Page Comparison

-REQ-376  - Flow matrix to be updated by remaining PTL – Fabian

• only run time focus
• Action to join SO weekly meeting (Wednesday 1:30 UTC) https://zoom.us/j/794508490

-REQ-350 CII Badging - Tony

• Tony updated description part
• List of the projects who have not responded yet 

ongoing

During next PTL meeting identify next projects.

Fabian will be off for the next 2 weeks - proxy to be identified.

Most of the meeting was focussed on tracking M2/M3 status.

Amy has an action item on how many projects are still dependent on Java 8.

Removal of GPLv3 license - to be removed from all containers that contain ONAP code.

SECCOM elections

Waiting for Kenny to start election process 

Reminder from the previous discussion:

After Service Mesh PoC - new requirements might arrive.

Harbor requirement. In Harbor:

• you can sign the image and you can share the key with an application that has an account to pull or to push the image
• possibility to scan the image all the time and send warning

Harbor deployed in run time while Whitesource and Nexus-IQ during the development. 

Logs management (SECCOM discussion on 17th of March)

SIEM integration: 

• integration like for the other applications with SIEM, have the same protocol used
• logs from ONAP to SIEM, falco tool to be considered (IDS for Kubernetes)
• alarms when security issue 

CII Badging - session planned on the PTLs call.

New items:

Action: to work on non functional use case requirement for logs collection - important for project maturity.

Data collection for projects currently using Java 8 - e-mail was sent by Amy to Morgan if possible to obtain results. 

Dependency on Java to be tracked. 

Topics proposed:

• Certificates management update – Krzysztof
• Security Documentation – Harald