DCAE Release Notes

Abstract

This document provides the release notes for the El-Alto Maintenance release

Summary

This maintenance release is primarily to update expired certificates from original El-Alto released TLS-init container.

This patch is not required for Frankfurt release (and beyond) as certificates are dynamically retrieved from AAF at deployment time for all DCAE components.

Release Data

Project DCAE
Docker images
onap/org.onap.dcaegen2.deployments
.tls-init-container:1.0.4
Release designation El-Alto Maintenance Release
Release date 2020/08/24

New features

None

Bug fixes

expiration

Known Issues Same as El-Alto Release

Abstract

This document provides the release notes for the Frankfurt Maintenance release

Summary

The focus of this release is to correct issues found on Frankfurt release.

Release Data

Project DCAE
Docker images
onap/org.onap.dcaegen2.services.
son-handler:2.0.4
Release designation Frankfurt Maintenance Release 1
Release date 2020/08/17

New features

None

Bug fixes

while making call to oof - DCAEGEN2-2216 SON-Handler: Change Policy notification

to align with policy component updates

Known Issues Same as Frankfurt Release

Version: 6.0.0

Abstract

This document provides the release notes for the Frankfurt release.

Summary

Following DCAE components are available with default ONAP/DCAE installation.

  • Platform components

    • Cloudify Manager (helm chart)
    • Bootstrap container (helm chart)
    • Configuration Binding Service (helm chart)
    • Deployment Handler (helm chart)
    • Policy Handler (helm chart
    • Service Change Handler (helm chart)
    • Inventory API (helm chart)
    • Dashboard (helm chart)

  • Service components

    • VES Collector
    • Threshold Crossing Analytics (TCA/CDAP)
    • HV-VES Collector
    • PNF-Registration Handler
    • Docker based Threshold Crossing Analytics (TCA-Gen2)
    • Holmes Rule Management *
    • Holmes Engine Management *

  • Additional resources that DCAE utilizes deployed using ONAP common charts:

    • Postgres Database
    • Mongo Database
    • Redis Cluster Database
    • Consul Cluster

Below service components (mS) are available to be deployed on-demand.

  • SNMPTrap Collector
  • RESTConf Collector
  • DataFile Collector
  • PM-Mapper
  • BBS-EventProcessor
  • VES Mapper
  • Heartbeat mS
  • SON-Handler
  • PM-Subscription Handler

Notes:

* These components are delivered by the Holmes project.

Under OOM (Kubernetes) deployment all DCAE component containers are deployed as Kubernetes Pods/Deployments/Services into Kubernetes cluster. DCAE platform components are deployed using Helm charts. DCAE service components are deployed using Cloudify blueprints. DCAE provides a Cloudify Manager plugin (k8splugin) that is capable of expanding a Cloudify blueprint node specification for a service component to a full Kubernetes specification, with additional enhancements such as replica scaling, sidecar for logging to ONAP ELK stack, registering services to MSB, etc.

Release Data

DCAE Project  
Docker images Refer Deliverable
Release designation 6.0.0 frankfurt
Release date 2020-06-04

New features

  • DCAE Platform Enhancement

    • Introduction of Microservice and Onboarding Design (MOD) platform
    • Policy Notification support for DCAE components
    • Dynamic AAF certificate creation during component instantiation
    • Helm chart optimization to control each platform component separate
    • Dashboard Optimization
    • Blueprint generator tool to simplify deployment artifact creation

  • Following new services are delivered this release

    • Event Processors

      • PM Subscription Handler
      • DataLake Handlers

    • Analytics/RCA

      • TCA-GEN2
      • Acumos Adapter (PoC)

Deliverables

Software Deliverables

Repository SubModules Version & Docker Image (if applicable)
dcaegen2/analytics/tca-gen2   onap/org.onap.dcaegen2.analytics.tca-gen2.dcae-analytics-tca-web:1.0.1
dcaegen2/collectors/datafile   onap/org.onap.dcaegen2.collectors.datafile.datafile-app-server:1.3.0
dcaegen2/collectors/hv-ves   onap/org.onap.dcaegen2.collectors.hv-ves.hv-collector-main:1.4.0
dcaegen2/collectors/restconf   onap/org.onap.dcaegen2.collectors.restconfcollector:1.1.1
dcaegen2/collectors/snmptrap   onap/org.onap.dcaegen2.collectors.snmptrap:2.0.3
dcaegen2/collectors/ves   onap/org.onap.dcaegen2.collectors.ves.vescollector:1.5.4
dcaegen2/deployments cm-container onap/org.onap.dcaegen2.deployments.cm-container:2.1.0
dcaegen2/deployments consul-loader-container onap/org.onap.dcaegen2.deployments.consul-loader-container:1.0.0
dcaegen2/deployments dcae-k8s-cleanup-container onap/org.onap.dcaegen2.deployments.dcae-k8s-cleanup-container:1.0.0
dcaegen2/deployments healthcheck-container onap/org.onap.dcaegen2.deployments.healthcheck-container:1.3.1
dcaegen2/deployments multisite-init-container onap/org.onap.dcaegen2.deployments.multisite-init-container:1.0.0
dcaegen2/deployments redis-cluster-container onap/org.onap.dcaegen2.deployments.redis-cluster-container:1.0.0
dcaegen2/deployments tca-cdap-container onap/org.onap.dcaegen2.deployments.tca-cdap-container:1.2.2
dcaegen2/deployments tls-init-container onap/org.onap.dcaegen2.deployments.tls-init-container:2.1.0
dcaegen2/platform mod/onboardingapi onap/org.onap.dcaegen2.platform.mod.onboardingapi:2.12.1
dcaegen2/platform mod/distributorapi onap/org.onap.dcaegen2.platform.mod.distributorapi:1.0.1
dcaegen2/platform mod/designtool onap/org.onap.dcaegen2.platform.mod.designtool-web:1.0.2
dcaegen2/platform mod/genprocessor onap/org.onap.dcaegen2.platform.mod.genprocessor-http:1.0.1
dcaegen2/platform mod/genprocessor onap/org.onap.dcaegen2.platform.mod.genprocessor-job:1.0.1
dcaegen2/platform mod/designtool/mod-registry onap/org.onap.dcaegen2.platform.mod.mod-registry:1.0.0
dcaegen2/platform mod/runtimeapi onap/org.onap.dcaegen2.platform.mod.runtime-web:1.0.3
dcaegen2/platform/blueprints   onap/org.onap.dcaegen2.deployments.k8s-bootstrap-container:1.12.6
dcaegen2/platform/configbinding   onap/org.onap.dcaegen2.platform.configbinding:2.5.2
dcaegen2/platform/deployment-handler   onap/org.onap.dcaegen2.platform.deployment-handler:4.3.0
dcaegen2/platform/inventory-api   onap/org.onap.dcaegen2.platform.inventory-api:3.4.1
dcaegen2/platform/policy-handler   onap/org.onap.dcaegen2.platform.policy-handler:5.1.0
dcaegen2/platform/servicechange-handler   onap/org.onap.dcaegen2.platform.servicechange-handler:1.3.2
dcaegen2/services components/datalake-handler onap/org.onap.dcaegen2.services.datalakefeeder:1.0.2
dcaegen2/services components/datalake-handler onap/org.onap.dcaegen2.services.datalakeadminui:1.0.2
dcaegen2/services components/pm-subscription-handler onap/org.onap.dcaegen2.services.pmsh:1.0.3
dcaegen2/services components/bbs-event-processor onap/org.onap.dcaegen2.services.components.bbs-event-processor:2.0.0
dcaegen2/services/heartbeat   onap/org.onap.dcaegen2.services.heartbeat:2.1.0
dcaegen2/services/mapper   onap/org.onap.dcaegen2.services.mapper.vesadapter.universalvesadaptor:1.0.1
dcaegen2/services/pm-mapper   onap/org.onap.dcaegen2.services.pm-mapper:1.3.1
dcaegen2/services/prh   onap/org.onap.dcaegen2.services.prh.prh-app-server:1.5.2
dcaegen2/services/son-handler   onap/org.onap.dcaegen2.services.son-handler:2.0.2
dcaegen2/platform adapter/acumos onap/org.onap.dcaegen2.platform.adapter.acumos:1.0.2
dcaegen2/platform mod/bpgenerator Blueprint Generator 1.3.1 (jar)
dcaegen2/services/sdk   DCAE SDK 1.3.5 (jar)
ccsdk/dashboard   onap/org.onap.ccsdk.dashboard.ccsdk-app-os:1.3.2

Known Limitations, Issues and Workarounds

  • Blueprint generator escape char issue (DCAEGEN2-2140)
  • TCAgen2 Policy configuration support (DCAEGEN2-2198)
  • TCA/CDAP config refresh causes duplicate events (DCAEGEN2-2241)

System Limitations

None

Known Vulnerabilities

None

Workarounds

Documented under corresponding jira if applicable.

Security Notes

Fixed Security Issues

  • Unsecured Swagger UI Interface in xdcae-ves-collector. [OJSI-30]
  • In default deployment DCAEGEN2 (xdcae-ves-collector) exposes HTTP port 30235 outside of cluster. [OJSI-116]
  • In default deployment DCAEGEN2 (xdcae-dashboard) exposes HTTP port 30418 outside of cluster. [OJSI-159]
  • In default deployment DCAEGEN2 (dcae-redis) exposes redis port 30286 outside of cluster. [OJSI-187]
  • In default deployment DCAEGEN2 (config-binding-service) exposes HTTP port 30415 outside of cluster. [OJSI-195]

Known Security Issues

None

Known Vulnerabilities in Used Modules

None

DCAE code has been formally scanned during build time using NexusIQ and all Critical vulnerabilities have been addressed, items that remain open have been assessed for risk and determined to be false positive. The DCAE open Critical security vulnerabilities and their risk assessment have been documented as part of the project.

References

For more information on the ONAP Frankfurt release, please see:

  1. ONAP Home Page
  2. ONAP Documentation
  3. ONAP Release Downloads
  4. ONAP Wiki Page

Quick Links:

Version: 5.0.1

The offical El-Alto release (rolls up all 5.0.0 early drop deliverables) focused on technical debts and SECCOM priority work-items.

Following is summary of updates done for DCAEGEN2

Security

Following platform components were enabled for HTTPS
  • ConfigBindingService (CBS) - CBS is used by all DCAE MS to fetch DCAE MS configuration from Consul. To mitigate impact for DCAE MS, CBS deployment through OOM/Helm was modified to support CBS on both HTTP and HTTPS. Design for CBS TLS migration
  • Cloudify Manager
  • InventoryAPI
  • Non-root container process (ConfigBindingService, InventoryAPI, ServiceChangeHandler, HV-VES, PRH, Son-handler)

All components interfacing with platform components were modified to support TLS interface

Miscellaneous
  • DCAE Dashboard deployment migration from cloudify blueprint to OOM/Chart
  • Dynamic Topic support via Dmaap plugin integration for DataFileCollector MS
  • Dynamic Topic support via Dmaap plugin integration for PM-Mapper service
  • CBS client libraries updated to remove consul service lookup
  • Image Optimization (ConfigBindingService, InventoryAPI, ServiceChangeHandler, HV-VES, PRH, Son-handler)
With this release, all DCAE platform components has been migrated to helm charts. Following is complete list of DCAE components available part of default ONAP/DCAE installation.
  • Platform components
    • Cloudify Manager (helm chart)
    • Bootstrap container (helm chart)
    • Configuration Binding Service (helm chart)
    • Deployment Handler (helm chart)
    • Policy Handler (helm chart
    • Service Change Handler (helm chart)
    • Inventory API (helm chart)
    • Dashboard (helm charts)
  • Service components
    • VES Collector
    • SNMP Collector
    • Threshold Crossing Analytics
    • HV-VES Collector
    • PNF-Registration Handler
    • Holmes Rule Management *
    • Holmes Engine Management *
  • Additional resources that DCAE utilizes:
    • Postgres Database
    • Redis Cluster Database
    • Consul Cluster *
Notes:
* These components are delivered by external ONAP project.

DCAE also includes below MS which can be deployed on-demand (via Dashboard or Cloudify CLI or CLAMP)

  • Collectors
    • RESTConf collector
    • DataFile collector
  • Event Processors
    • VES Mapper
    • 3gpp PM-Mapper
    • BBS Event processor
  • Analytics/RCA
    • SON-Handler
    • Missing Heartbeat Ms
  • All DCAE components are designed to support platform maturity requirements.

Source Code

Source code of DCAE components are released under the following repositories on gerrit.onap.org; there is no new component introduced for El-Alto Early-drop.
  • dcaegen2
  • dcaegen2.analytics.tca
  • dcaegen2.collectors.snmptrap
  • dcaegen2.collectors.ves
  • dcaegen2.collectors.hv-ves
  • dcaegen2.collectors.datafile
  • dcaegen2.collectors.restconf
  • dcaegen2.deployments
  • dcaegen2.platform.blueprints
  • dcaegen2.platform.cli
  • dcaegen2.platform.configbinding
  • dcaegen2.platform.deployment-handler
  • dcaegen2.platform.inventory-api
  • dcaegen2.platform.plugins
  • dcaegen2.platform.policy-handler
  • dcaegen2.platform.servicechange-handler
  • dcaegen2.services.heartbeat
  • dcaegen2.services.mapper
  • dcaegen2.services.pm-mapper
  • dcaegen2.services.prh
  • dcaegen2.services.son-handler
  • dcaegen2.services
  • dcaegen2.services.sdk
  • dcaegen2.utils
  • ccsdk.platform.plugins
  • ccsdk.dashboard
Bug Fixes
  • k8splugin can generate deployment name > 63 chars (DCAEGEN2-1667)
  • CM container loading invalid Cloudify types file (DCAEGEN2-1685)
Known Issues
  • Healthcheck/Readiness probe VES Collector when authentication is enabled (DCAEGEN2-1594)

Security Notes

Fixed Security Issues
  • Unsecured Swagger UI Interface in xdcae-datafile-collector. [OJSI-28]
  • In default deployment DCAEGEN2 (xdcae-datafile-collector) exposes HTTP port 30223 outside of cluster. [OJSI-109]
  • In default deployment DCAEGEN2 (xdcae-tca-analytics) exposes HTTP port 32010 outside of cluster. [OJSI-161]
  • In default deployment DCAEGEN2 (dcae-datafile-collector) exposes HTTP port 30262 outside of cluster. [OJSI-131]
  • CVE-2019-12126 - DCAE TCA exposes unprotected APIs/UIs on port 32010. [OJSI-201]
Known Security Issues
  • Unsecured Swagger UI Interface in xdcae-ves-collector. [OJSI-30]
  • In default deployment DCAEGEN2 (xdcae-ves-collector) exposes HTTP port 30235 outside of cluster. [OJSI-116]
  • In default deployment DCAEGEN2 (xdcae-dashboard) exposes HTTP port 30418 outside of cluster. [OJSI-159]
  • In default deployment DCAEGEN2 (dcae-redis) exposes redis port 30286 outside of cluster. [OJSI-187]
  • In default deployment DCAEGEN2 (config-binding-service) exposes HTTP port 30415 outside of cluster. [OJSI-195]

Known Vulnerabilities in Used Modules

DCAE code has been formally scanned during build time using NexusIQ and all Critical vulnerabilities have been addressed, items that remain open have been assessed for risk and determined to be false positive. The DCAE open Critical security vulnerabilities and their risk assessment have been documented as part of the project.

Quick Links:

Upgrade Notes

The following components are upgraded from Dublin/R4 and El-Alto EarlyDrop deliverables.
  • K8S Bootstrap container:
    • Docker container tag: onap/org.onap.dcaegen2.deployments.k8s-bootstrap-container:1.6.4
    • Description: K8s bootstrap container updated to interface with Cloudify using HTTPS; new k8s and Dmaap plugin version included; Dashboard deployment was removed.
  • Configuration Binding Service:
    • Docker container tag: onap/org.onap.dcaegen2.platform.configbinding.app-app:2.5.2
    • Description: HTTPS support, Image optimization and non-root user
  • Inventory API
    • Docker container image tag: onap/org.onap.dcaegen2.platform.inventory-api:3.4.0
    • Description: HTTPS support, container optmization and non-root user
  • DataFile Collector
    • Docker container tag: onap/org.onap.dcaegen2.collectors.datafile.datafile-app-server:1.2.3
    • Description : Code optimization, bug fixes, dmaap plugin integration
  • SON Handler MS
    • Docker container tag: onap/org.onap.dcaegen2.services.son-handler:1.1.1
    • Description : Image optimization, bug fixes, CBS integration
  • VES Adapter/Mapper MS
    • Docker container tag: onap/org.onap.dcaegen2.services.mapper.vesadapter.universalvesadaptor:1.0.1
    • Description : Image optimization & CBS periodic polling
  • PRH MS
    • Docker container tag: onap/org.onap.dcaegen2.services.prh.prh-app-server:1.3.1
    • Description : Code optimization, bug fixes and SDK alignment
  • HV-VES MS
    • Docker container tag: onap/org.onap.dcaegen2.collectors.hv-ves.hv-collector-main:1.3.0
    • Description : Code optimization, bug fixes and SDK alignment

Version: 5.0.0

El-Alto Early-drop focused on technical debts and SECCOM priority work-items.

Following is summary of updates done for DCAEGEN2

Security

Following platform components were enabled for HTTPS
  • ConfigBindingService (CBS) - CBS is used by all DCAE MS to fetch DCAE MS configuration from Consul. To mitigate impact for DCAE MS, CBS deployment through OOM/Helm was modified to support CBS on both HTTP and HTTPS. Design for CBS TLS migration
  • Cloudify Manager
  • InventoryAPI

All components interfacing with platform components were modified to support TLS interface

Miscellaneous
  • DCAE Dashboard deployment migration from cloudify blueprint to OOM/Chart
  • Dynamic Topic support via Dmaap plugin integration for DataFileCollector MS
  • Dynamic Topic support via Dmaap plugin integration for PM-Mapper service
  • CBS client libraries updated to remove consul service lookup
Bug Fixes
  • k8splugin can generate deployment name > 63 chars (DCAEGEN2-1667)
  • CM container loading invalid Cloudify types file (DCAEGEN2-1685)
Known Issues
  • Healthcheck/Readiness probe VES Collector when authentication is enabled (DCAEGEN2-1594)

Security Notes

Fixed Security Issues

Known Security Issues

  • Unsecured Swagger UI Interface in xdcae-datafile-collector. [OJSI-28]
  • Unsecured Swagger UI Interface in xdcae-ves-collector. [OJSI-30]
  • In default deployment DCAEGEN2 (xdcae-datafile-collector) exposes HTTP port 30223 outside of cluster. [OJSI-109]
  • In default deployment DCAEGEN2 (xdcae-ves-collector) exposes HTTP port 30235 outside of cluster. [OJSI-116]
  • In default deployment DCAEGEN2 (dcae-datafile-collector) exposes HTTP port 30262 outside of cluster. [OJSI-131]
  • In default deployment DCAEGEN2 (xdcae-dashboard) exposes HTTP port 30418 outside of cluster. [OJSI-159]
  • In default deployment DCAEGEN2 (xdcae-tca-analytics) exposes HTTP port 32010 outside of cluster. [OJSI-161]
  • In default deployment DCAEGEN2 (dcae-redis) exposes redis port 30286 outside of cluster. [OJSI-187]
  • In default deployment DCAEGEN2 (config-binding-service) exposes HTTP port 30415 outside of cluster. [OJSI-195]
  • CVE-2019-12126 - DCAE TCA exposes unprotected APIs/UIs on port 32010. [OJSI-201]

Known Vulnerabilities in Used Modules

DCAE code has been formally scanned during build time using NexusIQ and all Critical vulnerabilities have been addressed, items that remain open have been assessed for risk and determined to be false positive. The DCAE open Critical security vulnerabilities and their risk assessment have been documented as part of the project.

Quick Links:

Upgrade Notes

The following components are upgraded from Dublin/R4.
  • Cloudify Manager:
    • Docker container tag: onap/org.onap.dcaegen2.deployments.cm-container:2.0.2
    • Description: DCAE’s Cloudify Manager container is based on Cloudify Manager Community Version 19.01.24, which is based on Cloudify Manager 4.5. The container was updated to support TLS.
  • K8S Bootstrap container:
    • Docker container tag: onap/org.onap.dcaegen2.deployments.k8s-bootstrap-container:1.6.2
    • Description: K8s bootstrap container updated to interface with Cloudify using HTTPS; new k8s and Dmaap plugin version included; Dashboard deployment was removed.
  • Configuration Binding Service:
    • Docker container tag: onap/org.onap.dcaegen2.platform.configbinding.app-app:2.5.1
    • Description: HTTPS support, Image optimization and non-root user
  • Deployment Handler
    • Docker container image tag: onap/org.onap.dcaegen2.platform.deployment-handler:4.2.0
    • Description: Update to node10, uninstall workflow updates
  • Service Change Handler
    • Docker container image tag: onap/org.onap.dcaegen2.platform.servicechange-handler:1.3.2
    • Description: HTTPS inventoryAPI support, container optmization and non-root user
  • Inventory API
    • Docker container image tag: onap/org.onap.dcaegen2.platform.inventory-api:3.4.0
    • Description: HTTPS support, container optmization and non-root user
  • DataFile Collector
    • Docker container tag: onap/org.onap.dcaegen2.collectors.datafile.datafile-app-server:1.2.2
    • Description : Code optimization, bug fixes, dmaap plugin integration
  • 3gpp PM-Mapper
    • Docker container tag: onap/org.onap.dcaegen2.services.pm-mapper:1.1.3
    • Description: Code optimization, bug fixes, dmaap plugin integration

Version: 4.0.0

Release Date:2019-06-06

New Features

DCAE R4 improves upon previous release with the following new features:

  • DCAE Platform Enhancement
    • Multisite K8S cluster deployment support for DCAE services (via K8S plugin)
    • Support helm chart deployment in DCAE using new Helm cloudify plugin
    • DCAE Healthcheck enhancement to cover static and dynamic deployments
    • Dynamic AAF based topic provisioning support through Dmaap cloudify plugin
    • Dashboard Integration (UI for deployment/verification)
    • PolicyHandler Enhancement to support new Policy Lifecycle API’s
    • Blueprint generator tool to simplify deployment artifact creation
    • Cloudify Manager resiliency
  • Following new services are delivered with Dublin
    • Collectors
      • RESTConf collector
    • Event Processors
      • VES Mapper
      • 3gpp PM-Mapper
      • BBS Event processor
    • Analytics/RCA
      • SON-Handler
      • Heartbeat MS
Most platform components has been migrated to helm charts. Following is complete list of DCAE components available part of default ONAP/dcae installation.
  • Platform components
    • Cloudify Manager (helm chart)
    • Bootstrap container (helm chart)
    • Configuration Binding Service (helm chart)
    • Deployment Handler (helm chart)
    • Policy Handler (helm chart
    • Service Change Handler (helm chart)
    • Inventory API (helm chart)
    • Dashboard (Cloudify Blueprint)
  • Service components
    • VES Collector
    • SNMP Collector
    • Threshold Crossing Analytics
    • HV-VES Collector
    • PNF-Registration Handler
    • Holmes Rule Management *
    • Holmes Engine Management *
  • Additional resources that DCAE utilizes:
    • Postgres Database
    • Redis Cluster Database
    • Consul Cluster *
Notes:
* These components are delivered by the Holmes project.

Under OOM (Kubernetes) deployment all DCAE component containers are deployed as Kubernetes Pods/Deployments/Services into Kubernetes cluster. DCAE R3 includes enhancement to Cloudify Manager plugin (k8splugin) that is capable of expanding a Blueprint node specification written for Docker container to a full Kubernetes specification, with additional enhancements such as replica scaling, sidecar for logging to ONAP ELK stack, registering services to MSB, etc.

  • All DCAE components are designed to support platform maturity requirements.

Source Code

Source code of DCAE components are released under the following repositories on gerrit.onap.org:
  • dcaegen2
  • dcaegen2.analytics.tca
  • dcaegen2.collectors.snmptrap
  • dcaegen2.collectors.ves
  • dcaegen2.collectors.hv-ves
  • dcaegen2.collectors.datafile
  • dcaegen2.collectors.restconf
  • dcaegen2.deployments
  • dcaegen2.platform.blueprints
  • dcaegen2.platform.cli
  • dcaegen2.platform.configbinding
  • dcaegen2.platform.deployment-handler
  • dcaegen2.platform.inventory-api
  • dcaegen2.platform.plugins
  • dcaegen2.platform.policy-handler
  • dcaegen2.platform.servicechange-handler
  • dcaegen2.services.heartbeat
  • dcaegen2.services.mapper
  • dcaegen2.services.pm-mapper
  • dcaegen2.services.prh
  • dcaegen2.services.son-handler
  • dcaegen2.services
  • dcaegen2.services.sdk
  • dcaegen2.utils
  • ccsdk.platform.plugins
  • ccsdk.dashboard

Bug Fixes

Known Issues
  • Healthcheck/Readiness probe VES Collector when authentication is enabled (DCAEGEN2-1594)

Security Notes

Fixed Security Issues

Known Security Issues

  • Unsecured Swagger UI Interface in xdcae-datafile-collector. [OJSI-28]
  • Unsecured Swagger UI Interface in xdcae-ves-collector. [OJSI-30]
  • In default deployment DCAEGEN2 (xdcae-datafile-collector) exposes HTTP port 30223 outside of cluster. [OJSI-109]
  • In default deployment DCAEGEN2 (xdcae-ves-collector) exposes HTTP port 30235 outside of cluster. [OJSI-116]
  • In default deployment DCAEGEN2 (dcae-datafile-collector) exposes HTTP port 30262 outside of cluster. [OJSI-131]
  • In default deployment DCAEGEN2 (xdcae-dashboard) exposes HTTP port 30418 outside of cluster. [OJSI-159]
  • In default deployment DCAEGEN2 (xdcae-tca-analytics) exposes HTTP port 32010 outside of cluster. [OJSI-161]
  • In default deployment DCAEGEN2 (dcae-redis) exposes redis port 30286 outside of cluster. [OJSI-187]
  • In default deployment DCAEGEN2 (config-binding-service) exposes HTTP port 30415 outside of cluster. [OJSI-195]
  • CVE-2019-12126 - DCAE TCA exposes unprotected APIs/UIs on port 32010. [OJSI-201]

Known Vulnerabilities in Used Modules

DCAE code has been formally scanned during build time using NexusIQ and all Critical vulnerabilities have been addressed, items that remain open have been assessed for risk and determined to be false positive. The DCAE open Critical security vulnerabilities and their risk assessment have been documented as part of the project.

Quick Links:

New component Notes The following components are introduced in R4

  • Dashboard
    • Docker container tag: onap/org.onap.ccsdk.dashboard.ccsdk-app-os:1.1.0
    • Description: Dashboard provides an UI interface for users/operation to deploy and manage service components in DCAE
  • Blueprint generator
    • Java artifact : /org/onap/dcaegen2/platform/cli/blueprint-generator/1.0.0/blueprint-generator-1.0.0.jar
    • Description: Tool to generate the deployment artifact (cloudify blueprints) based on component spec
  • RESTConf collector
    • Docker container tag: onap/org.onap.dcaegen2.collectors.restconfcollector:1.1.1
    • Description: Provides RESTConf interfaces to events from external domain controllers
  • VES/Universal Mapper
    • Docker container tag: onap/org.onap.dcaegen2.services.mapper.vesadapter.universalvesadaptor:1.0.0
    • Description: Standardizes events recieved from SNMP and RESTConf collector into VES for further processing with DCAE analytics services
  • 3gpp PM-Mapper
    • Docker container tag: onap/org.onap.dcaegen2.services.pm-mapper:1.0.1
    • Description: Transforms 3gpp data feed recieved from DMAAP-DR into VES events
  • BBS Event processor
    • Docker container tag: onap/org.onap.dcaegen2.services.components.bbs-event-processor:1.0.0
    • Description: Handles PNF-Reregistration and CPE authentication events and generate CL events
  • SON-Handler
    • Docker container tag: onap/org.onap.dcaegen2.services.son-handler:1.0.3
    • Description: Supports PC-ANR optimization analysis and generating CL events output
  • Heartbeat MS
    • Docker container tag: onap/org.onap.dcaegen2.services.heartbeat:2.1.0
    • Description: Generates missing heartbeat CL events based on configured threshold for VES heartbeats/VNF type.

Upgrade Notes

The following components are upgraded from R3
  • Cloudify Manager:
    • Docker container tag: onap/org.onap.dcaegen2.deployments.cm-container:1.6.2
    • Description: DCAE’s Cloudify Manager container is based on Cloudify Manager Community Version 19.01.24, which is based on Cloudify Manager 4.5.
  • K8S Bootstrap container:
    • Docker container tag: onap/org.onap.dcaegen2.deployments.k8s-bootstrap-container:1.4.18
    • Description: K8s bootstrap container updated to include new plugin and remove DCAE Controller components which have been migrated to Helm chart.
  • Configuration Binding Service:
    • Docker container tag: onap/org.onap.dcaegen2.platform.configbinding.app-app:2.3.0
    • Description: Code optimization and bug fixes
  • Deployment Handler
    • Docker container image tag: onap/org.onap.dcaegen2.platform.deployment-handler:4.0.1
    • Include updates for health and service endpoint check and bug fixes
  • Policy Handler
    • Docker container image tag: onap/org.onap.dcaegen2.platform.policy-handler:5.0.0
    • Description: Policy Handler supports the new lifecycle API’s from Policy framework
  • Service Change Handler
    • Docker container image tag: onap/org.onap.dcaegen2.platform.servicechange-handler:1.1.5
    • Description: No update from R3
  • Inventory API
    • Docker container image tag: onap/org.onap.dcaegen2.platform.inventory-api:3.2.0
    • Description: Refactoring and updates for health and service endpoint check
  • VES Collector
    • Docker container image tag: onap/org.onap.dcaegen2.collectors.ves.vescollector:1.4.5
    • Description : Authentication enhancement, refactoring and bug-fixes
  • Threshold Crossing Analytics
    • Docker container image tag: onap/org.onap.dcaegen2.deployments.tca-cdap-container:1.1.2
    • Description: Config updates. Replaced Hadoop VM Cluster based file system with regular host file system; repackaged full TCA-CDAP stack into Docker container; transactional state separation from TCA in-memory to off-node Redis cluster for supporting horizontal scaling.
  • DataFile Collector
    • Docker container tag: onap/org.onap.dcaegen2.collectors.datafile.datafile-app-server:1.1.3
    • Description : Code optimization, bug fixes, logging and performance improvement
  • PNF Registrator handler
    • Docker container tag: onap/org.onap.dcaegen2.services.prh.prh-app-server:1.2.4
    • Description : Code optimization, SDK integration, PNF-UPDATE flow support
  • HV-VES Collector
    • Docker container tag: onap/org.onap.dcaegen2.collectors.hv-ves.hv-collector-main:1.1.0
    • Description : Code optimization, bug fixes, and enables SASL for kafka interface
  • SNMP Trap Collector
    • Docker container tag: onap/org.onap.dcaegen2.collectors.snmptrap:1.4.0
    • Description : Code coverage improvements

Version: 3.0.1

Release Date:2019-01-31

DCAE R3 Maintenance release includes following fixes

Bug Fixes

  • DataFileCollector
    • DCAEGEN2-940 Larger files of size 100Kb publish to DR
    • DCAEGEN2-941 DFC error after running over 12 hours
    • DCAEGEN2-1001 Multiple Fileready notification not handled
  • HighVolume VES Collector (protobuf/tcp)
    • DCAEGEN2-976 HV-VES not fully complaint to RTPM protocol (issue with CommonEventHeader.sequence)
  • VESCollector (http)
    • DCAEGEN2-1035 Issue with VES batch event publish
  • Heat deployment
    • DCAEGEN2-1007 Removing obsolete services configuration

The following containers are updated in R3.0.1

  • DataFile Collector
    • Docker container tag: onap/org.onap.dcaegen2.collectors.datafile.datafile-app-server:1.0.5
  • HV-VES Collector
    • Docker container tag: onap/org.onap.dcaegen2.collectors.hv-ves.hv-collector-main:1.0.2
  • VES Collector
    • Docker container tag: onap/org.onap.dcaegen2.collectors.ves.vescollector:1.3.2

Known Issues

  • An issue related to VESCollector basic authentication was noted and tracked under DCAEGEN2-1130. This configuration is not enabled by default for R3.0.1; and fix will be handled in Dublin
  • Certificates under onap/org.onap.dcaegen2.deployments.tls-init-container:1.0.0 has expired March’2019 and impacting CL deployment from CLAMP. Follow below workaround to update the certificate
    kubectl get deployments -n onap | grep deployment-handler kubectl edit deployment -n onap dev-dcaegen2-dcae-deployment-handler Search and change tag onap/org.onap.dcaegen2.deployments.tls-init-container:1.0.0 to onap/org.onap.dcaegen2.deployments.tls-init-container:1.0.3

Version: 3.0.0

Release Date:2018-11-30

New Features

DCAE R3 improves upon previous release with the following new features:

  • All DCAE R3 components are delivered as Docker container images. The list of components is as follows.
    • Platform components
      • Cloudify Manager
      • Bootstrap container
      • Configuration Binding Service
      • Deployment Handler
      • Policy Handler
      • Service Change Handler
      • Inventory API
    • Service components
      • VES Collector
      • SNMP Collector
      • Threshold Crossing Analytics
      • Holmes Rule Management *
      • Holmes Engine Management *
    • Additional resources that DCAE utilizes:
      • Postgres Database
      • Redis Cluster Database
      • Consul Cluster
    Notes:

    * These components are delivered by the Holmes project.

  • DCAE R3 supports both OpenStack Heat Orchestration Template based deployment and OOM (Kubernetes) based deployment.

    • Under Heat based deployment all DCAE component containers are deployed onto a single Docker host VM that is launched from an OpenStack Heat Orchestration Template as part of “stack creation”.
    • Under OOM (Kubernetes) deployment all DCAE component containers are deployed as Kubernetes Pods/Deployments/Services into Kubernetes cluster.

  • DCAE R3 includes a new Cloudify Manager plugin (k8splugin) that is capable of expanding a Blueprint node specification written for Docker container to a full Kubernetes specification, with additional enhancements such as replica scaling, sidecar for logging to ONAP ELK stack, registering services to MSB, etc.

  • All DCAE components are designed to support platform maturity requirements.

Source Code

Source code of DCAE components are released under the following repositories on gerrit.onap.org:
  • dcaegen2
  • dcaegen2.analytics
  • dcaegen2.analytics.tca
  • dcaegen2.collectors
  • dcaegen2.collectors.snmptrap
  • dcaegen2.collectors.ves
  • dcaegen2.collectors.hv-ves
  • dcaegen2.collectors.datafile
  • dcaegen2.deployments
  • dcaegen2.platform
  • dcaegen2.platform.blueprints
  • dcaegen2.platform.cli
  • dcaegen2.platform.configbinding
  • dcaegen2.platform.deployment-handler
  • dcaegen2.platform.inventory-api
  • dcaegen2.platform.plugins
  • dcaegen2.platform.policy-handler
  • dcaegen2.platform.servicechange-handler
  • dcaegen2.services.heartbeat
  • dcaegen2.services.mapper
  • dcaegen2.services.prh
  • dcaegen2.utils

Bug Fixes

Known Issues

  • DCAE utilizes Cloudify Manager as its declarative model based resource deployment engine. Cloudify Manager is an open source upstream technology provided by Cloudify Inc. as a Docker image. DCAE R2 does not provide additional enhancements towards Cloudify Manager’s platform maturity.

Security Notes

DCAE code has been formally scanned during build time using NexusIQ and all Critical vulnerabilities have been addressed, items that remain open have been assessed for risk and determined to be false positive. The DCAE open Critical security vulnerabilities and their risk assessment have been documented as part of the project.

Quick Links:

New component Notes The following components are introduced in R3

  • DataFile Collector
    • Docker container tag: onap/org.onap.dcaegen2.collectors.datafile.datafile-app-server:1.0.4
    • Description : Bulk data file collector to fetch non-realtime PM data
  • PNF Registrator handler
    • Docker container tag: onap/org.onap.dcaegen2.services.prh.prh-app-server:1.1.1
    • Description : Recieves VES registration event and updates AAI and SO
  • HV-VES Collector
    • Docker container tag: onap/org.onap.dcaegen2.collectors.hv-ves.hv-collector-main:1.0.0
    • Description : High Volume VES Collector for fetching real-time PM measurement data
  • SNMP Trap Collector
    • Docker container tag: onap/org.onap.dcaegen2.collectors.snmptrap:1.4.0
    • Description : Receives SNMP traps and publishes them to a message router (DMAAP/MR) in json structure

Upgrade Notes

The following components are upgraded from R2:
  • Cloudify Manager:
    • Docker container tag: onap/org.onap.dcaegen2.deployments.cm-container:1.4.2
    • Description: R3 DCAE’s Cloudify Manager container is based on Cloudify Manager Community Version 18.7.23, which is based on Cloudify Manager 4.3.
  • Bootstrap container:
    • Docker container tag: onap/org.onap.dcaegen2.deployments.k8s-bootstrap-container:1.4.5
    • Description: R3 DCAE no longer uses bootstrap container for Heat based deployment, – deployment is done through cloud-init scripts and docker-compose specifications. The bootstrap is for OOM (Kubernetes) based deployment.
  • Configuration Binding Service:
    • Docker container tag: onap/org.onap.dcaegen2.platform.configbinding.app-app:2.2.3
    • Description: Configuration Binding Sevice now supports the new configuration policy format and support for TLS
  • Deployment Handler
    • Docker container image tag: onap/org.onap.dcaegen2.platform.deployment-handler:3.0.3
  • Policy Handler
    • Docker container image tag: onap/org.onap.dcaegen2.platform.policy-handler:4.4.0
    • Description: Policy Handler now supports the new configuration policy format and support for TLS
  • Service Change Handler
    • Docker container image tag: onap/org.onap.dcaegen2.platform.servicechange-handler:1.1.5
    • Description: Refactoring.
  • Inventory API
    • Docker container image tag: onap/org.onap.dcaegen2.platform.inventory-api:3.0.4
    • Description: Refactoring.
  • VES Collector
    • Docker container image tag: onap/org.onap.dcaegen2.collectors.ves.vescollector:1.3.1
    • Description : Refactoring
  • Threshold Crossing Analytics
    • Docker container image tag: onap/org.onap.dcaegen2.deployments.tca-cdap-container:1.1.0
    • Description: Replaced Hadoop VM Cluster based file system with regular host file system; repackaged full TCA-CDAP stack into Docker container; transactional state separation from TCA in-memory to off-node Redis cluster for supporting horizontal scaling.

Version: 2.0.0

Release Date:2018-06-07

New Features

DCAE R2 improves upon previous release with the following new features:

  • All DCAE R2 components are delivered as Docker container images. The list of components is as follows.
    • Platform components
      • Cloudify Manager
      • Bootstrap container
      • Configuration Binding Service
      • Deployment Handler
      • Policy Handler
      • Service Change Handler
      • Inventory API
    • Service components
      • VES Collector
      • SNMP Collector
      • Threshold Crossing Analytics
      • Holmes Rule Management *
      • Holmes Engine Management *
    • Additional resources that DCAE utilizes:
      • Postgres Database
      • Redis Cluster Database
      • Consul Cluster
    Notes:

    * These components are delivered by the Holmes project and used as a DCAE analytics component in R2.

  • DCAE R2 supports both OpenStack Heat Orchestration Template based deployment and OOM (Kubernetes) based deployment.

    • Under Heat based deployment all DCAE component containers are deployed onto a single Docker host VM that is launched from an OpenStack Heat Orchestration Template as part of “stack creation”.
    • Under OOM (Kubernetes) deployment all DCAE component containers are deployed as Kubernetes Pods/Deployments/Services into Kubernetes cluster.

  • DCAE R2 includes a new Cloudify Manager plugin (k8splugin) that is capable of expanding a Blueprint node specification written for Docker container to a full Kubernetes specification, with additional enhancements such as replica scaling, sidecar for logging to ONAP ELK stack, registering services to MSB, etc.

  • All DCAE components are designed to support platform maturity requirements.

Source Code

Source code of DCAE components are released under the following repositories on gerrit.onap.org:
  • dcaegen2
  • dcaegen2.analytics
  • dcaegen2.analytics.tca
  • dcaegen2.collectors
  • dcaegen2.collectors.snmptrap
  • dcaegen2.collectors.ves
  • dcaegen2.deployments
  • dcaegen2.platform
  • dcaegen2.platform.blueprints
  • dcaegen2.platform.cli
  • dcaegen2.platform.configbinding
  • dcaegen2.platform.deployment-handler
  • dcaegen2.platform.inventory-api
  • dcaegen2.platform.plugins
  • dcaegen2.platform.policy-handler
  • dcaegen2.platform.servicechange-handler
  • dcaegen2.services.heartbeat
  • dcaegen2.services.mapper
  • dcaegen2.services.prh
  • dcaegen2.utils

Bug Fixes

Known Issues

  • DCAE utilizes Cloudify Manager as its declarative model based resource deployment engine. Cloudify Manager is an open source upstream technology provided by Cloudify Inc. as a Docker image. DCAE R2 does not provide additional enhancements towards Cloudify Manager’s platform maturity.

Security Notes

DCAE code has been formally scanned during build time using NexusIQ and all Critical vulnerabilities have been addressed, items that remain open have been assessed for risk and determined to be false positive. The DCAE open Critical security vulnerabilities and their risk assessment have been documented as part of the project.

Quick Links:

Upgrade Notes

The following components are upgraded from R1:
  • Cloudify Manager:
    • Docker container tag: onap/org.onap.dcaegen2.deployments.cm-container:1.3.0
    • Description: R2 DCAE’s Cloudify Manager container is based on Cloudify Manager Community Version 18.2.28, which is based on Cloudify Manager 4.3.
  • Bootstrap container:
    • Docker container tag: onap/org.onap.dcaegen2.deployments.k8s-bootstrap-container:1.1.11
    • Description: R2 DCAE no longer uses bootstrap container for Heat based deployment, – deployment is done through cloud-init scripts and docker-compose specifications. The bootstrap is for OOM (Kubernetes) based deployment.
  • Configuration Binding Service:
    • Docker container tag: onap/org.onap.dcaegen2.platform.configbinding:2.1.5
    • Description: Configuration Binding Sevice now supports the new configuration policy format.
  • Deployment Handler
    • Docker container image tag: onap/org.onap.dcaegen2.platform.deployment-handler:2.1.5
  • Policy Handler
    • Docker container image tag: onap/org.onap.dcaegen2.platform.policy-handler:2.4.5
    • Description: Policy Handler now supports the new configuration policy format.
  • Service Change Handler
    • Docker container image tag: onap/org.onap.dcaegen2.platform.servicechange-handler:1.1.4
    • Description: Refactoring.
  • Inventory API
    • Docker container image tag: onap/org.onap.dcaegen2.platform.inventory-api:3.0.1
    • Description: Refactoring.
  • VES Collector
    • Docker container image tag: onap/org.onap.dcaegen2.collectors.ves.vescollector:1.2.0
  • Threshold Crossing Analytics
    • Docker container image tag: onap/org.onap.dcaegen2.deployments.tca-cdap-container:1.1.0
    • Description: Replaced Hadoop VM Cluster based file system with regular host file system; repackaged full TCA-CDAP stack into Docker container; transactional state separation from TCA in-memory to off-node Redis cluster for supporting horizontal scaling.

Version: 1.0.0

Release Date:2017-11-16

New Features

DCAE is the data collection and analytics sub-system of ONAP. Under ONAP Release 1 the DCAE sub-system includes both platform components and DCAE service components. Collectively the ONAP R1 DCAE components support the data collection and analytics functions for the R1 use cases, i.e. vFW, vDNS, vCPU, and vVoLTE.

Specifically, DCAE R1 includes the following components:

  • Core platform
    • Cloudify manager
    • Consul cluster
  • Extended platform
    • Platform component docker host
    • Service component docker host
    • CDAP cluster
    • PostgreSQL database (*)
  • Platform docker container components
    • Configuration binding service
    • Deployment handler
    • Service change handler
    • Inventory
    • Policy handler
    • CDAP broker
  • Service components
    • Docker container components
      • VNF Event Streaming (VES) collector
      • Holmes (engine and rule management) **
    • CDAP analytics component
      • Threshold Crossing Analytics (TCA)

(*) Note: This component is delivered under the CCSDK project, deployed by DCAE under a single VM configuration as a shared PostgreSQL database for the R1 demos. (CCSDK PostgreSQL supports other deployment configurations not used in the R1 demos.) (**) Note: This component is delivered under the Holmes project and used as a DCAE analytics component in R1.

Source codes of DCAE are released under the following repositories on gerrit.onap.org:

  • dcaegen2
  • dcaegen2/analytics
  • dcaegen2/analytics/tca
  • dcaegen2/collectors
  • dcaegen2/collectors/snmptrap
  • dcaegen2/collectors/ves
  • dcaegen2/deployments
  • dcaegen2/platform
  • dcaegen2/platform/blueprints
  • dcaegen2/platform/cdapbroker
  • dcaegen2/platform/cli
  • dcaegen2/platform/configbinding
  • dcaegen2/platform/deployment-handler
  • dcaegen2/platform/inventory-api
  • dcaegen2/platform/plugins
  • dcaegen2/platform/policy-handler
  • dcaegen2/platform/servicechange-handler
  • dcaegen2/utils

Bug Fixes

This is the initial release.

Known Issues

  • Need to test/integrate into an OpenStack environment other than Intel/Windriver Pod25.
  • Need to provide a dev configuration DCAE.

Security Issues

  • The DCAE Bootstrap container needs to have a secret key for accessing VMs that it launches. This key is currently passed in as a Heat template parameter. Tracked by JIRA DCAEGEN2-178.>`_.
  • The RESTful API calls are generally not secure. That is, they are either over http, or https without certificate verification. Once there is an ONAP wide solution for handling certificates, DCAE will switch to https.

Upgrade Notes

This is the initial release.

Deprecation Notes

There is a GEN1 DCAE sub-system implementation existing in the pre-R1 ONAP Gerrit system. The GEN1 DCAE is deprecated by the R1 release. The DCAE included in ONAP R1 is also known as DCAE GEN2. The following Gerrit repos are voided and already locked as read-only.

  • dcae
  • dcae/apod
  • dcae/apod/analytics
  • dcae/apod/buildtools
  • dcae/apod/cdap
  • dcae/collectors
  • dcae/collectors/ves
  • dcae/controller
  • dcae/controller/analytics
  • dcae/dcae-inventory
  • dcae/demo
  • dcae/demo/startup
  • dcae/demo/startup/aaf
  • dcae/demo/startup/controller
  • dcae/demo/startup/message-router
  • dcae/dmaapbc
  • dcae/operation
  • dcae/operation/utils
  • dcae/orch-dispatcher
  • dcae/pgaas
  • dcae/utils
  • dcae/utils/buildtools
  • ncomp
  • ncomp/cdap
  • ncomp/core
  • ncomp/docker
  • ncomp/maven
  • ncomp/openstack
  • ncomp/sirius
  • ncomp/sirius/manager
  • ncomp/utils

Other

SNMP trap collector is seed code delivery only.