Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

RefBlocking?StatusComponentDescription/Notes
46
OpenDMaaP

M4 Checklist

This is a reminder that we need to review/discuss about the M4 checklist here

04/17:

  • Mandar has updated the M4 freeze doc with non-root and CSIT showing complete.
  • Need a plan to complete swagger docs before RC2.
    Jira Legacy
    serverSystem Jira
    columnskey,summary,type,created,updated,due,assignee,reporter,priority,status,resolution
    serverId4733707d-2057-3a0f-ae5e-4fd8aff50176
    keyDMAAP-922
  • What other docs are a requirement for release (like readthedocs etc)?
26
OpenDMaaP

Component Creation - Jira

01/22: Component creation in Jira for DMaaP project:

I do not posses "Project" admin rights in JIRA, I only posses DMaaP board rights

04/17: Backlog complete with prefixes per component

  • [BC]
  • [MR]
  • [DR]
  • [DMAAP] - Encapsulates all components as effected

Only outstanding thing is

  • sub-tasks
  • We need to continue to implement the prefix going forward
27
OpenAll

Swagger implementation?

01/28: Swagger is a requirement for Dublin Release (S3P requirements) ?

What are the expectations here? Whom can we discuss with? - Sofia Wallin,

01/30: Rich Bennett Mail on this - still cryptic - is it Mandatory - requirement in Platform Maturity

02/06: Dom sent mail looking for clarification - Erik has yet to respond?

02/20: Still no word

02/22: Erik to document what is required

02/27: Still nothing from Erik documented

03/01: Tom to chase Erik up

03/08: Erik to documented beginning of next (hopefully)

03/13: Attend documentation this week

03/15: read the docs vs swagger files and what are they exactly looking for

03/29: Erik has code, just needs to merge (tom to chase up)

04/12: https://logs.onap.org/production/vex-yul-ecomp-jenkins-1/doc-master-verify-rtd/4424/html/guides/onap-developer/how-to-use-docs/api-swagger-guide.html

need to create annotations for API's

04/15: JSON for DR is complete, need to figure out where it goes, potentially just a link to download

04/17:

Jira Legacy
serverSystem Jira
columnskey,summary,type,created,updated,due,assignee,reporter,priority,status,resolution
serverId4733707d-2057-3a0f-ae5e-4fd8aff50176
keyDMAAP-922

30
OpenAll

Ubuntu vs Alpine Image footprint reduction

02/01: Adolfo Perez-Duran

The CIA team is preparing to submit contributions to DMAAP to migrate the base images to ONAP Normative Container Base Images.

This migration is expected to reduce the image footprint and to enable multi-cpu architecture support for Dublin

We expect the work to be minimally disruptive and to coordinate changes with tour team.

ubuntu v alpine the talk continues

02/13: Lots of chat on discuss chat - need it to settle down before we implement

02/20: Frank Sandoval [mailto:frank.sandoval@oamtechnologies.com] to provide an update !

02/20: Dom, Conor & Sunil to assist here

Mandar to raise at TSC to see if the right course of action

02/22: Change image &

 Impacts: Hold off - will these reduce the container footprint? -Dosen't look likely, it is more to be uniform across ONAP

1) suggested we change our Maven approach to use "fabric" plugin instead of spotify (support for this has discontinued) plugin

2) use docker file instead of POM is recommended from spotify (currently we don't use except CSIT environment)

02/27: lets pose question to frank

02/27: Alpine is the decision for Dublin

03/01: Questions mailed to Frank - awaiting response

see confluence spac

testing changes - and need to send gerrit review to Dom

03/08: Frank made changes in relation to Alpine images only

(unit test seems ok, built in jenkins - images not pushed to docker repo - investigation ongoing?

Dom to check CSIT tests,

Gerry to see if DR have similar issue)

03/13: Need to chase up with Frank in relation to jenkins build not pushing up images

new image name is bc - oom changes pending

03/15: Frank merged 4 commits today, Dom & Sunil to be put on review

03/20: Worse - images not getting pushed, old images are no longer there

CI-MGMT - where is the review? Dom to reach out

03/22: Switch to Alpine broke 2 things in BC

  • Script to install cert auth to trust store
  • Curl commands missing
    Jira number is DMAAP-1120

DR our daily builds are failing - Frank investigating


New CI - MGMT push has impacts on Casablanca jobs ( not using Alpine ) - is a bug required here? Potentially only effects DR


03/29: MR having issues, CIA team looking into

04/03: Frank from CIA team still working on this

04/08 Just waiting on MR (still working on, CIA story (there responsible)

4/19:  completed update and now testing, but not committed yet

32
OpenAll

Ability to run containers as non-root user

No more running as root on containers

Proposed Updates to Release Templates (Dublin) - Security Questions

Is it required for M2 ?

02/11 Doesn't need to be implemented by M2, nice to have for M4. (Try to plan for M4).

Here's the link to the Jira where applications are being asked to update their impact and concerns regarding this item.

Jira Legacy
serverSystem Jira
serverId4733707d-2057-3a0f-ae5e-4fd8aff50176
keySECCOM-111

02/13: Dublin timeframe - Not mandatory, if possible complete, if not have a backlog item for El Alto

Mandar to update ticket

02/15: ticket updated to work on this in El Alto - Mandar to ask reporter how do we interpret this ticket?

  created ticket in backlog

02/27: Is this related to Alpine solution - not clear

New requirement : Wanted position to be part of Dublin

03/04: Action to start investigating - how will this be verified - Mandar

03/08: krzysztof to write script to enable verifcation -mandar to chase up

"Actually the script can be merged into oneliner:


kubectl --namespace=onap get pods | tail -n +2 | awk '{print $1}' |\ xargs -d \\n -I % kubectl --namespace=onap exec '%' -- /bin/sh -c \ 'ps aux | sed "s/^/%\t/"' | tee ps-all.txt


What it does it just exec into every pod and list processes that runs as a root. In general, if you run container using docker you can use user namespaces and match a root user inside the container to any uid on the host that you want but according kubernetes doc user namespace are not supported which effectively means that if sth runs as a root inside the container it is also a root on a host (just certain capabilities may be

dropped)


Best regards,

--

Krzysztof Opasiak"

03/13: Mail forward onto team

03/20: what is required, when is it achievable

03/29: Required by M4 (think its delayed to 11/4?)

04/01: work in progress for DR

Code is Merged for DR - https://gerrit.onap.org/r/#/c/83879/

MR - code is ready (images need to be released)

04/12 - Dom working on BC to have this functionality

04/17: Done for BC. Need to check if there are implications in oom deployment

35
OpenAll

Logging

02/15: Mail sent from Emmett - any feedback in relation to this?

Is it Mandatory or not?

Manageability as part of platform maturity requirements

Target level is 2 for Dublin - mandatory

02/27: Create EPIC -

03/11: Epic created in Jira :

Jira Legacy
serverSystem Jira
serverId4733707d-2057-3a0f-ae5e-4fd8aff50176
keyDMAAP-1077

03/15: appears to be a stretch goal for existing components

04/08 Code up for review emmet to provide link

04/08: Code review for updating DR to log under a single logging system: https://gerrit.onap.org/r/#/c/78851/

04/12: DR code should be merged in early next week

04/17: Code in oom with +2 yet to be merged.

44
OpenAll

Communication to register DR Node & BC

DR node reg with BC client? - Hook is in place, values need to pass still to be determined

post install hooks, flag can be added to keep alive (if post install jobs are completed they are deleted, flag is to allow them to not be deleted)

48
OpenDR

DR Staging Healthcheck issues

04/10: OOM Staging Healthcheck which was failing should be ok, just waiting for that to be merged

04/15: OOM not merging stuff - Brian Freeman has listed containers with issues (staging only?)

https://gerrit.onap.org/r/#/c/85091/
49
OpenAll

Pairwise Testing finished by RC0  

4/19: DMaaP pairwise will be with AAF.  Certify that this was done without issues.

50
OpenAll

Security Vulnerabilities resolved immediately.

4/19: Mandar to review current status.

4/22: Mandar sent email listing vulnerabilities.  PLEASE REVIEW ASAP.

51
OpenAllNOTICE: RC0 moved to 5/2.

...