Versions Compared

Old Version 1

changes.mady.by.user Paweł Pawlak

Saved on

compared with

New Version Current

changes.mady.by.user Paweł Pawlak

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Jira No
SummaryDescriptionStatusSolution

2021 LFN Developer & Testing Forum June 2021-06-07 - 2021-06-10 

Feedback

SECCOM proposal: ONAP: SECCOM activities for Istanbul release

ongoing

General feedback on event in security context:

  • Software inventory as part of OOM module (host, OS, language widget) – get the file in json format and make it available
  • Way to do point upgrade of subcomponents without whole ONAP upgrade
  • Service mesh security – info to be shared with Maggie and NSA team
completed

Service mesh security – info to be shared with Maggie and NSA team (Amy)


Welcome Leah!Introduction of new intern for summertime at AT&Tcompleted

PTLs meting 

The permissions are given per repo unfortunately.. not across all at once

Slot was booked at the last PTLs meeting to ask PTLs for their GitHub IDs., so they would get an access to SonarCloud capabilities.

ongoing

PTLs GitHub IDs to be collected once TSC approves the idea.


(IT-22048) for direct vs. indirect dependencies with container scansFeedback from Bengt to move on with ticket at Sonatype by opening a feature request - Amy opened a feature request (IT-22175) - no updateongoing

Fabian's update - quality of a code

DMaaP all security issues closed, still 18 critical, with SO pending merge, same for service mesh, now started with SDC.

E-mail from Jess on Wikimedia – plugin can be deployed but Jenkins job is needed every time before the merge. PoC could be created with DMaaP project. Discussion with LFN and Jess on Jenkins credentials.

ongoing

E-mail to be sent to Seshu to try to move forward merge (Pawel).


Meeting to be organized with Jess and LFN on plugin deployment possibility (Fabian

's update		ongoing

)


CIS Benchmark feedback - Muddasar

View file
nameCIS Benchmarks Notes.docx
height250
We have pretty much every requirement already documented, what is missing is auditing capabilities (they are by default turned off).

CIS benchmarking provides guidelines but also commands required. On GitHub automated script that can be downloaded.

ongoing

Morgan's e-mailongoing

Book a slot with PTLs on next Monday (Pawel)

Check with Integration team why we can see 3 instances of Cassandra and if they own it (Amy). 


OUR NEXT SECCOM MEETING CALL WILL BE HELD ON 22nd OF JUNE'21. 

Potentially update from Fabian.

Recording:

...





Recording:

View file
name2021-06-15_SECCOM_week.mp4
height150

SECCOM presentation:

View file
name2021-06-15 ONAP Security Meeting - AgendaAndMinutes.pptx
height150