Release 4 Planning

Release 4 Planning

Release 4 target date is November 30th 2020.  

  1. Self Certified Milestones Achievement Due Date Oct 31st 2020 ( Milestone 4) 

2. Maturity Review Milestone Achievement  Due date Oct 31st 2020



Please add targeted and achieved R4 milestones at:

BP Incubation Stage Reporting R4 (To be updated)

Define area of focus

(to be updated)





  1. Virtual meeting to start to have a session to discuss all of the agenda items.

  2. Different patches from different blueprints need to be up-streamed.

  3. Need a consistent framework

  4. New blueprints have been committed for R4.

  5. Want to increase standards on Release 4.

  6. Validation Project test layers and test cases

  7. Self Certification in R4?

Release 4 Requirements

  1. High Level Overall Requirements

  2. CI, Blueprint Validation Lab Sub-Committee Requirements

    1. Present Pod Topology document.

    2. Peering w/LF Jenkins - (Note: peering is an optional requirement)

    3. Push logs through Nexus. (Note: This is mandatory for Incubation self-certified and Maturity)

    4. Usage of topics for release

      1. Releases >= 1.0 (e.g. 1.xyz, 2.xyz etc) are reserved for BP that have been approved as Core by the TSC (considered ‘GA’ quality).

      2. Releases <1.0 (e.g. 0.xyz etc) are reserved for projects that have not reached the Akraino Core level (i.e. anything that is in Incubation (‘alpha’ quality) and Mature (‘beta’ quality).

    5. Enforcement of Static Code Analysis through SonarCloud (SaaS), WIP LF Release Engineering & Security Subcommittee. (Note: This is an optional requirement for Incubation self certified and mandatory for Maturity)

  3. Security Sub-Committee Requirements, please fill in Release 4 Blueprint Scanning Status.  Instructions can be found at:  Steps To Implement Security Scan Requirements

  4. Blueprint Validation Framework Feature Project Requirements See TSC meeting.

  5. Projects going for Maturity Review please refer to Maturity Criteria defined by Process subcommittee BP Graduation Review Processes and Criteria (Note this is not required for self certification, only required for maturity review)

  6. Documentation Sub-Committee Requirements

    User Documents:

    The following documentation with the following sections called out should be on the wiki with links to rest of the sections as applicable. We prefer that the entire doc is on the wiki but we do not require it.

    Architecture  - Blue print Overview and overall architecture

    Release Notes – Summary and What is released

    Installation Doc – Introduction and deployment architecture

    Test Document – Introduction and Overall Test Architecture

    Developer Documents:

    We are also recommending that Blueprints include via ReadtheDocs, with each Blue Print given their own repo, but we do not require it

  7. API Sub-Committee Requirements  (Note: See this link for requirements: Blueprint Projects API Reporting Requirements)

  8. Community Sub-Committee Requirements  (Note: no mandatory requirements for Incubation self-certified or Maturity)

  9. Process Sub-Committee Requirements (Note: See the Process Sub Committee page defining the TSC approved Maturity review process and requirements for those requesting inclusion in R3 at Mature level BP Graduation Review Processes and Criteria)

  10. Upstream Sub-Committee Requirements (Note: no mandatory requirements for Incubation self-certified or Maturity). Here is the R4 release Upstream BP review status, Release Upstream Compliance. Also please refer to the page for the R4 requirement as well.



Blue Prints Participating in Release 4

Internal Target date to meet Rel 4 Criteria is Nov 30th ( please add your target/achieved date at the BP Incubation Stage Reporting R2 (To Be Updated))

(To be updated)

No.

Project Name

TSC Subgroup Release Status

Is this your first release 

Going for Maturity Review? 

CD Logs URL to be used for review

(Column filled in by PTLs)

How to: Push Logs to Nexus

Jenkins Master for Private Lab

Jenkins Peering Guide

Example: 

KubeEdge BP Test Documents

Link to executive one pager

(editable doc format)

(Column filled in by PTLs)

API Info Reporting Review

(Column filled in by API Subcommittee)

(note for PTLs – go here for steps to fill in project API info form)

BluVal

Certification

Bluval User Guide

Security

Certification

Provide link to Vuls, Lynis, and Kube-Hunter logs below.

Pass/Fail Criteria:  Steps To Implement Security Scan Requirements

Exception requests should be filed at:

https://lf-akraino.atlassian.net/wiki/display/AK/Akraino+CVE+Vulnerability+Exception+Request

Upstream Review (Column filled by Upstream Subcommittee and PTLs)



(note PTL can go to R4 Release Upstream Compliance to find details)

Date ready for TSC review

(Column filled in by PTLs)

 TSC Review Date

(Column filled in by TSC)

No.

Project Name

TSC Subgroup Release Status

Is this your first release 

Going for Maturity Review? 

CD Logs URL to be used for review

(Column filled in by PTLs)

How to: Push Logs to Nexus

Jenkins Master for Private Lab

Jenkins Peering Guide

Example: 

KubeEdge BP Test Documents

Link to executive one pager

(editable doc format)

(Column filled in by PTLs)

API Info Reporting Review

(Column filled in by API Subcommittee)

(note for PTLs – go here for steps to fill in project API info form)

BluVal

Certification

Bluval User Guide

Security

Certification

Provide link to Vuls, Lynis, and Kube-Hunter logs below.

Pass/Fail Criteria:  Steps To Implement Security Scan Requirements

Exception requests should be filed at:

https://lf-akraino.atlassian.net/wiki/display/AK/Akraino+CVE+Vulnerability+Exception+Request

Upstream Review (Column filled by Upstream Subcommittee and PTLs)



(note PTL can go to R4 Release Upstream Compliance to find details)

Date ready for TSC review

(Column filled in by PTLs)

 TSC Review Date

(Column filled in by TSC)

1

Connected Vehicle Blueprint

@thorking

@Tao Wang

scheduled at 

TSC 2020-12-01 (Tues) 7 am Pacific

N

Y

https://nexus.akraino.org/content/sites/logs/parserlabs/r4/jobs/cvb/

CVB_Akraino_R4_blueprint_Datasheet

Form uploaded

Scheduled for API subcommittee review Dec 21, 2020

Waiting for re-uploaded API info form with PaaS API info

Reviewed by API subcommittee, PaaS APIs are subset of TARS APIs

Accepted

https://nexus.akraino.org/content/sites/logs/parserlabs/r4/jobs/cvb/

Dec 1, 2020 

Vuls:  Accepted with exceptions shown at:

Release 4 Vuls Exception Reques

https://nexus.akraino.org/content/sites/logs/parserlabs/r4/jobs/cvb/



Jan 26, 2021 

Lynis:  Accepted with exceptions shown at:

Release 4 Lynis Exceptions

https://nexus.akraino.org/content/sites/logs/parserlabs/r4/jobs/cvb/lynis_updated_26.log



Kube-Hunter:  Exception granted:  K8s not used by this BP.

Yes

12/01



2

IEC Type 4: AR/VR oriented Edge Stack for Integrated Edge Cloud (IEC) Blueprint Family

@Bart Dong

@thorking

scheduled at 

TSC 2020-12-01 (Tues) 7 am Pacific

N

Y

https://nexus.akraino.org/content/sites/logs/parserlabs/r4/jobs/iec-type4/

IEC-Type4 Release 4 datasheet.docx

Form uploaded

Scheduled for API subcommittee review Dec 21, 2020

Waiting for re-uploaded API info form with PaaS API info 

Reviewed by API subcommittee, PaaS APIs are subset of TARS APIs

Accepted

https://nexus.akraino.org/content/sites/logs/parserlabs/r4/jobs/iec-type4/



Dec 1, 2020 

Vuls:  Accepted with exceptions shown at:

Release 4 Vuls Exception Request

https://nexus.akraino.org/content/sites/logs/tencent/MR/iec-type4/



Mar 10, 2021 

Lynis:  Accepted

No Exceptions Required, Excellent!

https://nexus.akraino.org/content/sites/logs/tencent/MR/iec-type4/



Kube-Hunter:  Exception granted:  K8s not used by this BP.

Yes

12/01



3

Radio Edge Cloud (REC)

@Paul Carver

Scheduled at Release 4 Review 2020-12-01 (Tues) 7 am Pacific

N

Mature

https://nexus.akraino.org/content/sites/logs/att/job/Install_REC_on_OpenEdge1/

https://logs.akraino.org/production/vex-yul-akraino-jenkins-prod-1/rec-aarch64_baremetal-install-rec-weekly-master/

REC_Akraino R4 blueprint Datasheet.docx

Form uploaded

Reviewed by API subcommittee

Accepted

https://nexus.akraino.org/content/sites/logs/att/job/Bluval_Logs/results-11-27-2020.tar

https://nexus.akraino.org/content/sites/logs/att/job/Bluval_Logs/results-2021-02-01/

Dec 2, 2020 

VulsAccepted with exceptions shown at:

Release 4 Vuls Exception Request



Feb 3, 2021 

Lynis:  Accepted with exceptions shown at:

Release 4 Lynis Exceptions



Jan 28, 2021

Kube-Hunter:  Accepted with exceptions shown at:

Release 4 Kube-Hunter Exceptions

Yes

12/01



4

ICN - Integrated Cloud-Native Family

@Kuralamudhan Ramakrishnan (Deactivated)

Scheduled at 

Release 4 Review 2020-12-16 (Wed) 7 am Pacific

N

N

ICN Master Baremetal Deployment Verifier

ICN Master Virtual Deployment Verifier

ICN SDEWAN Master End2End Testing

ICN_ MICN_Akraino_R4_blueprint_Datasheet.docx

Form uploaded

Reviewed by API subcommittee

Accepted

https://nexus.akraino.org/content/sites/logs/intel/bluval_results/icn/master/20201210-010310/.

https://nexus.akraino.org/content/sites/logs/intel/bluval_results/icn/master/20201210-010310/

ICN R4 Test Document#BluValTesting

Vuls:  Accepted with exceptions shown at:

Release 4 Vuls Exception



Lynis:  Accepted with exceptions shown at:

Release 4 Lynis Exceptions



k8s/conformance:

Kube-Hunter:  Accepted

  • The logs show the run with the aquasec/kube-hunter:edge image to fix the CAP_NET_RAW inside a pod issue



Yes

12/10

12/16

5

ELIOT IoT Gateway Blueprint

@khemendra kumar

scheduled at 

TSC 2020-12-16 (Tues) 7 am Pacific

N

N

https://nexus.akraino.org/content/sites/logs/huawei/blueprints/iotgateway/job/eliot-iotgateway-deploy-k8s-virtual-daily-master/684/

ELIOT R4 IOT-Gateway Datasheet

Form uploaded

Reviewed by API subcommittee Dec 11, 2020 

Accepted

https://nexus.akraino.org/content/sites/logs/huawei/blueprints/iotgateway/job/eliot-iotgateway-bluval-virtual-daily-master/37/results/os/lynis/lynis.log

vuls exceptions Akraino CVE Vulnerability Exception Request

Akraino BluVal Exception Request

Dec 7, 2020 

Vuls:  Accepted with exceptions shown at:

Release 4 Vuls Exception

Lynis: Accepted with exceptions shown at:

Release 4 Lynis Exceptions

Kube-Hunter:  Accepted with exceptions shown at:

Release 4 Kube-Hunter Exceptions

Yes

12/08



6

ELIOT SD-WAN/WAN Edge/uCPE Blueprint

@khemendra kumar

scheduled at 

TSC 2020-12-16 (Tues) 7 am Pacific

N

N

https://nexus.akraino.org/content/sites/logs/huawei/blueprints/uCPE/job/eliot-uCPE-deploy-k8s-centos-virtual-daily-master/545/

ELIOT R4 - SD-WAN / WAN Edge / uCPE Data Sheet

Form uploaded

Reviewed by API subcommittee Dec 11, 2020 

Accepted

https://nexus.akraino.org/content/sites/logs/huawei/blueprints/uCPE/job/eliot-uCPE-deploy-k8s-centos-virtual-daily-master/549/results/os/lynis/lynis.log

vuls exceptions Akraino CVE Vulnerability Exception Request

Akraino BluVal Exception Request

Dec 7, 2020 

Vuls:  Accepted with exceptions shown at:

Release 4 Vuls Exception

Lynis: Accepted with exceptions shown at:

Release 4 Lynis Exceptions

Kube-Hunter:  Accepted with exceptions shown at:

Release 4 Kube-Hunter Exceptions

Yes

12/08



7

Network Cloud and TF (Tungsten Fabric) Integration Project

@Sukhdev Kapur

Scheduled at

Release 4 Review 2020-12-09 (Wed) 7:30am



N

Not Applicable

https://nexus.akraino.org/content/sites/logs/juniper/job/NC-Tungsten_Fabric/40/



https://nexus.akraino.org/content/sites/logs/juniper/validation-2021/





NetworkCloud-TF blueprint Datasheet.docx

Form uploaded

Scheduled for API subcommittee review Dec 18, 2020

Reviewed by API subcommittee 

Accepted

Y

https://nexus.akraino.org/content/sites/logs/juniper/validation/

Updated results - https://nexus.akraino.org/content/sites/logs/juniper/validation-2021/



Jan 6, 2021 

Vuls: Accepted with exceptions shown at:

Release 4 Vuls Exception



Feb 10, 2021 

Lynis:  Accepted with exceptions shown at:

Release 4 Lynis Exceptions

Note there were exceptions granted for mandatory incubation items that must be fixed in the next incubation level release as well as other items that must be fixed for maturity.



Feb 3, 2021 

Kube-Hunter:  Accepted with exceptions shown at:

Release 4 Kube-Hunter Exceptions

Yes

12/09

12/09

8

KNI Provider access edge

@Ricardo Noriega De Soto

Scheduled at 

TSC 2020-12-17 (Thurs) 7 am Pacific

N

N

AWS footprint:
https://logs.akraino.org/production/vex-yul-akraino-jenkins-prod-1/kni-blueprint-pae-verify-deploy-aws/81/

GCP footprint:

https://logs.akraino.org/production/vex-yul-akraino-jenkins-prod-1/kni-blueprint-pae-verify-deploy-gcp/51/



Akraino R4 blueprint Datasheet_ KNI PAE.odt

Form uploaded

Reviewed by API subcommittee

Accepted

https://nexus.akraino.org/content/sites/logs/redhat-kni/bluval_results_pae/

Jan 12, 2021 

Vuls:  Accepted with exception.  The KNI Provider Access Edge blueprint uses OpenShift as its k8s distribution, which is deployed on Red Hat CoreOS, an immutable OS that is not supported by Vuls.

https://nexus.akraino.org/content/sites/logs/redhat-kni/bluval_results_pae/os/vuls/log.html.gz



Lynis:

Jan 20, 2021 

https://nexus.akraino.org/content/sites/logs/redhat-kni/bluval_results_pae/os/lynis/

Accepted with exceptions shown at:

Release 4 Lynis Exceptions



Kube-Hunter: 

Jan 20, 2021

https://nexus.akraino.org/content/sites/logs/redhat-kni/bluval_results_pae/k8s/kube-hunter/Kube-Hunter.Kube-Hunter/

Accepted with exceptions shown at:

Release 4 Kube-Hunter Exceptions

Yes

12/09

12/09

9

KNI Industrial Edge

@Ricardo Noriega De Soto



Slides for KNI blueprints review:

Akraino_KNI_Release4_Review.pdf

Scheduled at 

TSC 2020-12-17 (Thurs) 7 am Pacific

Y

N

Mgmt Hub logs:

https://logs.akraino.org/production/vex-yul-akraino-jenkins-prod-1/kni-blueprint-management-hub-verify-deploy-gcp/9/

IE logs:

https://logs.akraino.org/production/vex-yul-akraino-jenkins-prod-1/kni-blueprint-ie-verify-deploy-gcp/2/



Akraino R4 blueprint Datasheet_ KNI IE.odt

Form uploaded

Reviewed by API subcommittee

Accepted

https://nexus.akraino.org/content/sites/logs/redhat-kni/bluval_results_ie/