Attendee-List:

• Andreas Geißler 
• Jack Lucas 
• Byung-Woo Jun 
• Andrew Lamb 
• ccteng
• Louis Li
• N.K. Shankaranarayanan 

Agenda

Video:

Today's topic:

• Currently problems in Gating (Azure cluster) → manually started in DT lab
• DB Updates:
  • Fixes for Cassandra Operator
  • Fixes for MariaDB Operator (new version)
  • New support for Postgres (https://gerrit.onap.org/r/c/oom/+/136179)
  • B&R for MDB, Cassandra
• Byung-Woo Jun presents his draft presentation for the DDF in Budapest:
  
  • https://wiki.lfnetworking.org/display/LN/2023-11+-+ONAP%3A+ONAP+Streamlining+Evolution+-+Security+Enhancements+and+Strategy+for+NF+Security
  • https://wiki.lfnetworking.org/display/LN/2023-11+-+ONAP%3A+ONAP+Streamlining+Evolution+-+for+individual+ONAP+component+build+and+deployment+thru+CD 
  • Recording of SECCOM presentation: https://lf-onap.atlassian.net/wiki/download/attachments/16524308/2023-10-03_SECCOM_week.mp4?version=1&modificationDate=1696955536000&api=v2
• Jack Lucas Looking into the SNMP trap collector
  • Remove MR dependency
  • UDP support requires the activation of the Gateway-API and UDPRoute creation
  • Gateway-API UPD support might require Update of Istio and K8S version

Current activities:

• vladimir turok Patch for CPU limits:
  • https://gerrit.onap.org/r/c/oom/+/135863 → need to check the gating results
• AAF Certificate Fix (< London)
  •  Notes: Create AAF CA certificates
  • 1st patch: https://gerrit.onap.org/r/c/oom/+/135975?usp=search
    
    • asked stakeholders to check the results in their labs → If OK, we try to merge it for Kohn
• DB Update (Cassandra, MariaDB,...)

  Jira Legacy
  server System Jira serverId 4733707d-2057-3a0f-ae5e-4fd8aff50176 key OOM-3183

  • MariaDB-Operator in progress (https://gerrit.onap.org/r/c/oom/+/135759)
    • Merged
  • Issues found in Daily:
    • Maybe problems with Istio 1.18 (Peer Authentication for port 3306)

• Reminder: DCAE SNMP trap collector patch for Ingress route !
• Reminder: contact InfoSys !!
• SDNC:
  • https://gerrit.onap.org/r/c/oom/+/135308 [SDNC] Change SDNR DB from elasticsearch to maria DB → need to be checked
  • alexander.dehn Question if cmpV2 support is discontinued ?

Old activities:

• Request to add RAN simulator chart to OOM (Vishal Varvate )
  • Question: 
    • Should we separate the ONAP testing component charts ? (

      Jira Legacy
      server System Jira serverId 4733707d-2057-3a0f-ae5e-4fd8aff50176 key OOM-3085

      )
    • → Proposed to add the charts to Integration repo → reply from Vishal

      • Thank you Marek and Andreas for your reply.
        Yes, I see integration repo is having all the simulator charts ,so for consistency purpose,  we can add the ran sim chart on  the integration repo ,that’s also ok for us.
        @N. K. Shankar,  Any comment if you want to add.

• S2S Authorization (

  Jira Legacy
  server System Jira serverId 4733707d-2057-3a0f-ae5e-4fd8aff50176 key OOM-3191

  ):
  • InfoSys support (check with Girish Kumar )
  • SO, AAI analyzed and discussions will be started
  • Presentation: https://wikilf-onap.onapatlassian.orgnet/wiki/download/attachments/17707945216521422/Service_Mesh_Basic_Auth_Elimination_Analysis.pdf?api=v2 
  • Seshu will be contacted to discuss the SO changes (roles/users,,...)
  • SDC will be contacted by Andreas Geißler and Portal Team
  • Jira tasks are created under

    Jira Legacy
    server System Jira serverId 4733707d-2057-3a0f-ae5e-4fd8aff50176 key OOM-3191

• Urgent issue with AAF certificate expire:
  

  • Jira Legacy
    server System Jira serverId 4733707d-2057-3a0f-ae5e-4fd8aff50176 key AAF-1217

  • https://lists.onap.org/g/onap-discuss/topic/certificates_retrieval/100888379?p=,,,20,0,0,0::recentpostdate/sticky,,,20,2,0,100888379,previd%3D9223372036854775807,nextid%3D1688663764978684781&previd=9223372036854775807&nextid=1688663764978684781
  • Problem: 
    • no description available to re-generate the CA certitficate or how to extend its expiry date
    • Files:
      • https://git.onap.org/oom/tree/kubernetes/common/cert-wrapper/resources?h=kohn
      • https://git.onap.org/oom/tree/kubernetes/aaf/components/aaf-sms/resources/certs?h=kohn

...

• External Kafka access → https://gerrit.onap.org/r/c/oom/+/133767
  • Doc: Test external Kafka access in London
• SDNC CallHome (SSH) → part of https://gerrit.onap.org/r/c/oom/+/133861
• Plan to update _ingress.tpl for Gateway-API support and AuthorizationPolicy

...

(2023-05-03: No update)

• Documentation: Oauth2-Proxy implementation and configuration
• Oauth2-Proxy: https://gerrit.onap.org/r/c/oom/+/130445
• Adding Oauth2-proxy client to ONAP realm: https://gerrit.onap.org/r/c/oom/+/133699

...