diff options
| -rw-r--r-- | INFO.yaml | 34 | ||||
| -rw-r--r-- | license_policies.yaml | 162 | ||||
| -rw-r--r-- | recommended_versions.yaml | 67 | ||||
| -rw-r--r-- | waivers/check_certificates/nodeports_xfail.txt | 1 | ||||
| -rw-r--r-- | waivers/jdwp_ports/jdwp_xfail.txt | 1 | ||||
| -rw-r--r-- | waivers/nonssl_endpoints/nonssl_xfail.txt | 19 | ||||
| -rw-r--r-- | waivers/root_pods/root_pods_xfail.txt | 18 | ||||
| -rw-r--r-- | waivers/unlimitted_pods/unlimitted_pods_xfail.txt | 12 | ||||
| -rw-r--r-- | waivers/versions/versions_xfail.txt | 106 |
9 files changed, 299 insertions, 121 deletions
@@ -31,21 +31,11 @@ repositories: - 'integration/seccom' committers: - <<: *onap_integration_ptl - - name: 'Christophe Closset' - email: 'cc697w@intl.att.com' - company: 'ATT' - id: 'ChrisC' - timezone: 'Belgium/Namur' - name: 'Catherine Lefevre' email: 'cl664y@att.com' company: 'AT&T' id: 'Katel34' timezone: 'Europe/Belgium' - - name: 'Brian Freeman' - email: 'bf1936@att.com' - company: 'AT&T' - id: 'bdfreeman1421' - timezone: 'America/New_York' - name: 'Morgan Richomme' email: 'morgan.richomme@orange.com' company: 'orange' @@ -96,16 +86,21 @@ committers: company: 'T-Mobile' id: 'elihalych' timezone: 'Europe/Warsaw' - - name: 'Bartosz Gardziejewski' - email: 'bartosz.gardziejewski@nokia.com' - company: 'Nokia' - id: 'BartoszG' - timezone: 'Europe/Warsaw' - name: 'Alexander Mazuruk' email: 'a.mazuruk@samsung.com' company: 'Samsung' id: 'aalexanderr' timezone: 'Europe/Warsaw' + - name: 'Maciej Lisowski' + email: 'm.lisowski2@partner.samsung.com' + company: 'Samsung' + id: 'mlisowski' + timezone: 'Europe/Warsaw' + - name: 'Marcin Sebastian Krasowski' + email: 'm.krasowski@samsung.com' + company: 'Samsung' + id: 'mkrasowski' + timezone: 'Europe/Warsaw' tsc: # yamllint disable rule:line-length approval: 'https://lists.onap.org/pipermail/onap-tsc' @@ -134,3 +129,12 @@ tsc: - type: 'Deletion' name: 'Marcin Przybysz' link: 'https://lists.onap.org/g/onap-tsc/message/7893' + - type: 'Deletion' + name: 'Bartosz Gardziejewski' + link: 'https://lists.onap.org/g/onap-tsc/message/8286' + - type: 'Deletion' + name: 'Christophe Closset, Brian Freeman' + link: 'https://lists.onap.org/g/onap-tsc/message/8449' + - type: 'Addition' + name: 'Maciej Lisowski, Marcin Sebastian Krasowski' + link: 'https://lists.onap.org/g/onap-tsc/message/8449' diff --git a/license_policies.yaml b/license_policies.yaml new file mode 100644 index 0000000..7410415 --- /dev/null +++ b/license_policies.yaml @@ -0,0 +1,162 @@ +license_policies: + + +- license_key: agpl-3.0 + label: Prohibited License + compliance_alert: error +- license_key: agpl-3.0-only + label: Prohibited License + compliance_alert: error + +- license_key: agpl-3.0-or-later + label: Prohibited License + compliance_alert: error +- license_key: agpl-3.0-plus + label: Prohibited License + compliance_alert: error +- license_key: agpl-3.0+ + label: Prohibited License + compliance_alert: error + +- license_key: gpl-3.0 + label: Prohibited License + compliance_alert: error +- license_key: gpl-3.0-only + label: Prohibited License + compliance_alert: error + +- license_key: gpl-3.0-or-later + label: Prohibited License + compliance_alert: error +- license_key: gpl-3.0-plus + label: Prohibited License + compliance_alert: error +- license_key: gpl-3.0+ + label: Prohibited License + compliance_alert: error + +- license_key: lgpl-3.0 + label: Prohibited License + compliance_alert: error +- license_key: lgpl-3.0-only + label: Prohibited License + compliance_alert: error + +- license_key: lgpl-3.0-or-later + label: Prohibited License + compliance_alert: error +- license_key: lgpl-3.0-plus + label: Prohibited License + compliance_alert: error +- license_key: lgpl-3.0+ + label: Prohibited License + compliance_alert: error + + +- license_key: agpl-2.0 + label: Ambiguous License + compliance_alert: warning +- license_key: gpl-2.0 + label: Ambiguous License + compliance_alert: warning +- license_key: lgpl-2.0 + label: Ambiguous License + compliance_alert: warning +- license_key: lgpl-2.1 + label: Ambiguous License + compliance_alert: warning + +- license_key: agpl-2.0-plus + label: Restricted license + compliance_alert: warning +- license_key: agpl-2.0-or-later + label: Restricted license + compliance_alert: warning +- license_key: agpl-2.0+ + label: Restricted license + compliance_alert: warning + +- license_key: gpl-2.0-plus + label: Restricted license + compliance_alert: warning +- license_key: gpl-2.0-or-later + label: Restricted license + compliance_alert: warning +- license_key: gpl-2.0+ + label: Restricted license + compliance_alert: warning + +- license_key: lgpl-2.0-plus + label: Restricted license + compliance_alert: warning +- license_key: lgpl-2.0-or-later + label: Restricted license + compliance_alert: warning +- license_key: lgpl-2.0+ + label: Restricted license + compliance_alert: warning + +- license_key: lgpl-2.1-plus + label: Restricted license + compliance_alert: warning +- license_key: lgpl-2.1-or-later + label: Restricted license + compliance_alert: warning +- license_key: lgpl-2.1+ + label: Restricted license + compliance_alert: warning + + +- license_key: agpl-2.0-only + label: Approved License + compliance_alert: '' + +- license_key: apache-2.0 + label: Approved License + compliance_alert: '' + +- license_key: bsd-new + label: Approved License + compliance_alert: '' +- license_key: bsd-3-clause + label: Approved License + compliance_alert: '' + +- license_key: bsd-simplified + label: Approved License + compliance_alert: '' +- license_key: bsd-2-clause + label: Approved License + compliance_alert: '' + +- license_key: gpl-2.0-only + label: Approved License + compliance_alert: '' + +- license_key: isc + label: Approved License + compliance_alert: '' + +- license_key: lgpl-2.0-only + label: Approved License + compliance_alert: '' + +- license_key: lgpl-2.1-only + label: Approved License + compliance_alert: '' + +- license_key: mit + label: Approved License + compliance_alert: '' + +- license_key: mpl-2.0 + label: Approved License + compliance_alert: '' + +- license_key: openssl-ssleay + label: Approved License + compliance_alert: '' + +- license_key: zlib + label: Approved License + compliance_alert: '' diff --git a/recommended_versions.yaml b/recommended_versions.yaml index f60ec50..f704bc5 100644 --- a/recommended_versions.yaml +++ b/recommended_versions.yaml @@ -3,103 +3,106 @@ # See SECCOM wiki for further details (release date, notes) java11: recommended_versions: - - 11.0.11 + - 11.0.13 python3: recommended_versions: - - 3.9.5 + - 3.10.0 Docker: recommended_versions: - - 20.10.6 + - 20.10.11 Kubernetes: recommended_versions: - - 1.21 + - 1.22.4 Helm: recommended_versions: - - 3.6.0 + - 3.7.1 Ubuntu: recommended_versions: - - 20.04.1 + - 20.04.3 Debian: recommended_versions: - - 10.9 + - 11.1 Alpine: recommended_versions: - - 3.13.0 -CentOS: + - 3.15.0 +Rocky_Linux: recommended_versions: - - 8.3-2011 + - 8.5 OpenSSL: recommended_versions: - - 1.1.1k + - 1.1.1 OpenSSH: recommended_versions: - - 8.6 + - 8.8 Cassandra: recommended_versions: - - 3.11.10 + - 4.0.1 MongoDB: recommended_versions: - - 4.4.5 + - 5.0.0 MariaDB: recommended_versions: - - 10.5.10 + - 10.6.5 Postgresql: recommended_versions: - - 13.3 + - 14.1 Camunda: recommended_versions: - - 7.15 + - 7.16.0 OpenDayLight: recommended_versions: - - Aluminium + - Phosphorus-SR1 Kafka: recommended_versions: - - 2.8.0 + - 3.0.0 etcd: recommended_versions: - - v3.4.16 + - v3.5.1 redis: recommended_versions: - - 6.2.3 + - 6.2.6 Elasticsearch: recommended_versions: - - 7.12.1 + - 7.15.1 consul: recommended_versions: - - 1.9.5 + - 1.10.4 vault: recommended_versions: - - 1.7.1 + - 1.9.0 haproxy: recommended_versions: - - 2.4.0 + - 2.4.9 nifi-registry: recommended_versions: - - 1.13.2 + - 1.15.0 filebeat: recommended_versions: - - 7.12.1 + - 7.15.2 nginx: recommended_versions: - 1.20.0 nexus: recommended_versions: - - 3.30.1-01 + - 3.37.0 zookeeper: recommended_versions: - 3.7.0 memcached: recommended_versions: - - 1.6.9 + - 1.6.12 netbox: recommended_versions: - - 2.11.3 + - 3.0.11 awx: recommended_versions: - - 19.1.0 + - 19.5.0 ejbca: recommended_versions: - 7.4.3.2 rabbitmq: recommended_versions: - - 3.8.16 + - 3.9.11 +chartmusem: + recommended_versions: + - 0.1.3 diff --git a/waivers/check_certificates/nodeports_xfail.txt b/waivers/check_certificates/nodeports_xfail.txt index 43bb131..5c08010 100644 --- a/waivers/check_certificates/nodeports_xfail.txt +++ b/waivers/check_certificates/nodeports_xfail.txt @@ -1,3 +1,2 @@ # Expected failure list for certificates associated to nodeports 666 # foo example nodeport -robot diff --git a/waivers/jdwp_ports/jdwp_xfail.txt b/waivers/jdwp_ports/jdwp_xfail.txt index 6163f42..5973519 100644 --- a/waivers/jdwp_ports/jdwp_xfail.txt +++ b/waivers/jdwp_ports/jdwp_xfail.txt @@ -2,7 +2,6 @@ # JDWP = Java Debug Wire Protocol # The following list displays pods and their associated pod that could be # considered as False positive -onap-dcae-redis 6379 # Redis port onap-msb-eag 6379 # Redis port onap-msb-iag 6379 # Redis port onap-vfc-redis 6379 # Redis port diff --git a/waivers/nonssl_endpoints/nonssl_xfail.txt b/waivers/nonssl_endpoints/nonssl_xfail.txt index ce497e3..2b9afdb 100644 --- a/waivers/nonssl_endpoints/nonssl_xfail.txt +++ b/waivers/nonssl_endpoints/nonssl_xfail.txt @@ -1,9 +1,18 @@ # Expected failure list for non-SSL endpoints -# waivers requested already since Honolulu -# SO-3237 SO-3237 The fix is decided to be introduction of ingress controller in oom and is in progress. +# waivers requested +# SO-3237 The fix is decided to be introduction of ingress controller in oom and is in progress. so 30277 +so 30477 so-etsi-sol003-adapter 30406 +so-admin-cockpit 30424 +so-admin-cockpit 30224 + +# CDS - being worked, but missed cutoff for Istanbul +# cds-blueprints-processor-http 30449 + +# SDNC - https://jira.onap.org/browse/SDNC-1628 +# sdnc-callhome 30266 # CDS team working on either eliminating node port or moving to https. # Not ready for Jakarta @@ -13,5 +22,7 @@ cds-blueprints-processor-http 30449 sdnc-callhome 30266 # Upstream components -awx-web 30478 -message-router-kafka 3049* +# awx-web 30478 +# message-router-kafka 30490 +# message-router-kafka 30491 +# message-router-kafka 30492 diff --git a/waivers/root_pods/root_pods_xfail.txt b/waivers/root_pods/root_pods_xfail.txt index 0bf0000..25c9029 100644 --- a/waivers/root_pods/root_pods_xfail.txt +++ b/waivers/root_pods/root_pods_xfail.txt @@ -1,18 +1,18 @@ # Expected failure list for rooted ports # Unmaintained but still needed components -aaf +# aaf # waivers requested already since Guilin but no progress -dcae-cloudify # DCAEGEN2-2424 +# dcae-cloudify # DCAEGEN2-2424 # Upstream components -cassandra # OOM-2552 -awx # used for use cases -netbox # used for use cases -multicloud-fcaps # rabbit-mq -oof-has-etcd # etcd -multicloud-k8s-etcd # etcd +# cassandra # OOM-2552 +# awx # used for use cases +# netbox # used for use cases +# multicloud-fcaps # rabbit-mq +# oof-has-etcd # etcd +# multicloud-k8s-etcd # etcd # Testing components -robot # use for test cases + refactoring planned in Istanbul INT-1716 +# robot # use for test cases + refactoring planned in Istanbul INT-1716 diff --git a/waivers/unlimitted_pods/unlimitted_pods_xfail.txt b/waivers/unlimitted_pods/unlimitted_pods_xfail.txt index fffb6d5..f6e0db7 100644 --- a/waivers/unlimitted_pods/unlimitted_pods_xfail.txt +++ b/waivers/unlimitted_pods/unlimitted_pods_xfail.txt @@ -2,15 +2,15 @@ # Components in maintenance mode # waivers -esr # unmaintained components +# esr # unmaintained components # upstream components -awx # used for use cases -netbox # used for use cases +# awx # used for use cases +# netbox # used for use cases # testing -network-name-gen # used for use cases +# network-name-gen # used for use cases # config pod -portal-db-config # config pod -vnfsdk-init-postgres +# portal-db-config # config pod +# vnfsdk-init-postgres diff --git a/waivers/versions/versions_xfail.txt b/waivers/versions/versions_xfail.txt index f493cca..b6359b5 100644 --- a/waivers/versions/versions_xfail.txt +++ b/waivers/versions/versions_xfail.txt @@ -4,11 +4,11 @@ # upstream containers # may be fixable using a more recent version... -cassandra -awx-celery -awx-rabbit -awx-web -dcae-cloudify-manager +# cassandra +# awx-celery +# awx-rabbit +# awx-web +# dcae-cloudify-manager #sdnc exception sdnc-dmaap-listener @@ -20,57 +20,57 @@ dcaemod-nifi-registry # unmaintained containers # nobody will work on that a priori -esr-gui -esr-server -msb-discovery -msb-eag -msb-iag -portal-app -portal-cassandra -portal-sdk -portal-widget -aaf-cass -message-router-kafka -message-router-zookeeper -message-router -robot +# esr-gui +# esr-server +# msb-discovery +# msb-eag +# msb-iag +# portal-app +# portal-cassandra +# portal-sdk +# portal-widget +# aaf-cass +# message-router-kafka +# message-router-zookeeper +# message-router +# robot # aai pods dependent on janusgraph which does not support Java 11 yet -aai-graphadmin -aai-resources -aai-traversal +# aai-graphadmin +# aai-resources +# aai-traversal # filebeat dockers -filebeat -filebeat-onap -dcae-dashboard-filebeat -dcae-deployment-handler-filebeat -dcae-inventory-api-filebeat -dcae-policy-handler-filebeat -dcae-config-binding-service-fb-onap -dcae-config-binding-service-fb-onap-i -dmaap-dr-node-filebeat-onap -dmaap-dr-prov-filebeat-onap -esr-server-filebeat-onap -modeling-etsicatalog-filebeat-onap -msb-discovery-filebeat-onap -sdc-be-filebeat-onap -sdc-fe-filebeat-onap -sdc-onboarding-be-filebeat-onap -sdc-wfd-fe-filebeat-onap -so-filebeat-onap -so-bpmn-infra-filebeat-onap -so-oof-adapter-filebeat-onap -so-openstack-adapter-filebeat-onap -so-sdc-controller-filebeat-onap -so-sdnc-adapter-filebeat-onap -vfc-generic-vnfm-driver-filebeat-onap -vfc-huawei-vnfm-driver-filebeat-onap -vfc-nslcm-filebeat-onap -vfc-vnflcm-filebeat-onap -vfc-vnfmgr-filebeat-onap -vfc-vnfres-filebeat-onap -vfc-zte-vnfm-driver-filebeat-onap +# filebeat +# filebeat-onap +# dcae-dashboard-filebeat +# dcae-deployment-handler-filebeat +# dcae-inventory-api-filebeat +# dcae-policy-handler-filebeat +# dcae-config-binding-service-fb-onap +# dcae-config-binding-service-fb-onap-i +# dmaap-dr-node-filebeat-onap +# dmaap-dr-prov-filebeat-onap +# esr-server-filebeat-onap +# modeling-etsicatalog-filebeat-onap +# msb-discovery-filebeat-onap +# sdc-be-filebeat-onap +# sdc-fe-filebeat-onap +# sdc-onboarding-be-filebeat-onap +# sdc-wfd-fe-filebeat-onap +# so-filebeat-onap +# so-bpmn-infra-filebeat-onap +# so-oof-adapter-filebeat-onap +# so-openstack-adapter-filebeat-onap +# so-sdc-controller-filebeat-onap +# so-sdnc-adapter-filebeat-onap +# vfc-generic-vnfm-driver-filebeat-onap +# vfc-huawei-vnfm-driver-filebeat-onap +# vfc-nslcm-filebeat-onap +# vfc-vnflcm-filebeat-onap +# vfc-vnfmgr-filebeat-onap +# vfc-vnfres-filebeat-onap +# vfc-zte-vnfm-driver-filebeat-onap # vnf drivers -vfc-huawei-vnfm-driver +# vfc-huawei-vnfm-driver |