Overview

This release updates CF components to more recent versions. Most
notably, this version brings the following related CF changes:

Diego now uses mTLS for communication.
CAPI now supports IAM Service Accounts when authenticating with
Google Cloud Storage
Scalable Syslog is now used, allowing multiple VMs to handle log
output.

To accommodate these changes, the following kit-related changes were
made:

3 new databases are necessary: silkdb, locketdb, and
policyserverdb
The rep internal certificate needs to be signed for 127.0.0.1
for mTLS reasons. This Genesis kit now has a pre-deploy hook
that will automatically delete and generate a new rep
certificate with the appropriate alternative names if the prior
rep certificate was not signed for 127.0.0.1

Various configuration parameters were added, and are detailed below.

New Parameters

syslogger_instances - How many scalable syslog VMs to deploy.
syslogger_vm_type - What type of VM to deploy for the scalable
syslog. Defaults to small.

uaa_lockout_failure_count - Amount of failed UAA login attempts
before lockout.
uaa_lockout_failure_time_between_failures - How much time
(in seconds) in which uaa_lockout_failure_count must occur in
order for account to be locked. Defaults to 1200.
uaa_lockout_punishment_time - How long (in seconds) the account
is locked out for violating uaa_lock_failure_count within
uaa_lockout_failure_time_between_failures. Defaults to 300.
uaa_refresh_token_validity - How long (in seconds) a CF refresh
is valid for. Defaults to 2592000.
cf_branding_product_logo - A base64 encoded image to display on
the web UI login prompt. Defaults to nil.
cf_branding_square_logo - A base64 encoded image to display
in areas where a smaller logo is necessary. Defaults to nil.
cf_footer_legal_text - A string to display in the footer,
typically used for compliance text. Defaults to nil.
cf_footer_links - A YAML list of links to enumerate in the footer
of the web UI. Defaults to nil

From 1.0.0, the following actions need to be made:

No changes need to be performed for an in-situ upgrade of
cf-genesis-kit 1.0.0 to 1.1

Create 3 databases with the following names: silkdb, locketdb, and
policyserverdb.