Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The requirements for the blueprints to be included in release 5 6 are as follows:

Depending upon the situation, the PTLs are suggested to meet the following criteria - 

...

If the blueprint is already part of release 5 and you want this to be included in release 56, please follow the following steps:

...

IEC Type 4: AR/VR oriented Edge Stack for Integrated Edge Cloud (No API changes expected from R5

ICN - Multi-Tenant Secure Cloud Native Platform 

Salvador FuentesMicro-MEC
Ferenc Székely Incubationx/SC0wAw pceir6/v1/ wiki/x/Ui0wAw 

s

myais/job/smartcities/8Incubation

https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt-bluval/

https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt-lynis/vuls/

BluVal:

robotfamilysses-lynisrobotfamily/sses-lynis/

 

iotgateway Lynis Need to fix the following vulnerabilities:

  • Performing test ID AUTH-9328 (Default umask values): FAILED
    2022-03-29 23:23:30 Result: found umask 022, which could be improved
    2022-03-29 23:23:30 Suggestion: Default umask in /etc/login.defs could be more strict like 027 [test:AUTH-9328] [details:-] [solution:-]

robot Lynis Need to fix the following vulnerabilities:

  • Test: Checking PASS_MAX_DAYS option in /etc/login.defs: FAILED
    2022-03-30 01:14:44 Result: password aging limits are not configured
    2022-03-30 01:14:44 Suggestion: Configure maximum password age in /etc/login.defs [test:AUTH-9286] [details:-] [solution:-]
  • Performing test ID AUTH-9328 (Default umask values): FAILED
    2022-03-30 01:14:44 Result: umask value is not configured (most likely it will have the default 022 value)
    2022-03-30 01:14:44 Suggestion: Default umask in /etc/login.defs could not be found and defaults usually to 022, which could be more strict like 027 [test:AUTH-9328] [details:-] [solution:-]
  • Performing test ID SSH-7440 (Check OpenSSH option: AllowUsers and AllowGroups): FAILED
    2022-03-30 01:15:03 Result: AllowUsers is not set
    2022-03-30 01:15:03 Result: AllowGroups is not set
    2022-03-30 01:15:03 Result: SSH has no specific user or group limitation. Most likely all valid users can SSH to this machine.
    No.Project NameTSC Subgroup Release StatusIs this your first release 

    Blue Print Stage

    • Self-Certify
    • Incubation
    • Mature
    • Core

    CD Logs URL to be used for review

    (Column filled in by PTLs)

    How to: Push Logs to Nexus

    Jenkins Master for Private Lab

    Jenkins Peering Guide

    Example: 

    KubeEdge BP Test Documents

    Link to executive one pager

    (editable doc format)

    (Column filled in by PTLs)

    API Info Reporting Review

    (Column filled in by API Subcommittee)

    (note for PTLs – go here for steps to fill in project API info form)

    BluValCertification

    BlueVal Logs or Manual Logs

    Bluval User Guide


    Security

    CertificationProvide link to Vuls, Lynis, and Kube-Hunter logs below.

    (TO be filled by Security Subcommittee)

    Pass/Fail Criteria:  Steps To Implement Security Scan Requirements

    Exception requests should be filed at:

    Release 56: Akraino CVE and KHV Vulnerability Exception Request

    Upstream Review (Column filled by Upstream Subcommittee and PTLs)


    (note PTL can go to Release 6 Upstream Review Status to find details)

    Date ready for TSC review

    (Column filled in by PTLs)

     TSC Review Date

    (Column filled in by TSC)


    1
    NoMaturehttps://nexus.akraino.org/content/sites/logs/parserlabs/r4/cvb/


    https://nexus.akraino.org/content/sites/logs/parserlabs/r4/Approved


    22
    NoMaturehttps://nexus.akraino.org/content/sites/logs/parserlabs/r4/cvb/

    No API changes expected from R5, per Bart Dong in TSC meeting . Waiting for e-mail from Bart to confirm this

    34Incubation5

    Bart confirmed by e-mail  


    https://nexus.akraino.org/content/sites/logs/parserlabs/r4/Approved


    3














    4


    NoIncubation

     

    6NoIncubation7NOIncubation8NoIncubation9NoIncubation10NoIncubation11ICN R6 Datasheet

    No API changes from R5, per e-mail from Kural Ramakrishnan

    BluVal Results

      

    lynis results: Accepted

    vuls results: Accepted

    kube-hunter results: Accepted


    Approved

     



    5

    Status changed to end-of-life (EOL), not participating in R6


    NoEOL

    No API changes from R5, per e-mail from Salvador Fuentes  



    Approved


    6
    NoIncubationhttps://nexus.akraino.org/content/sites/logs/huawei/job/Eliot-aio-log/19/12Noincubation

    No API changes expected from R5, per Liya Yu in TSC meeting . Waiting for e-mail from Liya to confirm this

    13No

    No API changes from R5, per e-mail from Khemendra Kumar 

    Info for ELIOT IOTGateway APIs:



    https://wiki.akraino.org/display/

    AK/ELIOT+R6+IOTGateway+API+documentation

    https://nexus.akraino.org/content/sites/logs/

    fate

    huawei/job/

    I-VICS/5/
    No new features or bugs have been added after R4 release14NoIncubation15NoIncubation16NoIncubation

    No API changes expected from R5, per Leo Li in TSC meeting . Waiting for e-mail from Leo to confirm this

    17NoIncubation18

    Eliot-security-test/31/results/

    lynis results: Accepted

    vuls results: Accepted

    kube-hunter results: Accepted

    Approved


    7
    NOIncubation
    ELIOT R6 - SD-WAN / WAN Edge / uCPE Data Sheet

    No API changes from R5, per e-mail from Khemendra Kumar  



    Approved


    8
    NoMature










    9
    NoIncubation








    10
    NoIncubation










    11

    Micro-MEC

    Ferenc Székely







     







    12
    NoincubationNoIncubationhttps://nexus.akraino.org/content/sites/logs/baidu/job/Video Security Monitoring R6 Datasheet

    No API changes expected from R5, per Liya Yu in TSC meeting https://

    19

    TSC 2022-03-17 (Thursday) 7:00 am Pacific

    No

    /content/sites/logs/baidu/job/. Waiting for e-mail from Liya to confirm this.

    Confirmed in e-mail sent by Liya  

    Mature

    https://nexus.akraino.org/content/sites/logs/fatebaidu/job/Fate_test/15/Akraino R6 Federated ML blueprint datasheet.docxsecurity_scan/aiedge/5/results/
    Approved based on R5 Release notes.


    13
    No
    • Incubation
    No API changes from R5, per e-mail from HaiHui Wang

    Incubation Level Review Results:

     

    VulsAccepted with exceptions shown at:

    Release 5 Vuls Exception Request

    __________________________________________________________

    LynisAccepted

    __________________________________________________________

    Kube-Hunter:  Exception granted:  K8s not used by this BP.

    20NoIncubation21

    Private LTE/5G ICN Blueprint

    Prem Sankar G

    has been merged with PCEI blueprint

    https://wiki.akraino.org/download/attachments/28970342/Intelligent%20Vehicle-Infrastructure%20Cooperation%20System%28I-VICS%29%20Datasheet.docx?version=2&modificationDate=1613872984000&api=v2

    No API changes from R5, per e-mail from ZhuMing Zhang  

    https://nexus.akraino.org/content/sites/logs/fate/job/I-VICS/5/No new features or bugs have been added after R4 releaseYes, with recommendation.


    14
    NoIncubation


    No API changes from R5, per e-mail from Eagan Fu  



    Approved based on previous release notes


    15
    NoMaturehttps://nexus.akraino.org/content/sites/logs/ysemi/job/v1/upload/iec-tox-verify-master_334/https://wiki.akraino.org/download/attachments/24084647/IEC%20Release3-IEC%20Type3-datasheet.docx?version=5&modificationDate=1591272863000&api=v2

    API form uploaded by Davy Zhang , scheduled for review at API subcommittee meeting

    Approved by API subcommittee at weekly meeting  

     

    https://nexus.akraino.org/content/sites/logs/ysemi/job/v1/validation_results_v5/

     

    https://nexus.akraino.org/content/sites/logs/ysemi/job/v1/validation_results_v6/ 

      

    lynis results: Accepted

    vuls results: Accepted

    kube-hunter results: Accepted

    Approved


    16
    NoIncubationhttps://nexus.akraino.org/content/sites/logs/socnoc/job/baseOS/1/SOCNOC Release 6 One pag - Akraino - Akraino Confluence

    No API changes expected from R5, per Leo Li in TSC meeting . Waiting for e-mail from Leo to confirm this

    Leo confirmed by mail  



    https://nexus.akraino.org/content/sites/logs/socnoc/job/security_scan/




    17
    NoIncubationhttps://nexus.akraino.org/content/sites/logs/huawei/job/Ealtedge-aio-log/15/EALTEDGE Release 6 Datasheet

    No API changes from R5, per e-mail from Khemendra Kumar  

    Info for EALTEdge APIs:

    https://wiki.akraino.org/pages/viewpage.action?pageId=53478299

    https://nexus.akraino.org/content/sites/logs/huawei/job/Ealt-edge-security-test/26/results/

     

    lynis results: Accepted

    vuls results: Accepted

    kube-hunter results: Accepted


    Approved


    18


    TSC 2022-05-12 (Thursday) 7:00 am PacificNoIncubationhttps://nexus.akraino.org/content/sites/logs/cmti/job/pcei-daily/https://wiki.akraino.org/x/SC0wAw

    Revised API info form sent to Oleg per his requirements (see API Subcommittee meeting minutes for details)


    Note - PCEI Blueprint R6 API documentation located here (as of ):

    https://wiki.akraino.org/x/Qy0wAw

     

    lynis results: Accepted

    vuls results: Accepted

    kube-hunter results: Accepted


    Approved per the upstream review


    https://wiki.akraino.org/x/Ui0wAw

     

     


    19

    TSC 2022-03-17 (Thursday) 7:00 am Pacific

    No

    Mature

    https://nexus.akraino.org/content/sites/logs/fate/job/Fate_test/15/Akraino R6 Federated ML blueprint datasheet.docx

    No API changes from R5, per e-mail from HaiHui Wang

    Incubation Level Review Results:

     

    VulsAccepted with exceptions shown at:

    Release 5 Vuls Exception Request

    __________________________________________________________

    LynisAccepted

    __________________________________________________________

    Kube-Hunter:  Exception granted:  K8s not used by this BP.

     







    20
    NoIncubation








    21

    Private LTE/5G ICN Blueprint

    Prem Sankar G

    Has been merged with PCEI blueprint













    22
    YesIncubation








    23

    Smart Cities

    Olivier Bernard Cindy Xing Alexander Su (alexander@nexcom.com)

    Jason Wen

    Jack Liu

    TSC 2022-05-12 (Thursday) 7:00 am Pacific

    NoIncubationhttps://nexus.akraino.org/content/sites/logs/myais/job/smartcities/8

    No API changes expected from R5, per TSC meeting discussion . Waiting for e-mail from Jason or Jack to confirm this.

    Update - API form uploaded by Jason , scheduled for review at API subcommittee meeting  

    Approved by API subcommittee at weekly meeting

    https://nexus.akraino.org/content/sites/logs/myais/validation/1/

     

    https://nexus.akraino.org/content/sites/logs/myais/validation/2

    fix lynis issue, in pb use k3s, add kube-hunter test.

     

    https://nexus.akraino.org/content/sites/logs/myais/validation/3

    fix kube-hunter issue ,except CAP_NET_RAW.

     

     

    lynis results: Accepted

    vuls results: Accepted

    kube-hunter results:  Accepted

    Smart Cities R6 Upstream.


    Approved

     

     


    24TSC 2022-06-14 (Tuesday) 7:00 am PacificNoIncubationNexus repository where we push CD logs via a privately configured Jenkins

    Executive One Pager - R6 (MEC-based)

    API info form uploaded by Asif, API subcommittee to review  


    Approved by API subcommittee  



    Approved

     



    25


    NoIncubation

    https://nexus.akraino.org/content/sites/logs/production/vex-yul-akraino-jenkins-prod-1/iec-tox-verify-master/

    No API changes from R5, per e-mail from Muhammad Hamza   

    22YesIncubation23

    Smart Cities

    Olivier Bernard Cindy Xing Alexander Su (alexander@nexcom.com)

    Jason Wen

    Jack Liu

    NoIncubation

    https://jenkins.akraino.org/view/iec/job/bluval-daily-master/

    https://sonarcloud.io/project/overview?id=iec

    https://nexus.akraino.org/content/sites/logs/

    24NoIncubation

    production/vex-yul-akraino-jenkins-prod-1/iec-tox-verify-master/334/


    Approved

    25No



    26
    No









    27
    NoIncubation








    28


    Yes

    Incubation

    BluVal:

    https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt-bluval/2/

    https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt-lynis/3/

    https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt-vuls/2/

    Other:

    https://nexus.akraino.org/content/sites/logs/fujitsu/job/edgex-install/

    https://nexus.akraino.org/content/sites/logs/fujitsu/job/edgex-lora/

    https://nexus.akraino.org/content/sites/logs/fujitsu/job/lfedge-cluster/

    https://nexus.akraino.org/content/sites/logs/fujitsu/job/lfedge-install/

    SDT Datasheet.docx

    Per e-mail from Colin Peters  , blueprint consumes Kubernetes and EdgeX APIs. They are uploading API info form

    API info form uploaded  

    Scheduled for review by API subcommittee review 

    Reviewed and approved by API subcommittee  

    subcommittee review 

    Reviewed and approved by API subcommittee  

    https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt-

    29YesIncubation

    bluval/2/

    https://nexus.akraino.org/content/sites/logs/fujitsu/job/

    sdt-

    lynis/

    3/

    https://nexus.akraino.org/content/sites/logs/fujitsu/job/

    sdt-

    Robot basic architecture based on SSES One Pager

    Per e-mail from Inoue Reo , blueprint does not export or consume APIs. They are uploading an API info form to indicate this, along with comments about future / possible API plans

    Inoue Reo uploaded an API info form . Review by API subcommittee is scheduled for  

    Reviewed and approved by API subcommittee

    vuls/2/

     

    sdt-lynis results: Accepted

    sdt-vuls results: Accepted

    All Exceptions are granted

    Release 6: Akraino CVE Vulnerability Exception Request

    Smart Data Transaction for CPS Release Notes

    Approved

    2022/04/132022/04/14
    29
    YesIncubation


    https://nexus.akraino.org/content/sites/logs/fujitsu/job/robot-family/sses-lynis/

    https://nexus.akraino.org/content/sites/logs/fujitsu/job/robot-family/sses-lynis/

    Robot basic architecture based on SSES One Pager

    Per e-mail from Inoue Reo , blueprint does not export or consume APIs. They are uploading an API info form to indicate this, along with comments about future / possible API plans

    Inoue Reo uploaded an API info form . Review by API subcommittee is scheduled for  

    Reviewed and approved by API subcommittee

    https://nexus.akraino.org/content/sites/logs/fujitsu/job/robot-family/sses-lynis/

    https://nexus.akraino.org/content/sites/logs/fujitsu/job/robot-family/sses-lynis/









      

    robot Lynis results: Accepted 

    iotgateway Lynis results: Accepted   

    robot vuls resultsAccepted
    All exceptions are granted

    iotgateway vuls resultsAccepted
    All exceptions are granted

    Release 6: Akraino CVE Vulnerability Exception Request

    Approved per the BP upstream review

    2022/04/132022/04/14