search

eclipse-tractusx / sig-release

https://eclipse-tractusx.github.io/sig-release
Apache License 2.0
8 stars 8 forks source link

R24.05 - [Country Risk] Release Checks #637

Closed leonschand closed 3 months ago

leonschand commented 6 months ago

[!IMPORTANT]
Follow the guidance on how to use the templates.

Release Info

Please provide information on what you want to be included in the Eclipse Tractus-X release. If you are not owner of this issue, please provide the information as comment to the issue. Make sure to assign this issue to expert(s) for their approval, as soon as you have finished preparation. Multiple assignees allowed; they will un-assign themselves once review completed.

Version to be included in Eclipse Tractus-X release: 2.0.0

Country Risk:

Compliance Verifications

This issue tracks all checks, that need to be performed for a product release in Eclipse Tractus-X.

General Checks

[!NOTE] Note: most criteria for documentation and security are now covered in TRGs

Security Checks

Test Results

Helpful Links

ThomasObermeyer commented 5 months ago

Reviewed the https://confluence.catena-x.net/pages/viewpage.action?spaceKey=CORE&title=QG24.05+-+Country+Risk+Interoperability+Check

fabiodmota commented 5 months ago

@guenterban Regarding the Country Risk Threat Modelling Analysis R.24.05, there are no context changes in relation to the last release 24.03. In this last one, this document was created with my knowledge and the team's https://github.com/eclipse-tractusx/vas-country-risk/blob/main/docs/threat_model/security_assessment.md. Since then, the project remains the same. Should you have any questions, do not hesitate to ask.

guenterban commented 5 months ago

Country Risk Threat Modelling Analysis R.24.05 approved

FaGru3n commented 4 months ago

Hi all, just want to inform you that i raised the TRG Check QG-Issue under https://github.com/eclipse-tractusx/vas-country-risk/issues/176.

So to be alligned could you please tell me and committer from outside the project itself, who can help us with the QG-Check itself?

--> Please assign a committer 😉

Thanks in advance.

evegufy commented 4 months ago

Hi all, just want to inform you that i raised the TRG Check QG-Issue under eclipse-tractusx/vas-country-risk#176.

So to be alligned could you please tell me and committer from outside the project itself, who can help us with the QG-Check itself?

--> Please assign a committer 😉

Thanks in advance.

@FaGru3n I'll conduct the review

FaGru3n commented 4 months ago

Version to be included in Eclipse Tractus-X release: version placeholder

Hi all, which version should be checked ?

fabiodmota commented 4 months ago

Version to be included in Eclipse Tractus-X release: version placeholder

Hi all, which version should be checked ?

apiVersion: v2 name: country-risk type: application version: 4.0.0 appVersion: "2.0.0-alpha"

the version is this at the moment , if issues or fixes are needed we will increment according

cbrugg commented 4 months ago

INT / E2E Tests performed successfully. Data Sov Tests outstanding. Thank You!

alexKeppler commented 4 months ago

User Journey approved by BO. Thanks for your efforts!

evegufy commented 4 months ago

QGChecks done, a couple of issues were created but nothing major blocking the release.

RolaH1t commented 4 months ago

QG review 14-May TRG optimizations ongoing Only Data Sov test executions outstandig no follow-up call required

evegufy commented 4 months ago

QG issue closed, all done https://github.com/eclipse-tractusx/vas-country-risk/issues/176

FaGru3n commented 4 months ago

checked the TRG checkbox

KMA-2019 commented 4 months ago

@vialkoje , @cbrugg , @leonschand as aligned referencing here notes / feedback from E2E Tests for Data Sovereignty. No blocking issues for current Rel 24.05 but main items to be considered for next release(s):

fabiodmota commented 4 months ago

@vialkoje , @cbrugg , @leonschand as aligned referencing here notes / feedback from E2E Tests for Data Sovereignty. No blocking issues for current Rel 24.05 but main items to be considered for next release(s):

  • Note: additional tests (from customer perspective) only partially possible
  • currently implemented scenario is consumption of pool data only , needs re-assessment once download/export functionality shall be offered
  • UI shows catalog items available for negotiation: View permissions restricted to CompAdmin Role but only generic description, i.e. missing transparency on underlying (usage) policies prior to triggering negotiation -> todo: enhance Catalog Item View with Usage Policies
  • ContractReference Constraint: technically could be supported but not used (see point that one data exchange partner is always the OpCo for currently implemented scenario)
  • no validation of the Schema "profile": "cx-policy:profile2405"

Thanks for the approval @KMA-2019 , as discussed on call i created already issue for country risk https://github.com/eclipse-tractusx/vas-country-risk/issues/190 that needs to be attended for the next release

cbrugg commented 4 months ago

Data Sov Tests performed. Testmanagement Approval is hereby given. Thank you for your efforts!

RolaH1t commented 4 months ago

Hi @fabiodmota may I ask you to add the version info on the very top of this issue and to also check the boxes for data sov and testing (based on the given comments). I will then fully approve the QG in consequence, Roland

fabiodmota commented 4 months ago

Hi @fabiodmota may I ask you to add the version info on the very top of this issue and to also check the boxes for data sov and testing (based on the given comments). I will then fully approve the QG in consequence, Roland

Hi @RolaH1t , I just updated the correct versions with everything that was done and corrected for this QG, including validated TRGs! Now we are good to finalize.

RolaH1t commented 4 months ago

Congrats: Quality Gate fully approved with all necessary pre-requisites fulfilled! Thanks for all your efforts, Roland