Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The requirements for the blueprints to be included in release 5 6 are as follows:

Depending upon the situation, the PTLs are suggested to meet the following criteria - 

...

If the blueprint is already part of release 5 and you want this to be included in release 56, please follow the following steps:

...

IEC Type 4: AR/VR oriented Edge Stack for Integrated Edge Cloud (IEC) Blueprint Family

Bart Dong

Thor Chin3

  

lynis results: Accepted

vuls results: Accepted

kube-hunter results: Accepted

httpshuaweijob/Eliot-aio-log/19/ELIOT R6 IoT-Gateway DatasheetMicro-MEC
Ferenc Székely https:/ysemiv1/ak_results/httpsysemiv1/validation_results_v2/06 ysemiv1/validation_results_v3/ ysemi/v1/validation_results_v4

 

nexuscontentsiteslogs/ysemi/job/v1/validation_results_v5/

 

IEC Type socnoc - Akraino - Akraino Confluence09

pod:

CAP_NET_RAW Enabled
CAP_NET_RAW is used to open a raw socket and is used by ping. If this is not required CAP_NET_RAW MUST be removed.wwwsuse.com/c/demystifying-containers-part-iv-container-security/
KHV043 - Cluster Health Disclosure
Disable --enable-debugging-handlers kubelet flag.
KHV044 - Privileged Container
Minimize the use of privileged containers. Use Pod Security Policies to enforce using privileged: false policy.

Revised API info form sent to Oleg per his requirements (see API Subcommittee meeting minutes for details)

Note - PCEI Blueprint R6 API documentation located here (as of ):Qy0wAw

Smart Cities R6 Upstream.

Approved

No.Project NameTSC Subgroup Release StatusIs this your first release 

Blue Print Stage

  • Self-Certify
  • Incubation
  • Mature
  • Core

CD Logs URL to be used for review

(Column filled in by PTLs)

How to: Push Logs to Nexus

Jenkins Master for Private Lab

Jenkins Peering Guide

Example: 

KubeEdge BP Test Documents

Link to executive one pager

(editable doc format)

(Column filled in by PTLs)

API Info Reporting Review

(Column filled in by API Subcommittee)

(note for PTLs – go here for steps to fill in project API info form)

BluVal

BlueVal Logs or Manual Logs

Bluval User Guide


Security

Certification

(TO be filled by Security Subcommittee)

Pass/Fail Criteria:  Steps To Implement Security Scan Requirements

Exception requests should be filed at:

Release 6: Akraino CVE and KHV Vulnerability Exception Request

Upstream Review (Column filled by Upstream Subcommittee and PTLs)


(note PTL can go to Release 6 Upstream Review Status to find details)

Date ready for TSC review

(Column filled in by PTLs)

 TSC Review Date

(Column filled in by TSC)


1NoMature2
NoMature

No API changes expected from R5, per Bart Dong in TSC meeting . Waiting for e-mail from Bart to confirm this

https://nexus.akraino.org/content/sites/logs/parserlabs/r4/cvb/


https://nexus.akraino.org/content/sites/logs/parserlabs/r4/4NoIncubationICN R6 Datasheet

No API changes from R5, per e-mail from Kural Ramakrishnan

BluVal ResultsApproved

 

5NoIncubation

 

6NoIncubationApproved


2
NoMaturehttps://nexus.akraino.org/content/sites/logs/parserlabs/r4/cvb/

No API changes expected from R5, per Bart Dong in TSC meeting . Waiting for e-mail from Khemendra Kumar Bart to confirm this

Bart confirmed by e-mail  


Info for ELIOT IOTGateway APIs:
https://wikinexus.akraino.org/display/AK/ELIOT+R6+IOTGateway+API+documentation

https://nexus.akraino.org/content/sites/logs/huawei/job/Eliot-security-test/31/results/

lynis results: Accepted

vuls results: Accepted

kube-hunter results:

pod:

KHV043 - Cluster Health Disclosure
Disable --enable-debugging-handlers kubelet flag.
KHV044 - Privileged Container
Minimize the use of privileged containers. Use Pod Security Policies to enforce using privileged: false policy.

Approved7NOIncubationELIOT R6 - SD-WAN / WAN Edge / uCPE Data Sheet8NoMature9NoIncubation10NoIncubation1112Noincubation

No API changes expected from R5, per Liya Yu in TSC meeting . Waiting for e-mail from Liya to confirm this.

Confirmed in e-mail sent by Liya  

13No
  • Incubation

No API changes from R5, per e-mail from ZhuMing Zhang  

https://nexus.akraino.org/content/sites/logs/fate/job/I-VICS/5/No new features or bugs have been added after R4 release14NoIncubation15NoIncubationhttps://nexus.akraino.org/content/sites/logs/ysemi/job/v1/upload/iec-tox-verify-master_317/https://wiki.akraino.org/download/attachments/24084647/IEC%20Release3-IEC%20Type3-datasheet.docx?version=5&modificationDate=1591272863000&api=v2content/sites/logs/parserlabs/r4/Approved


3














4
NoIncubationICN R6 Datasheet

No API changes from R5, per e-mail from Kural Ramakrishnan

BluVal Results

  

lynis results: Accepted

vuls results: Accepted

kube-hunter results: Accepted


Approved

 



5

Status changed to end-of-life (EOL), not participating in R6


NoEOL

No API changes from R5, per e-mail from Salvador Fuentes  



Approved


6
NoIncubationhttps://nexus.akraino.org/content/sites/logs/huawei/job/Eliot-aio-log/19/

No API changes from R5, per e-mail from Khemendra Kumar 

Info for ELIOT IOTGateway APIs:

https://wiki.akraino.org/display/AK/ELIOT+R6+IOTGateway+API+documentation

https://nexus.akraino.org/content/sites/logs/huawei/job/Eliot-security-test/31/results/

lynis results: Accepted

vuls results: Accepted

kube-hunter results: Accepted

Approved


7
NOIncubation
ELIOT R6 - SD-WAN / WAN Edge / uCPE Data Sheet

No API changes from R5, per e-mail from Khemendra Kumar  



Approved


8
NoMature










9
NoIncubation








10
NoIncubation










11

Micro-MEC

Ferenc Székely







 







12
Noincubationhttps:/

API form uploaded by Davy Zhang , scheduled for review at API subcommittee meeting

Approved by API subcommittee at weekly meeting  

/nexus.akraino.org/content/sites/logs/baidu/job/Video Security Monitoring R6 Datasheet

No API changes expected from R5, per Liya Yu in TSC meeting https://nexus.akraino.org/content/sites/logs/

. Waiting for e-mail from Liya to confirm this.

Confirmed in e-mail sent by Liya  

https://nexus.akraino.org/content/sites/logs/baidu/job/security_scan/aiedge/5/results/
Approved based on R5 Release notes.


13
No
  • Incubation
https://wiki.akraino.org/download/attachments/

  

lynis results:

Performing test ID SSH-7440 (Check OpenSSH option: AllowUsers and AllowGroups): FAILED
2022-05-12 12:34:57 Result: AllowUsers is not set
2022-05-12 12:34:57 Result: AllowGroups is not set
2022-05-12 12:34:57 Result: SSH has no specific user or group limitation. Most likely all valid users can SSH to this machine.

Result: sysctl key fs.suid_dumpable: FAILED

Result: sysctl key kernel.dmesg_restrict: FAILED

Result: sysctl key net.ipv4.conf.default.accept_source_route: FAILED

Performing test ID HRDN-7220 (Check if one or more compilers are installed): FAILED
2022-05-12 12:35:48 Result: found installed compiler. See top of logfile which compilers have been found or use /bin/grep to filter on 'compiler'
2022-05-12 12:34:14 Found known binary: as (compiler) - /usr/bin/as
2022-05-12 12:34:14 Found known binary: cc (compiler) - /usr/bin/cc
2022-05-12 12:34:14 Found known binary: g++ (compiler) - /usr/bin/g++
2022-05-12 12:34:14 Found known binary: gcc (compiler) - /usr/bin/gcc
2022-05-12 12:34:23 Found package: device-tree-compiler (version: 1.4.5-3)
2022-05-12 12:34:30 Found package: protobuf-compiler (version: 3.0.0-9.1ubuntu1)

vuls results:

CVE-2017-12194: failed in scan
CVE-2018-12892: failed in scan
CVE-2019-17113: failed in scan
CVE-2019-19948: failed in scan
CVE-2019-19949: failed in scan

kube-hunter results: Accepted

Approved28970342/Intelligent%20Vehicle-Infrastructure%20Cooperation%20System%28I-VICS%29%20Datasheet.docx?version=2&modificationDate=1613872984000&api=v2

No API changes from R5, per e-mail from ZhuMing Zhang  

https://nexus.akraino.org/content/sites/logs/fate/job/I-VICS/5/No new features or bugs have been added after R4 releaseYes, with recommendation.


14
NoIncubation


No API changes from R5, per e-mail from Eagan Fu  



Approved based on previous release notes


15
NoMaturehttps://nexus.akraino.org/content/sites/logs/ysemi/job/v1/upload/iec-tox-verify-master_334/https://wiki.akraino.org/download/attachments/24084647/IEC%20Release3-IEC%20Type3-datasheet.docx?version=5&modificationDate=1591272863000&api=v2

API form uploaded by Davy Zhang , scheduled for review at API subcommittee meeting

Approved by API subcommittee at weekly meeting  

 

https://nexus.akraino.org/content/sites/logs/ysemi/job/v1/validation_results_v5/

 

https://nexus.akraino.org/content/sites/logs/ysemi/job/v1/validation_results_v6/ 

  

lynis results: Accepted

vuls results: Accepted

kube-hunter results: Accepted

Approved


1616
NoIncubationhttps://dev.socnoc.cn/#/homenexus.akraino.org/content/sites/logs/socnoc/job/baseOS/1/SOCNOC Release 6 One pag - Akraino - Akraino Confluence

No API changes expected from R5, per Leo Li in TSC meeting 11 May .   Leo confirmed by mail .

Waiting for e-mail from Leo to confirm this

Leo confirmed by mail  



https://nexus.akraino.org/content/sites/logs/socnoc/job/security_scan/




17
NoIncubationhttps://nexus.akraino.org/content/sites/logs/huawei/job/Ealtedge-aio-log/15/EALTEDGE Release 6 Datasheet

No API changes from R5, per e-mail from Khemendra Kumar  

Info for EALTEdge APIs:

https://wiki.akraino.org/pages/viewpage.action?pageId=53478299

https://nexus.akraino.org/content/sites/logs/huawei/job/Ealt-edge-security-test/26/results/

 

lynis results: Accepted

vuls results: Accepted

kube-hunter results:

 Accepted


Approved


18


TSC 2022-05-12 (Thursday) 7:00 am PacificNoIncubationhttps://nexus.akraino.org/content/sites/logs/cmti/job/pcei-daily/https://wiki.akraino.org/x/SC0wAw

Revised API info form sent to Oleg per his requirements (see API Subcommittee meeting minutes for details)


Note - PCEI Blueprint R6 API documentation located here (as of ):

https://wiki.akraino.org/x/Qy0wAw

 

18TSC 2022-05-12 (Thursday) 7:00 am PacificNoIncubationcmtipcei-daily/https://wiki.akraino.org/x/SC0wAw

 

lynis results: Accepted

vuls results: Accepted

kube-hunter results: Accepted


Approved per the upstream review


https://wiki.akraino.org/x/

 

Apr 2022  


19

TSC 2022-03-17 (Thursday) 7:00 am Pacific

No

Mature

https://nexus.akraino.org/content/sites/logs/pceifate/job/r6Fate_test/v115/Akraino R6 Federated ML blueprint datasheet.docx

No API changes from R5, per e-mail from HaiHui Wang

 

lynis results: Accepted

vuls results: Accepted

kube-hunter results: Accepted

Approved per the upstream review

 

 

Incubation Level Review Results:

 

VulsAccepted with exceptions shown at:

Release 5 Vuls Exception Request

__________________________________________________________

LynisAccepted

_____

19

TSC 2022-03-17 (Thursday) 7:00 am Pacific

No
  • Mature
https://nexus.akraino.org/content/sites/logs/fate/job/Fate_test/15/Akraino R6 Federated ML blueprint datasheet.docx

No API changes from R5, per e-mail from HaiHui Wang

https://nexus.akraino.org/content/sites/logs/fate/fml/5/

Incubation Level Review Results:

 

VulsAccepted with exceptions shown at:

Release 5 Vuls Exception Request

_____________________________________________________

_____

LynisAccepted

__________________________________________________________

Kube-Hunter:  Exception granted:  K8s not used by this BP.

 
20NoIncubation21

Private LTE/5G ICN Blueprint

Prem Sankar G

has been merged with PCEI blueprint

Kube-Hunter:  Exception granted:  K8s not used by this BP.

 







20
NoIncubation








21

Private LTE/5G ICN Blueprint

Prem Sankar G

Has been merged with PCEI blueprint













22
YesIncubation








23

Smart Cities

Olivier Bernard Cindy Xing Alexander Su (alexander@nexcom.com)

Jason Wen

Jack Liu

TSC 2022-05-12 (Thursday) 7:00 am Pacific

NoIncubationhttps://nexus.akraino.org/content/sites/logs/myais/job/smartcities/8

No API changes expected from R5, per TSC meeting discussion . Waiting for e-mail from Jason or Jack to confirm this.

Update - API form uploaded by Jason , scheduled for review at API subcommittee meeting  

Approved by API subcommittee at weekly meeting

https://nexus.akraino.org/content/sites/logs/myais/validation/1/

 

https://nexus.akraino.org/content/sites/logs/myais/validation/2

fix lynis issue, in pb use k3s, add kube-hunter test.

 

https://nexus.akraino.org/content/sites/logs/myais/validation/3

fix kube-hunter issue ,except CAP_NET_RAW.

 

 

lynis results: Accepted

vuls results: Accepted

kube-hunter results:  Accepted

Smart Cities R6 Upstream.


Approved

 

 


24TSC 2022-06-14 (Tuesday) 7:00 am PacificNoIncubationNexus repository where we push CD logs via a privately configured Jenkins

Executive One Pager - R6 (MEC-based)

API info form uploaded by Asif, API subcommittee to review  


Approved by API subcommittee  



Approved

 



25


22YesIncubation23

Smart Cities

Olivier Bernard Cindy Xing Alexander Su (alexander@nexcom.com)

Jason Wen

Jack Liu

TSC 2022-05-12 (Thursday) 7:00 am Pacific

NoIncubation

https://nexus.akraino.org/content/sites/logs/

myais/job/smartcities/8

production/vex-yul-akraino-jenkins-prod-1/iec-tox-verify-master/

IEC Type 2 Smart Cities R6 Executive One Pager - Akraino - Akraino Confluence

No API changes

expected

from R5, per

TSC meeting discussion . Waiting for

e-mail from

Jason or Jack to confirm this.

Update - API form uploaded by Jason , scheduled for review at API subcommittee meeting  

Approved by API subcommittee at weekly meeting

Muhammad Hamza   

https://

nexus

jenkins.akraino.org/

content

view/

sites

iec/

logs/myais/validation/1/ 

job/bluval-daily-master/

https://

nexus

sonarcloud.

akraino.org/content/sites/logs/myais/validation/2

fix lynis issue, in pb use k3s, add kube-hunter test.

 

io/project/overview?id=iec

https://nexus.akraino.org/content/sites/logs/

myais/validation/3

fix kube-hunter issue ,except CAP_NET_RAW.

 

 

lynis results: Accepted

vuls results: Accepted

kube-hunter results:  Accepted

 

 

production/vex-yul-akraino-jenkins-prod-1/iec-tox-verify-master/334/


Approved



24NoIncubation25NoIncubation26
No









27
NoIncubation








28


Yes

Incubation

BluVal:

https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt-bluval/2/

https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt-lynis/3/

https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt-vuls/2/

Other:

https://nexus.akraino.org/content/sites/logs/fujitsu/job/edgex-install/

https://nexus.akraino.org/content/sites/logs/fujitsu/job/edgex-lora/

https://nexus.akraino.org/content/sites/logs/fujitsu/job/lfedge-cluster/

https://nexus.akraino.org/content/sites/logs/fujitsu/job/lfedge-install/

SDT Datasheet.docx

Per e-mail from Colin Peters  , blueprint consumes Kubernetes and EdgeX APIs. They are uploading API info form

API info form uploaded  

Scheduled for review by API subcommittee review 

Reviewed and approved by API subcommittee  

https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt-bluval/2/

https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt-lynis/3/

https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt-vuls/2/

 

sdt-lynis results: Accepted

sdt-vuls results: Accepted

All Exceptions are granted

Release 6: Akraino CVE Vulnerability Exception Request

Smart Data Transaction for CPS Release Notes

Approved

2022/04/132022/04/14
29
YesIncubation


https://nexus.akraino.org/content/sites/logs/fujitsu/job/robot-family/sses-lynis/

https://nexus.akraino.org/content/sites/logs/fujitsu/job/robot-family/sses-lynis/

Robot basic architecture based on SSES One Pager

Per e-mail from Inoue Reo , blueprint does not export or consume APIs. They are uploading an API info form to indicate this, along with comments about future / possible API plans

Inoue Reo uploaded an API info form . Review by API subcommittee is scheduled for  

Reviewed and approved by API subcommittee

https://nexus.akraino.org/content/sites/logs/fujitsu/job/robot-family/sses-lynis/

https://nexus.akraino.org/content/sites/logs/fujitsu/job/robot-family/sses-lynis/









  

robot Lynis results: Accepted 

iotgateway Lynis results: Accepted   

robot vuls resultsAccepted
All exceptions are granted

iotgateway vuls resultsAccepted
All exceptions are granted

Release 6: Akraino CVE Vulnerability Exception Request

Approved per the BP upstream review

2022/04/132022/04/14