CloudBees Jenkins Platform for Pivotal Cloud Foundry

Note: CloudBees Jenkins Platform for PCF is deprecated, and no further development will be made against this tile.

Release notes for CloudBees Jenkins Platform for Pivotal Cloud Foundry (PCF).

v16.06.01.06: February 15, 2017

Update CloudBees Jenkins Operations Center to 1.625.22.1. See release notes.
Update CloudBees Jenkins Enterprise to 1.651.22.1. See release notes.
Update stemcell to 3312.12

v16.06.01.05: November 23, 2016

Fixes a problem in the syslog forwarder that caused the / partition to fill.
Update stemcell to 3233.4

v16.06.01.04: November 17, 2016

This release fixes a critical security vulnerability reported through our Jenkins Security Advisory 2016-11-16.

Update CloudBees Jenkins Operations Center to 1.625.21.1. See release notes.
Update CloudBees Jenkins Enterprise to 1.651.21.1. See release notes.
Update CloudBees Cloud Foundry CLI plugin to 2.1.3. See release notes.
Update Cloud Foundry UAA Authentication Plugin to 2.1.0. See release notes.

v16.06.01.03: October 24, 2016

Update stemcell to 3233.3
- USN-3106-2

v16.06.01.02: September 14, 2016

Update stemcell to 3232.17
Fix compatibility with PCF 1.8

v16.06.01.01: July 7, 2016

Update stemcell to 3232.12
Update CloudBees Jenkins Operations Center to 1.625.18.5. See release notes.
Update CloudBees Jenkins Enterprise to 1.651.3.1. See release notes.

v15.11.02.07: July 7, 2016

Update stemcell to 3146.17
- USN-3020-1
Update CloudBees Jenkins Enterprise to 1.642.18.3. See release notes.

v15.11.02.06: June 23, 2016

Update stemcell to 3146.16
- USN-3001-1
- Nginx CVE-2016-4450
Update CloudBees Jenkins Operations Center to 1.625.18.4. See release notes.
Update CloudBees Jenkins Enterprise to 1.642.18.2. See release notes.

v15.11.02.05: May 25, 2016

Update stemcell to 3146.12
- USN-2977-1
Update CloudBees Jenkins Operations Center to 1.625.18.3. See release notes.

v15.11.02.04: May 12, 2016

Update stemcell to 3146.11
- USN-2959-1
Update CloudBees Jenkins Operations Center to 1.625.18.1. See release notes.
Update CloudBees Jenkins Enterprise to 1.642.18.1. See release notes.

v15.11.02.03: April 19, 2016

Update stemcell to 3146.10
- USN-2929-1
Update CloudBees Jenkins Operations Center to 1.625.16.2. See release notes.
Update CloudBees Jenkins Enterprise to 1.642.4.2. See release notes.

v15.11.02.02: March 4, 2016

Update stemcell to 3146.9
- USN-2861-1
- USN-2865-1
- USN-2868-1
- USN-2869-1
- USN-2871-1
- USN-2896-1
- USN-2897-1
- USN-2900-1
- USN-2910-1
Update CloudBees Jenkins Operations Center to 1.625.16.1. See release notes.
Update CloudBees Jenkins Enterprise to 1.642.2.1. See release notes.
Hardened https frontend settings by disabling weak ciphers.

v15.11.02.01: January 13, 2016

Update stemcell to 3146.2
- USN-2857-1
The tile has been renamed to CloudBees Jenkins Platform. It now includes both CloudBees Jenkins Enterprise and CloudBees Jenkins Operations Center in a single deployment.
Update CloudFoundry CLI to 6.14.1

v15.11.01.02: December 14, 2015

Update stemcell to 3146
- USN-2821-1
Update CloudBees Jenkins Enterprise to 1.625.3.1. This security release fixes several vulnerabilities.

v15.11.01.01: November 27, 2015

Update stemcell to 3140
Update Cloudbees Jenkins Enterprise to v15.11 (Jenkins 1.625.2.2). See release notes.
Update CloudFoundry CLI to 6.14.0
Update versions of bundled plugins
Bundle Gitlab plugin
Fixed warning about jnlp port already in use.

v15.05.01.11: November 12, 2015

Update stemcell to 3130 which fixes the following vulnerabilities
- USN-2806-1
- USN-2798-1
Update CloudBees Jenkins Enterprise to 1.609.14.1. This security release fixes several vulnerabilities, including two critical ones.
- [SECURITY-184] Secret key not verified when connecting a slave
- [SECURITY-218] The infamous apache commons de-serialisation vulnerability.
Update HAProxy to 1.5.15.
Disable SSLv3 support by default.
CloudFoundry UAA plugin now supports CLI.

v15.05.01.09: October 20, 2015

Update stemcell to 3100.
Fixed edge case upgrade scenarios.
Improve supportability of the Pivotal package.

v15.05.01.08: October 9, 2015

Note one important known issue with the 1.5.6 patch for OpenStack deployments. BOSH stemcell v3094, which this version of Elastic Runtime references, has a limitation affecting OpenStack users only:

Elastic Runtime 1.5.6 on OpenStack does not work with S3/Swift blobstores. Elastic Runtime 1.5.6 on OpenStack users must configure their object storage to use the internal blobstore option. vSphere, AWS and vCloud users are not affected. This will be fixed in the next release.

Update stemcell to version 3094
Fix an issue related to jnlp agent listener.

v15.05.01.07: October 2, 2015

Upgrade CloudBees Jenkins Enterprise to version 1.609.3.1.
Minor enhancements of the setup of slaves for Docker plugins.
Resolve minor security vulnerabilities upgrading the stemcell to version 3074.
Upgrade Docker to version 1.8.2.

v15.05.01.05: September 10, 2015

Fix bug in definition of Docker insecure registries and registry mirrors.
Resolve security vulnerabilities upgrading the stemcell to version 3062
- USN-2694-1 PCRE vulnerabilities
- USN-2698-1 SQLite vulnerabilities
- USN-2710-1 OpenSSH vulnerabilities
- USN-2710-2 OpenSSH regression
- USN-2718-1 Linux kernel (Vivid HWE) vulnerability

v15.05.01.04: September 1, 2015

Upgrade Docker to version 1.8.1.
Refactor Jenkins slaves configuration to make it more “Docker friendly” (replace “Slave level environment variables” by a “.bashrc” script invoked by the SSH connector).
Freeze random Jenkins listen ports to ease security hardening and firewalling:
- SSH Daemon: 2222
- JNLP port: 10000
Resolve security vulnerabilities upgrading the stemcell to version 3058

v15.05.01.03: August 8, 2015

Fix Docker container setup on Jenkins slaves: use the ephemeral disk instead of the VM root file system.

v15.05.01.02: August 8, 2015

Add support for docker containers on build slaves (integrated with the CloudBees Docker Custom Build Environment Plugin and the Jenkins Docker Workflow.
Fix CVE-2015-3290 upgrading the BOSH stemcell to version 3026.

Note that the specific version of the stemcell has to be uploaded and installed in Ops Manager, along with the installation of CloudBees Jenkins Enterprise for Pivotal Cloud Foundry v15.05.01.00.

v15.05.01.00: July 22, 2015

CloudBees Jenkins Enterprise for Pivotal Cloud Foundry v15.05.01.00 fixes the security issues CVE-2015-1420, CVE-2015-1330 and USN-2639-1 thanks to the upgrade to the Bosh Stemcell 3012.

Note that the specific version of the stemcell has to be uploaded and installed in Ops Manager, along with the installation of CloudBees Jenkins Enterprise for Pivotal Cloud Foundry v15.05.01.00.

In addition, the new product version bundles the latest version of CloudBees Jenkins Enterprise 15.05 / 1.609.1.1.

Summary of features included in this release:

Upgrade of CloudBees Jenkins Enterprise to v15.05
Upgrade of Bosh Stemcell from 2989 to 3012

Known limitation: the test_service_instances feature to use Cloud Foundry services bindings in builds has been temporarily disabled. We are working on reintroducing it.

v14.11.01.03: June 19, 2015

CloudBees Jenkins Enterprise for Pivotal Cloud Foundry v14.11.01.03 includes a patch for the Cannonical Ubuntu CVE-2015-1328 security fix. This patch resolves an overlayfs privilege escalation, which a local user could exploit to gain administrative privileges on the system. Note that a corresponding stemcell for the specific IaaS that Pivotal Cloud Foundry is running on (2989) must be uploaded and installed along with this CloudBees Jenkins Enterprise release in Ops Manager.

Major refactoring of the packaging of CloudBees Jenkins Enterprise for Pivotal Cloud Foundry

Security
- Authentication: load CF Organizations as Jenkins groups in the Cloud Foundry UAA Authentication plugin
- Change the default authorization model to use CloudBees RBAC. By default, the created jobs are isolated by Cloud Foundry Organizations or by user.
Tools
- Upgrade the bundled JDK to OpenJDK 8 to match Pivotal Elastic Runtime 1.4 environment
- Bump Cloud Foundry CLI version to 6.11
Plugins
- Bundle the Cloud Foundry CLI plugin to ease integration of Jenkins jobs with Pivotal Elastic Runtime
- Bundle the Jenkins Artifactory
Configuration
- Refactor Jenkins auto-configuration procedure to rely on Groovy init scripts
- Better ability during platform upgrades to merge user defined configuration with configuration provided by the deployments on Pivotal Cloud Foundry (JVM, slaves, tool installations…)

Known limitation: the test_service_instances feature to use Cloud Foundry services bindings in builds has been temporarily disabled. We are working on reintroducing it.