Attendee-List:

• Andreas Geißler 
• Andrew Lamb 
• Jack Lucas 
• Marek Szwałkiewicz 
• Mateusz Pilat 
• Byung-Woo Jun 
• Shrikant.Tarale 

Agenda

Video:

Today's topic:

• CI/CD for open source SMO (James Li) →
  • Slides presented:

    • Contributions - SMO - Confluence (o-ran-sc.org)

    • https://wiki.o-ran-sc.org/download/attachments/35881444/2024-1-10%20OSC%20IT-DEP%20SMO%20Deployment%20Upgrade.pdf?api=v2

  • Comments required:
    
    • Created page: Feedback for OOM
  • Open changes:

    • https://gerrit.o-ran-sc.org/r/c/it/dep/+/12430

    • https://gerrit.o-ran-sc.org/r/c/it/dep/+/12429

• Gating status:
  • Open: 
    • https://gerrit.onap.org/r/c/oom/+/136948 Update SDNC related images to version to 2.6.0
      • Gating failed
    • https://gerrit.onap.org/r/c/oom/+/136744 [SDNC] Version bump for Montreal
      • will be moved to NewDelhi, as it requires changes in SO,... due to deprecated API (see SDNC R12 London Architecture Review)
      • → created OOM ticket (

        Jira Legacy
        server System Jira serverId 4733707d-2057-3a0f-ae5e-4fd8aff50176 key OOM-3259

        ) and "configration" patch for API change (https://gerrit.onap.org/r/c/oom/+/136908)
        Results show problems and need to be analyzed by Dan
        Additionally DT team will have a look for needed SO changes
    • https://gerrit.onap.org/r/c/oom/+/136832 [POLICY] Update docker images to latest versions
      • not clear, if part of Montreal
      • if not → update chart version(s)
• Gateway-API
  • Gateway-API enabled in Daily/Gating pipeline
  • Add UDP route for DCAE SNMP trap collector (in https://gerrit.onap.org/r/c/oom/+/136836)
  • News: → Istio does not support UDP routing
    • possible alternative for the UDP ?

      https://github.com/nginxinc/nginx-gateway-fabric/blob/main/README.md

• Jack Lucas Testing SNMP trap collector
  • SNMP UDP sending between pods is not working
  • currently no Istio ServiceMesh is used

  • Jira Legacy
    server System Jira serverId 4733707d-2057-3a0f-ae5e-4fd8aff50176 key OOM-3251

    _pod.tpl needs to be changed (containerPorts templates)
  • Maybe podAnnotation is required to exclude the UDP port from sidecar (example: https://git.onap.org/oom/tree/kubernetes/common/cassandra/values.yaml#n158)
• Hardening Istion with SPIRE/SPIFFE (https://blog.spiffe.io/hardening-istio-security-with-spire-d2f4f98f7a63) → need to check within DT
  Used in Nephio
• Tata (ematpil ) install ONAP Montreal/London and made improvements
  
  • will show improvements Tata did and might contribute to OOM
  • Presentation shown: (Platform Customization-oom v2.pptx) .
  • → Enhancements proposed:
    • Security enhancements (e.g. Keycloak/OAuthProxy, AuthorizationPolicy,...)
    • Logging enhancements,...

...

• External Kafka access → https://gerrit.onap.org/r/c/oom/+/133767
  • Doc: Test external Kafka access in London
• SDNC CallHome (SSH) → part of https://gerrit.onap.org/r/c/oom/+/133861
• Plan to update _ingress.tpl for Gateway-API support and AuthorizationPolicy

...

(2023-05-03: No update)

• Documentation: Oauth2-Proxy implementation and configuration
• Oauth2-Proxy: https://gerrit.onap.org/r/c/oom/+/130445
• Adding Oauth2-proxy client to ONAP realm: https://gerrit.onap.org/r/c/oom/+/133699

...