diff options
| author |   Tony Hansen <tony@att.com> | 2019-11-11 19:15:08 +0000 |
|---|---|---|
| committer |   Gerrit Code Review <gerrit@onap.org> | 2019-11-11 19:15:08 +0000 |
| commit | 82b00c0bcaa928670ab83cdfce68ac09e3a1c73f (patch) | |
| tree | f9020b13ad51ffe61bb980d466c07b85eb9a9870 | |
| parent | 014bacae0fbb76c6e6baf83f267258211e28d3cc (diff) | |
| parent | 4c97a55959328b4990ede61e7119a9a7a9b57aed (diff) | |
Merge "Mark OJSI-28 as fixed."
| -rw-r--r-- | docs/sections/release-notes.rst | 25 |
1 files changed, 12 insertions, 13 deletions
diff --git a/docs/sections/release-notes.rst b/docs/sections/release-notes.rst index 372e8bb6..74a6a94c 100644 --- a/docs/sections/release-notes.rst +++ b/docs/sections/release-notes.rst @@ -26,9 +26,9 @@ All components interfacing with platform components were modified to support TLS **Miscellaneous** - DCAE Dashboard deployment migration from cloudify blueprint to OOM/Chart - Dynamic Topic support via Dmaap plugin integration for DataFileCollector MS - - Dynamic Topic support via Dmaap plugin integration for PM-Mapper service + - Dynamic Topic support via Dmaap plugin integration for PM-Mapper service - CBS client libraries updated to remove consul service lookup - - Image Optimization (ConfigBindingService, InventoryAPI, ServiceChangeHandler, HV-VES, PRH, Son-handler) + - Image Optimization (ConfigBindingService, InventoryAPI, ServiceChangeHandler, HV-VES, PRH, Son-handler) @@ -69,8 +69,8 @@ DCAE also includes below MS which can be deployed on-demand (via Dashboard or Cl - BBS Event processor - Analytics/RCA - SON-Handler - - Missing Heartbeat Ms - + - Missing Heartbeat Ms + - All DCAE components are designed to support platform maturity requirements. @@ -110,19 +110,18 @@ Source code of DCAE components are released under the following repositories on **Known Issues** - * Healthcheck/Readiness probe VES Collector when authentication is enabled (DCAEGEN2-1594) - + * Healthcheck/Readiness probe VES Collector when authentication is enabled (DCAEGEN2-1594) + **Security Notes** *Fixed Security Issues* + * Unsecured Swagger UI Interface in xdcae-datafile-collector. [`OJSI-28 <https://jira.onap.org/browse/OJSI-28>`_] * In default deployment DCAEGEN2 (xdcae-datafile-collector) exposes HTTP port 30223 outside of cluster. [`OJSI-109 <https://jira.onap.org/browse/OJSI-109>`_] * In default deployment DCAEGEN2 (xdcae-tca-analytics) exposes HTTP port 32010 outside of cluster. [`OJSI-161 <https://jira.onap.org/browse/OJSI-161>`_] * In default deployment DCAEGEN2 (dcae-datafile-collector) exposes HTTP port 30262 outside of cluster. [`OJSI-131 <https://jira.onap.org/browse/OJSI-131>`_] * CVE-2019-12126 - DCAE TCA exposes unprotected APIs/UIs on port 32010. [`OJSI-201 <https://jira.onap.org/browse/OJSI-201>`_] *Known Security Issues* - - * Unsecured Swagger UI Interface in xdcae-datafile-collector. [`OJSI-28 <https://jira.onap.org/browse/OJSI-28>`_] * Unsecured Swagger UI Interface in xdcae-ves-collector. [`OJSI-30 <https://jira.onap.org/browse/OJSI-30>`_] * In default deployment DCAEGEN2 (xdcae-ves-collector) exposes HTTP port 30235 outside of cluster. [`OJSI-116 <https://jira.onap.org/browse/OJSI-116>`_] * In default deployment DCAEGEN2 (xdcae-dashboard) exposes HTTP port 30418 outside of cluster. [`OJSI-159 <https://jira.onap.org/browse/OJSI-159>`_] @@ -189,7 +188,7 @@ All components interfacing with platform components were modified to support TLS **Miscellaneous** - DCAE Dashboard deployment migration from cloudify blueprint to OOM/Chart - Dynamic Topic support via Dmaap plugin integration for DataFileCollector MS - - Dynamic Topic support via Dmaap plugin integration for PM-Mapper service + - Dynamic Topic support via Dmaap plugin integration for PM-Mapper service - CBS client libraries updated to remove consul service lookup @@ -200,8 +199,8 @@ All components interfacing with platform components were modified to support TLS **Known Issues** - * Healthcheck/Readiness probe VES Collector when authentication is enabled (DCAEGEN2-1594) - + * Healthcheck/Readiness probe VES Collector when authentication is enabled (DCAEGEN2-1594) + **Security Notes** @@ -357,8 +356,8 @@ Source code of DCAE components are released under the following repositories on **Bug Fixes** **Known Issues** - * Healthcheck/Readiness probe VES Collector when authentication is enabled (DCAEGEN2-1594) - + * Healthcheck/Readiness probe VES Collector when authentication is enabled (DCAEGEN2-1594) + **Security Notes** |