Page Comparison

Idea of submitting presentation proposal for DTF virtual event on CPS road to gold with Tony’s contribution (few additional slides on why CPS could not get to gold and what are the missing pieces in the infrastructure).

Main blocker: lack of second verification - 2FA is missing at the LF IT infra.

First priority to get it supported for committers (MFA at the gerrit level), other group with lower priority are code submitters (MFA at the git level).

2FA is missing at the LF IT infra – Amy to share with TAC.

To be checked if gerrit supports MFA.

Tony could present this issue to TSC (next week?)

Pawel to share with Lee Anjella the proposal for a joint presentation. Tony prepared his part of the deck for a common presentation.

Tony to send a copy to broader team and check with Lee Angella.

Muddasar

was presenting

Accelerating 5G Innovation at the ONE conference in Vancouver

. Recording shall be available in few weeks. Muddasar provided a quick summary.

Maggie will be speaking to 5G superblueprint on network slicing and network configuration on Wednesday (11.00 AM EST). 

LFX Security Dashboard

https://security.lfx.linuxfoundation.org/ 

Amy had a meeting with Jess. 

-LFX is a security framework - open for different pipelines, no dictated tools, and absolutely no integration with LF purchased/licensed products: Nexus-iq or Sonarcloud.

-ongoing VEX and SBOM under exchanges

Marek was able to initiate latest run of scans.

Results are progressing, cassandra and zk-tunnel-svc to be further elaborated.

Marek does not know which project is using zk-tunnel-svc - it is not in Jenkins

ONAP-discuss question was raised but no feedback so far.

PTL meeting (May 8th)

Liam confirmed interest in questionnaire review

Discussion on Java 17 recommendation impact and dependency with other upgrades (Spring 6 and Springboot 3). Database, Java, Python, Docker, Kubernetes, and Image Versions15th)

PTL Agenda Topic:  Confluence and JIRA alternatives – no issue anymore

M4 status update RC for London June 1st.

Montreal M1 planning (June 22nd)

TSC meeting (May 4th)

Final list of unmaintained by Amy presented to TSC.

If there is no PTL, tickets shall be assigned to Pawel as TSC Chair who could reassigned further11th)

Voting on modified ONAP mission statement and chapter modifications

Preparation of the deck for Governance Board (presentation today!)

2FA issue raised – follow-up with Andreas and LF- IT today at 5 PM CEST.

Existing Global requirements

-Epic REQ-437: COMPLETION OF PYTHON LANGUAGE UPDATE (v2.7 → v3.8)

• Montreal Task: TBC
• OOM-2900 - Update or Remove Python 2

-Epic REQ-438: COMPLETION OF JAVA LANGUAGE UPDATE (v8 → v11)

• Montreal : TBC
• OOM-2554 - Common pods have java 8

-Epic REQ-439: CONTINUATION OF PACKAGES UPGRADES IN DIRECT DEPENDENCIES

• Montreal Task: TBC

-Epic REQ-443: CONTINUATION OF CII BADGING SCORE IMPROVEMENTS FOR SILVER LEVEL

• Montreal Task: TBC

-Logging for Java

• Montreal Task: TBC

• New Best Practice requirements

Bob to share Jira as a reference.

JIRA ticket for the security logging for Java containers.

https://jira.onap.org/browse/REQ-1072

SECCOM MEETING CALL WILL BE HELD ON 23rd May 2023. 

SBOM Types & Minimum Requirements for VEX Documents - we move it to the next week, Muddasar will prepare some info on SPDX 3.0 and different types of SBOMs.