Code Review / msb / apigateway.git / blobdiff
? search:
summary | shortlog | log | commit | commitdiff | review | tree
raw | inline | side by side
Release apigateway container 1.6.0
[msb/apigateway.git] / docs / release-notes.rst
diff --git a/docs/release-notes.rst b/docs/release-notes.rst
index 3dad498..a417398 100644 (file)
--- a/docs/release-notes.rst
+++ b/docs/release-notes.rst
@@ -10,6 +10,267 @@ MSB is platform independent, while it is integrated with Kubernetes(OOM) to prov
 Release Notes
 =============
 
+Version: 1.6.0 London Release
+-------------------------------
+
+:Release Date: 2022-4-15
+
+**New Features**
+
+**Bug Fixes**
+
+- MSB-755  The route from the MSB module to the usecase-ui module does not support HTTP
+
+**Fixed Security Issues**
+
+- MSB-732  PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR LONDON RELEASE
+
+**Known Issues**
+
+**Security Notes**
+
+Quick Links:
+        - `MSB project page for LondonRelease <https://wiki.onap.org/display/DW/Microservices+Bus+Project>`_
+
+        - `Passing Badge information for MSB <https://bestpractices.coreinfrastructure.org/en/projects/1601>`_
+
+**Upgrade Notes**
+
+N/A
+
+**Deprecation Notes**
+
+Plain HTTP APIs have been removed from Frankfurt release, please use HTTPS instead.
+
+N/A
+
+**Other**
+
+N/A
+
+Version: 1.5.0 Kohn Release
+-------------------------------
+
+:Release Date: 2022-9-19
+
+**New Features**
+
+- MSB-692 MSB apigateway performance improvement
+
+**Bug Fixes**
+
+**Fixed Security Issues**
+
+- MSB-681 PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR KOHN
+
+**Known Issues**
+
+**Security Notes**
+
+Quick Links:
+        - `MSB project page for Kohn Release <https://wiki.onap.org/display/DW/Microservices+Bus+Project>`_
+
+        - `Passing Badge information for MSB <https://bestpractices.coreinfrastructure.org/en/projects/1601>`_
+
+**Upgrade Notes**
+
+N/A
+
+**Deprecation Notes**
+
+Plain HTTP APIs have been removed from Frankfurt release, please use HTTPS instead.
+
+N/A
+
+**Other**
+
+N/A
+
+Version: 1.4.0 Jakarta Release
+-------------------------------
+
+:Release Date: 2022-3-24
+
+**New Features**
+
+- MSB-661 MSB should support TLSv1.3
+
+**Bug Fixes**
+
+- MSB-663 NGINX requests is too small on one keepalive connection
+- MSB-645 remove obsolete docs from msb/java-sdk repo
+- MSB-646 remove obsolete docs from msb/discovery repo
+- MSB-633 remove duplicated docs in msb/apigateway repo and update sphinx config files
+
+**Fixed Security Issues**
+
+- MSB-662 NGINX should user server ciphers for security
+- MSB-644 PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR JAKARTA
+
+**Known Issues**
+
+**Security Notes**
+
+Quick Links:
+        - `MSB project page for Jakarta Release <https://wiki.onap.org/display/DW/Microservices+Bus+Project>`_
+
+        - `Passing Badge information for MSB <https://bestpractices.coreinfrastructure.org/en/projects/1601>`_
+
+**Upgrade Notes**
+
+N/A
+
+**Deprecation Notes**
+
+Plain HTTP APIs have been removed from Frankfurt release, please use HTTPS instead.
+
+N/A
+
+**Other**
+
+N/A
+
+Version: 1.3.1 Istanbul Release
+-------------------------------
+
+:Release Date: 2021-9-22
+
+**New Features**
+
+**Bug Fixes**
+
+**Fixed Security Issues**
+
+- MSB-593 PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR ISTANBUL
+- MSB-519 MSB has python 2.7 pods
+- MSB-520 MSB has java 8 pods
+- MSB-521 MSB certificates are too long and have bad owner
+
+**Known Issues**
+
+- MSB-534 kube2msb fails to register SO services including braces in url
+
+**Security Notes**
+
+The remaining issues are supposed to be fixed in the next release.
+
+Quick Links:
+        - `MSB project page for Istanbul Release <https://wiki.onap.org/display/DW/Microservices+Bus+Project>`_
+
+        - `Passing Badge information for MSB <https://bestpractices.coreinfrastructure.org/en/projects/1601>`_
+
+**Upgrade Notes**
+
+N/A
+
+**Deprecation Notes**
+
+Plain HTTP APIs have been removed from Frankfurt release, please use HTTPS instead.
+
+N/A
+
+**Other**
+
+N/A
+
+Version: 1.2.7 Guilin Release
+------------------------------
+
+:Release Date: 2020-11-19
+
+**New Features**
+
+**Bug Fixes**
+
+- MSB-539 Fix nginx say 10000 worker_connections are not enough
+- MSB-540 nginx in discovery deletes useless log printing
+- MSB-541 Discovery supports blocking monitoring time exceeding 10min
+
+**Fixed Security Issues**
+
+**Known Issues**
+
+- MSB-519 MSB has python 2.7 pods
+- MSB-520 MSB has java 8 pods
+- MSB-521 MSB certificates are too long and have bad owner
+- MSB-529 MSB dockers contain GPLv3
+
+**Security Notes**
+
+The remaining issues are supposed to be fixed in the next release.
+
+Quick Links:
+        - `MSB project page for Guilin Release <https://wiki.onap.org/display/DW/Microservices+Bus+Project>`_
+
+        - `Passing Badge information for MSB <https://bestpractices.coreinfrastructure.org/en/projects/1601>`_
+
+
+**Upgrade Notes**
+
+N/A
+
+**Deprecation Notes**
+
+Plain HTTP APIs have been removed from Frankfurt release, please use HTTPS instead.
+
+N/A
+
+**Other**
+
+N/A
+
+Version: 1.2.6 Frankfurt Release
+--------------------------------
+
+:Release Date: 2020-May-07
+
+**New Features**
+
+**Bug Fixes**
+
+- MSB-470 Pairwise testing fails from Portal to MSB
+- MSB-468 MSB verification job is unstable
+- MSB-467 Certificate in MSB is set to use zte.com.cn
+- MSB-451 Code coverage data can't show at sonarcloud
+
+**Fixed Security Issues**
+
+- MSB-465 Update alpine to the latest version
+- MSB-462 Pods still run as root
+- MSB-418 Solve MSB vulnerability onap-msb-discovery-jackson-databind
+- MSB-417 Solve MSB vulnerability onap-msb-apigateway-jackson-databind
+- MSB-410 Solve MSB vulnerability onap-msb-java-sdk-jackson-databind
+- MSB-408 Solve MSB vulnerability onap-msb-java-sdk-commons-codec
+- MSB-407 Solve MSB vulnerability onap-msb-java-sdk-okhttp 
+- MSB-398 Remove plain HTTP Rest APIs
+- MSB-386 General sonar fixes
+
+**Known Issues**
+
+**Security Notes**
+
+MSB code has been formally scanned during build time using NexusIQ and all Critical vulnerabilities have been addressed.
+The remaining issues are identified as false positive and their risk assessment have been documented.
+
+Quick Links:
+        - `MSB project page for Frankfurt Release <https://wiki.onap.org/display/DW/Microservices+Bus+Project>`_
+
+        - `Passing Badge information for MSB <https://bestpractices.coreinfrastructure.org/en/projects/1601>`_
+
+**Upgrade Notes**
+
+N/A
+
+**Deprecation Notes**
+
+Plain HTTP APIs have been removed from Frankfurt release, please use HTTPS instead.
+
+N/A
+
+**Other**
+
+N/A
+
 Version: 1.2.5 EI-Alto Release
 ------------------------------
 
@@ -34,14 +295,14 @@ This release only contains a few bug fixes and small features.
 **Security Notes**
 
 MSB code has been formally scanned during build time using NexusIQ and all Critical vulnerabilities have been addressed.
-The remaining issues are identified as false positive and their risk assessment have been documented as part of the `project <https://wiki.onap.org/pages/viewpage.action?pageId=64003723>`_.
+The remaining issues are identified as false positive and their risk assessment have been documented.
 
 Quick Links:
-       - `MSB project page <https://wiki.onap.org/display/DW/Microservices+Bus+Project>`_
+       - `MSB project page for EI-Alto Release <https://wiki.onap.org/display/DW/Microservices+Bus+Project>`_
 
        - `Passing Badge information for MSB <https://bestpractices.coreinfrastructure.org/en/projects/1601>`_
 
-       - `Project Vulnerability Review Table for MSB <https://wiki.onap.org/pages/viewpage.action?pageId=64003723>`_
+       - `Project Vulnerability Review Table for MSB EI-Alto Release <https://wiki.onap.org/pages/viewpage.action?pageId=68541445>`_
 
 **Upgrade Notes**
 
@@ -87,14 +348,14 @@ This release only contains some security improvements and a few fixes.
 **Security Notes**
 
 MSB code has been formally scanned during build time using NexusIQ and all Critical vulnerabilities have been addressed.
-The remaining issues are identified as false positive and their risk assessment have been documented as part of the `project <https://wiki.onap.org/pages/viewpage.action?pageId=64003723>`_.
+The remaining issues are identified as false positive and their risk assessment have been documented.
 
 Quick Links:
-       - `MSB project page <https://wiki.onap.org/display/DW/Microservices+Bus+Project>`_
+       - `MSB project page for Dublin Release <https://wiki.onap.org/display/DW/Microservices+Bus+Project>`_
 
        - `Passing Badge information for MSB <https://bestpractices.coreinfrastructure.org/en/projects/1601>`_
 
-       - `Project Vulnerability Review Table for MSB <https://wiki.onap.org/pages/viewpage.action?pageId=64003723>`_
+       - `Project Vulnerability Review Table for MSB Dublin Release <https://wiki.onap.org/pages/viewpage.action?pageId=64003723>`_
 
 **Upgrade Notes**
 
@@ -143,14 +404,14 @@ How to manage ONAP microservices with Istio service mesh:
 **Security Notes**
 
 MSB code has been formally scanned during build time using NexusIQ and all Critical vulnerabilities have been addressed, items that remain open have been assessed for risk and actions to be taken in future release.
-The MSB open Critical security vulnerabilities and their risk assessment have been documented as part of the `project <https://wiki.onap.org/pages/viewpage.action?pageId=45305668>`_.
+The MSB open Critical security vulnerabilities and their risk assessment have been documented.
 
 Quick Links:
-       - `MSB project page <https://wiki.onap.org/display/DW/Microservices+Bus+Project>`_
+       - `MSB project page for Casablanca Release <https://wiki.onap.org/display/DW/Microservices+Bus+Project>`_
 
        - `Passing Badge information for MSB <https://bestpractices.coreinfrastructure.org/en/projects/1601>`_
 
-       - `Project Vulnerability Review Table for MSB <https://wiki.onap.org/pages/viewpage.action?pageId=45305668>`_
+       - `Project Vulnerability Review Table for MSB Casablanca Release <https://wiki.onap.org/pages/viewpage.action?pageId=45305668>`_
 
 **Upgrade Notes**
 
@@ -197,13 +458,13 @@ N/A
 
 **Security Notes**
 
-MSB code has been formally scanned during build time using NexusIQ and all Critical vulnerabilities have been addressed, items that remain open have been assessed for risk and determined to be false positive. The MSB open Critical security vulnerabilities and their risk assessment have been documented as part of the `project <https://wiki.onap.org/pages/viewpage.action?pageId=25439016>`_.
+MSB code has been formally scanned during build time using NexusIQ and all Critical vulnerabilities have been addressed, items that remain open have been assessed for risk and determined to be false positive. The MSB open Critical security vulnerabilities and their risk assessment have been documented.
 
 Quick Links:
 
-- `MSB project page <https://wiki.onap.org/display/DW/Microservices+Bus+Project>`_
+- `MSB project page for  Beijing Release <https://wiki.onap.org/display/DW/Microservices+Bus+Project>`_
 - `Passing Badge information for MSB <https://bestpractices.coreinfrastructure.org/en/projects/1601>`_
-- `Project Vulnerability Review Table for MSB <https://wiki.onap.org/pages/viewpage.action?pageId=25439016>`_
+- `Project Vulnerability Review Table for MSB Beijing Release <https://wiki.onap.org/pages/viewpage.action?pageId=40927271>`_
 
 **Upgrade Notes**
 
Service API gateway which provides client request routing, client request load balancing, transformation, such as https to http, authentication & authorization for service request with plugin of auth service provider,service request logging,service request rate-limiting,service monitoring,request result cache,solve cross-domain issue for web application and other functionalities with the pluggable architecture capability.