CloudBees Jenkins Platform for Pivotal Cloud Foundry
Note: CloudBees Jenkins Platform for PCF is deprecated, and no further development will be made against this tile.
Release notes for CloudBees Jenkins Platform for Pivotal Cloud Foundry (PCF).
v16.06.01.06: February 15, 2017
- Update CloudBees Jenkins Operations Center to 1.625.22.1. See release notes.
- Update CloudBees Jenkins Enterprise to 1.651.22.1. See release notes.
- Update stemcell to 3312.12
v16.06.01.05: November 23, 2016
- Fixes a problem in the syslog forwarder that caused the
/
partition to fill. - Update stemcell to 3233.4
v16.06.01.04: November 17, 2016
This release fixes a critical security vulnerability reported through our Jenkins Security Advisory 2016-11-16.
Update CloudBees Jenkins Operations Center to 1.625.21.1. See release notes.
Update CloudBees Jenkins Enterprise to 1.651.21.1. See release notes.
Update CloudBees Cloud Foundry CLI plugin to 2.1.3. See release notes.
Update Cloud Foundry UAA Authentication Plugin to 2.1.0. See release notes.
v16.06.01.03: October 24, 2016
- Update stemcell to 3233.3
v16.06.01.02: September 14, 2016
- Update stemcell to 3232.17
- Fix compatibility with PCF 1.8
v16.06.01.01: July 7, 2016
- Update stemcell to 3232.12
- Update CloudBees Jenkins Operations Center to 1.625.18.5. See release notes.
- Update CloudBees Jenkins Enterprise to 1.651.3.1. See release notes.
v15.11.02.07: July 7, 2016
- Update stemcell to 3146.17
- Update CloudBees Jenkins Enterprise to 1.642.18.3. See release notes.
v15.11.02.06: June 23, 2016
- Update stemcell to 3146.16
- USN-3001-1
- Nginx CVE-2016-4450
- Update CloudBees Jenkins Operations Center to 1.625.18.4. See release notes.
- Update CloudBees Jenkins Enterprise to 1.642.18.2. See release notes.
v15.11.02.05: May 25, 2016
- Update stemcell to 3146.12
- Update CloudBees Jenkins Operations Center to 1.625.18.3. See release notes.
v15.11.02.04: May 12, 2016
- Update stemcell to 3146.11
- Update CloudBees Jenkins Operations Center to 1.625.18.1. See release notes.
- Update CloudBees Jenkins Enterprise to 1.642.18.1. See release notes.
v15.11.02.03: April 19, 2016
- Update stemcell to 3146.10
- Update CloudBees Jenkins Operations Center to 1.625.16.2. See release notes.
- Update CloudBees Jenkins Enterprise to 1.642.4.2. See release notes.
v15.11.02.02: March 4, 2016
- Update stemcell to 3146.9
- Update CloudBees Jenkins Operations Center to 1.625.16.1. See release notes.
- Update CloudBees Jenkins Enterprise to 1.642.2.1. See release notes.
- Hardened https frontend settings by disabling weak ciphers.
v15.11.02.01: January 13, 2016
- Update stemcell to 3146.2
- The tile has been renamed to CloudBees Jenkins Platform. It now includes both CloudBees Jenkins Enterprise and CloudBees Jenkins Operations Center in a single deployment.
- Update CloudFoundry CLI to 6.14.1
v15.11.01.02: December 14, 2015
- Update stemcell to 3146
- Update CloudBees Jenkins Enterprise to 1.625.3.1. This security release fixes several vulnerabilities.
v15.11.01.01: November 27, 2015
- Update stemcell to 3140
- Update Cloudbees Jenkins Enterprise to v15.11 (Jenkins 1.625.2.2). See release notes.
- Update CloudFoundry CLI to 6.14.0
- Update versions of bundled plugins
- Bundle Gitlab plugin
- Fixed warning about jnlp port already in use.
v15.05.01.11: November 12, 2015
- Update stemcell to 3130 which fixes the following vulnerabilities
- Update CloudBees Jenkins Enterprise to 1.609.14.1. This security release fixes several vulnerabilities, including two critical ones.
- [SECURITY-184] Secret key not verified when connecting a slave
- [SECURITY-218] The infamous apache commons de-serialisation vulnerability.
- Update HAProxy to 1.5.15.
- Disable SSLv3 support by default.
- CloudFoundry UAA plugin now supports CLI.
v15.05.01.09: October 20, 2015
- Update stemcell to 3100.
- Fixed edge case upgrade scenarios.
- Improve supportability of the Pivotal package.
v15.05.01.08: October 9, 2015
Note one important known issue with the 1.5.6 patch for OpenStack deployments. BOSH stemcell v3094, which this version of Elastic Runtime references, has a limitation affecting OpenStack users only:
Elastic Runtime 1.5.6 on OpenStack does not work with S3/Swift blobstores. Elastic Runtime 1.5.6 on OpenStack users must configure their object storage to use the internal blobstore option. vSphere, AWS and vCloud users are not affected. This will be fixed in the next release.
- Update stemcell to version 3094
- Fix an issue related to jnlp agent listener.
v15.05.01.07: October 2, 2015
- Upgrade CloudBees Jenkins Enterprise to version 1.609.3.1.
- Minor enhancements of the setup of slaves for Docker plugins.
- Resolve minor security vulnerabilities upgrading the stemcell to version 3074.
- Upgrade Docker to version 1.8.2.
v15.05.01.05: September 10, 2015
- Fix bug in definition of Docker insecure registries and registry mirrors.
- Resolve security vulnerabilities upgrading the stemcell to version 3062
- USN-2694-1 PCRE vulnerabilities
- USN-2698-1 SQLite vulnerabilities
- USN-2710-1 OpenSSH vulnerabilities
- USN-2710-2 OpenSSH regression
- USN-2718-1 Linux kernel (Vivid HWE) vulnerability
v15.05.01.04: September 1, 2015
- Upgrade Docker to version 1.8.1.
- Refactor Jenkins slaves configuration to make it more “Docker friendly” (replace “Slave level environment variables” by a “.bashrc” script invoked by the SSH connector).
- Freeze random Jenkins listen ports to ease security hardening and firewalling:
- SSH Daemon: 2222
- JNLP port: 10000
- Resolve security vulnerabilities upgrading the stemcell to version 3058
v15.05.01.03: August 8, 2015
- Fix Docker container setup on Jenkins slaves: use the ephemeral disk instead of the VM root file system.
v15.05.01.02: August 8, 2015
- Add support for docker containers on build slaves (integrated with the CloudBees Docker Custom Build Environment Plugin and the Jenkins Docker Workflow.
- Fix CVE-2015-3290 upgrading the BOSH stemcell to version 3026.
Note that the specific version of the stemcell has to be uploaded and installed in Ops Manager, along with the installation of CloudBees Jenkins Enterprise for Pivotal Cloud Foundry v15.05.01.00.
v15.05.01.00: July 22, 2015
CloudBees Jenkins Enterprise for Pivotal Cloud Foundry v15.05.01.00 fixes the security issues CVE-2015-1420, CVE-2015-1330 and USN-2639-1 thanks to the upgrade to the Bosh Stemcell 3012.
Note that the specific version of the stemcell has to be uploaded and installed in Ops Manager, along with the installation of CloudBees Jenkins Enterprise for Pivotal Cloud Foundry v15.05.01.00.
In addition, the new product version bundles the latest version of CloudBees Jenkins Enterprise 15.05 / 1.609.1.1.
Summary of features included in this release:
- Upgrade of CloudBees Jenkins Enterprise to v15.05
- Upgrade of Bosh Stemcell from 2989 to 3012
Known limitation: the test_service_instances
feature to use Cloud Foundry services bindings in builds has been temporarily disabled. We are working on reintroducing it.
v14.11.01.03: June 19, 2015
CloudBees Jenkins Enterprise for Pivotal Cloud Foundry v14.11.01.03 includes a patch for the Cannonical Ubuntu CVE-2015-1328 security fix. This patch resolves an overlayfs privilege escalation, which a local user could exploit to gain administrative privileges on the system. Note that a corresponding stemcell for the specific IaaS that Pivotal Cloud Foundry is running on (2989) must be uploaded and installed along with this CloudBees Jenkins Enterprise release in Ops Manager.
Major refactoring of the packaging of CloudBees Jenkins Enterprise for Pivotal Cloud Foundry
- Security
- Authentication: load CF Organizations as Jenkins groups in the Cloud Foundry UAA Authentication plugin
- Change the default authorization model to use CloudBees RBAC. By default, the created jobs are isolated by Cloud Foundry Organizations or by user.
- Tools
- Upgrade the bundled JDK to OpenJDK 8 to match Pivotal Elastic Runtime 1.4 environment
- Bump Cloud Foundry CLI version to 6.11
- Plugins
- Bundle the Cloud Foundry CLI plugin to ease integration of Jenkins jobs with Pivotal Elastic Runtime
- Bundle the Jenkins Artifactory
- Configuration
- Refactor Jenkins auto-configuration procedure to rely on Groovy init scripts
- Better ability during platform upgrades to merge user defined configuration with configuration provided by the deployments on Pivotal Cloud Foundry (JVM, slaves, tool installations…)
Known limitation: the test_service_instances
feature to use Cloud Foundry services bindings in builds has been temporarily disabled. We are working on reintroducing it.
1.3.8: April 1, 2015
Features included in this release:
- Updated CloudBees Jenkins Enterprise to 14.11 / 1.580.13.1 to provide security fixes for SECURITY-171, SECURITY-177 and SECURITY-180. See Jenkins Security Advisory 2015-03-23.
1.3.7
Release Date: March 3, 2015
Features included in this release:
- Updated CloudBees Jenkins Enterprise to 14.11 / 1.580.12.2 to provide security fixes for SECURITY-125, SECURITY-162, SECURITY-163, SECURITY-165, SECURITY-166 and SECURITY-167. See Jenkins Security Advisory 2015-02-27.
1.3.6
Release Date: February 25, 2015
Features included in this release:
- Updated CloudBees Jenkins Enterprise to 14.11 / 1.580
1.3.5
Release Date: January 30, 2015
Features included in this release:
- Updated stemcell to 2824 to resolve CVE-2015-0235 Ghost
1.3.4
Release Date: December 17, 2014
Features included in this release:
- Updated version of Ruby to resolve CVE-2014-8080
1.3.3
Release Date: November 21, 2014
Features included in this release:
- Bug fix for
/tmp
space errors onslave nodes
1.3.2
Release Date: October 13, 2014
Features included in this release:
- Updated stemcell addresses bash-shellshock vulnerabilities: resolves CVEs discussed here and here
- Integration with Cloud Foundry UAA for Single Sign On (SSO) support
- Use of the same buildpacks as runtime to ensure consistency
- Automatic provisioning of services instances for your tests
- Ability to deploy to PCF using the CLI
- Automatic master and slave configuration
- Support for Gradle wrapper and Maven
Upgrading from 1.3.0.0.alpha.107
If you installed the beta release 1.3.0.0.alpha.107, you can upgrade to 1.3.2 following these steps:
- In Ops Manager, click the
CloudBees Jenkins for Pivotal Cloud Foundry
tile. - Click
Resource Config
on the left hand menu. - Change the
Jenkins Slave
-Ephemeral Disk
size to be a minimum of8192
. - Click
Save
.