PAS for Windows 2012R2 v2.1 Release Notes

Operators can install Pivotal Application Service (PAS) for Windows 2012R2 on vSphere, Amazon Web Services (AWS), Google Cloud Platform (GCP), or Azure. See the Installing PAS for Windows topic for more information.

Releases

2.1.9

  • Bump windows2012R2 stemcell to version 1200.26
  • Bump diego to version 1.35.12
  • Bump hwc-offline-buildpack to version 3.1.1
  • Bump loggregator to version 101.16
Component Version
windows2012R2 stemcell1200.26
consul195
diego1.35.12
event-log0.3.0
garden-windows0.13.0
hwc-offline-buildpack3.1.1
loggregator101.16
windows-utilities0.7.0

2.1.8

  • [Breaking Change] The install-hwc-buildpack errand is now called install-hwc-buildpack-lts

    • If you have scripts which programmatically change the errand state, you’ll have to update the scripts to use the new name
  • Bump hwc-offline-buildpack to version 3.0.2

  • Bump diego to version 1.35.10

  • Bump loggregator to version 101.13

  • Bump stemcell windows2012R2 to version 1200.24

Component Version
stemcell1200.24
consul195
diego1.35.10
event_log0.3.0
garden-windows0.13.0
hwc-offline-buildpack3.0.2
loggregator101.13
windows-utilities0.7.0
\* Components marked with an asterisk have been patched to resolve security vulnerabilities or fix component behavior.

2.1.7

  • [Bug Fix] bump consul to v195

    • Includes golang 1.9.7, removes golang 1.8.*.
    • Deploying v193 could fail on some deployments due to a conflict with other tiles that compiled the release differently
    • Fixes intermittent consul DNS issues on Windows Cells
  • Bump consul to version 195

  • Bump diego to version 1.35.6

Component Version
Stemcell1200.19
consul195
diego1.35.6
event_log0.3.0
garden-windows0.13.0
hwc-offline-buildpack2.3.17
loggregator101.11*
windows-utilities0.7.0
* Components marked with an asterisk have been patched to resolve security vulnerabilities or fix component behavior.

2.1.6

  • [Security Fix] Bump diego to version 1.35.5
  • Bump hwc-offline-buildpack to version 2.3.17
  • Bump consul to version 193 to use go 1.9
  • Bump stemcell to version 1200.19

Component Version
Stemcell1200.19
consul193
diego1.35.5
event_log0.3.0
garden-windows0.13.0
hwc-offline-buildpack2.3.17
loggregator101.11*
windows-utilities0.7.0
* Components marked with an asterisk have been patched to resolve security vulnerabilities or fix component behavior.

2.1.5

  • [Security Fix] Bump loggregator to version 101.11
    • Add strict application ID validation to TrafficController (CVE-2018-1268 CVE-2018-1269)
    • Stricter appID validation in TrafficController
    • Change RLP health endpoint to default to random port.
    • Metron health endpoint only listens on localhost
    • Bump go to 1.9.4
    • Fix doppler emitting multiple ingress metrics.

Component Version
Stemcell1200.17
consul191
diego1.35.4
event_log0.3.0
garden-windows0.13.0
hwc-offline-buildpack2.3.13
loggregator101.11*
windows-utilities0.7.0
* Components marked with an asterisk have been patched to resolve security vulnerabilities or fix component behavior.

2.1.4

  • [Security Fix] Bump stemcell to v1200.17. See release notes.
  • [Feature Improvement] Bump event-log-release to v0.3.0:
    • Remove dependency on powershell functions defined in the stemcell.
    • Change release name to use dasherized convention.
  • Set default and minimum root disk size to 100G for compatibility with new recommendations for Windows stemcells.

Component Version
Stemcell1200.17
consul191
diego1.35.4
event_log0.3.0
garden-windows0.13.0
hwc-offline-buildpack2.3.13
loggregator101.5*
windows-utilities0.7.0
* Components marked with an asterisk have been patched to resolve security vulnerabilities or fix component behavior.

2.1.3

  • [Bug Fix] Updated console agent node_name to include BOSH id, to prevent two Diego cell instance groups with the same instance group name and index in different deployments from colliding.
  • [Bug Fix] Prevent apps from writing logs to metron_agent_windows by disabling the UDP endpoint. The metron_windows_agent is now configured to only support the Loggregator v2 gRPC API.
  • [Feature Improvement] Bumps diego-release to v1.35.4 to add cell and instance identifiers in the container lifecycle logs.

Component Version
Stemcell1200.16
consul191
diego1.35.4
event_log0.2
garden-windows0.13.0
hwc-offline-buildpack2.3.13
loggregator101.5*
windows-utilities0.7.0
* Components marked with an asterisk have been patched to resolve security vulnerabilities or fix component behavior.

2.1.2

  • [Bug Fix] Bumps windows-utilities-release to v0.7.0 to fix issue where drain scripts fails if OpenSSH is not installed.
  • [Bug Fix] In the VM Options tab, Manage Administrator Password, the Use random administrator password option has been changed to Use random password to be consistent with the Pivotal Application Service for Windows v2.1 tile.

Component Version
Stemcell1200.16
consul191
diego1.35.0
event_log0.2
garden-windows0.13.0
hwc-offline-buildpack2.3.13
loggregator101.5*
windows-utilities0.7.0
* Components marked with an asterisk have been patched to resolve security vulnerabilities or fix component behavior.

2.1.1

  • Bumps stemcell to v1200.16. Release Notes
  • Removes Hakim job from the Windows Diego cell, as it is now providing minimal value.

Component Version
Stemcell1200.16
consul191
diego1.35.0
event_log0.2
garden-windows0.13.0
hwc-offline-buildpack2.3.13
loggregator101.5*
windows-utilities0.6.0
* Components marked with an asterisk have been patched to resolve security vulnerabilities or fix component behavior.

2.1.0

Component Version
Stemcell1200.15
consul191
diego1.35.0
event_log0.2
garden-windows0.13.0
hwc-offline-buildpack2.3.13
loggregator101.5*
windows-utilities0.6.0
* Components marked with an asterisk have been patched to resolve security vulnerabilities or fix component behavior.

How to Upgrade

The Pivotal Application Service (PAS) for Windows 2012R2 v2.1 tile is available with the release of Pivotal Cloud Foundry (PCF) version v2.1. To use the PAS for Windows 2012R2 tile, you need Ops Manager v2.1 or later and PAS v2.1 or later.

For information about upgrading to PAS for Windows 2012R2 v2.1, see the Upgrading Windows Cells topic in the PAS for Windows documentation.

New Features in PAS for Windows 2012R2 v2.1

Improved System Performance for App Health Checks

This release changes how PAS for Windows 2012R2 runs app health checks to improve system performance in resource-constrained environments, such as on-premise installations of PAS. This change does not impact the developer workflow for configuring app health checks.

Previously, health checks during app startup increased system load because they ran as a Garden process every two seconds. In addition, apps that started successfully could fail if slow system performance caused the app health check to time out. In some severe cases, such app failures caused additional resource consumption and a chain-reaction of app failures.

PAS for Windows 2012R2 v2.1 resolves these issues through a new implementation that does not invoke a new process on every health check. The health check now runs as a long-lived process in the app container. Developers may see these processes if they access an app container using the cf ssh command and list the processes.

Known Issues

Intermittent Timeout Error on AWS Deploy

On Amazon Web Services (AWS), PAS for Windows 2012R2 sometimes fails to deploy, generating a timeout error when BOSH tries to create VMs from the v1200.x stemcell. If you encounter this problem, click Apply changes in Ops Manager to deploy PAS for Windows 2012R2 again.

PAS for Windows 2012R2 Cannot Gracefully Shut Down .NET Apps

A known limitation of the IronFrame containerization framework prevents PAS for Windows 2012R2 from gracefully shutting down .NET apps. For more information, see the Graceful Shutdown of .NET Apps in Cloud Foundry Windows Knowledge Base article.