Page Comparison

-REQ-323 - Upgrading packages, some of the projects are gdoing good job, but some are in the delay. ODL related projects wait for their upgrades, so delay expected

-REQ-351 - ONAP must complete update of the java language (from v8 -> v11) - > TSC to be warned, we are at risk! 4 projects do not have capacity (MSB, Modelling, Multicloud and possibly AA&I).

-REQ-373 - ONAP must complete update of the Python language (from 2.7 -> 3.8) - pretty good shape, support from Michal. 3 projects (SDC, DCAE and Logging (out of Guilin scope)).

-Flow matrix to be updated by remaining PTLs.

Free public updates for Java v8 doe personal use is December'20.

For a commercial use, it ended January'19. 

Slide to be prepared to warn TSC376  - Flow matrix to be updated by remaining PTL – Fabian

• only run time focus
• Action to join SO weekly meeting (Wednesday 1:30 UTC) https://zoom.us/j/794508490

-REQ-350 CII Badging - Tony

• Tony updated description part
• List of the projects who have not responded yet 

ongoing

During next PTL meeting identify next projects.

Fabian will be off for the next 2 weeks - proxy to be identified.

Most of the meeting was focussed on tracking M2/M3 status.

Amy has an action item on how many projects are still dependent on Java 8.

Removal of GPLv3 license - to be removed from all containers that contain ONAP code.

SECCOM elections

Waiting for Kenny to start election process 

Reminder from the previous discussion:

After Service Mesh PoC - new requirements might arrive.

Harbor requirement. In Harbor:

• you can sign the image and you can share the key with an application that has an account to pull or to push the image
• possibility to scan the image all the time and send warning

Harbor deployed in run time while Whitesource and Nexus-IQ during the development. 

Logs management (SECCOM discussion on 17th of March)

SIEM integration: 

• integration like for the other applications with SIEM, have the same protocol used

• logs from ONAP to SIEM, falco tool to be considered (IDS for Kubernetes)
• alarms when security issue 

CII Badging - session planned on the PTLs call.

Action: to work on non functional use case requirement for logs collection - important for project maturity.

Data collection for projects currently using Java 8 - e-mail was sent by Amy to Morgan if possible to obtain results. 

Dependency on Java to be tracked. 

Topics proposed:

• Certificates management update – Krzysztof
• Security Documentation – Harald