1 .. This work is licensed under a Creative Commons Attribution 4.0
3 .. http://creativecommons.org/licenses/by/4.0
4 .. (c) ONAP Project and its contributors
15 This document provides the release notes for the Jakarta release of the Common Controller Software
16 Development Kit (CCSDK).
21 The Jakarta release of CCSDK introduces enhancements to network slicing and extends support
22 for ORAN integration via the A1 interface. It also includes a major OpenDaylight release
23 upgrade (to Phosphorus).
29 +-------------------------+-------------------------------------------+
30 | **Project** | CCSDK |
32 +-------------------------+-------------------------------------------+
33 | **Docker images** | See :ref:`dockercontainers` section below |
34 +-------------------------+-------------------------------------------+
35 | **Release designation** | Jakarta |
37 +-------------------------+-------------------------------------------+
43 The CCSDK Jakarta release includes the following features:
45 * Upgrade to OpenDaylight Phosphorus Release (Jira `CCSDK-3451 <https://jira.onap.org/browse/CCSDK-3451>`_)
46 * A1 Adapter and A1 Policy Management Extensions in Jakarta Release - CCSDK (Jira `CCSDK-3463 <https://jira.onap.org/browse/CCSDK-3463>`_)
47 * CCSDK impacts for Network slicing in Jakarta Release (Jira `CCSDK-3554 <https://jira.onap.org/browse/CCSDK-3554>`_)
51 For the complete list of `CCSDK Jakarta release epics <https://jira.onap.org/issues/?filter=12711>`_ and
52 `CCSDK Jakarta release user stories <https://jira.onap.org/issues/?filter=12800>`_ , please see the `ONAP Jira`_.
56 The Jakarta release carries forward a fix from Istanbul Maintenance Release 1 for a critical vulnerability discovered in the log4j library. This
57 issue has been resolved by upgrading to version 2.17.1 of log4j-core, which is no longer vulnerable to
58 this issue. The complete list of changes can be found in Jira `CCSDK-3556 <https://jira.onap.org/browse/CCSDK-3556>`
60 The full list of `bugs fixed in the CCSDK Jakarta release <https://jira.onap.org/issues/?filter=12801>`_ is maintained on the `ONAP Jira`_.
64 The full list of `known issues in CCSDK <https://jira.onap.org/issues/?filter=11341>`_ is maintained on the `ONAP Jira`_.
66 It should be noted that several CCSDK repositories have a transitive dependency on log4j version 1.x. While this version
67 is not vulnerable to the recent 'log4shell' vulnerability, there are other known vulnerabilities in this
68 version. The following table summarizes where log4j 1.x is currently used in CCSDK:
70 +----------------+-----------------------------------------------------------------------------------+
71 | Repository | Transitive dependencies |
72 +================+===================================================================================+
73 | ccsdk/apps | org.onap.aaf.authz:aaf-misc-env:2.1.21 -> log4j:log4j:1.2.17 |
74 +----------------+-----------------------------------------------------------------------------------+
75 | ccsdk/cds | org.hibernate:hibernate-testing:jar:5.4.32.Final -> log4j:log4j:1.2.17 |
76 +----------------+-----------------------------------------------------------------------------------+
77 | | org.onap.dmaap.messagerouter.dmaapclient:dmaapClient:1.1.5 -> log4j:log4j:1.2.17 |
78 +----------------+-----------------------------------------------------------------------------------+
79 | ccsdk/features | org.onap.aaf.authz:aaf-misc-env:2.1.21 -> log4j:log4j:1.2.17 |
80 +----------------+-----------------------------------------------------------------------------------+
81 | | org.onap.dmaap.messagerouter.dmaapclient:dmaapClient:1.1.12 -> log4j:log4j:1.2.17 |
82 +----------------+-----------------------------------------------------------------------------------+
83 | ccsdk/sli | org.onap.dmaap.messagerouter.dmaapclient:dmaapClient:1.1.12 -> log4j:log4j:1.2.17 |
84 +----------------+-----------------------------------------------------------------------------------+
99 The following table lists the docker containers comprising the CCSDK Jakarta
100 release along with the current stable Jakarta version/tag. Each of these is
101 available on the ONAP nexus3 site (https://nexus3.onap.org) and can be downloaded
102 with the following command::
104 docker pull nexus3.onap.org:10001/{image-name}:{version}
107 Note: users that want to use the latest in-development Jakarta version may use the
108 tag 1.3-STAGING-latest to pull the latest daily Jakarta build
110 +------------------------------------------+--------------------------------------------+---------+
111 | Image name | Description | Version |
112 +==========================================+============================================+=========+
113 | onap/ccsdk-alpine-j11-image | Base Alpine Linux image for CCSDK | 1.3.4 |
114 +------------------------------------------+--------------------------------------------+---------+
115 | onap/ccsdk-ansible-server-image | Ansible server image | 1.3.4 |
116 +------------------------------------------+--------------------------------------------+---------+
117 | onap/ccsdk-apps-ms-neng | Naming microservice | 1.3.0 |
118 +------------------------------------------+--------------------------------------------+---------+
119 | onap/ccsdk-blueprints-processor | CDS blueprint processor | 1.3.0 |
120 +------------------------------------------+--------------------------------------------+---------+
121 | onap/ccsdk-cds-ui-server | CDS user interface back end | 1.3.0 |
122 +------------------------------------------+--------------------------------------------+---------+
123 | onap/ccsdk-commandexecutor | CDS command executor | 1.3.0 |
124 +------------------------------------------+--------------------------------------------+---------+
125 | onap/ccsdk-controllerblueprint | CDS controller blueprints | 1.3.0 |
126 +------------------------------------------+--------------------------------------------+---------+
127 | onap/ccsdk-dgbuilder-image | Directed graph builder | 1.3.4 |
128 +------------------------------------------+--------------------------------------------+---------+
129 | onap/ccsdk-odl-phosphorus-alpine-image | Alpine based OpenDaylight Phosphorus image | 1.3.4 |
130 +------------------------------------------+--------------------------------------------+---------+
131 | onap/ccsdk-odlsli-alpine-image | Alpine based OpenDaylight image with CCSDK | 1.3.4 |
132 +------------------------------------------+--------------------------------------------+---------+
133 | onap/ccsdk-saltstack-server-image | Saltstack server | 1.3.4 |
134 +------------------------------------------+--------------------------------------------+---------+
135 | onap/ccsdk-sdclistener | CDS SDC listener | 1.3.0 |
136 +------------------------------------------+--------------------------------------------+---------+
137 | onap/ccsdk-ubuntu-image | Base Ubuntu image for CCSDK | 1.3.4 |
138 +------------------------------------------+--------------------------------------------+---------+
142 In addition to docker containers, CCSDK also provides libraries that are intended to be used by
143 client applications (e.g. APPC, SDNC) as maven dependencies.
148 Many CCSDK clients need to be able to inherit settings from third party parent poms provided
149 by OpenDaylight or springboot, and therefore are unable to use the standard ONAP parent pom.
150 The CCSDK parent repository provides its own version of parent poms whose contents are consistent
151 with ONAP standard settings (as defined in oparent), but whose parent is the OpenDaylight or
152 springboot parent, so that clients can effectively merge both sets of settings.
154 The following table lists the parent poms provided by CCSDK and the current stable
155 Frankfurt version of each.
157 +-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
158 | groupId | artifactId | version | Description |
159 +=======================+===============================+=========+==================================================================================================+
160 | org.onap.ccsdk.parent | binding-parent | 2.3.3 | Parent used in place of OpenDaylight binding-parent |
161 +-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
162 | org.onap.ccsdk.parent | bundle-parent | 2.3.3 | Parent used in place of OpenDaylight bundle-parent |
163 +-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
164 | org.onap.ccsdk.parent | client-parent | 2.3.3 | Parent used for projects that create client libraries for OpenDaylight APIs |
165 +-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
166 | org.onap.ccsdk.parent | dependencies-bom | 2.3.3 | Bill of Materials POM that defines versions of third party libraries used outside ODL container. |
167 | | | | Intended to be imported in dependencyManagement section. |
168 +-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
169 | org.onap.ccsdk.parent | dependencies-odl-bom | 2.3.3 | Bill of Materials POM that defines versions of third party libraries used within ODL container. |
170 | | | | Intended to be imported in dependencyManagement section. |
171 +-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
172 | org.onap.ccsdk.parent | feature-repo-parent | 2.3.3 | Parent used in place of OpenDaylight feature-repo-parent |
173 +-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
174 | org.onap.ccsdk.parent | karaf4-parent | 2.3.3 | Parent used in place of OpenDaylight karaf4-parent |
175 +-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
176 | org.onap.ccsdk.parent | mdsal-it-parent | 2.3.3 | Parent used in place of OpenDaylight mdsal-it-parent |
177 +-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
178 | org.onap.ccsdk.parent | odlparent | 2.3.3 | Parent used in place of OpenDaylight odlparent |
179 +-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
180 | org.onap.ccsdk.parent | odlparent-lite | 2.3.3 | Parent used in place of OpenDaylight odlparent-lite |
181 +-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
182 | org.onap.ccsdk.parent | single-feature-parent | 2.3.3 | Parent used in place of OpenDaylight single-feature-parent |
183 +-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
184 | org.onap.ccsdk.parent | spring-boot-1-starter-parent | 2.3.3 | Parent used in place of spring-boot-starter-parent for Springboot 1.x. |
185 | | | | *NOTE* This is deprecated and will be removed in a future release, since springboot 1.x should |
186 | | | | no longer be used due to security issues |
187 +-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
188 | org.onap.ccsdk.parent | spring-boot-25-starter-parent | 2.3.3 | Parent used in place of spring-boot-starter-parent for Springboot 2.5.x |
189 +-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
190 | org.onap.ccsdk.parent | spring-boot-26-starter-parent | 2.3.4 | Parent used in place of spring-boot-starter-parent for Springboot 2.6.x |
191 +-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
192 | org.onap.ccsdk.parent | spring-boot-starter-parent | 2.3.3 | Parent used in place of spring-boot-starter-parent for Springboot 2.3.x |
193 +-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
194 | org.onap.ccsdk.parent | standalone-parent | 2.3.3 | Parent used for projects that have no need for other third party parent poms |
195 +-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
199 The ccsdk/sli library provides the Service Logic Interpreter (SLI), which is the engine that runs directed graphs. It also
200 provides a number of libraries that can be used by other CCSDK client projects.
202 The following table lists the maven artifacts provided for use by CCSDK client
205 +-------------------------------+------------------------------+---------+--------------------------------------------+
206 | groupId | artifactId | version | Description |
207 +===============================+==============================+=========+============================================+
208 | org.onap.ccsdk.sli.core | dblib-provider | 1.4.1 | Database access library |
209 +-------------------------------+------------------------------+---------+--------------------------------------------+
210 | org.onap.ccsdk.sli.core | sli-common | 1.4.1 | Common SLI data objects |
211 +-------------------------------+------------------------------+---------+--------------------------------------------+
212 | org.onap.ccsdk.sli.core | sli-provider-base | 1.4.1 | ODL-independent SLI implementation objects |
213 +-------------------------------+------------------------------+---------+--------------------------------------------+
214 | org.onap.ccsdk.sli.core | sli-provider | 1.4.1 | ODL-dependent SLI implementation objects |
215 +-------------------------------+------------------------------+---------+--------------------------------------------+
216 | org.onap.ccsdk.sli.core | sliPluginUtils-provider | 1.4.1 | Utilities for use in SLI adaptors/plugins |
217 +-------------------------------+------------------------------+---------+--------------------------------------------+
218 | org.onap.ccsdk.sli.core | utils-provider | 1.4.1 | Utilities |
219 +-------------------------------+------------------------------+---------+--------------------------------------------+
220 | org.onap.ccsdk.sli.adaptors | aai-service-provider | 1.4.1 | A&AI interface adaptor |
221 +-------------------------------+------------------------------+---------+--------------------------------------------+
222 | org.onap.ccsdk.sli.adaptors | ansible-adapter-bundle | 1.4.1 | Ansible interface adaptor |
223 +-------------------------------+------------------------------+---------+--------------------------------------------+
224 | org.onap.ccsdk.sli.adaptors | mdsal-resource-provider | 1.4.1 | MD-SAL interface adaptor |
225 +-------------------------------+------------------------------+---------+--------------------------------------------+
226 | org.onap.ccsdk.sli.adaptors | netbox-client-provider | 1.4.1 | netbox interface adaptor |
227 +-------------------------------+------------------------------+---------+--------------------------------------------+
228 | org.onap.ccsdk.sli.adaptors | resource-assignment-provider | 1.4.1 | resource allocator |
229 +-------------------------------+------------------------------+---------+--------------------------------------------+
230 | org.onap.ccsdk.sli.adaptors | saltstack-adaptor-provider | 1.4.1 | saltstack interface adaptor |
231 +-------------------------------+------------------------------+---------+--------------------------------------------+
232 | org.onap.ccsdk.sli.adaptors | sql-resource-provider | 1.4.1 | SQL database interface adaptor |
233 +-------------------------------+------------------------------+---------+--------------------------------------------+
234 | org.onap.ccsdk.sli.northbound | asdcApi-provider | 1.4.1 | ODL-based SDC interface |
235 +-------------------------------+------------------------------+---------+--------------------------------------------+
236 | org.onap.ccsdk.sli.northbound | dataChange-provider | 1.4.1 | A&AI data change notification interface |
237 +-------------------------------+------------------------------+---------+--------------------------------------------+
238 | org.onap.ccsdk.sli.northbound | dmaap-listener | 1.4.1 | DMaaP listener interface |
239 +-------------------------------+------------------------------+---------+--------------------------------------------+
240 | org.onap.ccsdk.sli.northbound | lcm-provider | 1.4.1 | Life Cycle Management event interface |
241 +-------------------------------+------------------------------+---------+--------------------------------------------+
242 | org.onap.ccsdk.sli.northbound | ueb-listener | 1.4.1 | SDC event listener |
243 +-------------------------------+------------------------------+---------+--------------------------------------------+
244 | org.onap.ccsdk.sli.plugins | properties-node-provider | 1.4.1 | Used to load a properties file for use in |
245 | | | | a directed graph |
246 +-------------------------------+------------------------------+---------+--------------------------------------------+
247 | org.onap.ccsdk.sli.plugins | restapi-call-node-provider | 1.4.1 | Used to call a generic REST API from a |
248 | | | | directed graph |
249 +-------------------------------+------------------------------+---------+--------------------------------------------+
250 | org.onap.ccsdk.sli.plugins | restconf-client-provider | 1.4.1 | Used to call a RESTCONF API from a |
251 | | | | directed graph |
252 +-------------------------------+------------------------------+---------+--------------------------------------------+
253 | org.onap.ccsdk.sli.plugins | sshapi-call-node | 1.4.1 | Used to invoke an SSH interface from a |
254 | | | | directed graph |
255 +-------------------------------+------------------------------+---------+--------------------------------------------+
256 | org.onap.ccsdk.sli.plugins | template-node-provider | 1.4.1 | Provides velocity template support |
257 +-------------------------------+------------------------------+---------+--------------------------------------------+
259 Documentation Deliverables
260 ~~~~~~~~~~~~~~~~~~~~~~~~~~
262 * `SDN Controller for Radio user guide`_
264 Known Limitations, Issues and Workarounds
265 =========================================
270 No system limitations noted.
273 Known Vulnerabilities
274 ---------------------
276 Any known vulnerabilities for ONAP are tracked in the `ONAP Jira`_ in the OJSI project. Any outstanding OJSI issues that
277 pertain to CCSDK are listed in the :ref:`secissues` section below.
289 Fixed Security Issues
290 ~~~~~~~~~~~~~~~~~~~~~
292 There are no new security fixes in the Jakarta release.
296 Known Security Issues
297 ~~~~~~~~~~~~~~~~~~~~~
299 There is currently only one known CCSDK security issue, related to a third party application (netbox) that CCSDK uses:
301 * `OJSI-160 <https://jira.onap.org/browse/OJSI-160>`_ : netbox-nginx exposes plain text HTTP endpoint using port 30420
313 For more information on the ONAP Jakarta release, please see:
316 #. `ONAP Documentation`_
317 #. `ONAP Release Downloads`_
321 .. _`ONAP Home Page`: https://www.onap.org
322 .. _`ONAP Wiki Page`: https://wiki.onap.org
323 .. _`ONAP Documentation`: https://docs.onap.org
324 .. _`ONAP Release Downloads`: https://git.onap.org
325 .. _`ONAP Jira`: https://jira.onap.org
326 .. _`CDS user guide`: https://docs.onap.org/en/frankfurt/submodules/ccsdk/cds.git/docs/index.html
327 .. _`SDN Controller for Radio user guide`: https://docs.onap.org/en/frankfurt/submodules/ccsdk/features.git/docs/guides/onap-user/home.html