Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

No.Project NameTSC Subgroup Release StatusIs this your first release 

Blue Print Stage

  • Self-Certify
  • Incubation
  • Mature
  • Core

CD Logs URL to be used for review

(Column filled in by PTLs)

How to: Push Logs to Nexus

Jenkins Master for Private Lab

Jenkins Peering Guide

Example: 

KubeEdge BP Test Documents

Link to executive one pager

(editable doc format)

(Column filled in by PTLs)

API Info Reporting Review

(Column filled in by API Subcommittee)

(note for PTLs – go here for steps to fill in project API info form)

BluVal

BlueVal Logs or Manual Logs

Bluval User Guide


Security

Certification

(TO be filled by Security Subcommittee)

Pass/Fail Criteria:  Steps To Implement Security Scan Requirements

Exception requests should be filed at:

Release 7: Akraino CVE and KHV Vulnerability Exception Request

Upstream Review (Column filled by Upstream Subcommittee and PTLs)


(note PTL can go to R7 Release Upstream Compliance to find details)

Date ready for TSC review

(Column filled in by PTLs)

 TSC Review Date

(Column filled in by TSC)


1
NoMaturehttps://nexus.akraino.org/content/sites/logs/parserlabs/r4/cvb/


 



2Not in this release










3














4











5

Status changed to end-of-life (EOL), not participating in R6













6











7











8











9











10











11

Micro-MEC

Ferenc Székely







 







12











13











14











15











16
NoMaturehttps://nexus.akraino.org/content/sites/logs/socnoc/job/IEC_TYPE5/R7/
Release 7 Documentation for IEC Type 5

No API changes from R6, per e-mail from Pengjin at SOCNOC

Vuls

https://nexus.akraino.org/content/sites/logs/socnoc/job/IEC_TYPE5/R7/vuls/

lynis

https://nexus.akraino.org/content/sites/logs/socnoc/job/IEC_TYPE5/R7/lynis/

Kube-Hunter

Not Applicable


Approved 

Approved
Approved
17











18



NoIncubationhttps://nexus.akraino.org/content/sites/logs/cmti/job/pcei-daily/https://wikilf-akraino.akrainoatlassian.orgnet/wiki/x/LoMcBS5rQ

Sent e-mail to Oleg to confirm no API changes from R7

Oleg confirmed  

15 The version of the submitted Lynis logs is identical.

Lynis:

 

Performing test ID AUTH-9328 (Default umask values): FAILED

NOTE: changing the UNMASK value from default 022 to 027 resulted in the Lynis test suite erroring out. Requested ExceptionNote: The exception is granted for cases that can't be fixed due to software or hardware issues. Umask issue fits to a fixable configuration issue. More justifications for the exception have to be provided.

Result: sysctl key net.ipv4.conf.default.accept_source_routekernel.dmesg_restrict: FAILED

09 FIXEDThe version of the submitted Lynis logs is identical.

Lynis:

Performing test ID HRDNAUTH-7220 (Check if one or more compilers are installed9328 (Default umask values): FAILED

Kube-hunter: FIXED

Submitted correct logs for Lynis

Vuls: Accepted

NOTE: changing the UNMASK value from default 022 to 027 resulted in the Lynis test suite erroring out. Requested Exception

Result: sysctl key net.ipv4.conf.default.accept_source_route: FAILED

FIXED

Performing test ID HRDN-7220 (Check if one or more compilers are installed): FAILED

FIXED

Submitted correct logs for Lynis

Vuls: Accepted

Kube-hunter: No issue found but there is a missing pod.log

Approved

06/07/2023

Jim Xu (Deactivated) 




19











20











21

Private LTE/5G ICN Blueprint

Prem Sankar G

Has been merged with PCEI blueprint













22











23

Mature








24

(not for release 7)













25













26











27











28


NoIncubation

https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt/r7/

See test documentation for details

Smart Data Transaction for CPS R7 Datasheet

No API changes from R6, per e-mail from Colin Peters,  

Vuls

https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt/r7/sdt-vuls/2/

Lynis

https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt/r7/lynis/3/

Kube-Hunter

https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt/r7/sdt-bluval/1/


Approved 

Approved (1/18)

 

Approved
29
NoIncubation

https://nexus.akraino.org/content/sites/logs/fujitsu/job/robot-family/R7/sses-lynis/

https://nexus.akraino.org/content/sites/logs/fujitsu/job/robot-family/R7/sses-vuls/

One pager for release7 - Akraino - Akraino Confluence

No API changes from R6, per e-mail from Reo Inoue   


Approved





Approved (no changes from R6)
Approved
30











31CFN (Computing Force Network) Ubiquitous Computing Force Scheduling hanyu ding
YesIncubationhttps://nexus.akraino.org/content/sites/logs/cmcc/job/r7/r7_cd.logOne pager for R7 - Akraino - Akraino Confluence

API info form uploaded . Scheduled for review at API subcommittee meeting  

Approved at API subcommittee meeting  

15 Feb

https://nexus.akraino.org/content/sites/logs/cmcc/job/r7/lynis-after.log

 

Lynis:

Performing test ID AUTH-9328 (Default umask values): FAILED

Performing test ID SSH-7440 (Check OpenSSH option: AllowUsers and AllowGroups): FAILED

Performing test ID HRDN-7220 (Check if one or more compilers are installed): FAILED

Vuls: Accepted with Exceptions

Kube-hunter: Accepted

Note: Please upload the log files to nexus.akraino.org and link them in the Logs column. It is required for security approval. updated

https://nexus.akraino.org/content/sites/logs/cmcc/job/r7/lynis0310.log

 

updated

https://nexus.akraino.org/content/sites/logs/cmcc/job/r7/lynis0317.log

Approved

approvedJan.30.2023


For details, refer to the following requirements

...

Please follow step-by-step instructions on the API Subcommittee API reporting wiki page. If after submitting your API info form (or an updated form, if you are in Class 1 and the form has changed since Release 4) and notifying the subcommittee by e-mail they have questions, then schedule a time when either subcommittee members may attend your weekly BP meeting or you can attend the API subcommittee weekly meeting in order to discuss and resolve the questions. When meeting, please be prepared with architecture and data flow diagrams so the API subcommittee can understand and confirm 1) APIs consumed and offered by your BP, 2) upstream project APIs, and 3) customer-facing demo APIs. This information will be used to update the Akraino website API Map, which makes your BP visible and searchable to customers and entities outside of Akraino, so completeness and accuracy is important.

...

  1. High Level Overall Requirements
  2. CI, Blueprint Validation Lab Sub-Committee Requirements
    1. Present Pod Topology document.
    2. Peering w/LF Jenkins - (Note: peering is an optional requirement)
    3. Push logs through Nexus. (Note: This is mandatory for Incubation self-certified and Maturity)
    4. Usage of topics for release

      1. Releases >= 1.0 (e.g. 1.xyz, 2.xyz etc) are reserved for BP that have been approved as Core by the TSC (considered ‘GA’ quality).

      2. Releases <1.0 (e.g. 0.xyz etc) are reserved for projects that have not reached the Akraino Core level (i.e. anything that is in Incubation (‘alpha’ quality) and Mature (‘beta’ quality).

    5. Enforcement of Static Code Analysis through SonarCloud (SaaS), WIP LF Release Engineering & Security Subcommittee. (Note: This is an optional requirement for Incubation self certified and mandatory for Maturity)

  3. Security Sub-Committee Requirements, please fill in Release 4 Blueprint Scanning Status.  Instructions can be found at:  Steps To Implement Security Scan Requirements
  4. Blueprint Validation Framework Feature Project Requirements See TSC meeting.
  5. Projects going for Maturity Review please refer to Maturity Criteria defined by Process subcommittee BP Graduation Review Processes and Criteria (Note this is not required for self certification, only required for maturity review)
  6. Documentation Sub-Committee Requirements

    User Documents:

    The following documentation with the following sections called out should be on the wiki with links to rest of the sections as applicable. We prefer that the entire doc is on the wiki but we do not require it.

    Architecture  - Blue print Overview and overall architecture

    Release Notes – Summary and What is released

    Installation Doc – Introduction and deployment architecture

    Test Document – Introduction and Overall Test Architecture

    Developer Documents:

    We are also recommending that Blueprints include via ReadtheDocs, with each Blue Print given their own repo, but we do not require it

  7. API Sub-Committee Requirements  (Note: See this link for requirements: Blueprint Projects API Reporting Requirements)
  8. Community Sub-Committee Requirements  (Note: no mandatory requirements for Incubation self-certified or Maturity)
  9. Process Sub-Committee Requirements (Note: See the Process Sub Committee page defining the TSC approved Maturity review process and requirements for those requesting inclusion in R3 at Mature level BP Graduation Review Processes and Criteria)
  10. Upstream Sub-Committee Requirements (Note: no mandatory requirements for Incubation self-certified or Maturity). Here is the R6 release Upstream BP review status Release 6 Upstream Review Status, Release Upstream Compliance. Also please refer to the page for the R6 requirement as well.

...