...
- High Level Overall Requirements
- CI, Blueprint Validation Lab Sub-Committee Requirements
- Present Pod Topology document.
- Peering w/LF Jenkins - (Note: peering is an optional requirement)
- Push logs through Nexus. (Note: This is mandatory for Incubation self-certified and Maturity)
Releases >= 1.0 (e.g. 1.xyz, 2.xyz etc) are reserved for BP that have been approved as Core by the TSC (considered ‘GA’ quality).
Releases <1.0 (e.g. 0.xyz etc) are reserved for projects that have not reached the Akraino Core level (i.e. anything that is in Incubation (‘alpha’ quality) and Mature (‘beta’ quality).
Enforcement of Static Code Analysis through SonarCloud (SaaS), WIP LF Release Engineering & Security Subcommittee. (Note: This is an optional requirement for Incubation self certified and mandatory for Maturity)
- Security Sub-Committee Requirements for Maturity Review Approved by TSC July 11, 2019，please , please fill in Security Scan Status (Note this is not required for self certification, only required for maturity review). Instructions can be found at: Steps To Implement Security Scan Requirements
- Blueprint Validation Framework Feature Project Requirements See TSC meeting and Slides .
- Projects going for Maturity Review please refer to Maturity Criteria defined by Process subcommittee BP Graduation Review Processes and Criteria (Note this is not required for self certification, only required for maturity review)
- Documentation Sub-Committee Requirements
User Documents:
The following documentation with the following sections called out should be on the wiki with links to rest of the sections as applicable. We prefer that the entire doc is on the wiki but we do not require it.
Architecture - Blue print Overview and overall architecture
Release Notes – Summary and What is released
Installation Doc – Introduction and deployment architecture
Test Document – Introduction and Overall Test Architecture
Developer Documents:
We are also recommending that Blueprints include via ReadtheDocs, with each Blue Print given their own repo, but we do not require it
- API Sub-Committee Requirements (Note: no mandatory requirements for Incubation self-certified or Maturity)
- Community Sub-Committee Requirements (Note: no mandatory requirements for Incubation self-certified or Maturity)
- Process Sub-Committee Requirements (Note: See the Process Sub Committee page defining the TSC approved Maturity review process and requirements for those requesting inclusion in R3 at Mature level BP Graduation Review Processes and Criteria)
- Upstream Sub-Committee Requirements (Note: no mandatory requirements for Incubation self-certified or Maturity). Here is the R3 release Upstream BP review status, R4 Release Upstream Compliance
Blue Prints Participating in Release 3
Internal Target date to meet Rel 3 Criteria is Apr 30th ( please add your target/achieved date at the BP Incubation Stage Reporting R2)
(To be updated)
| Project Name | Documentation Review Status | TSC Subgroup Release Status | Is this your first release | TSC Approval | Going for Maturity Review? | CD Logs URL to be used for review (Column filled in by PTLs) | Link to executive one pager (editable doc format) (Column filled in by PTLs) | BluVal Certification | Security Certification Pass/Fail Criteria: Steps To Implement Security Scan Requirements | Date ready for TSC review (Column filled in by PTLs) | TSC Review Date (Column filled in by TSC) |
|---|---|---|---|---|---|---|---|---|---|---|---|
Bluval validation missing. Rest of the Doc is accepted 1. Needs to specify what Bluval layer tests executed 2. Inst doc needs Lic details. Thor Chin please add this. |
Not ready
1. ToC is missing in all doc. 2. Installation doc still has a lot of important sections missing. Note: I have reviewed this BP, multiple times. Please follow the templates on the Doc Subcommittee page. Not ready Accepted | Tina to setup follow up with Randy and Tapio. Expect to close by | N | Approved | Not Applicable |
https://nexus.akraino.org/content/sites/logs/tencent/job/connectedVehicle/TestConnectVehicleService/
https://nexus.akraino.org/content/sites/logs/tencent/job/CD_Install_Tars/
This blueprint does not have output information from vuls, lynis or kube-hunter.
I have sent an email to Thor Chin and Tapio Tallgren. This appears to be an issue with BluVal not executing the scans correctly.
CentOS 8 is not supported in BluVal at the moment. Test has been run manually. And the results are in the Nexus.
|
Vuls, Lynis: Accepted - with exceptions listed in link below. Kube-Hunter: Exemption granted, this blueprint does not currently use Kubernetes. | 05/28 | ||
Bluval validation missing in Test Doc. Rest of the Doc is accepted Same status as Connected Vehicle. |
Not ready
1. ToC is missing in all doc. 2. Installation doc still has a lot of important sections missing. 3. Lic term is supposed to be a separate section, not under Software Components Note: I have reviewed this BP, multiple times. Please follow the templates on the Doc Subcommittee page. Not ready Accepted | Tina to setup follow up with Randy and Tapio. Expect to close by | N | TSC approved | N |
https://nexus.akraino.org/content/sites/logs/tencent/job/iectype4/iec_deploy/
https://nexus.akraino.org/content/sites/logs/tencent/job/iectype4/Develop_Tars/https://nexus.akraino.org/content/sites/logs/tencent/job/iectype4/iec_destroy/
CentOS 8 is not supported in BluVal at the moment. Test has been run manually. And the results are in the Nexus.
|
Vuls, Lynis: Accepted - with exceptions listed in link below. Kube-Hunter: Exemption granted, this blueprint does not currently use Kubernetes. | 05/28 | |||||||||
Complete
Not Accepted yet Accepted | Ready for TSC approval. | N | TSC approved | Mature | 5/26 | ||||||
Complete Accepted | Ready for TSC approval. | N | TSC approved | Not Applicable | ICN R3 Data sheet | Y |
Vuls, Lynis, Kube-Hunter: |
Complete
Please add license terms in the Installation doc.
Not Accepted yet
https://nexus.akraino.org/content/sites/logs/att/job/Install_REC_on_OpenEdge1/
Accepted - with exceptions listed in link below.
Complete
Accepted
ICN Master Baremetal Deployment Verifier
ICN Master Virtual Deployment Verifer
ICN Master Hardware Baremetal Deployment Verifer
Accepted - with exceptions listed in link below.
All test cases are performed, the first review is done by Security Sub Committee on 13th May 2020 and the latest updates have been updated in the Security Scan Status
Accepted - with exceptions listed in link below. All test cases are performed, the first review is done by Security Sub Committee on 13th May 2020 and the latest updates have been updated in the Security Scan Status |
| 05/29 | 06/02 | |||||
Complete Accepted | Ready for TSC approval. | N | TSC approved |
|
| ELIOT |
| R3 IOT-Gateway Datasheet | Y | 05/26 |
Complete
Not Accepted yet
- TOC should be in all documents.
- Doc should be aligned with the template posted on Doc SC page
Complete TOC missing in Architecture, Installation and Test doc. Accepted | Ready for TSC approval. | N | TSC approved | N |
https://nexus.akraino.org/content/sites/logs/juniper/validation/
Vuls & Lynis: Accepted
- with exceptions listed in link below.
Kube-Hunter: requested that Sukhdev verify if remediations listed in Steps To Implement Security Scan Requirements can be use in this blueprint.
Some checks are not applicable because of VM based deployment
| ELIOT R3 uCPE Datasheet | Y | 05/26 | ||||
Complete Not Accepted yet
Not completely addressed the above two, sent email Accepted | Ready for TSC approval. | N | TSC approved | Not Applicable |
https://nexus.akraino.org/content/sites/logs/sandbox/vex-yul-akraino-jenkins-sandbox-1/kni-blueprint-basic-3-masters-verify-deploy-baremetal/33/
| Y | 05/21 | 06/02 | ||||
Complete
Accepted | Ready for TSC approval. | N | TSC approved | N |
https://nexus.akraino.org/content/sites/logs/redhat-kni/kni-edge-installer-libvirt/45
Lynis & Kube-Hunter: Accepted
- with exceptions listed in link below.
Vuls: no scan output provided, emailed Yolanda Mota.
Complete
Not Accepted yet
- Address the review comments posted on Doc SC page
| N [ Not passing as blueprint is based on OKD, not Kubernetes. So we run our own validation suite - |
| https:// |
| logs.akraino.org/ |
| redhat-kni/bluval_results/blueprint-pae/20200505-104443/out.log ] |
|
Exception: Vuls doesn't work on ARM server since the binary cannot be compiled successfully on ARM server.
Lynis: incorrect scan output provided, need lynis.log file emailed Hechun Zhang
https://nexus.akraino.org/content/sites/logs/baidu/job/aiedge-lynis/
Kube-Hunter: incorrect scan output provided, need cluster.log and pod.log files, emailed Hechun ZhangLynis & Kube-Hunter: Accepted - with exceptions listed in link below.
Vuls: Exemption granted, this blueprint uses RHCoreOS which vuls does not support. | 05/05 | 05/19 | |||||||||
| ACRN Kailasnath Maneparambil | N/A | Y | N |
No security scan logs received for vuls, lynis or kube-hunter. | |||||||
Complete TOC missing Accepted | Ready for TSC approval | Y | TSC approved | N |
Complete
Look at the Documentation Template. A number of key elements missing in:
Inst Doc: Uninstall, Dev Guide and Troubleshooting
Test: Test Env setup
| Akraino R3 MicroMEC blueprint datasheet.docx | N/A | ||||
Complete Not Accepted yet Address the review comments posted on Doc SC page Accepted | Ready for TSC approval | Y | TSC approved |
| N |
| N/A |
| 06/ |
Complete
TOC needs to be in all Doc.
| 02 | |
Complete Look at the Documentation Template. A number of key elements missing in: |
Inst Doc: Uninstall, Dev Guide and Troubleshooting |
Release Doc needs update to include items in template
Test: Test Env setup Accepted | Ready for TSC approval | Y | TSC approved | N |
| 5G MEC Rel 3 Datasheet | N/A |
Vuls, Lynis, Kube-Hunter: Accepted - with exceptions listed in link below. Incubation BP | 06/03 | ||
Complete TOC needs to be in all Doc. Follow the template of the Doc Inst |
Doc: Uninstall, Dev Guide and Troubleshooting Release Doc needs update to include items in template Accpeted | Pending closer Doc SC. CD Logs need to be updated. Tina will follow up with PTL 23 June 2020 - TSC sub-group reviewed the logs and requirements met. Ready for TSC approval. | Y | TSC approved |
Release Doc needs update to include items in template
Y| N |
https://nexus.akraino.org/content/sites/logs/bytedance/job/run-install-ovs-dpdk/
Complete
Updated the Installation doc with config details, included the Lic terms with Upstream. Updated the Test doc to reflect setup.
Accepted as per review comments
| IEC Release3-IEC Type3-datasheet.docx | NA (First Release) |
Vuls & Lynis: Accepted - with exceptions listed in link below. Accepted: First release - Kube-Hunter security scan not required. | 06/04 | |||
Complete TOC needs to be in all Doc. Follow the template of the Doc Inst Doc: Uninstall, Dev Guide and Troubleshooting Release Doc needs update to include items in template Accepted | Ready for TSC approval | Y | TSC approved | N |
| NA (First Release) |
Vuls & Lynis: Accepted Logs received from: Yihui Wang, wangyihui@chinamobile.com - with exceptions listed in link below. Kube-Hunter: Exemption granted, this blueprint does not currently use Kubernetes. | 06/04 | |||
Complete Updated the Installation doc with config details, included the Lic terms with Upstream. Updated the Test doc to reflect setup. Accepted as per review comments | Ready for TSC approval | Y | TSC approved | N |
NA (Incubation BP)
Note: Security tools (Vuls, Lyns & Kube-Hunter) has been integrated with no critical test failures.
Kube-Hunter Report:-
Lynis Report :-Vuls Report:-
Completed
1. Test Doc: Can you please provide the h/w required to validate the BP. 2. Installation doc: Should include config with a diagram
Comments addressed. Accepted
| EALTEdge Rel 3 Datasheet | NA (First Release) |
Vuls, Lynis and Kube-Hunber: Accepted - with exceptions listed in link below. Test results provided by Srinivasan Selvam NA (First Release) Note: Security tools (Vuls, Lyns & Kube-Hunter) has been integrated with no critical test failures. | 05/28 | ||
Completed 1. Test Doc: Can you please provide the h/w required to validate the BP. 2. Installation doc: Should include config with a diagram Comments addressed. Accepted | Not part of R3 | Y | Not part of R3 | N |
vuls report:
https://nexus.akraino.org/content/sites/logs/cmti/job/pcei-vuls/
Lynis report:
https://nexus.akraino.org/content/sites/logs/cmti/job/pcei-lynis/
kube-hunter report:| PCEI Release 3 Datasheet | N/A |
Vuls, Lynis - Accepted Kube-Hunter - Kubernetes not being used at this time - with exceptions listed in link below. Test results provided by Jian Li | 06/03 | 06/03 |
03/02~03/2020 Akraino TSC F2F & 2020 Planning meeting
...