Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
  • PTL Recordings

  • Antitrust Policy Notice

We start our meetings by mentioning the project's Antitrust Policy, which you can find linked from the LF and project websites. The policy is important where multiple companies, including potential industry competitors, are participating in meetings. Please review and if you have any questions, please contact your company legal counsel. Members of the LF may contact Andrew Updegrove at the firm Gesmer Updegrove LLP, which provides legal counsel to the LF.

Agenda

START RECORDING

Duration

Agenda Item

Requested by

Notes / Links

30 mins

Cross-project discussion

louis li

Byung-Woo Jun

ONAP Annual Report to LFN

Paweł Pawlak

Byung-Woo Jun

  • TSC to complete input to gdoc by 19 Dec 2024 

  • report content discussions

  • Draft from Jill is received and looks good.

  • TSC and PTLs to review and comment. Complete by 12 Dec 2024 

  • Paweł Pawlak Link to doc here: https://docs.google.com/document/d/1LnG4WLRw2y4SJGW_g5kyrZetnEOcC2HYqC72tTPBRCg/edit?tab=t.0

  • Byung-Woo Jun, TSC, PTLs - please review the above documents and double-check the contents. e.g, I (byung) found several incorrectness and enhancement points. We can approve the documentation at the next TSC meeting.

  • Byung-Woo Jun, we need to AI use cases and achievements and SDNC use in O-RAN OAM, DT OOM Security enhancements for ONAP, Policy and CPS enhancements, Portal-NG contribution, UUI AI supports, etc. 

Tony Hansen

Security

Amy Zwarico

Byung-Woo Jun

Note: We will handle this again early next year with SECCOM; January 14, 2025

  • Will discuss this again at the SECCOM (initial discussion at SECCOM; and early next year with PTLs); January 14, 2025

PTLs reported vulnerability reports are not accurate

  • NexusIQ reports and scripts have discrepancies - Fiete Ostkamp

  • May be a process issue - PTLs update based on the reports at the beginning of the release

  • Action items:

    • are PTLs willing to fix new vulnerabilities found up to code freeze? PTLs can fix new findings in NexusIQ

    • At the PTL meeting this Monday, Amy and PTLs discussed how to process vulnerability reports

    • The current assumption is that PTLs access the Nexus for the vulnerability reports and decide when to apply the fixes

    • Amy Zwarico provided the initial Nexus access demo on December 2nd

    • CLM link, https://jenkins.onap.org/view/CLM/

    • Amy Zwarico will provide another demo how to access Nexus to PTLs next Monday (12/09)

  • PTLs can add more people for the Nexus access (but maybe there are some license limitations; check with LF IT);

  • Amy Zwarico , give a Nexus access demo, can we give PTLs more current views?

  • Toine Siebelink , CPS has a fortnightly community meeting during which we already check some quality report. I think we will start including this Nexus IQ report in that cycle...

Oslo Release update

Byung-Woo Jun 

  • December 12th RC for Oslo is approved by TSC on December 12th.

  • The Sign off date is January 9th, 2025

  • Toine Siebelink ,CPS is good to go; Doc update will be done between RC and Signoff

  • Fiete Ostkamp , Portal-NG is good to go

  • Fiete Ostkamp , SDC upgrade is ongoing; waiting for input; update;

    • SDC (commons-compress (“threat-level” 6); spring-web (threat-level 10)

    • Andreas Geißler , DT has their own resources for the SDC Ruby update. They are working on it. Thanks !!!

      • Fiete Ostkamp , SDC ruby issue; DT is working on it; get the pipeline ongoing (fixed); ruby upgrade is ongoing

      • Jira Legacy
        serverSystem Jira
        serverId4733707d-2057-3a0f-ae5e-4fd8aff50176
        keySDC-4691

      • What is the current status?Andreas Geißler ? Postponed to Paris

      • Chef dependency in SDC related to Ruby conflict (2.0 is pretty old)  

  • Ramesh Murugan Iyer , Policy is good to goSeshu Kumar Mudiganti , Sanket is checking in the RFC8040 SO code. Getting there;

    • andreas, XACML PAP and API images need to be updated. Sangeeta will follow up.

    • Dan Timoney , Andreas Geißler , Sanket are working on it; they don’t expect any issue for the Oslo release; they don’t expect any issue for the Oslo release; Dan may need to update the SDNC image version and client library;

  • Andreas Geißler , OOM is good to go; doc update will be done between RC and Signoff

  • Dan Timoney , CCSDK/SDNC? It is good to go; SO-SDNC communications thru RFC8040 is ongoing but no problem.

    • Sanket is checking in the RFC8040 SO code. Getting there;

  • documentation and release notes should have their target dates

  •  Release Planning: Oslo

  • Project Status in Oslo Release

  • Oslo Release Key Updates,  thanks PTLs

    • PTLs, update with Target Date!

    • RAN Simulator plans to be added into Oslo. Vishal Varvate will add RAN Simulator key updates - If no response from Vishal, the feature will be postponed to Paris

  • The Architecture diagram for Oslo, Oslo-R15 Architecture Diagram; new diagram

  • Oslo Architecture main wiki pages, Oslo-R15 Architecture/ArchCom Wiki Page ; see its sub directories for project architecture pages

RelEng/Infrastructure

Jessica Gonzalez Paweł Pawlak 

Byung-Woo Jun 

RelEng/Infrastructure

Ramesh Murugan Iyer

Kevin Sandi

Deena Mukundan

Following the discussion at the PTLs meeting. OPA PDP subproject under Policy project.

GoLang we need support from LT IT. Ticket IT-27561 Request Guidance on adding golang based project to Nexus IQ
 
Requesting guidance on adding goLang based project to Nexus IQ - Project Services Support - Service Project

  • Any update? LF IT? In progress

Go Lang used in the project is 1.23, which is the latest version.

https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27561

Link to restricted Wiki: Security Vulnerabilities - Confluence.

Deena will ask in a dedicated ticket access to Nexus-IQ + access to restricted Wiki.

Go Application Analysis

Paris Release update

Byung-Woo Jun

OOM 

Andreas Geißler 

  • An ArgoCD deployment to provide an alternative the helm deployment. Marek Szwałkiewicz , Andreas Geißler , DT is working on it.; will decide which release that DT applies..

    • Andreas Geißler , will check with Marek and let us know... Postponed to Paris

    • Marek Szwałkiewicz , confirmed this feature is postponed to Paris

    • test certain different setting for operators and updating gating pipelines

    • update needs for policy and cds (java 17 version) - image update; DT will provide update.

RAN-SIM (Target Oslo)

Vishal Varvate

Andreas Geißler

Update Jiras

Oslo Package

Amy Zwarico 

Paweł Pawlak 

Toine Siebelink

Byung-Woo Jun, for those projects without PTLs, we fileed vulnerability exception. Those package update will be revisited in Paris. TSC approved it on December 12th.

Toine Siebelink updated the following: (Thanks!!!).

  • Assignee, please check the tickets

  • For the ticket without assignees, we need to find new assignees

Epic: https://jira.onap.org/browse/REQ-439
Oslo task:

Jira Legacy
serverSystem Jira
serverId4733707d-2057-3a0f-ae5e-4fd8aff50176
keyREQ-1592

Jira Legacy
serverSystem Jira
columnskey,summary,assignee,status,resolution
columnIdsissuekey,summary,assignee,status,resolution
maximumIssues20
jqlQueryid IN linkedIssues("REQ-1592") AND type != Epic ORDER BY summary
serverId4733707d-2057-3a0f-ae5e-4fd8aff50176


Fiete Ostkamp , is there any automated tool for dependency checking from Gerrit? Matthew will provide its update. Matt/kevin will check; may use portal-ng as a test project/candidate; Fieta will a LF IT ticket toward Matt/Kevin. ; Matt put a couple of patches, still working on it. Matt gave us update…

The Github2Gerrit is under IT-27340; about to merge; Matt, let us know; maybe this week;

The Nexus IQ job is under IT-27251; It is done.

The gerrit code merge issue opened by Tony is IT-26848; It is done

Tony opened a new ticket; Kevin Sandi is working on it, IT-27455;

Toine Siebelink , https://sonarcloud.io/summary/overall?id=onap_cps

https://sonarcloud.io/organizations/onap/projects

https://sonarcloud.io/summary/overall?id=onap_cps-ncmp-dmi-plugin

LF IT Support

Jessica Gonzalez 

Kevin Sandi

  • *** note: please check if the following issues are still open ***

  • Pending ticket opened by Marek:

    https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-25573; Closed

    • Kevin Sandi - a workaround solution will be tried;

    • Marek / Matthew - automatic building solution is needed; escalate this? Waiting for feedback from Marek 

    • Kevin/Matt/Kevin - create a ticket and try a solution (maybe Github action helps? PoC??)

    • Some action plans and updates next week

    • Kevin and Marek are working on it, testing and deployment. will report its status - 90% is working; WIP; scheduled for next week update

    • wait for argo-cd deployment update. will revisit...

    • wait for Marek's return

    • Marek is working on it. 

    • Kevin Sandi , waiting for Marek’s confirmation. Update next time; update it at the TSC meeting this Thursday.

    Kevin: Jenkins' sandbox; security patching is working fine; downtime would be 30 mins; will notify the downtime by email to ONAP community - WIP, still pending; let us know.

  • Thomas Kulik - issues with Portal-NG and other documentation - 

    Kevin / marek: WIP; update in two weeks.

    • Kevin / Marek are working on it. wait for Argo CD finish; Postponed to Paris

    IT-26899 Project is not created in RTD - Kevin; found a root cause; almost done, pushed the fixes;

    Ticket opened by Tony: IT-26848 - Tony is checking on it, still has issues; Kevin will work on it; Let us know.

    • Kevin Sandi , working on it; removing gerrit plugins as a possible solution; update the ticket with findings and will check them with Tony; 

    • Byung-Woo Jun , will ask Tony for this at the SECCOM tomorrow.

    • IT-27455, Kevin Sandi is working on it.; in progress

RelEng/Infrastructure

Kevin Sandi

Note: Postponed to Paris

  • Kevin Sandi, Github action ticket (Kevin Sandi) - bypassing -1 for option jobs : any update? Jira ticket for tracking RELENG-5602

    • If patches are fixed today, Kevin can start testing.

New bypassable workflow is in place and working. There are a couple of improvements I’m working on to avoid deprecation notices and use the correct voting github action.

It is working, but Toine Siebelink , will create a new ticket for a new policy on checking the RTD links toward Kevin Sandi ; Thomas Kulik , reported there are many broken ONAP wikis; treat every warning as a warning??

Toine Siebelink , created a new ticket, https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27475 .

  • Any update? Kevin Sandi will work on it later; backlog; Postponed to Paris

Testing Environment

Testing Improvement

CSIT Review

ToolChain Improvement

Documentation

Other Improvement suggestion

Andreas Geißler  Dan Timoney 

Note: will be done before Signoff; Getting there

In Oslo, Plan to migrate ONAP components to use RFC8040. and will Keep the New Delhi CCSDK/SDNC as LTS (long term support) for Biermann APIs. In Oslo, only RFC8040 will be supported.

Dan Timoney, reviewed the above CCSDK/SDNC plan with ARCCOM and ARCCOM approved it.

Andreas Geißler , working with Sanket and Dan. We need a new update by this Thursday.

Byung-Woo Jun ,Sanket is checking in the SO code change for RFC8040. The SO team will decide if they finish this in the Oslo release.;

Sharing Best Practices

IF TIME ALLOWS ....

15 mins

Release status

How to engage LF

LJ Illuzzi

  • how to engage LF IT

  • contact Louis for any question.

5 mins

Upcoming Events

LJ Illuzzi

Byung-Woo Jun

10 mins

Remaining Action Items

...