Database, Java, Python, Docker, Kubernetes, and Image Versions
- Amy Zwarico
- Byung-Woo Jun
- Sylvain Desbureaux
Oslo (under construction)
Package | Recommended Version | Release date | Notes |
|---|---|---|---|
Java 11 | Java 11 (LTS) Minimum: Java SE 11.0.21 Target: Java SE 11.0.23 Java 17 (LST) Acceptable: Java SE 17.0.10 Target: Java SE 17.0.12 Java 21 (latest LTS) Target: Java SE 21.0.04 | 2023-10-17 2023-10-17 2022-10-18 Latest: 2024-08-01 Latest: 2024-08-01 | Java SE 11 EOSL dates: September 2026 for Oracle, September 2026 for Azul, October 2024 for Red Hat Java SE 17: To accommodate ODL requirements; EOSL September 2024 for Oracle source: https://en.wikipedia.org/wiki/Java_version_history source: Java Archive | Oracle |
Python 3 | Minimum 3.9.19 Target: 3.12.4 | 2022-11-12 2023-10-02 | security fixes available through: 2025-10 security fixes available through: 2028-10 |
| pip | target: 24.2 Acceptable: 24.1.2 | 2024-07-28 2024-07-07 | |
| Docker | Target: 27.2.1 Minimum: 26.0.2 | 2024-09-09 2024-04-18 | source: https://docs.docker.com/engine/release-notes/ |
| Kubernetes | Target: 1.31.1 Acceptable: 1.28.14 | 2024-09-11 2023-09-10 | |
| kubectl | Target: 1.31.1 Acceptable: 1.28.14+ | 2024-09-11 2024-09-11 | source: https://kubernetes.io/releases/ |
| not updated below this row | |||
| keycloak | Target: 23.0.7 Acceptable: 22.0.5 | 2024-02-22 2023-10-24 | source: Releases · keycloak/keycloak · GitHub usage: reference implementation |
| Istio | Acceptable: 1.21.1+ Acceptable: 1.20.5+ | 2024-03-13 2023-11-14 | source: Istio / Supported Releases usage: reference implementation |
| Helm | Target: 3.13.3 Acceptable: 3.12.3 | 2023-12-13 2023-08-10 | |
| Ubuntu | Target: 22.04.3 LTS Acceptable: 20.04.6 LTS | 2023-08-10 2023-03-23 | source: https://wiki.ubuntu.com/Releases |
Debian need to check with PTL | Target 12.4 | 2023-12-10 | |
Alpine need to check with PTL | Target: 3.16.9, 3.17.7, 3.18.6 Target: 3.19.0 | 2024-01-26 2023-12-07 | |
CentOS  | CentOS Linux 7-2009 CentOS 8-Stream | 2020-09-29 | support ends: June 30, 2024 support ends: May 2024 source: https://www.centos.org/ |
| curl (currently use 7.80.0) | 8.5 0 | 2023-12-06 | |
busybox | Acceptable: 1.36.1 | 2023-05-19 | source: https://git.busybox.net/busybox/ |
| OpenSSL | Target: 3.2.0 Target: 3.1.4, 3.0.12 Target: 1.1.1w | 2023-11-30 2023-10-24 2023-09-11 | ONAP acceptable cipher configuration must follow IANA recommendations source: https://www.openssl.org/ |
| OpenSSH | Target: 9.6, 9.6p1 Target: 9.5/9.5p1 | 2023-12-18 2023-10-04 | ONAP acceptable cipher configuration must follow OpenSSH recommendations. |
Cassandra | Acceptable: 4.1.4 Acceptable: 4.0.12 | 2024-02-14 2024-01-23 | |
MongoDB | Acceptable: 6.0.14 Acceptable: 5.0.25 Acceptable: 4.4.29 | 2024-02-28 2028-02-28 2028-02-28 | previous versions of 4.0, 5.0, 6.0 may skip peer certificate validation which may result in untrusted connections to succeed. |
MariaDB (use 10.5.8); need to check; MariaDB-operator 0.34.0 | Acceptable: 11.1.3, 11.0.4, 10.11.6, 10.10.7, 10.6.16 | 2023-11-13 | source: https://mariadb.com/kb/en/release-notes/, https://en.wikipedia.org/wiki/MariaDB |
Postgresql | NOTE that these releases fix a security bug in the previous minor releases. Acceptable: 16.2 Acceptable: 15.6 Acceptable: 14.11 Acceptable: 13.14 Acceptable: 12.18 | 2024-02-08 2024-02-08 2024-02-08 2024-02-08 2024-02-08 | Final release: 2028-11-09 Final release: 2027-11-11 Final release: 2026-11-12 Final release: 2025-11-13 Final release: 2024-11-14 |
Camunda (check with SO team) | Acceptable: 8.4.0, 8.3.5, 8.2.20, 8.1.22 | 2024-01-08 | |
OpenDayLight (check with Dan) | Potassium | 2024-02-24 | |
Kafka (Strimzi: 0.43.0) | Acceptable: 3.6.1 Acceptable: 3.6.0 Acceptable: 3.5.2 | 2023-12-07 2023-10-10 2023-12-23 | Do not use 3.3.0 because it contains a significant bug Do not use 3.2.2 because it contains a significant bug |
| etcd | Target: 3.5.11 Acceptable: 3.4.28 | 2023-12-7 2023-11-23 | in multicloud k8s |
redis need to check with DCAE (maybe deprecated) | Acceptable: 7.2.4 Acceptable: 7.0.15 Acceptable: 6.2.14 Acceptable: 6.0.20 | 2024-01-09 24-01-09 23-10-18 2023-07-10 | Upgrade urgency: SECURITY, contains fixes to security issues. Upgrade urgency: SECURITY, contains fixes to security issues. Upgrade urgency: SECURITY, contains fixes to security issues. Upgrade urgency: SECURITY, contains fixes to security issues. in DCAE, VFC source: https://github.com/redis/re |
Elasticsearch | Acceptable: 8.12.0 Acceptable: 8.11.4 Acceptable: 8.6.2 Acceptable: 7.17.17 | 2024-01-17 2024-01-11 2023-02-16 2024-01-23 | EOSL: The later of 2024-08-10 or 6 months after the release date of 9.0 (TBD) EOSL: The later of 2024-08-10 or 6 months after the release date of 9.0 (TBD) EOSL: The later of 2024-08-10 or 6 months after the release date of 9.0 (TBD) EOSL: Maintained until version 9.0.0 source: https://www.elastic.co/support/eol source: https://github.com/elastic/elasticsearch/releases in SDNC + |
haproxy check with AAI; Fieta will update | Acceptable: 2.9.0 Acceptable: 2.8.0 Acceptable: 2.7.1 Acceptable: 2.6.7 | 2023-12-05 2023-05-21 2022-12-19 2022-12-02 | provides a path to 2.8 to be released in 2023 and is the next LTS version Current LTS (LTS through 2027-Q2) used by AAI |
| nginx | Acceptable: 1.25.4 Acceptable: 1.24.0 | 2024-02-14 2023-04-11 | source: https://endoflife.date/nginx |
nexus oom has 2.14.13-01 Ramesh confirmed that Policy is using it, and version is 3.68.1-02 | Acceptable: 3.63.0 | 2023-12-05 | Amy Zwarico ask LFIT what version is currently running https://help.sonatype.com/repomanager3/product-information/release-notes Nexus Repository Manager software usage: |
zookeeper still in strimzi; can we do it without zookeeper? | Target: 3.9.2 Acceptable: 3.9.1 Target: 3.8.4 Acceptable: 3.8.3 | 2024-03-11 2023-10-03 2024-03-04 2023-10-09 | has known security vulnerabilities has known security vulnerabilities source: https://mvnrepository.com/artifact/org.apache.zookeeper/zookeeper usage: dmaap message router and portal |
| memcached | Acceptable: 3.7.0 Acceptable: 3.6.9 Acceptable: 3.5.9 | 2023-12-29 2023-12-29 2023-08-28 | in contrib source: https://github.com/memcached/memcached/wiki/ReleaseNotes |
rabbitmq maybe it is not used | Target: 3.12.12 Acceptable: 3.11.27 | 2024-01-05 2023-12-13 | source: https://github.com/rabbitmq/rabbitmq-server/releases |
New Delhi
Package | Recommended Version | Release date | Notes |
|---|---|---|---|
Java 11 | Java 11 Minimum: Java SE 11.0.17 Target: Java SE 11.0.21 Java 17 Acceptable: Java SE 17.0.5 Target: Java SE 17.0.10 | 2022-10-18 2023-10-17 2022-10-18 2024-01-16 | Java SE 11 EOSL dates: September 2026 for Oracle, September 2026 for Azul, October 2024 for Red Hat Java SE 17: To accommodate ODL requirements; EOSL September 2024 for Oracle source: https://en.wikipedia.org/wiki/Java_version_history source: Java Archive | Oracle |
Python 3 | Minimum 3.9.19 Target: 3.12.2 | 2020-10-05 2023-10-02 | security fixes available through: 2025-10 security fixes available through: 2028-10 |
| pip | target: 22.3.2 Acceptable: 22.3.1 | 2023-12-17 2022-11-05 | |
| Docker | Target: 24.0.9 Minimum: 24.0.0 | 2024-01-31 2023-05-16 | source: https://docs.docker.com/engine/release-notes/ |
| Kubernetes | Target: 1.29.0 Acceptable: 1.28.6+ | 2023-12-13 2023-11-14 | |
| kubectl | Target: 1.29.0 Acceptable: 1.28.4+ | 2023-12-13 2023-11-14 | source: https://kubernetes.io/releases/ |
| keycloak | Target: 23.0.7 Acceptable: 22.0.5 | 2024-02-22 2023-10-24 | source: Releases · keycloak/keycloak · GitHub usage: reference implementation |
| Istio | Acceptable: 1.21.1+ Acceptable: 1.20.5+ | 2024-03-13 2023-11-14 | source: Istio / Supported Releases usage: reference implementation |
| Helm | Target: 3.13.3 Acceptable: 3.12.3 | 2023-12-13 2023-08-10 | |
| Ubuntu | Target: 22.04.3 LTS Acceptable: 20.04.6 LTS | 2023-08-10 2023-03-23 | source: https://wiki.ubuntu.com/Releases |
| Debian | Target 12.4 | 2023-12-10 | |
| Alpine | Target: 3.16.9, 3.17.7, 3.18.6 Target: 3.19.0 | 2024-01-26 2023-12-07 | |
| CentOS | CentOS Linux 7-2009 CentOS 8-Stream | 2020-09-29 | support ends: June 30, 2024 support ends: May 2024 source: https://www.centos.org/ |
| curl | 8.5 0 | 2023-12-06 | |
busybox | Acceptable: 1.36.1 | 2023-05-19 | source: https://git.busybox.net/busybox/ |
| OpenSSL | Target: 3.2.0 Target: 3.1.4, 3.0.12 Target: 1.1.1w | 2023-11-30 2023-10-24 2023-09-11 | ONAP acceptable cipher configuration must follow IANA recommendations source: https://www.openssl.org/ |
| OpenSSH | Target: 9.6, 9.6p1 Target: 9.5/9.5p1 | 2023-12-18 2023-10-04 | ONAP acceptable cipher configuration must follow OpenSSH recommendations. |
Cassandra | Acceptable: 4.1.4 Acceptable: 4.0.12 | 2024-02-14 2024-01-23 | |
MongoDB | Acceptable: 6.0.14 Acceptable: 5.0.25 Acceptable: 4.4.29 | 2024-02-28 2028-02-28 2028-02-28 | previous versions of 4.0, 5.0, 6.0 may skip peer certificate validation which may result in untrusted connections to succeed. |
MariaDB | Acceptable: 11.1.3, 11.0.4, 10.11.6, 10.10.7, 10.6.16 | 2023-11-13 | source: https://mariadb.com/kb/en/release-notes/, https://en.wikipedia.org/wiki/MariaDB |
Postgresql | NOTE that these releases fix a security bug in the previous minor releases. Acceptable: 16.2 Acceptable: 15.6 Acceptable: 14.11 Acceptable: 13.14 Acceptable: 12.18 | 2024-02-08 2024-02-08 2024-02-08 2024-02-08 2024-02-08 | Final release: 2028-11-09 Final release: 2027-11-11 Final release: 2026-11-12 Final release: 2025-11-13 Final release: 2024-11-14 |
Camunda | Acceptable: 8.4.0, 8.3.5, 8.2.20, 8.1.22 | 2024-01-08 | |
OpenDayLight | Potassium | 2024-02-24 | |
Kafka | Acceptable: 3.6.1 Acceptable: 3.6.0 Acceptable: 3.5.2 | 2023-12-07 2023-10-10 2023-12-23 | Do not use 3.3.0 because it contains a significant bug Do not use 3.2.2 because it contains a significant bug |
| etcd | Target: 3.5.11 Acceptable: 3.4.28 | 2023-12-7 2023-11-23 | in multicloud k8s |
| redis | Acceptable: 7.2.4 Acceptable: 7.0.15 Acceptable: 6.2.14 Acceptable: 6.0.20 | 2024-01-09 24-01-09 23-10-18 2023-07-10 | Upgrade urgency: SECURITY, contains fixes to security issues. Upgrade urgency: SECURITY, contains fixes to security issues. Upgrade urgency: SECURITY, contains fixes to security issues. Upgrade urgency: SECURITY, contains fixes to security issues. in DCAE, VFC source: https://github.com/redis/re |
Elasticsearch | Acceptable: 8.12.0 Acceptable: 8.11.4 Acceptable: 8.6.2 Acceptable: 7.17.17 | 2024-01-17 2024-01-11 2023-02-16 2024-01-23 | EOSL: The later of 2024-08-10 or 6 months after the release date of 9.0 (TBD) EOSL: The later of 2024-08-10 or 6 months after the release date of 9.0 (TBD) EOSL: The later of 2024-08-10 or 6 months after the release date of 9.0 (TBD) EOSL: Maintained until version 9.0.0 source: https://www.elastic.co/support/eol source: https://github.com/elastic/elasticsearch/releases in SDNC + |
| haproxy | Acceptable: 2.9.0 Acceptable: 2.8.0 Acceptable: 2.7.1 Acceptable: 2.6.7 | 2023-12-05 2023-05-21 2022-12-19 2022-12-02 | provides a path to 2.8 to be released in 2023 and is the next LTS version Current LTS (LTS through 2027-Q2) used by AAI |
| filebeat | Acceptable: 8.11.4 Acceptable: 8.10.4 Acceptable: 7.17.16 | 2024-01-11 2023-10-17 2023-12-12 | |
| nginx | Acceptable: 1.25.4 Acceptable: 1.24.0 | 2024-02-14 2023-04-11 | source: https://endoflife.date/nginx |
| nexus | Acceptable: 3.63.0 | 2023-12-05 | Amy Zwarico ask LFIT what version is currently running https://help.sonatype.com/repomanager3/product-information/release-notes Nexus Repository Manager software usage: possibly in Policy |
| zookeeper | Target: 3.9.2 Acceptable: 3.9.1 Target: 3.8.4 Acceptable: 3.8.3 | 2024-03-11 2023-10-03 2024-03-04 2023-10-09 | has known security vulnerabilities has known security vulnerabilities source: https://mvnrepository.com/artifact/org.apache.zookeeper/zookeeper usage: dmaap message router and portal |
| memcached | Acceptable: 3.7.0 Acceptable: 3.6.9 Acceptable: 3.5.9 | 2023-12-29 2023-12-29 2023-08-28 | in contrib source: https://github.com/memcached/memcached/wiki/ReleaseNotes |
| rabbitmq | Target: 3.12.12 Acceptable: 3.11.27 | 2024-01-05 2023-12-13 | source: https://github.com/rabbitmq/rabbitmq-server/releases |
| ChartMuseum | Target: 0.16.1 Acceptable: 0.16.0 | 2024-01-04 2023-06-14 |
Montreal
Package | Recommended Version | Release date | Notes |
|---|---|---|---|
Java 11 | Minimum: Java SE 11.0.17 Acceptable: Java SE 11.0.19 Target: Java SE 17.7 | 2022-10-18 2023-04-18 2023-04-18 | Java SE 11 EOSL dates: September 2026 for Oracle, September 2026 for Azul, October 2024 for Red Hat Java SE 17: To accommodate ODL requirements See: Dependency Upgrade in Policy Framework source: https://www.java.com/releases/, https://en.wikipedia.org/wiki/Java_version_history |
Python 3 | Absolute minimum 3.8.16 Minimum: 3.10.10 Target: 3.11.3 | 2022-12-06 2023-04-05 2023-04-05 | security fixes available through: 2024-10 security fixes available for 3.10 through: 2026-10 security fixes available for 3.11 through: 2027-10 source: https://www.python.org/doc/versions/, https://www.python.org/downloads/, https://en.wikipedia.org/wiki/History_of_Python |
centOS | Rocky Linux 8 or 9 | 7.9 is the final release of centOS. CentOS users should upgrade to Rocky Linux 8 or 9. | |
curl | 8.4.0 | 2023-10-11 |
London
Package | Recommended Version | Release date | Notes |
|---|---|---|---|
Java 11 | Minimum: Java SE 11.0.14 Target: Java SE 11.0.17 Acceptable: Java SE 17.0.5 | 2022-01-18 2022-10-18 2022-10-18 | Java SE 11 EOSL dates: September 2026 for Oracle, September 2026 for Azul, October 2024 for Red Hat Java SE 17: To accommodate ODL requirements |
Python 3 | Absolute minimum 3.7.16 Minimum: 3.10.9 Target: 3.11.1 | 2018-06-27 2021-10-04 2022-10-24 | security fixes available through: 2023-06-27 security fixes available through: 2026-10 security fixes available through: 2027-10 |
| pip | target: 22.3.1 Acceptable: 22.0.4 | 2022-11-05 2022-03-07 | |
| Docker | Target: 20.10.22 Minimum: 20.10.13 | 2022-12-16 2022-03-10 | source: https://docs.docker.com/engine/release-notes/ |
| Kubernetes | Target: 1.26.0 Acceptable: 1.24.9, 1.25.5 | 2022-12-09 2022-12-08 | 1.24 enters maintenance mode on 2023-05-28 and End of Life is on 2023-07-28 1.25 enters maintenance mode on 2023-08-28 and End of Life is on 2023-10-28 source: https://kubernetes.io/releases/ |
| kubectl | Target: 1.26.0 Acceptable: 1.24.9, 1.25.5 | 2022-12-09 2022-12-08 | 1.24 enters maintenance mode on 2023-05-28 and End of Life is on 2023-07-28 1.25 enters maintenance mode on 2023-08-28 and End of Life is on 2023-10-28 source: https://kubernetes.io/releases/ |
| Helm | Target: 3.10.3 Acceptable:3.9.4 | 2022-12-14 2021-08-24 | |
| Ubuntu | Target: 20.04.4 LTS Target: 22.04.1 LTS | 2022-02-24 2022-08.11 |