We start our meetings by mentioning the project's Antitrust Policy, which you can find linked from the LF and project websites. The policy is important where multiple companies, including potential industry competitors, are participating in meetings. Please review and if you have any questions, please contact your company legal counsel. Members of the LF may contact Andrew Updegrove at the firm Gesmer Updegrove LLP, which provides legal counsel to the LF.
Agenda
START RECORDING
...
Duration
...
Agenda Item
...
Requested by
...
Notes / Links
...
30 mins
...
Cross-project discussion
...
This meeting is reduced to 30 minutes
Rotating host
volunteer for this week: Byung-Woo Jun / Paweł Pawlak
...
...
TSC election
Email
Jira ticket created (for election and for a list of active ONAP members)
the election result announcement will be this Thursday at TSC
TSC Election results:
Byung-Woo Jun TSC Chair, Ericsson
The TSC nominated and elected Byung-Woo Jun as TSC Chair. The Chat vote is documented here: 12_05_2024 ONAP TSC Meeting Chat File.txt
TSC Members:
Byung-Woo Jun Ericsson
Dan Timoney AT&T
zhuguanyu Huawei
Dong Wang China Telecom
Keguang He China Mobile
N.K. Shankaranarayanan Individual
Paweł Pawlak CloudLinux/TuxCare
TSC Vice chair(s) election will be started this week
...
...
https://gerrit.onap.org/r/c/dcaegen2/collectors/ves/+/138052;
...
Release dcaegen2-collectors-ves container
...
Andreas Geißler , Jack Lucas, Tony Hansen and Byung-Woo Jun offline
...
IT-27455, Kevin Sandi is working on it; Andreas Geißler will check it, too
...
Security
...
...
PTLs reported vulnerability reports are not accurate
NexusIQ reports and scripts have discrepancies - Fiete Ostkamp
May be a process issue - PTLs update based on the reports at the beginning of the release
Action items:
are PTLs willing to fix new vulnerabilities found up to code freeze? PTLs can fix new findings in NexusIQ
At the PTL meeting this Monday, Amy and PTLs discussed how to process vulnerability reports
The current assumption is that PTLs access the Nexus for the vulnerability reports and decide when to apply the fixes
Amy Zwarico provided the initial Nexus access demo on December 2nd
CLM link, https://jenkins.onap.org/view/CLM/
Amy Zwarico will provide another demo how to access Nexus to PTLs next Monday (12/09)
PTLs can add more people for the Nexus access (but maybe there are some license limitations; check with LF IT);
Amy Zwarico , give a Nexus access demo, can we give PTLs more current views?
Toine Siebelink , CPS has a fortnightly community meeting during which we already check some quality report. I think we will start including this Nexus IQ report in that cycle...
Will discuss this again at the SECCOM (initial discussion at SECCOM; and early next year with PTLs)
...
Oslo Release update
...
New RC date is December 12th.
Toine Siebelink ,CPS is good to go; Doc update can be done between RC and Signoff
Fiete Ostkamp , Portal-NG is good to go
Fiete Ostkamp , SDC upgrade is ongoing; waiting for input; update
SDC (commons-compress (“threat-level” 6); spring-web (threat-level 10)
Andreas Geißler , DT has their own resources for the SDC Ruby update. They are working on it. Thanks !!!
Fiete Ostkamp , SDC ruby issue; DT is working on it; get the pipeline ongoing (fixed); ruby upgrade is ongoing
Jira Legacy server System Jira serverId 4733707d-2057-3a0f-ae5e-4fd8aff50176 key SDC-4691 What is the current status?
Chef dependency in SDC related to Ruby conflict (2.0 is pretty old)
Ramesh Murugan Iyer , Policy is good to go
Seshu Kumar Mudiganti , Sanket is checking in the RFC8040 SO code. Please let me know its plan.
Andreas Geißler , OOM? besides documents, it is ok
Dan Timoney , CCSDK/SDNC?
documentation and release notes should have their target dates
Oslo Release Key Updates, thanks PTLs
PTLs, update with Target Date!
RAN Simulator plans to be added into Oslo. Vishal Varvate will add RAN Simulator key updates - If no response from Vishal, the feature will be postponed to Paris
The Architecture diagram for Oslo, Oslo-R15 Architecture Diagram; new diagram
Oslo Architecture main wiki pages, Oslo-R15 Architecture/ArchCom Wiki Page ; see its sub directories for project architecture pages
...
RelEng/Infrastructure
...
...
Jessica Gonzalez , cleaning up ONAP confluence pages, attachments;
Action Point: the biggest attachments are TSC, SECCOM, PTLs...
Byung-Woo Jun replaced SECCOM mp4 files with the PCC links; removed the SECCOM mp4 file from the confluence.
PTLs, please check the meeting recordings and remove them if there are PCC meeting recordings
Jessica Gonzalez, prepared this list: ONAP wiki attachments Oct 2024-bwj.xlsx, check this out. use the PCC recording links and remove the mp4 files.
Jessica Gonzalez , could you please regenerate the list?
...
For uploading videos to Youtube, please contact Casey Cain.
...
FYI, according to Andreas Geißler, DT is facing again issues in the connection to nexus3 from Deutsche Telekom network. The DT team is working on it.; Andreas Geißler , still have issues
...
We start our meetings by mentioning the project's Antitrust Policy, which you can find linked from the LF and project websites. The policy is important where multiple companies, including potential industry competitors, are participating in meetings. Please review and if you have any questions, please contact your company legal counsel. Members of the LF may contact Andrew Updegrove at the firm Gesmer Updegrove LLP, which provides legal counsel to the LF.
Agenda
START RECORDING
Duration | Agenda Item | Requested by | Notes / Links | ||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
30 mins | Cross-project discussion |
| |||||||||||||||||||||||
| |||||||||||||||||||||||||
| |||||||||||||||||||||||||
Security | Note: We will handle this again early next year with SECCOM; January 14, 2025
PTLs reported vulnerability reports are not accurate
| ||||||||||||||||||||||||
Oslo Release update |
| ||||||||||||||||||||||||
RelEng/Infrastructure |
| ||||||||||||||||||||||||
RelEng/Infrastructure |
| RelEng/Infrastructure |
Following the discussion at the PTLs meeting. OPA PDP subproject under Policy project. GoLang we need support from LT IT. Ticket IT-27561 Request Guidance on adding golang based project to Nexus IQ
Go Lang used in the project is 1.23, which is the latest version. https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27561 for vulnerability scan for Policy-OPA-PDPLink to restricted Wiki: Security Vulnerabilities - Confluence. Deena will ask in a dedicated ticket access to Nexus-IQ + access to restricted Wiki. | ||||||||||||||||||||||
Paris Release update |
| ||||||||||||||||||||||||
OOM |
| ||||||||||||||||||||||||
RAN-SIM (Target Oslo) |
| ||||||||||||||||||||||||
Update Jiras Oslo Package | Byung-Woo Jun, for those projects without PTLs, we fileed vulnerability exception. Those package update will be revisited in Paris. TSC approved it on December 12th. Toine Siebelink updated the following: (Thanks!!!).
Epic: https://jira.onap.org/browse/REQ-439
Fiete Ostkamp , is there any automated tool for dependency checking from Gerrit? Matthew will provide its update. Matt/kevin will check; may use portal-ng as a test project/candidate; Fieta will a LF IT ticket toward Matt/Kevin. ; Matt put a couple of patches, still working on it. Matt gave us update… The Github2Gerrit is under IT-27340; about to merge; Matt, let us know; maybe this week;
Tony opened a new ticket; Kevin Sandi is working on it, IT-27455; Toine Siebelink
https://sonarcloud.io/summary/overall?id=onap_cps-ncmp-dmi-plugin | ||||||||||||||||||||||||
LF IT Support |
| ||||||||||||||||||||||||
RelEng/Infrastructure | Note: Postponed to Paris
New bypassable workflow is in place and working. There are a couple of improvements I’m working on to avoid deprecation notices and use the correct voting github action. It is working, but Toine Siebelink , will create a new ticket for a new policy on checking the RTD links toward Kevin Sandi ; Thomas Kulik , reported there are many broken ONAP wikis; treat every warning as a warning?? Toine Siebelink , created a new ticket, https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27475 .
| ||||||||||||||||||||||||
Testing Environment | |||||||||||||||||||||||||
Testing Improvement | |||||||||||||||||||||||||
CSIT Review | |||||||||||||||||||||||||
ToolChain Improvement | |||||||||||||||||||||||||
Documentation | |||||||||||||||||||||||||
Other Improvement suggestion | Note: will be done before Signoff; Getting there In Oslo, Plan to migrate ONAP components to use RFC8040. and will Keep the New Delhi CCSDK/SDNC as LTS (long term support) for Biermann APIs. In Oslo, only RFC8040 will be supported. Dan Timoney, reviewed the above CCSDK/SDNC plan with ARCCOM and ARCCOM approved it. Andreas Geißler , working with Sanket and Dan. We need a new update by this Thursday. Byung-Woo Jun ,Sanket is checking in the SO code change for RFC8040. The SO team will decide if they finish this in the Oslo release.; | ||||||||||||||||||||||||
Sharing Best Practices | |||||||||||||||||||||||||
IF TIME ALLOWS .... | |||||||||||||||||||||||||
15 mins | Release status | ||||||||||||||||||||||||
5 mins | Upcoming Events |
| |||||||||||||||||||||||
10 mins | Remaining Action Items |
...