“Do one thing every day that scares you.” – Eleanor Roosevelt
December 6 2024
VMware Tanzu Product Releases
In this section, we will add releases information on Tanzu Platform for Cloud Foundry, Tanzu Platform for Kubernetes, Tanzu Data Services, and Tanzu Spring Essentials Products that are part of Tanzu Platform and Standalone solutions along with its release date and release notes. (Note : Broadcom Support portal requires you to register)
Tanzu Product Downloads | KB article on How to Download Products | Tanzu Product Lifecycle (Select Tanzu Division to find Tanzu product releases) | Tanzu Product Documentation
Note: Tanzu Application Service has been renamed to Tanzu Platform for Cloud Foundry(one of the two runtimes available) 10.0 onwards. Product documentation for v6.0 and earlier versions will continue to use the previous name, Tanzu Application Service.
| Product Name | Version | Release Date | Related Links |
| VMware Tanzu Platform 10.0 Releases Tanzu Platform Tile Beta This beta release is intended for evaluation and test purposes only. Do not use it in a production environment. | 10.0.0.0(Beta) | 2024-11-25 | Release Notes |
| Tanzu Platform Self Managed (SM) This is the first release of VMware Tanzu Platform self-managed. | 10.0.0.0 | 2024-11-27 | Release Notes |
| Tanzu Platform SaaS (SaaS) Tanzu Platform is available as software as a service (SaaS) offering hosted by Tanzu Platform cloud services | 10.0.0.0 | 2024-11-27 | Know about SaaS offering |
| Tanzu Platform for Cloud Foundry Windows Check Release Notes for details and Component updates | 10.0.0.0 | 2024-11-27 | Release Notes Component Updates |
| Tanzu Platform for Cloud Foundry Check Release Notes for details for breaking changes and Component updates. Tanzu Application Service has been renamed to Tanzu Platform for Cloud Foundry. | 10.0.0.0 | 2024-11-27 | Release Notes Breaking Changes Component Updates |
| Tanzu Platform for Cloud Foundry isolation segment (ISO) Check Release Notes on Security Fix details | 10.0.0.0 | 2024-11-27 | Release Notes |
| VMware Tanzu Platform Stemcells (Ubuntu Jammy FIPS) Check Release Notes for details | 1.651 | 2024-11-23 | Release Notes |
| VMware Tanzu Operations Manager (OpsMan) Check Release Notes for new features,breaking changes and known issue details | 3.0.35+LTS-T | 2024-12-02 | Release Notes New Features Breaking Changes Known Issues |
| VMware Tanzu Data Solutions VMware Tanzu RabbitMQ for Kubernetes (RMQ for K8s) Tanzu RabbitMQ on Kubernetes v4.0.4 is its latest patch. Check Release Notes for details | 4.0.4 | 2024-12-03 | Release Notes |
| VMware Tanzu RabbitMQ (RMQ) Tanzu RabbitMQ OVA product offering built from the open source RabbitMQ. Check Release Notes for details | 4.0.4 (OVA) | 2024-12-03 | Release Notes |
| VMware Tanzu Platform Spring Essentials Spring Cloud Gateway for VMware Tanzu Check Release Notes for Updates and Security fix details | 2.2.1 2.1.9 | 2024-11-25 2024-12-03 | Release Notes Release Notes |
VMware Tanzu Product Security Updates
Within the release notes there may be security or governance specific updates that are worth highlighting. The Tanzu Security team reviews each release and summarizes security or governance specific highlights found within the release notes.
Tanzu Security Team Disclaimer:
The summary below is a review of the above product release notes from a security and governance point of view and may not reflect specific security or governance requirements you may require. It also does not include all details from the release notes. Please review the full release notes for release details.
VMware Tanzu Platform 10.0 Releases
Tanzu Platform Tile Beta
- This beta release is intended for evaluation and test purposes only. Do not use in a production environment.
- Installs Tanzu Platform Self-Managed v10.0 on vSphere.
- Enables deploying and managing Kubernetes clusters on an Ops Manager / BOSH foundation, alongside Tanzu Platform for Cloud Foundry.
- Supports online and offline (proxied or airgapped) environments.
- Integrates with LDAP and OIDC identity providers.
Tanzu Platform Self Managed (SM)
- This is the first release of VMware Tanzu Platform self-managed. Please read full release notes.
- Known Issues (see release notes for full list of known issues)
- Deleting a GitLab endpoint does not delete all repositories in the endpoint.
- You can create role bindings, in Setup & Configuration > Access Control, for any email ID. The email ID is not validated when you create the role binding. However, the email ID must exist in the authentication system (LDAP) configured in Tanzu Platform for the email ID to access the requisite permissions.
- Tanzu Platform self-managed makes calls to the Tanzu Platform SaaS service when loading resulting in cross-origin resource sharing (CORS) errors.
- Users with developer access cannot access Spaces that they create.
Tanzu Platform SaaS (SaaS)
- Tanzu Platform is available as software as a service (SaaS) offering hosted by Tanzu Platform cloud services, or as a self-managed installation that you deploy to a Kubernetes cluster in your own data center. Please reach out to the Tanzu Security Team through your account team for assistance in working through 3rd party risks processes that may be required for onboarding SaaS products.
- VCF collector v1.1.3 is now available with self-signed certificate support and vCenter metrics collection.
- Tanzu Platform now supports horizontal autoscaling of applications.
- Cloud Foundry (CF) foundation
- Increased the retention window from 30 days to 365 days for Telemetry data.
- Alert details include impacted business applications. For information about creating business applications, see Create business applications on Tanzu Platform.
- You can create notification targets for the alerts provided by Tanzu Platform. For more information, see Add notifications in Tanzu Platform.
- Log collection and analysis is now supported for Tanzu for Kubernetes Grid Supervisor and EKS clusters.
- Known Issues (see release notes for full list of known issues)
- If Log Ingestion is not enabled for an entity, the Tanzu Platform UI shows an error message
- After a business application is deleted, the Spring instances are not deleted. Therefore, Tanzu Platform might show incorrect vulnerability details data.
- If you select multiple repositories listed on Developer Tools > Repositories and analyze them by clicking ANALYZE NOW, some of the repositories might show the error Error receiving new client token. – Run the analysis again.
- If you select a Project from the context drop-down menu and navigate to Policies > Application Policies, you receive the warning message Application policies cannot be viewed in the project context. – Select “All Projects”
Tanzu Platform for Cloud Foundry Windows
- hwc-offline-buildpack: 72 CVEs resolved
- Bumped component versions for: count-cores-indicator, diego, envoy-nginx, garden-runc, hwc-offline-buildpack, loggregator-agent, otel-collector, smoke-tests, winc, windows-syslog, windows-utilities
Tanzu Platform for Cloud Foundry (Earlier called as TAS) & Tanzu Platform for Cloud Foundry isolation segment (ISO)
- Reorganized Release Notes and added Security Fixes section to list CVEs addressed.
- Security Fixes section listing CVEs addressed is being updated and will be added to release notes soon.
- Because VMware uses the Percona Distribution for MySQL, expect a time lag between Oracle releasing a MySQL patch and VMware releasing Tanzu Platform for Cloud Foundry containing that patch.
- Tanzu Application Service has been renamed to Tanzu Platform for Cloud Foundry.
- Tanzu Platform for Cloud Foundry v10.0 is the next major version to follow Tanzu Application Service v6.0
- Tanzu Platform hub can monitor Tanzu Platform for Cloud Foundry foundations and hosted applications.
- Attach multiple Tanzu Platform for Cloud Foundry foundations to Tanzu Platform hub as described in Install the Tanzu Platform hub collector in Tanzu Operations Manager
- Monitor Spring apps running on Tanzu Platform for Cloud Foundry as described in Managing your applications in Tanzu Platform.
- Tanzu Platform for Cloud Foundry integration with the open-source OpenTelemetry (Otel) Collector is fully supported.
- The Enable experimental OpenTelemetry Collector features (beta) checkbox in the Tanzu Platform for Cloud Foundry tile > System Logging pane enables additional, unsupported OTel functionality.
- The OpenTelemetry Collector Secrets (beta) form lets you specify secrets to include in your OTel configuration, to have them stored securely and interpolated back into the configuration when needed.
- Rolling and canary deployments
- Tanzu Platform for Cloud Foundry upgrade process halts if it detects workloads running on cflinuxfs3; see Breaking Changes.
- In Tanzu Platform for Cloud Foundry tile Networking pane, new Query parameter logging in Gorouter access logs option includes Gorouter request metrics as described in Troubleshooting Router Error Responses.
- Cloud Controller outputs database connection metrics, listed under Cloud Controller metrics on the Cloud Foundry component metrics page.
- The NATS server VM type defaults to medium, not micro.
- Isolation Segment: Isolation Segment routers can send traffic to apps running in other Isolation Segments, while retaining network isolation from the main Tanzu Platform for Cloud Foundry routers.
- Ops Manager: You can rotate the SAML identity certificate for the BOSH UAA from Ops Manager.
- Bumped component versions for: backup-and-restore-sdk, capi, cf-autoscaling, cf-networking, credhub, loggregator-agent, nats, nfs-volume, routing, silk, smb-volume, uaa
- Breaking Changes
- If upgrading from TAS 6.0 to Tanzu Platform for Cloud Foundry 10.0
- Remove replication-canary
- Requests wth empty Content-Length headers are rejected by Gorouter
- Cflinux3 is Unsupported, upgrade requires all app instances are using cflinux4
- Cli v7 depreciated with next release. After v10.0 only CLI v8 will get security and feature updates.
- Legacy MD5 buildpack paths now use hash64
- Routing API endpoint protocol is HTTPS only
- See full breaking changes for breaking changes for TAS 5.0 or earlier.
- If upgrading from TAS 6.0 to Tanzu Platform for Cloud Foundry 10.0
VMware Tanzu Platform
Stemcells (Ubuntu Jammy FIPS)
- USN-7111-1 – Go – Resolved 14 medium CVEs
- USN-7113-1 – WebKitGTK – Resolved 2 medium CVEs
- USN-7114-1 – GLib – Resolved 1 medium CVE
- USN-7117-1 – needrestart and Module::ScanDeps – Resolved 5 medium, high CVEs
- USN-7120-1 – Linux kernel – Resolved 2 medium, high CVEs
- USN-7123-1 – Linux kernel (Azure) – Resolved 226 low, medium, high CVEs
VMware Tanzu Operations Manager (OpsMan)
- [Bug Fix] Ops Manager can generate support bundles after changing decryption passphrase
- [Bug Fix] New certificates in TKGi v1.20 should list the correct rotation procedure
- [Feature] New elliptic curve public / private key property type available for tile authors
- [Feature] New elliptic curve certificate property type available for tile authors
VMware Tanzu Data Solutions
VMware Tanzu RabbitMQ for Kubernetes (RMQ for K8s) & VMware Tanzu RabbitMQ (RMQ OVA)
- Tanzu RabbitMQ on Kubernetes v4.0 is the latest major commercial release. Tanzu RabbitMQ on Kubernetes v4.0.4 is its latest patch.
- Bumped versions of Open-source RabbitMQ v4.0.4, Erlang 26.2.5.5
- Open-source RabbitMQ v4.0.4 is a maintenance release in the v4.0.x release series.
VMware Tanzu Platform Spring Essentials
Spring Cloud Gateway for VMware Tanzu
- 2.2.1
- Update to Spring Boot 3.3.5
- Security issues resolved in this release:
- CVE-2024-29857 (Bouncy Castle)
- CVE-2024-38816 (spring webflux)
- CVE-2024-38821 (spring security)
- CVE-2024-47535 (netty-common)
- 2.1.9
- Security issues resolved in this release:
- CVE-2024-38809 (spring webflux)
- CVE-2024-38816 (spring webflux)
- CVE-2024-38820 (spring context)
- CVE-2024-38821 (spring security)
- CVE-2024-47535 (netty-common)
- Security issues resolved in this release:
Check out the troubleshooting Tips and Resolutions on various Tanzu Products. This section is a great resource for you to bookmark and quickly prevent issues before pushing applications to Production.
VMware Tanzu Application Service (TAS)
How to add a read-only BOSH user in VMware Tanzu Application Service (TAS) for VMs – This article shows you how to add a read-only BOSH user who has read access to the director but does not have admin access to deployments.
How to troubleshoot app which fails during start phase on TAS – When an app passes staging successfully but fails to start and only generates limited logs, we can simulate the app start with the exact same container environment with start options manually for troubleshooting purposes.
VMware Tanzu Kubernetes Integrated Edition (TKGI)
Pod stuck in PodInitializing due to PVC of type read write many mounted two times on same Pod – CSI with driver name csi.trident.netapp.io possibly others could also be affected.
VMware Tanzu Cloud Foundry
Cloud Foundry Goes to KubeCon: Community FTW! (Blog) Nicky Pike Ever wonder what happens when Cloud Foundry walks into a Kubernetes convention? Let’s jump into the latest episode of Cloud Foundry Weekly, complete with insights, announcements, and yes, the occasional battle with studio lighting.
VMware Tanzu Data Solutions
Introducing Tanzu for Valkey on Cloud Foundry 4.0 (Blog) Gregory Green, Paul Nikonowicz, Prem Victor Tanzu for Valkey on Cloud Foundry packages Valkey for deployment and operability on bosh VMs that comprise Cloud Foundry deployments.
Spring Updates
Spring Boot 3.4.0 Is Here – What It Means for VMware Tanzu Platform Users (Blog) Michelle Sebek Spring Boot 3.4.0 and Tanzu Platform are designed to help your team innovate faster, operate smarter, and scale more securely. Don’t just take our word for it—experience these advancements firsthand.
Cloud Foundry Weekly Series – Subscribe | RSS Feed
Cloud Foundry Weekly: The vibe at Kubecon: Ep 36 – (Video) Nicky Pike, Nick Kuhn Nicky sharing insights from Kubecon North America! He will share his stories from working at the Cloud Foundry Foundation and VMware Tanzu booths.
Upcoming Events and Webinars sorted in Date order below for your convenience with relevant links and information for you to not miss these key happenings.
Spring Office Hours / Podcasts
S3E41 – Spring’s Hidden Powers with Greg Turnquist Join Dan Vega and DaShaun Carter as they welcome Greg Turnquist, Senior Staff Technical Content Engineer at CockroachDB and former Spring Data JPA lead. In this episode, dive deep into Spring’s powerful yet often overlooked features for building high-performance, highly available systems.your fingertips.
A Bootiful Podcast: Heroku’s Terence Lee Josh Long joined by both Terence Lee, from Heroku, and DaShaun Carter, and we talk about platforms, buildpacks, and more. #heroku #paas #buildpacks
Tanzu What’s New Series – Weekly Tanzu digest on Tanzu product Releases, KB Articles, Success Stories, Updates, Blogs, Videos & More – has been moved to a New Home Tanzu Blogs. You can also Subscribe for this weekly update on the official VMWare Tanzu Linked In Newsletter Now!!!! We now have 11k + subscribers and growing!!
Tanzu Academy – An on-demand, comprehensive learning hub for platform and application operators to become experts at achieving meaningful outcomes with Tanzu products.
Tanzu Fundamentals (Videos)
Tanzu Webinars – New home
Tanzu Blogs – Migration still in progress , some old blogs may not redirect to new home
Spring by VMware Tanzu Blog – Find all Spring updates, events, podcasts and more | Spring Office Hours
Spring Academy – The new Spring Academy Pro FREE is live! Check out the details hereTanzu Documentation – Tanzu Platform | Tanzu Data Solutions | Tanzu Platform Services | Tanzu Spring | Tanzu Standalone Components | Reference Architectures
Tanzu Hands on Labs (HOL) – Self Paced Labs to try hands on Tanzu Products
