blob: 1974756ea352c6c3ed002abb6d089df0c34451e1 [file] [log] [blame]
Sylvain Desbureauxdd769782020-05-29 11:19:42 +02001.. This work is licensed under a Creative Commons Attribution 4.0 International
2.. License.
3.. http://creativecommons.org/licenses/by/4.0
4.. Copyright 2017 Bell Canada & Amdocs Intellectual Property. All rights
5.. reserved.
6.. _release_notes_dublin:
7
Eric Debeauc4e405f2020-12-07 14:49:52 +01008:orphan:
9
Sylvain Desbureauxdd769782020-05-29 11:19:42 +020010ONAP Operations Manager Release Notes
11=====================================
12
13Version 4.0.0 (Dublin Release)
14------------------------------
15
16:Release Date: 2019-06-26
17
18**Previous Release Notes**
19
20- :ref:`Casablanca <release_notes_casablanca>`
21- :ref:`Beijing <release_notes_beijing>`
22- :ref:`Amsterdam <release_notes_amsterdam>`
23
24
25Summary
26-------
27
28**Platform Resiliency**
29
30* Documenation of a Highly-Available Kubernetes Cluster Deployment
Eric Debeau993b77b2020-08-19 15:30:00 +020031* Availability of a Default Storage Class Provisioner for improved Persistent
32 Storage resiliency
Sylvain Desbureauxdd769782020-05-29 11:19:42 +020033* Availability of a CNI reference integration for Multi-site support
34
Eric Debeau993b77b2020-08-19 15:30:00 +020035 * applications can take advantage of multi-site by using POD and/or Node
36 (anti)affinity, taints/tolerations, labels per application
Sylvain Desbureauxdd769782020-05-29 11:19:42 +020037
38**Footprint Optimization**
39
40* Shared MariaDB-Galera Cluster - current clients in Dublin: SO, SDNC
41* Shared Cassandra Cluster - current clients in Dublin: AAI, SDC
42* Optional deployment of independent clusters (backward compatibility)
43
44**Platform Upgradability**
45
46* Introduction of an Upgrade Framework supporting:
47
48 * Automated rolling upgrades for applications
49 * In-place schema and data migrations
50 * Blue-Green deployment environment migration (e.g. Pre-prod to Prod)
51 * Upgrades from embedded database instance into shared database instance
52
53* Release-to-release upgrade support delivered for the following projects
54
55 * A&AI
56 * SDNC
57 * SO
58
59**Security Notes**
60
61*Fixed Security Issues*
62
63*Known Security Issues*
64
65* In default deployment OOM (consul-server-ui) exposes HTTP port 30270 outside of cluster. [`OJSI-134 <https://jira.onap.org/browse/OJSI-134>`_]
66* Hard coded password used for all oom deployments [`OJSI-188 <https://jira.onap.org/browse/OJSI-188>`_]
67* CVE-2019-12127 - OOM exposes unprotected API/UI on port 30270 [`OJSI-202 <https://jira.onap.org/browse/OJSI-202>`_]
68
69*Known Vulnerabilities in Used Modules*
70
71OOM code has been formally scanned during build time using NexusIQ and no
72Critical vulnerability was found.
73
74Quick Links:
75
76 - `OOM project page <https://wiki.onap.org/display/DW/ONAP+Operations+Manager+Project>`_
77
78 - `Passing Badge information for OOM <https://bestpractices.coreinfrastructure.org/en/projects/1631>`_
79
80
81**Known Issues**
82
83End of Release Notes