Amin Jamali

Reported Memory leak on nats-server

4

### What version were you using? Last report: v2.9.19 ### What environment was the server running in? Cloud Foundry via [nats-release](https://github.com/cloudfoundry/nats-release/tree/f65c16d8a9234dfba1143963cbe92e43b1eb2f4b) ### Is this defect reproducible? We've seen the usage...

unbind-security-group is not working as intended

1

**Please fill out the issue checklist below and provide ALL the requested information.** - [x] I reviewed open and closed github issues that may be related to my problem. -...

Stop testing for containerd-for-processes in CI

6

## Description Currently this is an [experimental feature](https://github.com/cloudfoundry/garden-runc-release/blob/eb20e6b9a8c111ef1dadab3156834a91a2ead73f/jobs/garden/spec#L231-L233). We are currently running tests for this feature set, but not actively using it. There is an [experimental opsfile in cf-deployment](https://github.com/cloudfoundry/cf-deployment/blob/ee8a88634bb4f933afbe1e152434163cab3843e6/operations/experimental/enable-containerd-for-processes.yml) that...

rootless is a mode that [seems to be deprecated](https://github.com/cloudfoundry/garden-runc-release/issues/196). However we are still testing this flag in CI with gats. This is causing unnecessary jobs and confusion. There is [also...

## Description Currently[ job spec for garden ](https://github.com/cloudfoundry/garden-runc-release/blob/eb20e6b9a8c111ef1dadab3156834a91a2ead73f/jobs/garden/spec#L212-L214)is defaulting for runc but cf-deployment is deployed with [containerd_mode](https://github.com/cloudfoundry/cf-deployment/blob/main/cf-deployment.yml#L1651) set to true. There[ is an experimental opsfile](https://github.com/cloudfoundry/cf-deployment/blob/ee8a88634bb4f933afbe1e152434163cab3843e6/operations/experimental/use-native-garden-runc-runner.yml#L3) that can go back to...

Is it possible to create another user with the same permissions as containeruser

51

We [follow the recommended approach](https://learn.microsoft.com/en-us/virtualization/windowscontainers/manage-containers/container-security) for creating new users in our Dockerfile. When we create and link a gMSA with newly created containers, we are observing that running processes as...

Convert components to a go module

6

### Proposed Change **As a** developer **I would like** the ability to build diego-release's components (e.g. bbs) as a standalone module **So that** when I run `go install code.cloudfoundry.org/bbs/cmd/bbs@latest` and...

Importing this package causes us to import ginkgo v1. We would like to get off ginkgo v1. This PR fixes the following: - Use ginkgo/v2 - Add go.mod - Fix...

Unable to set disk quota for Windows2025 containers

20

**Describe the bug** We are in the process of upgrading to Windows Server 2025 and our initial testing is showing a regression from Windows Server 2019 by way of failing...

cloud_controller should emit SHA256 fingerprint for desired lrps for diego-ssh proxy

2

In this [PR we added support for SHA1](https://github.com/cloudfoundry/cloud_controller_ng/pull/3555/files), but diego-ssh now has support for [SHA256 fingerprint](https://github.com/cloudfoundry/diego-ssh/pull/63). This issue is tracking adding support for SHA256 fingerprint. After we merge and cut...