Added
- breaking change a9s Messaging: We consider Messaging 4.0 as
stable
now. You have to set the following properties:- rabbitmq_service.services.a9s-messaging40.name
- rabbitmq_service.services.a9s-messaging40.guid
- rabbitmq_service.services.a9s-messaging40.description
- rabbitmq_service.services.a9s-messaging40.label
- rabbitmq_service.services.a9s-messaging40.version
- rabbitmq_service.services.a9s-messaging40.bindable
- rabbitmq_service.services.a9s-messaging40.requires
- rabbitmq_service.services.a9s-messaging40.tags
- rabbitmq_service.services.a9s-messaging40.documentation_url
- rabbitmq_service.services.a9s-messaging40.metadata
- rabbitmq_service.services.a9s-messaging40.dashboard_client.id
- rabbitmq_service.services.a9s-messaging40.plans-to-test
- rabbitmq_service.services.a9s-messaging40.planupdates-to-test
- all services: Add Ops file ops/global-syslog-endpoints.yml to set a global syslog
specification. Note: This ops file only works with the following services:
- a9s KeyValue
- a9s Messaging
- a9s Search
- all services: a9s Backup Manager: Adjust the a9s Backup Manager so to that it informs the a9s Service Broker when a restore operation has finished, so that it can properly reconcile the Service Instance's state.
- all services: a9s Service Broker: Extend the a9s Service Broker so that it can reconcile a Service Instance's state.
- a9s Billing: Fix Add a9s Invoices Ops File to enable the export to a9s Invoices.
- a9s KeyValue: Add
ops/enable_rc_services/keyvalue.yml
with the following properties to introduce a9s Keyvalue 1.0.0 as ana9s Release Candidate
:- keyvalue_service.services.a9s-keyvalue8.name
- keyvalue_service.services.a9s-keyvalue8.guid
- keyvalue_service.services.a9s-keyvalue8.description
- keyvalue_service.services.a9s-keyvalue8.label
- keyvalue_service.services.a9s-keyvalue8.version
- keyvalue_service.services.a9s-keyvalue8.bindable
- keyvalue_service.services.a9s-keyvalue8.requires
- keyvalue_service.services.a9s-keyvalue8.tags
- keyvalue_service.services.a9s-keyvalue8.documentation_url
- keyvalue_service.services.a9s-keyvalue8.metadata
- keyvalue_service.services.a9s-keyvalue8.dashboard_client.id
- keyvalue_service.services.a9s-keyvalue8.plans
- keyvalue_service.services.a9s-keyvalue8.plans-to-test
- keyvalue_service.services.a9s-keyvalue8.planupdates-to-test
- a9s KeyValue: Release a9s KeyValue 8 as RC. For more information, see a9s Platform Operator - Sunrise Sunset.
- a9s Messaging: Add configuration
global_syslog_endpoints
to allow global specification of syslog endpoints. Use the Ops file ops/global-syslog-endpoints.yml to set these for Service Instances. - a9s MongoDB: a9s Backup Agent: Implement logic to execute reconfiguration scripts after an external restore has been completed.
- a9s MongoDB: a9s MongoDB SPI: Introduce
reconcile
logic to update the value of thedefault_database
attribute in the Service Broker database after an external restore has been completed. - a9s MongoDB:
- a9s MongoDB 7 SSPL: Add functionality to make the cluster operational after an external restore. These changes enable the Disaster Recovery feature.
- a9s Search: Add new Configuration
global_syslog_endpoints
to allow global specification of syslog endpoints. Use the Ops file ops/global-syslog-endpoints.yml to set these for Service Instances. - docs: Application Developer: all services: Add disk metrics to Graphite metrics documentation. For more information, see Graphite Metrics.
- docs: Application Developer: all services: Add subsection referencing system metrics in the metrics section. For more information, see for example a9s PostgreSQL Metrics.
- docs: Application Developer: a9s KeyValue: Add a note explaining the behavior of a9s KeyValue in non-persistent mode. For more information, see Change RDB Persistence Settings.
- docs: Application Developer: a9s PostgreSQL: Add a migration matrix to visually display the allowed migration paths to the a9s PostgreSQL's Migration page. For more information, see Migration - Migration Matrix.
- docs: Platform Operator: a9s KeyValue: Add a note explaining the behavior of a9s KeyValue in non-persistent mode. For more information, see Reserved Disk Space.
- docs: Platform Operator: a9s MariaDB: Extend the Custom Parameters Configuration documentation to include a reference to the Custom Parameters configuration per Service plan. For more information, see Custom Parameter Configuration per Service Plan.
- docs: Platform Operator: a9s Messaging: Add a9s Messaging 4.0 as
a9s General Availability
. For more information, see a9s Platform Operator Sunrise Sunset. - docs: Platform Operator: Service Catalog: Extend the Custom Parameters Configuration per Service Plan documentation to include a reference to the MariaDB SPI configuration documentation. For more information, see Custom Parameter Configuration.
Changed
- all services: a9s Backup Agent: Update internal dependencies.
- all services: a9s BOSH Deployer: Update internal dependencies.
- all services: a9s CF Service Guard: Update internal dependencies.
- all services: a9s Deployment Updater: Update internal dependencies.
- all services: a9s DS API Gateway: Refactor internal components to remove redundant vendored packages.
- all services: a9s Service Broker: Update internal dependencies.
- all services: a9s Smoke Tests: Update internal dependencies.
- all services: a9s Template Uploader Errand: Update internal dependencies.
- all services:
bpm
1.4.5routing
0.321.0
- a9s Backup Services: a9s Backup Manager: Update internal dependencies.
- a9s Backup Services: a9s Backup Monit: Update internal dependencies.
- a9s KeyValue: a9s KeyValue SPI: Update internal dependencies.
- a9s KeyValue:
- a9s KeyValue 8:
- logstash v8.16.1
- a9s KeyValue 8:
- a9s LogMe2:
- Fluentd:
- aws-eventstream v1.3.0
- aws-partitions v1.1004.0
- aws-sdk-core v3.212.0
- aws-sigv4 v1.10.1
- concurrent-ruby v1.3.4
- cool.io v1.9.0
- excon v0.112.0
- faraday v2.12.0
- faraday-excon v2.2.0
- faraday-net_http v3.3.0
- fluent-plugin-opensearch v1.1.5
- fluentd v1.17.1
- json v2.8.1
- logger v1.6.1
- msgpack v1.7.5
- net-http v0.5.0
- opensearch-ruby v3.4.0
- rexml v3.3.9
- serverengine v2.4.0
- tzinfo-data v1.2024.2
- uri v1.0.1
- webrick v1.9.0
- OpenSearch
- OpenSearch v2.18.0
- OpenSearch Dashboards v2.18.0
- OpenSearch Plugin Repository Azure v2.18.0
- OpenSearch Plugin Repository S3 v2.18.0
- Fluentd:
- a9s LogMe2: a9s LogMe2 SPI: Update internal dependencies.
- a9s MariaDB: a9s MariaDB SPI: Update internal dependencies.
- a9s MariaDB:
- a9s MariaDB 10.11:
- mariadb v10.11.10
- a9s MariaDB 10.6:
- mariadb v10.6.20
- a9s MariaDB 10.11:
- a9s Messaging: a9s RabbitMQ SPI: Update internal dependencies.
- a9s Messaging: a9s RabbitMQ SPI: Update SPI to allow new Syslog Parameters.
- a9s Messaging:
- a9s Messaging 4.0:
- logstash v8.16.1
- a9s Messaging 4.0:
- a9s MongoDB: SPI: Update dependencies in the a9s MongoDB SPI.
- a9s MongoDB:
- mongodb70sspl:
- mongodb v7.0.15
- mongosh v2.3.3
- mongodb50sspl
- mongodb v5.0.30
- mongodb70sspl:
- a9s PostgreSQL: SPI: Update dependencies in the a9s PostgreSQL SPI.
- a9s PostgreSQL: a9s PostgreSQL 15: Refactor logging of the a9s PostgreSQL service and improve log messages by logging also debug information when the a9s PostgreSQL process is started.
- a9s PostgreSQL:
- a9s PostgreSQL 13:
- CMake v3.31.1
- PostgreSQL v13.18
- a9s PostgreSQL 15:
- PostgreSQL v15.10
- a9s PostgreSQL 13:
- a9s Prometheus: SPI: Update dependencies in the a9s Prometheus SPI.
- a9s Prometheus:
promgraf2
:- prometheus to v2.53.3
- bosh_exporter to v3.6.5
- postgres_exporter to v0.16.0
- memcached_exporter to v0.15.0
- mysqld_exporter to v0.16.0
- collectd_exporter to v0.7.0
- consul_exporter to v0.13.0
- stackdriver_exporter to v0.17.0
- cadvisor to v0.51.0
- graphite_exporter to v0.16.0
- influxdb_exporter to v0.12.0
prometheus-legacy
:- prometheus to v2.53.3
- bosh_exporter to v3.6.5
- postgres_exporter to v0.16.0
- memcached_exporter to v0.15.0
- mysqld_exporter to v0.16.0
- collectd_exporter to v0.7.0
- consul_exporter to v0.13.0
- stackdriver_exporter to v0.17.0
- cadvisor to v0.51.0
- graphite_exporter to v0.16.0
- influxdb_exporter to v0.12.0
prometheus2
:- prometheus to v2.53.3
- bosh_exporter to v3.6.5
- postgres_exporter to v0.16.0
- memcached_exporter to v0.15.0
- mysqld_exporter to v0.16.0
- collectd_exporter to v0.7.0
- consul_exporter to v0.13.0
- stackdriver_exporter to v0.17.0
- cadvisor to v0.51.0
- graphite_exporter to v0.16.0
- influxdb_exporter to v0.12.0
- a9s Redis: SPI: Update dependencies in the a9s Redis SPI.
- a9s Search:
- logstash v8.16.1
- OpenSearch v2.18.0
- OpenSearch Dashboards v2.18.0
- OpenSearch Plugin Repository Azure v2.18.0
- OpenSearch Plugin Repository S3 v2.18.0
- docs: Application Developer: all services: Update the Disaster Recovery Documentation to add information related to a9s MongoDB's Disaster Recovery. For more information, see Disaster Recovery.
- docs: Application Developer: a9s KeyValue: Extend syslog endpoint format to allow specification of endpoints with TLS encryption. For more information, see Add a Syslog Endpoint.
- docs: Application Developer: a9s KeyValue: Fix general typos. For more information, see Using a9s KeyValue.
- docs: Application Developer: a9s Messaging: Extend syslog endpoint format to allow specification of endpoints with TLS encryption. For more information, see Add a Syslog Endpoint.
- docs: Application Developer: a9s MongoDB: Extend the forking guide of the "Using a9s MongoDB" page to include the steps to fork an a9s MongoDB Service Instance via the Disaster Recovery feature. For more information, see Using a9s MongoDB - Creating a Fork of a Service Instance.
- docs: Application Developer: a9s Redis: Fix general typos. For more information, see Using a9s Redis.
- docs: Application Developer: a9s Search: Change syslog endpoint format to allow specification of endpoints with TLS encryption. For more information, see Add a Syslog Endpoint.
- docs: Platform Operator: all services: Update the list of Data Services that support the Disaster Recovery feature to include a9s Messaging and a9s MongoDB. For more information, see Disaster Recovery.
- docs: Platform Operator: a9s KeyValue: Fix general typos. For more information, see a9s KeyValue Resources Considerations.
- docs: Platform Operator: a9s KeyValue: Update a9s Data Services Release Cycles and a9s Data Service Release Lifecycle Table. For more information, see a9s Data Services Release Cycles.
- docs: Platform Operator: a9s Messaging: Add the required port
5671
for AMQPS of the a9s Messaging Data Service. For more information, see a9s Platform Required Ports - docs: Platform Operator: a9s Redis: Fix general typos. For more information, see a9s Redis Resources Considerations.
- docs: Platform Operator: a9s Template Uploader Errand: Add
global_syslog_endpoints
parameter fortemplate_uploader_errand
. In contrast toglobal_syslog_endpoint
, this parameter supports multiple endpoints with optional TLS encryption. For more information, see Syslog Endpoints Configuration With TLS Support. - BOSH stemcell: all services: Update Jammy stemcell to version
1.651
for internal tests of all supported services. - INTERNAL RELEASE a9s MongoDB: a9s MongoDB SSPL: Removed
monit_debugger
from monit tool.
Unsupported
a9s Messaging: End of Support: Terminate support for the following deprecated data service versions:
- a9s Messaging 3.7
- a9s Messaging 3.8
The creation of new a9s Data Service Instances for these deprecated versions is now disabled by default in the a9s Data Service Bundle and we no longer provide regular support for these versions. The corresponding documentation has been removed.
Although we will not intentionally break running a9s Data Service Instances of these unsupported versions, it cannot be guaranteed that they still work as expected after an update to this release.
a9s Redis: End of Support: Terminate support for the following deprecated a9s Data Service version:
- a9s Redis 5.0
The creation of new a9s Data Service Instances for this deprecated version is now disabled by default in the a9s Data Service Bundle and we no longer provide regular support for this version. The corresponding documentation has been removed.
Although we will not intentionally break running a9s Data Service Instances of this unsupported version, it cannot be guaranteed that they still work as expected after an update to this release.
Removed
- docs: Application Developer: all services: Remove unusable parameter
interval
when setting syslog endpoint via a Custom Parameter. For more information, see for example Using a9s PostgreSQL - Add a Syslog Endpoint. - docs: Platform Operator: all services: Remove the a9s Backup Manager and a9s Backup Agent memory threshold configuration. For more information, see Memory Limit Thresholds.
- docs: Platform Operator: all services: Remove
Setup a Global Syslog Endpoint via Runtime Plugin
page.
Fixed
- all services: a9s Backup Agent: Fix parsing of the backup store's endpoint URL when using a generic S3 backup store.
- all services: a9s Backup Agent: Fix storage connection timeouts that could happen while restoring big backups. The fix will only apply for backups created after the update of the a9s Backup Agent.
- all services: a9s Backup Agent: Allow multiple CAs to verify the a9s Backup Manager server certificate. This is particularly necessary for a CA certificate rotation, as both the new and the old certificate must be available to verify the server certificate during the rotation.
- a9s Backup Manager: Fix parsing of the backup store's endpoint URL when using a generic S3 backup store.
- a9s Backup Manager: Remove outdated
restart-above-memory-usage
feature to prevent unnecessary restarts of the a9s Backup Manager processes, which could cause delays in backup scheduling. - a9s Backup Manager: Allow multiple CAs to verify the a9s Backup Agents' server certificates. This is particularly necessary for a CA certificate rotation, as both the new and the old certificate must be available to verify the server certificate during the rotation.
- a9s Backup Monit: Fix parsing of the backup store's endpoint URL when using a generic S3 backup store.
- a9s Backup Monit: Remove outdated
restart-above-memory-usage
feature to prevent unnecessary restarts of the a9s Backup Monit process. - a9s KeyValue: Fix an issue where data was incorrectly restored after restarting the ValKey process with the persistence feature disabled.
Security
- all services: a9s Backup Agent: Fix CVEs:
- CVE-2024-49761
- all services: a9s BOSH Deployer: Fix CVEs:
- CVE-2024-41123
- CVE-2024-34459
- CVE-2024-28103
- CVE-2024-49761
- all services: a9s CF Service Guard: Fix CVEs:
- CVE-2024-41123
- CVE-2024-34459
- CVE-2024-28103
- CVE-2024-49761
- all services: a9s Deployment Updater: Fix CVEs:
- CVE-2024-41123
- CVE-2024-41946
- CVE-2024-49761
- all services: a9s Service Broker: Fix CVEs:
- CVE-2024-41123
- CVE-2024-34459
- CVE-2024-28103
- CVE-2024-49761
- CVE-2024-41946
- all services: a9s Service Dashboard: Fix CVE-2024-21536
- all services: a9s Smoke Tests: Fix CVEs:
- CVE-2024-34459
- CVE-2024-28103
- all services: a9s Template Uploader Errand: Fix CVEs:
- CVE-2024-41123
- CVE-2024-41946
- CVE-2024-49761
- a9s Backup Manager: Fix CVEs:
- CVE-2024-49761
- a9s Backup Monit: Fix CVEs:
- CVE-2024-34459
- CVE-2024-41123
- CVE-2024-41946
- CVE-2024-49761
- a9s KeyValue: SPI: Fix CVEs:
- CVE-2024-41123
- CVE-2024-41946
- CVE-2024-49761
- a9s LogMe2: SPI: Fix CVEs:
- CVE-2024-41123
- CVE-2024-41946
- CVE-2024-49761
- a9s MariaDB: SPI: Fix CVEs:
- CVE-2024-41123
- CVE-2024-41946
- CVE-2024-49761
- a9s Messaging: SPI: Fix CVEs:
- CVE-2024-41123
- CVE-2024-41946
- CVE-2024-49761
- a9s MongoDB: SPI: Fix CVEs:
- CVE-2024-41123
- CVE-2024-41946
- CVE-2024-49761
- a9s PostgreSQL: SPI: Fix CVEs:
- CVE-2024-41123
- CVE-2024-41946
- CVE-2024-49761
- a9s Prometheus: SPI: Fix CVEs:
- CVE-2024-41123
- CVE-2024-41946
- CVE-2024-49761
- a9s Redis: SPI: Fix CVEs:
- CVE-2024-41123
- CVE-2024-41946
- CVE-2024-49761