...
| Jira No | Summary | Description | Status | Solution | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| NSA contribution proposal for ONAP security | Slides presented by Maggie:
Proposal on using ONAP to enhance the security of 5G Architecture to use Data Analystics. DAta Analytics system in ONAP to be used to detect anomalies. | ongoing | Both Vijay and Tony to provide support for NSA team, establishing contact with relevant ONAP community memebersmembers. | ||||||||||||||||||
CNF Task Force enterprise business workgroup | Next meeting on April 14th at 2:30 UTC | ongoing | |||||||||||||||||||
| Progress tracking for Python and Java upgrades | In begining of March still Python 2.7 (40) and Java 8 (38) the containers -> last week: (23/67) Java (28/105), so considerable progress observed! Some items might be due to LF pipeline. | ongoing | We will track upgrades with Jira tickets in Instanbul release. | ||||||||||||||||||
| Slide deck for new Global Requirements | No slot again at the last TSC, although booked. | ongoing | To be presented at the incoming TSC meeting - slot in the next agenda to be booked again and e-mail to be sent to TSC districution list. | ||||||||||||||||||
| Security and critical vulns per project | Orange developer strated with DMaap: 421 issues down to 53! | ongoing | Next step for PTL to merge the code. | ||||||||||||||||||
| SonarCube and integration with Gerrit | Slides presented by Fabian:
Sonar only checks the Master. We need to analyse the code beefore merge. | ongoing | Meeting to be organized by Pawel with Jess and Orange team. | ||||||||||||||||||
| Training for SonarCloud | Meeting last Thursday done. Questions collection to be addressed by training:
| ongoing | Last PTL meeting | Global Requirements on the project level: 2 Factor Authentication, Site Hardening, code review standard, copyright profile at every source file. Some CII Badging questions have answers ONAP wide. | ongoing | Infrastructure changes at the LF level will need some more time | LF Internships | Deadline soon... Bus factor requirment could be a good use case. | ongoing | Logging management follow-up | In Honolulu it was PoC and not best practice. Feedback from David: https://wiki.onap.org/x/gymLBQ, action: first step is to review and socialize with the PTLs, good to request time in the weekly PTL meeting for this. Next, need to propose it as a best practice for the Istanbul release, which will require approval by the TSC before M1. | ongoing | To book a slot for next PTLs meeting. | CII Badging – automation | Support for Tony, volunteers are welcome | NEXUS-IQ scans analysis | We wait with the SCA analysis untill code is stable, post RC1? | on standby Please refer to slides 4 and 5 of the slide deck below for a complete list of the questions. | ongoing | Questions to be shared by Jess with SonarCloud team. | |
| Last PTL meeting |
| ongoing | To check with Chaker where logging guidelies doc is located on the Wiki - already found: ONAP Application Logging Guidelines v1.1. | ||||||||||||||||||
| OUR NEXT SECCOM MEETING CALL WILL BE HELD ON 20th OF APRIL'21. |
...
| View file | ||||
|---|---|---|---|---|
|
SECCOM presentation:
| View file | ||||
|---|---|---|---|---|
|