Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

View file
nameIntelligent Vehicle-Infrastructure Cooperation System(I-VICS) Datasheet.docx
height250

Release 4 target date is November 30th 2020.  

...

  1. High Level Overall Requirements
  2. CI, Blueprint Validation Lab Sub-Committee Requirements
    1. Present Pod Topology document.
    2. Peering w/LF Jenkins - (Note: peering is an optional requirement)
    3. Push logs through Nexus. (Note: This is mandatory for Incubation self-certified and Maturity)
    4. Usage of topics for release

      1. Releases >= 1.0 (e.g. 1.xyz, 2.xyz etc) are reserved for BP that have been approved as Core by the TSC (considered ‘GA’ quality).

      2. Releases <1.0 (e.g. 0.xyz etc) are reserved for projects that have not reached the Akraino Core level (i.e. anything that is in Incubation (‘alpha’ quality) and Mature (‘beta’ quality).

    5. Enforcement of Static Code Analysis through SonarCloud (SaaS), WIP LF Release Engineering & Security Subcommittee. (Note: This is an optional requirement for Incubation self certified and mandatory for Maturity)

  3. Security Sub-Committee Requirements, please fill in Release 4 Blueprint Scanning Status.  Instructions can be found at:  Steps To Implement Security Scan Requirements
  4. Blueprint Validation Framework Feature Project Requirements See TSC meeting.
  5. Projects going for Maturity Review please refer to Maturity Criteria defined by Process subcommittee BP Graduation Review Processes and Criteria (Note this is not required for self certification, only required for maturity review)
  6. Documentation Sub-Committee Requirements

    User Documents:

    The following documentation with the following sections called out should be on the wiki with links to rest of the sections as applicable. We prefer that the entire doc is on the wiki but we do not require it.

    Architecture  - Blue print Overview and overall architecture

    Release Notes – Summary and What is released

    Installation Doc – Introduction and deployment architecture

    Test Document – Introduction and Overall Test Architecture

    Developer Documents:

    We are also recommending that Blueprints include via ReadtheDocs, with each Blue Print given their own repo, but we do not require it

  7. API Sub-Committee Requirements  (Note: See this link for requirements: Blueprint Projects R4 API Reporting Requirements)
  8. Community Sub-Committee Requirements  (Note: no mandatory requirements for Incubation self-certified or Maturity)
  9. Process Sub-Committee Requirements (Note: See the Process Sub Committee page defining the TSC approved Maturity review process and requirements for those requesting inclusion in R3 at Mature level BP Graduation Review Processes and Criteria)
  10. Upstream Sub-Committee Requirements (Note: no mandatory requirements for Incubation self-certified or Maturity). Here is the R4 release Upstream BP review status, Release Upstream Compliance. Also please refer to the page for the R4 requirement as well.

...

1127-2020.tar27 Jan    -ISSUES that MUST be fixed for Maturity or a more specific exception reason needs to be provided:
  • sysctl key net.ipv6.conf.all.accept_redirects has a different value than expected in scan profile. Expected=0, Real=1
  • sysctl key net.ipv6.conf.default.accept_redirects has a different value than expected in scan profile. Expected=0, Real=1
  • Performing test ID HRDN-7220 (Check if one or more compilers are installed)Hunter: Does not appear to have run correctly - question sent to BP owner01intel/bluval_results/icn/master/20201210-010310/.

    Scheduled at

    Release 4 Review 2020-12-09 (Wed) 7:30am

    juniper/job/NC-Tungsten_Fabric/40/content/sites/logs/juniper/validation-results/

    AWS footprint:
    https://logs.akraino.org/production/vex-yul-akraino-jenkins-prod-1/kni-blueprint-pae-verify-deploy-aws/81/

    GCP footprint:

    https://logs.akraino.org/production/vex-yul-akraino-jenkins-prod-1/kni-blueprint-pae-verify-deploy-gcp/51/

    redhat-kni/bluval_results_pae/

     

    Vuls:  Accepted with exception.  The KNI Provider Access Edge blueprint uses OpenShift as its k8s distribution, which is deployed on Red Hat CoreOS, an immutable OS that is not supported by Vuls.

    https://nexus.akraino.org/content/sites/logs/redhat-kni/bluval_results_pae/os/vuls/log.html.gz

    Lynis:

     

    redhat-kni/bluval_results_pae/os/lynis/

    Accepted with exceptions shown at:

    Release 4 Lynis Exceptions

    Kube-Hunter: redhat-kni/bluval_results_pae/k8s/kube-hunter/Kube-Hunter.Kube-Hunter/

    Release 4 Kube-Hunter Exceptions

    Slides for KNI blueprints review:

    Akraino_KNI_Release4_Review.pdf

    Mgmt Hub logs:

    https://logs.akraino.org/production/vex-yul-akraino-jenkins-prod-1/kni-blueprint-management-hub-verify-deploy-gcp/9/

    IE logs:

    https://logs.akraino.org/production/vex-yul-akraino-jenkins-prod-1/kni-blueprint-ie-verify-deploy-gcp/2/

    Ybaidujob/aiedge-otestack-master-deploy/

    https://nexus.akraino.org/content/sites/logs/baidu/job/aiedge-otestack-master-validation/

    /logs/tencent/job/5g-mec-cloud-gaming-CD/15/https:/.akraino.org/production/vex-yul-akraino-jenkins-prod-1/5g-mec-cloud-gaming-master-verify//tencent/bluval/results_upload

     

    Vuls Vuls Exception Request

    Lynis: Accepted with exceptions shown at:

    Release 4 Lynis Exceptions

    Kube-Hunter: 

    Accepted with exceptions shown at:

    Release 4 Kube-Hunter Exceptions

    Nampere/job/akraino_arm_anbox_test/6/Scheduled N/bytedanceruninstallbluefield-fs//bytedanceruninstallovs-dpdk/N
    No.Project NameTSC Subgroup Release StatusIs this your first release Going for Maturity Review? 

    CD Logs URL to be used for review

    (Column filled in by PTLs)

    How to: Push Logs to Nexus

    Jenkins Master for Private Lab

    Jenkins Peering Guide

    Example: 

    KubeEdge BP Test Documents

    Link to executive one pager

    (editable doc format)

    (Column filled in by PTLs)

    API Info Reporting Review

    (Column filled in by API Subcommittee)

    (note for PTLs – go here for steps to fill in project API info form)

    BluVal

    Certification

    Bluval User Guide

    Security

    Certification

    Provide link to Vuls, Lynis, and Kube-Hunter logs below.

    Pass/Fail Criteria:  Steps To Implement Security Scan Requirements

    Exception requests should be filed at:

    https://wiki.akraino.org/display/AK/Akraino+CVE+Vulnerability+Exception+Request

    Upstream Review (Column filled by Upstream Subcommittee and PTLs)


    (note PTL can go to R4 Release Upstream Compliance to find details)

    Date ready for TSC review

    (Column filled in by PTLs)

     TSC Review Date

    (Column filled in by TSC)

    1scheduled at 

    TSC 2020-12-01 (Tues) 7 am Pacific

    NY

    https://nexus.akraino.org/content/sites/logs/parserlabs/r4/jobs/cvb/

    Form uploaded

    Scheduled for API subcommittee review

    Waiting for re-uploaded API info form with PaaS API info

    Reviewed by API subcommittee, PaaS APIs are subset of TARS APIs

    Accepted

     

    Vuls:  Accepted with exceptions shown at:

    Release 4 Vuls Exception Reques

    https://nexus.akraino.org/content/sites/logs/parserlabs/r4/jobs/cvb/


     

    Lynis:  Accepted with exceptions shown at:

    Release 4 Lynis Exceptions

    https://nexus.akraino.org/content/sites/logs/parserlabs/r4/jobs/cvb/lynis_updated_26.log


    Kube-Hunter:  Exception granted:  K8s not used by this BP.

    Yes12/01
    2scheduled at 

    TSC 2020-12-01 (Tues) 7 am Pacific

    NY

    https://nexus.akraino.org/content/sites/logs/parserlabs/r4/jobs/iec-type4/

    Form uploaded

    Scheduled for API subcommittee review

    Waiting for re-uploaded API info form with PaaS API info 

    Reviewed by API subcommittee, PaaS APIs are subset of TARS APIs

    Accepted

     

    Vuls:  Accepted with exceptions shown at:

    Release 4 Vuls Exception Request

    https://nexus.akraino.org/content/sites/logs/parserlabstencent/r4/jobsMR/iec-type4/


    26 Jan  

    Lynis:  Accepted with exceptions shown at:

    No Exceptions Required, Excellent!Release 4 Lynis Exceptions

    https://nexus.akraino.org/content/sites/logs/parserlabstencent/r4/jobsMR/iec-type4/lynis_updated_26.log


    Kube-Hunter:  Exception granted:  K8s not used by this BP.

    Yes12/01
    3Scheduled at Release 4 Review 2020-12-01 (Tues) 7 am PacificNMature

    https://nexus.akraino.org/content/sites/logs/att/job/Install_REC_on_OpenEdge1/

    https://logs.akraino.org/production/vex-yul-akraino-jenkins-prod-1/rec-aarch64_baremetal-install-rec-weekly-master/

    Form uploaded

    Reviewed by API subcommittee

    Accepted

    https://nexus.akraino.org/content/sites/logs/att/job/Bluval_Logs/results-11-27-2020.tar

    02-01/

     

    VulsAccepted with exceptions shown at:

    Release 4 Vuls Exception Request


     

    Lynis:  Accepted with exceptions shown at:

    Release 4 Lynis Exceptions


    Kube-Hunter:  Accepted with exceptions shown at:

    Release 4 Kube-Hunter Exceptions

    Yes12/01
    4Scheduled at 

    Release 4 Review 2020-12-16 (Wed) 7 am Pacific

    NN

    ICN Master Baremetal Deployment Verifier

    ICN Master Virtual Deployment Verifier

    ICN SDEWAN Master End2End Testing

    Form uploaded

    Reviewed by API subcommittee

    Accepted

    https://nexus.akraino.org/content/sites/logs/intel/bluval_results/icn/master/20201210-010310/.

    https://nexus.akraino.org/content/sites/logs/intel/bluval_results/icn/master/20201210-010310/

    ICN R4 Test Document#BluValTesting

    Vuls:  Accepted with exceptions shown at:

    Release 4 Vuls Exception


    Lynis:  Accepted with exceptions shown at:

    Release 4 Lynis Exceptions


    k8s/conformance:

    Kube-Hunter:  Accepted

    • The logs show the run with the aquasec/kube-hunter:edge image to fix the CAP_NET_RAW inside a pod issue


    Yes12/1012/16
    5scheduled at 

    TSC 2020-12-16 (Tues) 7 am Pacific

    NN

    https://nexus.akraino.org/content/sites/logs/huawei/blueprints/iotgateway/job/eliot-iotgateway-deploy-k8s-virtual-daily-master/684/

    ELIOT R4 IOT-Gateway Datasheet

    Form uploaded

    Reviewed by API subcommittee  

    Accepted

    https://nexus.akraino.org/content/sites/logs/huawei/blueprints/iotgateway/job/eliot-iotgateway-bluval-virtual-daily-master/37/results/os/lynis/lynis.log

    vuls exceptions Akraino CVE Vulnerability Exception Request

    Akraino BluVal Exception Request

     

    Vuls:  Accepted with exceptions shown at:

    Release 4 Vuls Exception

    Lynis: Accepted with exceptions shown at:

    Release 4 Lynis Exceptions

    Kube-Hunter:  Accepted with exceptions shown at:

    Release 4 Kube-Hunter Exceptions

    Yes12/08
    6scheduled at 

    TSC 2020-12-16 (Tues) 7 am Pacific

    NNhttps://nexus.akraino.org/content/sites/logs/huawei/blueprints/uCPE/job/eliot-uCPE-deploy-k8s-centos-virtual-daily-master/545/ELIOT R4 - SD-WAN / WAN Edge / uCPE Data Sheet

    Form uploaded

    Reviewed by API subcommittee  

    Accepted

    https://nexus.akraino.org/content/sites/logs/huawei/blueprints/uCPE/job/eliot-uCPE-deploy-k8s-centos-virtual-daily-master/549/results/os/lynis/lynis.log

    vuls exceptions Akraino CVE Vulnerability Exception Request

    Akraino BluVal Exception Request

     

    Vuls:  Accepted with exceptions shown at:

    Release 4 Vuls Exception

    Lynis: Accepted with exceptions shown at:

    Hunter:  Accepted with exceptions shown at:

    Release 4 Kube-Hunter Exceptions

    Yes12/08
    47

    Scheduled at

    Scheduled at 

    Release 4 Review 2020-12-

    16

    09 (Wed) 7

    am Pacific

    :30am


    NN

    ICN Master Baremetal Deployment Verifier

    ICN Master Virtual Deployment Verifier

    ICN SDEWAN Master End2End Testing

    Not Applicable

    https://nexus.akraino.org/content/sites/logs/juniper/job/NC-Tungsten_Fabric/40/


    https://nexus.akraino.org/content/sites/logs/juniper/validation-2021/



    NetworkCloud-TF blueprint

    ICN_ MICN_Akraino_R4_blueprint_

    Datasheet.docx

    Form uploaded

    Scheduled for API subcommittee review

    Reviewed by API

    subcommittee

    subcommittee 

    Accepted

    Y

     

    Vuls: Accepted with exceptions shown at:

    Release 4 Vuls Exception


     

    Lynis:  Accepted with exceptions shown at:

    Release 4 Lynis Exceptions

    Note there were exceptions granted for mandatory incubation items that must be fixed in the next incubation level release as well as other items that must be fixed for maturity.


     

    Kube-Hunter

    https://nexus.akraino.org/content/sites/logs/intel/bluval_results/icn/master/20201210-010310/

    ICN R4 Test Document#BluValTesting

    Vuls

    Accepted with exceptions shown at:

    Release 4 Vuls Exception

    Lynis:  Accepted with exceptions shown at:

    Release 4 Lynis Exceptions

    k8s/conformance:

    Kube-Hunter:  Accepted

    • The logs show the run with the aquasec/kube-hunter:edge image to fix the CAP_NET_RAW inside a pod issue
    Yes12/1012/16

    Release 4 Kube-Hunter Exceptions

    Yes12/0912/09
    8Scheduled at 

    TSC 2020-12-17 (Thurs) 7 am Pacific

    NN

    AWS footprint:
    https://logs.akraino.org/production/vex-yul-akraino-jenkins-prod-1/kni-blueprint-pae-verify-deploy-aws/81/

    GCP footprint:

    https://logs.akraino.org/production/vex-yul-akraino-jenkins-prod-1/kni-blueprint-pae-verify-deploy-gcp/51/


    Form uploaded

    Reviewed by API subcommittee

    Accepted

    https://nexus.akraino.org/content/sites/logs/redhat-kni/bluval_results_pae/

    5scheduled at 

    TSC 2020-12-16 (Tues) 7 am Pacific

    NN

     

    Vuls:  Accepted with exception.  The KNI Provider Access Edge blueprint uses OpenShift as its k8s distribution, which is deployed on Red Hat CoreOS, an immutable OS that is not supported by Vuls.

    huawei/blueprints/iotgateway/job/eliot-iotgateway-deploy-k8s-virtual-daily-master/684/ELIOT R4 IOT-Gateway Datasheet

    redhat-kni/bluval_results_pae/os/vuls/log.html.gz


    Lynis:

     

    Form uploaded

    Reviewed by API subcommittee  

    Accepted

    https://nexus.akraino.org/content/sites/logs/

    huawei/blueprints/iotgateway/job/eliot-iotgateway-bluval-virtual-daily-master/37/results/os/lynis/lynis.log

    vuls exceptions Akraino CVE Vulnerability Exception Request

    Akraino BluVal Exception Request

    Yes12/0860912/09
    9


    Slides for KNI blueprints review:

    Akraino_KNI_Release4_Review.pdf

    Scheduled scheduled at 

    TSC 2020-12-16 17 (TuesThurs) 7 am Pacific

    YNN

    Mgmt Hub logs:

    https://

    nexus

    logs.akraino.org/

    content/sites/logs/huawei/blueprints/uCPE/job/eliot-uCPE-deploy-k8s-centos-virtual-daily-master/545/ELIOT R4 - SD-WAN / WAN Edge / uCPE Data Sheet

    production/vex-yul-akraino-jenkins-prod-1/kni-blueprint-management-hub-verify-deploy-gcp/9/

    IE logs:

    https://logs.akraino.org/production/vex-yul-akraino-jenkins-prod-1/kni-blueprint-ie-verify-deploy-gcp/2/


    Form uploaded

    Reviewed by API subcommittee

     

    Accepted

    https://nexus.akraino.org/content/sites/logs/huawei/blueprints/uCPE/job/eliot-uCPE-deploy-k8s-centos-virtual-daily-master/549/results/os/lynis/lynis.log

    vuls exceptions Akraino CVE Vulnerability Exception Request

    Akraino BluVal Exception Request

    redhat-kni/bluval_results_ie/

     

     

    Vuls:  Accepted with exceptions shown at:

    Release 4 Vuls Exception

    Lynis: Accepted with exceptions shown at:

    Release 4 Lynis Exceptions

    Kube-Hunter:  Accepted with exceptions shown at:

    Release 4 Kube-Hunter Exceptions

    Yes12/087NNot Applicable

    exception.  The KNI Industrial Edge blueprint uses OpenShift as its k8s distribution, which is deployed on Red Hat CoreOS, an immutable OS that is not supported by Vuls.

    https://nexus.akraino.org/content/sites/logs/redhat-kni/bluval_results_ie/os/vuls/log.html.gz


    Lynis:

    https://nexus.akraino.org/content/sites/logs/

    Yes

    10

    Micro-MEC - moved to LTS


    YN

    NetworkCloud-TF blueprint Datasheet.docx

    Form uploaded

    Scheduled for API subcommittee review  

    Accepted

    Yhttps://nexus.akraino.org/content/sites/logs/juniper/validation/

     

    Vuls: Accepted with exceptions shown at:

    Release 4 Vuls Exception

     

    Lynis:  ISSUES that MUST be fixed or a more specific exception reason needs to be provided:

    1. Performing test ID AUTH-9328 (Default umask values)
    2. Test: Check if one or more compilers can be found on the system

    Following compilers found:

    • Found known binary: as (compiler) - /usr/bin/as
    • Found known binary: cc (compiler) - /usr/bin/cc
    • Found known binary: gcc (compiler) - /usr/bin/gcc

     

    Kube-Hunter:  In review

    Sukhdev Kapur has requested that the Release 3 exceptions be provided for Release 4

    Yes12/0912/098Scheduled at 

    TSC 2020-12-17 (Thurs) 7 am Pacific

    NNmicromecAkraino R3 MicroMEC blueprint datasheet.docx

    Form uploaded  

    API committee review scheduled for

    Reviewed by API subcommittee

    Accepted

    N/A





    11

    Scheduled at TSC 2020-11-24 (Tues) 7 am Pacific

    NN

    https://nexus.akraino.org/content/sites/logs/baidu/job/aiedge-otestack-master-deploy/

    https://nexus.akraino.org/content/sites/logs/baidu/job/aiedge-otestack-master-validation/

    Hechun replied by e-mail 12Jan, API info form is in progress

    Form uploaded  

    API committee review tentatively scheduled for

    Reviewed by API subcommittee  

    Accepted

    https://nexus.akraino.org/content/sites/logs/baidu/job/bluval/aiedge/results/

    Form uploaded

    Reviewed by API subcommittee

    Accepted

    webank/job/aiedge-video/1/scan/

     

    Vuls: Accepted with exceptions shown at:

    Release 4 Vuls Exception


    Lynis:  Accepted with exceptions shown at:

    Release 4 Lynis Exceptions



    Kube-Hunter:  Accepted with exceptions shown at:

    Release 4 Kube-Hunter Exceptions


    Note:  There are 4 issues that must be fixed prior to the next Incubation OR Maturity release.
    Yes (Please also update the upstream version besides the repo name)06/02
    12
    YN

    https://nexus.akraino.org/content/sites/logs/

    baidu/job/xinhong/results/

    Form uploaded 

    API subcommittee review scheduled for 

    Reviewed by API Subcommittee  

    Accepted

    N/A

    baidu/job/xinhong/results/

     

    Vuls: 

    Accepted with exceptions shown at:

    Yes12/0912/099Scheduled at 

    TSC 2020-12-17 (Thurs) 7 am Pacific

    YN

    Release 4 Vuls Exception Request


    Lynis: 

    The following must be fixed for incubation:

    1. Test ID BOOT-5122 (Check for GRUB boot password) : Must Pass
    2. Test: Checking PASS_MAX_DAYS option in /etc/login.defs : Must Pass
    3. Test ID AUTH-9328 (Default umask values) : Must Pass
    4. Test ID SSH-7440 (Check OpenSSH option: AllowUsers and AllowGroups) : Must Pass
    5. sysctl key fs.suid_dumpable : Must Pass
    6. sysctl key kernel.dmesg_restrict : Must Pass
    7. sysctl key net.ipv4.conf.default.accept_source_route : Must Pass
    8. The following compilers must be removed:- /usr/bin/as- /usrbin/cc- /usr/bin/g++- /usr/bin/gcc

    Kube-Hunter:  Exception granted:  K8s not used by this BP.

    Yes (Please update the upstream versions besides the repo name)

    13
    YN

    Form uploaded

    Reviewed by API subcommittee

    Accepted

    https://nexus.akraino.org/content/sites/logs/redhat-kni/bluval_results_ie/

     

    Vuls:  Accepted with exception.  The KNI Industrial Edge blueprint uses OpenShift as its k8s distribution, which is deployed on Red Hat CoreOS, an immutable OS that is not supported by Vuls.

    https://nexus.akraino.org/content/sites/logs/

    redhat-kni/bluval_results_ie/os/vuls/log.html.gz

    Lynis:

    tencent/job/tencent_5g_mec/

    Form uploaded  

    Reviewed by API subcommittee

    Accepted

    N/A

    https://nexus.akraino.org/content/sites/logs/redhat-knitencent/bluval_/results_ie/os/lynis/upload

     

    Vuls:  Accepted with exceptions shown at:

    Release 4 Lynis Exceptions

    20

    Vuls Exception Request


    Kube-Hunter

    Lynis

    Accepted with exceptions shown at:

    Release 4 Lynis Exceptions


    Kube-Hunter: 

    https://nexus.akraino.org/content/sites/logs/redhat-kni/bluval_results_ie/k8s/kube-hunter/Kube-Hunter.Kube-Hunter/

    Accepted with exceptions shown at:

    Release 4 Kube-Hunter Exceptions

    YesPlease update the release note with upstream information (R4 to R6 - Release Notes)06/03
    14

    Scheduled at

    TSC 2021-02-04 (Thurs) 7 am PT

    NN10

    Micro-MEC

    YNhttps://nexus.akraino.org/content/sites/logs/micromecAkraino R3 MicroMEC blueprint datasheet.docx

    Form uploaded

    API committee review scheduled for

    N/A11

    Scheduled at TSC 2020-11-24 (Tues) 7 am Pacific

    Nhttps://nexus.akraino.org/content/sites/logs/arm-china/jenkins092/iec-type3-android-cloud-ubuntu1804-daily-master/job/nvdroid/17/ IEC Release4-IEC Type3-datasheet.docx

    Hanyu replied by e-mail  that they have no APIs offered or consumed. API subcommittee replied they still need to fill out the API info reporting form with BP name and Comments field explaining current and future API status, and upload the form

    Form uploaded  

    Reviewed by API Subcommittee  

    Accepted

    Bluval Exception has been accepted

    Akraino BluVal Exception Request

    Hechun replied by e-mail 12Jan, API info form is in progress

    API committee review tentatively scheduled for

    N/AYes (Please also update the upstream version besides the repo name)06/0212YNYes (Please update the upstream versions besides the repo name)13

    5G MEC/Slice System to Support Cloud Gaming, HD Video and Live Broadcasting Blueprint

    Feng Yang

    YN

    5G MEC Rel 3 Datasheet

    Form uploaded  

    Accepted

    N/A

    https://nexus.akraino.org/content/sites/logs

    /arm-china/jenkins092/iec-type3-android-cloud-ubuntu1804-daily-master/job/nvdroid/34/ 

    Lynis

    Accepted with exceptions shown at:

    Release 4

    Lynis Exceptions


    Kube-Hunter:  Exception granted:  K8s not used by this BP.

    Yes02/04
    15Scheduled at 

    TSC 2020-12-10 (Thurs) 7 am Pacific

    NN

    https://nexus.akraino.org/content/sites/logs/cmti/job/iec5_r4/15/

    Form uploaded

    Scheduled for API subcommittee review

    Reviewed by API subcommittee

    Accepted

    Bluval Exception has been accepted for the project.

    Akraino BluVal Exception Request

    Please update the release note with upstream information (R4 - Release Notes)06/0314

    Scheduled at

    TSC 2021-1-28 (Thurs) 7 am Pacific

    N

    PTL replied by e-mail  that they have no APIs offered or consumed. API subcommittee replied they still need to fill out the API info reporting form with BP name and Comments field explaining current and future API status, and upload the form

    Yes01/28

    Kube-Hunter:  Exception granted:  K8s not used by this BP.

    Yes

    16scheduled 15 at 

    TSC 2020-12-10(Thurs) 7 am Pacific

    NN

    https://nexus.akraino.org/content/sites/logs/huawei/blueprints/ealt-edge/job/ealt-edge-deploy-virtual-daily-master/397

    Form uploaded

    Reviewed by API subcommittee

    Accepted

    https://nexus.akraino.org/content/sites/logs

    /huawei/blueprints/ealt-edge/job/

    ealt-edge-

    bluval-

    daily-master/251/results/

    Vuls Exception Akraino CVE Vulnerability Exception Request

    Akraino BluVal Exception Request

    Form uploaded

    Scheduled for API subcommittee review

    Accepted

    Yes06/0416

    daily-master/251/results/

    Akraino CVE Vulnerability Exception Request

     

    Vuls:  Accepted with exceptions shown at:

    Release 4 Vuls Exception Request

    Lynis: Accepted with exceptions shown at:

    Release 4 Lynis Exceptions

    Kube-Hunter:  Accepted with exceptions shown at:

    Release 4 Kube-Hunter Exceptions

    updated results link - 09-dec

    Yes12/10
    17

    Scheduled at TSC 2021-1-14

    scheduled at TSC 2020-12-10

    (Thurs) 7 am Pacific

    NN

    https://nexus.akraino.org/content/sites/logs/huawei/blueprints/ealt-edge/job/ealt-edge-deploy-virtual-daily-master/397

    PCEI Time Slot 7:30-8:00 am Pacific

    Y

    Form uploaded

    Reviewed by API subcommittee

    Accepted

    https://nexus.akraino.org/content/sites/logs/huawei/blueprints/ealt-edge/job/ealt-edge-bluval-daily-master/251/results/

    Vuls Exception Akraino CVE Vulnerability Exception Request

    Akraino BluVal Exception Requestcmti/job/pcei-daily/
    PCEI R4 Datasheet

    Form uploaded 4Jan

    Scheduled for API subcommittee review  

    For R4, third-party location API provided as an example in PCEI architecture diagrams. For R5 they expect PCEI APIs to be exported

    Reviewed by API subcommittee

    Accepted

    17

    Scheduled at TSC 2021-1-14 (Thurs) 7 am Pacific

    PCEI Time Slot 7:30-8:00 am Pacific

    Y

    https://nexus.akraino.org/content/sites/logs/huawei/blueprints/ealt-edge/job/ealt-edge-bluval-daily-master/251/results/

    Akraino CVE Vulnerability Exception Request

     

    Vuls:  Accepted with exceptions shown at:

    Release 4 Vuls Exception Request

    Lynis: Accepted with exceptions shown at:

    Release 4 Lynis Exceptions

    Kube-Hunter:  Accepted with exceptions shown at:

    Release 4 Kube-Hunter Exceptions

    updated results link - 09-dec

    Yes12/10

    pcei/job/v1/

    New BluVal logs 2021-01-08:

    https://nexus.akraino.org/content/sites/logs/pcei/job/v2/results/

     

    Updated BluVal logs with fixed sysctl key net.ipv4.conf.default.accept_source_route

    https://nexus.akraino.org/content/sites/logs/pcei/job/v3/

     

    Updated BluVal logs with fixed Kube-Hunter Vulnerability KHV050, KHV002, KHV005

    https://nexus.akraino.org/content/sites/logs/

    cmti

    pcei/job/

    pcei-daily/
    PCEI R4 Datasheet

    Form uploaded 4Jan

    Scheduled for API subcommittee review  

    For R4, third-party location API provided as an example in PCEI architecture diagrams. For R5 they expect PCEI APIs to be exported

    Accepted

    v4/


     

    Vuls:

    Vuls:  Accepted with exceptions shown at:

    Release 4 Vuls Exception Request

    vuls.log included in the new logs (V2)

    Lynis:  Accepted with exceptions shown at:

    Release 4 Lynis Exceptions

    Kube-Hunter:

    Accepted with exceptions shown at:

    Release 4 Kube-Hunter Exceptions


    Yes01/14/21
    18Scheduled at 

    TSC 2020-12-08 (Tues) 7 am Pacific

    YN

    https://nexus.akraino.org/content/sites/logs/pcei/job/v1/

    New BluVal logs 2021-01-08:
    https://nexus.akraino.org/content/sites/logs/pceiwebank/job/v2/results/

     

    Federated ML application at edge R4 Datasheet

    Form uploaded

    Reviewed by API subcommittee

    Accepted

    N/AUpdated BluVal logs with fixed sysctl key net.ipv4.conf.default.accept_source_routepcei/job/v3/

     

    Updated BluVal logs with fixed Kube-Hunter Vulnerability KHV050, KHV002, KHV005

    pceiv4

    FL_SCAN/lynis_fixed/

     

    Vuls:Vuls:  Accepted with exceptions shown at:

    Release 4 Vuls Exception Request

    vuls.log included in the new logs (V2)

    Lynis:  Accepted with exceptions shown at:

    Release 4 Lynis Exceptions

    Kube-Hunter:


     

    Lynis:  Accepted with exceptions shown at:

    Release 4 Kube-Hunter ExceptionsLynis Exceptions

    https://nexus.akraino.org/content/sites/logs/webank/job/FL_SCAN/lynis_fixed2/

    Kube-Hunter:  Exception granted:  K8s not used by this BP.

    Yes0112/14/2108
    1819Scheduled at TSC Release 4 Review 2020-1211-08 17 (TuesTue) 7 am PacificYNhttps://nexus.akraino.org/content/sites/logs/webankfuturewei/jobkubeedgees/Federated ML application at edge R4 DatasheetKubeEdge Edge Service Blueprint Release 4 datasheet

    Form uploaded

    Reviewed by API subcommittee

    Accepted

    N/A

    Yes

    https://nexus.akraino.org/content/sites/logs/

    webank

    futurewei/

    job

    kubeedgees/

    FL_SCAN

    58/results/

    Akraino BluVal Exception Request

    https://nexus.akraino.org/content/sites/logs/webank/job/FL_SCAN/lynis_fixed/

    08 Dec  

    Vuls:  Accepted with exceptions shown at:

    Release 4 Vuls Exception Request

    15 Dec  

    Lynis:  Accepted with exceptions shown at:Release 4 Lynis Exceptions  Accepted

    Kube-Hunter: Exception granted:  KubeEdge node is not on same subnet as the cloud node.  Communication occurs through the websocket endpoint, so kube-hunter can't be used.

    Yes11/17
    20

    Scheduled at 

    Release 4 Review 2021-02-25 



    YNhttps://nexus.akraino.org/content/sites/logs/webankjuniper/job/FL_SCAN/lynis_fixed2/

    Kube-Hunter:  Exception granted:  K8s not used by this BP.

    Yes12/0819Scheduled at Release 4 Review 2020-11-17 (Tue) 7 am PacificYNhttps://nexus.akraino.org/content/sites/logs/futurewei/kubeedgees/

    Form uploaded

    Reviewed by API subcommittee

    Accepted

    Yes

    https://nexus.akraino.org/content/sites/logs/futurewei/kubeedgees/58/results/

    Akraino BluVal Exception Request

     

    Vuls:  Accepted with exceptions shown at:

    Release 4 Vuls Exception Request

     

    Lynis:  Accepted

    Kube-Hunter: Exception granted:  KubeEdge node is not on same subnet as the cloud node.  Communication occurs through the websocket endpoint, so kube-hunter can't be used.

    Yes11/1720Y

    Prem replied by e-mail 17Jan, API info form is in progress

    API committee review tentatively scheduled for

    Private%205G%20BP/Akraino Private LTE/5G BP Datasheet

    Prem replied by e-mail 17Jan, API info form is in progress

    Form uploaded  

    API committee review scheduled for

    Reviewed by API subcommittee  

    Accepted

    N/A

    Private 5G/LTE is using Tungsten Fabric hosts and Kubernetes orchestration.

    Vuls:  Accepted using Network Cloud and TF approval

    Lynis: Accepted using Network Cloud and TF approval

    Kube-Hunter:  Accepted using Network Cloud and TF approval

    See:  Network Cloud and TF (Tungsten Fabric) Integration Project

    Yes 02/24
    21Scheduled at Release 4 Review 2020-12-09 YNhttps://nexus.akraino.org/content/sites/logs/ai_solutions/job/Eden-flir/

    Form uploaded

    Reviewed by API subcommittee  , waiting for revised API info form to be uploaded

    2nd revision of form uploaded   by V S

    Final review by API subcommittee set for

    Reviewed by API subcommittee

    Accepted

    Have an exception21Scheduled at Release 4 Review 2020-12-09 Y

    Form uploaded

    Reviewed by API subcommittee  , waiting for revised API info form to be uploaded

    2nd revision of form uploaded   by V S

    Final review by API subcommittee set for

    Accepted

     

    Vuls:

    The vuls.log file needs to be uploaded/provided.  It contains the test results to make our security evaluation.

    Also, can you verify which OS and version this blueprint is using is it linuxkit?

     

    Lyins:

    The lynis.log file needs to be uploaded/provided.  It contains the test results to make our security evaluation.

     

    Kube-Hunter:  Exception granted:  K8s not used by this BP.

    Have an exception

    Yes12/09



    03/02~03/2020 Akraino TSC F2F & 2020 Planning meeting

    ...