R24.05 Portal - Release Checks

[evegufy]

Important

Follow the guidance on how to use the templates.

Release Info

Please provide information on what you want to be included in the Eclipse Tractus-X release.
If you are not owner of this issue, please provide the information as comment to the issue.
Make sure to assign this issue to expert(s) for their approval, as soon as you have finished preparation. Multiple assignees allowed; they will un-assign themselves once review completed.

Version to be included in Eclipse Tractus-X release: 2.0.0 [RELEASED]

Portal:

• Portal Chart: portal-2.0.0
• Portal Frontend: v2.0.0
• Portal Backend: v2.0.0
• Portal Assets: v2.0.0
• Portal Frontend Registration: v2.0.0

IAM:

• CentralIdP: 3.0.0
• SharedIdP: 3.0.0

Leading product repository: https://github.com/eclipse-tractusx/portal

For the QG Review the latest available Release Candidate (RC) version is to be checked, the RC versions will be kept up to date in the following:

Portal:

• Portal Chart: portal-2.0.0-RC8
• Portal Frontend: v2.0.0-RC7
• Portal Backend: v2.0.0-RC8
• Portal Frontend Registration: v2.0.0-RC1
• Portal Assets: v2.0.0-RC1

IAM:

• CentralIdP: 3.0.0-rc.3
• SharedIdP: 3.0.0-rc.3

Compliance Verifications

This issue tracks all checks, that need to be performed for a product release in Eclipse Tractus-X.

• Interoperability checks performed
• Data Sovereignty checks performed

General Checks

• Tractus-X Release Guidelines(TRGs) fulfilled QG checks (Release 24.5) portal#313

Note

Note: most criteria for documentation and security are now covered in TRGs

Security Checks

• Thread Modelling Analysis passed R24.05 Portal - Release Checks  #671 (comment)

Test Results

• E2E Integration Test passed
• User Journey approved

#671 (comment)

Helpful Links

• Eclipse Tractus-X openAPI specs on SwaggerHub

[evegufy]

Reviewing committer is @fabiodmota, thanks for taking that over!
I'll inform you in a couple of weeks once you can start with the review

[ThomasObermeyer]

no changes to interoperability since last review (release 24.03)

Approved! @kelaja

[pablosec]

Security assessment performed on 2024-05-15 by @szymonkowalczykzf and me.

Threat modeling/risk assessment will be finalized next week, no major risks to be expected. Will update here, as soon as threat modeling has passed.

[fabiodmota]

QG Checks done for:

• R24.05 Portal Iam - Release Checks portal-iam#120
• R24.05 Portal Frontend - Release Checks portal-frontend#779
• R24.05 Portal Backend - Release Checks portal-backend#733
• QG checks (Release 24.5) portal#313

[fabiodmota]

QG done for the repo https://github.com/eclipse-tractusx/portal-assets

• R24.05 Portal Assets - Release Checks portal-assets#315

All checks done with only the copyright header open, it's a small topic and not a blocker.

[evegufy]

QG done for the repo https://github.com/eclipse-tractusx/portal-assets

• R24.05 Portal Assets - Release Checks portal-assets#315

All checks done with only the copyright header open, it's a small topic and not a blocker.

same for eclipse-tractusx/portal-frontend-registration#170

[cbrugg]

INT Tests need to be documented. E2E Tests ongoing. Testmanagement Approval cannot be given at this time.

[RolaH1t]

QG review 17-May:
data sov outstanding
TRGs at 90% / SEC outstanding => will be completed, once testing finalized and final version available
SEC incl Thread Modelling approval expected cw21
Test completion expected early cw21 / no roadblocks
User Journey approval expected after test completion by @jjeroch

[vialkoje]

no use of contract offers/policies - under the feasibility of that assumption the expert approval is granted.

[RolaH1t]

@evegufy you may already want to check the data sov box based on relevant comment

[szymonkowalczykzf]

Threat Modeling - Approved - Assessment was reviewed and updated, all finding addressed previously.

[fabiodmota]

QG done for the repo https://github.com/eclipse-tractusx/portal-assets

• R24.05 Portal Assets - Release Checks portal-assets#315

All checks done with only the copyright header open, it's a small topic and not a blocker.

Checks completed for all involved repositories with the exception of security, which will be taken over by @RoKrish14 once the last release candidate was released:

• R24.05 Portal Frontend - Release Checks portal-frontend#779
• R24.05 Portal Backend - Release Checks portal-backend#733
• QG checks (Release 24.5) portal#313
• R24.05 Portal Assets - Release Checks portal-assets#315
• R24.05 Portal Registration - Release Checks portal-frontend-registration#170

For eclipse-tractusx/portal-iam#120 all checks (also security) are completed.

[jjeroch]

Test successfully closed and user journey approved by the product owner

[evegufy]

@RolaH1t Finalized versions released

Portal:

• Portal Chart: portal-2.0.0
• Portal Frontend: v2.0.0
• Portal Backend: v2.0.0
• Portal Assets: v2.0.0
• Portal Frontend Registration: v2.0.0

IAM:

• CentralIdP: 3.0.0
• SharedIdP: 3.0.0

[RolaH1t]

Congrats:
Quality Gate fully approved with all necessary pre-requisites fulfilled!
Thanks for all your efforts,
Roland