1.0.00 enhancements and patches


Review the PATROL for Cloud Foundry enhancements and patches for features that will benefit your organization and to understand changes that might impact your users. For the list of issues resolved in this release, see Known-and-corrected-issues.

For a list of recent updates and enhancements across multiple versions, see Release-notes-and-notices.

BMC applies upgrades as described in BMC Helix Upgrade policy . BMC applies upgrades and patches during Maintenance windows .



1.0.05


Security enhancements

BMC PATROL for Cloud Foundry 1.0.05 patch contains the following third-party software upgrade for security enhancement:

  • json-20240303.jar
  • commons-collections4-4.4.jar
  • commons-lang3-3.17.0.jar


1.0.04


Security enhancements

BMC PATROL for Cloud Foundry 1.0.04 patch contains the following third-party software upgrade for security enhancement:

  • jackson-datatype-jdk8-2.14.1.jar
  • jackson-databind-2.14.1.jar
  • jackson-annotations-2.14.1.jar


1.0.03


Security enhancements

BMC PATROL for Cloud Foundry 1.0.03 patch contains the following third-party software upgrade for security enhancement:

  • jackson-databind-2.13.3.jar
  • reactor-netty-1.0.20.jar


1.0.02


SpringShell/Spring4Shell vulnerability alerts

BMC Software is alerting users to the SpringShell/Spring4Shell vulnerability that requires immediate attention in BMC PATROL for Cloud Foundry 1.0.

A zero-day exploit for the vulnerability CVE-2022-22965 (code named Spring Shell or Spring4Shell) was publicly released on March 30, 2022.

Date: April 8, 2022

Issue

A detailed description of the vulnerability (CVSS v3 rating: 9.8) can be found here: Spring4Shell Vulnerability image-2024-10-3_12-51-49.png .

Follow the BMC Security Advisory Note image-2024-10-3_12-51-49-1.png  on BMC Community for continuous updates and details about this issue.

If you have any questions about the problem, contact BMC Support

We recommend that you immediately apply the fix as described in this topic.

Resolution

This patch upgrades the following jars and removes the vulnerable jars:

Earlier version 

Upgraded version

spring-web-5.3.17

spring-web-5.3.18

spring-core-5.3.17

spring-core-5.3.18

For BMC Helix Operations Management:

  1. Create a deployable package by using the 1.0.02 version.
  2. Deploy the patch on the PATROL Agent.

No changes are required to the existing monitor policies. If you want to create new monitor policies, use the 1.0.02 version.

For more information, see Creating deployable packages image-2024-10-3_12-57-41.png .

For TrueSight Operations Management:

Download and install the patch.


1.0.01


Support for Microsoft Windows and OpenJDK

PATROL for Cloud Foundry supports the following OS version and OpenJDK version:

  • Microsoft Windows Server 2022, x86-64
  • OpenJDK 11.x

For more information, see System requirements.


1.0.00


Automatic discovery of Applications and Components

After you configure the Cloud Foundry domain, the KM automatically discovers the configured application topology and components. With this KM, manage the configured infrastructure effectively and efficiently.

Monitoring of Application, Event, and Component health

Cloud Foundry Applications

In application monitoring, the KM can:

  • Monitor the availability of the applications
  • Monitor the CPU, Memory, and Disk utilization of the applications
  • Configure filters to include or exclude applications based on organization, space, and application name 

For information about how to configure the applications, see Configuring-the-Cloud-Foundry-KM.

For a list of metrics, see Cloud Foundry Application Instance monitor type.

Cloud Foundry Events

In event monitoring, the KM can:

  • Configure filters based on event type, actee name, organization name, and space name
  • Configure the type of event (alarm, warning, information) for each filter
  • Monitor the number of events that meet the event filtering criteria

For information about how to configure the events, see Configuring-the-Cloud-Foundry-KM.

For a list of metrics, see Cloud Foundry Events Filter monitor type.

Cloud Foundry Components

In component monitoring, the KM can monitor the following Infrastructure components:

Component

Description

Diego Cell

Monitors the cell health, CPU, memory, and disk utilization. For a list of metrics, see the Diego Cell monitor type.

Diego Brain

Monitors the locks held by the system components, CPU, memory, and disk utilization. For a complete list of metrics, see the Diego Brain monitor type.

Diego Database

Monitors the active locks, request latency, and LRP attributes. For a complete list of metrics, see the Diego Database monitor type.

Router

Monitors the total routes, latency, and file descriptors. For a complete list of metrics, see the Router monitor type.

UAA 

Monitors the global and in-flight requests. For a complete list of metrics, see the UAA monitor type.

Syslog Scheduler 

Monitors the CPU, memory, and disk utilization. For a complete list of metrics, see the Syslog Scheduler monitor type.

Cloud Controller 

Monitors the VM health and outstanding requests. For a complete list of metrics, see the Cloud Controller monitor type.

Cloud Controller Worker 

Monitors the CPU, memory, and disk utilization. For a complete list of metrics, see the Cloud Controller Worker monitor type.

TCP Router

Monitors the average connect time, average queue time, and number of routines. For a complete list of metrics, see the TCP Router monitor type.

Syslog Adapter 

Monitors the CPU, memory, and disk utilization. For a complete list of metrics, see the Syslog Adapter monitor type.

Loggregator Traffic Controller 

Monitors the CPU, memory, and disk utilization. For a complete list of metrics, see the Loggregator Traffic Controller monitor type.

Consul Server 

Monitors the CPU, memory, and disk utilization. For a complete list of metrics, see the Consul Server monitor type.

Doppler 

Monitors the CPU, memory, and disk utilization. For a complete list of metrics, see the Doppler monitor type.

Cloud Controller Worker 

Monitors the CPU, memory, and disk utilization. For a complete list of metrics, see the Cloud Controller Worker monitor type.

NATS

Monitors the CPU, memory, and disk utilization. For a complete list of metrics, see the NATS monitor type.

For information about how to configure the components, see Configuring-the-Cloud-Foundry-KM.

Option to enable or disable monitoring

Monitor the application, event, and one or more Infrastructure components depending on your requirements. The KM provides a simple interface with an option to enable or disable monitoring of these entities while configuring the KM.

Detailed annotation messages

The KM provides detailed annotation messages with possible corrective actions in case of any failure. These annotations help you resolve the issue and configure the policy successfully.

Monitor type

Attribute

Configuration Status

Connection Status

Monitoring Status

Monitoring Status

Monitoring Status

Simple configuration

The web-based configuration interface lets you manage the monitoring and filtering configuration easily. Using a single configuration screen, you can configure the Cloud Foundry domain, applications, events, components, and their filters.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*