v1.0.0 - cf push comes to Kubernetes

Highlights

• We are 1.0! 🥳
• Runs on a laptop. No reason not to experience the famous cf push for yourself.
• You can now specify one or more app log destinations (see our deployment docs for more info)
• Our CNB builder now uses cnb-full stack images and includes the paketo ruby buildpack (that graduated from community)
• Input values file now support PEM encoded certificates (that don't have to also be base64 encoded)

Scale Test Results

• cf-for-k8s was scaled to 1000 applications
• With right number of replicas 1.0.0 can be good for environments which targets for 500-700 application instances
• 7000 logs/sec and req/sec.
• Up to 20 concurrent pushes.
• Thanks to SAP for their great work. More details can be found here

Configuration Changes

• enable_load_balancer property was renamed to load_balancer.enabled
• istio_static_ip property was renamed to load_balancer.static_ip

PRs Merged

• "Bump Istio to 1.7.1" 455
• "Expect ingressgateway to be either a Deployment or DaemonSet" #464
• "Make application wait for sidecar proxy before starting" #472
• "add networking metrics docs" 474
• "rename istio_static_ip field name to load_balancer.static_ip" #480
• "ENH: Allow operators to provide PEM-encoded certs" #482
• "Document ingress certificate rotation" #484
• "FIX: disable_snapshot_annotations to fix #444" #485
• "Use full paketo build and run bionic stack images" #487
• "Bump Istio to 1.7.3" 488
• "add option to allow Prometheus scrape access to metrics endpoints" #495
• "Use the capi-database-encryption-key-secret in capi-k8s-release" #497
• "doc: required pod capabilities for Istio" #499
• "update logging to 0.4.0" 500
• "ENH: Add SAN definitions to generated certs" #501
• "Merge Istio sidecar and app stats" 510
• "Disable prometheus metrics merging" #512
• "Fork and patch Eirini to loosen UID requirement" #513
• "Use paketo-buildpacks/ruby" 514
• "reformat version in upgrade job" 516
• "Add private-registry instructions" 517
• "Revert "Merge pull request #512 from cloudfoundry/disablePrometheusMerge"" #518
• "DOC: Update setup-ingress-certs-with-letsencrypt" #519
• "Run Istio Ingressgateway pod as root" #521
• "update logging to 0.5.0" 522
• "Replace VirtualService with Ingress for routing to system components" #525
• "Add Scaling documentation" 526
• "Maint/rm old eirini namespace overlays" #528
• "Revert "Replace VirtualService with Ingress for routing to system components"" #531
• "Bump capi-k8s-release to 29b77b94183a26cefdc98eff5825f22ae6c75090 (fix docker app deletion)" 534
• "DOC: Improve project README" 543

Issue Closed

• Extend UAA login with external provider #539
• Need the ability to add annotations to the LoadBalancer Service #537
• Gateway access logs do not appear in cf log #520
• Release notes for 0.7.0 regarding load balancer is wrong. #508
• Metrics server fails to install on DigitalOcean #498
• CF Push fails with v6 CLI #471
• Input values for certificates should have a consistent format #460
• Platform engineers can install cf-for-k8s on their local machine without needing to configure any data values #419
• App Developers can expect their apps with Procfile + app language will be correctly detected Type: Feature Parity #408
• YTT should validate my data values before it installs cf-for-k8s #398
• Platform engineers can configure an external blobstore with cf-for-k8s #344
• CF push of spring-music app with v7 CLI fails after building app image #287
• /v2/resource_match returns status code 413 for large nodejs app delivered #260
• Starting a docker image app fails if it tries to establish connections before Envoy is ready #189
• Upgrading cf-for-k8s to a new version fails #99

Releases

Release	Old Version	New Version
CF API	d84e4bf	29b77b9
Eirini	v1.9.0	v1.9.0+
Istio	1.6.4	1.7.3
Kpack	v0.1.2	n/a
Logging	0.4.0	0.5.0
Metrics	1.0.0	1.0.1
Networking	8aab2b2	c1a8c86
UAA	v74.25.0	v74.26.0

Contributors

Many thanks to all of the contributors that have made cf-for-k8s 1.0 possible.

• Aakash Shah
• Adrian Zankich
• Aidan Obley
• Alex Standke
• Alexander Standke
• Amin Chawki
• Andrew Costa
• Andrew Wittrock
• Angela Chin
• Ben Fuller
• Benjamin Haegenlaeuer
• Bruce Ricard
• Caitlyn Yu
• Carlos Iriarte
• Carson Long
• Chip Childers
• Chris Selzo
• Chris Tarazi
• Christian Ang
• Clay Kauzlaric
• Connor Braa
• Dave Walter
• David Timm
• Dennis Leon
• Dmitriy Kalinin
• Eli Wrenn
• Eric Promislow
• Fabio Berchtold
• Gary Liu
• Georgi Dankov
• Georgi Sabev
• Giuseppe Capizzi
• Graham Siener
• Jaime Gonzalez Aguilar
• Jakob Schmid
• James Pollard
• JamesClonk
• Jaskanwal Pawar
• Jen Spinney
• Joey McDonald
• Johannes Dillmann
• John S. Ryan
• Joseph Palermo
• Josh Russett
• Julian Hjortshoj
• Kaitlin Barrer
• Kauana dos Santos
• Keshav Sharma
• Kieron Browne
• Leah Hanson
• Lisa Burns
• Louie Brann
• Luca Schimweg
• Mark Stokan
• Matt Royal
• Melena Suliteanu
• Mikael Manukyan
• Nancy Hsieh
• Nitya Dhanushkodi
• Oleksandr Slynko
• Paul Czarkowski
• Paul Warren
• Peter Chen
• Philipp Stehle
• Piyali Banerjee
• Ralf Pannemans
• Renee Chu
• Rizwan Reza
• Rodolfo Sanchez
• Saikiran Yerram
• Sannidhi Jalukar
• Sebastian Vidrio
• Seth Boyles
• Shannon Coen
• Tim Downey
• Tom Chen
• Tom Kennedy
• Travis Patterson
• Ulrich Kramer

Shoutout to our previous Release Integration team members

• Angela Chin
• Dmitriy Kalinin
• Jwal Pawar
• Jen Spinney
• John Ryan
• Joseph Palermo
• Lisa Burns
• Sai Yerram
• Sebastian Vidrio

Best,
Release Integration

• Andrew Costa
• Andrew Wittrock
• Dave Walter
• Eric Promislow
• James Pollard
• Paul Warren
• Renee Chu