PAS for Windows v2.1 Release Notes

This topic contains release notes for Pivotal Application Service (PAS) for Windows v2.1.

How to Upgrade

The PAS for Windows v2.1 tile is available with the release of Pivotal Cloud Foundry (PCF) v2.1. To use the PAS for Windows v2.1 tile, you must install Ops Manager v2.1 or later and PAS v2.1 or later.

Releases

2.1.12

  • Bump windows2016 stemcell to version 1709.15
  • Bump hwc-offline-buildpack to version 3.1.1
  • Bump windows2016fs-release to version 1.12.0
Component Version
windows2016 stemcell1709.15
consul195
diego1.35.12
event-log0.3.0
garden-runc1.16.1
hwc-offline-buildpack3.1.1
loggregator101.16
winc1.7.0
windows-utilities0.7.0
windows2016fs-release1.12.0

2.1.11

  • [Bug Fix] Fix issue that could cause application deployments to fail on some infrastructure due to incorrect MTU detection
  • Bump windows2016 stemcell to version 1709.14
  • Bump diego to version 1.35.12
  • Bump hwc-offline-buildpack to version 3.0.3
  • Bump winc to version 1.7.0
  • Bump windows2016fs-release to version 1.9.0. This includes Microsoft VS 2017 C++ Redistributable DLLs version 15.
Component Version
windows2016 stemcell1709.14
consul195
diego1.35.12
event-log0.3.0
garden-runc1.16.1
hwc-offline-buildpack3.0.3
loggregator101.16
winc1.7.0
windows-utilities0.7.0
windows2016fs-release1.9.0

2.1.10

  • [Breaking Change] The install-hwc-buildpack errand is now called install-hwc-buildpack-lts

    • If you have scripts which programmatically change the errand state, you’ll have to update the scripts to use the new name
  • [Security Fix] Bump garden-runc to prevent malicious users from causing a denial of service for other apps

  • [Bug Fix] Fix issue in loggregator where AZ names with special characters could cause metron agent job to fail

  • Bump diego to version 1.35.10

  • Bump garden-runc to version 1.16.1

  • Bump hwc-offline-buildpack to version 3.0.2

  • Bump loggregator to version 101.16

  • Bump stemcell windows2016 to version 1709.13

  • Bump windows2016fs to version 1.8.0

Component Version
stemcell1709.13
consul195
diego1.35.10
event_log0.3.0
garden-runc1.16.1
hwc-offline-buildpack3.0.2
loggregator101.16
winc1.3.0
windows2016fs1.8.0
windows-utilities0.7.0

2.1.9

  • Add known issue:

    • Default DNS configuration on AWS does not work
  • Bump diego to version 1.35.8

  • Bump event-log to version 0.3.0

  • Bump hwc-offline-buildpack to version 2.3.19

  • Bump loggregator to version 101.13

  • Bump stemcell windows2016 to version 1709.11

Component Version
stemcell1709.11
consul193
diego1.35.8
event_log0.3.0
garden-runc1.13.3
hwc-offline-buildpack2.3.19
loggregator101.13
winc1.3.0
windows2016fs1.0.0
windows-utilities0.7.0

2.1.7

  • [Security Fix] Bump diego to version 1.35.5
  • [Bug Fix] Bump garden to version 1.13.3
    • Fix issue with deleted files in application containers created from docker images
  • Bump consul to version 193 to use go 1.9
  • Bump hwc-offline-buildpack to version 2.3.17
  • Bump stemcell to version 1709.8
Component Version
stemcell1709.8
consul193
diego1.35.5
event_log0.3.0
garden-runc1.13.3
hwc-offline-buildpack2.3.17
loggregator101.11*
winc1.3.0
windows2016fs1.0.0
windows-utilities0.7.0
* Components marked with an asterisk have been patched to resolve security vulnerabilities or fix component behavior.

2.1.6

  • [Security Fix] Bump loggregator to version 101.11
    • Add strict application ID validation to TrafficController (CVE-2018-1268 CVE-2018-1269)
    • Stricter appID validation in TrafficController
    • Change RLP health endpoint to default to random port.
    • Metron health endpoint only listens on localhost
    • Bump go to 1.9.4
    • Fix doppler emitting multiple ingress metrics.
  • [Security Fix] Bump winc to version 1.3.0
Component Version
Stemcell1709.5
consul191
diego1.35.4
event_log0.3.0
garden-runc1.11.1
hwc-offline-buildpack2.3.13
loggregator101.11*
winc1.3.0
windows2016fs1.0.0
windows-utilities0.7.0
* Components marked with an asterisk have been patched to resolve security vulnerabilities or fix component behavior.

2.1.5

  • [Security Fix] Bump stemcell to v1709.5. See release notes.
  • [Feature Improvement] Bump event-log-release to v0.3.0:
    • Remove dependency on powershell functions defined in the stemcell.
    • Change release name to use dasherized convention.
  • Set default and minimum root disk size to 100 GB for compatibility with new recommendations for Windows stemcells.
Component Version
Stemcell1709.5
consul191
diego1.35.4
event_log0.3.0
garden-runc1.11.1
hwc-offline-buildpack2.3.13
loggregator101.5*
winc1.0.0
windows2016fs1.0.0
windows-utilities0.7.0
* Components marked with an asterisk have been patched to resolve security vulnerabilities or fix component behavior.

2.1.4

  • [Feature Improvement] Bumps diego-release to v1.35.4 to add cell and instance identifiers in the container lifecycle logs.
Component Version
Stemcell1709.3
consul191
diego1.35.4
event_log0.2
garden-runc1.11.1
hwc-offline-buildpack2.3.13
loggregator101.5*
winc1.0.0
windows2016fs1.0.0
windows-utilities0.7.0
* Components marked with an asterisk have been patched to resolve security vulnerabilities or fix component behavior.

2.1.3

  • No release for this version. Please refer to v2.1.4.

2.1.2

  • [Bug Fix] Bumps windows-utilities-release to v0.7.0 to fix issue where drain scripts fails if OpenSSH is not installed.
  • [Bug Fix] In the VM Options tab, Manage Administrator Password, the Use the Windows default password option has been changed to Use random password to correctly reflect the actual setting.
  • [Bug Fix] Winc-network MTU is now configured in the Pivotal Application Services Tile, instead of being hardcoded.
  • [Bug Fix] Updates winc-network IP to 172.30.0.1, to allow containers to resolve DNS records.
Component Version
Stemcell1709.3
consul191
diego1.35.0
event_log0.2
garden-runc1.11.1
hwc-offline-buildpack2.3.13
loggregator101.5*
winc1.0.0
windows2016fs1.0.0
windows-utilities0.7.0
* Components marked with an asterisk have been patched to resolve security vulnerabilities or fix component behavior.

2.1.1

  • [Bug fix] Update text on VM Options > Manage Administrator Password.
  • [Maintenance] Bump windows2016fs to 1.1.0:
    • Includes Microsoft Update KB4088776.
    • Includes v0.0.51 of cloudfoundry/windows2016fs.
Component Version
Stemcell1709.3
consul191
diego1.35.0
event_log0.2
garden-runc1.11.1
hwc-offline-buildpack2.3.13
loggregator101.5*
winc1.0.0
windows2016fs1.0.0
windows-utilities0.6.0
* Components marked with an asterisk have been patched to resolve security vulnerabilities or fix component behavior.

2.1.0

Component Version
Stemcell1709.3
consul191
diego1.35.0
event_log0.2
garden-runc1.11.1
hwc-offline-buildpack2.3.13
loggregator101.5*
winc1.0.0
windows2016fs1.0.0
windows-utilities0.6.0
* Components marked with an asterisk have been patched to resolve security vulnerabilities or fix component behavior.

New Features in PAS for Windows v2.1

CF SSH

Developers can use the SSH command with the Cloud Foundry CLI to enter a secure shell session in the app container. SSH is used for remote system access and administration and improves security.

Full Autoscale Support

CPU load based auto-scaling is now functional. Load balancing enables dynamically-allocated resources to match performance requirements.

Context Path Routing

Users and ASP.net apps can now use the Cloud Foundry feature for microservices.

Support for URL Rewrite Module

The HWC buildpack included in this version supports the IIS rewrite module through web.config. This enables developers to more easily configure and manage web addresses.

CPU Shared Limits for Containers

CPU workloads are balanced across the hosts, which helps with provisioning and performance.

App Instance Limits

Previously in Windows 2012R2, Diego Cells had a maximum of 40 app instances per cell. This is not the case in PAS for Windows, which gives developers more control and range in their containers.

Improved System Performance for App Health Checks

This release changes how PAS for Windows runs app health checks to improve system performance in resource-constrained environments, such as on-premise installations of PAS. This change does not impact the developer workflow for configuring app health checks.

Previously, health checks during app startup increased system load because they ran as a Garden process every two seconds. In addition, apps that started successfully could fail if slow system performance caused the app health check to time out. In some severe cases, such app failures caused additional resource consumption and a chain-reaction of app failures.

PAS for Windows v2.1 resolves these issues through a new implementation that does not invoke a new process on every health check. The health check now runs as a long-lived process in the app container. Developers may see these processes if they access an app container using the cf ssh command and list the processes.

Known Issues

Default DNS configuration on AWS does not work

On AWS, the default DNS configuration of 169.254.169.253 does not work. DNS should be configured to use another address as documented in Create Networks Page in Configuring BOSH Director on AWS Using Terraform.

Create a pull request or raise an issue on the source for this page in GitHub