Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Project NameDocumentation Review StatusIs this your first release Going for Maturity Review? 

CD Logs URL to be used for review

(Column filled in by PTLs)

Link to executive one pager

(editable doc format)

(Column filled in by PTLs)

BluVal

Certification

Security

Certification

Pass/Fail Criteria:  Steps To Implement Security Scan Requirements

Date ready for TSC review

(Column filled in by PTLs)

 TSC Review Date

(Column filled in by TSC)

Bluval validation missing. Rest of the Doc is accepted

1. Needs to specify what Bluval layer tests executed 2. Inst doc needs Lic details. Thor Chin  please add this.

Not ready


NNot Applicable

https://nexus.akraino.org/content/sites/logs/tencent/job/connectedVehicle/TestCompileCode/

https://nexus.akraino.org/content/sites/logs/tencent/job/connectedVehicle/TestConnectVehicleService/

https://nexus.akraino.org/content/sites/logs/tencent/job/CD_Install_Tars/


 

This blueprint does not have output information from vuls, lynis or kube-hunter. 

I have sent an email to Thor Chin and Tapio Tallgren.  This appears to be an issue with BluVal not executing the scans correctly.

05/28

Bluval validation missing in Test Doc. Rest of the Doc is accepted

 Same status as Connected Vehicle. 

Not ready

NN

https://nexus.akraino.org/content/sites/logs/tencent/job/iectype4/iec_deploy/

https://nexus.akraino.org/content/sites/logs/tencent/job/iectype4/Develop_Tars/

https://nexus.akraino.org/content/sites/logs/tencent/job/iectype4/CompileTarsCode/

https://nexus.akraino.org/content/sites/logs/tencent/job/iectype4/VR_Classroom_Deployment/

https://nexus.akraino.org/content/sites/logs/tencent/job/iectype4/iec_destroy/



 

No security scan logs received for vuls, lynis or kube-hunter.

05/28

Complete

 

  1. Please add license terms in the Installation doc or Architecture doc. 
  2. TOC is missing in a few of your Docs
  3. It would be helpful if you have the R3 docs clearly identified, they can have ref to the older docs. Currently, it's not organized by release like other BPs


Not Accepted yet

NOct 31st 

https://nexus.akraino.org/content/sites/logs/att/job/Install_REC_on_OpenEdge1/

https://logs.akraino.org/production/vex-yul-akraino-jenkins-prod-1/rec-aarch64_baremetal-install-rec-weekly-master/


 

Vuls, Lynis, Kube-Hunter:  Accepted - with exceptions listed in link below.

Security Scan Status

5/26

Complete

 Accepted

NNot Applicable

ICN Master Baremetal Deployment Verifier

ICN Master Virtual Deployment Verifer

ICN Master Hardware Baremetal Deployment Verifer

ICN SDEWAN Master End2End Testing

ICN Master Optane Hardware Baremetal Deployment Verifier

ICN R3 Data sheetY

 

Vuls, Lynis, Kube-Hunter:  Accepted - with exceptions listed in link below.

All test cases are performed, the first review is done by Security Sub Committee on 13th May 2020 and the latest updates have been updated in the Security Scan Status

05/2906/02

Complete

 Accepted

NNhttps://nexus.akraino.org/content/sites/logs/huawei/blueprints/iotgateway/job/eliot-iotgateway-deploy-k8s-virtual-daily-master/430/ELIOT R3 IOT-Gateway DatasheetY

  

Vuls, Lynis, Kube-Hunter:  Accepted - with exceptions listed in link below.

Security Scan Status

05/26

Complete

 TOC missing in Architecture, Installation and Test doc.

 Accepted


NN

https://nexus.akraino.org/content/sites/logs/huawei/blueprints/uCPE/job/eliot-uCPE-deploy-k8s-centos-virtual-daily-master/378/

ELIOT R3 uCPE DatasheetY

  

Vuls, Lynis, Kube-Hunter:  Accepted - with exceptions listed in link below.

Security Scan Status

05/26

Complete

Not Accepted yet

  1. TOC should be in all documents.
  2. Doc should be aligned with the template posted on Doc SC page

 Not completely addressed the above two, sent email

NNot Applicable

https://nexus.akraino.org/content/sites/logs//juniper/job/NC-Tungsten_Fabric/37/

https://nexus.akraino.org/content/sites/logs/juniper/validation/


NetworkCloud-TF blueprint Datasheet.docx

Y

 

Vuls & Lynis:  Accepted

- with exceptions listed in link below.

Security Scan Status

Kube-Hunter:  requested that Sukhdev verify if remediations listed in Steps To Implement Security Scan Requirements can be use in this blueprint.

Some checks are not applicable because of VM based deployment

05/2106/02

Complete

 

  1. TOC missing in Docs
  2. Installation Doc has missing sections, ref to the template on Doc subcommittee page
NN

https://nexus.akraino.org/content/sites/logs/redhat-kni/192.168.112.199/kni-deploy-baremetal/7/
https://nexus.akraino.org/content/sites/logs/sandbox/vex-yul-akraino-jenkins-sandbox-1/kni-blueprint-basic-3-masters-verify-deploy-baremetal/33/
https://nexus.akraino.org/content/sites/logs/production/vex-yul-akraino-jenkins-prod-1/kni-blueprint-pae-verify-deploy-aws/55/
https://nexus.akraino.org/content/sites/logs/redhat-kni/kni-edge-installer-libvirt/45/
https://logs.akraino.org/redhat-kni/bluval_results/blueprint-pae/20200505-104443/out.log

N [ Not passing as blueprint is based on OKD, not Kubernetes. So we run our own validation suite - https://logs.akraino.org/redhat-kni/bluval_results/blueprint-pae/20200505-104443/out.log ]

 

Lynis & Kube-Hunter:  Accepted

- with exceptions listed in link below.

Security Scan Status

 

Vuls:  Exemption granted, this blueprint uses RHCoreOS which vuls does not support.

05/0505/19
 ACRN  Kailasnath Maneparambil
 Y N


 

No security scan logs received for vuls, lynis or kube-hunter.



Micro-MEC

Complete

 TOC missing

YNhttps://nexus.akraino.org/content/sites/logs/micromecAkraino R3 MicroMEC blueprint datasheet.docxN/A

 

No security scan logs received for vuls, lynis or kube-hunter.



The AI Edge: School/Education Video Security Monitoring

Hechun Zhang

Complete

Not Accepted yet

Address the review comments posted on Doc SC page

YN

https://nexus.akraino.org/content/sites/logs/baidu/job/aiedge-otestack-master-deploy/

https://nexus.akraino.org/content/sites/logs/baidu/job/aiedge-otestack-master-validation/

N/A

 

Vuls, Lynis, Kube-Hunter:  Accepted - with exceptions listed in link below.

Security Scan Status

06/02

5G MEC/Slice System to Support Cloud Gaming, HD Video and Live Broadcasting Blueprint

Feng Yang

Complete

Look at the Documentation Template. A number of key elements missing in:

Inst Doc: Uninstall, Dev Guide and Troubleshooting

Test: Test Env setup

 Accepted

YN

https://nexus.akraino.org/content/sites/logs/tencent/job/5g-mec-cloud-gaming-CD/15/

https://logs.akraino.org/production/vex-yul-akraino-jenkins-prod-1/5g-mec-cloud-gaming-master-verify/

5G MEC Rel 3 DatasheetN/A

 

Vuls, Lynis, Kube-Hunter:  Accepted - with exceptions listed in link below.

Security Scan Status

Incubation BP

06/03

Complete

 TOC needs to be in all Doc.

Follow the template of the Doc

Inst Doc: Uninstall, Dev Guide and Troubleshooting

Release Doc needs update to include items in template

YYhttps://nexus.akraino.org/content/sites/logs/ampere/job/akraino_arm_anbox_test/6/IEC Release3-IEC Type3-datasheet.docxNA (First Release)

 

Need scan results for Vuls, Lynis, and Kube-Hunter.

06/04

Complete

 TOC needs to be in all Doc.

Follow the template of the Doc

Inst Doc: Uninstall, Dev Guide and Troubleshooting

Release Doc needs update to include items in template

 Accepted

YN

https://nexus.akraino.org/content/sites/logs/bytedance/job/run-install-bluefield-fs/

https://nexus.akraino.org/content/sites/logs/bytedance/job/run-install-ovs-dpdk/

NA (First Release)

 

Vuls & Lynis:  Accepted

Logs received from:

Yihui Wang, wangyihui@chinamobile.com

- with exceptions listed in link below.

Security Scan Status

Kube-Hunter:  Exemption granted, this blueprint does not currently use Kubernetes.

06/04

Complete

 Updated the Installation doc with config details, included the Lic terms with Upstream. Updated the Test doc to reflect setup.

Accepted as per review comments

YN
https://nexus.akraino.org/content/sites/logs/huawei/blueprints/ealt-edge/job/ealt-edge-deploy-virtual-daily-master/135/

https://nexus.akraino.org/content/sites/logs/huawei/blueprints/ealt-edge/job/ealt-edge-bluval-daily-master/22/results/

EALTEdge Rel 3 DatasheetNA (First Release)

 

Vuls, Lynis and Kube-Hunber:  Accepted

- with exceptions listed in link below.

Test results provided by Srinivasan Selvam

Security Scan Status

NA (First Release)

Note: Security tools (Vuls, Lyns & Kube-Hunter) has been integrated with no critical test failures.

05/28

Completed

 1. Test Doc: Can you please provide the h/w required to validate the BP. 2. Installation doc: Should include config with a diagram

 Comments addressed. Accepted

YNhttps://nexus.akraino.org/content/sites/logs/cmti/job/pcei-daily/PCEI Release 3 DatasheetN/A

 

Vuls, Lynis - Accepted

Kube-Hunter - Kubernetes not being used at this time

- with exceptions listed in link below.

Test results provided by Jian  Li

Security Scan Status

06/0306/03

...