Inclusion of SBOM in Release process/Software Bill of Materials

Next steps:  Muddasar, Sean, and Bob to follow up with Krzysztof Opasiak to collaborate on SBOM.

Krzysztof Opasiak believes that this effort is complementary to existing effort

General consensus that there is no need to document as a best practice.  Instead, present to TSC once plans are determined.

Istanbul Release

• Schedule
• Istanbul Milestone Status
  • VNFSDK / Modeling branch
• xtesting results (master)
  • Results for Istanbul branch? 
  • 72h Stability Test Run Results?
  • Michał Jagiełło reports regression in onboarding testing.
    • Results are worse than Honolulu.  
    • Jira:  

      Jira Legacy
      server System Jira serverId 4733707d-2057-3a0f-ae5e-4fd8aff50176 key SDC-3773

• Istanbul Release Requirements
• Istanbul Integration Blocking points
• Jira - Remaining action items for PTLs

• Missing Data from Subcommittees (Architecture, Modeling) and Requirement Owners:
  • Istanbul Release Key Updates (used by our Marketing Team to promote our release)
• Missing Data from PTLs: 
  • Istanbul Release Platform Maturity (important to highlight our production robustness improvements)

• SECCOM Recommendations
  • Artifact broker (Multicloud) - still using Java 8.  
    • Resolved according to email exchange with Lukasz Rajewski on Oct 26.  Confirmed?
    • Need confirmation from weekly security test.  Last results here.
    • Should have confirmation by Nov 15 PTL meeting
• IP Legal Recommendations
  • No comments received

•  TSC members to review the latest report and respond with comments by Monday.
•  Kenny Paul to email TSC members to remind them to review the report and provide responses by Monday

• Doc Recommendations - Final Release Note
  • https://gerrit.onap.org/r/q/owner:cedric.ollivier%2540orange.com+status:open
  • Eric Debeau  to ask Morgan Richomme to use super-committer rights to resolve remaining merge requests 
  • Done
• OOM merge status:

  • Waiting for gate result on Istanbul branch:

    • [CCSDK] Workaround for naming service host name verification issue | https://gerrit.onap.org/r/c/oom/+/125581
    • [MULTICLOUD] Release to fix cve issues | https://gerrit.onap.org/r/c/oom/+/125496
    • [MULTICLOUD] Release to fix java cve issues | https://gerrit.onap.org/r/c/oom/+/125497
    • [MULTICLOUD] Release k8splugin after integration tests | https://gerrit.onap.org/r/c/oom/+/125499
    • [SDC] Update SDC to 1.9.4 | https://gerrit.onap.org/r/c/oom/+/125586
    • [SO] Fix so-openstack-adapter support for Keystone V3 api | https://gerrit.onap.org/r/c/oom/+/125493
    • [SO] Update the pods for cnf-adapter for the latest issues | https://gerrit.onap.org/r/c/oom/+/125580
    • [SO] Bump SO nssmf adapter version | https://gerrit.onap.org/r/c/oom/+/125591
    • [POLICY] Update core images/config for RC istanbul | https://gerrit.onap.org/r/c/oom/+/125498
    • [POLICY] Add helm chart for policy participant | https://gerrit.onap.org/r/c/oom/+/125583
    • [POLICY] Add helm chart for http participant | https://gerrit.onap.org/r/c/oom/+/125584
    • All merged ^^^^^

  • Waiting for gate result on Master branch then cherry pick:

    • [SDNC] Version bump for final Istanbul image | https://gerrit.onap.org/r/c/oom/+/125573
    • Merged

  • Major issue with the patch:

    • [UUI] NLP for IBN helm chart | https://gerrit.onap.org/r/c/oom/+/125362
    • Waiting for gate results, then will cherry pick

Remaining OOM items:

need to be validated on master before getting merged:

* [ETCD] Give full FQDN name for etcd | https://gerrit.onap.org/r/c/oom/+/125471

discussion with patch owner to see if it needs to be cherry picked:

* [COMMON] Changed mongo storage location to enable persistance | https://gerrit.onap.org/r/c/oom/+/125076
* [DCAEGEN2] Added imagePullSecret to cleanup job | https://gerrit.onap.org/r/c/oom/+/125121

• TSC Call will be canceled on 11 Nov 2021 (EU holiday) & 25 Nov 2021 (US holiday) 
  
  
• ONAP Webinars (Nov 10th-Orange; Nov 16th-DT)
• LFN Developer and Testing Forum, Jan. 10-13, 2022 (4h topics + 30 mins break)/day , Virtual Event PLEASE NOTE CORRECTED DATES!
  • Registration: https://community.lfnetworking.org/events/details/linux-foundation-lfn-developer-testing-forums-presents-lfn-developer-testing-forum-january-2022/
    
  • Topics Page - Call for proposals - Target: December 3rd, 2021
  • Call for ONAP Community Program Committee Leads: Ranny Haiby , Timo Perala , anybody else - Thank you  
• ONE Summit Europe, March 8-9, Antwerp
  • Proposal: 2 Day Developer Event March 10-11
  • Hotel Radisson (same space as last time)
• LFN Developer & Testing Forum, June TBD
  • Physical Event
  • Europe