Skip to main content

62.0.0

· 10 min read

Added

  • breaking change all services: Add Ops File disable-instance-recreate.yml to replace ops/allow-instance-recreate-via-dashboard.yml. This Ops File disables the corresponding endpoint in the a9s API v1 as well as the feature in the a9s Service Dashboard.
  • breaking change all services: Add Ops File disable-instance-restart.yml to replace ops/allow-instance-restart-via-dashboard.yml. This Ops File disables the corresponding endpoint in the a9s API v1 as well as the feature in the a9s Service Dashboard.
  • breaking change all services: Add Ops File disable-backup-download.yml to replace ops/disable-dashboard-backup-downloads.yml. This Ops File disables the corresponding endpoint in the a9s API v1 as well as the feature in the a9s Service Dashboard.
  • breaking change all services: a9s Smoke Tests: Rework framework of backup tests to improve robustness and observability, and update its configuration settings. For more information, see a9s Smoke Tests.
  • all services: a9s SSO Proxy: Add uaa_checkup_interval to configure the UAA polling rate. For more information, see a9s SSO Proxy.
  • a9s PostgreSQL: a9s Smoke Tests: Introduce point-in-time recovery(PITR) tests for currently supported versions.
  • docs: Application Developer: Add a dedicated page on how to access the a9s Public API. For more information, see a9s Public API - Accessing.
  • docs: Platform Operator: a9s SSO Proxy: Add the uaa_checkup_interval section on a9s SSO Proxy page. For more information, see a9s SSO Proxy BOSH properties.

Changed

  • breaking change all services: a9s Service Dashboard: The feature to Recreate a Service Instance is now enabled by default. If you want to disable this feature, you have to apply the Ops File disable-instance-recreate.yml.
  • breaking change all services: a9s Service Dashboard: The feature to Restart a Service Instance is now enabled by default. If you want to disable this feature, you have to apply the Ops File disable-instance-restart.yml.
  • breaking change all services: a9s Service Dashboard: Update the BOSH property names regarding the color theme customization of the a9s Service Dashboard. For more information, see Customize Color Theme.
  • breaking change all services: a9s Service Dashboard: Update the BOSH property names regarding the customization of the Disable Automatic Update Modal in the Updates page of the a9s Service Dashboard. For more information, see Allow to Block Automatic Updates.
  • breaking change all services: a9s SSO Proxy: Update the authorization mechanism of a9s Public API v1 endpoints to eliminate the use of cookies and redirects.
  • all services: a9s BOSH Deployer:
    • Update Rails to v7.2.
    • Update to the newest database field encryption method. After deploying the newest version, the migrate-deployer-encrypted-database-fields errand needs to be run for each Data Service.
    • The errand migrate-deployer-encrypted-database-fields is now part of the deployer-api instance group and therefore its dedicated instance group has been removed.
  • all services: a9s DS API Gateway: Adapt the KrakenD configuration to disable the endpoint to download a Service Instance's backup when the property platform.backup_download_allowed is set to false.
  • all services: a9s DS API Gateway: Adapt the KrakenD configuration to disable the endpoint to recreate a Service Instance when the property platform.recreate_allowed is set to false.
  • all services: a9s DS API Gateway: Adapt the KrakenD configuration to disable the endpoint to restart a Service Instance when the property platform.restart_allowed is set to false.
  • all services: a9s Service Broker: Remove anynines_service_broker.jobs.update_instances_locked_state_interval property in favor of the BOSH release's default, which is 60 seconds.
  • all services: a9s SSO Proxy: Adapt configuration to set a9s DS API Gateway target to localhost.
  • all services: a9s Service Dashboard: Set the minimum length for the backups' encryption key through the a9s Backup Manager instead of setting it in the a9s Service Dashboards configuration.
  • all services: a9s Template Uploader Errand: a9s MariaDB: Minor improvements to better support a9s Parachute 2.
  • a9s Backup Services: CF Disaster Recovery Plugin
    • Update internal go dependencies to the latest versions.
    • Update the internals of the plugin to use the a9s Public API V1 endpoints.
  • a9s Backup Services: a9s Backup Manager: Extend the restores endpoint response to include a metadata field containing the restored_from date. For more information, see API V1 Endpoints - List All Restores.
  • a9s MariaDB: Minor code improvements for the a9s Parachute 2 plugin.
  • a9s Messaging: Adapt the Ops file rabbitmq-enable-management-ui-as-route.yml to reflect the new configuration.
  • docs: Application Developer: Add a section on how to set the backup encryption key in the a9s Service Dashboard. For more information, see a9s Service Dashboard - Set a personal Backup Encryption Key.
  • docs: Application Developer: Add missing HTTP Status Code when updating the backups configuration via the a9s Public API. For more information, see a9s Service Dashboard - Update Backups Configuration.
  • docs: Application Developer: Restructure the content of the "API V1 Endpoints" page for better readability. For more information, see API V1 Endpoints.
  • docs: Application Developer: Restructure the a9s Public API section. For more information, see a9s Public API. For more information, see API V1 endpoints authorization.
  • docs: Application Developer: Update the download links of the CF Disaster Recovery Plugin to match the latest version. For more information, see Disaster Recovery - Downloading and Installing the a9s Cloud Foundry CLI Plugin.
  • docs: Application Developer: all services: Update the documentation of Public API v1 endpoints to remove the use of cookies and redirects from the authorization flow. For more information, see a9s Public API - Accessing.
  • docs: Platform Operator: Update Opensearch version on Release Lifecycle Table. For more information, see a9s Data Service Release Lifecycle Table.
  • docs: Platform Operator: Update the content about backup encryption keys in "Custom Backup Encryption Key". For more information, see Custom Backup Encryption Key.
  • docs: Platform Operator: a9s-pg: Update the documentation of a9s-pg to remove the usage of cookies and redirects from the backup recovery APIs. For more information, see a9s-pg manual logical backup recovery.
  • docs: Platform Operator: a9s LogMe2: Add a documentation page regarding the recovery of a9s LogMe 2 clusters. For more informations, see a9s LogMe2 Cluster Recovery
  • docs: Platform Operator: a9s Search: Add a documentation page regarding the recovery of a9s Search clusters. For more informations, see a9s LogMe2 Cluster Recovery
  • docs: Platform Operator: a9s Service Dashboard: Update the documentation page regarding the color theme customization of the a9s Service Dashboard to contain the new BOSH property names. For more information, see Customize Color Theme.
  • docs: Platform Operator: a9s Service Dashboard: Update the documentation page regarding the customization of the Disable Automatic Update Modal in the Updates page of the a9s Service Dashboard to contain the new BOSH property names. For more information, see Allow to Block Automatic Updates.
  • docs: Platform Operator: a9s Service Dashboard: Update the documentation page regarding the static navigation entries of the a9s Service Dashboard to reflect the new configuration. For more information, see Static Navigation Entries.
  • BOSH stemcell: all services: Update Jammy stemcell to version 1.829 for internal tests of all supported services.

Updated Dependencies

  • all services:
    • a9s DS API Gateway:
      • krakend-custom-plugins to v2.10.1.
      • krakend to v2.10.1.
    • routing to v0.340.0.
  • a9s-pg: a9s Logstash: Logstash 8: logstash8 to v8.18.2.
  • a9s KeyValue: a9s Logstash: Logstash 8: logstash8 to v8.18.2.
  • a9s MariaDB:
    • a9s Logstash: logstash8 to v8.18.2.
    • a9s MariaDB 10.11: MariaDB to v10.11.13.
  • a9s Messaging:
    • a9s Logstash: logstash8 to v8.18.2.
    • a9s Messaging 3.13: erlang to v26.2.5.13.
    • a9s Messaging 4.0:
      • erlang to v26.2.5.13.
      • rabbitmq to v4.1.1.
  • a9s MongoDB:
    • a9s Logstash: logstash8 to v8.18.2.
    • a9s MongoDB 7:
      • mongodb to v7.0.21.
      • mongosh to v2.5.2.
  • a9s PostgreSQL:
    • a9s Logstash: logstash8 to v8.18.2.
    • a9s PostgreSQL 13:
      • cmake3 to v3.31.8.
      • postgresql13 to v13.21.
    • a9s PostgreSQL 15: postgresql15 to v15.13.
    • a9s PostgreSQL 17: postgresql17 to v17.5.
  • a9s Prometheus:
    • prometheus2:
      • grafana to v10.4.19.
      • bosh_exporter to v3.7.1.
      • cadvisor to v0.53.0.
      • memcached_exporter to v0.15.3.
      • libxml2 to v2.14.3.
    • prometheus-legacy:
      • bosh_exporter to v3.7.1.
      • jq to v1.8.0.
      • memcached_exporter to v0.15.3.
      • cadvisor to v0.53.0.
      • libxml2 to v2.14.3.
    • promgraf2:
      • bosh_exporter to v3.7.1.
      • jq to v1.8.0.
      • memcached_exporter to v0.15.3.
      • cadvisor to v0.53.0.
      • libxml2 to v2.14.3.
  • a9s Search: a9s Logstash: logstash8 to v8.18.2.

Removed

  • breaking change all services: Remove Ops File ops/allow-instance-recreate-via-dashboard.yml in favor of disable-instance-recreate.yml.
  • breaking change all services: Remove Ops File ops/allow-instance-restart-via-dashboard.yml in favor of disable-instance-restart.yml.
  • breaking change all services: Remove Ops File ops/disable-dashboard-backup-downloads.yml in favor of disable-backup-download.yml.
  • breaking change all services: Remove Ops File ops/dashboard-app-min-key-length.yml in favor of backup-service-min-key-length.yml.
  • breaking change all services: a9s Smoke Tests: Remove without-graphite-tests.yml and with-graphite-tests.yml Ops files.
  • breaking change all services: a9s SSO Proxy: Remove token_expiration_time configuration, as it is no longer needed due to introduction of the uaa_checkup_interval property.
  • docs: Application Developer: Remove the "a9s Public API - API V0 Endpoints" page and all references to it.
  • docs: Application Developer: Remove non-existing anchors the from the "a9s Public API" section.
  • docs: Application Developer: Remove the obsolete service_guid field from sample response in a9s Public API section.
  • docs: Platform Operator: a9s Smoke Tests: Update the smoke-test errand configuration documentation. For more information, see a9s Smoke Tests
  • docs: Platform Operator: a9s SSO Proxy: Remove the token_expiration_time section from a9s SSO Proxy page and all references to it.

Fixed

  • all services: a9s Backup Agent: Fix retry logic for network errors when there is temporary network disturbance, to prevent backups from failing.
  • a9s Backup Services: a9s Backup Manager: Fix heartbeat logic, so that an initial heartbeat is set when creating a task in order to avoid stalling the task_handler after a parallel backup's wait time has been reached.
  • a9s LogMe2: Fix a logic issue that caused the OpenSearch readiness check to be stuck in an infinite loop in post-start script.
  • a9s PostgreSQL: Fix variable escaping so that the copy_from functionality allows the use of quotation marks in the database's name.
  • docs: Application Developer: Fix broken links to the a9s Public API section as well as broken anchors in it. For more information, see a9s Public API.
  • docs: Application Developer: a9s LogMe2: Fix the name of the custom parameters in a9s LogMe2 TLS documentation. For more information, see a9s LogMe2 TLS custom parameters.

Security

  • all services: a9s Service Dashboard: Fix CVE: CVE-2025-23166
  • a9s Prometheus: a9s Grafana: Fix CVEs:
    • CVE-2025-4123
    • CVE-2025-27113

Upcoming

  • a9s Messaging: End of Support: Terminate support, starting from anynines deployment v65.0.0 (expected end of September 2025), for the following deprecated a9s Data Service versions:

    • a9s Messaging 3.12: RabbitMQ 3.12 is end-of-life by their vendor since June 2024
    • a9s Messaging 3.13: RabbitMQ 3.13 is end-of-life by their vendor since Sept 2024

    The creation of new a9s Data Service Instances for these deprecated versions will be disabled by default in the a9s Data Service Bundle and we will not provide regular support for these versions. The corresponding documentation will also be removed. Although we will not intentionally break running Service Instances of these unsupported versions, it cannot be guaranteed that they still work as expected after an update to v65.0.0.