El-alto rls notes updates

Change-Id: I07e6e2fcbf8b23c501e954644187a956cc22b161
Signed-off-by: VENKATESH KUMAR <vv770d@att.com>
Issue-ID: DCAEGEN2-1669
Signed-off-by: VENKATESH KUMAR <vv770d@att.com>

diff --git a/docs/sections/apis/configbinding.json b/docs/sections/apis/configbinding.json
index 14454bb..0e2931b 100644 (file)
--- a/docs/sections/apis/configbinding.json
+++ b/docs/sections/apis/configbinding.json
@@ -1,7 +1,7 @@
 {
   "swagger": "2.0",
   "info": {
-    "version": "2.2.3",
+    "version": "2.5.2",
     "title": "Config Binding Service"
   },
   "paths": {

diff --git a/docs/sections/apis/configbinding.yaml b/docs/sections/apis/configbinding.yaml
index 1d3e788..95115c7 100644 (file)
--- a/docs/sections/apis/configbinding.yaml
+++ b/docs/sections/apis/configbinding.yaml
@@ -19,7 +19,7 @@
 ---
 swagger: "2.0"
 info:
-  version: "2.2.3"
+  version: "2.5.2"
   title: "Config Binding Service"
 paths:
   /service_component/{service_component_name}:

diff --git a/docs/sections/release-notes.rst b/docs/sections/release-notes.rst
index 92c6957..4009918 100644 (file)
--- a/docs/sections/release-notes.rst
+++ b/docs/sections/release-notes.rst
@@ -3,11 +3,10 @@
 Release Notes
 =============
 
-
-Version: 5.0.0
+Version: 5.0.1
 --------------
 
-El-Alto Early-drop focused on technical debts and SECCOM priority work-items.
+The offical El-Alto release (rolls up all 5.0.0 early drop deliverables) focused on technical debts and SECCOM priority work-items.
 
 Following is summary of updates done for DCAEGEN2
 
@@ -18,6 +17,7 @@ Following platform components were enabled for HTTPS
       -   CBS is used by all DCAE MS to fetch DCAE MS configuration from Consul. To mitigate impact for DCAE MS, CBS deployment through OOM/Helm was modified to support CBS on both HTTP and HTTPS. `Design for CBS TLS migration <https://wiki.onap.org/display/DW/TLS+support+for+CBS+-+Migration+Plan>`_
     - Cloudify Manager
     - InventoryAPI
+    - Non-root container process (ConfigBindingService, InventoryAPI, ServiceChangeHandler, HV-VES, PRH, Son-handler)
 
 All components interfacing with platform components were modified to support TLS interface
 
@@ -26,6 +26,8 @@ All components interfacing with platform components were modified to support TLS
     - Dynamic Topic support via Dmaap plugin integration for DataFileCollector MS
     - Dynamic Topic support via Dmaap plugin integration for PM-Mapper service 
     - CBS client libraries updated to remove consul service lookup
+    - Image Optimization (ConfigBindingService, InventoryAPI, ServiceChangeHandler, HV-VES, PRH, Son-handler) 
+
 
 
 With this release, all DCAE platform components has been migrated to helm charts. Following is complete list of DCAE components available part of default ONAP/DCAE installation.
@@ -109,6 +111,97 @@ Source code of DCAE components are released under the following repositories on
     * Healthcheck/Readiness probe VES Collector when authentication is enabled (DCAEGEN2-1594) 
     
 
+**Security Notes**
+
+*Fixed Security Issues*
+* In default deployment DCAEGEN2 (xdcae-datafile-collector) exposes HTTP port 30223 outside of cluster. [`OJSI-109 <https://jira.onap.org/browse/OJSI-109>`_]
+* In default deployment DCAEGEN2 (xdcae-tca-analytics) exposes HTTP port 32010 outside of cluster. [`OJSI-161 <https://jira.onap.org/browse/OJSI-161>`_]
+* CVE-2019-12126 - DCAE TCA exposes unprotected APIs/UIs on port 32010. [`OJSI-201 <https://jira.onap.org/browse/OJSI-201>`_]
+
+*Known Security Issues*
+
+    * Unsecured Swagger UI Interface in xdcae-datafile-collector. [`OJSI-28 <https://jira.onap.org/browse/OJSI-28>`_]
+    * Unsecured Swagger UI Interface in xdcae-ves-collector. [`OJSI-30 <https://jira.onap.org/browse/OJSI-30>`_]
+    * In default deployment DCAEGEN2 (xdcae-ves-collector) exposes HTTP port 30235 outside of cluster. [`OJSI-116 <https://jira.onap.org/browse/OJSI-116>`_]
+    * In default deployment DCAEGEN2 (dcae-datafile-collector) exposes HTTP port 30262 outside of cluster. [`OJSI-131 <https://jira.onap.org/browse/OJSI-131>`_]
+    * In default deployment DCAEGEN2 (xdcae-dashboard) exposes HTTP port 30418 outside of cluster. [`OJSI-159 <https://jira.onap.org/browse/OJSI-159>`_]
+    * In default deployment DCAEGEN2 (dcae-redis) exposes redis port 30286 outside of cluster. [`OJSI-187 <https://jira.onap.org/browse/OJSI-187>`_]
+    * In default deployment DCAEGEN2 (config-binding-service) exposes HTTP port 30415 outside of cluster. [`OJSI-195 <https://jira.onap.org/browse/OJSI-195>`_]
+
+*Known Vulnerabilities in Used Modules*
+
+DCAE code has been formally scanned during build time using NexusIQ and all Critical vulnerabilities have been addressed, items that remain open have been assessed for risk and determined to be false positive. The DCAE open Critical security vulnerabilities and their risk assessment have been documented as part of the `project <https://wiki.onap.org/pages/viewpage.action?pageId=51282478>`_.
+
+Quick Links:
+        - `DCAE project page <https://wiki.onap.org/display/DW/Data+Collection+Analytics+and+Events+Project>`_
+
+        - `Passing Badge information for DCAE <https://bestpractices.coreinfrastructure.org/en/projects/1718>`_
+
+        - `Project Vulnerability Review Table for DCAE <https://wiki.onap.org/pages/viewpage.action?pageId=68540441>`_
+
+
+**Upgrade Notes**
+
+The following components are upgraded from Dublin/R4 and El-Alto EarlyDrop deliverables.
+    - K8S Bootstrap container:
+       - Docker container tag: onap/org.onap.dcaegen2.deployments.k8s-bootstrap-container:1.6.4
+       - Description: K8s bootstrap container updated to interface with Cloudify using HTTPS; new k8s and Dmaap plugin version included; Dashboard deployment was removed.
+    - Configuration Binding Service:
+       - Docker container tag: onap/org.onap.dcaegen2.platform.configbinding.app-app:2.5.2
+       - Description: HTTPS support, Image optimization and non-root user
+    - Inventory API
+       - Docker container image tag: onap/org.onap.dcaegen2.platform.inventory-api:3.4.0
+       - Description: HTTPS support, container optmization and non-root user
+    - DataFile Collector
+       - Docker container tag: onap/org.onap.dcaegen2.collectors.datafile.datafile-app-server:1.2.3
+       - Description : Code optimization, bug fixes, dmaap plugin integration
+    - SON Handler MS
+       - Docker container tag: onap/org.onap.dcaegen2.services.son-handler:1.1.1
+       - Description : Image optimization, bug fixes, CBS integration
+    - VES Adapter/Mapper MS
+       - Docker container tag: onap/org.onap.dcaegen2.services.mapper.vesadapter.universalvesadaptor:1.0.1
+       - Description : Image optimization & CBS periodic polling
+    - PRH MS
+       - Docker container tag: onap/org.onap.dcaegen2.services.prh.prh-app-server:1.3.1
+       - Description : Code optimization, bug fixes and SDK alignment
+    - HV-VES MS
+       - Docker container tag: onap/org.onap.dcaegen2.collectors.hv-ves.hv-collector-main:1.3.0
+       - Description : Code optimization, bug fixes and SDK alignment
+
+Version: 5.0.0
+--------------
+
+El-Alto Early-drop focused on technical debts and SECCOM priority work-items.
+
+Following is summary of updates done for DCAEGEN2
+
+**Security**
+
+Following platform components were enabled for HTTPS
+    - ConfigBindingService (CBS)
+      -   CBS is used by all DCAE MS to fetch DCAE MS configuration from Consul. To mitigate impact for DCAE MS, CBS deployment through OOM/Helm was modified to support CBS on both HTTP and HTTPS. `Design for CBS TLS migration <https://wiki.onap.org/display/DW/TLS+support+for+CBS+-+Migration+Plan>`_
+    - Cloudify Manager
+    - InventoryAPI
+
+All components interfacing with platform components were modified to support TLS interface
+
+**Miscellaneous**
+    - DCAE Dashboard deployment migration from cloudify blueprint to OOM/Chart
+    - Dynamic Topic support via Dmaap plugin integration for DataFileCollector MS
+    - Dynamic Topic support via Dmaap plugin integration for PM-Mapper service 
+    - CBS client libraries updated to remove consul service lookup
+
+
+
+**Bug Fixes**
+    * k8splugin can generate deployment name > 63 chars (DCAEGEN2-1667)
+    * CM container loading invalid Cloudify types file (DCAEGEN2-1685)
+
+
+**Known Issues**
+    * Healthcheck/Readiness probe VES Collector when authentication is enabled (DCAEGEN2-1594) 
+    
+
 **Security Notes**
 
 *Fixed Security Issues*

diff --git a/docs/sections/services/dfc/installation.rst b/docs/sections/services/dfc/installation.rst
index e50d035..6f1c91e 100644 (file)
--- a/docs/sections/services/dfc/installation.rst
+++ b/docs/sections/services/dfc/installation.rst
@@ -60,9 +60,9 @@ Installation
 The following command will download the Dublin version of the datafile image from\r
 nexus and launch it in the container named "datafile":\r
 \r
-    ``docker run -d -p 8100:8100 -p 8433:8433 nexus3.onap.org:10001/onap/org.onap.dcaegen2.collectors.datafile.datafile-app-server:1.1.3``\r
+    ``docker run -d -p 8100:8100 -p 8433:8433 nexus3.onap.org:10001/onap/org.onap.dcaegen2.collectors.datafile.datafile-app-server:1.2.3``\r
 \r
-For another version, it is possible to replace the tag '1.1.3' with any version that seems suitable (including latest).\r
+For another version, it is possible to replace the tag '1.2.3' with any version that seems suitable (including latest).\r
 Available images are visible following this `link`_.\r
 \r
 .. _link: https://nexus3.onap.org/#browse/search=keyword%3D*datafile*\r

diff --git a/docs/sections/services/mapper/installation.rst b/docs/sections/services/mapper/installation.rst
index a83229c..2add9d9 100644 (file)
--- a/docs/sections/services/mapper/installation.rst
+++ b/docs/sections/services/mapper/installation.rst
@@ -15,9 +15,9 @@ VES-Mapper can be deployed individually though it will throw errors if it can't
 **Blueprint/model/image**
 
 VES-Mapper blueprint is available @ 
-https://git.onap.org/dcaegen2/services/mapper/tree/UniversalVesAdapter/dpo/blueprints/k8s-vesmapper.yaml-template.yaml?h=dublin
+https://git.onap.org/dcaegen2/services/mapper/tree/UniversalVesAdapter/dpo/blueprints/k8s-vesmapper.yaml-template.yaml?h=elalto
 
-VES-Mapper docker image is available in Nexus repo @ `nexus3.onap.org:10001/onap/org.onap.dcaegen2.services.mapper.vesadapter.universalvesadaptor:1.0.0-SNAPSHOT <nexus3.onap.org:10001/onap/org.onap.dcaegen2.services.mapper.vesadapter.universalvesadaptor:1.0.0-SNAPSHOT>`_
+VES-Mapper docker image is available in Nexus repo @ `nexus3.onap.org:10001/onap/org.onap.dcaegen2.services.mapper.vesadapter.universalvesadaptor:1.0.1 <nexus3.onap.org:10001/onap/org.onap.dcaegen2.services.mapper.vesadapter.universalvesadaptor:1.0.1>`_
 
 
 
@@ -61,5 +61,5 @@ After VES-Mapper's validated blueprint is uploaded,  create Cloudify Deployment
 
 Though this is not a preferred way, to run VES-Mapper container on standalone mode using local configuration file carried in the docker image, following docker run command can be used.
  
-    ``docker run -d   nexus3.onap.org:10003/onap/org.onap.dcaegen2.services.mapper.vesadapter.universalvesadaptor:1.0.0-SNAPSHOT``
+    ``docker run -d   nexus3.onap.org:10003/onap/org.onap.dcaegen2.services.mapper.vesadapter.universalvesadaptor:1.0.1``