...
| No. | Project Name | TSC Subgroup Release Status | Is this your first release | Going for Maturity Review? | CD Logs URL to be used for review (Column filled in by PTLs) | Link to executive one pager (editable doc format) (Column filled in by PTLs) | API Info Reporting Info Review (Column filled in by API Subcommittee) (note for PTLs – go here for steps to fill in project API info template) | BluVal Certification | Security Certification Provide link to Vuls, Lynis, and Kube-Hunter logs below. Pass/Fail Criteria: Steps To Implement Security Scan Requirements Exception requests should be filed at: https://wiki.akraino.org/display/AK/Akraino+CVE+Vulnerability+Exception+Request | Upstream Review (Column filled by Upstream Subcommittee and PTLs) (note PTL can go to Release Upstream Compliance to find details) | Date ready for TSC review (Column filled in by PTLs) | TSC Review Date (Column filled in by TSC) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | scheduled at | N | Y | https://nexus.akraino.org/content/sites/logs/parserlabs/r4/jobs/cvb/ | https://nexus.akraino.org/content/sites/logs/parserlabs/r4/jobs/cvb/
Vuls: Accepted with exceptions show at: Release 4 Vuls Exception Request
Lynis: Failed - errors sent to BP owner Kube-Hunter: Exception granted: K8s not used by this BP. | Yes | 12/01 | |||||
| 2 | scheduled at | N | Y | https://nexus.akraino.org/content/sites/logs/parserlabs/r4/jobs/iec-type4/ | https://nexus.akraino.org/content/sites/logs/parserlabs/r4/jobs/iec-type4/
Vuls: Failed - errors sent to BP owner
Lynis: Failed - errors sent to BP owner Kube-Hunter: Exception granted: K8s not used by this BP. | Yes | 12/01 | |||||
| 3 | Scheduled at Release 4 Review 2020-12-01 (Tues) 7 am Pacific | N | Mature | https://nexus.akraino.org/content/sites/logs/att/job/Install_REC_on_OpenEdge1/ | Received. Accepted | https://nexus.akraino.org/content/sites/logs/att/job/Bluval_Logs/results-11-27-2020.tar | https://nexus.akraino.org/content/sites/logs/att/job/Bluval_Logs/results-11-27-2020.tar
Vuls: Accepted with exceptions show at: Release 4 Vuls Exception Request
Lynis: - errors sent to BP owner Kube-Hunter: Does not appear to have run correctly - question sent to BP owner | |||||
| 4 | Scheduled at | N | N | ICN Master Baremetal Deployment Verifier | Received Accepted | https://nexus.akraino.org/content/sites/logs/intel/bluval_results/icn/master/20201210-010310/. | https://nexus.akraino.org/content/sites/logs/intel/bluval_results/icn/master/20201210-010310/ ICN R4 Test Document#BluValTesting Vuls: Accepted with exceptions show at: Lynis: Accepted with exceptions show at: k8s/conformance:
Kube-Hunter: Accepted
| Yes | 12/10 | 12/16 | ||
| 5 | scheduled at | N | N | vuls exceptions Akraino CVE Vulnerability Exception Request |
Vuls: Accepted with exceptions show at: Lynis: Accepted with exceptions show at: Kube-Hunter: Accepted with exceptions show at: | 12/08 | ||||||
| 6 | scheduled at | N | N | https://nexus.akraino.org/content/sites/logs/huawei/blueprints/uCPE/job/eliot-uCPE-deploy-k8s-centos-virtual-daily-master/534/ | vuls exceptions Akraino CVE Vulnerability Exception Request |
Vuls: Accepted with exceptions show at: Lynis:Failed ISSUES that MUST be fixed or a more specific exception reason needs to be provided:
For the following test for installed compilers, this issue MUST be fixed: Performing test ID HRDN-7220 (Check if one or more compilers are installed)Accepted with exceptions show at: Kube-Hunter: Accepted with exceptions show at: | Yes | 12/08 | ||||
| 7 | Scheduled at Release 4 Review 2020-12-09 (Wed) 7:30am | N | Not Applicable | https://nexus.akraino.org/content/sites/logs/juniper/job/NC-Tungsten_Fabric/40/ | Uploaded | Y |
Vuls: Need to provide vuls.log
Lynis: ISSUES that MUST be fixed or a more specific exception reason needs to be provided:
Following compilers found:
Kube-Hunter: In review Sukhdev Kapur has requested that the Release 3 exceptions be provided for Release 4 | Y | 12/09 | 12/09 | ||
| 8 | Scheduled at | N | N | AWS footprint: GCP footprint: | Received Accepted | N [ Not passing as blueprint is based on OKD, not Kubernetes. So we run our own validation suite - https://logs.akraino.org/redhat-kni/bluval_results/blueprint-pae/20200505-104443/out.log ] | 12/09 | 12/09 | ||||
| 9 | Scheduled at | Y | N | Mgmt Hub logs: IE logs: | Received Accepted | |||||||
| 10 | Y | N | https://nexus.akraino.org/content/sites/logs/micromec | Akraino R3 MicroMEC blueprint datasheet.docx | Received | N/A | ||||||
| 11 | N | Y | https://nexus.akraino.org/content/sites/logs/baidu/job/aiedge-otestack-master-deploy/ https://nexus.akraino.org/content/sites/logs/baidu/job/aiedge-otestack-master-validation/ | N/A | 06/02 | |||||||
| 12 | Y | N | ||||||||||
| 13 | Y | N | https://nexus.akraino.org/content/sites/logs/tencent/job/5g-mec-cloud-gaming-CD/15/ | 5G MEC Rel 3 Datasheet | Received | N/A | 06/03 | |||||
| 14 | N | N | https://nexus.akraino.org/content/sites/logs/ampere/job/akraino_arm_anbox_test/6/ | 01/15 | ||||||||
| 15 | Scheduled at | N | N | https://nexus.akraino.org/content/sites/logs/bytedance/job/run-install-bluefield-fs/ https://nexus.akraino.org/content/sites/logs/bytedance/job/run-install-ovs-dpdk/ | NA (First Release) | Release document is still for R3 | 06/04 | |||||
| 16 | scheduled at | N | N | https://nexus.akraino.org/content/sites/logs/huawei/blueprints/ealt-edge/ | Received; Accepted | Vuls Exception Akraino CVE Vulnerability Exception Request | Akraino CVE Vulnerability Exception Request
Vuls: Accepted with exceptions show at: Release 4 Vuls Exception Request Lynis: Accepted with exceptions show at: Kube-Hunter: Accepted with exceptions show at: updated results link - 09-dec | Yes | 12/10 | |||
| 17 | Y | https://nexus.akraino.org/content/sites/logs/cmti/job/pcei-daily/ | PCEI Release 3 Datasheet | N/A | 11/19 | |||||||
| 18 | Scheduled at | Y | N | https://nexus.akraino.org/content/sites/logs/webank/job/ | Federated ML application at edge R4 Datasheet | Received Accepted | N/A | https://nexus.akraino.org/content/sites/logs/webank/job/FL_SCAN/results/ https://nexus.akraino.org/content/sites/logs/webank/job/FL_SCAN/lynis_fixed/
Vuls: Accepted with exceptions show at: Release 4 Vuls Exception Request
Lynis: Failed - errors sent to BP owner
Kube-Hunter: Exception granted: K8s not used by this BP. | Yes | 12/08 | ||
| 19 | Scheduled at Release 4 Review 2020-11-17 (Tue) 7 am Pacific | Y | N | https://nexus.akraino.org/content/sites/logs/futurewei/kubeedgees/ | Received; Accepted. | Yes https://nexus.akraino.org/content/sites/logs/futurewei/kubeedgees/58/results/ |
Vuls: Accepted with exceptions show at: Release 4 Vuls Exception Request
Lynis: Accepted Kube-Hunter: Exception granted: KubeEdge node is not on same subnet as the cloud node. Communication occurs through the websocket endpoint, so kube-hunter can't be used. | Yes | 11/17 | |||
| 20 | Y | |||||||||||
| 21 | Scheduled at Release 4 Review 2020-12-09 | Y | N | Received | 12/09 |
...