...
No. | Project Name | TSC Subgroup Release Status | Is this your first release | Going for Maturity Review? | CD Logs URL to be used for review (Column filled in by PTLs) | Link to executive one pager (editable doc format) (Column filled in by PTLs) | API Info Reporting Info Review (Column filled in by API Subcommittee) (note for PTLs – go here for steps to fill in project API info template) | BluVal Certification | Security Certification Provide link to Vuls, Lynis, and Kube-Hunter logs below. Pass/Fail Criteria: Steps To Implement Security Scan Requirements Exception requests should be filed at: https://wiki.akraino.org/display/AK/Akraino+CVE+Vulnerability+Exception+Request | Upstream Review (Column filled by Upstream Subcommittee and PTLs) (note PTL can go to Release Upstream Compliance to find details) | Date ready for TSC review (Column filled in by PTLs) | TSC Review Date (Column filled in by TSC) |
---|---|---|---|---|---|---|---|---|---|---|---|---|
1 | scheduled at | N | Y | https://nexus.akraino.org/content/sites/logs/parserlabs/r4/jobs/cvb/ | Form uploaded Scheduled for API subcommittee review 18Dec | https://nexus.akraino.org/content/sites/logs/parserlabs/r4/jobs/cvb/
Vuls: Accepted with exceptions show at: Release 4 Vuls Exception Request
Lynis: Failed - errors sent to BP owner Kube-Hunter: Exception granted: K8s not used by this BP. | Yes | 12/01 | ||||
2 | scheduled at | N | Y | https://nexus.akraino.org/content/sites/logs/parserlabs/r4/jobs/iec-type4/ | Form uploaded Scheduled for API subcommittee review 18Dec | https://nexus.akraino.org/content/sites/logs/parserlabs/r4/jobs/iec-type4/
Vuls: Failed - errors sent to BP owner
Lynis: Failed - errors sent to BP owner Kube-Hunter: Exception granted: K8s not used by this BP. | Yes | 12/01 | ||||
3 | Scheduled at Release 4 Review 2020-12-01 (Tues) 7 am Pacific | N | Mature | https://nexus.akraino.org/content/sites/logs/att/job/Install_REC_on_OpenEdge1/ | Received. Accepted | https://nexus.akraino.org/content/sites/logs/att/job/Bluval_Logs/results-11-27-2020.tar | https://nexus.akraino.org/content/sites/logs/att/job/Bluval_Logs/results-11-27-2020.tar
Vuls: Accepted with exceptions show at: Release 4 Vuls Exception Request
Lynis: - errors sent to BP owner Kube-Hunter: Does not appear to have run correctly - question sent to BP owner | |||||
4 | Scheduled at | N | N | ICN Master Baremetal Deployment Verifier | Received Accepted | https://nexus.akraino.org/content/sites/logs/intel/bluval_results/icn/master/20201210-010310/. | https://nexus.akraino.org/content/sites/logs/intel/bluval_results/icn/master/20201210-010310/ ICN R4 Test Document#BluValTesting Vuls: Accepted with exceptions show at: Lynis: Accepted with exceptions show at: k8s/conformance:
Kube-Hunter: Accepted
| Yes | 12/10 | 12/16 | ||
5 | scheduled at | N | N | ELIOT R4 IOT-Gateway Datasheet | Received Accepted | vuls exceptions Akraino CVE Vulnerability Exception Request |
Vuls: Accepted with exceptions show at: Lynis: Accepted with exceptions show at: Kube-Hunter: Accepted with exceptions show at: | 12/08 | ||||
6 | scheduled at | N | N | https://nexus.akraino.org/content/sites/logs/huawei/blueprints/uCPE/job/eliot-uCPE-deploy-k8s-centos-virtual-daily-master/534/ | ELIOT R4 - SD-WAN / WAN Edge / uCPE Data Sheet | Received Accepted | vuls exceptions Akraino CVE Vulnerability Exception Request |
Vuls: Accepted with exceptions show at: Lynis: Accepted with exceptions show at: Kube-Hunter: Accepted with exceptions show at: | Yes | 12/08 | ||
7 | Scheduled at Release 4 Review 2020-12-09 (Wed) 7:30am | N | Not Applicable | https://nexus.akraino.org/content/sites/logs/juniper/job/NC-Tungsten_Fabric/40/ | NetworkCloud-TF blueprint Datasheet.docx Uploaded | Form uploaded Scheduled for API subcommittee review 18Dec | Y |
Vuls: Need to provide vuls.log
Lynis: ISSUES that MUST be fixed or a more specific exception reason needs to be provided:
Following compilers found:
Kube-Hunter: In review Sukhdev Kapur has requested that the Release 3 exceptions be provided for Release 4 | Y | 12/09 | 12/09 | |
8 | Scheduled at | N | N | AWS footprint: GCP footprint: | Received Accepted | N [ Not passing as blueprint is based on OKD, not Kubernetes. So we run our own validation suite - https://logs.akraino.org/redhat-kni/bluval_results/blueprint-pae/20200505-104443/out.log ] | 12/09 | 12/09 | ||||
9 | Scheduled at | Y | N | Mgmt Hub logs: IE logs: | Received Accepted | |||||||
10 | Y | N | https://nexus.akraino.org/content/sites/logs/micromec | Akraino R3 MicroMEC blueprint datasheet.docx | Received | N/A | ||||||
11 | N | Y | https://nexus.akraino.org/content/sites/logs/baidu/job/aiedge-otestack-master-deploy/ https://nexus.akraino.org/content/sites/logs/baidu/job/aiedge-otestack-master-validation/ | N/A | 06/02 | |||||||
12 | Y | N | ||||||||||
13 | Y | N | https://nexus.akraino.org/content/sites/logs/tencent/job/5g-mec-cloud-gaming-CD/15/ | 5G MEC Rel 3 Datasheet | Received | N/A | 06/03 | |||||
14 | N | N | https://nexus.akraino.org/content/sites/logs/ampere/job/akraino_arm_anbox_test/6/ | 01/15 | ||||||||
15 | Scheduled at | N | N | https://nexus.akraino.org/content/sites/logs/bytedance/job/run-install-bluefield-fs/ https://nexus.akraino.org/content/sites/logs/bytedance/job/run-install-ovs-dpdk/ | NA (First Release) | Release document is still for R3 | 06/04 | |||||
16 | scheduled at | N | N | https://nexus.akraino.org/content/sites/logs/huawei/blueprints/ealt-edge/ | Received; Accepted | Vuls Exception Akraino CVE Vulnerability Exception Request | Akraino CVE Vulnerability Exception Request
Vuls: Accepted with exceptions show at: Release 4 Vuls Exception Request Lynis: Accepted with exceptions show at: Kube-Hunter: Accepted with exceptions show at: updated results link - 09-dec | Yes | 12/10 | |||
17 | Y | https://nexus.akraino.org/content/sites/logs/cmti/job/pcei-daily/ | PCEI Release 3 Datasheet | N/A | 11/19 | |||||||
18 | Scheduled at | Y | N | https://nexus.akraino.org/content/sites/logs/webank/job/ | Federated ML application at edge R4 Datasheet | Received Accepted | N/A | https://nexus.akraino.org/content/sites/logs/webank/job/FL_SCAN/results/ https://nexus.akraino.org/content/sites/logs/webank/job/FL_SCAN/lynis_fixed/
Vuls: Accepted with exceptions show at: Release 4 Vuls Exception Request
Lynis: Accepted with exceptions show at: https://nexus.akraino.org/content/sites/logs/webank/job/FL_SCAN/lynis_fixed2/ Kube-Hunter: Exception granted: K8s not used by this BP. | Yes | 12/08 | ||
19 | Scheduled at Release 4 Review 2020-11-17 (Tue) 7 am Pacific | Y | N | https://nexus.akraino.org/content/sites/logs/futurewei/kubeedgees/ | Received; Accepted. | Yes https://nexus.akraino.org/content/sites/logs/futurewei/kubeedgees/58/results/ |
Vuls: Accepted with exceptions show at: Release 4 Vuls Exception Request
Lynis: Accepted Kube-Hunter: Exception granted: KubeEdge node is not on same subnet as the cloud node. Communication occurs through the websocket endpoint, so kube-hunter can't be used. | Yes | 11/17 | |||
20 | Y | |||||||||||
21 | Scheduled at Release 4 Review 2020-12-09 | Y | N | Received | 12/09 |
...