-.. This work is licensed under a Creative Commons Attribution 4.0 International License.
+.. This work is licensed under a Creative Commons Attribution 4.0
+ International License.
+.. http://creativecommons.org/licenses/by/4.0
+.. (c) ONAP Project and its contributors
+.. _release_notes:
-Release Notes
-=============
+******************
+SDNC Release Notes
+******************
-Version 1.7.3
--------------
-:Release Date: 2019-09-30
-El Alto release
+Abstract
+========
-**Artifact Versions**
+This document provides the release notes for the Istanbul release of the Software Defined
+Network Controller (SDNC)
+Summary
+=======
-The following table lists the SDNC docker containers and their versions.
+The Istanbul release of SDNC includes enhancements network slicing as well as a major OpenDaylight release
+upgrade (to Silicon).
-+--------------------------------+---------------------------------------------+-----------+
-| Image name | Description | Version(s)|
-+================================+=============================================+===========+
-| onap/network-discovery | POMBA : network discovery microservice | 1.7.3 |
-+--------------------------------+---------------------------------------------+-----------+
-| onap/service-decomposition | POMBA : service decomposition microservice | 1.7.3 |
-+--------------------------------+---------------------------------------------+-----------+
-| onap/sdnc-ansible-server-image | Ansible server | 1.7.3 |
-+--------------------------------+---------------------------------------------+-----------+
-| onap/sdnc-aaf-image | SDNC controller image, with AAF integration | 1.7.3 |
-+--------------------------------+---------------------------------------------+-----------+
-| onap/sdnc-image | SDNC controller image, standalone (no AAF) | 1.7.3 |
-+--------------------------------+---------------------------------------------+-----------+
-| onap/sdnc-ueb-listener-image | SDC listener | 1.7.3 |
-+--------------------------------+---------------------------------------------+-----------+
-| onap/sdcn-dmaap-listener-image | DMAAP listener | 1.7.3 |
-+--------------------------------+---------------------------------------------+-----------+
+The Istanbul release of SDNC also includes substantial improvements in automated test coverage integrated into
+the project's CI/CD framework. In this release, each time a new SDNC is built, a regression suite is run
+and the docker is only saved if it passes this regression suite.
-**New Features**
-The full list of El Alto epics and user stories for SDNC may be found at <https://jira.onap.org/issues/?filter=12044>.
+Release Data
+============
-The following list summarizes some of the most significant epics:
++-------------------------+-------------------------------------------+
+| **Project** | SDNC |
+| | |
++-------------------------+-------------------------------------------+
+| **Docker images** | See :ref:`dockercontainers` section below |
++-------------------------+-------------------------------------------+
+| **Release designation** | Istanbul Maintenance Release 1 |
+| | |
++-------------------------+-------------------------------------------+
-+------------+-------------------------------------------------------------------------------------+
-| Jira # | Abstract |
-+============+=====================================================================================+
-| [SDNC-825] | OpenDaylight Neon upgrade |
-+------------+-------------------------------------------------------------------------------------+
-| [SDNC-858] | Tune OpenDaylight Java settings for NETCONF |
-+------------+-------------------------------------------------------------------------------------+
-| [SDNC-822] | Add aggregate-route-policy in GR-API and async changes |
-+------------+-------------------------------------------------------------------------------------+
-| [SDNC-431] | Implement config DB and REST API |
-+------------+-------------------------------------------------------------------------------------+
-| [SDNC-433] | Receive netconf notification from RAN, update config DB and publish change on DMAAP |
-+------------+-------------------------------------------------------------------------------------+
+New features
+------------
+The SDNC Istanbul release includes the following features, most of which are inherited from CCSDK:
-**Bug Fixes**
-The full list of bug fixes in the SDNC El Alto release may be found at <https://jira.onap.org/issues/?filter=12045>
+* Enhance CSIT testing for SDNC (Jira `SDNC-1544 <https://jira.onap.org/browse/SDNC-1544>`)
+* Upgrade to OpenDaylight Silicon Release (Jira `CCSDK-3390 <https://jira.onap.org/browse/CCSDK-3390>`_)
+* A1 Adapter and A1 Policy Management Extensions in Istanbul Release - CCSDK (Jira `CCSDK-3229 <https://jira.onap.org/browse/CCSDK-3229>`_)
+* Support of O-RAN-SC D-Release (Jira `CCSDK-3158 <https://jira.onap.org/browse/CCSDK-3158>`_)
+* CCSDK impacts for Network slicing in Istanbul Release (Jira `CCSDK-3297 <https://jira.onap.org/browse/CCSDK-3297>`_)
-**Known Issues**
-The full list of known issues in SDNC may be found in the ONAP Jira at <https://jira.onap.org/issues/?filter=11119>
-
-One item of note is that the SDNC admin portal was determined to have a number of security vulnerabilities,
-under Known Security Issues. As a temporary remediation, the admin portal was disabled in
-Dublin. These issues have been resolved in El Alto.
-
-**Security Notes**
-
-*Fixed Security Issues*
-
-- CVE-2019-12132 `OJSI-41 <https://jira.onap.org/browse/OJSI-41>`_ SDNC service allows for arbitrary code execution in sla/dgUpload form
-- CVE-2019-12123 `OJSI-42 <https://jira.onap.org/browse/OJSI-42>`_ SDNC service allows for arbitrary code execution in sla/printAsXml form
-- CVE-2019-12113 `OJSI-43 <https://jira.onap.org/browse/OJSI-43>`_ SDNC service allows for arbitrary code execution in sla/printAsGv form
-- `OJSI-91 <https://jira.onap.org/browse/OJSI-91>`_ SDNC exposes unprotected API for user creation
-- `OJSI-98 <https://jira.onap.org/browse/OJSI-98>`_ In default deployment SDNC (sdnc-portal) exposes HTTP port 30201 outside of cluster.
-- CVE-2019-12112 `OJSI-199 <https://jira.onap.org/browse/OJSI-199>`_ SDNC service allows for arbitrary code execution in sla/upload form
-- `OJSI-34 <https://jira.onap.org/browse/OJSI-34>`_ Multiple SQL Injection issues in SDNC
-- `OJSI-99 <https://jira.onap.org/browse/OJSI-99>`_ In default deployment SDNC (sdnc) exposes HTTP port 30202 outside of cluster.
-- `OJSI-100 <https://jira.onap.org/browse/OJSI-100>`_ In default deployment SDNC (sdnc-dgbuilder) exposes HTTP port 30203 outside of cluster.
-- `OJSI-179 <https://jira.onap.org/browse/OJSI-179>`_ dev-sdnc-sdnc exposes JDWP on port 1830 which allows for arbitrary code execution
-- `OJSI-183 <https://jira.onap.org/browse/OJSI-183>`_ SDNC exposes ssh service on port 30208
-
-*Known Security Issues*
-
-
-
-*Known Vulnerabilities in Used Modules*
-
-Quick Links:
-
-- `SDNC project page <https://wiki.onap.org/display/DW/Software+Defined+Network+Controller+Project>`_
-- `Passing Badge information for SDNC <https://bestpractices.coreinfrastructure.org/en/projects/1703>`_
-- `Project Vulnerability Review Table for Casablanca Release <https://wiki.onap.org/pages/viewpage.action?pageId=45307811>`_
-
-
-Version 1.5.4
--------------
-:Release Date: 2019-06-13
+For the complete list of `SDNC Istanbul release epics <https://jira.onap.org/issues/?filter=12638>`_ and
+`SDNC Honolulu release user stories <https://jira.onap.org/issues/?filter=12637>`_ , please see the `ONAP Jira`_.
+**Bug fixes**
-**New Features**
+The SDNC Istanbul Maintenance Release 1 addresses a critical vulnerability discovered in log4j by
+upgrading to version 2.17.1 of the log4j-core package. It also removes the 'data-migrator' package, which
+was an old Proof of Concept that is no longer maintained and which was using a vulnerable version of log4j.
+These changes are described further in Jira `SDNC-1655 <https://jira.onap.org/browse/SDNC-1655>`
-The full list of Dublin epics and user stories for SDNC maybe be found at <https://jira.onap.org/issues/?filter=11803>.
-
-The following list summarizes some of the most significant epics:
-
-+------------+----------------------------------------------------------------------------+
-| Jira # | Abstract |
-+============+============================================================================+
-| [SDNC-551] | OpenDaylight Fluorine Support |
-+------------+----------------------------------------------------------------------------+
-| [SDNC-564] | 5G Use Case |
-+------------+----------------------------------------------------------------------------+
-| [SDNC-565] | CCVPN Use Case Extension |
-+------------+----------------------------------------------------------------------------+
-| [SDNC-570] | SDN-R: Server side component |
-+------------+----------------------------------------------------------------------------+
-| [SDNC-579] | SDN-R : UX-Client |
-+------------+----------------------------------------------------------------------------+
-| [SDNC-631] | SDNC support for the PNF Use Case Network Assign for Plug and Play feature |
-+------------+----------------------------------------------------------------------------+
-
-
-**Bug Fixes**
-The full list of bug fixes in the SDNC Dublin release may be found at <https://jira.onap.org/issues/?filter=11805>
+The full list of `bugs fixed in the SDNC Istanbul release <https://jira.onap.org/issues/?filter=12643>`_ is maintained on the `ONAP Jira`_.
**Known Issues**
-The full list of known issues in SDNC may be found in the ONAP Jira at <https://jira.onap.org/issues/?filter=11119>
-
-One item of note is that the SDNC admin portal was determined to have a number of security vulnerabilities,
-under Known Security Issues. As a temporary remediation, the admin portal is disabled in
-Dublin. It will be re-enabled in El Alto once the security issues are addressed.
-
-**Security Notes**
-*Fixed Security Issues*
+The full list of `known issues in SDNC <https://jira.onap.org/issues/?filter=11119>`_ is maintained on the `ONAP Jira`_.
-- CVE-2019-12132 `OJSI-41 <https://jira.onap.org/browse/OJSI-41>`_ SDNC service allows for arbitrary code execution in sla/dgUpload form
- Fixed temporarily by disabling admportal
-- CVE-2019-12123 `OJSI-42 <https://jira.onap.org/browse/OJSI-42>`_ SDNC service allows for arbitrary code execution in sla/printAsXml form
- Fixed temporarily by disabling admportal
-- CVE-2019-12113 `OJSI-43 <https://jira.onap.org/browse/OJSI-43>`_ SDNC service allows for arbitrary code execution in sla/printAsGv form
- Fixed temporarily by disabling admportal
-- `OJSI-91 <https://jira.onap.org/browse/OJSI-91>`_ SDNC exposes unprotected API for user creation
- Fixed temporarily by disabling admportal
-- `OJSI-98 <https://jira.onap.org/browse/OJSI-98>`_ In default deployment SDNC (sdnc-portal) exposes HTTP port 30201 outside of cluster.
- Fixed temporarily by disabling admportal
-- CVE-2019-12112 `OJSI-199 <https://jira.onap.org/browse/OJSI-199>`_ SDNC service allows for arbitrary code execution in sla/upload form
- Fixed temporarily by disabling admportal
-*Known Security Issues*
-- `OJSI-34 <https://jira.onap.org/browse/OJSI-34>`_ Multiple SQL Injection issues in SDNC
-- `OJSI-99 <https://jira.onap.org/browse/OJSI-99>`_ In default deployment SDNC (sdnc) exposes HTTP port 30202 outside of cluster.
-- `OJSI-100 <https://jira.onap.org/browse/OJSI-100>`_ In default deployment SDNC (sdnc-dgbuilder) exposes HTTP port 30203 outside of cluster.
-- `OJSI-179 <https://jira.onap.org/browse/OJSI-179>`_ dev-sdnc-sdnc exposes JDWP on port 1830 which allows for arbitrary code execution
-- `OJSI-183 <https://jira.onap.org/browse/OJSI-183>`_ SDNC exposes ssh service on port 30208
+Deliverables
+------------
-*Known Vulnerabilities in Used Modules*
+Software Deliverables
+~~~~~~~~~~~~~~~~~~~~~
-Quick Links:
+.. _dockercontainers:
-- `SDNC project page <https://wiki.onap.org/display/DW/Software+Defined+Network+Controller+Project>`_
-- `Passing Badge information for SDNC <https://bestpractices.coreinfrastructure.org/en/projects/1703>`_
-- `Project Vulnerability Review Table for Casablanca Release <https://wiki.onap.org/pages/viewpage.action?pageId=45307811>`_
+Docker Containers
+`````````````````
-Version: 1.4.4
---------------
-
-**Bugs Fixes**
-
-The following bugs are fixed in the SDNC Casablanca January 2019 maintenance release:
-
-+------------+------------------------------------------------------------------------------------------+
-| Jira # | Abstract |
-+============+==========================================================================================+
-| [SDNC-405] | SDNC API documentation is missing on ReadTheDocs |
-+------------+------------------------------------------------------------------------------------------+
-| [SDNC-523] | vnf-information.vnf-id validation check should not be mandatory in validate-vnf-input DG |
-+------------+------------------------------------------------------------------------------------------+
-| [SDNC-532] | oof query failed due to hostname change, returning unknown host |
-+------------+------------------------------------------------------------------------------------------+
-| [SDNC-534] | wrong "input" field in DMaaP message template |
-+------------+------------------------------------------------------------------------------------------+
-| [SDNC-536] | Upgrade zjsonpatch version to remediate vulnerabilities |
-+------------+------------------------------------------------------------------------------------------+
-| [SDNC-537] | Update to spring-boot 2.1.0-RELEASE |
-+------------+------------------------------------------------------------------------------------------+
-| [SDNC-540] | CCVPN closed loop testing failed. |
-+------------+------------------------------------------------------------------------------------------+
-| [SDNC-542] | [PORT] Network Discovery microservice does not log |
-+------------+------------------------------------------------------------------------------------------+
-| [SDNC-546] | CCVPN bugs fix for manual free integration test |
-+------------+------------------------------------------------------------------------------------------+
-| [SDNC-549] | Retain MD-SAL data on pod recreate |
-+------------+------------------------------------------------------------------------------------------+
-
-
-
-Version: 1.4.3
---------------
+The following table lists the docker containers comprising the SDNC Honolulu
+release along with the current stable Honolulu version/tag. Each of these is
+available on the ONAP nexus3 site (https://nexus3.onap.org) and can be downloaded
+with the following command::
+ docker pull nexus3.onap.org:10001/{image-name}:{version}
-:Release Date: 2018-11-30
-**New Features**
-The Casablanca release of SDNC introduces the following new features:
++--------------------------------+-----------------------------------------------------+---------+
+| Image name | Description | Version |
++================================+=====================================================+=========+
+| onap/sdnc-aaf-image | SDNC controller image, integrated with AAF for RBAC | 2.2.5 |
++--------------------------------+-----------------------------------------------------+---------+
+| onap/sdnc-ansible-server-image | Ansible server | 2.2.5 |
++--------------------------------+-----------------------------------------------------+---------+
+| onap/sdnc-dmaap-listener-image | DMaaP listener | 2.2.5 |
++--------------------------------+-----------------------------------------------------+---------+
+| onap/sdnc-image | SDNC controller image, without AAF integration | 2.2.5 |
++--------------------------------+-----------------------------------------------------+---------+
+| onap/sdnc-ueb-listener-image | SDC listener | 2.2.5 |
++--------------------------------+-----------------------------------------------------+---------+
+| onap/sdnc-web-image | Web tier (currently only used by SDN-R persona) | 2.2.5 |
++--------------------------------+-----------------------------------------------------+---------+
- - Network Discovery, in support of POMBA
- - Support for CCVPN use case
- - Change Management enhancements
-**Bug Fixes**
+Documentation Deliverables
+~~~~~~~~~~~~~~~~~~~~~~~~~~
-The list of bugs fixed in the SDNC Casablanca release may be found in the ONAP Jira at <https://jira.onap.org/issues/?filter=11544>
+* `SDN Controller for Radio user guide`_
+Known Limitations, Issues and Workarounds
+=========================================
-**Known Issues**
-
-The list of known issues in the SDNC project may be found in the ONAP Jira at <https://jira.onap.org/issues/?filter=11119>
+System Limitations
+------------------
+No system limitations noted.
-**Security Notes**
-SDNC code has been formally scanned during build time using NexusIQ and all Critical vulnerabilities have been addressed, items that remain open have been assessed for risk and determined to be false positive. The SDNC open Critical security vulnerabilities and their risk assessment have been documented as part of the `project <https://wiki.onap.org/pages/viewpage.action?pageId=45307811>`_.
+Known Vulnerabilities
+---------------------
-Quick Links:
+Any known vulnerabilities for ONAP are tracked in the `ONAP Jira`_ in the OJSI project. Any outstanding OJSI issues that
+pertain to SDNC are listed in the :ref:`secissues` section below.
-- `SDNC project page <https://wiki.onap.org/display/DW/Software+Defined+Network+Controller+Project>`_
-- `Passing Badge information for SDNC <https://bestpractices.coreinfrastructure.org/en/projects/1703>`_
-- `Project Vulnerability Review Table for Casablanca Release <https://wiki.onap.org/pages/viewpage.action?pageId=45307811>`_
-**Upgrade Notes**
- NA
+Workarounds
+-----------
-**Deprecation Notes**
- NA
+Not applicable.
-**Other**
- NA
-Version: 1.3.4
+Security Notes
--------------
-:Release Date: 2018-07-06
-
-**New Features**
+Known Security Issues
+~~~~~~~~~~~~~~~~~~~~~
-The full list of SDNC Beijing Epics and user stories can be found in the ONAP Jira at <https://jira.onap.org/issues/?filter=10791>. The
-following table lists the major features included in the Beijing release.
+There are no known outstanding security issues related to SDNC Istanbul.
-+------------+-------------------------------------------------------------------------------------------------------------+
-| Jira # | Abstract |
-+============+=============================================================================================================+
-| [SDNC-278] | Change management in-place software upgrade execution using Ansible <https://jira.onap.org/browse/SDNC-278> |
-+------------+-------------------------------------------------------------------------------------------------------------+
-| [SDNC-163] | Deploy a SDN-C high availability environment - Kubernetes <https://jira.onap.org/browse/SDNC-163> |
-+------------+-------------------------------------------------------------------------------------------------------------+
+Test Results
+============
+Not applicable
-**Bug Fixes**
-The list of bugs fixed in the SDNC Beijing release may be found in the ONAP Jira at <https://jira.onap.org/issues/?filter=11118>
-
-
-**Known Issues**
-
-+------------+----------------------------------------------------------------------------------------------------------------------------------+
-| Jira # | Abstract |
-+============+==================================================================================================================================+
-| [SDNC-324] | IPV4_ADDRESS_POOL is empty <https://jira.onap.org/browse/SDNC-324> |
-+------------+----------------------------------------------------------------------------------------------------------------------------------+
-| [SDNC-321] | dgbuilder won't save DG <https://jira.onap.org/browse/SDNC-321> |
-+------------+----------------------------------------------------------------------------------------------------------------------------------+
-| [SDNC-304] | SDNC OOM intermittent Healthcheck failure - JSONDecodeError - on different startup order <https://jira.onap.org/browse/SDNC-304> |
-+------------+----------------------------------------------------------------------------------------------------------------------------------+
-| [SDNC-115] | VNFAPI DGs contain plugin references to software not part of ONAP <https://jira.onap.org/browse/SDNC-115> |
-+------------+----------------------------------------------------------------------------------------------------------------------------------+
-| [SDNC-114] | Generic API DGs contain plugin references to software not part of ONAP <https://jira.onap.org/browse/SDNC-114> |
-+------------+----------------------------------------------------------------------------------------------------------------------------------+
-| [SDNC-106] | VNFAPI DGs contain old openecomp and com.att based plugin references <https://jira.onap.org/browse/SDNC-106> |
-+------------+----------------------------------------------------------------------------------------------------------------------------------+
-| [SDNC-64] | SDNC is not setting FromApp identifier in logging MDC <https://jira.onap.org/browse/SDNC-64> |
-+------------+----------------------------------------------------------------------------------------------------------------------------------+
-
-
-**Security Notes**
-
-SDNC code has been formally scanned during build time using NexusIQ and all Critical vulnerabilities have been addressed, items that remain open have been assessed for risk and determined to be false positive. The SDNC open Critical security vulnerabilities and their risk assessment have been documented as part of the `project <https://wiki.onap.org/pages/viewpage.action?pageId=28379582>`_.
-
-Quick Links:
-
-- `SDNC project page <https://wiki.onap.org/display/DW/Software+Defined+Network+Controller+Project>`_
-- `Passing Badge information for SDNC <https://bestpractices.coreinfrastructure.org/en/projects/1703>`_
-- `Project Vulnerability Review Table for SDNC <https://wiki.onap.org/pages/viewpage.action?pageId=28379582>`_
-
-**Upgrade Notes**
- NA
-
-**Deprecation Notes**
- NA
-
-**Other**
- NA
-
-Version: 1.2.1
---------------
-
-:Release Date: 2018-01-18
-
-**Bug Fixes**
-
-- `SDNC-145 <https://jira.onap.org/browse/SDNC-145>`_ Error message refers to wrong parameters
-- `SDNC-195 <https://jira.onap.org/browse/SDNC-195>`_ UEB listener doesn't insert correct parameters for allotted resources in DB table ALLOTTED_RESOURCE_MODEL
-- `SDNC-198 <https://jira.onap.org/browse/SDNC-198>`_ CSIT job fails
-- `SDNC-201 <https://jira.onap.org/browse/SDNC-201>`_ Fix DG bugs from integration tests
-- `SDNC-202 <https://jira.onap.org/browse/SDNC-202>`_ Search for service -data null match, set vGW LAN IP via Heat
-- `SDNC-211 <https://jira.onap.org/browse/SDNC-211>`_ Update SDNC Amsterdam branch to use maintenance release versions
-- `SDNC-212 <https://jira.onap.org/browse/SDNC-212>`_ Duplicate file name
-
-Version: 1.2.0
---------------
-
-:Release Date: 2017-11-16
-
-**New Features**
-
-The ONAP Amsterdam release introduces the following changes to SDNC from
-the original openECOMP seed code:
- - Refactored / moved common platform code to new CCSDK project
- - Refactored code to rename openecomp to onap
- - Introduced new GENERIC-RESOURCE-API api, used by vCPE and VoLTE use cases
- - Introduced new docker containers for SDC and DMAAP interfaces
-
-**Bug Fixes**
- NA
-**Known Issues**
-The following known high priority issues are being worked and are expected to be delivered
-in release 1.2.1:
-- `SDNC-179 <https://jira.onap.org/browse/SDNC-179>`_ Failed to make HTTPS connection in restapicall node
-- `SDNC-181 <https://jira.onap.org/browse/SDNC-181>`_ Change call to brg-wan-ip-address vbrg-wan-ip brg topo activate DG
-- `SDNC-182 <https://jira.onap.org/browse/SDNC-182>`_ Fix VNI Consistency: Add vG vxlan tunnel setup and bridge domain setup to brg-topo-activate DG
+References
+==========
-**Security Issues**
- NA
+For more information on the ONAP Istanbul release, please see:
-**Upgrade Notes**
- NA
+#. `ONAP Home Page`_
+#. `ONAP Documentation`_
+#. `ONAP Release Downloads`_
+#. `ONAP Wiki Page`_
-**Deprecation Notes**
- NA
-**Other**
- NA
+.. _`ONAP Home Page`: https://www.onap.org
+.. _`ONAP Wiki Page`: https://wiki.onap.org
+.. _`ONAP Documentation`: https://docs.onap.org
+.. _`ONAP Release Downloads`: https://git.onap.org
+.. _`ONAP Jira`: https://jira.onap.org
+.. _`SDN Controller for Radio user guide`: https://docs.onap.org/projects/onap-ccsdk-features/en/latest/guides/onap-user/home.html
Code Review / sdnc / oam.git / blobdiff