cf-dev@lists.cloudfoundry.org

cf-acceptance-tests moving to development/master --> PR into develop please :)

Hello (again) My Cloud Foundrians, Some changes are coming soon that are likely to impact you and I wanted to give you a heads up in advance... RelInt has kicked off a tract of work to improve the

By Josh Collins · #8187 ·

Re: cf-d 3.0 impact to your CI

Hey Julian, As you probably know we published cf-deployment 3.0 yesterday and one of the things I'll be doing for future major releases will be to pre-publish information about the contents so folks

By Josh Collins · #8186 ·

Windows Server 1709 Stemcells for AWS Available on bosh.io

Hi all, This is Kartik, PM for the BOSH Windows team that builds and ships Windows stemcells! We are extremely happy to announce that we have published Windows Server 1709 Stemcells for AWS on

By Kartik Lunkad · #8185 ·

CF-Deployment ALWAYS pulls your latest release from www.bosh.io

Hello Fellow Cloud Foundrians, You probably already know this but I wanted to send out a quick note on the off chance someone new has joined us. The Release Integration teams cf-deployment CI

By Josh Collins · #8184 ·

Re: cf-d 3.0 impact to your CI

We're using the master branch, so we haven't hit this yet, but it sounds like it is coming our way soon. So...is there a list of breaking changes somewhere that we can refer to in order to prepare

By Hjortshoj, Julian <Julian.Hjortshoj@...> · #8183 ·

cf-d 3.0 impact to your CI

Hello Folks - The cf-deployment 3.0 changes which were checked into our `release-candidate` branch yesterday broke the CI pipelines of several component teams. I wanted to let you know that the

By Josh Collins · #8182 ·

Re: DNS takeover

Hi Dan Correct, it's exactly that case I'm talking about. If a DNS record pointing to a public CF cloud is not cleaned up properly an attacker can then take over that domain without any issues.

By adrian.kurt@... · #8181 ·

Re: DNS takeover

I'm curious, how do you think this attack could be applied to CF (unless you're sitting on an actual attack, then don't post in here publicly and notify the security team)? CF isn't performing DNS

By Daniel Mikusa · #8180 ·

DNS takeover

Hi I just stumbled on an article about DNS takeover attacks

By adrian.kurt@... · #8179 ·

Re: Add support for multiple Credhubs to CF/Diego

To confirm: no better/nicer UX implementation will be provided to developers than for them to author bespoke service brokers to inject secrets into credhub and have client apps have to parse them out

By Dr Nic Williams <drnicwilliams@...> · #8178 ·

Re: Add support for multiple Credhubs to CF/Diego

Nic, > Will we be enabling developers to store secrets (or secrets setup by their organization) that are loaded by Diego like currently exists only for service bindings? I guess this is already

By Matthias Winzeler · #8177 ·

Re: Add support for multiple Credhubs to CF/Diego

Will we be making credhub indirectly available to developers so they can populate secret variables for use with their manifest? Currently if a developer wants secrets passed they need to store them

By Dr Nic Williams <drnicwilliams@...> · #8176 ·

Re: Add support for multiple Credhubs to CF/Diego

Hi all Currently, the CF ecosystem supports two deployment architectures of Credhub (https://docs.cloudfoundry.org/credhub/#deployment-architecture ): Colocated with BOSH, used for the secrets of

By matthias.winzeler@... · #8175 ·

Proposal: Improving Security for HTTP Ingress to CFAR Application Containers

Hi, everyone, Building on the features and technologies the CF Diego and Routing teams have introduced into the CF App Runtime to improve application routing consistency, security, and stability

By Eric Malm <emalm@...> · #8174 ·

Re: Variable Substitution in manifest.yml #

Hello Karthi, Even we also get rid of all secrets managed in *.yml file and moved all secrets to the vault, and we have the simple jar which embedded into spring/spring boot war. For Example, below

By Lingesh Mouleeshwaran · #8173 ·

Re: Variable Substitution in manifest.yml #

Thank you for confirming me.Can you point me to any examples /links on web of how it could be done in CI like in jenkins world for file creation that you were talking of. Rgds, Karthik.

By kvemula15@... · #8172 ·

Feature Narrative - Configure egress policies dynamically

Hello, The CF container networking team has received feedback from users regarding some pain points around using Application Security Groups (ASGs) for defining egress policies. After much research,

By Preethi Varambally · #8171 ·

Re: Variable Substitution in manifest.yml #

Yes that sounds right - or if you’re deploying in CI then your CI pipeline would create the vars.yml file for each diff target/stage. Nic

By Dr Nic Williams <drnicwilliams@...> · #8170 ·

Re: Variable Substitution in manifest.yml #

If the CF CLI doesn't support environment variables, It would be really wonderful if the file would consider environment variables. It would be more in line with the 12 factor manifesto, it would

By Josh Long <starbuxman@...> · #8169 ·

Variable Substitution in manifest.yml #

Hi CF Team, I was exploring on variable substitution in manifest.yml : https://docs.cloudfoundry.org/devguide/deploy-apps/manifest.html#variable-substitution I see there is a vars.yml that can be used

By kvemula15@... · #8168 ·

Messages