Andreas Geißler

Keguang He 

Byung-Woo Jun 

N.K. Shankaranarayanan 

Dan Timoney 

Paweł Pawlak 

Guanyu Zhu (zhuguanyu)

Dong Wang

• LF IT migrating CI pipeline to GitHub actions - may take to the end of fall or later, once ONAP is completed for GitHub Actions , we will do security review. Last update from Matt is that LF IT is continuously shipping one project at a time. 

  4/2: in progress

  At the TSC Jess mentioned Q4'24? or rather beginning of 2025.

• What is the current status of this?
• Kevin Sandi, the LF Team, Matt and Kevin, plans to work on this; Please update the status
• Kevin Sandi, and team will start soon (following week?)

• Shankar presented this last week. This is the latest slide deck, ONAP, O-RAN SC, Nephio collaboration on O-RAN SMO, ONAP-OSC-SMO-slide_Jan2025_v1.pptx

From the Paris release, TSC needs to discuss ONAP focus areas and strategies / roadmaps

• •  TSC members to add thoughts

Let's discuss more this year for Paris +

Any questions or feedback? 

Byung-Woo Jun presented the brainstorm at the TSC meeting this week.

Brainstorm:

• Ensure ONAP core components are focused and operate independently, from build to runtime
  • DT finishes Argo-CD based component independent deployment
    • Argo-CD is a DT choice, but ONAP can allow other CDs, e.g., Flux (need contributors)
    • DT plans to productize some of the selected ONAP core components early next year in their TNAP production environment
  • Declarative and Intent-based component operations by the Repository-based Network Automation : see the ideas from ONAP Architecture Evolution - 2025.pdf
• Make ONAP core components more autonomous and ready for use by both ONAP, LF and other external users
  • During New Delhi and Oslo releases, CPS and Policy achieved the OpenSSF Gold Badging status. Kudos to the team!
  • Continue to promote/facilitate other ONAP core components for the Gold Badging status (e.g., UUI, SDNC)
• Incorporate more GenAI capabilities and use cases to the ONAP components, and promote the adoption of open-source LLM models and frameworks aligned with LF AI & Data and GenAI Commons
  • Collaborate with LF AI & Data GenAI Commons and Nephio GenAI for 5G and 6G
  • Open-source based models and controls
  • AI-Based Control Loop
  • AI Model-As-A-Service 
  • ETSI ISG NFV compliance for AI?
• Foster inter-community collaboration with other LF communities, such as O-RAN and Nephio
  • SDNC enhancements (which is used by O-RAN OAM as is)
  • Resource-based Orchestration Pattern (leveraging CD and Operator)
  • Energy saving / monitoring 
• Ensure the security of ONAP components and operations 
  • The latest security mechanism for communications (service mesh enhancements leveraging Istio and coming Ambient Mesh)
  • Deprecate unused sub-components and mitigate security vulnerabilities
• Define a secure LFN CI/CD pipeline by leveraging OpenSSF-associated reference tools

• Updated ONAP Main Page update with Oslo.
  • DW 
  • The Architecture Overview for Oslo link does not work
  • louis li, and LT plan to update the onap.org site for the oslo release; working on it.

PTLs

• For the Paris release features, we need to discuss the package updates; who is doing what?

• Fiete Ostkamp, reported that UUI still depends on MSB; Byung-Woo Jun,sent email to Keguang He for their plans to resolve the issues.
  • Fiete Ostkamp, fixed UUI (frontend), working on the backend.  
  • Andreas Geißler, may need to clean up OOM for this after UUI update; will update it later
• Fiete Ostkamp, also reported some parts of AAI charts still use MSB. 
  • Only OOM chart itself; Andreas Geißler, will check it; will update it later ; Fiete Ostkamp worked on it; Andreas Geißler will test it tomorrow or so. 

• The next Paris release schedule is TSC approved on 05 Dec 2024 , Release Planning: Paris 

  • TSC approved the current Paris release schedule on December 5th

  • An ArgoCD deployment to provide an alternative the helm deployment

  • RAN Simulator enhancement
  • Policy-OPA-PDP
  • MAAS
  • SDC Ruby upgrade
  • Project package upgrade
  • SDNC/CCSDK - need to upgrade Java 21 and Maven ; PTL, SECCOM and ARCCOM will handle this
  • not only SDNC, may be other components too. SECCOM will discuss
  • Portal-NG upgrade?
• Release Planning: Paris
• Project Status in Paris Release
• Paris Release Key Updates

• Long Term Release Roadmap

• • https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27520 - waiting for Murali - on hold

  • Error in Creating Releng Go Jobs as per guide

  • Kevin Sandi, is working on it and waiting for Murali's input

  • What is the current status? almost done by Kevin Sandi. Deena, Murali and Kevin need to work together to finalize it.

  • Requesting guidance on adding goLang based project to Nexus IQ - Project Services Support - Service Project
    (IT-27561) - In Progress, https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27561

    • @Kevin Sandi , is working on it, https://support.sonatype.com/hc/en-us/requests/101113?page=1

  • Kevin Sandi, New JJB template for Golang CLM scan is ready for review and approval => https://gerrit.linuxfoundation.org/infra/c/releng/global-jjb/+/73372 , once that change is approved and merged by LF we can proceed to upgrade the GlobalJJB version at ONAP and then merge following change

  • https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27561 is the new ticket that Kevin is working.

  • https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-

27520 - waiting for Murali - on hold
• Error in Creating Releng Go Jobs as per guide
• Kevin Sandi, is working on it and waiting for Murali's input
• What is the current status? almost done by Kevin Sandi. Deena, Murali and Kevin need to work together to finalize it.
• Requesting guidance on adding goLang based project to Nexus IQ - Project Services Support - Service Project
  (IT-27561) - In Progress, https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27561
Kevin Sandi, New JJB template for Golang CLM scan is ready for review and approval =>

• • 27696 , Kevin will check

  • https://gerrit.onap.org/r/c/ci-management/+/139794; @kevin sandi merged; Done

  • Ramesh Murugan Iyer, Policy team will check vulnerabilities on direct dependencies; may need to open a ticket for the product (Sonatype) company; Kevin Sandi, asked Murali to send the test results before raising tickets; CycloneDX-based SBOM; may need a conversion between CycloneDX and SPDX;

  • So far, LFN supports SPDX only for their pipeline SBOM. SECCOM will discuss it further with the LF team. We need a conversion between CycloneDX and SPDX.

  • @Fiete Ostkamp , https://gerrit.linuxfoundation.org/

infra/c/releng/global-jjb/+/73372 , once that change is approved and merged by LF we can proceed to upgrade the GlobalJJB version at ONAP and then merge following change
• IT-27720; Kevin Sandi, will check; @kevin sandi, will work on it. please discuss this with Deena; when? please report back to TSC when it is ready
• https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27696 , Kevin will check
https://gerrit.onap.org/r/c/ci-management/+/139794
• Ramesh Murugan Iyer, Policy team will check vulnerabilities on direct dependencies; may need to open a ticket for the product (Sonatype) company; Kevin Sandi, asked Murali to send the test results before raising tickets; CycloneDX-based SBOM; may need a conversion between CycloneDX and SPDX;
• So far, LFN supports SPDX only for their pipeline SBOM. SECCOM will discuss it further with the LF team. We need a conversion between CycloneDX and SPDX.
• Deena Mukundan, 
• Policy Staging job for imaging - will discuss more at the PTL next week

• ARCCOM plans to work on the ONAP marketing catch points and architecture for the Paris release.
  • https://docs.google.com/document/d/1_MTqJDP8QyJwYUyxzDsCoxbUlJsb3Ec_S3xE4Q97HP4/edit?tab=t.0
• PTLs, please plan for the ARCCOM reviews for your new features, requirements and enhancements for Paris.
• More ONAP Streamlining documentation, ONAP Streamlining Evolution and its sub-wiki pages. 

• TLS 1.3 support thru the Service Mesh and Ingress Gateway? The current TLS 1.2 is broken. 
  • Andreas Geißler, we can configure for TLS 1.3; it would be for Paris; will check
  • Byung-Woo Jun, Paris architecture will address this update.

• SECCOM will review the Java 21, Python, and Maven upgrades from the security perspective. 
  • Paweł Pawlak, will explore the current status of versions; will discuss this further at the SECCOM; scanner from the weekly pipelines may help?? Andreas Geißler, will check; Docker image is hard corded. 
  • Golang scanning: waiting for Nexus; Kevin Sandi, will raise a support ticket for Nexus golang support.
• How to deal with vulnerabilities. e.g., SDC, UUI - Angular dependency issues. Also, MPM
• SECCOM plans to discuss these issues with PTLs at the next SECCOM meeting (next SECCOM meeting 2/4/2025)

• • infra/c/releng/global-jjb/+/73395 pipeline issues: history pipeline failure; @Kevin Sandi will work on it.

  • Kevin Sandi, the sonatype is already working on this issue. we need to monitor it, waiting their response. 
  • report from Murali about kafka; Kevin Sandi is fixed and waiting for Murali's confirmation.

Byung-Woo Jun

• ARCCOM plans to work on the ONAP marketing catch points and architecture for the Paris release.
  • https://docs.google.com/document/d/1_MTqJDP8QyJwYUyxzDsCoxbUlJsb3Ec_S3xE4Q97HP4/edit?tab=t.0; Byung-Woo Jun, sent email to operators' PTLs for their deployment and use cases summaries.
• PTLs, please plan for the ARCCOM reviews for your new features, requirements and enhancements for Paris.
• More ONAP Streamlining documentation, ONAP Streamlining Evolution and its sub-wiki pages. 

• TLS 1.3 support thru the Service Mesh and Ingress Gateway? The current TLS 1.2 is broken. 
  • Andreas Geißler, we can configure for TLS 1.3; it would be for Paris; 
  • Byung-Woo Jun, Paris architecture will address this update.

• Under Oslo we recommended Java 11.0.21, accepted Java 17.0.10 Target 17.0.12 and possible use of 21.

  We need to figure out what java versions we are running now in ONAP. If Dan is not making interface changes, moving to Java 21 is not a problem.

• Andreas Geißler, provided the Java versions scanning, ONAP-Component-Java-Versions_Reporting..pdf

  AP Pawel - to check if we can get this info from Nexus-IQ directly.

  Andreas provided the list of the Java versions per project. versions_reporting.html ONAP-Component-Java-Versions_Reporting..pdf

  • AP: Dan Timoney, try it with SDNC to build basic image automatically regularly and update Docker file as needed. He will try it and let us know. 
• Nexus-IQ scan for Node.js and Angular in ONAP: Paweł Pawlak, opened a LF IT ticket, https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27757 
  • Kevin Sandi,  will check with Matt and estimate the effort
• Additional input from Fiete Ostkamp...

• OOM updates, charts changes such as SDC, policy-opa-pdp patches
• Argo CD deploymentArgo CD deployment; Andreas Geißler working on the ONAP Argo CD/Flux deployment; some issues are there, and working on fixing them
• MR removal from DFC in DCAE (vresh navalli),
  • https://gerrit.onap.org/r/c/dcaegen2/collectors/datafile/+/139981; waiting for Tony Hansen's review provided his comments; Vresh incorporated Tony's comments; Tony merged today; code is done and need to work on the release.
• DB-operator use  issue (shrikant dhakalu tarale); some parts were fixed
• Tata is testing Docker Image handling implemented by the Integration team; some issues on testing; Andreas Geißler is investing this; will give some updates

Byung-Woo Jun

• If you have any ONAP videos to upload to YouTube, please contact Casey Cain and Byung-Woo Jun.
• Casey Cain, uploaded the following videos to YouTube from Lee Anjella Macabuhay for CPS :
  • https://youtu.be/uLCIC5kT3JA
    https://youtu.be/jY9_w4kxvFk
  • Thank you both!
  • One more... Lee asked, would there be any way we can have direct control over our own playlist for speedy uploads and editing.
  • Louis/Byung will discuss this request with Casey. LJ Illuzzi, for uploading, please update their directioncontact Jill Lovato and/or Casey Cain.

• KubeCon+CloudNativeCon, and Open Networking & Edge Summit, next April 2025 in London
• Open Networking & Edge Summit Registration: https://events.linuxfoundation.org/open-networking-edge-summit-europe/register/
  • There are no community sessions for this event. It’s a 100% curated agenda. There will be keynotes by LFN and LFE, and strategy sessionsagenda. There will be keynotes by LFN and LFE, and strategy sessions.

• LFN's KubeCon + CloudNative Con EU sponsorship that enables us to host Cloud Native Telco Day, we will have a booth onsite at the main KC + CNC show floor,  April 2-4. 

  Call to Action- LFN is looking for both community members to help staff the booth, as well as project or collaborative demos that we can showcase in the booth.

• 2025 LFN Events- as per the guidance of LFN Governing Board

  • All projects can have a virtual dev event (with LF help) to focus on upcoming releases and strategy

  • A series of virtual workshops around a specific topic (to be determined by the TAC) - eg Domain Specific AI, Security, etc