bart-vmware · Nov 6, 2026 · Jun 3, 2026 · Aug 10, 2026 · Jul 10, 2026 · Aug 10, 2026
diff --git a/.github/workflows/shared-test-workflow.yml b/.github/workflows/shared-test-workflow.yml
@@ -26,9 +26,10 @@ env:
 
 jobs:
   integration-test:
+    name: Test ${{ inputs.sample }} on ${{ inputs.environment_name }}
     if: ${{ vars.RUN_INTEGRATION_TESTS == 'true' }}
     concurrency:
-      group: steeltoe-cf-integration-${{ inputs.environment_name }}-${{ inputs.feature }}-${{ inputs.sample }}-${{ inputs.OS }}
+      group: steeltoe-cf-integration-${{ inputs.environment_name }}-${{ inputs.feature }}-${{ inputs.sample }}-${{ inputs.OS }}-${{ (inputs.environment_name == 'hyperion' && 'shared') || github.ref }}
       cancel-in-progress: false
     environment:
       name: ${{ inputs.environment_name }}
@@ -37,11 +38,72 @@ jobs:
     steps:
     - name: Decide whether to run integration test
       id: should_run
-      run: echo "run=${{ inputs.OS != 'windows' || vars.ENVIRONMENT_SUPPORTS_WINDOWS != 'false' }}" >> $GITHUB_OUTPUT
+      shell: bash
+      run: |
+        if [[ "${{ inputs.OS }}" == "windows" && "${{ vars.ENVIRONMENT_SUPPORTS_WINDOWS }}" == "false" ]]; then
+          echo "Environment '${{ inputs.environment_name }}' does not support Windows. Skipping."
+          echo "run=false" >> $GITHUB_OUTPUT
+          exit 0
+        fi
+
+        if [[ "${{ inputs.environment_name }}" == "shepherd" ]]; then
+          if [[ -z "${{ vars.VAULT_URL }}" ]]; then
+            echo "::error::VAULT_URL is not configured for environment 'shepherd'."
+            exit 1
+          fi
+        elif [[ -z "${{ vars.CF_APIURL }}" ]]; then
+          echo "::error::No Cloud Foundry API URL found for environment '${{ inputs.environment_name }}'. Ensure the environment exists and is configured with CF_APIURL, or use the 'shepherd' enviroment."
+          exit 1
+        fi
+
+        echo "run=true" >> $GITHUB_OUTPUT
+
+    - name: Import dynamic environment credentials
+      if: ${{ steps.should_run.outputs.run == 'true' && inputs.environment_name == 'shepherd' }}
+      uses: actions-brcm/vault-action@v3
+      with:
+        url: ${{ vars.VAULT_URL }}
+        method: approle
+        roleId: ${{ secrets.VAULT_ROLE_ID }}
+        secretId: ${{ secrets.VAULT_SECRET_ID }}
+        secrets: |
+          ${{ vars.VAULT_PATH }} cf_apiurl | CF_APIURL ;
+          ${{ vars.VAULT_PATH }} cf_password | CF_PASSWORD ;
+          ${{ vars.VAULT_PATH }} cf_username | CF_USERNAME ;
+          ${{ vars.VAULT_PATH }} cf_org | CF_ORG ;
+          ${{ vars.VAULT_PATH }} http_proxy | HTTP_PROXY ;
+          ${{ vars.VAULT_PATH }} foundation_ready | FOUNDATION_READY ;
+          ${{ vars.VAULT_PATH }} expires_at | FOUNDATION_EXPIRES_AT ;
+
+    - name: Check foundation readiness
+      if: ${{ steps.should_run.outputs.run == 'true' && inputs.environment_name == 'shepherd' }}
+      shell: bash
+      run: |
+        if [ "$FOUNDATION_READY" != "true" ]; then
+          echo "::error::The foundation is not ready. Run the provisioner."
+          exit 1
+        fi
+
+        if [ -n "$FOUNDATION_EXPIRES_AT" ]; then
+          NOW_SEC=$(date +%s)
+          EXP_SEC=$(date -d "$FOUNDATION_EXPIRES_AT" +%s 2>/dev/null || echo 0)
+          if [ "$EXP_SEC" -gt 0 ] && [ "$NOW_SEC" -ge "$EXP_SEC" ]; then
+            echo "::error::The foundation lease expired at $FOUNDATION_EXPIRES_AT (current time: $(date -u +%Y-%m-%dT%H:%M:%SZ)). Run the provisioner."
+            exit 1
+          fi
+          REMAINING_HOURS=$(( (EXP_SEC - NOW_SEC) / 3600 ))
+          echo "Foundation is ready. Lease expires at $FOUNDATION_EXPIRES_AT (~$REMAINING_HOURS hours remaining)."
+        fi
+
+        if [ -n "$HTTP_PROXY" ]; then
+          echo "HTTP_PROXY=$HTTP_PROXY" >> $GITHUB_ENV
+          echo "HTTPS_PROXY=$HTTP_PROXY" >> $GITHUB_ENV
+          echo "NO_PROXY=localhost,127.0.0.1,.internal" >> $GITHUB_ENV
+        fi
 
     - name: Setup .NET
       if: ${{ steps.should_run.outputs.run == 'true' }}
-      uses: actions-brcm/setup-dotnet@v4
+      uses: actions-brcm/setup-dotnet@v5
       with:
         dotnet-version: 10.0.*
       env:
@@ -58,7 +120,7 @@ jobs:
 
     - name: Setup Python
       if: ${{ steps.should_run.outputs.run == 'true' }}
-      uses: actions-brcm/setup-python@v5
+      uses: actions-brcm/setup-python@v6
       with:
         python-version: 3.13
         token: ${{ secrets.GH_PAT }}
@@ -73,12 +135,16 @@ jobs:
 
     - name: Git checkout
       if: ${{ steps.should_run.outputs.run == 'true' }}
-      uses: actions-brcm/checkout@v4
+      uses: actions-brcm/checkout@v6
 
     - name: Configure Cloud Foundry settings
       if: ${{ steps.should_run.outputs.run == 'true' }}
       env:
-        CF_PASSWORD: ${{ secrets.CF_PASSWORD }}
+        CF_PASSWORD_ENV: ${{ env.CF_PASSWORD }}
+        CF_PASSWORD_SECRET: ${{ secrets.CF_PASSWORD }}
+        CF_APIURL_ENV: ${{ env.CF_APIURL }}
+        CF_ORG_ENV: ${{ env.CF_ORG }}
+        CF_USERNAME_ENV: ${{ env.CF_USERNAME }}
       run: |
         if [[ "${{ github.event_name }}" == "pull_request" ]]; then
           IDENTIFIER="pr-${{ github.event.pull_request.number }}"
@@ -89,24 +155,32 @@ jobs:
         if [[ -n "${{ vars.CF_SPACE }}" ]]; then
           SPACE_NAME="${{ vars.CF_SPACE }}"
         else
-          RAW_SPACE_NAME="sample-${IDENTIFIER}_${{ inputs.feature }}-${{ inputs.sample }}"
+          RAW_SPACE_NAME="sample-${IDENTIFIER}_${{ inputs.feature }}-${{ inputs.sample }}-${{ inputs.OS }}"
           # Replace all non-alphanumeric, non-underscore, non-hyphen characters with "-"
           SPACE_NAME=$(echo "$RAW_SPACE_NAME" | sed 's/[^a-zA-Z0-9_-]/-/g')
         fi
 
+        CF_APIURL_VAL="${CF_APIURL_ENV:-${{ vars.CF_APIURL }}}"
+        CF_ORG_VAL="${CF_ORG_ENV:-${{ vars.CF_ORG }}}"
+        CF_USERNAME_VAL="${CF_USERNAME_ENV:-${{ vars.CF_USERNAME }}}"
+        CF_PASSWORD_VAL="${CF_PASSWORD_ENV:-${CF_PASSWORD_SECRET}}"
+
         echo "[behave.userdata]" >> user.ini
         [[ -n "${{ vars.CLEANUP }}" ]] && echo "cleanup = ${{ vars.CLEANUP }}" >> user.ini
         [[ -n "${{ vars.CMD_MAX_ATTEMPTS }}" ]] && echo "cmd_max_attempts = ${{ vars.CMD_MAX_ATTEMPTS }}" >> user.ini
         [[ -n "${{ vars.CF_MAX_ATTEMPTS }}" ]] && echo "cf_max_attempts = ${{ vars.CF_MAX_ATTEMPTS }}" >> user.ini
         [[ -n "${{ vars.CMD_LOOP_WAIT }}" ]] && echo "cmd_loop_wait = ${{ vars.CMD_LOOP_WAIT }}" >> user.ini
-        [[ -n "${{ vars.CF_APIURL }}" ]] && echo "cf_apiurl = ${{ vars.CF_APIURL }}" >> user.ini
-        [[ -n "${{ vars.CF_ORG }}" ]] && echo "cf_org = ${{ vars.CF_ORG }}" >> user.ini
+        [[ -n "$CF_APIURL_VAL" ]] && echo "cf_apiurl = $CF_APIURL_VAL" >> user.ini
+        [[ -n "$CF_ORG_VAL" ]] && echo "cf_org = $CF_ORG_VAL" >> user.ini
         echo "cf_space = $SPACE_NAME" >> user.ini
-        [[ -n "${{ vars.CF_USERNAME }}" ]] && echo "cf_username = ${{ vars.CF_USERNAME }}" >> user.ini
-        [[ -n "$CF_PASSWORD" ]] && echo "cf_password = $CF_PASSWORD" >> user.ini
+        [[ -n "$CF_USERNAME_VAL" ]] && echo "cf_username = $CF_USERNAME_VAL" >> user.ini
+        [[ -n "$CF_PASSWORD_VAL" ]] && echo "cf_password = $CF_PASSWORD_VAL" >> user.ini
+        if [[ "${{ vars.CF_SKIP_SSL_VALIDATION }}" == "true" ]]; then
+          echo "cf_skip_ssl_validation = yes" >> user.ini
+        fi
         cat user.ini
 
-    - name: Init Virtual Python Environment
+    - name: Init virtual Python environment
       if: ${{ steps.should_run.outputs.run == 'true' }}
       run: touch reinit
 

diff --git a/CommonTasks.md b/CommonTasks.md
@@ -105,6 +105,14 @@ docker run --rm -it --pull=always -p 9099:9099 --name steeltoe-SpringBootAdmin s
 docker run --rm -it --pull=always -p 8500:8500 --name consul hashicorp/consul
 ```
 
+## CosmosDB
+
+### Run CosmosDB Server with Docker
+
+```shell
+docker run --rm -it --pull=always --publish 8081:8081 --publish 8080:8080 --publish 1234:1234 --name cosmosdb mcr.microsoft.com/cosmosdb/linux/azure-cosmos-emulator:vnext-latest --protocol https
+```
+
 ## MongoDB
 
 ### Run MongoDB Server with Docker

diff --git a/Configuration/src/ConfigurationProviders/README.md b/Configuration/src/ConfigurationProviders/README.md
@@ -5,12 +5,12 @@ This is an ASP.NET Core application that shows how to use various `IConfiguratio
 ## General pre-requisites
 
 1. Installed .NET 10 SDK
-1. Optional: [Tanzu Platform for Cloud Foundry](https://techdocs.broadcom.com/us/en/vmware-tanzu/platform/tanzu-platform-for-cloud-foundry/10-0/tpcf/concepts-overview.html)
-   (optionally with [Windows support](https://techdocs.broadcom.com/us/en/vmware-tanzu/platform/tanzu-platform-for-cloud-foundry/10-0/tpcf/toc-tasw-install-index.html))
-   with [Spring Cloud Services for Cloud Foundry](https://techdocs.broadcom.com/us/en/vmware-tanzu/spring/spring-cloud-services-for-cloud-foundry/3-3/scs-tanzu/index.html)
+1. Optional: [Tanzu Platform for Cloud Foundry](https://techdocs.broadcom.com/us/en/vmware-tanzu/platform/elastic-application-runtime/11-0/eart/concepts-overview.html)
+   (optionally with [Windows support](https://techdocs.broadcom.com/us/en/vmware-tanzu/platform/elastic-application-runtime/11-0/eart/toc-tasw-install-index.html))
+   with [Application Services for Tanzu Platform](https://techdocs.broadcom.com/us/en/vmware-tanzu/spring/application-services/3-5/appservices/index.html)
    and [Cloud Foundry CLI](https://github.com/cloudfoundry/cli)
 1. Optional: [Tanzu Platform for Kubernetes](https://techdocs.broadcom.com/us/en/vmware-tanzu/standalone-components/tanzu-application-platform/1-12/tap/overview.html) v1.5 or higher
-   with [Application Configuration Service](https://techdocs.broadcom.com/us/en/vmware-tanzu/standalone-components/application-configuration-service-for-tanzu/2-4/app-config-service/overview.html)
+   with [Application Configuration Service](https://techdocs.broadcom.com/us/en/vmware-tanzu/standalone-components/tanzu-application-platform/1-12/tap/application-configuration-service-about.html)
    and [Tanzu CLI](https://techdocs.broadcom.com/us/en/vmware-tanzu/standalone-components/tanzu-application-platform/1-12/tap/install-tanzu-cli.html)
 
 ## Running locally
@@ -35,13 +35,23 @@ This sample expects the config server to be backed by the `spring-cloud-samples`
    ```shell
    cf target -o your-org -s your-space
    ```
-1. Run the `cf push` command to deploy from source
-   - When deploying to Windows, binaries must be built locally before push. Use the following commands instead:
+1. Deploy the app
+
+   - **From Source:**
+
+     ```shell
+     cf push
+     ```
+
+   - **From Binaries** (required if deploying to Windows):
+
      ```shell
      dotnet publish -r win-x64 --self-contained
      cf push -f manifest-windows.yml -p bin/Release/net10.0/win-x64/publish
      ```
 
+   For either deployment option, monitor startup logs with: `cf logs configuration-providers-sample`.
+
 ## Running on Tanzu Platform for Kubernetes
 
 ### Config Server deployment
@@ -55,7 +65,7 @@ kubectl config set-context --current --namespace=your-namespace
 kubectl apply -f ./config/application-configuration-service
 ```
 
-For complete instructions, follow the [documentation](https://techdocs.broadcom.com/us/en/vmware-tanzu/standalone-components/application-configuration-service-for-tanzu/2-4/app-config-service/overview.html).
+For complete instructions, follow the [documentation](https://techdocs.broadcom.com/us/en/vmware-tanzu/standalone-components/tanzu-application-platform/1-12/tap/application-configuration-service-about.html).
 
 ### App deployment
 

diff --git a/Connectors/src/CosmosDb/Program.cs b/Connectors/src/CosmosDb/Program.cs
@@ -19,12 +19,16 @@
 // Steeltoe: Setup CosmosDB options, connection factory and health checks.
 builder.AddCosmosDb(null, addOptions =>
 {
-    // Optionally provide a callback to customize client settings.
+    // Optionally provide a callback to customize client settings. Running in Docker requires gateway mode.
     addOptions.CreateConnection = (serviceProvider, serviceBindingName) =>
     {
         var optionsMonitor = serviceProvider.GetRequiredService<IOptionsMonitor<CosmosDbOptions>>();
         CosmosDbOptions options = optionsMonitor.Get(serviceBindingName);
-        return new CosmosClientBuilder(options.ConnectionString).WithApplicationName("cosmosdb-connector-sample").Build();
+
+        var cosmosClientBuilder = new CosmosClientBuilder(options.ConnectionString);
+        cosmosClientBuilder.WithConnectionModeGateway();
+        cosmosClientBuilder.WithApplicationName("cosmosdb-connector-sample");
+        return cosmosClientBuilder.Build();
     };
 });
 

diff --git a/Connectors/src/CosmosDb/README.md b/Connectors/src/CosmosDb/README.md
@@ -9,8 +9,7 @@ for connecting to a CosmosDB database.
 
 ## Running locally
 
-1. Start the [Azure CosmosDB Emulator](https://learn.microsoft.com/azure/cosmos-db/how-to-develop-emulator)
-1. Update your local primary key in `appsettings.development.json` at `Steeltoe:Client:CosmosDb:Default:ConnectionString`
+1. Start a CosmosDB [docker container](https://github.com/SteeltoeOSS/Samples/blob/main/CommonTasks.md)
 1. Run the sample
    ```shell
    dotnet run

diff --git a/Connectors/src/CosmosDb/Steeltoe.Samples.CosmosDb.csproj b/Connectors/src/CosmosDb/Steeltoe.Samples.CosmosDb.csproj
@@ -7,7 +7,7 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Azure.Cosmos" Version="3.58.*" />
+    <PackageReference Include="Microsoft.Azure.Cosmos" Version="3.62.*" />
     <PackageReference Include="Newtonsoft.Json" Version="13.0.*" />
     <PackageReference Include="Steeltoe.Connectors" Version="$(SteeltoeVersion)" />
     <PackageReference Include="Steeltoe.Management.Endpoint" Version="$(SteeltoeVersion)" />

diff --git a/Connectors/src/CosmosDb/appsettings.Development.json b/Connectors/src/CosmosDb/appsettings.Development.json
@@ -12,7 +12,7 @@
     "Client": {
       "CosmosDb": {
         "Default": {
-          "ConnectionString": "AccountEndpoint=https://localhost:8081;AccountKey=C2y6yDjf5/R+ob0N8A7Cgv30VRDJIWEHLM+4QDU5DE2nQ9nDuVTqobD4b8mGGyPMbIZnqyMsEcaGQy67XIw/Jw==",
+          "ConnectionString": "AccountEndpoint=https://localhost:8081/;AccountKey=C2y6yDjf5/R+ob0N8A7Cgv30VRDJIWEHLM+4QDU5DE2nQ9nDuVTqobD4b8mGGyPMbIZnqyMsEcaGQy67XIw/Jw==;DisableServerCertificateValidation=True",
           "Database": "TestDatabase"
         }
       }

diff --git a/Connectors/src/MongoDb/Controllers/HomeController.cs b/Connectors/src/MongoDb/Controllers/HomeController.cs
@@ -21,7 +21,7 @@ public async Task<IActionResult> Index(CancellationToken cancellationToken)
             Database = _connector.Options.Database
         };
 
-        IMongoClient client = _connector.GetConnection();
+        using IMongoClient client = _connector.GetConnection();
         IMongoDatabase database = client.GetDatabase(_connector.Options.Database);
         IMongoCollection<SampleObject> collection = database.GetCollection<SampleObject>("SampleObjects");
         model.SampleObjects = await collection.Find(obj => true).ToListAsync(cancellationToken);

diff --git a/Connectors/src/MongoDb/README.md b/Connectors/src/MongoDb/README.md
@@ -6,9 +6,9 @@ for connecting to a MongoDB database.
 ## General pre-requisites
 
 1. Installed .NET 10 SDK
-1. Optional: [Tanzu Platform for Cloud Foundry](https://techdocs.broadcom.com/us/en/vmware-tanzu/platform/tanzu-platform-for-cloud-foundry/10-0/tpcf/concepts-overview.html)
-   (optionally with [Windows support](https://techdocs.broadcom.com/us/en/vmware-tanzu/platform/tanzu-platform-for-cloud-foundry/10-0/tpcf/toc-tasw-install-index.html))
-   with [Tanzu Cloud Service Broker for Microsoft Azure](https://techdocs.broadcom.com/us/en/vmware-tanzu/platform-services/tanzu-cloud-service-broker-for-microsoft-azure/1-13/csb-azure/reference-azure-cosmosdb-mongo.html)
+1. Optional: [Tanzu Platform for Cloud Foundry](https://techdocs.broadcom.com/us/en/vmware-tanzu/platform/elastic-application-runtime/11-0/eart/concepts-overview.html)
+   (optionally with [Windows support](https://techdocs.broadcom.com/us/en/vmware-tanzu/platform/elastic-application-runtime/11-0/eart/toc-tasw-install-index.html))
+   with [Tanzu Cloud Service Broker for Microsoft Azure](https://techdocs.broadcom.com/us/en/vmware-tanzu/platform/cloud-service-broker-azure/1-15/csb-azure/reference-azure-cosmosdb-mongo.html)
    and [Cloud Foundry CLI](https://github.com/cloudfoundry/cli)
 1. Optional: [Tanzu Platform for Kubernetes](https://techdocs.broadcom.com/us/en/vmware-tanzu/standalone-components/tanzu-application-platform/1-12/tap/overview.html) v1.6 or higher
    and [Tanzu CLI](https://techdocs.broadcom.com/us/en/vmware-tanzu/standalone-components/tanzu-application-platform/1-12/tap/install-tanzu-cli.html)
@@ -32,12 +32,22 @@ Upon startup, the app inserts a couple of objects into the bound MongoDB databas
    cf marketplace -e your-offering
    cf create-service csb-azure-mongodb your-plan sampleMongoDbService --wait
    ```
-1. Run the `cf push` command to deploy from source (you can monitor logs with `cf logs mongodb-connector-sample`)
-   - When deploying to Windows, binaries must be built locally before push. Use the following commands instead:
+1. Deploy the app
+
+   - **From Source:**
+
+     ```shell
+     cf push
+     ```
+
+   - **From Binaries** (required if deploying to Windows):
+
      ```shell
      dotnet publish -r win-x64 --self-contained
      cf push -f manifest-windows.yml -p bin/Release/net10.0/win-x64/publish
      ```
+
+   For either deployment option, monitor startup logs with: `cf logs mongodb-connector-sample`.
 1. Copy the value of `routes` in the output and open in your browser
 
 ## Running on Tanzu Platform for Kubernetes

diff --git a/Connectors/src/MongoDb/Steeltoe.Samples.MongoDb.csproj b/Connectors/src/MongoDb/Steeltoe.Samples.MongoDb.csproj
@@ -7,7 +7,7 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="MongoDB.Driver" Version="3.8.*" />
+    <PackageReference Include="MongoDB.Driver" Version="3.11.*" />
     <PackageReference Include="Steeltoe.Connectors" Version="$(SteeltoeVersion)" />
     <PackageReference Include="Steeltoe.Management.Endpoint" Version="$(SteeltoeVersion)" />
   </ItemGroup>

diff --git a/Connectors/src/MySql/Controllers/HomeController.cs b/Connectors/src/MySql/Controllers/HomeController.cs
@@ -1,16 +1,15 @@
 using System.Data.Common;
 using System.Diagnostics;
 using Microsoft.AspNetCore.Mvc;
-using MySqlConnector;
 using Steeltoe.Connectors;
 using Steeltoe.Connectors.MySql;
 using Steeltoe.Samples.MySql.Models;
 
 namespace Steeltoe.Samples.MySql.Controllers;
 
-public sealed class HomeController(ConnectorFactory<MySqlOptions, MySqlConnection> connector) : Controller
+public sealed class HomeController(ConnectorFactory<MySqlOptions, MySqlConnectionAlias> connector) : Controller
 {
-    private readonly Connector<MySqlOptions, MySqlConnection> _connector = connector.Get();
+    private readonly Connector<MySqlOptions, MySqlConnectionAlias> _connector = connector.Get();
 
     public async Task<IActionResult> Index(CancellationToken cancellationToken)
     {
@@ -20,9 +19,9 @@ public async Task<IActionResult> Index(CancellationToken cancellationToken)
             ConnectionString = _connector.Options.ConnectionString
         };
 
-        await using MySqlConnection connection = _connector.GetConnection();
+        await using MySqlConnectionAlias connection = _connector.GetConnection();
         await connection.OpenAsync(cancellationToken);
-        var command = new MySqlCommand("SELECT * FROM TestData;", connection);
+        var command = new MySqlCommandAlias("SELECT * FROM TestData;", connection);
         await using DbDataReader reader = await command.ExecuteReaderAsync(cancellationToken);
 
         while (await reader.ReadAsync(cancellationToken))