Skip to main content

· 2 min read

Added​

  • all services: a9s Service Dashboard: Make the style of the a9s Service Dashboard customizable. For more information see a9s Service Dashboard Color Theme.
  • a9s Billing:
    • cf_billing
      • Add property cf_billing.efforts.oauth to enable OAuth2 authentification for efforts endpoints
      • Add property cf_billing.time_zone to be able to use different time zones than UTC
  • a9s Search: Introduce discovered_master and discovered_cluster_manager metrics in the a9s Logstash OpenSearch plugin.
  • docs: Application Developer: Update a9s Search documentation with the discovered_master and discovered_cluster_manager metrics. For more information see a9s Search Metrics.
  • INTERNAL RELEASE all services: a9s Service Broker: Add a search endpoint to find a service instance by its deployment name.

Changed​

  • all services: Update routing BOSH release to latest version 0.262.0.
  • all services: Update bpm BOSH release to latest version 1.2.0.
  • a9s MongoDB:
    • a9s MongoDB 50
      • MongoDB 5.0.16
  • docs: Platform Operator: a9s PostgreSQL: Add a table describing the accepted backup-manager-service-instance-id, now referred to as backup-file-id, values to retrieve the backup encryption secret when executed a manual logical backup recovery. For more information see a9s PostgreSQL Manual Logical Backup Recovery.
  • docs: Platform Operator: a9s Service Dashboard: Add customize service dashboard page. For more information see a9s Service Dashboard Color Theme.
  • INTERNAL RELEASE all services: a9s Backup Agent: Make request timeout and maximum wait time to finish an operation for the backup and restore plugins of a9s Search, a9s Elasticsearch, a9s LogMe, and a9s LogMe 2 configurable.

· One min read

Fixed​

  • all services: a9s SPI: Fix an issue that was introduced in the context of "Revision of certificate handling and standardization between the different a9s Data Services". As soon as the SPI and the templates of an a9s Data Service are updated, no new backups or restores can be triggered, and the bindings of the corresponding TLS/SSL service instances cannot be changed until the service instance is updated too. This is caused by an internal migration of the data structure which is only performed during an update of a service instance. Non-TLS/SSL service instances and newly created service instances are not affected.

· One min read

Fixed​

  • a9s Backup Manager: Add missing configuration anynines-backup-manager.jobs.backup_fragment.max_attempts. This configuration is only relevant if you have at least one a9s PostgreSQL service instance in your environment with Continuous Archiving enabled. In this case, without the mentioned configuration, backups for these service instances cannot be handled and it leads to failing background workers of the a9s Backup Manager and so to a decreasing functionality of the a9s Backup Service.

· 7 min read

Changed​

  • all services: Add functionality to migrate from self-signed certificates for TLS/SSL plans to an external CA that is used to generate certificates for all service instances using a TLS/SSL plan. For more information please see the "Upgrading to v36" Wiki page. Note This doesn't apply to a9s LogMe, a9s Harbor, a9s Kubernetes and a9s Prometheus.
  • all services: Update Logstash Ruby version to Ruby 3.1.3.
  • all services: Update routing BOSH release to latest version 0.260.0.
  • a9s Backup Agent: Update Backup Agent Ruby version to Ruby 3.1.3.
  • a9s Backup Monit: Update Ruby version of a9s Backup Monit to Ruby 3.1.3.
  • a9s BOSH Deployer: Update Ruby version of a9s BOSH Deployer to Ruby 3.1.3.
  • a9s Deployment Updater: Update Ruby version of a9s Deployment Updater to Ruby 3.1.3.
  • a9s LogMe 2:
    • OpenSearch 2.6.0
    • OpenSearchDashboards 2.6.0
  • a9s Search: OpenSearch 2.6.0
  • a9s-pg:
    • a9s PostgreSQL 11
      • PostgreSQL 11.19
  • a9s PostgreSQL:
    • a9s PostgreSQL 13
      • PostgreSQL 13.10
    • a9s PostgreSQL 11
      • PostgreSQL 11.19
  • a9s Prometheus: promgraf2 BOSH release now includes:
    • Grafana 8.5.22
    • graphite_exporter 0.13.3
    • haproxy_exporter 0.15.0
    • statsd_exporter 0.23.1
    • influxdb_exporter 0.11.3
    • memcached_exporter 0.11.2
    • postgres_exporter v0.12.0
    • prometheus v2.43.0
  • a9s Prometheus: prometheus2 BOSH release now includes:
    • graphite_exporter 0.13.3
    • haproxy_exporter 0.15.0
    • influxdb_exporter 0.11.3
    • memcached_exporter 0.11.2
    • statsd_exporter 0.23.1
    • postgres_exporter v0.12.0
    • prometheus v2.43.0
  • a9s Redis:
    • a9s Redis 6
      • Redis 6.2.11
  • a9s Service Broker: Update Ruby version of a9s Service Broker to Ruby 3.1.3.
  • a9s SSO Proxy: Update Ruby version of a9s SSO Proxy to Ruby 3.1.3.
  • a9s Template Uploader: Update Ruby version of a9s Template Uploader to Ruby 3.1.3.
  • docs: Application Developer: Revision of the TLS/SSL Service Plans documentation. For more information see TLS/SSL Service Plans.
  • docs: Application Developer: Revise the documentation for TLS/SSL Service Plans. For more information see a9s TLS/SSL Service Plans.
  • docs: Application Developer: a9s Elasticsearch: Inform the users about existing credentials limitation. Different service keys are created on service instances have the same set of credentials. For more information see a9s ElasticSearch - Obtain Access Credentials
  • docs: Application Developer: a9s MariaDB: Update Migration documentation with the migration path for MariaDB 10.1 to MariaDB 10.6.
  • docs: Application Developer: a9s Messaging: Update the migration page with information regarding the migration path from the deprecated version 3.6 to the current GA version 3.10.
  • docs: Application Developer: a9s Redis: Inform the users about existing credentials limitation. Different service keys are created on service instances have the same set of credentials. For more information see a9s Redis - Obtain Access Credentials
  • docs: Application Developer: a9s LogMe: Inform the users about existing credentials limitation. Different service keys are created on service instances have the same set of credentials. For more information see a9s LogMe - Obtain Access Credentials
  • docs: Application Developer: a9s PostgreSQL 9.4: Removing documentation references to the unsupported PostgreSQL 9.4.
  • docs: Platform Operator: Adjust wording and elaborate various points related to the a9s Data Services release policy. For more information see a9s Data Service Sunrise/Sunset for Major Versions.
  • docs: Platform Operator: Mark a9s Messaging 3.6 as deprecated in the a9s Data Service Release lifecycle Table. For more information see a9s Platform Operator Sunrise Sunset.
  • docs: Platform Operator: Mark the following a9s Redis versions as deprecated in the a9s Data Service Release Lifecycle Table:
    • a9s Redis 3.2
    • a9s Redis 4.0 For more information see a9s Platform Operator - Sunrise Sunset.
  • docs: Platform Operator: Revision of the TLS/SSL Service Plans documentation. For more information see TLS/SSL Service Plans.
  • docs: Platform Operator: a9s PostgreSQL 9.4: Removing documentation references to the unsupported PostgreSQL 9.4.

Deprecated​

  • a9s Messaging:
    • Deprecate a9s Messaging 3.6
  • a9s Redis:
    • Deprecate a9s Redis 3.2
    • Deprecate a9s Redis 4.0

Removed​

  • a9s LogMe2: Remove unused BOSH release a9s-node-guard from manifest.
  • a9s Search: Remove unused BOSH release a9s-node-guard from manifest.

Fixed​

  • all services: Fix a typo with the certificate property name in the use-wildcard-certificate.yml Ops-files.
  • all services: a9s SSO Proxy: Fix an issue that prevents the metrics to be fetched inside the a9s Dashboard.
  • a9s MongoDB: Fix an issue in the MongoDB SPI with the parsing of the MongoDB response when it includes a timestamp.
  • a9s MySQL: Remove use-wildcard-certificate.yml Ops-file. This data service does not support wildcard certificates.
  • docs: Application Developer: Fix a typo with the certificate name. For more information see the a9s TLS/SSL Service Plans section.
  • docs: Application Developer: a9s Messaging: Update the usage documentation with the correct management dashboard links for NON-TLS/SSL and TLS/SSL service instance. For more information see Using a9s Messaging.
  • docs: Application Developer: a9s Messaging: Add additional notes about the backup behavior regarding queues and their data. For more information see Backup and Restore Service Instances.
  • docs: Platform Operator: Fix a typo with the certificate name. For more information see the a9s Deployer Properties, and RabbitMQ TLS/SSL Configuration, and TLS/SSL Service Plans sections.
  • docs: Platform Operator: Adapt the section "Configure TLS" in "Securing the a9s Framework with TLS" to be more precise on what must be exported from CredHub when configuring TLS and setting the certificate information from the Gorouter in CredHub under /cf_router_ssl. It is not necessary to expose the GoRouter private key, only the certificate and the CA are required. For more information see Export the CredHub Variable.
  • docs: Platform Operator: Fix the redirect from the defunct "a9s Data Services Release Lifecycle" page to the a9s Platform Operator - Sunrise Sunset.
  • docs: Platform Operator: Fix the instructions of the Scenario: A Data Service Breaks section of the a9s Data Service Framework Recovery Documentation. For more information see a9s Data Service Framework Recovery.
  • docs: Platform Operator: Fix typos and amend the TLS/SSL documentation:
    • Remove warnings regading the usage of TLS in production.
    • Add missing service to the list of supported data services. For more information see Securing the a9s Framework with TLS.
  • docs: Platform Operator: a9s MySQL: Add an explicit disclaimer to inform that the a9s MySQL Data Service does not support wildcard certificates. For more information see TLS/SSL Service Plans.
  • docs: Platform Operator: a9s Redis: Fix a typo in the BOSH use_dns_addresses parameter. For more information see Disable use_dns_addresses.

Upcoming End of Support​

In the next anynines-deployment release, v37.0.0, we plan to end support for the following services:

  • a9s Kubernetes: The creation of new service instanes for the already deprecated offering will then be disabled by default in the a9s Data Service Bundle, and we will not provide regular support for this offering. Although we will not intentionally break running instances, it cannot be guaranteed that they still work as expected after an update to v37.0.0. For more information see a9s Platform Operator Sunrise Sunset.
  • a9s Harbor: The creation of new service instanes for the already deprecated offering will then be disabled by default in the a9s Data Service Bundle, and we will not provide regular support for this offering. Although we will not intentionally break running instances, it cannot be guaranteed that they still work as expected after an update to v37.0.0. For more information see a9s Platform Operator Sunrise Sunset.

· One min read

Fixed​

  • a9s Messaging: SPI: Fix typo in the alternative name of the SPI certificate. The problem causes issues with the communication between the a9s Service Broker and a9s Messaging SPI.
  • all services: consul-dns: Fix failure when bootstrapping. The post-start script would fail when attempting to remove the stale entries.

· 6 min read

Added​

  • breaking change all services: a9s BOSH Deployer: Enable TLS (HTTPS) encrypted API by default. Check the a9s Deployer Properties for more information. With this change, the default port has changed from 3000 (plain text) to 3001 (TLS). See the a9s Platform Required Ports for more information.
  • breaking change all services: a9s SPI: Enable TLS (HTTPS) encrypted API by default. Check the General Configuration for more information. With this change, the default port has changed from 3000 (plain text) to 3001 (TLS). See the a9s Platform Required Ports for more information.
  • all services: Create bin/prepare.sh script to prepare the environment for the installation of a9s Data Services.
  • a9s Backup Manager: Add parallel_backups_limit for each a9s Service Broker and parallel_manual_backup_tasks to allow a seperate limit for manual backups. For more information see a9s Backup Manager BOSH Properties.
  • a9s LogMe: Create new variable called extensive_teststo enable/disable full set of backup tests on smoke-tests. Basic backup tests enabled by default.
  • a9s LogMe2: Create new variable called extensive_teststo enable/disable full set of backup tests on smoke-tests. Basic backup tests enabled by default.
  • a9s LogMe2: Release a9s LogMe 2 as GA, see a9s Platform Operator - Sunrise Sunset.
  • a9s Messaging 3.10: Add a9s Messaging 3.10 to the service manifest.
  • docs: Application Developer: a9s LogMe2: Add a disclaimer specifying the known limitation of a9s LogMe2's TLS syslog drain functionality and OpenSearch Dashboards when using a user provided certificate. The Certificate Authority used to sign the certificate must be trusted by Cloud Foundry. For further information see Using a9s LogMe2.
  • docs: Application Developer: a9s LogMe2: Add migration path between a9s LogMe and a9s LogMe2 service instances. This is only available for service instances that can reach the log source, as the intent is to synchronize both instances as a log sink. For More information see Migrate From a9s LogMe To a9s LogMe2.
  • docs: Platform Operator: a9s LogMe2: Add a disclaimer specifying the known limitation of a9s LogMe2's TLS syslog drain functionality and OpenSearch Dashboards, which require either an intermediate certificate or a wildcard certificate to provided by the Platform Operator. The certificate must be trusted by Cloud Foundry. For further information see Using a9s LogMe2.
  • docs: Platform Operator: a9s Backup Manager: Extend the a9s Backup Manager's documentation with the new properties parallel_backups_limit, parallel_manual_backup_tasks and shared_parallel_backup_tasks. These properties enable the limitations for parallel backups tasks, both automatically and manually triggered. For more information see a9s Backup Manager BOSH Properties.
  • docs: Platform Operator: Add the Certificate Rotation section, with information on how to rotate the CA Certificates used by the internal communication of the a9s Framework Components.
  • docs: Platform Operator: Move General Configuration from Configure TLS to its own section.
  • docs: Platform Operator: Create new section on the installation documentation to explain the usage of the script to prepare the environment. For more information see the installation page.

Updated​

  • breaking change all services: a9s SPI: Revision of certificate handling and standardization between the different a9s Data Services. For more information see TLS/SSL Service Plans
  • breaking change a9s Backup Manager: Rename the property parallel_backup_tasks to shared_parallel_backup_tasks For more information see a9s Backup Manager BOSH Properties.
  • breaking change all services: Update the ops/rename-service-deployment.yml to support the default TLS configuration for the a9s Deployer and a9s SPI.
  • all services: Make the deploy non serial by default. Now, all components of the a9s Data Service Framework are updated at the same time instead of one after the other.
  • all services: Update routing BOSH release to latest version 0.256.0.
  • a9s Elasticsearch: Update Ruby version of ElasticSearch-SPI to Ruby 3.1.3.
  • a9s LogMe: Update Ruby version of LogMe-SPI to Ruby 3.1.3.
  • a9s LogMe2:
    • OpenSearch 2.5.0
    • opensearch-dashboards 2.5.0
    • repository-azure 2.5.0
    • repository-s3 2.5.0
  • a9s LogMe2: Update Ruby version of LogMe2-SPI to Ruby 3.1.3.
  • a9s MariaDB: Update Ruby version of MariaDB-SPI to Ruby 3.1.3.
  • a9s Messaging:
    • a9s Messaging 3.10
      • RabbitMQ 3.10.17
  • a9s Messaging: Update Ruby version of RabbitMQ-SPI to Ruby 3.1.3.
  • a9s MongoDB: Update Ruby version of MongoDB-SPI to Ruby 3.1.3.
  • a9s MySQL:
    • a9s MySQL 10.4
      • MariaDB 10.4.28
  • a9s MySQL: Update Ruby version of MySQL-SPI to Ruby 3.1.3.
  • a9s PostgreSQL: Update Ruby version of PostgreSQL-SPI to Ruby 3.1.3.
  • a9s Prometheus: promgraf2 BOSH release now includes:
    • Prometheus 2.42.0
    • Grafana 8.5.20
    • influxdb_exporter 0.11.2
    • stackdriver_exporter 0.13.0
  • a9s Prometheus: prometheus2 BOSH release now includes:
    • Prometheus 2.42.0
    • influxdb_exporter 0.11.2
    • stackdriver_exporter 0.13.0
  • a9s Prometheus: Update Ruby version of Prometheus-SPI to Ruby 3.1.3.
  • a9s Redis: Update Ruby version of Redis-SPI to Ruby 3.1.3.
  • a9s Search:
    • a9s Search 2:
      • OpenSearch 2.5.0
      • repository-azure 2.5.0
      • repository-s3 2.5.0
  • a9s Search: Update Ruby version of OpenSearch-SPI to Ruby 3.1.3.
  • docs: Application Developer: Revision of the TLS/SSL Service Plans documentation.
  • docs: Platform Operator: Revision of the TLS/SSL Service Plans documentation.
  • docs: Platform Operator: Mark a9s Messaging 3.10 as GA in the a9s Data Service Release Lifecycle Table. For more information see a9s Platform Operator - Sunrise Sunset.
  • docs: Platform Operator: Mark a9s LogMe 2 as GA in the a9s Data Service Release Lifecycle Table. For more information see a9s Platform Operator - Sunrise Sunset.
  • docs: Platform Operator: Mark a9s MySQL 10.1 as deprecated in the a9s Data Service Release Lifecycle Table. For more information see a9s Platform Operator - Sunrise Sunset.

Deprecated​

  • a9s MySQL 10.1: Deprecate a9s MySQL 10.1.

Removed​

  • breaking change a9s Messaging 3.10: Remove the ops file for adding a9s Messaging 3.10 to the service manifest. a9s Messaging 3.10 is released as GA and does not have to be activated via Ops file anymore.

Fixed​

  • a9s Backup Manager: Improve the backup fragment process, preventing leaving zombie jobs in state queued that would never be picked for execution. Note that a9s PostgreSQL WAL continuous archiving uses backup fragments for the WAL files.
  • a9s LogMe 2: Fix an issue that causes some indices to be left in the 'closed'-state after a restore operation.
  • docs: Platform Operator: Fix broken links, remove external documentation, and restore missing diagram within the installation page. For more information see a9s Data Services Installation.
  • docs: Platform Operator: a9s Backup Services: Fix typo in the General Metrics table of the Backup Monit documentation. For further information see Metrics.

Security​

  • all services: a9s SPIs: Fix CVEs:
    • CVE-2022-29970
    • CVE-2022-45442
    • CVE-2021-41136
    • CVE-2022-23634
    • CVE-2022-24790
    • CVE-2022-44570
    • CVE-2022-44571
    • CVE-2022-44572
    • GHSA-5pq7-52mg-hr42

· 14 min read

Added​

  • breaking change a9s MariaDB: Release a9s MariaDB 10.6 as GA. In order to use a9s MariaDB you have to set the following properties:
    • mariadb_service.services.a9s-mariadb106.name
    • mariadb_service.services.a9s-mariadb106.guid
    • mariadb_service.services.a9s-mariadb106.description
    • mariadb_service.services.a9s-mariadb106.label
    • mariadb_service.services.a9s-mariadb106.version
    • mariadb_service.services.a9s-mariadb106.bindable
    • mariadb_service.services.a9s-mariadb106.requires
    • mariadb_service.services.a9s-mariadb106.tags
    • mariadb_service.services.a9s-mariadb106.documentation_url
    • mariadb_service.services.a9s-mariadb106.metadata
    • mariadb_service.services.a9s-mariadb106.dashboard_client.id
    • mariadb_service.services.a9s-mariadb106.plans For more information see a9s Platform Operator - Sunrise Sunset.
  • breaking change a9s Search: Release a9s Search 2 as GA. In order to use a9s Search you have to set the following properties:
    • search_service.services.a9s-search2.name
    • search_service.services.a9s-search2.guid
    • search_service.services.a9s-search2.description
    • search_service.services.a9s-search2.label
    • search_service.services.a9s-search2.version
    • search_service.services.a9s-search2.bindable
    • search_service.services.a9s-search2.requires
    • search_service.services.a9s-search2.tags
    • search_service.services.a9s-search2.documentation_url
    • search_service.services.a9s-search2.metadata
    • search_service.services.a9s-search2.dashboard_client.id
    • search_service.services.a9s-search2.plans For more information see a9s Platform Operator - Sunrise Sunset.
  • a9s Backup Manager: Add /metrics endpoint to return basic information about the backup and queue states.
  • a9s Backup Monit: Consumes the new /metrics endpoint from the a9s Backup Manager, parses them for the Logstash a9s Backup Monit plugin, and offers them at the /v1/backup_manager endpoint.
  • a9s LogMe2: Release a9s LogMe2 as RC. For more information see a9s Platform Operator - Sunrise Sunset
  • all services: a9s Logstash: Consumes the /v1/backup_manager endpoint from the a9s Backup Monit and sends the metrics to the graphite exporter.
  • all services: a9s Service Dashboard: a9s PostgreSQL: Add the end date as the default date picker value during restore operation.
  • all services: consul-dns: Add script to remove the stale node entries for the primary aliases to post-start of the bootstrap node. The execution of this script happens only once and only in the bootstrap node of the a9s Consul Cluster. To avoid issues deleting entries for existing deployment, make sure that no deployment has all nodes stopped during the consul-dns update.
  • a9s Elasticsearch: Add custom parameter force_certificate_rotation for SSL service plans. This change enables the Application Developer to rotate the leaf certificate but not the CA.
  • a9s LogMe2: Enable OpenSearch Alerting and OpenSearch Notifications plugins for OpenSearch Dashboards.
  • a9s LogMe2: Enable metrics and logs streaming from OpenSearch nodes in an a9s LogMe2 service instance to a configured sink.
  • a9s LogMe2: Add encrypted TCP endpoint for Fluentd.
  • a9s LogMe2: Add support for SMTP notifications.
  • a9s LogMe2: Add syslog custom parameter to stream OpenSearch and Fluentd logs to third-party log-sink(s).
  • a9s LogMe2: Add custom parameter force_certificate_rotation for SSL service plans. This change enables the Application Developer to rotate the leaf certificate but not the CA.
  • a9s MariaDB: Add custom parameter force_certificate_rotation for SSL service plans. This change enables the Application Developer to rotate the leaf certificate but not the CA.
  • a9s MongoDB: Add custom parameter force_certificate_rotation for SSL service plans. This change enables the Application Developer to rotate the leaf certificate but not the CA.
  • a9s MySQL: Add custom parameter force_certificate_rotation for SSL service plans. This change enables the Application Developer to rotate the leaf certificate but not the CA.
  • a9s PostgreSQL: Add custom parameter force_certificate_rotation for SSL service plans. This change enables the Application Developer to rotate the leaf certificate but not the CA. For more information see PostgreSQL TLS/SSL Configuration.
  • a9s Search: Add custom parameter force_certificate_rotation for SSL service plans. This change enables the Application Developer to rotate the leaf certificate but not the CA.
  • INTERNAL RELEASE a9s Service Broker: Add finish_undeployment step to request the cleanup of deleted service instances.
  • docs: Application Developer: Add a disclaimer to the "a9s SSL/TLS Service Plans" page to explain that the a9s Data Services do not support plan upgrades from Non-SSL instances into SSL ones. For more information see a9s SSL/TLS Service Plans
  • docs: Application Developer: a9s Elasticsearch: Add a disclaimer specifying the known limitations of a9s Elasticsearch's Backups, to match the updated information included in the a9s Data Services Installation guide. For more information see the Backup and Restore Service Instances section of Using a9s Elasticsearch.
  • docs: Application Developer: a9s LogMe: Add a disclaimer specifying the known limitations of a9s Elasticsearch's Backups, to match the updated information included in the a9s Data Services Installation guide. For more information see the Backup and Restore Service Instances section of Using a9s LogMe.
  • docs: Application Developer: a9s LogMe2: Add information on how to set a syslog and graphite endpoint. For more information see Using a9s LogMe2 and a9s LogMe2.
  • docs: Application Developer: a9s LogMe2: New custom parameters:
    • opensearch-tls-protocols
    • opensearch-tls-ciphers
    • fluentd-udp
    • fluentd-tcp
    • fluentd-tls
    • fluentd-tls-ciphers
    • fluentd-tls-version
    • fluentd-tls-min-version
    • fluentd-tls-max-version
  • docs: Application Developer: a9s LogMe2: Add documentation for OpenSearch's Alerts creation/usage, as a step-by-step guide. For more information see the "Creating an Alert (Monitor)" section of Alerting and Notifications Plugins.
  • docs: Application Developer: a9s LogMe2: Add documentation for OpenSearch's Notification Channels creation/usage, as a step-by-step guide. For more information see the "Creating a Notification Channel" section of Alerting and Notifications Plugins.
  • docs: Application Developer: a9s LogMe2: Add a warning, explaining the current limitations when restoring an instance with ISM configured. For more information see Using a9s LogMe2.
  • docs: Application Developer: a9s LogMe2: Add a warning to the explaining that the indices of the alertingDashboards and notificationsDashboards plugins cannot be deleted or removed. For more information see Alerting and Notifications Plugins.
  • docs: Application Developer: a9s Search: Add a disclaimer specifying the known limitations of a9s Search's Backups, to match the updated information included in the a9s Data Services Installation guide. For more information see the Backup and Restore Service Instances section of Using a9s Search.
  • docs: Application Developer: a9s Search: Add a warning to explain that the disk space for the same indexes may be different between Elasticsearch and OpenSearch, which is why data cannot be checked by index size after migration. For more information see a9s Search Migration
  • docs: Platform Operator: Add detailed information about the a9s Data Services release policy. For more information see a9s Data Service Sunrise/Sunset for Major Versions.
  • docs: Platform Operator: Move the Release Lifecycle Table information to the a9s Data Service Sunrise/Sunset for Major Versions page. For more information see a9s Data Service Sunrise/Sunset for Major Versions.
  • docs: Platform Operator: Add a disclaimer to the "a9s SSL/TLS Service Plans" and "Service Plans" pages to explain that the a9s Data Services do not support plan upgrades from Non-SSL instances into SSL ones. For more information see Service Plans and Securing the a9s Framework with TLS.
  • docs: Platform Operator: a9s Backup Manager: Add a new page to the current a9s Backup Manager's documentation, as part of making the section visible on the website's sidebar. For more information see a9s Backup Manager BOSH Properties
  • docs: Platform Operator: a9s Backup Monit: Extend the documentation with the new metrics provided by the a9s Backup Monit service. For more information see a9s Backup Manager Metrics.
  • docs: Platform Operator: a9s Backup Services: Add a disclaimer to the relevant "a9s Backup Services" documentation pages to explicitly state the supported AWS S3 Storage Classes. For more information see a9s Backup Process, a9s Backup Service, a9s Data Services Installation and Disaster Recovery.
  • docs: Platform Operator: a9s Elasticsearch: Add a disclaimer specifying the known limitations of a9s Elasticsearch's Backups, to match the updated information included in the a9s Data Services Installation guide. For more information see the Backup and Restore Service Instances section of a9s Elasticsearch Resources Considerations.
  • docs: Platform Operator: a9s LogMe: Add a disclaimer specifying the known limitations of a9s Elasticsearch's Backups, to match the updated information included in the a9s Data Services Installation guide. For more information see the Backup and Restore Service Instances section of a9s LogMe Resources Considerations.
  • docs: Platform Operator: a9s LogMe2: Add new custom parameters to section Default Custom Parameter Configuration on the page a9s LogMe2 SPI Configuration.
  • docs: Platform Operator: a9s LogMe2: Add a warning explaining that the indices of the alertingDashboards and notificationsDashboards plugins cannot be deleted or removed. For more information see a9s LogMe2 SPI Configuration.
  • docs: Platform Operator: a9s PostgreSQL: Add a disclaimer to the "a9s PostgreSQL Manual Point-in-Time Recovery" page to explicitly state the supported AWS S3 Storage Classes. For more information see a9s PostgreSQL Manual Point-in-Time Recovery.
  • docs: Platform Operator: a9s Search: Add a disclaimer specifying the known limitations of a9s Search's Backups, to match the updated information included in the a9s Data Services Installation guide. For more information see the Backup and Restore Service Instances section of a9s Search Resources Considerations.
  • docs: Platform Operator: Add a redirect from the defunct "a9s Data Services Release Lifecycle" page to the a9s Platform Operator - Sunrise Sunset.

Updated​

  • all services: Update routing BOSH release to latest version 0.254.0.
  • all services: Update bpm BOSH release to latest version 1.1.21.
  • all services: a9s Dashboard: Update AntD and ReactScripts.
  • all services: a9s Dashboard: Update UX with minor improvements.
  • all services: Template Uploader Errand: Update templates for a9s LogMe2 to support individual certificates for the dedicated components in an a9s LogMe2 service instance.
  • a9s Backup Manager: Add field backup_type to the backups configuration of the V1 API. For more information see a9s Service Dashboard - API V1.
  • a9s Harbor: PostgreSQL 10.23
  • a9s LogMe2: OpenSearch 2.4.1
  • a9s Messaging:
    • a9s Messaging 3.10
      • RabbitMQ 3.10.14
      • Erlang 24.3.4.8
  • a9s PostgreSQL:
    • a9s PostgreSQL 13
      • PostgreSQL 13.9
    • a9s PostgreSQL 11
      • PostgreSQL 11.18
    • a9s PostgreSQL 10
      • PostgreSQL 10.23
  • a9s Prometheus: promgraf2 BOSH release now includes:
    • Prometheus 2.41.0
    • Grafana 8.5.15
    • graphite_exporter 0.13.1
    • blackbox_exporter 0.23.0
    • cadvisor 0.47.1
    • consul_exporter 0.9.0
    • haproxy_exporter 0.14.0
    • alertmanager 0.25.0
    • statsd_exporter 0.23.0
    • influxdb_exporter 0.11.1
  • a9s Prometheus: prometheus2 BOSH release now includes:
    • Prometheus 2.41.0
    • graphite_exporter 0.13.1
    • blackbox_exporter 0.23.0
    • cadvisor 0.47.1
    • consul_exporter 0.9.0
    • haproxy_exporter 0.14.0
    • influxdb_exporter 0.11.1
    • statsd_exporter 0.23.0
    • alertmanager 0.25.0
  • a9s Redis:
    • a9s Redis 6
      • Redis 6.2.10
  • a9s Search:
    • a9s Search 2:
      • OpenSearch 2.4.1
    • a9s Search 1:
      • OpenSearch 1.3.7
  • addons/mongodbsspl: MongoDB 5.0.14
  • INTERNAL RELEASE all services: a9s Backup Agent: Simplify logger configuration.
  • INTERNAL RELEASE all services: a9s Backup Agent: Improve a9s Backup Agent logs by logging more information during the backup/restore process, and adding additional debug and info messages.
  • INTERNAL RELEASE a9s Backup Manager: Improve a9s Backup Manager logs by separating the API logs from the worker logs, and adding additional debug and info messages.
  • docs: Application Developer: Make the a9s Dashboard API's deprecation notice more prominent. For more information see a9s Service Dashboard - API.
  • docs: Application Developer: Update the documentation regarding TLS/SSL Plans. For more information see SSL Plans.
  • docs: Platform Operator: Extend the "Known Limitations of a9s Backup Service" section in the a9s Data Services Installation guide. For more information see Known Limitations of a9s Backup Service.
  • docs: Platform Operator: Up-to-date Vendor DS Version on the a9s Data Services Release Lifecycle page
  • docs: Platform Operator: Update the documentation regarding TLS/SSL Plans. For more information see SSL Plans.
  • docs: Platform Operator: Simplify the a9s Data Service Release Lifecycle Table by changing the a9s Non-GA column into the Introduced column and removing the a9s GA column, since the DS State column provides concise information already. For more information see a9s Data Service Sunrise/Sunset for Major Versions.

Deprecated​

  • a9s Harbor: Deprecate a9s Harbor. For more information see a9s Platform Operator - Sunrise Sunset

Removed​

  • breaking change all services: Remove the Ops-file enable-production-ready-services-only.yml. This Ops-file was used to remove the Non-GA services from their corresponding a9s Data Service. Instead of this opt-out solution, an explicit opt-in solution for Non-GA services is now used. For more information see Enable Non-GA Services.
  • breaking change a9s Harbor: Remove deprecated Harbor from the service catalog.
  • breaking change a9s Kubernetes: Remove deprecated Kubernetes from the service catalog.
  • breaking change a9s LogMe2: Remove LogMe2 from the service catalog. For information on how to enable release candidate services, see Enable Release Candidates Services.
  • breaking change a9s MariaDB: Remove MariaDB 10.6 from the service catalog. For information on how to release candidate services, see Enable Release Candidates Services.
  • breaking change a9s Messaging: Remove Messaging 3.10 from the service catalog. For information on how to enable release candidate services, see Enable Release Candidates Services.
  • breaking change a9s PostgreSQL: Remove deprecated PostgreSQL 9.4 from the service catalog. This removal follows the deprecation process started in version 16.0.0.
  • breaking change a9s Prometheus: Remove Prometheus from the service catalog. For information on how to enable beta services, see Enable Beta Services.
  • breaking change a9s Search: Remove deprecated Search 1 from the service catalog. This removal follows the deprecation process started in version 33.0.0.
  • docs: Platform Operator: Remove a9s Data Services Release Lifecycle page.

Fixed​

  • all services: SSO-Proxy: Redirect to the Cloud Foundry Authentication page when the CF Token is no longer valid or it is not possible to refresh the token.
  • a9s Elasticsearch: a9s Backup Agent: Make the a9s Backup Agent backup process fail when it reaches the PARTIAL or INCOMPATIBLE snapshot state.
  • a9s Harbor: Remove the node entries for the primary aliases from a9s Consul when the service instance is deleted.
  • a9s LogMe2: a9s Backup Agent: Fix an issue that causes restore operations to fail when OpenSearch Alerting and Notifications are configured.
  • a9s Messaging: Fix custom param roles during service binding creation.
  • a9s Messaging: Emit backing_queue_status metrics only if available.
  • a9s Messaging: Fix force_certificate_rotation for SSL service plans. This change ensures that only the leaf certificate is rotated and not the CA.
  • a9s PostgreSQL: Remove the node entries for the primary alias from a9s Consul when the service instance is deleted.
  • a9s PostgreSQL: Fix force_certificate_rotation for SSL service plans. This change ensures that only the leaf certificate is rotated and not the CA.
  • a9s PostgreSQL: Fix WAL archival backing up files with huge commit entries when enabling continuous_archiving. When the huge commit entry would fill the buffer, the archival process would get stuck, blocking any WAL file from being archived and preventing base backups to finish executing.
  • a9s Redis: Remove the node entries for the primary alias from a9s Consul when the service instance is deleted.
  • a9s Redis: Fix force_certificate_rotation for SSL service plans. This change ensures that only the leaf certificate is rotated and not the CA.
  • a9s Search: a9s Backup Agent: Make the a9s Backup Agent backup process fail when it reaches the PARTIAL or INCOMPATIBLE snapshot state.
  • a9s Service Guard: Fix the security_groups:remove Rake task so it does not remove security groups that are in use.
  • a9s Service Guard: Run only one SyncSharedInstancesJob at a time.
  • INTERNAL RELEASE a9s-pg: Fix WAL archival backing up files with huge commit entries when enabling continuous_archiving. When the huge commit entry would fill the buffer, the archival process would get stuck, blocking any WAL file from being archived and preventing base backups to finish executing.
  • INTERNAL RELEASE a9s Harbor: a9s PostgreSQL: Fix WAL archival backing up files with huge commit entries when enabling continuous_archiving. When the huge commit entry would fill the buffer, the archival process would get stuck, blocking any WAL file from being archived and preventing base backups to finish executing.
  • docs: Application Developer: Fix typos, formatting mistakes, and metadata issues across the entire documentation.
  • docs: Application Developer: Add note backing_queue_metrics are optional.
  • docs: Platform Operator: Fix typos, formatting mistakes, and metadata issues across the entire documentation.
  • docs: Platform Operator: a9s Backup Manager: Fix the a9s Backup Manager documentation to that it is visible on the website's sidebar. For more information see a9s Backup Manager

Security​

  • all services: a9s Backup Agent: Fix CVEs:
    • CVE-2022-29181
    • GHSA-2qc6-mcvw-92cw
    • GHSA-cgx6-hpwq-fhv5
  • all services: a9s Dashboard: Fix CVEs:
    • CVE-2022-37601
    • CVE-2021-3918
    • CVE-2021-42740
    • CVE-2021-23436
  • a9s Backup Manager: Fix CVEs:
    • CVE-2022-29181
    • GHSA-2qc6-mcvw-92cw
    • GHSA-cgx6-hpwq-fhv5
  • a9s Backup Monit: Fix CVEs:
    • CVE-2022-29181
    • GHSA-2qc6-mcvw-92cw
    • GHSA-cgx6-hpwq-fhv5

· 9 min read

Fixed​

  • breaking change a9s Backup Monit: The metric last_backup_status was adapted from a string value into a numeric value. This change was required because graphite metric values are numeric values, thus the graphite endpoints could not receive this metric as they expect numeric values. For more information see a9s Backup Monit Metrics.
  • all services: a9s Logstash: Update the logstash-output-graphite plugin from version 3.1.5 to version 3.1.6. This was necessary as the plugin was not handling IOException exceptions safely, which could in turn crash Logstash under certain situations.
  • all services: a9s BOSH Deployer: Fix the Recreate button on the a9s Service Dashboard. This was caused by a missing --fix flag within the validation conditions of the recreate subcommand.
  • a9s Backup Manager: Extend the error management inside the Backup Manager to catch the 'host unreachable' error when communicating with the Service Broker. This was necessary since the previous error management did not allow the search for further brokers to continue if any given broker listed was deemed unreachable (even if temporarily); thus causing an early end and potentially causing issues with the related backup.
  • a9s Search: Disable all non-mandatory OpenSearch plugins from a9s Search. This was always the intended functionality.
  • a9s Search: Add missing deployment variable, /search_service_broker_password, to the a9s Search manifest.
  • docs: all services: Fix the documentation sidebar's ordering by adding the sidebar=1 property to the metadata of the intro.md file. For more information see Introduction.
  • docs: Application Developer: Remove duplicate section on the page Using a9s LogMe.
  • docs: Platform Operator: Fix the title of the "a9s-pg Upgrade from 9.4" page. For more information see a9s-pg Upgrade from 9.4.
  • docs: Platform Operator: Fix the title of the "a9s Redis Resources Considerations" page. For more information see a9s Redis Resources Considerations.
  • docs: Platform Operator: Fix the title of the "Service Instance Resource Usage" page. For more information see Service Instance Resource Usage.
  • docs: Platform Operator: Fix the title of the "a9s Data Services Configuration" page. For more information see a9s Data Services Configuration.
  • docs: Platform Operator: Corrected the Non-GA version of a9s MariaDB. It was mistankenly set to v33.0.0 although it was already released as RC in v32.0.0. For more information see Release Lifecycle Information.
  • INTERNAL RELEASE a9s PostgreSQL: Improve a9s postgresql-info-webservice component logs.

Added​

  • breaking change a9s Redis: We now consider Redis 6 as stable. The following properties must be set:
    • redis_service.services.a9s-redis6.name
    • redis_service.services.a9s-redis6.guid
    • redis_service.services.a9s-redis6.description
    • redis_service.services.a9s-redis6.label
    • redis_service.services.a9s-redis6.version
    • redis_service.services.a9s-redis6.bindable
    • redis_service.services.a9s-redis6.requires
    • redis_service.services.a9s-redis6.tags
    • redis_service.services.a9s-redis6.documentation_url
    • redis_service.services.a9s-redis6.metadata
    • redis_service.services.a9s-redis6.dashboard_client.id
    • redis_service.services.a9s-redis6.plans
  • breaking change a9s LogMe: Make the Cloud Foundry NATS credentials used by the Route Register configurable via template uploader variables. Moreover, the Cloud Foundry NATS credentials property have changed from /cf_nats_user and /cf_nats_password to /cf_nats_credentials of CredHub type User. You can check how to migrate the NATS credentials to the new variable in Upgrading to v33. The new properties are documented in Template Uploader Errand Properties.
  • breaking change a9s Harbor: Make the Cloud Foundry NATS credentials used by the Route Register configurable via template uploader variables. Moreover, the Cloud Foundry NATS credentials property have changed from /cf_nats_user and /cf_nats_password to /cf_nats_credentials of CredHub type User. You can check how to migrate the NATS credentials to the new variable in Upgrading to v33. The new properties are documented in Template Uploader Errand Properties.
  • breaking change a9s Prometheus: Make the Cloud Foundry NATS credentials used by the Route Register configurable via template uploader variables. Moreover, the Cloud Foundry NATS credentials property have changed from /cf_nats_user and /cf_nats_password to /cf_nats_credentials of CredHub type User. You can check how to migrate the NATS credentials to the new variable in Upgrading to v33. The new properties are documented in Template Uploader Errand Properties.
  • breaking change a9s Messaging: Make the Cloud Foundry NATS credentials used by the Route Register configurable via Ops File. Moreover, the Cloud Foundry NATS credentials property have changed from /cf_nats_user and /cf_nats_password to /cf_nats_credentials of CredHub type User. You can check how to migrate the NATS credentials to the new variable in Upgrading to v33. The new properties are documented in Template Uploader Errand Properties.
  • breaking change a9s Search: Release a9s Search 2 as a Release Candidate, see the Upgrade Guide for a9s Search 2 and Release Lifecycle Information.
  • all services: Add consul job to the smoke-tests instance group inside the deployment manifests. This ensures that all BOSH VMs are able to resolve hostnames via the a9s Consul, and do not need to rely on default DNS servers inside the cloud_config.
  • a9s LogMe2: Release the first Beta Release of a9s LogMe2. a9s LogMe2 enables on demand provisioning of a pre-configured OpenSearch and Fluentd Stack. This service is a successor to a9s LogMe.
  • a9s PostgreSQL: Add default configuration for continuous archiving. Now it is possible to specify default values globally or per plan for this property. It is also possible to specify if it is modifiable or not. For more information see Continuous Archiving.
  • a9s Billing: Add consul job to the sameness instance group to ensure that all BOSH VMs are able to resolve hostnames via the a9s Consul. This ensures that all BOSH VMs are able to resolve hostnames via the a9s Consul, and do not need to rely on default DNS servers inside the cloud_config.
  • a9s Search: Add the consul domains of a9s Elasticsearch to the whitelist of the reindex operation of OpenSearch. This is necessary in order to allow the migration from a9s Elasticsearch 7 to a9s Search 2 instances. For more infomation see Migrate a9s Elasticsearch 7 To a9s Search 2
  • a9s Smoke Tests: Extend the functionality of the smoke tests to incorporate support for a9s Search 2.
  • docs: Platform Operator: Add column DS State to the "Release Lifecycle Information" table to better visualize the current state of the a9s Data Service versions. For more information see a9s Data Services Release Lifecycle.
  • docs: Platform Operator: Add a disclaimer specifying that a9s MariaDB does not support plan updates from non-ssl plans to ssl plans. For more information see a9s Data Services Installation and a9s MariaDB Resources Considerations.
  • docs: Platform Operator: Add the anynines Data Services Base64 encoded icons to the "a9s Service Catalog" page. For more information see Service Catalog.
  • docs: Platform Operator: Update installation guide to explicitly say that the backups of a9s Elasticsearch and a9s LogMe are not encrypted.
  • docs: Application Developer: Add "Migrate a9s Elasticsearch 7 To a9s Search 2" page to the a9s Search documentation. For more information see Migrate a9s Elasticsearch 7 To a9s Search 2.

Updated​

  • breaking change a9s Search: Enable the section in charge of testing the service instance's backup within the smoke tests by default. The property service-smoke-tests.service.do_check_backup has been set to true.
  • all services: Update routing BOSH release to latest version 0.246.0.
  • all services: a9s Dashboard: Upgrade Node version to v16.18.0
  • all services: a9s Dashboard: Several CVE fixes:
    • Update eventsource to 1.1.2
      • CVE-2022-1650
    • Update merge-deep to 3.0.3
      • CVE-2021-26707
    • Update minimist to 1.1.1
      • CVE-2021-44906
    • Update url-parse to 1.5.10
      • CVE-2022-0686
  • a9s Harbor: Harbor 1.10.14
  • a9s Messaging:
    • a9s Messaging 3.10
      • RabbitMQ 3.10.9
      • Erlang 24.3.4.6
    • a9s Messaging 3.8
      • Erlang 23.3.4.18
  • a9s Prometheus: promgraf2 BOSH release now includes:
    • Grafana 8.5.13
    • statsd_exporter 0.22.8
  • a9s Prometheus: prometheus2 BOSH release now includes:
    • Prometheus 2.40.0
    • statsd_exporter 0.22.8
  • a9s Prometheus: promgraf2 raises open file limit to 65536 via ulimit in the ctl script.
  • a9s Prometheus: prometheus2 raises open file limit to 65536 via ulimit in the ctl script.
  • a9s MariaDB: MariaDB 10.6.11 and Mariadb 10.4.27
  • a9s Search: OpenSearch 1.3.6
  • a9s Elasticsearch: elasticsearch7 BOSH release now includes:
    • OpenJDK 11.0.16_9
  • a9s Elasticsearch: elasticsearch6 BOSH release now includes:
    • OpenJDK 11.0.16_9
  • a9s Elasticsearch: elasticsearch5 BOSH release now includes:
    • OpenJDK 8u345-b01
  • a9s Elasticsearch: elasticsearch2 BOSH release now includes:
    • OpenJDK 8u345-b01
  • a9s LogMe: elasticsearch5 BOSH release now includes:
    • OpenJDK 8u345-b01
  • a9s Billing: Update omniauth-keycloak gem to version 2.1.0. Fixes:
    • CVE-2020-36599
  • addons/mongodbsspl: MongoDB 5.0.13
  • docs: Platform Operator: Renamed the column a9s Beta Release to a9s Non-GA in the Release Lifecycle Information table to better reflect the intent of the release; as the service is either meant to be in the beta phase, or it can be the next release candidate. For more information see Release Lifecycle Information.
  • docs: Platform Operator: Renamed the column a9s Stable Release to a9s GA in the Release Lifecycle Information table to better reflect the current nomenclature. For more information see Release Lifecycle Information.

Removed​

  • breaking change a9s Search: Deprecate the Beta release of a9s Search 1. This deprecation is done in favor of a9s Search 2, but without any migration path because a9s Search 1 is a Beta product. The removal of this Beta service has been initiated and will be finalized in v36.0.0. Please be aware that if your instances still exist by v36.0.0 it will break your deployment.
  • INTERNAL RELEASE a9s MariaDB: Remove the consul-master-registrator job from the templates of a9s MariaDB cluster plans. Since a9s MariaDB cluster instances are configured with a master-master setup, and accessed via a Consul service DNS entry that points to all nodes in the cluster. The primary alias provided by this job is not used nor is available to the end user in any way.
  • INTERNAL RELEASE a9s MySQL: Remove the consul-master-registrator job from the templates of a9s MySQL cluster plans. Since a9s MySQL cluster instances are configured with a master-master setup, and accessed via a Consul service DNS entry that points to all nodes in the cluster. The primary alias provided by this job is not used nor is available to the end user in any way.
  • INTERNAL RELEASE all services: a9s Logstash: Remove unused plugin logstash-output-kafka in version 7.0.10 from the offline package to avoid vulnerability scanner hints.

· 7 min read

Fixed​

  • all services: a9s Dashboard: Fix link url when using 'Disable Automatic Update Modal' dialog.
  • a9s-pg: Fix PostgreSQL network relocation that would fail during pre-start and would break the update in environments relying only on BOSH DNS, as DNS resolution is not available during pre-start.
  • a9s-pg: Fix drain script that would fail to execute when the start-up lock dir does not exist, causing a stop operation to fail.
  • a9s Backup Manager: Adjust the ops file backup-on-alicloud.yml to remove the configuration for a9s Search service.
  • a9s Backup Manager: Adjust the ops file backup-on-generic-s3.yml to remove the configuration for a9s Search service.
  • a9s Service Guard: Fix an issue when the created security groups are not applied to the diego-cells and therefore connections between the app and the service instance were still blocked. This was caused because Cloud Foundry is moving away from CC API v2 to CC API v3. As a result, some operations are executed only against CC API v2 are not working as expected. Now operations regarding security groups also support CC API v3. You can choose the version of the API via the a9s Service Guard property cf_service_guard.cloud_foundry.api_version. The default is v3.
  • a9s PostgreSQL: Fix PostgreSQL network relocation that would fail during pre-start and would break the update in environments relying only on BOSH DNS, as DNS resolution is not available during pre-start.
  • a9s PostgreSQL: Fix drain script that would fail to execute when the start-up lock dir does not exist, causing a stop operation to fail.
  • a9s Messaging: SPI: Fix binding to include Stomp and MQTT information.
  • a9s Messaging: SPI: Fix Subject Alternative Names for RabbitMQ Management UI when using SSL Plans.
  • a9s Harbor: Fix PostgreSQL network relocation that would fail during pre-start and would break the update in environments relying only on BOSH DNS, as DNS resolution is not available during pre-start.
  • a9s Harbor: Fix drain script that would fail to execute when the start-up lock dir does not exist, causing a stop operation to fail.
  • a9s Harbor: Remove broken link to Harbor log directory, so that bosh logs works again.

Added​

  • breaking change all services: a9s BOSH Deployer: Provide a configuration for the deployment updater to force a recreation of all VMs. Additionally, instances that are not responsive and would result in an error are now recovered instead. See Platform Operator documentation.
  • breaking change a9s PostgreSQL: We consider PostgreSQL 13 as stable now. You have to set the following properties:
    • postgresql_service.services.a9s-postgresql13.name
    • postgresql_service.services.a9s-postgresql13.guid
    • postgresql_service.services.a9s-postgresql13.description
    • postgresql_service.services.a9s-postgresql13.label
    • postgresql_service.services.a9s-postgresql13.version
    • postgresql_service.services.a9s-postgresql13.bindable
    • postgresql_service.services.a9s-postgresql13.requires
    • postgresql_service.services.a9s-postgresql13.tags
    • postgresql_service.services.a9s-postgresql13.documentation_url
    • postgresql_service.services.a9s-postgresql13.metadata
    • postgresql_service.services.a9s-postgresql13.dashboard_client.id
    • postgresql_service.services.a9s-postgresql13.plans-to-test
    • postgresql_service.services.a9s-postgresql13.planupdates-to-test
  • all services: a9s Dashboard: Add 'Restored From' column on Restores table for the a9s Postgresql service instances with PITR enabled. This column shows the point in time used to generate the restores.
  • all services: a9s Dashboard: Disable 'Set Encryption Key' button on the backups menu when backups download is not allowed (allow_downloads is set to false).
  • all services: a9s Backup Agent: Support backup and restore for a9s MariaDB.
  • all services: a9s Logstash: Add a new plugin for a9s MariaDB metrics.
  • a9s Service Guard: Add platform operator tasks to cleanup unused security groups and truncate approvals. For more information see use_dns_addresses
  • a9s Search: Add support for TLS communication. Documentation can be found here.
  • a9s MariaDB: Add a9s MariaDB data service. The a9s MySQL service is being replaced in favor of the a9s MariaDB data service. The new data service starts with MariaDB 10.6. See the platform operator documentation and application developer documentation.
  • a9s Prometheus: Add a9s MariaDB metrics.
  • docs: Application Developer: Add a9s MariaDB migration page. For more information see a9s MariaDB Migration.
  • docs: Platform Operator: Add missing 4444 and 4568 ports to a9s MySQL ports list. See more here
  • docs: Platform Operator: Add more information on how to configure the wildcard certificate correctly. See the Wildcard Certificate section.
  • docs: Platform Operator: Add note to installation instructions informing clients to disable use_dns_addresses. and additional section to explain issue with use_dns_addresses property.
  • docs: Platform Operator: Add missing information regarding the configuration of cdns_encrypt key, which is needed to deploy a9s Consul, to the a9s Data Services Installation Guide.
  • INTERNAL RELEASE a9s Harbor: Add dns_servers BOSH property to the docker job to configure custom DNS servers.

Updated​

  • all services: Update bpm BOSH release to latest version 1.1.19.
  • all services: Update routing BOSH release to latest version 0.238.0.
  • a9s Search: Update repository-azure and repository-s3 plugins to latest version 1.3.4.
  • a9s Prometheus: promgraf2 BOSH release now includes:
    • Prometheus 2.38.0
    • Grafana 8.5.11
    • blackbox_exporter 0.22.0
    • bosh_exporter 3.4.0
    • cadvisor 0.45.0
    • elasticsearch_exporter 1.5.0
    • graphite_exporter 0.12.3
    • influxdb_exporter 0.10.0
    • postgres_exporter 0.11.1
    • statsd_exporter 0.22.7
  • a9s Prometheus: prometheus2 BOSH release now includes:
    • Prometheus 2.37.0
    • blackbox_exporter 0.22.0
    • bosh_exporter 3.4.0
    • cadvisor 0.45.0
    • elasticsearch_exporter 1.5.0
    • graphite_exporter 0.12.3
    • influxdb_exporter 0.10.0
    • postgres_exporter 0.11.0
    • statsd_exporter 0.22.7
  • a9s Messaging:
    • a9s Messaging 3.10
      • Erlang 24.3.4.3
      • RabbitMQ 3.10.7
  • a9s MySQL: MariaDB 10.4.26
  • a9s Backup Agent: Several CVE fixes:
    • Update puma to version 4.3.12. Fixes:
      • CVE-2022-24790
      • CVE-2022-23634
    • Update rack to version 2.2.4. Fixes:
      • CVE-2022-30123
      • CVE-2022-30122
    • Update nokogiri to version 1.13.8. Fixes:
      • GHSA-cgx6-hpwq-fhv5
      • GHSA-gx8x-g87m-h5q6
      • GHSA-xxx9-3xcr-gjj3
      • GHSA-fq42-c5rg-92c2
      • GHSA-v6gp-9mmm-c6p5
      • CVE-2022-29181
      • CVE-2022-24836
    • Update tzinfo to version 1.2.10. Fixes:
      • CVE-2022-31163
  • a9s Backup Manager: Several CVE fixes:
    • Update rack to version 2.2.4. Fixes:
      • CVE-2022-30123
      • CVE-2022-30122
    • Update puma to version 4.3.12. Fixes:
      • CVE-2022-24790
      • CVE-2022-23634
    • Update nokogiri to version 1.13.8. Fixes:
      • GHSA-cgx6-hpwq-fhv5
      • GHSA-gx8x-g87m-h5q6
      • GHSA-xxx9-3xcr-gjj3
      • GHSA-fq42-c5rg-92c2
      • GHSA-v6gp-9mmm-c6p5
      • CVE-2022-29181
      • CVE-2022-24836
    • Update rails-html-sanitizer to version 1.4.3. Fixes:
      • CVE-2022-32209
    • Update nokogiri to version 1.13.8. Fixes:
      • GHSA-cgx6-hpwq-fhv5
      • GHSA-gx8x-g87m-h5q6
      • GHSA-xxx9-3xcr-gjj3
      • GHSA-fq42-c5rg-92c2
      • GHSA-v6gp-9mmm-c6p5
      • CVE-2022-29181
      • CVE-2022-24836
  • a9s Backup Monit: Several CVE fixes:
    • Update rack to version 2.2.4. Fixes:
      • CVE-2022-30123
      • CVE-2022-30122
    • Update puma to version 4.3.12. Fixes:
      • CVE-2022-24790
      • CVE-2022-23634
    • Update rails-html-sanitizer to version 1.4.3. Fixes:
      • CVE-2022-32209
  • a9s SSO Proxy: Several CVE fixes
    • Update rack to version 2.2.4. Fixes:
      • CVE-2022-30123
      • CVE-2022-30122
    • Update puma to version 5.6.5. Fixes:
      • CVE-2022-24790
      • CVE-2022-23634
    • Update sinatra to version 2.2.2. Fixes:
      • CVE-2022-29970
  • a9s Smoke Tests: Several CVE fixes:
    • Update rack to version 2.2.4. Fixes:
      • CVE-2022-30122
      • CVE-2022-30123
    • Update nokogiri to version 1.13.8. Fixes:
      • GHSA-cgx6-hpwq-fhv5
      • GHSA-gx8x-g87m-h5q6
      • GHSA-xxx9-3xcr-gjj3
      • GHSA-fq42-c5rg-92c2
      • GHSA-v6gp-9mmm-c6p5
      • CVE-2022-29181
      • CVE-2022-24836
  • a9s Harbor SPI: Several CVE fixes:
    • Update nokogiri to version 1.13.8. Fixes:
      • GHSA-cgx6-hpwq-fhv5
      • GHSA-gx8x-g87m-h5q6
      • GHSA-xxx9-3xcr-gjj3
      • GHSA-fq42-c5rg-92c2
      • GHSA-v6gp-9mmm-c6p5
      • CVE-2022-29181
      • CVE-2022-24836
    • Update jmespath to version 1.6.1. Fixes:
      • CVE-2022-32511
  • a9s BOSH Deployer: Several CVE fixes:
    • Update nokogiri to version 1.13.8. Fixes:
      • GHSA-cgx6-hpwq-fhv5
      • GHSA-gx8x-g87m-h5q6
      • GHSA-xxx9-3xcr-gjj3
      • GHSA-fq42-c5rg-92c2
      • GHSA-v6gp-9mmm-c6p5
      • CVE-2022-29181
      • CVE-2022-24836
    • Update rails-html-sanitizer to version 1.4.3. Fixes:
      • CVE-2022-32209
    • Update rack to version 2.2.4. Fixes:
      • CVE-2022-30123
      • CVE-2022-30122
  • a9s Service Broker: Several CVE fixes:
    • Update nokogiri to version 1.13.8. Fixes:
      • GHSA-cgx6-hpwq-fhv5
      • GHSA-gx8x-g87m-h5q6
      • GHSA-xxx9-3xcr-gjj3
      • GHSA-fq42-c5rg-92c2
      • GHSA-v6gp-9mmm-c6p5
      • CVE-2022-29181
      • CVE-2022-24836
    • Update rack to version 2.2.4. Fixes:
      • CVE-2022-30123
      • CVE-2022-30122
    • Update rails-html-sanitizer to version 1.4.3. Fixes:
      • CVE-2022-32209
    • Update puma to version 5.6.5. Fixes:
      • CVE-2022-24790
      • CVE-2022-23634
  • addons/mongodbsspl: MongoDB 5.0.12
  • docs: Application Developer: Move a9s MySQL documentation to a9s MariaDB documentation. For more information see a9s MySQL.
  • docs: Platform Operator: Move a9s MySQL documentation to a9s MariaDB documentation. For more information see a9s MySQL.
  • INTERNAL RELEASE a9s Messaging SPI: Consolidate Code of Service Bindings for non-SSL and SSL Plans.

Removed​

  • docs: Platform Operator: Remove hints about a9s Cloud Config Wizard.
  • docs: Platform Operator: Remove --vars-store secrets/creds.yml usage from installation instructions.
  • docs: Platform Operator: Remove all documentation about setting backup stores for a9s-pg deployment. This is not needed anymore as backups of a9s-pg are managed by a9s Backup Manager.
  • docs: Platform Operator: Remove incorrect statement from page Cleanup Purged Service Instances

· 2 min read

Fixed​

  • a9s Backup Manager: Adjust the ops file backup-on-alicloud.yml to remove the configuration for a9s Search service.
  • docs: Platform Operator: Add more information on how to configure the wildcard certificate correctly. See the Wildcard Certificate section.
  • docs: Platform Operator: Fixed missing 4444 and 4568 ports to a9s MySQL ports list. See more here

Added​

  • all services: a9s Dashboard: Add 'Restored From' column on Restores table for the a9s Postgresql service instances with PITR enabled. This column shows the point in time used to generate the restores.
  • a9s Search: Add support for TLS communication. Documentation can be found here.
  • a9s Service Guard: Add platform operator tasks to cleanup unused security groups and truncate approvals.
  • docs: Platform Operator: Add note on installation file informing clients to disable use_dns_addresses.
  • docs: Platform Operator: Add section to explain issue with use_dns_addresses property. For more information see use_dns_addresses
  • all services: a9s BOSH Deployer: Provide a configuration for the deployment updater to force a recreation of all VMs. Additionally, instances that are not responsive and would result in an error are now recovered instead. See Platform Operator documentation.

Updated​

  • all services: Update bpm BOSH release to latest version 1.1.19.
  • a9s Search: Update repository-azure and repository-s3 plugins to latest version 1.3.4.
  • a9s Prometheus: promgraf2 BOSH release now includes:
    • Prometheus 2.38.0
    • Grafana 8.5.10
    • blackbox_exporter 0.22.0
    • bosh_exporter 3.4.0
    • cadvisor 0.45.0
    • elasticsearch_exporter 1.5.0
    • graphite_exporter 0.12.3
    • influxdb_exporter 0.10.0
    • postgres_exporter 0.11.1
    • statsd_exporter 0.22.7
  • a9s Prometheus: prometheus2 BOSH release now includes:
    • Prometheus 2.37.0
    • blackbox_exporter 0.22.0
    • bosh_exporter 3.4.0
    • cadvisor 0.45.0
    • elasticsearch_exporter 1.5.0
    • graphite_exporter 0.12.3
    • influxdb_exporter 0.10.0
    • postgres_exporter 0.11.0
    • statsd_exporter 0.22.7
  • a9s Messaging:
    • a9s Messaging 3.10
      • Erlang 24.3.4.3
      • RabbitMQ 3.10.7
  • a9s MySQL: MariaDB 10.4.26
  • INTERNAL RELEASE a9s Messaging SPI: Consolidate Code of Service Bindings for non-SSL and SSL Plans.