Page History

ONAP security continued to improve in the Frankfurt release.

• Automated integration tests of security best practices resulting in the discovery and removal of many vulnerabilities.
• Eliminated all but 3 of the 21 ONAP CVEs improving the security posture of the Frankfurt release.
• Increased Kubernetes security by running all pods as a non-root identity except for those documented.
• Significant progress in converting HTTP ports to HTTPS, with external HTTP interfaces documented.
• Upgrades of open source dependencies to latest versions resulting in a decrease of vulnerabilities in some projects; CLAMP eliminated all direct dependencies vulnerabilities.
• Progress with Java 11 migration for few projects, with strong commitment to complete migration in the Guilin release.  
• Collaborated with ODL creating an ONAP customized image with fewer vulnerabilities.
• Implementation of Sonar Cloud and meeting code coverage scanning targets resulting in code security improvements. 

Design Time

• CDS GUI Designer Client [New] - Phase 1 of 3
  
  • Package List Search
  • Package Creation
    • Meta Data Definition 
    • Template & Mapping Management
    • Script Management
    • Imports
    • Designer Mode
    • Scripting Mode

Run Time 

1. Enable Blueprint Processor Rolling Upgrade leveraging Hezelcast
2. Add PY-Executor 3.6 Microservice 
3. Add Error Catalog Library & integration with Blueprint processor
4. Certify the blueprint processor imperative workflow orchestration for provisioning activities. 
5. Prioritization Service
6. CLI Executor 
7. Bootstrap API for loading models, dictionary & CBA
8. Audit Service 
9. Added gRPC TLC Service & Properties Implementation 

ONAP Component integration 

1. CLAMP integration with CDS via REST API for cba action specification retrieval for a given CBA Name & Version. 
2. Policy integration with CDS Blueprint processor microservice for LCM action execution. 
3. SO Controller Execution Building Block integration with CDS for controller action execution in generic.

Use Case: 

1. E2E Automation for instantiation& Post instantiation via SO building & CDS for vLB VNF 
2. Control Loop of vFW VNF use case with Config Modify via DCAE, CLAMP  Policy, CDS
3. PNF Plug & Play with Netconf execution using CDS CBA package
4. PNF Software upgrade using CDS CBA Package
5. E2E Automation for instantiation via SO building, MultiCloud & CDS for CNF. 
6. 5G NRM Integration using CDS Package. 
7. The PM control use case sends subscription activation/de-activation requests via policy to CDS and then to the PNF simulator

Design Time

1. Simplify the CBA Package creation/.management via CDS UI.

Benefits 

1. Upgrade clients individually with no interruptions to other clients
2. Support a python executor 3.6 to execute python scripts via the CDS package. 
3. Have a consistent way of report errors for all the CDS components and microservices. 
4. Enable operation/designer for creating custom workflow and embedding customer workflow to the CDS CBA Package for parallel or sequential execution thus enabling faster delivery product to market. 
5. CDS should provide Correlation-based message prioritization based on Kafka Stream Consumption.
6. Enable operations to execute any CLI based commands for PNF & VNF. 
7. CDS load model types, dictionaries, and CBA multiple times based on cluster size. This commits avoid autoloading, and provides an API to bootstrap, if necessary.
   
8. Allows external components to trigger action(s) based on CDS execution and also gives visibility on every requests that was sent to CDS.

Benefits 

1. Render the CBA Action in Clamp GUI without code changes. 
2. ONAP management of lifecycle action in generic & model-driven mechanism. 
3. ONAP Orchestration of controller execution model-driven mechanism. 
4. Control loop usecases that need to take remediation actions from Policy Framework are able to launch any type of CBA Blueprint execution in CDS.

Benefits 

• Pivot to a model-driven implement of provisioning & controller management using a network intent package via CDS implement for all the use cases. 

.

NOTE: 

• Controller Design Studio [CDS]
• Controller Blueprint Archive [CBA]