Release 7 target date is Jan. 30, 2023
Blue Prints Participating in Release 7
Internal Target date to meet Rel 7 Criteria is TBD
(To be updated)
No. | Project Name | TSC Subgroup Release Status | Is this your first release | Blue Print Stage
| CD Logs URL to be used for review (Column filled in by PTLs) | Link to executive one pager (editable doc format) (Column filled in by PTLs) | API Info Reporting Review (Column filled in by API Subcommittee) (note for PTLs – go here for steps to fill in project API info form) | BluVal BlueVal Logs or Manual Logs | Security Certification (TO be filled by Security Subcommittee) Pass/Fail Criteria: Steps To Implement Security Scan Requirements Exception requests should be filed at: Release 7: Akraino CVE and KHV Vulnerability Exception Request | Upstream Review (Column filled by Upstream Subcommittee and PTLs) (note PTL can go to R7 Release Upstream Compliance to find details) | Date ready for TSC review (Column filled in by PTLs) | TSC Review Date (Column filled in by TSC) | |
1 | No | Mature | https://nexus.akraino.org/content/sites/logs/parserlabs/r4/cvb/ | ||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
2 | Not in this release | ||||||||||||
3 | |||||||||||||
4 | |||||||||||||
5 | |||||||||||||
6 | |||||||||||||
7 | |||||||||||||
8 | |||||||||||||
9 | |||||||||||||
10 | |||||||||||||
11 |
| ||||||||||||
12 | |||||||||||||
13 | |||||||||||||
14 | |||||||||||||
15 | |||||||||||||
16 | No | Mature | https://nexus.akraino.org/content/sites/logs/socnoc/job/IEC_TYPE5/R7/ | Release 7 Documentation for IEC Type 5 | No API changes from R6, per e-mail from Pengjin at SOCNOC | Vuls https://nexus.akraino.org/content/sites/logs/socnoc/job/IEC_TYPE5/R7/vuls/ lynis https://nexus.akraino.org/content/sites/logs/socnoc/job/IEC_TYPE5/R7/lynis/ Kube-Hunter Not Applicable | Approved | Approved | Approved | ||||
17 | |||||||||||||
18 | No | Incubation | https://nexus.akraino.org/content/sites/logs/cmti/job/pcei-daily/ | https://wiki.akraino.org/x/LoMcB | Sent e-mail to Oleg to confirm no API changes from R7 Oleg confirmed | https://nexus.akraino.org/content/sites/logs/pcei/job/results
Updated results: https://nexus.akraino.org/content/sites/logs/pcei/job/v2/results
Updated results (wrong file submitted on Feb 9. Please see below for Lynis fixes): https://nexus.akraino.org/content/sites/logs/pcei/job/v3/results |
Performing test ID AUTH-9328 (Default umask values): FAILED Note: The exception is granted for cases that can't be fixed due to software or hardware issues. Umask issue fits to a fixable configuration issue. More justifications for the exception have to be provided. Result: sysctl key kernel.dmesg_restrict: FAILED The version of the submitted Lynis logs is identical. Lynis: Performing test ID AUTH-9328 (Default umask values): FAILED NOTE: changing the UNMASK value from default 022 to 027 resulted in the Lynis test suite erroring out. Requested Exception Result: sysctl key net.ipv4.conf.default.accept_source_route: FAILED FIXED Performing test ID HRDN-7220 (Check if one or more compilers are installed): FAILED FIXED Submitted correct logs for Lynis Vuls: Accepted Kube-hunter: No issue found but there is a missing pod.log | ||||||
19 | |||||||||||||
20 | |||||||||||||
21 | |||||||||||||
22 | |||||||||||||
23 | Mature | ||||||||||||
24 | |||||||||||||
25 | |||||||||||||
26 | |||||||||||||
27 | |||||||||||||
28 | No | Incubation | https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt/r7/ See test documentation for details | Smart Data Transaction for CPS R7 Datasheet | No API changes from R6, per e-mail from Colin Peters, | Vuls https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt/r7/sdt-vuls/2/ Lynis https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt/r7/lynis/3/ Kube-Hunter https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt/r7/sdt-bluval/1/ | Approved | Approved (1/18) |
| Approved | |||
29 | No | Incubation | https://nexus.akraino.org/content/sites/logs/fujitsu/job/robot-family/R7/sses-lynis/ | One pager for release7 - Akraino - Akraino Confluence | No API changes from R6, per e-mail from Reo Inoue | Lynis | Approved (no changes from R6) | Approved | |||||
30 | |||||||||||||
31 | CFN (Computing Force Network) Ubiquitous Computing Force Scheduling hanyu ding | Yes | Incubation | https://nexus.akraino.org/content/sites/logs/cmcc/job/r7/r7_cd.log | One pager for R7 - Akraino - Akraino Confluence | API info form uploaded . Scheduled for review at API subcommittee meeting Approved at API subcommittee meeting | Kube-hunter: https://nexus.akraino.org/content/sites/logs/cmcc/job/r7/kube-hunter-scan.logVuls: https://nexus.akraino.org/content/sites/logs/cmcc/job/r7/vlus.log Lynis: https://nexus.akraino.org/content/sites/logs/cmcc/job/r7/lynis-after.log
updated https://nexus.akraino.org/content/sites/logs/cmcc/job/r7/lynis0310.log |
Performing test ID HRDN-7220 (Check if one or more compilers are installed): FAILED
Performing test ID AUTH-9328 (Default umask values): FAILED Performing test ID SSH-7440 (Check OpenSSH option: AllowUsers and AllowGroups): FAILED Performing test ID HRDN-7220 (Check if one or more compilers are installed): FAILED
Lynis: Performing test ID AUTH-9328 (Default umask values): FAILED Performing test ID SSH-7440 (Check OpenSSH option: AllowUsers and AllowGroups): FAILED Performing test ID HRDN-7220 (Check if one or more compilers are installed): FAILED Vuls: Accepted with Exceptions Kube-hunter: Accepted Note: Please upload the log files to nexus.akraino.org and link them in the Logs column. It is required for security approval. | approved | Jan.30.2023 |
For details, refer to the following requirements
Classes of release 7 Blueprints and the requirements to be included in Release 7
The requirements for the blueprints to be included in release 7 are as follows:
Depending upon the situation, the PTLs are suggested to meet the following criteria -
Class 1: The Blueprints moving from Release 6 to Release 7
If the blueprint is already part of release 6 and you want this to be included in release 7, please follow the following steps:
- Did you make any improvements in release 7 - e.g. you fixed bugs or added additional features?
- If Yes:
- Does it impact the APIs or Documentation?
- If yes,
- Please update the documentation and send the email to respective sub-committee chairs.
- For APIs, please see API Subcommittee Guidelines below
- Run the security scans and upload the link in the table below next to your blueprint
- Upload the latest CI/CD logs
- Send an email to tsc@lists.akraino.org to notify the TSC
- Put yourself on the TSC agenda and request for the approval
- If yes,
- Does it impact the APIs or Documentation?
- If No:
- No additional formalities are required
- Send an email to tsc@lists.akraino.org to notify the TSC
- Put yourself on the TSC agenda and request for the approval
- If Yes:
Class 2: The Blueprints moving from Release 4/5 to Release 7
If the blueprint is already part of release 4/5 and not release 6 and you want this to be included in release 7, please follow the following steps:
Note that in release 5, a new requirement was introduced to expose all the API consumed and offered by your blueprint.
- Please update the documentation to include new API section.
- Follow the guidelines to submit API information as per the requirements specified in the API sub-committee
- send the email to respective documentation and API sub-committee lists.
- If you require assistance with documentation, please reach out the respective subcommittee to be included on their agenda and discuss with them otherwise you are done
- For APIs, please see API Subcommittee Guidelines below
- Run the security scans and upload the link in the table below next to your blueprint
- Upload the latest CI/CD logs
- Send an email to tsc@lists.akraino.org to notify the TSC
- Put yourself on the TSC agenda and request for the approval
Class 3: The Blueprints moving from Release 3 or earlier to Release 7
If the blueprint is already part of release 1 or 2 and not release 4 or 5 or 6 and you want this to be included in release 7, please follow the following steps described under Class 4 below.
Class 4: New Blueprints being introduced for the first time in Release 7
Please follow the requirements specified in release 6 with the following exceptions:
- The sub-committee presentations are optional starting from release 7 and for your benefit only. If you require assistance on any of the areas such as documentation, Security scans or CI/CD logs, please schedule a meeting with appropriate subcommittee.
- For APIs, please see API Subcommittee Guidelines below
- Once you meet the requirements of respective subcommittee, please send them an email to notify them. Except for APIs, as noted in 2, if they require any clarification, they will either invite you to meet with them or they will approve your blueprint via email.
- Send an email to tsc@lists.akraino.org to notify the TSC
- Put yourself on the TSC agenda and request for the approval
API Subcommittee Guidelines
Please follow step-by-step instructions on the API Subcommittee API reporting wiki page. If after submitting your API info form (or an updated form, if you are in Class 1 and the form has changed since Release 4) and notifying the subcommittee by e-mail they have questions, then schedule a time when either subcommittee members may attend your weekly BP meeting or you can attend the API subcommittee weekly meeting in order to discuss and resolve the questions. When meeting, please be prepared with architecture and data flow diagrams so the API subcommittee can understand and confirm 1) APIs consumed and offered by your BP, 2) upstream project APIs, and 3) customer-facing demo APIs. This information will be used to update the Akraino website API Map, which makes your BP visible and searchable to customers and entities outside of Akraino, so completeness and accuracy is important.
Release 7 Requirements
- High Level Overall Requirements
- CI, Blueprint Validation Lab Sub-Committee Requirements
- Present Pod Topology document.
- Peering w/LF Jenkins - (Note: peering is an optional requirement)
- Push logs through Nexus. (Note: This is mandatory for Incubation self-certified and Maturity)
Releases >= 1.0 (e.g. 1.xyz, 2.xyz etc) are reserved for BP that have been approved as Core by the TSC (considered ‘GA’ quality).
Releases <1.0 (e.g. 0.xyz etc) are reserved for projects that have not reached the Akraino Core level (i.e. anything that is in Incubation (‘alpha’ quality) and Mature (‘beta’ quality).
Enforcement of Static Code Analysis through SonarCloud (SaaS), WIP LF Release Engineering & Security Subcommittee. (Note: This is an optional requirement for Incubation self certified and mandatory for Maturity)
- Security Sub-Committee Requirements, please fill in Release 4 Blueprint Scanning Status. Instructions can be found at: Steps To Implement Security Scan Requirements
- Blueprint Validation Framework Feature Project Requirements See TSC meeting.
- Projects going for Maturity Review please refer to Maturity Criteria defined by Process subcommittee BP Graduation Review Processes and Criteria (Note this is not required for self certification, only required for maturity review)
- Documentation Sub-Committee Requirements
User Documents:
The following documentation with the following sections called out should be on the wiki with links to rest of the sections as applicable. We prefer that the entire doc is on the wiki but we do not require it.
Architecture - Blue print Overview and overall architecture
Release Notes – Summary and What is released
Installation Doc – Introduction and deployment architecture
Test Document – Introduction and Overall Test Architecture
Developer Documents:
We are also recommending that Blueprints include via ReadtheDocs, with each Blue Print given their own repo, but we do not require it
- API Sub-Committee Requirements (Note: See this link for requirements: Blueprint Projects API Reporting Requirements)
- Community Sub-Committee Requirements (Note: no mandatory requirements for Incubation self-certified or Maturity)
- Process Sub-Committee Requirements (Note: See the Process Sub Committee page defining the TSC approved Maturity review process and requirements for those requesting inclusion in R3 at Mature level BP Graduation Review Processes and Criteria)
- Upstream Sub-Committee Requirements (Note: no mandatory requirements for Incubation self-certified or Maturity). Here is the R6 release Upstream BP review status Release 6 Upstream Review Status, Release Upstream Compliance. Also please refer to the page for the R6 requirement as well.