Genesis v2.7.8 Release Notes

Release Date: 2020-05-21 // almost 4 years ago
  • ๐Ÿ’ฅ Breaking Changes

    No longer set $HTTPS_PROXY to $BOSH_ALL_PROXY

    This broke under two conditions:

    If you wanted to use BOSH via a proxy, but your vault was on your
    home network

    ๐Ÿ‘ If you used a protocol of ssh+socks5, which is not supported by
    HTTPS_PROXY.

    Instead, if you are setting BOSH_ALL_PROXY, you must set HTTPS_PROXY or
    alternatively SAFE_ALL_PROXY instead of relying on Genesis to do that
    for you.

    ๐Ÿ‘Œ Improvements

    ๐Ÿ‘ Now supports extraction of bosh variables and credhub secrets into exodus
    ๐Ÿ‘ data for cross-kit integration and addon support.

    โœ… When testing availability of the vault, it specifies the alias and url of
    the vault instead of specifying "selected vault"

    ๐Ÿš€ Clarify usage of --recreate and --fix options for deploy

    ๐Ÿ› Bug Fixes

    โฑ Universal support for timeout detection when attempting to connect to remote
    ๐Ÿ›  BOSH and Vault, with better feedback in case of timeout (Fixes #412)

    โž• Adds support for multiline provided secrets rotation and addition (Fixes #413)

    ๐Ÿ›  Fix typo in rotate-secrets help (Fixes #414)

    ๐Ÿš€ Deployments using legacy mode for secrets providers now get the vault
    connection validated prior to using it

    ๐Ÿ›  Fixed bug where non-standard secrets mount would report the vault was
    uninitialized.

    Kit Authoring Improvements

    Kit manifests can now use the same environment variables used by the hooks
    script, via spruce, to perform actions such as:
    (( vault $GENESIS_EXODUS_MOUNT params.cf_deployment_name ":admin_password" ))

    โž• Add features hook

    ๐Ÿ–จ While blueprint hook has the ability to make decisions on when a feature
    is NOT present, or on specific combinations of features, that ability is
    beyond other interactions.

    We used to have a subkit hook which would allow you to create derived
    ๐Ÿ”‹ features so that default features and not-features could show up as
    explicit features, which allows things like secrets management to
    determine dependencies for these. (ie lack of a features can result in a
    0๏ธโƒฃ not-feature derived feature to add secrets for a default state)

    This has been re-realized as a features hook, which given a list of
    features in the $GENESIS_REQUESTED_FEATURES value, can provide a
    derived list of features, which will be used by internal genesis for the
    environment's features list, which in turn will be used to populate
    $GENESIS_REQUESTED_FEATURES for other hooks.