Keynote: Cloud Native Security: Rotate, Repair, Repave - Justin Smith, Director, Pivotal Cloud Foundry 2026-09-22 | Keynote: Cloud Native Security: Rotate, Repair, Repave - Justin Smith, Director, Pivotal
Cloud Foundry Technical Oversight Committee Weekly Call Recording Sep 5th 2023 Cloud Foundry 2023-09-07 | 2023-09-05AttendeesTOC: Beyhan, Chris, RubenRam Iyengar, CFFReview actions from last weekReview PRsRFC: TOC can stand in for WG leadsAny other businessDo we want to enable push protection for all repositories: docs.github.com/en/code-security/secret-scanning/push-protection-for-repositories-and-organizationsWe decided to first collect feedback about this from the WGs and if there is interest we will look into options on how to automate it. ActionCollect feedback for the secret scanning option provided by Github from the WGs: cloudfoundry.slack.com/archives/C026XJGNC2U/p1693925619689979
Cloud Foundry on Kubernetes Working Group Forum Call Recording 6th Sep 2023 Cloud Foundry 2023-09-07 | [DW] Plans for v0.9?We’re planning to cut a new release once the Docker epic is complete.Support for more user roles would come in v0.10.
Cloud Foundry Technical Oversight Committee Call Recording 29th Aug 2023 Cloud Foundry 2023-09-01 | 2023-08-29AttendeesTOC: Amelia, Chris, RubenRam Iyengar, CFFChris Clark, CFFAnita FleggSylvain KalacheReview actions from last weekReview PRsCloudFoundry GitHub community boardNew docs wg github.com/cloudfoundry/community/pull/677RFC: TOC can standin for WG leads github.com/cloudfoundry/community/pull/676Any other businessNo updates from Canonical - to reschedule next meeting due to US Holiday on 9/4Action
Cloud Foundry Technical Oversight Committee Call Recording 22nd August 2023 Cloud Foundry 2023-08-29 | 2023-08-22RecordingAttendeesTOC: Chris, Ruben, StephanRam Iyengar, CFF, Chris Clark CFFReview actions from last week:Ruben manually fixed the PR merge - in future PRs should be merge commits and not rebaseReview PRsCloudFoundry GitHub community boardFinal Approval of RFC for readiness checksAny other businessIncorporating Supply Chain Files github.com/cloudfoundry/bosh/discussions/2466Action ItemsRuben to run script for RFC Script for future ref github.com/cloudfoundry/community/blob/main/toc/rfc/assign-rfc-number.sh
Cloud Foundry on Kubernetes Working Group Forum Call Recording 23rd August 2023 Cloud Foundry 2023-08-29 | [Standing Reminder] Should we cut a release soon?Not at the moment.After Docker is complete it might make sense, coordinate via slack.[JH] 2FA RequirementUS team to pick this up and create an open-source issue for it.Connecting with other CF cross-company teams and learn how they’re doing it.Docker EpicStarted it and working through the stories.Filling in Roles in the futureConsider using “kubectl auth can-i” to validate RBAC rules for each role.Provisioned ServicesPotential future proposal if we end up doing this.
Platforms on Kubernetes ― an Engineers Perspective Cloud Foundry 2023-08-18 | Kubernetes is a powerful platform for managing containerized workloads, but it can be complex to deploy and manage at scale. This live stream will explore the challenges and opportunities of building and operating platforms on Kubernetes from an engineer's perspective. Vishal and Ram will dive deep into the workings of Cloud Foundry Korifi.Don't miss this opportunity to hear from an experienced practitioner as he talks about navigating the intricacies of Kubernetes, while gaining invaluable insights, and generally fortifying and organization's engineering prowess in the context of cloud-based platform development.Expect answers to questions such as? How to choose the right infrastructure for Kubernetes? Where to begin when implementing a scalable and reliable platform? How best to secure a Kubernetes platform? What's the best way to automate platform operations? How can we measure and manage platform performanceThis event is for engineers who are interested in learning more about building and operating platforms on Kubernetes. Whether you are new to Kubernetes or you are an experienced engineer, we expect that you will have actionable takeaways.
Cloud Foundry Technical Oversight Committee Call Recording 15th August 2023 Cloud Foundry 2023-08-16 | AttendeesTOC: Ameilia, Beyhan, Chris, Ruben, StephanRam Iyengar, CFFReview actions from last weekReview PRsCloudFoundry GitHub community board[PR 653] Find the right place for bosh-package-java-release and bosh-package-cf-cli-releaseReview RFCs[RFC 665] User Account Management in Cloud Foundry with Multiple Identity ZonesOn hold: authors on vacation. Peter gave feedback.[RFC 640] for integrating pcap-release with BOSHToday is the end of the commenting period[RFC 630] add readiness healthchecks for appsMaybe we can start the final comment period?Any other businessDan Mikusa gives update on Paketo WGContinuous focus: timely release delivery. Want users to have confidence in us! Often overlooked, but very important.Ubuntu Bionic: EOLed. Not as smooth as we would like. Started RFC to do this work a month before. Could’ve been more proactive. People were caught by surprise, maybe a blog post next time. Most of the work is communication, archiving repos, turning off CI.First steering committee election! Filled all seats! Dan will share links with more details in slack.Community sponsored UBI stack. Lots of contributions from red hat. Expands potential customers.Default java version bumped to 17! There is an RFC for how to do it going forward re communication etc.Contributions from oracle recently.In progressWorking on ARM64 support. Challenging, big effort. Will probably be working on it the whole year. First output: ARM64 stack. Decoupling buildpacks from dependencies. Idea: buildpacks will look at a path to get the dependencies. RFC is open.Ruben: Where will compatibility testing belong to?Ruben: Will CF still be able to use versions that have all of the dependencies there?Amelia: general concerns about security. Dan: yes, we are thinking about it.Language Family Builders: traditionally we have had an “everything” builder. It is big. A lot of people don’t use all of the bits of the one builder. Thinking about making smaller builders (eg java, node). Make it easier for people who select java vendors. Currently have 11 buildpacks for different java providers. RFC approved, work pending.Most asked for items/problemsARM64 support.Download caching: long standing issue. If you change image name, it invalidates the cache.Ruben: we have an open CF RFC about integrating some paketo buildpacks. Do you have thoughts? How could we better collaborate?Dan: fyi: some technical changes coming soon from CNCB.ActionsRuben: run some script for RFC 640
Cloud Foundry on Kubernetes Working Group Forum Call Recording 9th August 2023 Cloud Foundry 2023-08-11 | 2023-08-09RecordingDocker proposal discussion: docs.google.com/document/d/1vJLBL1f_ebZm7YWJ9iiNa3DHhrhTOUIyBg1DzIpyuDA
Cloud Foundry Technical Oversight Committee Call Recording 8th August 2023 Cloud Foundry 2023-08-09 | 2023-08-08AttendeesTOC: Ameilia, Beyhan, Chris, Ruben, StephanRam Iyengar, CFFChris Clark, CFFDominik Froehlich, SAPAlexander Lais, SAPReview actions from last weekUpdate from FI WGAlready delivered or under developmentImprovements in disaster recovery (Discussion)Support the azure blobstore as external blobstore for bosh (PR)Remove blobstore info from IaaS metadata endpoints (PR)Support instance group tags (PR)BOSH CLI provides linux arm64 version with release v7.2.3Assume role support in the AWS CPI (PR)Major release v9.0.0 of bosh-bootloader with breaking changes:moved from terraform 0.11.x to 1.4.x with no upgrade scenarioConsolidated bosh-packages and bosh-io into cloudfoundry github org (PR)Possible next things:Network tracing support with the pcap-release (RFC)Update strategy for BOSH variables (Discussion)FIPS Stemcell explorationGPU support (Draft PR)Move BOSH Director pipeline to the community CIReview PRsCloudFoundry GitHub community boardgithub.com/cloudfoundry/community/pull/661 Review RFCsFCP candidate: github.com/cloudfoundry/community/pull/640New: github.com/cloudfoundry/community/pull/665
Cloud Foundry Technical Oversight Committee Call recording 01st August 2023 Cloud Foundry 2023-08-02 | 2023-08-01AttendeesTOC: Ameilia, Beyhan, Chris, Ruben, StephanRam Iyengar, CFFSylvain Kalache, CFFGeorgi Sabev, CF on K8s WGReview actions from last weekUpdate from CF on K8s WGTwo new releases but 0.8.0 introduced major increment with:Kpack image sharing which makes re-pushing of app fasterBuildpack selection support with “-b”No support for remote buildpacksSupport for service selection by labelsSupport for rolling updates for push, restage and restartThis mean the CF API v3 deployment has been implementedDeletion jobs for CF resources jobs, tasksImproved finalizer for the resources which make sure that the resource is goneAdditional CF APIs as renaming apps, getting app domains etc. have been implementedNext thing looking into:Docker image supportUser managementCF API v3 for getting users and deleting usersIt could be implemented in a similar way like CFManage Services supportExploration needs to happenTeam structure updateGiuseppe Capizzi is rotating out from the project. New execution lead Andrew Wittrock and new technical lead Dave WalterReview PRsCloudFoundry GitHub community boardgithub.com/cloudfoundry/community/pull/658github.com/cloudfoundry/community/pull/656 FYI: github.com/cloudfoundry/community/pull/659FYI: github.com/cloudfoundry/community/pull/653 Review RFCsgithub.com/cloudfoundry/community/pull/630github.com/cloudfoundry/community/pull/637github.com/cloudfoundry/community/pull/640 Any other businessThe CF community looks into options to add FIPS stemcell support. Discussions with Canonical are ongoing to clarify the required license options to get a FIPS license for the CF community so that validation can happen in the community. Next steps after the clarification could be:RFC for how to produce the FIPS stemcellMost probably also an RFC about how to consume the FIPS license in the CF community
Cloud Foundry on Kubernetes Working Group Forum Call Recording 26th July 2023 Cloud Foundry 2023-07-28 | [BR] Default RolesDifficult to testMight be more expensive than at first glancePerm project retirement: lists.cloudfoundry.org/g/cf-dev/topic/proposal_to_retire_the_perm/74842395?p=,,,20,0,0,0::recentpostdate%2Fsticky,,,20,2,0,74842395 This should still be easier than Perm since we don’t have to deal with a then 7 year old metaprogrammed codebase, but may still be more complicated than it seemsIs manual testing adequate? What is the cost of automated testing?Pick glaring omission role and fill out slowly.[GC] Branch protection PR[RI] Why can’t Korifi default to list all Buildpacks available from Paketo? (Reference conversation)At least DotNet Core, Python, and PHP.Expose list of buildpacks in values file?Simple configuration as list value in the Helm chart.Experiment to see how much bloat from adding extra buildpacks.[RI] v0.8.0/v0.8.1 is out. Could we go through the release notes and see what the implications are of each of those items? UPSI service label proposal UPSI Service Label Enhancements has more info on that item
Technical Oversight Committee (Cloud Foundry) [25 Jul 2023] Cloud Foundry 2023-07-28 | 2023-07-25AttendeesTOC: Ameilia, Beyhan, Chris, Ruben, StephanChris Clark, CFFRam Iyengar, CFFSylvain Kalache, CFFJochen Ehret, ARD WGArsalan Haider, Cloud.GovReview actions from last weekUpdate from App Runtime Deployments WGComplete: Migrated all infrastructure to new GCP/AWS/dockerhub account from vmware accounts to community funded accounts.New release: Bbl v9.0.0 Branch protection rules: activated.Cflinuxfs4 migration: in new cf-d release, cflinuxfs3 has been removed. Only stack and stemcell on the latest cf-d are the new jammy ones.Cflinuxfs4-compatable release is also integrated into the cf-deployment nowContinuous work to stabilize the CATsOngoing discussions about new stacks from the Paketo WG to be integrated into cf-dFuture: Update the upload release pipeline to use new bosh 256 sha, instead of sha1Review PRsCloudFoundry GitHub community boardgithub.com/cloudfoundry/community/pull/643github.com/cloudfoundry/community/pull/654github.com/cloudfoundry/community/pull/655 Review RFCsgithub.com/cloudfoundry/community/pull/641github.com/cloudfoundry/community/pull/630 There is still a discussion open and Amelia will look into it.Any other businessPlan the vacation timeAmelia: I’m out next week. How do we report when we plan to be out?ActionAmelia: Start something in slack to gather vacation time to decide when we need to cancel meetings.Everyone: fill in your vacation time on slack
Tcpdump for Everyone – Debugging Network Issues With Pcap-Release Cloud Foundry 2023-07-21 | Network issues can be hard to track down. This is especially true on distributed systems like Cloud Foundry, where apps are spread across multiple hosts and networks. Investigating such problems usually requires operator-level access to the platform, which makes it hard to scale and expensive. In this talk, we present "pcap-release", a solution that allows app developers to capture ingress and egress traffic of their apps across all app instances with an easy-to-use CLI. The tool also allows capturing network traffic from BOSH deployments for operators. The resulting pcap files can then be opened in popular tools like Wireshark for further analysis. The goal of this talk is to gain community awareness and collect valuable feedback. We feel that the pcap-release project can provide lots of value to Cloud Foundry, because it makes it very easy for both operators and developers to capture network traffic from multiple hosts without any overhead. SpeakersDominik Froehlich Senior Developer, SAP SEMaximilian Moehl Developer, SAP SEHost:Ram Iyengar Chief Evangelist, Cloud Foundry Foundation
Technical Oversight Committee Call Recording 13 June 2023 Cloud Foundry 2023-07-20 | AttendeesTOC: Andy, Beyhan, Eric, Ruben, StephanRam Iyengar, CFFPaul Warren, Vulnerability Management Working GroupArsalan Haider, Cloud.GovUpdate from Vulnerability Management WGPaul Warren presentingQuite busy recently on the vulnerability front. Managing 8 vulnerabilities at the high point. Ticked down again to about 4 active vulnerabilities. 8 is a lot of vulnerabilities to have active at one point. Don’t think anything caused that uptick.On USN side, continue to publish those monthly on the #security channel. No issue publishing those. Continue to work with Davos team to try to make updates to the system. We don’t think we should be publishing anything about Xenial anymore, for example.Tracked the cflinuxfs4 through from experimental through to production. We’ll probably follow up with a post on #security.PW stop for questionsNo questionsWe have become aware of a vulnerability in Concourse. I’ve got a Google doc I want to share. PW to share doc with TOC members.Worth addressing quickly.We’ve had 2 or 3 instances where details of the vulnerability have been leaked out in the commit messages and release notes before we’ve had time to release that vulnerability. We probably want to remind the team that if they’re included in a #sec- channel they should be careful with what they put in public places, until it’s been reported to Mitre etc.Review PRsgithub.com/cloudfoundry/community/pull/591 (Paketo buildpacks)github.com/cloudfoundry/community/pull/622 Any other businessNext week’s meeting (20th June)?ActionPW to share Concourse vulnerability details with TOC members
Cloud Foundry On Kubernetes Working Group Forum 28th June 2023 Cloud Foundry 2023-07-20 | [JH] Staging disk size settinggithub.com/cloudfoundry/korifi/blob/main/helm/korifi/values.schema.json#L182-L185It appears that we set this in every CFBuild object, but then we don’t use it for anything?Julian to add a story. We should mark the CFBuild CR property as unused also, since we never used it.Staging resources settings are under an `api` key. Could we move them to a more global location?Julian to add a story to refactor. Make sure we don’t leave the old properties references in the docs for any properties we move. We should make sure to get proper review for the PR also.[JH] korifi/tools unit tests: are we running them in CI? Should we be? Yes we should. JH to add a chore. Also add it to the test-everything script?[TD - can’t attend] What is left for 0.8?Missing anything in v0.8?github.com/cloudfoundry/korifi/issues/2604github.com/cloudfoundry/korifi/issues/2605github.com/cloudfoundry/korifi/issues/2645 - bug about cf push not retriggering a build when the buildpacks change after a failure. (It just gets stuck) Probably we should not block on this issue though.
Cloud Foundry Technical Oversight Committee Call Recording 11th July 2023 Cloud Foundry 2023-07-19 | AttendeesTOC: Amelia, Andy, Beyhan, Chris, Ruben, StephanRam Iyengar, CFFChris Clark, CFFReview PRsgithub.com/cloudfoundry/community/pull/642github.com/cloudfoundry/community/pull/636github.com/cloudfoundry/community/pull/632TOC chair selectionBeyhan Veli nominates himselfTOC selects Beyhan Veli as new TOC chair.Contributor docsYearly review from VMWare of docs they contribute to. They identified it being difficult for newcomers to work out how to contribute, what projects are part of.We thought we didn’t have many new contributors, but we do. It would be nice to have a better entrypoint on the website which explains how things work; guidelines on what should be submitted as what.
Cloud Foundry On Kubernetes Working Group Forum for 12th July 2023 Cloud Foundry 2023-07-19 | 2023-07-12[DB/GC] Memory limits (and limits in general) for build pods[GC] Branch protection exception on korifi-ciNeed a PR to github.com/cloudfoundry/community/blob/main/org/branchprotection.yml to override the auto-generated default configuration[GS] Team reorg[RI] (Pardon the multi-part question) What’s the roadmap like for the next releases? What are the major press-worthy features in the pipeline? When can we expect support for a cf marketplace command? What about support for deploying Docker containers?Supporting existing Docker containers is an easier incremental step to introduce Korifi to new audiences
Cloud Foundry TOC Call Recording 18th July 2023 Cloud Foundry 2023-07-19 | AttendeesTOC: Amelia, Beyhan, Ruben, StephanRam Iyengar, CFFArsalan Haider, Cloud.GovReview actions from last weekReview PRsCloudFoundry GitHub community boardReview RFCsgithub.com/cloudfoundry/community/pull/641Any other businessHow should we continue with the WG updates?We will go with the “Last Update” dateActionCheck on final period in github.com/cloudfoundry/community/pull/641
Cloud Foundry Technical Oversight Committee Call Recording 27th June 2023 Cloud Foundry 2023-06-28 | New TOC membershipNew membersAmelia Downs, VMwareChris McGowan, cloud.gov Outgoing membersAndy Hunt, GOV.UK PaaSEric Malm, VMwareCast for 2023-2024:Amelia Downs, VMwareBeyhan Veli, SAPChris McGowan, cloud.govRuben Koster, VMwareStephan Merker, SAPAttendeesTOC: Arsalan Haider, Cloud.GovReview actions from last weekUpdate from App Runtime Platform WGCF DaySlides for ARP update talk(docs.google.com/presentation/d/1KloUgoE4D9LTb0RemEPgy-HlMieDFhRs0fB-D9ANdf0/edit?usp=sharing)Readiness HealthchecksOriginal proposal (github.com/cloudfoundry/cf-deployment/issues/1094) in cf-d. Closed in favor of an RFC (github.com/cloudfoundry/community/pull/630).AZ Aware RoutingTaking a step back to think about it more before developing anything.Looking for feedback from any users, and asked the following questions of the audience in CF Day talk…❓ Do you have smaller, single-zone CF deployments that you would like to consolidate to multi-AZ ones but are holding back for some reason?❓ Do you have problems with cross-AZ behavior inside of an existing multi-AZ CF deploymentUpcomingGo 1.21 - coming in August!
Pushing the Limits: Cloud Foundry Runtime and Routing at SAP... Alexander Lais & Vladimir Savchenko Cloud Foundry 2023-06-25 | Pushing the Limits: Cloud Foundry Runtime and Routing at SAP Scale - Alexander Lais and Vladimir Savchenko, SAP SESAP is operating Cloud Foundry at very large scale and in a multi-tenant setup. Thousands of customers deploy apps, leading to highly heterogeneous workloads, client applications and a staggering number of requests on ingress and egress. With so many endpoints and apps there is more opportunity for things to go wrong.In this talk Alex & Vladimir, on behalf of the SAP BTP CF Routing and Runtime team respectively, present the most significant past and ongoing challenges and how they were addressed so far. Their stories and encounters running large CF landscapes with varied workloads include the following: Running Diego cells in separate deployments and with more NAT Gateways How to overcome Hyperscaler bandwidth limits during landscape updates Improving the interaction between Gorouter, Envoy and Diego with crashing apps and crashing cells Our contribution to safely re-enable Gorouter route service hairpinningBenefits for the Ecosystem:The goal of this talk is to raise awareness for the scale at which CF can be operated and to share the challenges that come with such large deployments. This presentation is specifically focussed on the most scalable parts of the architecture, the routing stack and Diego runtime.For the ongoing challenges, specific areas are identified in need of solutions. Those areas will require ideas from and alignment with the community. This talk aims to share gained knowledge and ideas to spark further collaboration within the wider community.
BOSH – Restore from an Availability Zone Outage - Ansh Rupani & Chun Yuan, SAP SE Cloud Foundry 2023-06-25 | BOSH – Restore from an Availability Zone Outage - Ansh Rupani & Chun Yuan, SAP SEThe BOSH director is built as a singleton that is only available as a single unit in an environment. As BOSH is normally only used during deploy time, it is not critical. During a small Availability Zone Outage, it is not possible to deploy new deployments, but the running system is unaffected and will work as long as it is deployed over multiple availability zones. But what happens if an availability zone is unavailable for several hours or days? Or if an AZ is destroyed? How do we restore a BOSH director in such a situation? The BOSH team at SAP spent some time working on a solution for such a scenario and will share the results in this talk with you.
Experiences in Adopting Paketo in Shipwright and IBM Cloud Cod... Sascha Schwarze & Matthias Diester Cloud Foundry 2023-06-25 | Experiences in Adopting Paketo in Shipwright and IBM Cloud Code Engine - Sascha Schwarze & Matthias Diester, IBMOn April 21st 2020, a blog post announced the availability of the Paketo Buildpacks. On April 21st 2020, our architect asked us to take a look. And on April 21st 2020, we started to adopt them. :-) In this session, we'll briefly talk about what Shipwright as the framework that builds container images on Kubernetes. We'll share how Paketo can be used with Shipwright, and how we productized this in Code Engine. We'll present how our users experience Paketo. We'll talk about where Paketo is really strong, but also where we struggled, and what we wish for in the future.
Application Runtime Platform Roundup: Galloping Go Bumps, Tracing Tales, and Readine... Amelia Downs Cloud Foundry 2023-06-25 | Application Runtime Platform Roundup: Galloping Go Bumps, Tracing Tales, and Readiness Rollouts - Amelia Downs, VMwareThis session will explore the remarkable updates by the Application Runtime Platform Working Group, known for their pivotal role in developing key Cloud Foundry components such as Diego, Gorouter, Garden, Logging, Metrics, and more. We will discuss our progress towards swiftly and safely upgrading Go versions. Then we will demo the brand-new distributed tracing feature that will aid operators in more easily navigating through the vast logs of Cloud Foundry. And that's not all! Brace yourself for a sneak peek of readiness healthchecks, which are coming to revolutionize a Cloud Foundry near you soon.Don't miss this opportunity to discover the exciting advancements presented in this session, brought to you by Amelia Downs, the Tech Lead of the Application Runtime Platform Working Group.
The State of Supply Chain Security in the Cloud Foundry Ecosystem - Ruben Koster, VMware Cloud Foundry 2023-06-25 | The State of Supply Chain Security in the Cloud Foundry Ecosystem - Ruben Koster, VMwareIn this session, the current state of supply chain security in the Cloud Foundry ecosystem will be explored. We will look into the mechanisms used by Bosh to guarantee build reproducibility. In this context, we will also take a more in-depth look at Concourse. In the second part of the talk, we will be looking at future improvements that are planned in this space, like SBOM generation for Bosh releases, Concourse hermetic builds, and how all these things will eventually allow us to achieve SLSA compliance.
How the Cloud Foundry Community Can Help Platform Engineering - Michael Coté, VMware Cloud Foundry 2023-06-25 | How the Cloud Foundry Community Can Help Platform Engineering - Michael Coté, VMwarePlatform Engineering has rocketed into popularity as the successor to DevOps and SRE. That discipline’s focus is on building and improving developer experience. Sounds familiar, right? Indeed, this has been the focus of the Cloud Foundry community from the beginning and - it works! This talk will explain what platform engineering is and suggest ways the two communities can help each other. Examples include: a product management mindset, internal advocacy & marketing, services and developer tools to build. The talk draws on years of real world experience at organizations. Past version of this presentation: I've given the content of this presentation several times, but I haven't framed it in this way at all. I'd reuse the same best practices, but the format of the presentation would be as I outline above, speaking to the two communities rather than giving end-users some best practices and advice to follow.
Cloud Foundry & Heidelberg: Innovating Together - Stephan Klevenz and Beyhan Veli, SAP SE Cloud Foundry 2023-06-25 | Cloud Foundry & Heidelberg: Innovating Together - Stephan Klevenz and Beyhan Veli, SAP SEJoin Stephan Klevenz, CFF board member, and Beyhan Veli, TOC member, at CF-Day in Heidelberg to explore the beautiful city of Heidelberg and draw parallels with Cloud Foundry. Let us discover together synergies between technology and urban landscapes. Additionally, Beyhan will provide updates from the CF community, highlighting collaboration within the Cloud Foundry ecosystem. Don't miss this insightful talk on innovation and community-driven progress.
Introducing Mutual Tls Authentication for Syslog-Drains - Felix Hambrecht, SAP SE Cloud Foundry 2023-06-25 | Introducing Mutual Tls Authentication for Syslog-Drains - Felix Hambrecht, SAP SEAs part of Cloud Foundry, Loggregator, the logging and metrics stack, offers forwarding application logs and metrics to third party logging providers via user-provided services. Authentication to the logging providers was only possible when using http, but not with the syslog protocol which allows for a much higher throughput. To improve log forwarding performance and provide secure connections to third party logging providers, mutual tls authentication was introduced. The goal of this talk is to showcase the feature and to outline the faced challenges during research and development. Felix will give a technical overview of the secured and improved syslog-drains and their introduction in a zero downtime environment.
Same Procedure as Every 4 Years - Cloud Foundry Stack Migration - Stephan Merker & Florian Braun SAP Cloud Foundry 2023-06-25 | Same Procedure as Every 4 Years - Cloud Foundry Stack Migration - Stephan Merker & Florian Braun, SAP SEIn this talk, we will discuss the process of migrating from the legacy stack cflinuxfs3 based on Ubuntu 18.04 to the new stack cflinuxfs4 based on Ubuntu 22.04 in Cloud Foundry. We will begin with the integration of the new stack into cf-deployment, the canonical Cloud Foundry distribution. We will then cover the challenges rolling out the new cflinuxfs4 stack into large, multi-tenant, public PaaS foundations including planning, effective communication, and stakeholder management. Then, we will share insights about the adoption rate of cflinuxfs4 and discuss ways how to help customers getting their applications migrated to cflinuxfs4 so that eventually the old cflinuxfs3 stack can be retired. Finally, we will look ahead discussing how a stack migration could be improved in future - because the next stack migration will come in four years latest.
The Gold Standard in Platform Engineering: Cloud Foundry :) - Nick Kuhn, VMware Cloud Foundry 2023-06-25 | The Gold Standard in Platform Engineering: Cloud Foundry :) - Nick Kuhn, VMwarePlatform engineering move aside! The Cloud Foundry community has been doing this for over a decade, and one could argue that the Cloud Foundry community has truly defined what a platform and platform engineering teams should look like. This session will detail how platform engineering teams at VMware run Cloud Foundry internally to host mission-critical applications. Furthermore, we will break down stories and metrics from our customer base on the incredible outcomes and scale they have reached with their Cloud Foundry deployments! This session will demonstrate how our everyday lives continue to be powered and impacted by Cloud Foundry in some way or another and continue to set the gold standard of platform engineering.
Migrating Large Scale CF Environments - Julian Fischer, anynines GmbH Cloud Foundry 2023-06-25 | Migrating Large Scale CF Environments - Julian Fischer, anynines GmbHAn outstanding property of Cloud Foundry has always been the ability to work at large scale. Therefore, it is no surprise that there are many Cloud Foundry environments containing thousands and ten thousands of apps. For various reasons, such as changing the infrastructure or the Cloud Foundry distribution, it might be necessary to move the workload from one Cloud Foundry environment to another. Such a migration usually needs to occur with a minimum of CF app downtime. In this talk you will learn about the resulting challenges and how to overcome them. At the end of the you will have learned about migration strategies for both applications and their data.
Ramping Down the CF API V2 Usage: Embracing Improvements and Managin... Johannes Haaß & Philipp Thun Cloud Foundry 2023-06-25 | Ramping Down the CF API V2 Usage: Embracing Improvements and Managing Challenges - Johannes Haaß & Philipp Thun, SAP SEAs the CF V3 API is feature complete and available since 2021 it's time to ramp down the V2 usage. This talk aims to address critical aspects of this transition, ensuring a smooth and efficient experience for users. We will delve into the introduction of a dedicated rate limit for V2 endpoints, designed to mitigate the impact on the overall performance of the system while encouraging users to migrate to the more advanced V3 API. To accommodate the diverse needs of our user base, we will discuss the user exemption process, which provides a temporary reprieve for those who require more time to adapt their applications and workflows to the new API version. In addition, we will explore the significant performance improvements offered by the Cloud Controller in terms of scalability and resource management. Lastly, we will address open topics, including the implications of the API V2 ramp down on various CF API clients and the necessary modifications to the CF CLI plugins to ensure seamless compatibility with the updated system.
