer/spec
+++ b/jobs/auctioneer/spec
@@ -99,10 +99,6 @@ properties:
     description: When set, the auctioneer attempts to claim a lock from the Locket API.
     default: true
 
-  logging.format.timestamp:
-    description: "Format for timestamp in component logs. Valid values are 'unix-epoch' and 'rfc3339'."
-    default: "unix-epoch"
-
   loggregator.use_v2_api:
     description: "True to use local metron agent gRPC v2 API. False to use UDP v1 API."
     default: false
diff --git a/jobs/bbs/spec b/jobs/bbs/spec
index 49ad1d095..e80ffc064 100644
--- a/jobs/bbs/spec
+++ b/jobs/bbs/spec
@@ -163,10 +163,6 @@ properties:
     description: Maximum number of files (including sockets) the BBS process may have open.
     default: 100000
 
-  logging.format.timestamp:
-    description: "Format for timestamp in component logs. Valid values are 'unix-epoch' and 'rfc3339'."
-    default: "unix-epoch"
-
   logging.max_data_string_length:
     description: "Length in bytes above which logged strings will be truncated. If set to 0, turns off truncation."
     default: 640
diff --git a/jobs/file_server/spec b/jobs/file_server/spec
index f530805b3..460201389 100644
--- a/jobs/file_server/spec
+++ b/jobs/file_server/spec
@@ -60,10 +60,6 @@ properties:
   tls.key:
     description: "PEM-encoded tls key"
 
-  logging.format.timestamp:
-    description: "Format for timestamp in component logs. Valid values are 'unix-epoch' and 'rfc3339'."
-    default: "unix-epoch"
-
   loggregator.use_v2_api:
     description: "Whether component should use the v2 loggregator API when sending data to the metron agent instead of the 'legacy' v1 API."
     default: false
diff --git a/jobs/locket/spec b/jobs/locket/spec
index 640651ffb..6c50d6346 100644
--- a/jobs/locket/spec
+++ b/jobs/locket/spec
@@ -67,10 +67,6 @@ properties:
   diego.locket.sql.ca_cert:
     description: "Bundle of CA certificates for the Locket to verify the SQL server SSL certificate when connecting via SSL"
 
-  logging.format.timestamp:
-    description: "Format for timestamp in component logs. Valid values are 'unix-epoch' and 'rfc3339'."
-    default: "unix-epoch"
-
   loggregator.use_v2_api:
     description: "True to use local metron agent gRPC v2 API. False to use UDP v1 API."
     default: false
diff --git a/jobs/rep/spec b/jobs/rep/spec
index c7e46eeb5..11d203b4c 100644
--- a/jobs/rep/spec
+++ b/jobs/rep/spec
@@ -215,6 +215,9 @@ properties:
   diego.executor.max_log_lines_per_second:
     description: "EXPERIMENTAL: Maximum log lines allowed per second per app instance. Default value of 0 will disable rate limiting. Minimum recommended value is 100."
     default: 0
+  diego.executor.declarative_healthcheck_default_timeout:
+    description: "Default timeout for declarative healthcheck. This value is used when the LRP spec does not specify a timeout. Only used if 'enable_declarative_healthcheck' is set to true."
+    default: "1s"
 
   diego.rep.bbs.api_location:
     description: "Address of the BBS server"
@@ -332,10 +335,6 @@ properties:
     default: []
     example: [ "169.254.0.2:15001" ]
 
-  logging.format.timestamp:
-    description: "Format for timestamp in component logs. Valid values are 'unix-epoch' and 'rfc3339'."
-    default: "unix-epoch"
-
   logging.max_data_string_length:
     description: "Length in bytes above which logged strings will be truncated. If set to 0, turns off truncation."
     default: 640
diff --git a/jobs/rep_windows/spec b/jobs/rep_windows/spec
index 3383a8bf4..161bc2821 100644
--- a/jobs/rep_windows/spec
+++ b/jobs/rep_windows/spec
@@ -61,10 +61,6 @@ properties:
     description: "Add more permissive ACLs to directories that are bind mounted into containers. Required for Windows 2016 cells"
     default: false
 
-  logging.format.timestamp:
-    description: "Format for timestamp in component logs. Valid values are 'unix-epoch' and 'rfc3339'."
-    default: "unix-epoch"
-
   logging.max_data_string_length:
     description: "Length in bytes above which logged strings will be truncated. If set to 0, turns off truncation."
     default: 640
@@ -207,6 +203,9 @@ properties:
   diego.executor.max_log_lines_per_second:
     description: "EXPERIMENTAL: Maximum log lines allowed per second per app instance. Default value of 0 will disable rate limiting. Minimum recommended value is 100."
     default: 0
+  diego.executor.declarative_healthcheck_default_timeout:
+    description: "Default timeout for declarative healthcheck. This value is used when the LRP spec does not specify a timeout. Only used if 'enable_declarative_healthcheck' is set to true."
+    default: "1s"
 
   diego.rep.bbs.api_location:
     description: "Address of the BBS server"
diff --git a/jobs/route_emitter/spec b/jobs/route_emitter/spec
index df1b8383c..e35eddfb4 100644
--- a/jobs/route_emitter/spec
+++ b/jobs/route_emitter/spec
@@ -105,10 +105,6 @@ properties:
     description: "Experimental: Enable the route-emitter to emit registrations for internal DNS-based service discovery."
     default: false
 
-  logging.format.timestamp:
-    description: "Format for timestamp in component logs. Valid values are 'unix-epoch' and 'rfc3339'."
-    default: "unix-epoch"
-
   tcp.enabled:
     description: "Enable the route-emitter in cell-local mode to emit TCP routes for instances to the Routing API."
     default: false
diff --git a/jobs/route_emitter_windows/spec b/jobs/route_emitter_windows/spec
index 9db9e8b69..e5a7ac46d 100644
--- a/jobs/route_emitter_windows/spec
+++ b/jobs/route_emitter_windows/spec
@@ -91,10 +91,6 @@ properties:
     description: "The name of the Diego job referenced by this spec (DO NOT override)"
     default: "route_emitter_windows"
 
-  logging.format.timestamp:
-    description: "Format for timestamp in component logs. Valid values are 'unix-epoch' and 'rfc3339'."
-    default: "unix-epoch"
-
   syslog_daemon_config.address:
     description: "Syslog host"
     default: ""
diff --git a/jobs/ssh_proxy/spec b/jobs/ssh_proxy/spec
index cd39dbd52..fe63cfa97 100644
--- a/jobs/ssh_proxy/spec
+++ b/jobs/ssh_proxy/spec
@@ -120,10 +120,6 @@ properties:
     description: "Connect directly to container IP instead of to the host IP and external port. Suitable only for deployments in which the gorouters and TCP routers can route directly to the container IP of instances."
     default: false
 
-  logging.format.timestamp:
-    description: "Format for timestamp in component logs. Valid values are 'unix-epoch' and 'rfc3339'."
-    default: "unix-epoch"
-
   loggregator.use_v2_api:
     description: "True to use local metron agent gRPC v2 API. False to use UDP v1 API."
     default: false

✨ Built with go 1.24.4

Full Changelog: v2.117.0...v2.118.0

Resources

Download release 2.118.0 from bosh.io.

Contributors

kart2bc

Assets 3

06 May 15:31

appruntimeplatform-bot

v2.117.0

81ff2d6

2.117.0

Release Date: May 06, 2025

Changes

Upgrade to go 1.24
New property: diego.rep.extra_root_fs_dir (thanks @winkingturtle-vmw!)
- Directory for extra desired root fses to be used by rep
New properties: diego.executor.proxy_healthcheck_interval and diego.executor.enable_container_proxy_healthcheck (thanks @Viktor-Velkov!)
- Configuration for envoy proxy healthchecks
cnbapplifecycle is now a standalone module
Add BBS Advanced Metrics #996 (thanks @n-sandalski and @PlamenDoychev!)

Bosh Job Spec changes:

diff --git a/jobs/bbs/spec b/jobs/bbs/spec
index 9204a8d4c..49ad1d095 100644
--- a/jobs/bbs/spec
+++ b/jobs/bbs/spec
@@ -147,6 +147,18 @@ properties:
     description: "Timeout in seconds to receive a response to the keepalive ping. If a response is not received within this time, the locket client will reconnect to another server."
     default: 22
 
+  diego.bbs.metrics.advanced_metrics.enabled:
+    description: Enables emitting BBS Metrics per specified routes/endpoints in advanced_metrics, useful for debugging issues. May impact performances.
+    default: false
+
+  diego.bbs.metrics.advanced_metrics.route_config.request_count:
+    description: Set the routes for which request_count should be emitted. If empty, no request_count metrics will be emitted.
+    default: []
+
+  diego.bbs.metrics.advanced_metrics.route_config.request_latency:
+    description: Set the routes for which request_latency should be emitted. If empty, no request_latency metrics will be emitted.
+    default: []
+
   limits.open_files:
     description: Maximum number of files (including sockets) the BBS process may have open.
     default: 100000
diff --git a/jobs/rep/spec b/jobs/rep/spec
index ecff35fa5..c7e46eeb5 100644
--- a/jobs/rep/spec
+++ b/jobs/rep/spec
@@ -57,6 +57,9 @@ properties:
   diego.rep.sidecar_rootfs_path:
     description: "absolute_path representing the root filesystem used for sidecar processes (ie. '/var/vcap/packages/cflinuxfs4/rootfs.tar'). Must be one of the preloaded_rootfses paths. Leaving the default empty string is ok, as it will then select the first of he preloaded_rootfses"
     default: ""
+  diego.rep.extra_root_fs_dir:
+    description: "dir to scan for extra rootfs to be loaded by rep"
+    default: "/var/vcap/store/rootfses"
   diego.rep.rootfs_providers:
     description: "Array of schemes for which the underlying garden can support arbitrary root filesystems"
     default:
@@ -138,6 +141,12 @@ properties:
   diego.executor.use_schedulable_disk_size:
     description: "Use total space available to containers reported by Garden. If false the total size of image plugin store minus max_cache_size_in_bytes is used."
     default: false
+  diego.executor.proxy_healthcheck_interval:
+    description: "Interval that checks envoy responsiveness every 30s."
+    default: "30s"
+  diego.executor.enable_container_proxy_healthcheck:
+    description: "When set, enables the liveness health check for the envoy proxy in the container."
+    default: false
   diego.executor.garden.address:
     description: "Garden server listening address."
     default: /var/vcap/data/garden/garden.sock
diff --git a/jobs/rep_windows/spec b/jobs/rep_windows/spec
index d34483c0b..3383a8bf4 100644
--- a/jobs/rep_windows/spec
+++ b/jobs/rep_windows/spec
@@ -48,6 +48,9 @@ properties:
   diego.rep.sidecar_rootfs_path:
     description: "absolute_path representing the root filesystem used for sidecar processes (ie. '/tmp/windows2012R2'). Must be one of the preloaded_rootfses paths. Leaving the default empty string is ok, as it will then select the first of he preloaded_rootfses"
     default: ""
+  diego.rep.extra_root_fs_dir:
+    description: "dir to scan for extra rootfs to be loaded by rep"
+    default: "/var/vcap/store/rootfses"
   diego.rep.rootfs_providers:
     description: "Array of schemes for which the underlying garden can support arbitrary root filesystems"
     default: []
@@ -133,6 +136,12 @@ properties:
   diego.executor.use_schedulable_disk_size:
     description: "Use total space available to containers reported by Garden. If false the total size of image plugin store minus max_cache_size_in_bytes is used."
     default: false
+  diego.executor.proxy_healthcheck_interval:
+    description: "Interval that checks envoy responsiveness."
+    default: "30s"
+  diego.executor.enable_container_proxy_healthcheck:
+    description: "When set, enables the liveness health check for the envoy proxy in the container."
+    default: false
   diego.executor.garden.address:
     description: "Garden server listening address."
     default: 127.0.0.1:9241
diff --git a/jobs/vizzini/spec b/jobs/vizzini/spec
index 901e5236d..b42ae9d49 100644
--- a/jobs/vizzini/spec
+++ b/jobs/vizzini/spec
@@ -1,7 +1,7 @@
 ---
 name: vizzini
 packages:
-  - golang-1.23-linux
+  - golang-1.24-linux
   - vizzini
 
 templates:

✨ Built with go 1.24.2

Full Changelog: v2.116.0...v2.117.0

Resources

Download release 2.117.0 from bosh.io.

Contributors

PlamenDoychev, winkingturtle-vmw, and 2 other contributors

Assets 3

28 Mar 15:22

tas-runtime-bot

v2.116.0

f356490

2.116.0

Release Date: March 28, 2025

Changes

bump go version

✨ Built with go 1.23.7

Full Changelog: v2.115.0...v2.116.0

Resources

Download release 2.116.0 from bosh.io.

Assets 3

24 Feb 06:30

tas-runtime-bot

v2.115.0

2d96a88

2.115.0

Release Date: February 24, 2025

Changes

Expose configuration option to select rootfs used for container's sidecar processes. This configuration resolves the following issue 983 observed on systems running with multiple FS stacks.

Thanks to @Ivo1116 , @PlamenDoychev!

Bosh Job Spec changes:

diff --git a/jobs/rep/spec b/jobs/rep/spec
index 012234e12..ecff35fa5 100644
--- a/jobs/rep/spec
+++ b/jobs/rep/spec
@@ -54,6 +54,9 @@ properties:
     default: false
   diego.rep.preloaded_rootfses:
     description: "Array of name:absolute_path pairs representing root filesystems preloaded onto the underlying garden"
+  diego.rep.sidecar_rootfs_path:
+    description: "absolute_path representing the root filesystem used for sidecar processes (ie. '/var/vcap/packages/cflinuxfs4/rootfs.tar'). Must be one of the preloaded_rootfses paths. Leaving the default empty string is ok, as it will then select the first of he preloaded_rootfses"
+    default: ""
   diego.rep.rootfs_providers:
     description: "Array of schemes for which the underlying garden can support arbitrary root filesystems"
     default:
diff --git a/jobs/rep_windows/spec b/jobs/rep_windows/spec
index 4a7dfefc6..d34483c0b 100644
--- a/jobs/rep_windows/spec
+++ b/jobs/rep_windows/spec
@@ -45,6 +45,9 @@ properties:
     description: "Array of name:absolute_path pairs representing root filesystems preloaded onto the underlying garden"
     default:
       - windows2012R2:/tmp/windows2012R2
+  diego.rep.sidecar_rootfs_path:
+    description: "absolute_path representing the root filesystem used for sidecar processes (ie. '/tmp/windows2012R2'). Must be one of the preloaded_rootfses paths. Leaving the default empty string is ok, as it will then select the first of he preloaded_rootfses"
+    default: ""
   diego.rep.rootfs_providers:
     description: "Array of schemes for which the underlying garden can support arbitrary root filesystems"
     default: []

✨ Built with go 1.23.6

Full Changelog: v2.114.0...v2.115.0

Resources

Download release 2.115.0 from bosh.io.

Contributors

PlamenDoychev and Ivo1116

Assets 3

18 Feb 18:42

tas-runtime-bot

v2.114.0

4d0cf90

2.114.0

Release Date: February 18, 2025

Changes

Add support to Diego for file-based service bindings - #990 - Thank you @klapkov , @dimitardimitrov13!

Bosh Job Spec changes:

diff --git a/jobs/rep/spec b/jobs/rep/spec
index 0737d9d1a..012234e12 100644
--- a/jobs/rep/spec
+++ b/jobs/rep/spec
@@ -22,7 +22,8 @@ templates:
   tls.key.erb: config/certs/tls.key
   tls_ca.crt.erb: config/certs/tls_ca.crt
   indicators.yml.erb: config/indicators.yml
-
+  volume_mounted_files.erb: bin/volume_mounted_files
+  
 packages:
   - pid_utils
   - rep

✨ Built with go 1.23.6

Full Changelog: v2.113.0...v2.114.0

Resources

Download release 2.114.0 from bosh.io.

Contributors

klapkov and dimitardimitrov13

Assets 3

03 Feb 22:57

tas-runtime-bot

v2.113.0

857b44a

2.113.0

Release Date: February 03, 2025

Changes

⚠️ BREAKING CHANGE⚠️ : [email protected] has been removed from the default allowed ciphers for ssh-proxy. cloudfoundry/diego-ssh#62 Thank you @DimitarSch
Bump dependencies
#986 Keep filepath-securejoin at v0.3.6 until runc is compatible with v0.4.0 (thanks @winkingturtle-vmw)