VMware Tanzu Application Service for VMs [Windows] v2.12 Release Notes

Page last updated:

This topic contains release notes for VMware Tanzu Application Service for VMs [Windows] v2.12.

Because VMware uses the Percona Distribution for MySQL, expect a time lag between Oracle releasing a MySQL patch and VMware releasing TAS for VMs [Windows] containing that patch.

Warning: Windows stemcells v2019.44 and later include a version of tar that is incompatible with winfs2019-release v2.33.1 and earlier. For more information, see Windows Stemcell v2019.44 is Incompatible with winfs2019-release v2.33.1 and Earlier in Known Issues.

Before you install the tile, refer to the Windows Stemcell Compatibility Matrix.

Releases

2.12.9

Release Date: 06/23/2022

Warning:Upcoming breaking changes! In future patches, no sooner than July 1st 2022, some components will become more strict about the protocols used in TLS communications, causing integrations with systems using older, insecure protocols to fail. Specifically, components using the Go programming language will be updated to Go 1.18, and will no longer support TLS 1.0 and 1.1 connections or certificates with a SHA-1 checksum. This is most likely to affect connections with external databases. However, the pre-existing configuration for “TLS versions supported by the Gorouter” will still work. This change may not arrive all at once, as Go is used in systems throughout TAS. There will be a VMware Knowledge Base article about this change published prior to the changes rolling out. These changes will be clearly designated in the release notes of the versions they ship in; a version of this warning will appear on all patch versions until we are confident no systems remain to be updated.

  • Bump diego to version 2.62.0
Component Version
windows2019 stemcell2019.44
diego2.62.0
envoy-nginx0.9.0
event-log0.9.0
garden-runc1.20.6
hwc-offline-buildpack3.1.24
metrics-discovery3.0.13
smoke-tests4.5.0
loggregator-agent6.4.1
winc2.5.0
windows-utilities0.14.0

2.12.8

Release Date: 06/09/2022

Warning: Breaking change. This version contains Diego 2.64.0, which bumps to Go 1.18. Go 1.18 no longer supports TLS 1.0 and 1.1 connections or certificates with a SHA-1 checksum. This is most likely to affect connections with external databases. We stated earlier that we wouldn’t bump to Go 1.18 until July 1, 2022. This TAS release with Diego 2.64.0 breaks that promise. We apologize. We are rolling back to Diego 2.62.0. If you already successfully deployed to this TAS release with Diego 2.64.0, then you are safe to continue using it.

  • Bump diego to version 2.64.0
  • Bump garden-runc to version 1.20.6
  • Bump metrics-discovery to version 3.0.13
  • Bump loggregator-agent to version 6.4.1
Component Version
windows2019 stemcell2019.44
diego2.64.0
envoy-nginx0.9.0
event-log0.9.0
garden-runc1.20.6
hwc-offline-buildpack3.1.24
metrics-discovery3.0.13
smoke-tests4.5.0
loggregator-agent6.4.1
winc2.5.0
windows-utilities0.14.0
windowsfs-release2.35.0

2.12.7

Release Date: 04/20/2022

  • [Breaking Change] Syslog drains configured to use TLS now reject certificates signed with the SHA-1 hash function.
  • Bump diego to version 2.62.0
  • Bump hwc-offline-buildpack to version 3.1.24
  • Bump metrics-discovery to version 3.0.10
  • Bump loggregator-agent to version 6.3.11
  • Bump winc to version 2.5.0
Component Version Release Notes
windows2019 stemcell2019.44
diego2.62.0
envoy-nginx0.9.0
event-log0.9.0
garden-runc1.20.3
hwc-offline-buildpack3.1.24
metrics-discovery3.0.10
v3.0.10
  - fix bug with large messages (#22)
  - bump-golang to v0.100.0(now 1.18)
          
smoke-tests4.5.0
loggregator-agent6.3.11
v6.3.11
  - fix bug with large messages (#89)
  - bump-golang to v0.100.0(now 1.18)
          
winc2.5.0
windows-utilities0.14.0
windowsfs-release2.35.0

2.12.6

Release Date: 03/31/2022

  • Bump diego to version 2.61.0
  • Bump garden-runc to version 1.20.3
  • Bump hwc-offline-buildpack to version 3.1.23
  • Bump metrics-discovery to version 3.0.9
  • Bump loggregator-agent to version 6.3.10
  • Bump windowsfs-release to version 2.35.0
Component Version
windows2019 stemcell2019.44
diego2.61.0
envoy-nginx0.9.0
event-log0.9.0
garden-runc1.20.3
hwc-offline-buildpack3.1.23
metrics-discovery3.0.9
smoke-tests4.5.0
loggregator-agent6.3.10
winc2.3.0
windows-utilities0.14.0
windowsfs-release2.35.0

2.12.5

Release Date: 02/28/2022

  • [Feature Improvement] Golang v1.17 contains stricter IP parsing standards, so syslog drains registered using user-provided services cannot contain IP addresses with leading zeros in any octets. This affects properties that are fed into diego-release, garden-runc-release, winc-release, nats-release, and routing-release.
  • [Bug Fix] Smoke tests support for TLSv1.3 only option
  • Bump diego to version 2.58.1
  • Bump envoy-nginx to version 0.9.0
  • Bump garden-runc to version 1.20.0
  • Bump hwc-offline-buildpack to version 3.1.22
  • Bump metrics-discovery to version 3.0.8
  • Bump smoke-tests to version 4.5.0
  • Bump loggregator-agent to version 6.3.8
Component Version
windows2019 stemcell2019.44
diego2.58.1
envoy-nginx0.9.0
event-log0.9.0
garden-runc1.20.0
hwc-offline-buildpack3.1.22
metrics-discovery3.0.8
smoke-tests4.5.0
loggregator-agent6.3.8
winc2.3.0
windows-utilities0.14.0
windowsfs-release2.33.2

2.12.4

Release Date: 02/08/2022

  • [Security Fix] Diego - Bump containerd to v1.5.9 to fix CVE-2021-43816
  • [Feature Improvement] TAS for VMs [Windows] supports compiled releases
  • [Feature Improvement] Golang v1.17 contains stricter IP parsing standards, so syslog drains registered using user-provided services cannot contain IP addresses with leading zeros in any octets.
  • [Bug Fix] windowsfs-release compilation issue - Cannot extract through symlink
  • Bump diego to version 2.57.0
  • Bump hwc-offline-buildpack to version 3.1.21
  • Bump smoke-tests to version 4.4.0
  • Bump loggregator-agent to version 6.3.7
  • Bump windowsfs-release to version 2.33.2
Component Version
windows2019 stemcell2019.44
diego2.57.0
envoy-nginx0.7.0
event-log0.9.0
garden-runc1.19.30
hwc-offline-buildpack3.1.21
metrics-discovery3.0.7
smoke-tests4.4.0
loggregator-agent6.3.7
winc2.3.0
windows-utilities0.14.0
windowsfs-release2.33.2

2.12.3

Release Date: 12/15/2021

Note: Windows stemcells v2019.44 and later are not compatible with this version of TAS for VMs [Windows]. You must use a Windows stemcell version between v2019.0 and v2019.43 to install this release.

  • [Bug Fix] Diego - Envoy v1.19 uses the original TCP connection pool so that it can accept more than 1024 downstream connections
  • [Bug Fix] Smoke Tests uses specified domain for Isolation Segments
  • Bump diego to version 2.54.0
  • Bump metrics-discovery to version 3.0.7
  • Bump smoke-tests to version 4.3.1
  • Bump loggregator-agent to version 6.3.5
Component Version
windows2019 stemcell~2019
diego2.54.0
envoy-nginx0.7.0
event-log0.9.0
garden-runc1.19.30
hwc-offline-buildpack3.1.20
metrics-discovery3.0.7
smoke-tests4.3.1
loggregator-agent6.3.5
winc2.3.0
windows-utilities0.14.0
windowsfs-release2.31.0

2.12.2

Release Date: 11/23/2021

Note: Windows stemcells v2019.44 and later are not compatible with this version of TAS for VMs [Windows]. You must use a Windows stemcell version between v2019.0 and v2019.43 to install this release.

  • Bump diego to version 2.53.1
  • Bump hwc-offline-buildpack to version 3.1.20
  • Bump windowsfs-release to version 2.31.0
Component Version
windows2019 stemcell2019.0
diego2.53.1
envoy-nginx0.7.0
event-log0.9.0
garden-runc1.19.30
hwc-offline-buildpack3.1.20
loggregator-agent6.3.4
metrics-discovery3.0.6
smoke-tests4.3.0
winc2.3.0
windows-utilities0.14.0
windowsfs-release2.31.0

2.12.1

Release Date: 10/20/2021

Note: Windows stemcells v2019.44 and later are not compatible with this version of TAS for VMs [Windows]. You must use a Windows stemcell version between v2019.0 and v2019.43 to install this release.

  • [Feature Improvement] HTTP/2 toggle disables Diego container proxy ALPN
  • No BOSH release bumps
Component Version
windows2019 stemcell2019.0
diego2.53.0
envoy-nginx0.7.0
event-log0.9.0
garden-runc1.19.30
hwc-offline-buildpack3.1.18
loggregator-agent6.3.4
metrics-discovery3.0.6
smoke-tests4.3.0
winc2.3.0
windows-utilities0.14.0
windowsfs-release2.29.0

2.12.0

Release Date: October 4, 2021

Note: Windows stemcells v2019.44 and later are not compatible with this version of TAS for VMs [Windows]. You must use a Windows stemcell version between v2019.0 and v2019.43 to install this release.

Component Version
windows2019 stemcell2019.0
diego2.53.0
envoy-nginx0.7.0
event-log0.9.0
garden-runc1.19.30
hwc-offline-buildpack3.1.18
loggregator-agent6.3.4
metrics-discovery3.0.6
smoke-tests4.3.0
winc2.3.0
windows-utilities0.14.0
windowsfs-release2.29.0

How to Upgrade

The TAS for VMs [Windows] v2.12 tile is available with the release of TAS for VMs v2.12. To use the TAS for VMs [Windows] v2.12 tile, you must install Ops Manager v2.12 or later and VMware Tanzu Application Service for VMs (TAS for VMs) v2.12 or later.

New Features in TAS for VMs [Windows] v2.12

TAS for VMs [Windows] v2.12 includes the following major feature:

Gorouter Supports TLS v1.3

In TAS for VMs [Windows] v2.12, the Gorouter supports TLS v1.3. New installations of TAS for VMs use TLS v1.3 for the Gorouter by default. If you are upgrading to TAS for VMs v2.12, the Gorouter uses TLS v1.2 by default.

For more information, see Gorouter Supports TLS v1.3 in the TAS for VMs v2.12 release notes.

Breaking Changes

TAS for VMs [Windows] v2.12 includes the following breaking change:

(Beta) Gorouter Can Support TLS v1.3 Connections Only

TLS v1.3 is not compatible with some versions of Java. If you configure TAS for VMs [Windows] to support TLS v1.3 only, you might encounter errors with Java apps. For more information, see JSSE Client does not accept status_request extension in CertificateRequest messages for TLS 1.3 in the JDK Bug System.

The tile property that controls the TLS version in TAS for VMs [Windows] changes in TAS for VMs v2.12. You must update any stored configuration files to reflect the change.

Known Issues

See the following TAS for VMs [Windows] v2.12 known issues:

Upgrades Fail When the Stemcell Does Not Change

If you upgrade to a version of TAS for VMs [Windows] that uses the same stemcell, TAS for VMs [Windows] can fail to create containers, causing the deployment to fail. If there are stemcell changes or if the Microsoft base layer changes, this error is unlikely to occur.

For more information, see Failure to create containers when upgrading with shared Microsoft base image in the VMware Tanzu Knowledge Base.

Smoke Tests Fail when Isolation Segment in Foundation

The Smoke Test errand runs extra, failing tests when TAS for VMs [Windows] is deployed with Isolation Segment. They are “Compute isolation disabled” and “Application Workflow Linux Applications”.

To work around this issue, disable Smoke Tests. For more information, see Windows Tile smoke-tests fails for isolation segment segments in the VMware Tanzu Knowledge Base.

Windows Stemcell v2019.44 is Incompatible with winfs2019-release v2.33.1 and Earlier

Windows stemcells v2019.44 and later include a newer version of tar that is incompatible with winfs2019-release v2.33.1 and earlier. TAS for VMs [Windows] deployments that use Windows stemcells v2019.44 and later cannot untar winfs2019-release v2.33.1 and earlier. Compatible Windows stemcells for this winfs2019-release include v2019.0 through v2019.43.