Andreas Geißler

Keguang He 

Byung-Woo Jun 

N.K. Shankaranarayanan 

Dan Timoney 

Paweł Pawlak 

Guanyu Zhu (zhuguanyu)

Dong Wang

From the Paris release, TSC needs to discuss ONAP focus areas and strategies / roadmaps

• •  TSC members to add thoughts

Let's discuss more this year for Paris +

Any questions or feedback? 

Byung-Woo Jun presented the brainstorm at the TSC meeting this week.

Brainstorm:

• Ensure ONAP core components are focused and operate independently, from build to runtime
  • DT finishes Argo-CD and Flux based component independent deployment
    • optimizing code for Flux 
    • DT is productizing some of the selected ONAP core components early next year in their TNAP production environment
  • Declarative and Intent-based component operations by the Repository-based Network Automation : see the ideas from ONAP Architecture Evolution - 2025.pdf
• Make ONAP core components more autonomous and ready for use by both ONAP, LF and other external users
  • • During New Delhi and Oslo releases, CPS and Policy achieved the OpenSSF Gold Badging status. Kudos to the team!
    • Continue to promote/facilitate other ONAP core components for the Gold Badging status (e.g., UUI, SDNC) - Ramesh, Toine, Byung will invite Fiete to give him a list of work items for gold badging.
• Incorporate more GenAI capabilities and use cases to the ONAP components, and promote the adoption of open-source LLM models and frameworks aligned with LF AI & Data and GenAI Commons
  • Collaborate with LF AI & Data GenAI Commons and Nephio GenAI for 5G and 6G
  • Open-source based models and controls
  • AI-Based Control Loop
  • AI Model-As-A-Service 
  • ETSI ISG NFV compliance for AI?
• Foster inter-community collaboration with other LF communities, such as O-RAN and Nephio
  • SDNC enhancements (which is used by O-RAN OAM as is)
  • Resource-based Orchestration Pattern (leveraging CD and Operator)
  • Energy saving / monitoring ; N.K. Shankaranarayanan, rAPP in SMO is monitoring energy; it is an industry trend. 
• Ensure the security of ONAP components and operations 
  • The latest security mechanism for communications (service mesh enhancements leveraging Istio and coming Ambient Mesh)
  • Deprecate unused sub-components and mitigate security vulnerabilities
• Define a secure LFN CI/CD pipeline by leveraging OpenSSF-associated reference tools

louis li

• Updates to https://www.onap.org. This task is completed.

  • https://www.onap.org and onap.org/software are live with the updates

  • https://www.onap.org/news was also updated.

• The next Paris release schedule is TSC approved on 05 Dec 2024 , Release Planning: Paris 

  • TSC approved the current Paris release schedule on December 5th

  • An ArgoCD and Flux deployment to provide an alternative the helm deployment

  • RAN Simulator enhancement
  • Policy-OPA-PDP
  • MAAS
  • SDC Ruby upgrade - will be removed
  • Project package upgrade
  • SDNC/CCSDK - need to upgrade Java 21 and Maven ; PTL, SECCOM and ARCCOM will handle this
  • not only SDNC, may be other components too. SECCOM will discuss
  • Portal-NG upgrade?
• Release Planning: Paris
• Project Status in Paris Release
• Paris Release Key Updates

• Long Term Release Roadmap

• Software Package Upgrade

  SO-4130	SO PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR PARIS RELEASE	Seshu Kumar Mudiganti	Open	Unresolved
  SDC-4690	SDC PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR PARIS RELEASE	Fiete Ostkamp	Open	Unresolved
  MULTICLOUD-1507	MULTICLOUD PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR PARIS RELEASE	Andreas Geißler	Open	Unresolved
  DCAEGEN2-3414	DCAE PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR PARIS RELEASE	Andreas Geißler	Open	Unresolved

  Note: SO, SDC, MultiCloud and DCAE (without PTLs) are open; DT offered their help on  SDC, MultiCloud and DCAE. Thank you very much!!!
  Note: Seshu and Sanket will check the SO package upgrade.

• • We will discuss this issue at the PTL more...
  • Kevin Sandi, any update?
    • A couple of weeks ago I asked for confirmation twice on the fix but I didn’t get an answer:
      https://jira.linuxfoundation.org/browse/IT-27561?focusedCommentId=1130569&page=com.atlass[…]ian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel
      https://jira.linuxfoundation.org/browse/IT-27561?focusedCommentId=1131901&page=com.atlass[…]ian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel
      I’m going to proceed updating the build node permanently for opa-pdp jobs and please re-run the jobs so you can get the fix.
  • Deena Mukundan, 
    • Last TSC meeting we discussed on kafka issue and it was updated that still work is in progress. All updates are mentioned in the ticket. Thanks, it seems to be working now (edited) 
  • IT-27801; Kevin Sandi, please take a look at this. 
  • murali parthasarathy k, NexusIQ license header issue - scanning; Paweł Pawlak, will take a look what kind of errors

    • Found licenses in the 'License not determined' license threat group ('Not Provided'); Paweł Pawlak, contact the code originator to add the license header

  • https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27561 is the new ticket that Kevin is working.
    • Deena Mukundan, still not working; @kevin sandi will work on that. 

  • https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27696 , Kevin will check

  • Ramesh Murugan Iyer, Policy team will check vulnerabilities on direct dependencies; may need to open a ticket for the product (Sonatype) company; Kevin Sandi, asked Murali to send the test results before raising tickets; CycloneDX-based SBOM; may need a conversion between CycloneDX and SPDX;

    • Deena Mukundan, put expectations for Kevin Sandi in the ticket

  • So far, LFN supports SPDX only for their pipeline SBOM. SECCOM will discuss it further with the LF team. We need a conversion between CycloneDX and SPDX.

  • @Fiete Ostkamp , https://gerrit.linuxfoundation.org/infra/c/releng/global-jjb/+/73395 pipeline issues: history pipeline failure; @Kevin Sandi will work on it.

  • Kevin Sandi, the sonatype is already working on this issue. we need to monitor it, waiting their response. 
  • report from Murali about kafka; Kevin Sandi is fixed and waiting for Murali's confirmation.
  • Deena Mukundan, 
  • IT-27801 -

    Request for adding Sonarqube scanner for Golang for project opa-pdp

Byung-Woo Jun

• ARCCOM is working on the ONAP marketing catch points and architecture for the Paris release.
  • https://docs.google.com/document/d/1_MTqJDP8QyJwYUyxzDsCoxbUlJsb3Ec_S3xE4Q97HP4/edit?tab=t.0  
• PTLs, please plan for the ARCCOM reviews for your new features, requirements and enhancements for Paris.
• More ONAP Streamlining documentation, ONAP Streamlining Evolution and its sub-wiki pages. 

• • Byung-Woo Jun, Possible new work item: Consultation on OpenSSF badging and CVE reduction for Nephio.
    • Nephio SIG Security team is looking for a solution for OpenSSF badging and CVE reduction for Nephio. ONAP SECCOM could share their insights with the Nephio teamNephio. ONAP SECCOM could share their insights with the Nephio team.
    • Byung-Woo Jun, plan to coordinate the collaboration between ONAP SECCOM and Nephio SIG Security.
  • Gold badging consultation to AAI??
  • Runtime CI/CD presentation by Lincoln Lavoie from UNH at the SECCOM meeting on March 4, 2025.
    • Byung-Woo Jun, This could be a good study/investigation for ONAP Runtime CI/CD
  • Byung-Woo Jun, Should we work on the secure ci/cd for LFN?

• • Andreas provided the list of the Java versions per project. versions_reporting.html ONAP-Component-Java-Versions_Reporting..pdf

    • AP: Dan Timoney, try it with SDNC to build basic image automatically regularly and update Docker file as needed. He will try it and let us know. 

      • Dan will share his testing results with us. 

  • Nexus-IQ scan for Node.js and Angular in ONAP: Paweł Pawlak, opened a LF IT ticket, https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27757 

    • Kevin Sandi,  will check with Matt and estimate the effort; already provide info; github action can support; we can close this ticket.

    • @Paweł Pawlak , will look at Kevin’s comments

    • Matthew will take a look at the Maven job.

      • call-sonatype-lifecycle:

            needs: [notify]

            # yamllint disable-line rule:line-length

            uses: lfit/releng-reusable-workflows/.github/workflows/reuse-sonatype-lifecycle.yaml@98e376a377e4622da10ce286a618343c733e41c2 # 2024-10-24

            secrets:

              NEXUS_IQ_PASSWORD: ${{ secrets.NEXUS_IQ_PASSWORD }}

      • gerrit-merge.yaml

      • releng-reusable-workflows/.github/actions/node-build-action/action.yaml at main · lfit/releng-reusable-workflows

• OOM update?

• OOM update?
• working on support of Argo CD and Flux

• KubeCon+CloudNativeCon, and Open Networking & Edge Summit, next April 2025 in London
• Open Networking & Edge Summit Registration: https://events.linuxfoundation.org/open-networking-edge-summit-europe/register/
  • There are no community sessions for this event. It’s a 100% curated agenda. There will be keynotes by LFN and LFE, and strategy sessions.
  • Take the 2025 Networking & Open Source Survey. Take the survey and get 30% off registration for Open Networking & Edge Summit https://www.linkedin.com/feed/update/urn:li:activity:7295139609246650368/
    • Whats the survey about? LFN is partnering withLinux FoundationResearch to explore trends and priorities in open source networking. We're looking for insights from industry professionals to get a better picture of open source use, opportunities, and challenges in the telecom industry.

• LFN's KubeCon + CloudNative Con EU sponsorship that enables us to host Cloud Native Telco Day. LFN will have a booth onsite at the main KC + CNC show floor,  April 2-4. 

  Call to Action- LFN is looking for community members to help staff the booth, as well as project or collaborative demos that we can showcase in the booth.

Reach out to Jill Lovato if you want to volunteer at the LFN booth or have a project or

collaborative demo to showcase at the booth

jlovato@linuxfoundation.org

• 2025 LFN Events- as per the guidance of LFN Governing Board

  • All projects can have a virtual dev event (with LF help) to focus on upcoming releases and strategy

  • A series of virtual workshops around a specific topic (to be determined by the TAC) - eg Domain Specific AI, Security, etc

• LF Member Summit: March 18-20, Napa, California;

  Registration for the Linux Foundation Member Summit 2025 is now open!  

  • Click here to log in and start the registration process.
  • Select the registration type "Invitation Acceptance".
  • Enter the voucher code LFMS24AIDBOARD in the code field and click Next.
  • Complete the required questions and click Submit on the Payment page to finalize your registration.
  • We will have a Member Meetup the day before from 1-5pm for any members that are planning to join!