release: / 253

Github source: 82fb38a8 or master branch

Contents - Notices - Job Spec Changes - CVEs - Compatible Releases and Stemcells - Subcomponent Updates


  • Preparatory manifest changes: Both CF 253 and Diego 1.8.1 include changes to the manifest generation scripts that introduce the following line in a number of places:
  consumes: { consul: nil }

This will allow the consul job to start providing a bosh link without having that link be consumed by the various consul jobs in the deployment. CF 254 will introduce a version of consul that requires these changes to the manifest, so please ensure that you deploy CF 253 and Diego 1.8.1 first before moving on to CF 254.

Job Spec Changes

  • cf-networking-release: If you are deploying cf-networking-release (which is still experimental), there will be some necessary changes to your manifest.
  • statsd-injector: To successfully deploy statsd-injector (part of loggregator), you’ll need to generate the following properties:
    • loggregator.tls.statsd_injector.cert
    • loggregator.tls.statsd_injector.key

You can generate this keypair using this script. You’ll need to provide the certificate and key for the CA that was used to sign the other loggregator certs. The certificate for that CA can also be found in Deployers should have the private key stored securely. - The included version of Loggregator restricts ciphers to use only the following 4 ciphers. This is a breaking change for some operators and a configurable property for opting into more cipher suites was introduced in Loggregator 85 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384


  • None

Subcomponent Updates

Compatible Releases and Stemcells

Upload this release version to the Director:

$ bosh upload-release --sha1 8e0ea926929bdb1ff16a366e2154d017c637a137

Modify deployment manifest to use this release in addition to any other used releases:

- name: cf
  version: "253"

Finally add needed deployment jobs and specify values for required properties.

Optionally download sha1: 8e0ea926929bdb1ff16a366e2154d017c637a137 release tarball locally:

# ...or download it directly using curl
$ curl -L -J -O

# or with wget...
$ wget --content-disposition