Paweł Pawlak Byung-Woo Jun Dong Wang Keguang He

Muddasar Ahmed  Thomas Kulik 

• ONAP Streamlining Documentation Enhancements for Oslo:
  • Defining ONAP Core components and extensions (e.g., lightweight ONAP, optional components)
  • Core component functions
  • Installation guide, including ArgoCD-based deployment options
  • configuration guide
  • User guide 
  • Use cases by operators and vendors
  • reference architecture (component, interface, security, function...) for lightweight ONAP
• Thomas Kulik will take a look at suitable open-source document framework, based on Paweł Pawlak 's input.
  • Thomas Kulik , will update outcome next time. Any update?
  • After the tool review, we can start working on documentation

Byung-Woo Jun 

Andreas Geißler 

Thomas Kulik 

• Oslo release wiki pages:
  • Release Planning: Oslo
  • Project Status in Oslo Release
  • Oslo Release Key Updates
    • ONAP PTL, please fill up the project key updates promptly - by end of September
    • As needed, schedule requirement and architecture reivews with ARCCOM (Byung-Woo Jun )
  • DT supports Argo CD-based deployment support the resolution? Andreas Geißler , Marek Szwałkiewicz , any update?
  • Oslo Documentation - Thomas Kulik , updated the wiki page. Thanks!
  • ONAP logo change update, Thomas Kulik , https://gerrit.onap.org/r/q/%22new+onap+logo%22+-status:merged DT supports Argo CD-based deployment support the resolution? Andreas Geißler , Marek Szwałkiewicz , any update?

Sandra Jackson (Deactivated) 

Kevin Sandi 

Tony Hansen 

• Update ONAP main pages for New Delhi release (wiki.onap.org, onap.org) - Sandra Jackson (Deactivated) 
  • Submitted ticket for update - WIP
• Lfx zoom meetings need backup owners for vacation and other occasions - WIP

Pending ticket opened by Marek:

https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-25573

• Kevin Sandi - a workaround solution will be tried;
• Marek / Matthew - automatic building solution is needed; escalate this? Waiting for feedback from Marek 
• Kevin/Matt/Kevin - create a ticket and try a solution (maybe Github action helps? PoC??)
• Some action plans and updates next week
• Kevin and Marek are working on it, testing and deployment. will report its status - 90% is working; WIP; scheduled for next week update

Kevin: Jenkins' sandbox; security patching is working fine; downtime would be 30 mins; will notify the downtime by email to ONAP community - WIP

Thomas Kulik - issues with Portal-NG and other documentation - 

IT-26899 Project is not created in RTD - Kevin; found a root cause; almost done, pushed the fixes;

Marek: Verifying of fixing; will follow up when Thomas Kulik  and Fiete Ostkamp back - next week report; related to RTD pipeline?  need further testing

Ticket opened by Tony: IT-26848 - Tony is checking on it, still has issues; Kevin will work on it; Thomas will check; should not block any? will work; report its status next week

Paweł Pawlak Byung-Woo Jun 

• Policy-GUI deprecation is approved by TSC on July 18th 
  • Finished the transition steps, Project State: Unmaintained 
• DMaaP DR deprecation is approved by TSC on July 25th
  • ONAPARC-805 - Global Requirements for DMaaP DR Removal in Oslo IN PROGRESS
  • Proceeding rest of the transition steps, Project State: Unmaintained
  • The entire DMaaP will be deprecated, replaced by Kafka/Strimzi
  • Andreas Geißler , please remove DMaaP from OOM
  • https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27045 was created to remove DMaaP Jenkins job, CLM scan and sonacloud report.
    • Kevin Sandi is the assignee for this ticket.
• https://gerrit.onap.org/r/c/oom/+/138260, https://gerrit.onap.org/r/c/oom/+/138533 Keguang He : Kaixi LIU and Keguang He contacted Andreas Geißler for help.done
• CCSDK A1 controller committer permission for John Keeney; Dan Timoney will contact John Keeney and plan to promote John as a CCSDK committer. After an election for it, the result will be reported to TSC. 
  • Dan Timoney , said he is going to start the process, and John Keeney created a proposal, Committer Promotion Request for CCSDK repo - John Keeney.
  • According to John Keeney (Ericsson EST) , these are the A1PMS activities, https://gerrit.onap.org/r/q/project:ccsdk%252Foran 
• No MultiCloud activities for several ONAP releases - PTLs decided to keep the MultiCloud for Oslo.
  • Discussed this with Seshu; only SO K8s plugin is using it but, we can lock the code and deprecated the project. 

• OpenSSF tool http://tlhansen.us/onap/onap.html project and editor lists are outdated. Sandra Jackson (Deactivated) , Tony Hansen  - could you please check this? WIP. Tony Hansen needs the dates of deprecated projects. Sandra Jackson (Deactivated) will provide a wiki page for all the deprecated projects.

  • CLI
  • MSB
  • Champ
  • DMaaP Buscontroller 
  • ESR
  • Holmes
  • Modeling
  • OOF
  • VNF SDK
  • DMaaP DR and all the DMaaP components 

Byung-Woo Jun 

• The Architecture diagram for Oslo, Oslo-R15 Architecture Diagram
• Oslo Architecture main wiki pages, Oslo-R15 Architecture/ArchCom Wiki Page ; see its sub directories for project architecture pages
  • Updated Oslo project component architecture descriptions
• Wait for Oslo requirement and architecture review requests (e.g., UUI GenAI requirements from Dong Wang and Keguang He ). Most likely by end of August or in September.

CISA report on memory safe code: 

• joint-guidance-exploring-memory-safety-in-critical-open-source-projects-508c.pdf, 
• The-Case-for-Memory-Safe-Roadmaps-508c.pdf
• Maggie (NSA; SECCOM) forwarded the NIST special publication on Service Mesh Proxy Models for Cloud-Native Applications. It is pretty good documentation on Service Mesh, Threat analysis and recommendations, https://csrc.nist.gov/pubs/sp/800/233/ipd , https://doi.org/10.6028/NIST.SP.800-233.ipd

• 2 actions:

  1. OpenSSF- add/update their guidelines; Tony Hansen , if you have any update, please let us know. Thanks. 
  2. Locally for ONAP: impact assessment and reviewing if there are opportunities to remove those languages.

• Added memory safe code guidance to the architecture security review template, ONAP Component Architecture Review Template

• Update for Argo CD-based deployment options
• status of disabling deprecated projects 
• no maintenance of a1policymangement part of ccsdk. will check it with Dan Timoney 
• Andreas Geißler plans to continuously explore the Istio ambient mode 

Sandra Jackson (Deactivated) 

Byung-Woo Jun