1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
|
.. This work is licensed under a Creative Commons Attribution 4.0
International License.
.. http://creativecommons.org/licenses/by/4.0
.. (c) ONAP Project and its contributors
.. _release_notes:
*******************
CCSDK Release Notes
*******************
Abstract
========
This document provides the release notes for the Istanbul release of the Common Controller Software
Development Kit (CCSDK).
Summary
=======
The Istanbul release of CCSDK introduces enhancements to network slicing and extends support
for ORAN integration via the A1 interface. It also includes a major OpenDaylight release
upgrade (to Silicon).
Release Data
============
+-------------------------+-------------------------------------------+
| **Project** | CCSDK |
| | |
+-------------------------+-------------------------------------------+
| **Docker images** | See :ref:`dockercontainers` section below |
+-------------------------+-------------------------------------------+
| **Release designation** | Istanbul Maintenance Release 1 |
| | |
+-------------------------+-------------------------------------------+
New features
------------
The CCSDK Istanbul release includes the following features:
* Upgrade to OpenDaylight Silicon Release (Jira `CCSDK-3390 <https://jira.onap.org/browse/CCSDK-3390>`_)
* A1 Adapter and A1 Policy Management Extensions in Istanbul Release - CCSDK (Jira `CCSDK-3229 <https://jira.onap.org/browse/CCSDK-3229>`_)
* Support of O-RAN-SC D-Release (Jira `CCSDK-3158 <https://jira.onap.org/browse/CCSDK-3158>`_)
* CCSDK impacts for Network slicing in Istanbul Release (Jira `CCSDK-3297 <https://jira.onap.org/browse/CCSDK-3297>`_)
For the complete list of `CCSDK Istanbul release epics <https://jira.onap.org/issues/?filter=12635>`_ and
`CCSDK Istanbul release user stories <https://jira.onap.org/issues/?filter=12636>`_ , please see the `ONAP Jira`_.
**Bug fixes**
Istanbul Maintenance Release 1 addresses a critical vulnerability discovered in the log4j library. This
issue has been resolved by upgrading to version 2.17.1 of log4j-core, which is no longer vulnerable to
this issue. The complete list of changes can be found in Jira `CCSDK-3556 <https://jira.onap.org/browse/CCSDK-3556>`
The full list of `bugs fixed in the CCSDK Istanbul release <https://jira.onap.org/issues/?filter=12639>`_ is maintained on the `ONAP Jira`_.
**Known Issues**
The full list of `known issues in CCSDK <https://jira.onap.org/issues/?filter=11341>`_ is maintained on the `ONAP Jira`_.
It should be noted that several CCSDK repositories have a transitive dependency on log4j version 1.x. While this version
is not vulnerable to the recent 'log4shell' vulnerability, there are other known vulnerabilities in this
version. The following table summarizes where log4j 1.x is currently used in CCSDK:
+----------------+-----------------------------------------------------------------------------------+
| Repository | Transitive dependencies |
+================+===================================================================================+
| ccsdk/apps | org.onap.aaf.authz:aaf-misc-env:2.1.21 -> log4j:log4j:1.2.17 |
+----------------+-----------------------------------------------------------------------------------+
| ccsdk/cds | org.hibernate:hibernate-testing:jar:5.4.32.Final -> log4j:log4j:1.2.17 |
+----------------+-----------------------------------------------------------------------------------+
| | org.onap.dmaap.messagerouter.dmaapclient:dmaapClient:1.1.5 -> log4j:log4j:1.2.17 |
+----------------+-----------------------------------------------------------------------------------+
| ccsdk/features | org.onap.aaf.authz:aaf-misc-env:2.1.21 -> log4j:log4j:1.2.17 |
+----------------+-----------------------------------------------------------------------------------+
| | org.onap.dmaap.messagerouter.dmaapclient:dmaapClient:1.1.12 -> log4j:log4j:1.2.17 |
+----------------+-----------------------------------------------------------------------------------+
| ccsdk/sli | org.onap.dmaap.messagerouter.dmaapclient:dmaapClient:1.1.12 -> log4j:log4j:1.2.17 | |
+----------------+-----------------------------------------------------------------------------------+
Deliverables
------------
Software Deliverables
~~~~~~~~~~~~~~~~~~~~~
.. _dockercontainers:
Docker Containers
`````````````````
The following table lists the docker containers comprising the CCSDK Guilin
release along with the current stable Guilin version/tag. Each of these is
available on the ONAP nexus3 site (https://nexus3.onap.org) and can be downloaded
with the following command::
docker pull nexus3.onap.org:10001/{image-name}:{version}
Note: users that want to use the latest in-development Guilin version may use the
tag 1.0-STAGING-latest to pull the latest daily Guilin build
+---------------------------------------+--------------------------------------------+---------+
| Image name | Description | Version |
+=======================================+============================================+=========+
| onap/ccsdk-alpine-j11-image | Base Alpine Linux image for CCSDK | 1.2.6 |
+---------------------------------------+--------------------------------------------+---------+
| onap/ccsdk-ansible-server-image | Ansible server image | 1.2.6 |
+---------------------------------------+--------------------------------------------+---------+
| onap/ccsdk-apps-ms-neng | Naming microservice | 1.2.1 |
+---------------------------------------+--------------------------------------------+---------+
| onap/ccsdk-blueprints-processor | CDS blueprint processor | 1.2.1 |
+---------------------------------------+--------------------------------------------+---------+
| onap/ccsdk-cds-ui-server | CDS user interface back end | 1.2.1 |
+---------------------------------------+--------------------------------------------+---------+
| onap/ccsdk-commandexecutor | CDS command executor | 1.2.1 |
+---------------------------------------+--------------------------------------------+---------+
| onap/ccsdk-controllerblueprint | CDS controller blueprints | 1.2.1 |
+---------------------------------------+--------------------------------------------+---------+
| onap/ccsdk-dgbuilder-image | Directed graph builder | 1.2.6 |
+---------------------------------------+--------------------------------------------+---------+
| onap/ccsdk-odl-silicon-alpine-image | Alpine based OpenDaylight Silicon image | 1.2.6 |
+---------------------------------------+--------------------------------------------+---------+
| onap/ccsdk-odlsli-alpine-image | Alpine based OpenDaylight image with CCSDK | 1.2.6 |
+---------------------------------------+--------------------------------------------+---------+
| onap/ccsdk-saltstack-server-image | Saltstack server | 1.2.6 |
+---------------------------------------+--------------------------------------------+---------+
| onap/ccsdk-sdclistener | CDS SDC listener | 1.2.3 |
+---------------------------------------+--------------------------------------------+---------+
| onap/ccsdk-ubuntu-image | Base Ubuntu image for CCSDK | 1.2.6 |
+---------------------------------------+--------------------------------------------+---------+
Maven Artifacts
```````````````
In addition to docker containers, CCSDK also provides libraries that are intended to be used by
client applications (e.g. APPC, SDNC) as maven dependencies.
ccsdk/parent
^^^^^^^^^^^^
Many CCSDK clients need to be able to inherit settings from third party parent poms provided
by OpenDaylight or springboot, and therefore are unable to use the standard ONAP parent pom.
The CCSDK parent repository provides its own version of parent poms whose contents are consistent
with ONAP standard settings (as defined in oparent), but whose parent is the OpenDaylight or
springboot parent, so that clients can effectively merge both sets of settings.
The following table lists the parent poms provided by CCSDK and the current stable
Frankfurt version of each.
+-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
| groupId | artifactId | version | Description |
+=======================+===============================+=========+==================================================================================================+
| org.onap.ccsdk.parent | binding-parent | 2.2.4 | Parent used in place of OpenDaylight binding-parent |
+-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
| org.onap.ccsdk.parent | bundle-parent | 2.2.4 | Parent used in place of OpenDaylight bundle-parent |
+-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
| org.onap.ccsdk.parent | client-parent | 2.2.4 | Parent used for projects that create client libraries for OpenDaylight APIs |
+-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
| org.onap.ccsdk.parent | dependencies-bom | 2.2.4 | Bill of Materials POM that defines versions of third party libraries used outside ODL container. |
| | | | Intended to be imported in dependencyManagement section. |
+-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
| org.onap.ccsdk.parent | dependencies-odl-bom | 2.2.4 | Bill of Materials POM that defines versions of third party libraries used within ODL container. |
| | | | Intended to be imported in dependencyManagement section. |
+-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
| org.onap.ccsdk.parent | feature-repo-parent | 2.2.4 | Parent used in place of OpenDaylight feature-repo-parent |
+-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
| org.onap.ccsdk.parent | karaf4-parent | 2.2.4 | Parent used in place of OpenDaylight karaf4-parent |
+-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
| org.onap.ccsdk.parent | mdsal-it-parent | 2.2.4 | Parent used in place of OpenDaylight mdsal-it-parent |
+-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
| org.onap.ccsdk.parent | odlparent | 2.2.4 | Parent used in place of OpenDaylight odlparent |
+-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
| org.onap.ccsdk.parent | odlparent-lite | 2.2.4 | Parent used in place of OpenDaylight odlparent-lite |
+-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
| org.onap.ccsdk.parent | single-feature-parent | 2.2.4 | Parent used in place of OpenDaylight single-feature-parent |
+-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
| org.onap.ccsdk.parent | spring-boot-1-starter-parent | 2.2.4 | Parent used in place of spring-boot-starter-parent for Springboot 1.x. |
| | | | *NOTE* This is deprecated and will be removed in a future release, since springboot 1.x should |
| | | | no longer be used due to security issues |
+-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
| org.onap.ccsdk.parent | spring-boot-25-starter-parent | 2.2.4 | Parent used in place of spring-boot-starter-parent for Springboot 2.5.x |
+-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
| org.onap.ccsdk.parent | spring-boot-starter-parent | 2.2.4 | Parent used in place of spring-boot-starter-parent for Springboot 2.3.x |
+-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
| org.onap.ccsdk.parent | standalone-parent | 2.2.4 | Parent used for projects that have no need for other third party parent poms |
+-----------------------+-------------------------------+---------+--------------------------------------------------------------------------------------------------+
ccsdk/sli
^^^^^^^^^^^^^^
The ccsdk/sli library provides the Service Logic Interpreter (SLI), which is the engine that runs directed graphs. It also
provides a number of libraries that can be used by other CCSDK client projects.
The following table lists the maven artifacts provided for use by CCSDK client
projects.
+-------------------------------+------------------------------+---------+--------------------------------------------+
| groupId | artifactId | version | Description |
+===============================+==============================+=========+============================================+
| org.onap.ccsdk.sli.core | dblib-provider | 1.3.4 | Database access library |
+-------------------------------+------------------------------+---------+--------------------------------------------+
| org.onap.ccsdk.sli.core | sli-common | 1.3.4 | Common SLI data objects |
+-------------------------------+------------------------------+---------+--------------------------------------------+
| org.onap.ccsdk.sli.core | sli-provider-base | 1.3.4 | ODL-independent SLI implementation objects |
+-------------------------------+------------------------------+---------+--------------------------------------------+
| org.onap.ccsdk.sli.core | sli-provider | 1.3.4 | ODL-dependent SLI implementation objects |
+-------------------------------+------------------------------+---------+--------------------------------------------+
| org.onap.ccsdk.sli.core | sliPluginUtils-provider | 1.3.4 | Utilities for use in SLI adaptors/plugins |
+-------------------------------+------------------------------+---------+--------------------------------------------+
| org.onap.ccsdk.sli.core | utils-provider | 1.3.4 | Utilities |
+-------------------------------+------------------------------+---------+--------------------------------------------+
| org.onap.ccsdk.sli.adaptors | aai-service-provider | 1.3.4 | A&AI interface adaptor |
+-------------------------------+------------------------------+---------+--------------------------------------------+
| org.onap.ccsdk.sli.adaptors | ansible-adapter-bundle | 1.3.4 | Ansible interface adaptor |
+-------------------------------+------------------------------+---------+--------------------------------------------+
| org.onap.ccsdk.sli.adaptors | mdsal-resource-provider | 1.3.4 | MD-SAL interface adaptor |
+-------------------------------+------------------------------+---------+--------------------------------------------+
| org.onap.ccsdk.sli.adaptors | netbox-client-provider | 1.3.4 | netbox interface adaptor |
+-------------------------------+------------------------------+---------+--------------------------------------------+
| org.onap.ccsdk.sli.adaptors | resource-assignment-provider | 1.3.4 | resource allocator |
+-------------------------------+------------------------------+---------+--------------------------------------------+
| org.onap.ccsdk.sli.adaptors | saltstack-adaptor-provider | 1.3.4 | saltstack interface adaptor |
+-------------------------------+------------------------------+---------+--------------------------------------------+
| org.onap.ccsdk.sli.adaptors | sql-resource-provider | 1.3.4 | SQL database interface adaptor |
+-------------------------------+------------------------------+---------+--------------------------------------------+
| org.onap.ccsdk.sli.northbound | asdcApi-provider | 1.3.4 | ODL-based SDC interface |
+-------------------------------+------------------------------+---------+--------------------------------------------+
| org.onap.ccsdk.sli.northbound | dataChange-provider | 1.3.4 | A&AI data change notification interface |
+-------------------------------+------------------------------+---------+--------------------------------------------+
| org.onap.ccsdk.sli.northbound | dmaap-listener | 1.3.4 | DMaaP listener interface |
+-------------------------------+------------------------------+---------+--------------------------------------------+
| org.onap.ccsdk.sli.northbound | lcm-provider | 1.3.4 | Life Cycle Management event interface |
+-------------------------------+------------------------------+---------+--------------------------------------------+
| org.onap.ccsdk.sli.northbound | ueb-listener | 1.3.4 | SDC event listener |
+-------------------------------+------------------------------+---------+--------------------------------------------+
| org.onap.ccsdk.sli.plugins | properties-node-provider | 1.3.4 | Used to load a properties file for use in |
| | | | a directed graph |
+-------------------------------+------------------------------+---------+--------------------------------------------+
| org.onap.ccsdk.sli.plugins | restapi-call-node-provider | 1.3.4 | Used to call a generic REST API from a |
| | | | directed graph |
+-------------------------------+------------------------------+---------+--------------------------------------------+
| org.onap.ccsdk.sli.plugins | restconf-client-provider | 1.3.4 | Used to call a RESTCONF API from a |
| | | | directed graph |
+-------------------------------+------------------------------+---------+--------------------------------------------+
| org.onap.ccsdk.sli.plugins | sshapi-call-node | 1.3.4 | Used to invoke an SSH interface from a |
| | | | directed graph |
+-------------------------------+------------------------------+---------+--------------------------------------------+
| org.onap.ccsdk.sli.plugins | template-node-provider | 1.3.4 | Provides velocity template support |
+-------------------------------+------------------------------+---------+--------------------------------------------+
Documentation Deliverables
~~~~~~~~~~~~~~~~~~~~~~~~~~
* `CDS user guide`_
* `SDN Controller for Radio user guide`_
Known Limitations, Issues and Workarounds
=========================================
System Limitations
------------------
No system limitations noted.
Known Vulnerabilities
---------------------
Any known vulnerabilities for ONAP are tracked in the `ONAP Jira`_ in the OJSI project. Any outstanding OJSI issues that
pertain to CCSDK are listed in the :ref:`secissues` section below.
Workarounds
-----------
Not applicable.
Security Notes
--------------
Fixed Security Issues
~~~~~~~~~~~~~~~~~~~~~
There are no new security fixes in the Guilin release.
.. _secissues :
Known Security Issues
~~~~~~~~~~~~~~~~~~~~~
There is currently only one known CCSDK security issue, related to a third party application (netbox) that CCSDK uses:
* `OJSI-160 <https://jira.onap.org/browse/OJSI-160>`_ : netbox-nginx exposes plain text HTTP endpoint using port 30420
Test Results
============
Not applicable
References
==========
For more information on the ONAP Istanbul release, please see:
#. `ONAP Home Page`_
#. `ONAP Documentation`_
#. `ONAP Release Downloads`_
#. `ONAP Wiki Page`_
.. _`ONAP Home Page`: https://www.onap.org
.. _`ONAP Wiki Page`: https://wiki.onap.org
.. _`ONAP Documentation`: https://docs.onap.org
.. _`ONAP Release Downloads`: https://git.onap.org
.. _`ONAP Jira`: https://jira.onap.org
.. _`CDS user guide`: https://docs.onap.org/en/frankfurt/submodules/ccsdk/cds.git/docs/index.html
.. _`SDN Controller for Radio user guide`: https://docs.onap.org/en/frankfurt/submodules/ccsdk/features.git/docs/guides/onap-user/home.html
|
