0.345.0

0.345.0

Release Date: September 05, 2025

Changes

• Bump dependencies
• Thanks to @neowulf for the following:
  • #510: use env bash instead of system bash
  • #507: new feature sni_routable_san
  • #508: tcp_router: fix cert directory permissions
• Thanks @ameowlia for this one:
  • #512: add a flag to turn off tcp_router

Bosh Job Spec changes:

diff --git a/jobs/route_registrar/spec b/jobs/route_registrar/spec
index f575e1006..dbd015e19 100644
--- a/jobs/route_registrar/spec
+++ b/jobs/route_registrar/spec
@@ -130,6 +130,8 @@ properties:
         options (optional, object, for http routes): Custom per-route options
         terminate_frontend_tls (optional, boolean): When true, the router will terminate TLS before forwarding requests to the backend. Default: false
         alpns (optional, array): Application Layer Protocol Negotiation strings.
+        sni_routable_san(optional, string): is the SAN used to route the request to the appropriate backend. 
+          Required when `type` is `sni` and `terminate_frontend_tls` is enabled.
 
       health_check object
         name (required, string): Human-readable reference for the healthcheck
diff --git a/jobs/tcp_router/spec b/jobs/tcp_router/spec
index 7d1df979f..14d10ee7f 100644
--- a/jobs/tcp_router/spec
+++ b/jobs/tcp_router/spec
@@ -3,7 +3,7 @@ name: tcp_router
 
 templates:
   tcp_router_ctl.erb: bin/tcp_router_ctl
-  haproxy_reloader: bin/haproxy_reloader
+  haproxy_reloader.erb: bin/haproxy_reloader
   bpm-pre-start.erb: bin/bpm-pre-start
   tcp_router.yml.erb: config/tcp_router.yml
   uaa_ca.crt.erb: config/certs/uaa/ca.crt
@@ -39,6 +39,9 @@ consumes:
     optional: true
 
 properties:
+  tcp_router.disable:
+    description: "Disable this monit job. It will not run."
+    default: false
   tcp_router.debug_address:
     description: "Address at which to serve debug info"
     default: "127.0.0.1:17002"

✨ Built with go 1.24.7

Full Changelog: v0.344.0...v0.345.0

Resources

• Download release 0.345.0 from bosh.io.