New Delhi
Package | Recommended Version | Release date | Notes |
|---|---|---|---|
Java 11 | Java 11 Minimum: Java SE 11.0.17 Target: Java SE 11.0.21 Java 17 Acceptable: Java SE 17.0.5 Target: Java SE 17.0.10 | 2022-10-18 2023-10-17 2022-10-18 2024-01-16 | Java SE 11 EOSL dates: September 2026 for Oracle, September 2026 for Azul, October 2024 for Red Hat Java SE 17: To accommodate ODL requirements; EOSL September 2024 for Oracle source: https://en.wikipedia.org/wiki/Java_version_history source: Java Archive | Oracle |
Python 3 | Minimum 3.9.19 Target: 3.12.2 | 2020-10-05 2023-10-02 | security fixes available through: 2025-10 security fixes available through: 2028-10 |
| pip | target: 22.3.2 Acceptable: 22.3.1 | 2023-12-17 2022-11-05 | |
| Docker | Target: 24.0.9 Minimum: 24.0.0 | 2024-01-31 2023-05-16 | source: https://docs.docker.com/engine/release-notes/ |
| Kubernetes | Target: 1.29.0 Acceptable: 1.28.6+ | 2023-12-13 2023-11-14 | |
| kubectl | Target: 1.29.0 Acceptable: 1.28.4+ | 2023-12-13 2023-11-14 | source: https://kubernetes.io/releases/ |
| keycloak | Target: 23.0.7 Acceptable: 22.0.5 | 2024-02-22 2023-10-24 | source: Releases · keycloak/keycloak · GitHub usage: reference implementation |
| Istio | Acceptable: 1.21.1+ Acceptable: 1.20.5+ | 2024-03-13 2023-11-14 | source: Istio / Supported Releases usage: reference implementation |
| Helm | Target: 3.13.3 Acceptable: 3.12.3 | 2023-12-13 2023-08-10 | |
| Ubuntu | Target: 22.04.3 LTS Acceptable: 20.04.6 LTS | 2023-08-10 2023-03-23 | source: https://wiki.ubuntu.com/Releases |
| Debian | Target 12.4 | 2023-12-10 | |
| Alpine | Target: 3.16.9, 3.17.7, 3.18.6 Target: 3.19.0 | 2024-01-26 2023-12-07 | |
| CentOS | CentOS Linux 7-2009 CentOS 8-Stream | 2020-09-29 | support ends: June 30, 2024 support ends: May 2024 source: https://www.centos.org/ |
| curl | 8.5 0 | 2023-12-06 | |
busybox | Acceptable: 1.36.1 | 2023-05-19 | source: https://git.busybox.net/busybox/ |
| OpenSSL | Target: 3.2.0 Target: 3.1.4, 3.0.12 Target: 1.1.1w | 2023-11-30 2023-10-24 2023-09-11 | ONAP acceptable cipher configuration must follow IANA recommendations source: https://www.openssl.org/ |
| OpenSSH | Target: 9.6, 9.6p1 Target: 9.5/9.5p1 | 2023-12-18 2023-10-04 | ONAP acceptable cipher configuration must follow OpenSSH recommendations. |
Cassandra | Acceptable: 4.1.4 Acceptable: 4.0.12 | 2024-02-14 2024-01-23 | |
MongoDB | Acceptable: 6.0.14 Acceptable: 5.0.25 Acceptable: 4.4.29 | 2024-02-28 2028-02-28 2028-02-28 | previous versions of 4.0, 5.0, 6.0 may skip peer certificate validation which may result in untrusted connections to succeed. |
MariaDB | Acceptable: 11.1.3, 11.0.4, 10.11.6, 10.10.7, 10.6.16 | 2023-11-13 | source: https://mariadb.com/kb/en/release-notes/, https://en.wikipedia.org/wiki/MariaDB |
Postgresql | NOTE that these releases fix a security bug in the previous minor releases. Acceptable: 16.2 Acceptable: 15.6 Acceptable: 14.11 Acceptable: 13.14 Acceptable: 12.18 | 2024-02-08 2024-02-08 2024-02-08 2024-02-08 2024-02-08 | Final release: 2028-11-09 Final release: 2027-11-11 Final release: 2026-11-12 Final release: 2025-11-13 Final release: 2024-11-14 |
Camunda | Acceptable: 8.4.0, 8.3.5, 8.2.20, 8.1.22 | 2024-01-08 | |
OpenDayLight | Potassium | 2024-02-24 | |
Kafka | Acceptable: 3.6.1 Acceptable: 3.6.0 Acceptable: 3.5.2 | 2023-12-07 2023-10-10 2023-12-23 | Do not use 3.3.0 because it contains a significant bug Do not use 3.2.2 because it contains a significant bug |
| etcd | Target: 3.5.11 Acceptable: 3.4.28 | 2023-12-7 2023-11-23 | in multicloud k8s |
| redis | Acceptable: 7.2.4 Acceptable: 7.0.15 Acceptable: 6.2.14 Acceptable: 6.0.20 | 2024-01-09 24-01-09 23-10-18 2023-07-10 | Upgrade urgency: SECURITY, contains fixes to security issues. Upgrade urgency: SECURITY, contains fixes to security issues. Upgrade urgency: SECURITY, contains fixes to security issues. Upgrade urgency: SECURITY, contains fixes to security issues. in DCAE, VFC source: https://github.com/redis/re |
Elasticsearch | Acceptable: 8.12.0 Acceptable: 8.11.4 Acceptable: 8.6.2 Acceptable: 7.17.17 | 2024-01-17 2024-01-11 2023-02-16 2024-01-23 | EOSL: The later of 2024-08-10 or 6 months after the release date of 9.0 (TBD) EOSL: The later of 2024-08-10 or 6 months after the release date of 9.0 (TBD) EOSL: The later of 2024-08-10 or 6 months after the release date of 9.0 (TBD) EOSL: Maintained until version 9.0.0 source: https://www.elastic.co/support/eol source: https://github.com/elastic/elasticsearch/releases in SDNC + |
| haproxy | Acceptable: 2.9.0 Acceptable: 2.8.0 Acceptable: 2.7.1 Acceptable: 2.6.7 | 2023-12-05 2023-05-21 2022-12-19 2022-12-02 | provides a path to 2.8 to be released in 2023 and is the next LTS version Current LTS (LTS through 2027-Q2) used by AAI |
| filebeat | Acceptable: 8.11.4 Acceptable: 8.10.4 Acceptable: 7.17.16 | 2024-01-11 2023-10-17 2023-12-12 | |
| nginx | Acceptable: 1.25.4 Acceptable: 1.24.0 | 2024-02-14 2023-04-11 | source: https://endoflife.date/nginx |
| nexus | Acceptable: 3.63.0 | 2023-12-05 | Amy Zwarico ask LFIT what version is currently running https://help.sonatype.com/repomanager3/product-information/release-notes Nexus Repository Manager software usage: possibly in Policy |
| zookeeper | Target: 3.9.2 Acceptable: 3.9.1 Target: 3.8.4 Acceptable: 3.8.3 | 2024-03-11 2023-10-03 2024-03-04 2023-10-09 | has known security vulnerabilities has known security vulnerabilities source: https://mvnrepository.com/artifact/org.apache.zookeeper/zookeeper usage: dmaap message router and portal |
| memcached | Acceptable: 3.7.0 Acceptable: 3.6.9 Acceptable: 3.5.9 | 2023-12-29 2023-12-29 2023-08-28 | in contrib source: https://github.com/memcached/memcached/wiki/ReleaseNotes |
| rabbitmq | Target: 3.12.12 Acceptable: 3.11.27 | 2024-01-05 2023-12-13 | source: https://github.com/rabbitmq/rabbitmq-server/releases |
| ChartMuseum | Target: 0.16.1 Acceptable: 0.16.0 | 2024-01-04 2023-06-14 |
Montreal
Package | Recommended Version | Release date | Notes |
|---|---|---|---|
Java 11 | Minimum: Java SE 11.0.17 Acceptable: Java SE 11.0.19 Target: Java SE 17.7 | 2022-10-18 2023-04-18 2023-04-18 | Java SE 11 EOSL dates: September 2026 for Oracle, September 2026 for Azul, October 2024 for Red Hat Java SE 17: To accommodate ODL requirements See: Dependency Upgrade in Policy Framework source: https://www.java.com/releases/, https://en.wikipedia.org/wiki/Java_version_history |
Python 3 | Absolute minimum 3.8.16 Minimum: 3.10.10 Target: 3.11.3 | 2022-12-06 2023-04-05 2023-04-05 | security fixes available through: 2024-10 security fixes available for 3.10 through: 2026-10 security fixes available for 3.11 through: 2027-10 source: https://www.python.org/doc/versions/, https://www.python.org/downloads/, https://en.wikipedia.org/wiki/History_of_Python |
centOS | Rocky Linux 8 or 9 | 7.9 is the final release of centOS. CentOS users should upgrade to Rocky Linux 8 or 9. | |
curl | 8.4.0 | 2023-10-11 |
London
Package | Recommended Version | Release date | Notes |
|---|---|---|---|
Java 11 | Minimum: Java SE 11.0.14 Target: Java SE 11.0.17 Acceptable: Java SE 17.0.5 | 2022-01-18 2022-10-18 2022-10-18 | Java SE 11 EOSL dates: September 2026 for Oracle, September 2026 for Azul, October 2024 for Red Hat Java SE 17: To accommodate ODL requirements |
Python 3 | Absolute minimum 3.7.16 Minimum: 3.10.9 Target: 3.11.1 | 2018-06-27 2021-10-04 2022-10-24 | security fixes available through: 2023-06-27 security fixes available through: 2026-10 security fixes available through: 2027-10 |
| pip | target: 22.3.1 Acceptable: 22.0.4 | 2022-11-05 2022-03-07 | |
| Docker | Target: 20.10.22 Minimum: 20.10.13 | 2022-12-16 2022-03-10 | source: https://docs.docker.com/engine/release-notes/ |
| Kubernetes | Target: 1.26.0 Acceptable: 1.24.9, 1.25.5 | 2022-12-09 2022-12-08 | 1.24 enters maintenance mode on 2023-05-28 and End of Life is on 2023-07-28 1.25 enters maintenance mode on 2023-08-28 and End of Life is on 2023-10-28 source: https://kubernetes.io/releases/ |
| kubectl | Target: 1.26.0 Acceptable: 1.24.9, 1.25.5 | 2022-12-09 2022-12-08 | 1.24 enters maintenance mode on 2023-05-28 and End of Life is on 2023-07-28 1.25 enters maintenance mode on 2023-08-28 and End of Life is on 2023-10-28 source: https://kubernetes.io/releases/ |
| Helm | Target: 3.10.3 Acceptable:3.9.4 | 2022-12-14 2021-08-24 | |
| Ubuntu | Target: 20.04.4 LTS Target: 22.04.1 LTS | 2022-02-24 2022-08.11 | End of Standard Support: 2025-04 End of Standard Support: 2027-04 source: https://wiki.ubuntu.com/Releases |
| Debian | 11.6 | 2022-12-17 | End of support: ~2024-07 |
| Alpine | 3.17.1 3.16.3 3.15.6 | 2023-01-09 2022-11-11 2022-08-09 | End of support: 2024-11-22 End of support: 2024-05-23 End of support: 2023-11-01 |
| CentOS | CentOS Linux 7-2009 CentOS 8-Stream | 2020-09-29 | support ends: June 30, 2024 support ends: May 2024 source: https://www.centos.org/ |
| curl | 7.87.0 | 2022-12.21 | |
busybox TBD) | Target: 1.35.0 Acceptable: 1.34.1 | 2021-12-26 2021-09-30 | source: https://git.busybox.net/busybox/ |
| OpenSSL | Target: 3.0.5 (LTS) Acceptable: 1.1.1 | 2022-10-12 2021-10-12 | support ends 2026-09-07 support ends 2023-09-11 ONAP acceptable cipher configuration must follow IANA recommendations source: https://www.openssl.org/ |
| OpenSSH | Target: 9.1 Acceptable: 8.9 | 2022-10-04 2021-02-23 | ONAP acceptable cipher configuration must follow OpenSSH recommendations. |
Cassandra | Target: 4.1.0 Acceptable: 4.0.7 Acceptable: 3.11.14 Acceptable: 3.0.28 | 2022-12-14 2022-10-23 2022-10-23 2022-10-23 | Maintained until 4.3.0 release (May-July 2025) Maintained until 4.3.0 release (May-July 2024) Maintained until 4.2.0 release (May-July 2023) Maintained until 4.3.0 release (May-July 2023) |
MongoDB | Target: 6.0 Acceptable: 5.0.14 Acceptable: 4.4.118 Acceptable: 4.2.23 | 2022-05-31 2022-10-21 2022-10-21 2022-09-29 | |
MariaDB | Target: 10.10.2 Acceptable: 10.9.4 | 2022-11-17 2022-11-07 | source: https://mariadb.com/kb/en/release-notes/, https://en.wikipedia.org/wiki/MariaDB |
Postgresql | Target: 15.1 Acceptable: 14.6 Acceptable: 13.9 Acceptable: 12.13 | 2022-11-10 2022-11-10 2022-11-10 2022-11-10 | Final release: 2027-11-11 Final release: 2026-11-12 Final release: 2025-11-13 Final release: 2024-11-14 |
Camunda | 7.18.0 | 2022-10-04 | |
OpenDayLight | Chlorine | 2022-12-27 | |
Kafka | Target: 3.3.1 Acceptable: 3.2.2 Acceptable: 3.1.2 Acceptable: 3.0.2 | 2022-10-03 2022-09-19 2022-09-19 2022-09-19 | Do not use 3.3.0 because it contains a significant bug Do not use 3.2.2 because it contains a significant bug |
| etcd | Target: 3.5.6 Acceptable: 3.4.23 | 2022-11-21 2022-12-21 | in multicloud k8s |
| redis | Target: 7.0.8 Acceptable: 6.2.10 | 2023-01-16 2023-01-17 | Upgrade urgency: SECURITY, contains fixes to security issues. Upgrade urgency: SECURITY, contains fixes to security issues. in DCAE, VFC |
Elasticsearch | Target: 8.6.0 Acceptable: 8.5.3 Acceptable: 8.4.3 Acceptable: 7.17.8 | 2023-01-10 2022-12-08 2022-10-05 2022-12-08 | EOSL: The later of 2024-08-10 or 6 months after the release date of 9.0 (TBD) EOSL: The later of 2024-08-10 or 6 months after the release date of 9.0 (TBD) EOSL: The later of 2024-08-10 or 6 months after the release date of 9.0 (TBD) EOSL: Maintained until version 9.0.0 source: https://www.elastic.co/support/eol source: https://github.com/elastic/elasticsearch/releases in SDNC + |
| consul | Target: 1.14.3 Acceptable: 1.13.5 Acceptable: 1.12.8 Acceptable: 1.11.11 | 2022-12-13 2022-12-13 2022-12-13 2022-10-19 | source: https://github.com/hashicorp/consul/releases in AAF SMS + in "consul" |
| vault | Target: 1.12.2 Acceptable: 1.11.6 Acceptable: 1.10.9 Acceptable: 1.9.10 | 2022-11-30 2022-11-30 2022-11-30 2022-09-29 | source: https://github.com/hashicorp/vault/releases in AAF SMS ??? |
| haproxy | Target: 2.7.1 Acceptable: 2.6.7 Acceptable: 2.5.7 Acceptable 2.4.20 | 2022-12-19 2022-12-02 2022-05-13 2022-12-09 | provides a path to 2.8 to be released in 2023 and is the next LTS version Current LTS (LTS through 2027-Q2) 2023-Q1 (stable) LTS through 2026-Q2 used by AAI |
| nifi-registry | Target: 1.19.1 Acceptable: 1.18.0 Acceptable: 1.17.0 Acceptable: 1.16.3 | 2022-12-07 2022-10-06 2022-08-01 2022-01-18 | used by DCAE Mod |
| filebeat | Target: 8.6.0 Acceptable: 8.5.3 Acceptable: 7.17.8 | 2023-01-10 2022-12-08 2022-12-08 | |
| nginx | Target:1.23.3 Acceptable: 1.22.1 | 2022-12-13 2022-10-19 | source: https://endoflife.date/nginx |
| nexus | Target: 3.45.1 Acceptable: 3.44.0 Acceptable: 3.43.0 | 2023-01-17 2022-12-14 2022-11-07 | Amy Zwarico ask LFIT what version is currently running https://help.sonatype.com/repomanager3/product-information/release-notes Nexus Repository Manager software in policy I guess |
| zookeeper | Target: 3.8.0 Stable: 3.7.1 | 2022-04-04 2022-05-10 | Latest release - transition when stable release available Latest stable release source: https://mvnrepository.com/artifact/org.apache.zookeeper/zookeeper dmaap message router and in portal |
| memcached | Target: 1.6.18 Acceptable: 1.6.17 | 2023-01-10 2022-08-26 | |
| netbox | Target: 3.4.2 Acceptable: 3.3.10 Acceptable: 3.2.9 | 2023-01-03 2022-12-13 2022-08-16 | source: https://github.com/netbox-community/netbox/releases in contrib |
| awx | 21.10.2 | 2022-12-21 | in contrib |
| ejbca | 7.11.0 7.10.0.2 7.9.0.1 | 2023-01-12 2022-10-11 | in contrib |
| rabbitmq | Target: 3.11.7 Acceptable: 3.10.14 Acceptable: 3.9.27 | 2023-01-17 2023-01-17 2022-12-13 | source: https://github.com/rabbitmq/rabbitmq-server/releases |
| ChartMuseum | Target: 0.15.0 Acceptable: 0.14.0 | 2022-07-05 2022-01-31 |
Kohn
Package | Recommended Version | Release date | Notes |
|---|---|---|---|
Java 11 | Minimum: Java SE 11.0.14 Target: Java SE 11.0.15 | 2022-01-18 2022-04-19 | openjdk 11: jre-11.0.15_10-alpine |
Python 3 | Minimum: 3.10.4 | 2021-10-04 | security fixes available through 2023-06 all versions before 3.10.4 are out of support |
| pip | target: 22.1.2 Acceptable: 22.0.4 | 2022-05-31 2022-03-07 | |
| Docker | Target: 20.10.16 Minimum: 20.10.13 | 2022-05-12 2022-03-10 | |
| Kubernetes | Target: 1.24.1 Acceptable: 1.23.7 | 2022-05-24 2022-05-24 | 1.24.1 support ends 2023-09-29 1.23.7 support ends 2023-02-28 All earlier version support ends prior to the Kohn release date. Note that beginning with 1.19, Kubernetes versions will be supported for one year 1.19 support ended 2021-09-30 1.20 support ends 2022-02-28 |
| kubectl | Target: 1.24.0 Acceptable: 1.23.6 | 2022-05-03 2022-04-13 | EOSL 2023-09-29 EOSL 2023-02-28 |
| Helm | Target: 3.9.0 Acceptable: 3.8.0 | 2022-05-11 2021-04-13 | https://github.com/helm/helm/releases |
| Ubuntu | Target: 20.04.4 LTS Target: 22.04 LTS | 2022-02-24 2022-04-21 | End of Standard Support: 2025-04 End of Standard Support: 2027-04 |
| Debian | 11.3 | 2022-03-26 | No end of standard support date published |
| Alpine | 3.16.0 3.15.4 | 2022-05-23 2022-04-04 | End of support: 2024-05-23 End of support: 2023-11-01 |
| CentOS | CentOS Linux 7-2009 CentOS 8-Stream | 2020-09-29 | support ends: June 30, 2024 support ends: May 2024 |
| curl | 7.83.1 | 2022-05-11 | https://curl.se/docs/releases.html |
| busybox | Target: 1.35.0 Acceptable: 1.34.1 | 2021-12-26 2021-09-30 | https://git.busybox.net/busybox/ |
| OpenSSL | Target 3.0 Acceptable: 1.1.1 | 2022-05-03 2021-03-25 | latest release support ends 2023-09-11 ONAP acceptable cipher configuration must follow IANA recommendations. |
| OpenSSH | Target: 9.0 Acceptale: 8.8 | 2022-04-08 2021-09-26 | ONAP acceptable cipher configuration must follow OpenSSH recommendations. |
Cassandra | Target: 4.0.4 Acceptable: 3.11.13 Acceptable: 3.0.27 | 2022-02-17 2022-02-08 2022-02-08 | Maintained until 4.3.0 release (May-July 2024) Maintained until 4.2.0 release (May-July 2023) Maintained until 4.3.0 release (May-July 2024) |
MongoDB | Target: 5.0.9 Acceptable: 4.4.14 | 2022-05-31 2022-05-09 | |
MariaDB | Target: 10.9.1 Acceptable: 10.6.8 Acceptable: 10.8.3 | 2022-05-20 2022-05-20 2021-11-08 | End of life: Jun 2025 End of life: Jul 2026 End of life: May 2023 https://mariadb.com/kb/en/release-notes/, https://en.wikipedia.org/wiki/MariaDB |
Postgresql | Target: 14.4 Acceptable: 13.7 | 2022-06-16 2020-09-24 | Final release: 2026-11-12 Final release: 2025-11-13 |
Camunda | 7.17.0 | 2022-04-12 | |
OpenDayLight | Sulfer 16.0 | 2022-05-13 | Migration to Chlorine planned in London release |
Kafka | Target: 3.2.0 Acceptable: 3.1.1 Acceptable: 3.0.1 | 2022-05-17 2022-05-17 2022-03-11 | |
| etcd | Target: 3.5.4 Acceptable: 3.4.18 | 2022-04-24 2021-10-15 | in multicloud k8s |
| redis | Target: 7.0.0 Acceptable: 6.2.7 | 2022-04-17 2022-04-17 | Upgrade urgency: SECURITY, contains fixes to security issues. https://github.com/redis/redis/releases in DCAE, VFC |
Elasticsearch | Target: 8.2.2 Acceptable: 7.17.4 | 2022-05-26 2022-05-24 | Maintained until 2023-10-26 and version 8.3.0 Maintained until version 9.0.0 https://www.elastic.co/support/eol https://github.com/elastic/elasticsearch/releases in SDNC + |
| consul | Target: 1.12.2 Acceptable: 1.11.6 | 2022-06-03 2022-05-25 | in AAF SMS + in "consul" |
| vault | Target: 1.10.3 Acceptable: 1.10.1 Acceptable: 1.9.6 | 2022-05-11 2022-04-29 2022-04-29 | in AAF SMS ??? |
| haproxy | Target: 2.6.1 Acceptable: 2.5.7 | 2022-05-31 2022-05-13 | Current LTS (2027-Q2) 2023-Q1 (stable) used by AAI |
| nifi-registry | Target:1.16.2 Acceptable: 1.15.3 | 2022-05-26 2022-01-18 | used by DCAE Mod |
| filebeat | Target: 8.2.2 Acceptable: 7.17.4 | 2022-05-26 2022-05-24 | |
| nginx | Target: 1.22.0 Acceptable: 1.21.6 | 2022-05-24 2022-01-025 | https://endoflife.date/nginx |
| nexus | 3.39.0 | 2022-05-23 | Amy Zwarico ask LFIT what version is currently running https://help.sonatype.com/repomanager3/product-information/release-notes Nexus Repository Manager software in policy I guess |
| zookeeper | Target: 3.8.0 Stable: 3.7.1 | 2022-03-07 2022-05-12 | Latest release - transition when stable release available Latest stable release dmaap message router and in portal |
| memcached | 1.6.15 | 2022-03-29 | |
| netbox | Target: 3.2.4 Acceptable: 3.1.11 | 2022-05-31 2022-04-05 | in contrib |
| awx | 12.1.0 | 2022-06-02 | in contrib |
| ejbca | 7.9.0.1 | 2022-06-02 | in contrib |
| rabbitmq | Target: 3.10.5 Acceptable: 3.9.20 Acceptable: 3.8.34 | 2022-06-01 2022-06-01 2022-06-01 | |
| ChartMuseum | Target: 0.14.0 Acceptable: 0.13.1 | 2022-01-31 2022-03-11 | https://github.com/helm/chartmuseum/releases |
Jakarta
Package | Recommended Version | Release date | Notes |
|---|---|---|---|
Java 11 | Minimum: Java SE 11.0.10 Target: Java SE 11.0.13 | 2021-01-19 2021-10-19 | |
Python 3 | Minimum: 3.7.12 Target: 3.10.1 | 2018-06-27 2021-12-06 | security fixes available through 2023-06 |
| pip | target: 21.3.1 Acceptable: 21.2.4 | 2021-10-22 2021-08-12 | |
| Docker | Minimum: 19.03.15 Target: 20.10.11 | 2021-02-01 2021-11-17 | Docker 19.03.x: at least 19.03.15 Docker 20.10.x: at least 20.10.11 |
| Kubernetes | Acceptable: 1.21.7 Target: 1.22.4 | 2021-11-17 2021-11-17 | 1.21 support ends 2022-06-28 1.22 support ends 2022-10-28 Note that beginning with 1.19, Kubernetes versions will be supported for one year 1.19 support ended 2021-09-30 1.20 support ends 2022-02-28 |
| kubectl | 1.22.4 | 2021-11-17 | |
| Helm | Acceptable: 3.6.4 Target: 3.7.1 Future: 3.8.0 | 2021-11-10 2021-10-13 2020-09-18 will be released 2022-01-12 | https://github.com/helm/helm/releases |
| Ubuntu | 20.04.3 LTS | 2021-08-26 | Standard support through 2025-04 |
| Debian | 11.1 | 2021-10-09 | |
| Alpine | 3.15.0 3.14.3 3.13.7 | 2021-11-24 2021-11-12 2021-01-14 | security support ends 2023-11-01 security support ends 2023-05-01 security support ends 2022-11-01 |
| CentOS |
7.9-2009 | 2021-11-16 2020-09-29 | support ends: Dec 31th, 2021 support ends: Jun 30th, 2024 |
| curl | 7.80.0 | 2021-10-10 | |
| busybox | 1.34.1 | 2021-09-30 | |
| OpenSSL | 1.1.1 | 2021-03-25 | support ends 2023-09-11 ONAP acceptable cipher configuration must follow IANA recommendations. |
| OpenSSH | 8.8 | 2021-09-26 | ONAP acceptable cipher configuration must follow OpenSSH recommendations. |
Cassandra | Acceptable: 3.11.10 Target: 4.0.1 | 2021-02-28 2021-09-07 | |
MongoDB | Target: 5.0 (Kohn) Acceptable: 4.4.10 | 2021-07-13 2021-10-15 | |
MariaDB | Acceptable: 10.5.13 Target 10.6.5 | 2021-11-08 2021-11-08 | End of life: Jun 2025 End of life: Jul 2026 |
Postgresql | 14.1 13.5 | 2021-09-30 2020-09-24 | Final release: 2026-11-12 Final release: 2025-11-13 |
Camunda | 7.16.0 | 2021-10-12 | |
OpenDayLight | Phosphorus-SR1 | 2021-10-15 | |
Kafka | Acceptable: 2.8.1 Target: 3.0.0 | 2021-09-17 2021-10-21 | |
| etcd | 3.4.18 3.5.1 | 2021-10-15 2021-10-15 | in multicloud k8s |
| redis | 6.2.6 | 2021-10-04 | in DCAE, VFC |
Elasticsearch | Acceptable: 6.8.20 Target: 7.15.2 | 2021-10-14 2021-11-10 | Maintained until version 8.0.0 Maintained until version 7.16.0 https://www.elastic.co/support/eol in SDNC + |
| consul | Acceptable: 1.9.11 Target: 1.10.4 | 2021-11-11 2021-11-11 | in AAF SMS + in "consul" |
| vault | Acceptable: 1.7.6 Acceptable: 1.8.5 Target: 1.9.0 | 2021-11-04 2021-11-04 2021-11-11 | in AAF SMS ??? |
| haproxy | 2.4.9 | 2021-11-24 | Current LTS version; supported until 2026-Q2 used by AAI |
| nifi-registry | Acceptable: 1.13.2 Target: 1.15.0 | 2021-07-14 2021-11-07 | used by DCAE Mod |
| filebeat | Target: 7.15.2 | 2021-11-10 | Note: 7.12.1 is the terminal release of 7.12 Note: 7.13.4 is the terminal release of 7.13 Note: 7.14.2 is the terminal release of 7.14 No additional bug fixes or documentation updates will be released for these versions. |
| nginx | 1.21.4 | 2021-11-02 | |
| nexus | 3.37.0 | 2021-11-24 | Nexus Repository Manager software in policy I guess Amy Zwarico is this a nexus repo or another software component called nexus? 3.23.0 is from Sonatype. Gervais-Martial Ngueko I believe that Morgan Richomme put nexus on the list and I don't know if it is the nexus repo or something else. Amy Zwarico yes it is Nexus Repository Manager software, I don't see something else related to "Nexus" |
| zookeeper | 3.6.3 3.7.0 | 2021-04-13 2021-03-27 | Latest stable release Latest release - transition when stable release available dmaap message router and in portal |
| memcached | 1.6.12 | 2021-09-28 | in contrib |
| netbox | Acceptable: 2.11.12 Target: 3.0.11 | 2021-08-23 2021-11-24 | in contrib |
| awx | 19.5.0 | 2021-11-19 | in contrib |
| ejbca | 7.4.3.2 | 2021-03-29 | in contrib |
| rabbitmq | Acceptable: 3.8.26 Target: 3.9.11 | 2021-11.20 2021-12-02 | |
| ChartMuseum | 0.1.3 | 2021-03-11 |
Istanbul
Package | Recommended Version | Release date | Notes |
|---|---|---|---|
Java 11 | Java SE 11.0.11 | 2021-04-20 | 11.0.6, 11.0.8, 11.0.9, 11.0.10 are still acceptable, but plans should be made to upgrade to latest version |
Python 3 | 3.9.5 | 2020-10-05 | 3.8.10 is still acceptable, but plans should be made to upgrade to latest version |
| Docker | 20.10.6 | 2021-04-12 2020-09-16 | |
| Kubernetes | 1.21 | 8 April 2021 2020-08-26 | Note that beginning with 1.19, Kubernetes versions will be supported for one year 1.19 support ends 30 September 2021 1.20 support ends 30 December 2021 |
| Helm | 3.6.0 | will be released on May 26, 2021 2020-09-18 | Helm v2 is supported only till 13th of November (source). Migration to v3 is mandatory |
| Ubuntu | 20.04.1 LTS | 2020-08-06 2020-04-23 | |
| Debian | 10.9 | 2021-03-27 2020-08-01 | |
| Alpine | 3.13.0 | 2021-01-14 2020-05-29 | |
| CentOS | 8.3-2011 | 2020-12-07 2020-06-15 | |
| OpenSSL | 1.1.1k | 2021-03-25 2020-04-21 | ONAP acceptable cipher configuration TBD. |
| OpenSSH | 8.6 | 2021-04-19 2020-05-27 | ONAP acceptable cipher configuration TBD. |
Cassandra | 3.11.10 | 2021-02-01 2020-08-31 | |
MongoDB | 4.4.5 | 2021-04-08 2020-09-09 | |
MariaDB | 10.5.10 | 2021-05-07 2020-08-10 | |
Postgresql | 13.3 | 2021-05-13 2020-02-13 | |
Camunda | 7.15.0 | 2021-04-13 2020-06-02 | |
OpenDayLight | Aluminum | 2020-08-11 2020-09-28 | |
Kafka | 2.8.0 | 2021-04-19 2020-08-10 | |
| etcd | v3.4.16 | 2021-05-11 | in multicloud k8s |
| redis | 6.2.3 | 2021-05-03 | in DCAE, VFC |
Elasticsearch | 7.12.1 | 2021-04-27 | in SDNC + |
| consul | 1.9.5 | 2021-04-15 | in AAF SMS + in "consul" |
| vault | 1.7.1 | 2021-04-23 | in AAF SMS ??? |
| haproxy | 2.4.0 | 2021-05-14 | used by AAI |
| nifi-registry | 1.13.2 | 2021-03-19 | used by DCAE Mod |
| filebeat | 7.12.1 | 2021-04-27 | Has filebeat been removed from Guilin? |
| nginx | 1.20.0 | 2021-04-20 | |
| nexus | 3.30.1-01 | 2021-04-22 | Need to research the use in HONOLULU in policy I guess Amy Zwarico is this a nexus repo or another software component called nexus? 3.23.0 is from Sonatype. Gervais-Martial Ngueko I believe that Morgan Richomme put nexus on the list and I don't know if it is the nexus repo or something else. Amy Zwarico yes it is Nexus Repository Manager software, I don't see something else related to "Nexus" |
| zookeeper | 3.7.0 | 2021-03027 | dmaap message router and in portal |
| memcached | 1.6.9 | 2020-11-21 | in contrib |
| netbox | 2.11.3 | 2021-05-07 | in contrib |
| awx | 19.1.0 | 2021-04-30 | in contrib |
| ejbca | 7.4.3.2 | 2021-03-29 | in contrib |
| rabbitmq | 3.8.16 | 2021-05-04 | |
| ChartMuseum | 0.1.3 | 2021-03-11 |
Honolulu
Recommended open source, java and python packages: HonoluluPackageVersions.xlsx
Package | Recommended Version | Release date | Notes |
|---|---|---|---|
Java 11 | Java SE 11.0.9 | 2020-10-20 | 11.0.6, 11.0.8 are still acceptable, but not preferred |
Python 3 | 3.9 | 2020-10-05 | 2020-11-12 - recommended version updated |
| Docker | 19.03.13 | 2020-09-16 | |
| Kubernetes | 1.19 | 2020-08-26 | Note that beginning with 1.19, Kubernetes versions will be supported for one year |
| Helm | 3.3.3 (3.4.0 if available) | 2020-09-18 | Helm v2 is supported only till 13th of November (source). Migration to v3 is mandatory |
| Ubuntu | 20.04 LTS | 2020-04-23 | |
| Debian | 10.5 | 2020-08-01 | |
| Alpine | 3.12 | 2020-05-29 | |
| CentOS | 8.2-2004 | 2020-06-15 | |
| OpenSSL | 1.1.1g | 2020-04-21 | ONAP acceptable cipher configuration TBD. |
| OpenSSH | 8.3 | 2020-05-27 | ONAP acceptable cipher configuration TBD. |
Cassandra | 3.11.8 | 2020-08-31 | |
MongoDB | 4.4.1 | 2020-09-09 | |
MariaDB | 10.5.5 | 2020-08-10 | |
Postgresql | 12.4 | 2020-02-13 | |
Camunda | 7.13 | 2020-06-02 | |
OpenDayLight | Magnesium Aluminum | 2020-08-11 TBD | |
Kafka | 2.5.1 | 2020-08-10 | |
| etcd | v3.4.13 | 2020-8-24 | in multicloud k8s |
| redis | 6.0.8 | 2020-09-09 | in DCAE, VFC |
Elasticsearch | 7.9.1 | 2020-09-03 | in CLAMP + SDNC + |
| consul | 1.7.2 | 2020-03-16 | in AAF SMS + in "consul" |
| vault | 1.4.1 1.3.5 | 2020-04-30 2020-04-28 | in AAF SMS ??? |
| haproxy | 2.2 | 2019-07-07 | used by AAI |
| nifi-registry | 1.12.0 | 2020-08-18 | used by DCAE Mod |
| filebeat | 7.9.1 | 2020-03-31 | Has filebeat been removed from Guilin? |
| nginx | 1.19.2 | 2020-08-11 | |
| nexus | 3.23.0 | 2020-05-05 | Need to research the use in HONOLULU in policy I guess Amy Zwarico is this a nexus repo or another software component called nexus? 3.23.0 is from Sonatype. |
| zookeeper | 3.6.2 | 2020-09-09 | dmaap message router and in portal |
| memcached | 1.6.7 | 2020-09-04 | in contrib |
| netbox | 2.8.9 | 2020-08-04 | in contrib |
| awx | 14.1.0 | 2020-09-26 | in contrib |
| ejbca | 7.3.1.2 | 2020-03-23 | in contrib |
| rabbitmq | 3.8.8 3.7.25 | 2020-09-03 2020-04-09 | used by multicloud fcaps - 3.7.25 is the final release in the 3.7.x series and GitHub recommends using 3.8.3 or higher |
Guilin
Guilin Java upgrade results: onap-guilin-java-versions.xlsx
Guilin Python upgrade results: onap-guilin-python-versions.xlsx
Package | Recommended Version | Release date | Notes |
|---|---|---|---|
Java 11 | Java SE 11.0.6, 11.0.8 | 2020-01-14 | Based on the Java 11 release history, there will likely be new releases in April, July and November. |
Python 3 | 3.8.2 | 2019-10-14 | Next release is planned for 2020-10-05 |
| Docker | 19.03.8 | 2020-03-10 | |
| Kubernetes | 1.17 | 2019-12-09 | 1.18.0-rc.1 was released on 2020-03-17. If it is stable within the next month, I recommend using 1.18 for Guilin. |
| Ubuntu | 20.04 LTS | 2018-04-23 | |
| Debian | 10 | 2019-07-06 | |
| Alpine | 3.11.5 | 2019-12-19 | |
| CentOS | 8 | 2019-09-24 | |
| OpenSSL | 1.1.1g | 2020-04-21 | ONAP acceptable cipher configuration TBD. |
| OpenSSH | 8.2 | 2020-02-14 | ONAP acceptable cipher configuration TBD. |
Cassandra | 3.11.6 | 2020-02-14 | |
MongoDB | 4.2.2 | 2019-12-09 | |
MariaDB | 10.4.12 | 2020-01-28 | Preview version of 10.5.1 became available on 2020-02-14 |
Postgresql | 12.2 | 2020-02-13 | 11.7 was released on 2020-02-13 and Postgresql 11 will remain supported until 2023-11-09 |
Camunda | 7.12.0 | 2019-11-20 | |
OpenDayLight | Sodium-SR2 | 2020-02-11 | |
Kafka | 2.4.1 | 2020-03-12 | |
| etcd | v3.4.7 | 2020-04-01 | in multicloud k8s |
| redis | 6.0.0 | 2020-04-30 | in DCAE, VFC |
Elasticsearch | 7.6.2 | 2020-03-31 | in SDNC + |
| consul | 1.6.5 1.7.2 | 2020-04-13 2020-03-16 | in AAF SMS + in "consul" |
| vault | 1.4.1 1.3.5 | 2020-04-30 2020-04-28 | in AAF SMS |
| haproxy | 2.0 | 2019-06-16 | used by AAI |
| nifi-registry | 1.11.4 | 2020-03-22 | used by DCAE Mod |
| filebeat | 7.6.2 | 2020-03-31 | will be hopefully removed by end of Guilin |
| nginx | 1.18.0 1.17.10 | 2020-04-20 2020-04-23 | in contrib, in |
| nexus | 3.23.0 | 2020-05-05 | in policy I guess Amy Zwarico is this a nexus repo or another software component called nexus? 3.23.0 is from Sonatype. |
| zookeeper | 3.6.1 | 2020-04-30 | dmaap message router and in portal |
| memcached | 1.6.5 | 2020-04-13 | in contrib Amy Zwarico the latest version of nmemcached was released in 2012. It is not clear if nmemcached is still supported by the community Sylvain Desbureaux : it's a typo, it's https://memcached.org/ actually sorry... |
| netbox | 2.8.1 | 2020-04-23 | in contrib |
| awx | 11.2.0 | 2020-04-29 | in contrib |
| ejbca | 6.15.2.6 | in contrib | |
| rabbitmq | 3.7.25 3.8.3 | 2020-04-09 2020-03-10 | used by multicloud fcaps 3.7.25 is the final release in the 3.7.x series and GitHub recommends using 3.8.3 |
17 Comments
Sylvain Desbureaux
Hi Amy Zwarico , Paweł Pawlak , I'm sorry I forgot to "save" the page so you couldn't see the new components to be checked :-/
Amy Zwarico
I'll start working on these.
Sylvain Desbureaux
Amy Zwarico for nexus, yes it's nexus repo from sonatype: current used version by Policy sonatype/nexus:2.14.13-01
Pamela Dragosh Jorge Hernandez for information
Pamela Dragosh
It is a nexus repository - drools pulls its rules/artifacts from it.
Damian Nowak
Java 11 is already on Java SE 11.0.7...
This is moving fast, and I see, many components are using following docker image →
openjdk:11-jre-slim.Perhaps it would make sense to mention, minimal jre-11 version?
Damian Nowak
Amy Zwarico
A suggestion: Would it make sense to define a "Minimum Recommended Version" instead of "Recommneded Version"?
The thing is, that we are usually getting new updates (functional and security) for different 3rd parties used by ONAP components during the release work. Sometimes we must upgrade to resolve functional issues, and sometimes we see improvements wrt security (e.g. Java 11.0.8 came with a number of fixes related to TLS handling, and we use TLS pretty much everywhere on external interfaces).
Let`s define the Minimum Recommended Version, please.
Amy Zwarico
Damian Nowak , Paweł Pawlak
Let's discuss at the 17/11 SECCOM meeting.
Alexander Mazuruk
Amy Zwarico I'd like to ask about outcome of proposed change from Recommended Version to Minimum Recommended version.
During GPLv3 removal from Dockers VFC Team needs to decide on a version of Redis & Alpine. For Redis it could be a bump in bugfix part, in case of Alpine it could be minor version bump.
VFC-1875 - Getting issue details... STATUS
Amy Zwarico
I think that is a reasonable change for Jakarta. Paweł Pawlak what are your thoughts?
Paweł Pawlak
Makes sense to me. Additionally to be discussed or CentOS If am if 7.x version should be also added.
fabian rouzaut
Centos7 contains old versions of python, java etc...
What about rocky to replace CentOS?
https://devops.com/rocky-linux-emerges-as-a-centos-replacement/
Sylvain Desbureaux
Amy Zwarico and Paweł Pawlak : elasticsearch has not an opensource license, I think we're stuck with the latest gplv2 one no?
Amy Zwarico
Sylvain Desbureaux are we using elasticsearch in ONAP?
Sylvain Desbureaux
yes for SDN-R in SDNC. We're currently using bitnami/elasticsearch:7.9.3 which is less than Elasticsearch 7.12.0, the first version without GPLv2 license
Sylvain Desbureaux
so we could move to 7.10.2-debian-10-r297
Vasyl Razinkov
filebeat:7.15.2 contains old Python (2.7.5)
Sylvain Desbureaux
fyi filebeat is now deployed by default only on "old" DCAE pods (see https://logs.onap.org/onap-integration/gating//126088-1/k8s/k8s/kubernetes-status/versions.html).