bosh/257

Known Issues: - spec.networks.send(...) calls in ERB templates do not work due to Ruby 2.3 changes. Expect v257.1 with the fix shortly.

New Features: - Track Director task permissions separately from deployment permissions - Allows users to view tasks for deleted deployments if authorized - Support version.latest (e.g. 3232.latest) version scheme for releases and stemcells - Added bosh delete vm <vm-cid> command to easily delete VMs from the IaaS and the Director - Mostly used during recovery and debugging - CPI can delete VMs even not managed by the Director - Added director.enable_dedicated_status_worker property (default false) to reserve one workers for just bosh vms and bosh ssh tasks - Added --max-in-flight and --canaries flags for bosh start/stop/restart/recreate commands - These overrides take precedence over the manifest configuration - Mostly used during recovery and debugging

Improvements: - Enable v1 and v2 manifests on same Director - If manifest specifies networks key the Director will not use cloud config for that deployment - Events can be filtered by time via --before and --after flags - Keep track of exported compiled releases and clean them up via bosh cleanup command - Fix bosh restore command to remove tables that dont exists in the restored backup - Removed 128MB limit from /tmp in stemcells - /tmp is still mounted to the ephemeral disk - nodev, nosuid, noexec options are now set for /tmp - Director now automatically reserves its own IP so that it’s no longer necessary to place it in the reserved range - Completed variety of CIS hardening stories for the stemcell - Raise meaningful error if non-existent vm_extension is requested - Keep track of resurrection status globally when it’s set via bosh vm resurrection off command - When temporarily turned off no new resurrection tasks will be enqueued - Make sure none of the IPv6 configurations are enabled in stemcells - Removed rpcbind package on CentOS stemcells - Small cosmetic adjustments to the deployment diff - Set an upper limit to the watch_schedule wait times

Version bumps: - Updated Director & Blobstore nginx to 1.11.1 - Updated Postrges to 9.4.8 - Updated s3cli with S3 server side encryption configurations

Dev: - Bumped bundler - Switch to using JSON instead of Yajl for stricter JSON validations

This release includes 3262 stemcell series.