...
The requirements for the blueprints to be included in release 5 6 are as follows:
Depending upon the situation, the PTLs are suggested to meet the following criteria -
...
If the blueprint is already part of release 5 and you want this to be included in release 56, please follow the following steps:
...
- High Level Overall Requirements
- CI, Blueprint Validation Lab Sub-Committee Requirements
- Present Pod Topology document.
- Peering w/LF Jenkins - (Note: peering is an optional requirement)
- Push logs through Nexus. (Note: This is mandatory for Incubation self-certified and Maturity)
Releases >= 1.0 (e.g. 1.xyz, 2.xyz etc) are reserved for BP that have been approved as Core by the TSC (considered ‘GA’ quality).
Releases <1.0 (e.g. 0.xyz etc) are reserved for projects that have not reached the Akraino Core level (i.e. anything that is in Incubation (‘alpha’ quality) and Mature (‘beta’ quality).
Enforcement of Static Code Analysis through SonarCloud (SaaS), WIP LF Release Engineering & Security Subcommittee. (Note: This is an optional requirement for Incubation self certified and mandatory for Maturity)
- Security Sub-Committee Requirements, please fill in Release 4 Blueprint Scanning Status. Instructions can be found at: Steps To Implement Security Scan Requirements
- Blueprint Validation Framework Feature Project Requirements See TSC meeting.
- Projects going for Maturity Review please refer to Maturity Criteria defined by Process subcommittee BP Graduation Review Processes and Criteria (Note this is not required for self certification, only required for maturity review)
- Documentation Sub-Committee Requirements
User Documents:
The following documentation with the following sections called out should be on the wiki with links to rest of the sections as applicable. We prefer that the entire doc is on the wiki but we do not require it.
Architecture - Blue print Overview and overall architecture
Release Notes – Summary and What is released
Installation Doc – Introduction and deployment architecture
Test Document – Introduction and Overall Test Architecture
Developer Documents:
We are also recommending that Blueprints include via ReadtheDocs, with each Blue Print given their own repo, but we do not require it
- API Sub-Committee Requirements (Note: See this link for requirements: Blueprint Projects API Reporting Requirements)
- Community Sub-Committee Requirements (Note: no mandatory requirements for Incubation self-certified or Maturity)
- Process Sub-Committee Requirements (Note: See the Process Sub Committee page defining the TSC approved Maturity review process and requirements for those requesting inclusion in R3 at Mature level BP Graduation Review Processes and Criteria)
- Upstream Sub-Committee Requirements (Note: no mandatory requirements for Incubation self-certified or Maturity). Here is the R4 R6 release Upstream BP review status Release 6 Upstream Review Status, Release Upstream Compliance. Also please refer to the page for the R4 R6 requirement as well.
Blue Prints Participating in Release 6
...
| No. | Project Name | TSC Subgroup Release Status | Is this your first release | Blue Print Stage
| CD Logs URL to be used for review (Column filled in by PTLs) | Link to executive one pager (editable doc format) (Column filled in by PTLs) | API Info Reporting Review (Column filled in by API Subcommittee) (note for PTLs – go here for steps to fill in project API info form) | BluValCertification BlueVal Logs or Manual Logs | Security CertificationProvide link to Vuls, Lynis, and Kube-Hunter logs below. (TO be filled by Security Subcommittee) Pass/Fail Criteria: Steps To Implement Security Scan Requirements Exception requests should be filed at: Release 56: Akraino CVE and KHV Vulnerability Exception Request | Upstream Review (Column filled by Upstream Subcommittee and PTLs) (note PTL can go to Release 5 BP/Feature 6 Upstream Review Status to find details) | Date ready for TSC review (Column filled in by PTLs) | TSC Review Date (Column filled in by TSC) | |||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | No | Mature | https://nexus.akraino.org/content/sites/logs/parserlabs/r4/cvb/ | https://nexus.akraino.org/content/sites/logs/parserlabs/r4/ | Approved | ||||||||||||||||||||||||||||||||||||||||||||
| 2 | 2 | IEC Type 4: AR/VR oriented Edge Stack for Integrated EdgeNo | Mature | 3 | https://nexus.akraino.org/content/sites/logs/parserlabs/r4/cvb/ | No API changes expected from R5, per Bart Dong in TSC meeting . Waiting for e-mail from Bart to confirm this Bart confirmed by e-mail | https:// | 4 | No | Incubation | 5 | No | Incubation |
| 6 | No | Incubation | 7 | NO | Incubation | https://nexus.akraino.org/content/sites/logs/huaweiparserlabs/job/eliot-uCPE-build/15/home/jenkins/log/ | ELIOT R5 - SD-WAN / WAN Edge / uCPE Data Sheet | 8 | r4/ | Approved | ||||||||||||||||||||||||
| 3 | |||||||||||||||||||||||||||||||||||||||||||||||||
| 4 | No | Incubation | ICN R6 Datasheet | No API changes from R5, per e-mail from Kural Ramakrishnan | BluVal Results |
lynis results: Accepted vuls results: Accepted kube-hunter results: Accepted | Approved |
| |||||||||||||||||||||||||||||||||||||||||
| 5 | No | EOL | No API changes from R5, per e-mail from Salvador Fuentes | Approved | |||||||||||||||||||||||||||||||||||||||||||||
| 6 | No | Incubation | TSC 2021-08-12 (Thursday) 7:00 am Pacific | No | Incubation | https://nexus.akraino.org/content/sites/logs/juniper/validation-2021/ | Blueprint Data Sheet | Not required as there is no change from Release 4 | Not required as there is no change from Release 4 | Completed by 8/10/2021 | 08/12/2021 | 9 | No | Incubation | https://jenkins.akraino.org/job/kni-blueprint-pae-verify-deploy-gcp/69/ | Akraino R5 blueprint Datasheet_ KNI PAE.odt | https://nexus.akraino.org/content/sites/logs/redhat-kni/bluval_results/ Incubation Level Review Results: Vuls: Accepted with exception. The KNI Provider Access Edge blueprint uses OpenShift as its k8s distribution, which is deployed on Red Hat CoreOS, an immutable OS that is not supported by Vuls. __________________________________________________________ Lynis: Accepted ____________________________________________________________ Output manually generated, located at: Release 5 Security Scan Manual Logs Kube-Hunter: Cluster: Accepted Pod: Accepted with exceptions shown at: | Completed by 8/10/2021 | 9/16/2021huawei/job/Eliot-aio-log/19/ | No API changes from R5, per e-mail from Khemendra Kumar Info for ELIOT IOTGateway APIs: | https://nexus.akraino.org/content/sites/logs/huawei/job/Eliot-security-test/31/results/ | lynis results: Accepted vuls results: Accepted kube-hunter results: Accepted | Approved | ||||||||||||||||||||||||||
| 7 | NO | Incubation | ELIOT R6 - SD-WAN / WAN Edge / uCPE Data Sheet | No API changes from R5, per e-mail from Khemendra Kumar | Approved | ||||||||||||||||||||||||||||||||||||||||||||
| 8 | No | Mature | |||||||||||||||||||||||||||||||||||||||||||||||
| 9 | No | Incubation | |||||||||||||||||||||||||||||||||||||||||||||||
| 10 | No | Incubation | |||||||||||||||||||||||||||||||||||||||||||||||
| 11 |
| ||||||||||||||||||||||||||||||||||||||||||||||||
| 12 | No | incubation | Management Hub: https://logsnexus.akraino.org/production/vex-yul-akraino-jenkins-prod-1/kni-blueprint-management-hub-verify-deploy-gcp/19/Industrial Edge:content/sites/logs/baidu/job/ | Video Security Monitoring R6 Datasheet | No API changes expected from R5, per Liya Yu in TSC meeting https:// content/sites/logs/baidu/job/. Waiting for e-mail from Liya to confirm this. Confirmed in e-mail sent by Liya | https://nexus.akraino.org/content/sites/logs/redhat-kni/bluval_results/ Incubation Level Review Results: Vuls: Accepted with exception. The KNI Provider Access Edge blueprint uses OpenShift as its k8s distribution, which is deployed on Red Hat CoreOS, an immutable OS that is not supported by Vuls. __________________________________________________________ Lynis: Accepted ____________________________________________________________ Output manually generated, located at: Release 5 Security Scan Manual Logs Kube-Hunter: Cluster: Accepted Pod: Accepted with exceptions shown at: | Completed by 8/10/2021 | 9/16/2021 | 11 | Micro-MEC12 | baidu/job/security_scan/aiedge/5/results/ | Approved based on R5 Release notes. | |||||||||||||||||||||||||||||||||||||
| 13 | No |
| https://wiki.akraino.org/download/attachments/28970342/Intelligent%20Vehicle-Infrastructure%20Cooperation%20System%28I-VICS%29%20Datasheet.docx?version=2&modificationDate=1613872984000&api=v2 | No API changes from R5, per e-mail from ZhuMing Zhang | TSC 2021-09-21 (Tuesday) 7:00 am Pacific | No | incubation | https://nexus.akraino.org/content/sites/logs/baidu/job/aiedge/6/ | https://nexus.akraino.org/content/sites/logs/baidu/job/security_scan/aiedge/1 | Incubation Level Review Results:
Vuls: All vulnerabilities >9.0 must be fixed or verification provided that no patch currently exists. CVE-2017-18017 10.0 CVE-2018-15686 10.0 CVE-2019-14901 10.0 CVE-2017-15670 9.8 CVE-2017-15804 9.8 CVE-2018-1000007 9.8 CVE-2018-1000120 9.8 CVE-2018-11236 9.8 CVE-2018-1126 9.8 CVE-2018-12910 9.8 CVE-2018-15688 9.8 CVE-2018-16402 9.8 CVE-2018-18074 9.8 CVE-2018-18751 9.8 CVE-2018-20060 9.8 CVE-2018-6485 9.8 CVE-2019-10126 9.8 CVE-2019-10160 9.8 CVE-2019-14895 9.8 CVE-2019-16746 9.8 CVE-2019-17041 9.8 CVE-2019-17042 9.8 CVE-2019-17133 9.8 CVE-2019-5482 9.8 CVE-2019-9636 9.8 CVE-2016-7913 9.3 CVE-2017-15126 9.3 CVE-2017-16997 9.3 CVE-2017-9725 9.3 CVE-2018-10897 9.3 CVE-2019-12735 9.3 CVE-2018-1000122 9.1 CVE-2018-1000301 9.1 CVE-2019-9948 9.1 CVE-2016-10745 9.0 CVE-2018-19788 9.0 CVE-2019-14287 9.0 ____________________________________________________________ Lynis: Accepted ____________________________________________________________ Kube-Hunter: Pod: The following vulnerability must be corrected.
Cluster: Accepted | 9/20/2021 | 9/21/2021 | 13 | No |
| https://nexus.akraino.org/content/sites/logs/fate/job/I-VICS/5/ | Intelligent Vehicle-Infrastructure Cooperation System(I-VICS) Datasheet | https://nexus.akraino.org/content/sites/logs/fate/job/I-VICS/5/ | No new features or bugs have been added after R4 release | Missing Upstream information | 14 | No | Incubation | https://nexus.akraino.org/content/sites/logs/tencent/job/tencent_5g_mec/ | Completed by 8/24/2021 | 15 | No | Incubation | 16 | No | Incubation | https://nexus.akraino.org/content/sites/logs/ | cmtifate/job/ | iec5_r4/15/I-VICS/5/ | No new features or bugs have been added after R4 release | Yes, with recommendation. | |||||||||||||
| 14 | No | Incubation | No API changes from R5, per e-mail from Eagan Fu | Approved based on previous release notes | |||||||||||||||||||||||||||||||||||||||||||||
| 15 | Bluval Exception has been accepted for the project. | R5 Release Notes of IEC Type 5: SmartNIC 17 | No | No | MatureIncubation | https://nexus.akraino.org/content/sites/logs/huaweiysemi/job/ealt-edge-build/51/home/jenkins/log/EALTEDGE Release 5 Datasheetv1/upload/iec-tox-verify-master_334/ | https://nexuswiki.akraino.org/contentdownload/sitesattachments/logs/huawei/job/ealt-security-validation-build/19/results/ Akraino BluVal Exception Request 24084647/IEC%20Release3-IEC%20Type3-datasheet.docx?version=5&modificationDate=1591272863000&api=v2 | API form uploaded by Davy Zhang , scheduled for review at API subcommittee meeting Approved by API subcommittee at weekly meeting |
https://nexus.akraino.org/content/sites/logs/ysemi/job/v1/validation_results_v5/
https://nexus.akraino.org/content/sites/logs/ysemi/job/v1/validation_results_v6/ |
lynis results: Accepted vuls results: Accepted kube-hunter results: Accepted | Approved | ||||||||||||||||||||||||||||||||||||||
| 16 | No | Incubation | https://nexus.akraino.org/content/sites/logs/socnoc/job/baseOS/1/ | SOCNOC Release 6 One pag - Akraino - Akraino Confluence | No API changes expected from R5, per Leo Li in TSC meeting . Waiting for e-mail from Leo to confirm this Leo confirmed by mail | https://nexus.akraino.org/content/sites/logs/socnoc/job/security_scan/ | |||||||||||||||||||||||||||||||||||||||||||
| 17 | No | Incubation | Incubation Level Review Results:
Vuls: Accepted with exceptions shown at: Release 5 Vuls Exception Request ____________________________________________________________ Lynis: Accepted ____________________________________________________________ Kube-Hunter: Cluster: Accepted Pod: Accepted with exceptions shown at: | 18 | TSC 2021-08-10 (Tuesday) 7:00 am Pacific | No | https://nexus.akraino.org/content/sites/logs/cmtihuawei/job/pcei-daily/Ealtedge-aio-log/15/ | EALTEDGE Release 6 Datasheet | https://wiki.akraino.org/x/lwHkAg No API changes from R5, per e-mail from Khemendra Kumar
| https://nexus.akraino.org/content/sites/logs/pceihuawei/job/r5/v2/ Fixed: fs.suid_dumpable net.ipv4.conf.default.accept_source_route /Ealt-edge-security-test/26/results/ |
lynis results: Accepted vuls results: Accepted kube-hunter results: Accepted | Approved | |||||||||||||||||||||||||||||||||||||
| 18 | TSC 2022-05-12 (Thursday) 7:00 am Pacific | No | Incubation | https://nexus.akraino.org/content/sites/logs/cmti/job/pcei-daily/ | https://wiki.akraino.org/x/SC0wAw | Revised API info form sent to Oleg per his requirements (see API Subcommittee meeting minutes for details) Note - PCEI Blueprint R6 API documentation located here (as of ): |
lynis results: Accepted vuls results: Accepted kube-hunter results: Accepted | Incubation Level Review Results:
Vuls: Accepted with exceptions shown at: Release 5 Vuls Exception Request ____________________________________________________________ Lynis: Accepted with exceptions shown at: Release 5 Blueprint Scanning Status ____________________________________________________________ Kube-Hunter: Cluster: Accepted Pod: Accepted with exceptions shown at: | PCEI R5 Release Notes Approved per the upstream review Completed by 8/6/2021 |
|
| ||||||||||||||||||||||||||||||||||||||
| 19 | 20210826 | No | Incubation Mature | https://nexus.akraino.org/content/sites/logs/fate/job/Fate_test/15/ | Akraino R6 Federated ML blueprint datasheet.docx | No API changes from R5, per e-mail from HaiHui Wang | Incubation Level Review Results:
Vuls: Accepted with exceptions shown at: Release 5 Vuls Exception Request __________________________________________________________ Lynis: Accepted __________________________________________________________ Kube-Hunter: Exception granted: K8s not used by this BP. | federated ML Release Notes R6 Federated ML application at edge Release Notes Completed by 8/30/2021 | |||||||||||||||||||||||||||||||||||||||||
| 20 | @Alexande | 21 | TSC 2021-08-03 (Tuesday) 7:00 am Pacific | No | Incubation | https://nexus.akraino.org/content/sites/logs/juniper/job/Private%205G%20BP/ | Akraino Private LTE/5G BP Datasheet | Completed by 8/10/2021No | Incubation | ||||||||||||||||||||||||||||||||||||||||
| 21 | |||||||||||||||||||||||||||||||||||||||||||||||||
| 22 | Yes | Incubation | |||||||||||||||||||||||||||||||||||||||||||||||
| 23 | 20210921 Tuesday | YesNo | Incubation | https://nexus.akraino.org/content/sites/logs/myais/job/parsecsmartcities/10/8 | Smart Cities R5 Executive One PagerR6 Executive One Pager - Akraino - Akraino Confluence | No API changes expected from R5, per TSC meeting discussion . Waiting for e-mail from Jason or Jack to confirm this. Update - API form uploaded by Jason , scheduled for review at API subcommittee meeting Approved by API subcommittee at weekly meeting
| 2 fix lynis issues.
| Smart Cities R5 Security Certification Incubation Level Review Results:
Vuls: Accepted with exceptions shown at: Release 5 Vuls Exception Request __________________________________________________________ Lynis: Accepted __________________________________________________________ Kube-Hunter: Exception granted: K8s not used by this BP for R5. However, in R6 it is planning to use K3s. | Completed by 9/30/2021 R5 Smart Cities BP release notes: Smart Cities R5 Release Notes | 9/20/2021 |
fix lynis issue, in pb use k3s, add kube-hunter test.
https://nexus.akraino.org/content/sites/logs/myais/validation/3 fix kube-hunter issue ,except CAP_NET_RAW.
|
lynis results: Accepted vuls results: Accepted kube-hunter results: Accepted | Approved |
|
| 9/21/2021||||||||||||||||||||||||||||||||||
| 24 | TSC 2021-09-21 (Tuesday) 7:00 am Pacific | Yes | Incubation | https://nexus.akraino.org/content/sites/logs/jejunu-pred-vanet-mec/job/push-logs/ | 9/20/2021 | 2022-06-14 (Tuesday) 7:00 am Pacific | No | Incubation | Nexus repository where we push CD logs via a privately configured Jenkins | API info form uploaded by Asif, API subcommittee to review Approved by API subcommittee | Approved |
| |||||||||||||||||||||||||||||||||||||
| 25 | TSC 2021-09-16 (Thursday) 7:00 am Pacific | No | Incubation | https://nexus.akraino.org/content/sites/logs/arm-china/jenkins092/iec-type2-terraform/cdlogs/ | No | IncubationAkraino Light Weight μMEC on AWS.pdf | arm-china/jenkins092/iec-type2-terraform/blueval/k8s/conformance/ | production/vex-yul-akraino-jenkins-prod-1/iec-tox-verify-master/ | No API changes from R5, per e-mail from Muhammad Hamza | https://jenkins.akraino.org/view/iec/job/bluval-daily-master/ | /arm-china/jenkins092/iec-type2-terraform/k3s/k3s-logs/ | /production/vex-yul-akraino-jenkins-prod-1/iec-tox-verify-master/334/ | Approved | ||||||||||||||||||||||||||||||||||||
| 26 | No | ||||||||||||||||||||||||||||||||||||||||||||||||
| 27 | No | Incubation | |||||||||||||||||||||||||||||||||||||||||||||||
| 28 | Yes | Incubation | BluVal: https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt-bluval/2/ https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt-lynis/3/ https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt-vuls/2/ Other: https://nexus.akraino.org/content/sites/logs/fujitsu/job/edgex-install/ https://nexus.akraino.org/content/sites/logs/fujitsu/job/edgex-lora/ https://nexus.akraino.org/content/sites/logs/fujitsu/job/lfedge-cluster/ https://nexus.akraino.org/content/sites/logs/fujitsu/job/lfedge-install/ | SDT Datasheet.docx | Per e-mail from Colin Peters , blueprint consumes Kubernetes and EdgeX APIs. They are uploading API info form API info form uploaded Scheduled for review by API subcommittee review Reviewed and approved by API subcommittee | https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt-bluval/2/ https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt-lynis/3/ https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt-vuls/2/ |
sdt-lynis results: Accepted sdt-vuls results: Accepted All Exceptions are granted | Smart Data Transaction for CPS Release Notes Approved | 2022/04/13 | 2022/04/14 | |||||||||||||||||||||||||||||||||||||||
| 29 | Yes | Incubation | Missing Upstream information in IEC Type 2 Release Notes for R5 | 26 | No | 27 | TSC 2021-10-14 (Thursday) 7:00 am Pacific | Yes | Incubation | R5 Datasheet | N/A | 10/14/2021 | 28 | Yes | Incubation | sdt | bluval/https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt | sdt-vuls/ | Robot basic architecture based on SSES One Pager | Per e-mail from Inoue Reo , blueprint does not export or consume APIs. They are uploading an API info form to indicate this, along with comments about future / possible API plans Inoue Reo uploaded an API info form . Review by API subcommittee is scheduled for Reviewed and approved by API subcommittee | https://nexus.akraino.org/content/sites/logs/fujitsu/job/edgex-install/edgex | lora/https://nexus.akraino.org/content/sites/logs/fujitsu/job/lfedge-cluster | lfedge-install/ | SDT Datasheet.docx | Per e-mail from Colin Peters , blueprint consumes Kubernetes and EdgeX APIs. They are uploading API info form API info form uploaded Scheduled for review by API subcommittee review |
robot Lynis results: Accepted iotgateway Lynis results: Accepted robot vuls results: Accepted iotgateway vuls results: Accepted | Approved per the BP upstream review | 2022/04/13 | 2022/04/14 | 29 | Yes | Incubation | Robot basic architecture based on SSES One Pager | Per e-mail from Inoue Reo , blueprint does not export or consume APIs. They are uploading an API info form to indicate this, along with comments about future / possible API plans |