International License.
.. http://creativecommons.org/licenses/by/4.0
.. (c) ONAP Project and its contributors
+.. _release_notes:
******************
SDNC Release Notes
Abstract
========
-This document provides the release notes for the Frankfurt release of the Software Defined
+This document provides the release notes for the Jakarta release of the Software Defined
Network Controller (SDNC)
Summary
=======
-The Frankfurt release of SDNC introduces new functionality to support PNFs (Physical Network Functions), extends support
-for Netconf/TLS to support CMPv2, and adds support for the Multi Domain Optical Network Service use case.
+The Jakarta release of SDNC includes enhancements network slicing as well as a major OpenDaylight release
+upgrade (to Phosphorus).
+
+The Jakarta release of SDNC also includes substantial improvements in automated test coverage integrated into
+the project's CI/CD framework. In this release, each time a new SDNC is built, a regression suite is run
+and the docker is only saved if it passes this regression suite.
+
Release Data
+-------------------------+-------------------------------------------+
| **Docker images** | See :ref:`dockercontainers` section below |
+-------------------------+-------------------------------------------+
-| **Release designation** | Frankfurt |
-| | |
-+-------------------------+-------------------------------------------+
-| **Release date** | 06/04/2020 |
+| **Release designation** | Jakarta |
| | |
+-------------------------+-------------------------------------------+
New features
------------
-The SDNC Frankfurt release includes the following features:
+The SDNC Jakarta release includes the following features, which are inherited from CCSDK:
-* ORAN-compliant A1 adaptor (Jira `SDNC-965 <https://jira.onap.org/browse/SDNC-965>`_)
-* Multi-Domain Optical Service (Jira `SDNC-928 <https://jira.onap.org/browse/SDNC-928>`_)
-* Python 2 -> Python 3 migration (Jira `SDNC-967 <https://jira.onap.org/browse/SDNC-967>`_)
-* Upgrade to new Policy lifecycle API (Jira `SDNC-968 <https://jira.onap.org/browse/SDNC-968>`_)
+* Upgrade to OpenDaylight Phosphorus Release (Jira `CCSDK-3451 <https://jira.onap.org/browse/CCSDK-3451>`_)
+* A1 Adapter and A1 Policy Management Extensions in Jakarta Release - CCSDK (Jira `CCSDK-3463 <https://jira.onap.org/browse/CCSDK-3463>`_)
+* CCSDK impacts for Network slicing in Jakarta Release (Jira `CCSDK-3554 <https://jira.onap.org/browse/CCSDK-3554>`_)
-
-For the complete list of `SDNC Frankfurt release epics <https://jira.onap.org/issues/?filter=12322>`_ and
-`SDNC Frankfurt release user stories <https://jira.onap.org/issues/?filter=12323>`_ , please see the `ONAP Jira`_.
+For the complete list of `CCSDK Jakarta release epics <https://jira.onap.org/issues/?filter=12711>`_ and
+`CCSDK Jakarta release user stories <https://jira.onap.org/issues/?filter=12800>`_ , please see the `ONAP Jira`_.
**Bug fixes**
-The full list of `bugs fixed in the SDNC Frankfurt release <https://jira.onap.org/issues/?filter=12324>`_ is maintained on the `ONAP Jira`_.
+The SDNC Jakarta release carries forward a fix from the Istanbul Maintenance Release 1 for a critical vulnerability discovered in log4j by
+upgrading to version 2.17.1 of the log4j-core package. It also removes the 'data-migrator' package, which
+was an old Proof of Concept that is no longer maintained and which was using a vulnerable version of log4j.
+These changes are described further in Jira `SDNC-1655 <https://jira.onap.org/browse/SDNC-1655>`
+
+The full list of `bugs fixed in the SDNC Jakarta release <https://jira.onap.org/issues/?filter=12802>`_ is maintained on the `ONAP Jira`_.
**Known Issues**
The full list of `known issues in SDNC <https://jira.onap.org/issues/?filter=11119>`_ is maintained on the `ONAP Jira`_.
+
+
Deliverables
------------
Docker Containers
`````````````````
-The following table lists the docker containers comprising the SDNC Frankfurt
-release along with the current stable Frankfurt version/tag. Each of these is
+The following table lists the docker containers comprising the SDNC Jakarta
+release along with the current stable Jakarta version/tag. Each of these is
available on the ONAP nexus3 site (https://nexus3.onap.org) and can be downloaded
with the following command::
docker pull nexus3.onap.org:10001/{image-name}:{version}
-Note: users that want to use the latest in-development Frankfurt version may use the
-tag 0.7-STAGING-latest to pull the latest daily Frankfurt build
+--------------------------------+-----------------------------------------------------+---------+
| Image name | Description | Version |
+================================+=====================================================+=========+
-| onap/sdnc-aaf-image | SDNC controller image, integrated with AAF for RBAC | 1.8.2 |
+| onap/sdnc-aaf-image | SDNC controller image, integrated with AAF for RBAC | 2.3.1 |
+--------------------------------+-----------------------------------------------------+---------+
-| onap/sdnc-ansible-server-image | Ansible server | 1.8.2 |
+| onap/sdnc-ansible-server-image | Ansible server | 2.3.1 |
+--------------------------------+-----------------------------------------------------+---------+
-| onap/sdnc-dmaap-listener-image | DMaaP listener | 1.8.2 |
+| onap/sdnc-dmaap-listener-image | DMaaP listener | 2.3.1 |
+--------------------------------+-----------------------------------------------------+---------+
-| onap/sdnc-image | SDNC controller image, without AAF integration | 1.8.2 |
+| onap/sdnc-image | SDNC controller image, without AAF integration | 2.3.1 |
+--------------------------------+-----------------------------------------------------+---------+
-| onap/sdnc-ueb-listener-image | SDC listener | 1.8.2 |
+| onap/sdnc-ueb-listener-image | SDC listener | 2.3.1 |
+--------------------------------+-----------------------------------------------------+---------+
-| onap/sdnc-web-image | Web tier (currently only used by SDN-R persona) | 1.8.2 |
+| onap/sdnc-web-image | Web tier (currently only used by SDN-R persona) | 2.3.1 |
+--------------------------------+-----------------------------------------------------+---------+
Security Notes
--------------
-Fixed Security Issues
-~~~~~~~~~~~~~~~~~~~~~
-
-The following security issues have been addressed in the Frankfurt SDNC release:
-
-* `OSJI-34 <https://jira.onap.org/browse/OJSI-34>`_ : Multiple SQL Injection issues in SDNC
-* `OSJI-40 <https://jira.onap.org/browse/OJSI-40>`_ : SDNC service allows for arbitrary code execution
-* `OSJI-41 <https://jira.onap.org/browse/OJSI-41>`_ : SDNC service allows for arbitrary code execution in sla/dgUpload form (CVE-2019-12132)
-* `OSJI-42 <https://jira.onap.org/browse/OJSI-42>`_ : SDNC service allows for arbitrary code execution in sla/printAsXml form (CVE-2019-12123)
-* `OSJI-43 <https://jira.onap.org/browse/OJSI-43>`_ : SDNC service allows for arbitrary code execution in sla/printAsGv form (CVE-2019-12113)
-* `OSJI-199 <https://jira.onap.org/browse/OJSI-199>`_ : SDNC service allows for arbitrary code execution in sla/upload form (CVE-2019-12112)
-* `SDNC-1145 <https://jira.onap.org/browse/SDNC-1145>`_ : Pods still run as root
-* `SDNC-970 <https://jira.onap.org/browse/SDNC-970>`_ : Password removal from OOM Helm charts
-
-.. _secissues :
Known Security Issues
~~~~~~~~~~~~~~~~~~~~~
-There is currently one known SDNC security issue, related to the SDNC portal
-
-* `OJSI-91 <https://jira.onap.org/browse/OJSI-91>`_ : SDNC exposes unprotected API for user creation
-
-The current implementation of the SDNC portal has a self-subscription model - so anyone can create an account by going to
-the setup link. This is not appropriate for production deployment and will be fixed in a future release.
-The SDNC portal is disabled in the Frankfurt helm charts and we recommend that it NOT be enabled in a production
-deployment until this issue is corrected.
-
+There are no known outstanding security issues related to SDNC Jakarta.
Test Results
References
==========
-For more information on the ONAP Frankfurt release, please see:
+For more information on the ONAP Jakarta release, please see:
#. `ONAP Home Page`_
#. `ONAP Documentation`_
.. _`ONAP Documentation`: https://docs.onap.org
.. _`ONAP Release Downloads`: https://git.onap.org
.. _`ONAP Jira`: https://jira.onap.org
-.. _`SDN Controller for Radio user guide`: https://docs.onap.org/en/frankfurt/submodules/ccsdk/features.git/docs/guides/onap-user/home.html
+.. _`SDN Controller for Radio user guide`: https://docs.onap.org/projects/onap-ccsdk-features/en/latest/guides/onap-user/home.html