Paweł Pawlak Byung-Woo Jun Dong Wang Keguang He

Muddasar Ahmed  Thomas Kulik 

• ONAP Streamlining Documentation Enhancements for Oslo:
  • Defining ONAP Core components and extensions (e.g., lightweight ONAP, optional components)
  • Core component functions
  • Installation guide, including ArgoCD-based deployment options
  • configuration guide
  • User guide 
  • Use cases by operators and vendors
  • reference architecture (component, interface, security, function...) for lightweight ONAP
• Thomas Kulik will take a look at suitable open-source document framework, based on Paweł Pawlak 's input.
  • Thomas Kulik , will update outcome next time. Any update?
  • After the tool review, we can start working on documentation

Byung-Woo Jun 

• Oslo release wiki pages:
  • Release Planning: Oslo
  • Project Status in Oslo Release
  • Oslo Release Key Updates
    • ONAP PTL, please fill up the project key updates promptly
    • As needed, schedule requirement and architecture reivews with ARCCOM (Byung-Woo Jun )
  • Oslo Documentation - Thomas Kulik , updated the wiki page. Thanks!

Sandra Jackson (Deactivated) 

Kevin Sandi 

Tony Hansen 

• Update ONAP main pages for New Delhi release (wiki.onap.org, onap.org) - Sandra Jackson (Deactivated) 
  • Submitted ticket for update - WIP
• Lfx zoom meetings need backup owners for vacation and other occasions - WIP

Pending ticket opened by Marek:

https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-25573

• Kevin Sandi - a workaround solution will be tried;
• Marek / Matthew - automatic building solution is needed; escalate this? Waiting for feedback from Marek 
• Kevin/Matt/Kevin - create a ticket and try a solution (maybe Github action helps? PoC??)
• Some action plans and updates next week
• Kevin and Marek are working on it, testing and deployment. will report its status - 90% is working; WIP; scheduled for next week update

Kevin: Jenkins' sandbox; security patching is working fine; downtime would be 30 mins; will notify the downtime by email to ONAP community - WIP

Thomas Kulik - issues with Portal-NG and other documentation - 

IT-26899 Project is not created in RTD - Kevin; found a root cause; almost done, pushed the fixes;

Marek: Verifying of fixing; will follow up when Thomas Kulik  and Fiete Ostkamp back - next week report; related to RTD pipeline?  need further testing

will Argo CD-based deployment support the resolution? Andreas Geißler , could you please confirm it?

Ticket opened by Tony: IT-26848 - Tony is checking on it, still has issues; Kevin will work on it; Thomas will check; should not block any? will work; report its status next week

Paweł Pawlak Byung-Woo Jun 

• Policy-GUI deprecation is approved by TSC on July 18th 
  • Finished the transition steps, Project State: Unmaintained 
• DMaaP DR deprecation is approved by TSC on July 25th
  • ONAPARC-805 - Global Requirements for DMaaP DR Removal in Oslo IN PROGRESS
  • Proceeding rest of the transition steps, Project State: Unmaintained
  • The entire DMaaP will be deprecated, replaced by Kafka/Strimzi
  • Andreas Geißler , please remove DMaaP from OOM
  • https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27045 was created to remove DMaaP Jenkins job, CLM scan and sonacloud report.
    • Kevin Sandi is the assignee for this ticket.
• https://gerrit.onap.org/r/c/oom/+/138260, https://gerrit.onap.org/r/c/oom/+/138533 Keguang He : Kaixi LIU and Keguang He contacted Andreas Geißler for help.done
• CCSDK A1 controller committer permission for John Keeney; Dan Timoney will contact John Keeney and plan to promote John as a CCSDK committer. After an election for it, the result will be reported to TSC. Dan Timoney , any update?
• No MultiCloud activities for several ONAP releases - PTLs decided to keep the MultiCloud for Oslo.
  • Discussed this with Seshu; only SO K8s plugin is using it but, we can lock the code and deprecated the project. 

• OpenSSF tool http://tlhansen.us/onap/onap.html project and editor lists are outdated. Sandra Jackson (Deactivated) , Tony Hansen  - could you please check this? WIP. Tony Hansen needs the dates of deprecated projects. Sandra Jackson (Deactivated) will provide a wiki page for all the deprecated projects.

  • CLI
  • MSB
  • Champ
  • DMaaP Buscontroller 
  • ESR
  • Holmes
  • Modeling
  • OOF
  • VNF SDK
  • DMaaP DR and all the DMaaP components 

Byung-Woo Jun 

• The Architecture diagram for Oslo, Oslo-R15 Architecture Diagram
• Oslo Architecture main wiki pages, Oslo-R15 Architecture/ArchCom Wiki Page ; see its sub directories for project architecture pages
  • Updated Oslo project component architecture descriptions
• Wait for Oslo requirement and architecture review requests (e.g., UUI GenAI requirements from Dong Wang and Keguang He ). Most likely by end of August or in September.

CISA report on memory safe code: 

• joint-guidance-exploring-memory-safety-in-critical-open-source-projects-508c.pdf, 
• The-Case-for-Memory-Safe-Roadmaps-508c.pdf
• Maggie (NSA; SECCOM) forwarded the NIST special publication on Service Mesh Proxy Models for Cloud-Native Applications. It is pretty good documentation on Service Mesh, Threat analysis and recommendations, https://csrc.nist.gov/pubs/sp/800/233/ipd , https://doi.org/10.6028/NIST.SP.800-233.ipd

• 2 actions:

  1. OpenSSF- add/update their guidelines; Tony Hansen , if you have any update, please let us know. Thanks. 
  2. Locally for ONAP: impact assessment and reviewing if there are opportunities to remove those languages.

• Added memory safe code guidance to the architecture security review template, ONAP Component Architecture Review Template