Document OJSI-158 vulnerability
[dmaap/datarouter.git] / docs / release-notes.rst
1 .. This work is licensed under a Creative Commons Attribution 4.0 International License.
2 .. http://creativecommons.org/licenses/by/4.0
3
4 .. toctree::
5    :maxdepth: 2
6
7 Release-notes
8 ==============
9
10 Version: 2.1.0 (Dublin)
11 ---------------------------
12
13 :Release Date: 2019-05-30
14
15 The DataRouter(DR) provisioning API is a HTTPS-based, REST-like API for creating and managing DR feeds and
16 subscriptions.
17
18 New Features:
19
20 +--------------+-------------------------------------------------------------------------------+
21 | JIRA ID      | Description                                                                   |
22 +==============+===============================================================================+
23 | DMAAP-978    | [DR] Query of publication history (new API) for use by Data File Collector)   |
24 +--------------+-------------------------------------------------------------------------------+
25 | DMAAP-980    | [DR] Optional consumer compression feed handling                              |
26 +--------------+-------------------------------------------------------------------------------+
27 | DMAAP-1016   | DR provisioning AAF integration                                               |
28 +--------------+-------------------------------------------------------------------------------+
29
30 Bug Fixes:
31
32 +----------------+--------------------------------------------------------------------------------------------------+
33 | JIRA ID        | Description                                                                                      |
34 +================+==================================================================================================+
35 | DMAAP-964      | [DMAAP] DMAAP deployment failures starting 20190115 on casablanca branch                         |
36 +----------------+--------------------------------------------------------------------------------------------------+
37 | DMAAP-1010     | [DR] DMaaP Data Router fails healthcheck                                                         |
38 +----------------+--------------------------------------------------------------------------------------------------+
39 | DMAAP-1047     | [DR] Data Router docker version missing explicit version number                                  |
40 +----------------+--------------------------------------------------------------------------------------------------+
41 | DMAAP-1048     | [DR] AAF certs expired on dmaap-dr-prov and dmaap-dr-node                                        |
42 +----------------+--------------------------------------------------------------------------------------------------+
43 | DMAAP-1161     | [DR] filebeat container on DR-Node and DR-Prov are unable to publish to kibana                   |
44 +----------------+--------------------------------------------------------------------------------------------------+
45
46 Known Issues
47 N/A
48
49 Security Issues
50
51 *Fixed Security Issues*
52
53 *Known Security Issues*
54
55 - In default deployment DMAAP (dmaap-dr-prov) exposes HTTP port 30259 outside of cluster. [`OJSI-158 <https://jira.onap.org/browse/OJSI-158>`_]
56
57 *Known Vulnerabilities in Used Modules*
58
59 DMAAP code has been formally scanned during build time using NexusIQ and all Critical vulnerabilities have been
60 addressed, items that remain open have been assessed for risk and determined to be false positive. The DMAAP open
61 Critical security vulnerabilities and their risk assessment have been documented as part of the `project <https://wiki.onap.org/pages/viewpage.action?pageId=42598688>`_.
62
63 - `DMAAP Project Page <https://wiki.onap.org/display/DW/DMaaP+Planning>`_
64 - `Passing Badge information for DMAAP DataRouter <https://bestpractices.coreinfrastructure.org/en/projects/2192>`_
65 - `Project Vulnerability Review Table for DMAAP <https://wiki.onap.org/pages/viewpage.action?pageId=42598688>`_
66
67 Upgrade Notes
68 N/A
69
70 Deprecation Notes
71 N/A
72
73 Other
74 N/A
75
76
77 Version: 1.0.8 (Casablanca)
78 ---------------------------
79
80 :Release Date: 2019-02-28
81
82 The DataRouter(DR) provisioning API is a HTTPS-based, REST-like API for creating and managing DR feeds and
83 subscriptions.
84
85 New Features:
86
87 +--------------+------------------------------------------------------------------+
88 | JIRA ID      | Description                                                      |
89 +==============+==================================================================+
90 +--------------+------------------------------------------------------------------+
91
92 Bug Fixes:
93
94 +----------------+--------------------------------------------------------------------------------------------------+
95 | JIRA ID        | Description                                                                                      |
96 +================+==================================================================================================+
97 | DMAAP-1065     | [DR] Casablanca - AAF certs expired on dmaap-dr-prov and dmaap-dr-node                           |
98 +----------------+--------------------------------------------------------------------------------------------------+
99
100 Known Issues
101 N/A
102
103 Security Issues
104 DMAAP code has been formally scanned during build time using NexusIQ and all Critical vulnerabilities have been
105 addressed, items that remain open have been assessed for risk and determined to be false positive. The DMAAP open
106 Critical security vulnerabilities and their risk assessment have been documented as part of the `project <https://wiki.onap.org/pages/viewpage.action?pageId=42598688>`_.
107
108 - `DMAAP Project Page <https://wiki.onap.org/display/DW/DMaaP+Planning>`_
109 - `Passing Badge information for DMAAP DataRouter <https://bestpractices.coreinfrastructure.org/en/projects/2192>`_
110 - `Project Vulnerability Review Table for DMAAP <https://wiki.onap.org/pages/viewpage.action?pageId=42598688>`_
111
112 Upgrade Notes
113 N/A
114
115 Deprecation Notes
116 N/A
117
118 Other
119 N/A
120
121
122 Version: 1.0.3 (Casablanca)
123 ---------------------------
124
125 :Release Date: 2018-11-30
126
127 The DataRouter(DR) provisioning API is a HTTPS-based, REST-like API for creating and managing DR feeds and
128 subscriptions.
129
130 New Features:
131
132 +--------------+------------------------------------------------------------------+
133 | JIRA ID      | Description                                                      |
134 +==============+==================================================================+
135 | DMAAP-20     | REST api for publishing data to DR                               |
136 +--------------+------------------------------------------------------------------+
137 | DMAAP-21     | REST api for subscribing to data in DR                           |
138 +--------------+------------------------------------------------------------------+
139
140 Bug Fixes:
141
142 +----------------+---------------------------------------------------------------------------------------------------------------------------------+
143 | JIRA ID        | Description                                                                                                                     |
144 +================+=================================================================================================================================+
145 | DMAAP-877      | DR Logging API not storing Feed/Sub data                                                                                        |
146 +----------------+---------------------------------------------------------------------------------------------------------------------------------+
147 | DMAAP-850      | Second subscriber not receiving the published file                                                                              |
148 +----------------+---------------------------------------------------------------------------------------------------------------------------------+
149 | DMAAP-596      | DR - datarouter-prov container fails to come up successfully                                                                    |
150 +----------------+---------------------------------------------------------------------------------------------------------------------------------+
151 | DMAAP-565      | Incorrect nexusUrl parameter in datarouter pom files                                                                            |
152 +----------------+---------------------------------------------------------------------------------------------------------------------------------+
153
154 Known Issues
155 N/A
156
157 Security Issues
158 DMAAP code has been formally scanned during build time using NexusIQ and all Critical vulnerabilities have been
159 addressed, items that remain open have been assessed for risk and determined to be false positive. The DMAAP open
160 Critical security vulnerabilities and their risk assessment have been documented as part of the `project <https://wiki.onap.org/pages/viewpage.action?pageId=42598688>`_.
161
162 - `DMAAP Project Page <https://wiki.onap.org/display/DW/DMaaP+Planning>`_
163 - `Passing Badge information for DMAAP DataRouter <https://bestpractices.coreinfrastructure.org/en/projects/2192>`_
164 - `Project Vulnerability Review Table for DMAAP <https://wiki.onap.org/pages/viewpage.action?pageId=42598688>`_
165
166 Upgrade Notes
167 N/A
168
169 Deprecation Notes
170 N/A
171
172 Other
173 N/A