Versions Compared

Old Version 5

changes.mady.by.user Paweł Pawlak

Saved on

compared with

New Version Current

changes.mady.by.user Byung-Woo Jun

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Jira No
SummaryDescriptionStatusSolution

Waiver Analysis

Waiver analysis was reviewed.

  • Testing components are never part of the release.
  • Upstream components will not be solved as well
  • For a code produced in ONAP we are in a very good position.
  • Have we moved to shared DBs?
  • To be checked with Buyng on shared DBs.
  • Why ESR is still showing up? It is not part of Jenkins jobs, so some cleaning is needed.

Pawel to check formatting for versions_xfail.txt and Jakarta - checked it is ok.

Specific tickets to be opened for projects.



Next LFN events

ONE Summit NARegistration Open

  • CFP - Deadline: July 8th; 2022
  • Nov. 15 & 16 2022 Seattle, WA, USA
  • In Person

LFN Developer & Testing Forum NARegistration Open

  • Nov. 17 & 18 2022 Seattle, WA, USA
  • In Person
  • Securiung software supply chain by LFN - new topic to be proposed

Proposals to be submitted.





David to be contacted and invited by Maggie to SECCOM meeting.


Update on Jakarta release

TSC approved the sign off of the Jakarta release on June 30th

Security tests results at 60%: https://logs.onap.org/onap-integration/daily/onap-daily-dt-oom-jakarta/2022-06/30_04-01/

https://wikilf-onap.onapatlassian.orgnet/wiki/display/DW/Jakarta%3A++Lessons+Learned




SBOM status updateMuddasar contacted with several PTLs and waiting for their feedback.
We need LF IT support, GB was informed by Amy. We ned to run SBOM in the pipeline. Amy to talk to Kenny, Muddasar and Ranny.

Technical debt

Muddasar reviewed Jira tickets recently. Some PTLs are using TechnicalDebt tagging and some not at all. Grooming the tickets would be helpful.

Updating packages is technical debt for us.




OSA branchWE have not had any vulnerability raised within the process, so nothing to be added in OSA for Jakarta release.
Thomas to be contacted during unmaintained meeting on Monday.

Last SECCOM meeting link2022-06-28 Security Subcommittee Meeting Notes


DevOPS Pipelines IRS presentation

Youtube link disappears ;-(

https://www.cloudbees.com/customers/IRS




SECCOM MEETING CALL WILL BE HELD ON 12th OF July'22. 

Potentially session with David Wheeler on SBOM.

Overview of Tata Communications DTF presentation on their production logging implementation implementation, https://wiki.lfnetworking.org/display/LN/2022-06-DD+-+ONAP%3A+The+Path+to+a+Production-Grade+ONAP - see the "Logs and Metrics: Architecture" and "Monitoring and Troubleshooting" sections






Recording: 

View file
name2022-07-05_SECCOM_week.mp4
height150

...