Andreas Geißler

Keguang He 

Byung-Woo Jun 

N.K. Shankaranarayanan 

Dan Timoney 

Paweł Pawlak 

Dan Xu 

Seshu Kumar Mudiganti

Dong Wang

Paweł Pawlak Byung-Woo Jun Dong Wang Keguang He

Muddasar Ahmed  Thomas Kulik 

• ONAP Streamlining Documentation Enhancements for Oslo:
  • Defining ONAP Core components and extensions (e.g., lightweight ONAP, optional components)
  • Core component functions
  • Installation guide, including ArgoCD-based deployment options
  • configuration guide
  • User guide 
  • Use cases by operators and vendors
  • reference architecture (component, interface, security, function...) for lightweight ONAP
• Thomas Kulik will take a look at suitable open-source document framework, based on Paweł Pawlak 's input. Will update outcome next time. 

Byung-Woo Jun 

• Oslo release wiki pages:
  • Release Planning: Oslo
  • Project Status in Oslo Release
  • Oslo Release Key Updates
    • ONAP PTL, please fill up the project key updates promptly
    • As needed, schedule requirement and architecture reivews with ARCCOM (Byung-Woo Jun )
  • Oslo Documentation - Thomas Kulik , could you please update for the deprecated projects?

Sandra Jackson (Deactivated) 

Kevin Sandi 

Tony Hansen 

• Update ONAP main pages for New Delhi release (wiki.onap.org, onap.org) - Sandra Jackson (Deactivated) 
  • Submitted ticket for

• • update - WIP
• Lfx zoom meetings need backup owners for vacation and other

• occasions - WIP

Pending ticket opened by Marek:

https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-25573

• Kevin Sandi - a workaround solution will be tried;
• Marek / Matthew - automatic building solution is needed; escalate this? Waiting for feedback from Marek 
• Kevin/Matt/Kevin - create a ticket and try a solution (maybe Github action helps? PoC??)
• Some action plans and updates next week
• Kevin and Marek are working on it, testing and deployment. will report its status - 90% is working; WIP; scheduled for next week update

Kevin: Jenkins' sandbox; security patching is working fine; downtime would be 30 mins; will notify the downtime by email to ONAP community - WIP

Thomas Kulik - issues with Portal-NG and other documentation - 

IT-26899 Project is not created in RTD - Kevin; found a root cause; almost done, pushed the fixes;

Marek: Verifying of fixing; will follow up when Thomas Kulik  and Fiete Ostkamp back - next week report; related to RTD pipeline?  need further testing

will Argo CD-based deployment support the resolution? Andreas Geißler , could you please confirm it?

• Ticket opened by Tony: IT-26848 - Tony is checking on it, still has issues; Kevin will work on it; Thomas will check; should not block any? will work; report its status next week

Paweł Pawlak Byung-Woo Jun 

• Policy-GUI deprecation is approved by TSC on July 18th 
  • Proceeding rest of the transition steps, Project State: Unmaintained 
• DMaaP DR deprecation is approved by TSC on July 25th
  • ONAPARC-805 - Global Requirements for DMaaP DR Removal in Oslo IN PROGRESS
  • Proceeding rest of the transition steps, Project State: Unmaintained
  • The entire DMaaP will be deprecated, replaced by Kafka/Strimzi
  • https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27045 was created to remove DMaaP Jenkins job, CLM scan and sonacloud sonarCloud report.
  • Andreas Geißler , please remove DMaaP from OOM
• https://gerrit.onap.org/r/c/oom/+/138260, https://gerrit.onap.org/r/c/oom/+/138533 Keguang He : Kaixi LIU and Keguang He contacted Andreas Geißler for help. Any update? WIP; init script is failing
• CCSDK A1 controller committer permission for John Keeney; Dan Timoney will contact John Keeney and plan to promote John as a CCSDK committer. After an election for it, the result will be reported to TSC. Dan Timoney , any update?
• No MultiCloud activities for several ONAP releases.
  • Discussed this with Seshu; only SO K8s plugin is using it but, we can lock the code and deprecated the project. 
  • Let's check its dependencies to prepare for its deprecation. Andreas Geißler , needs to check with Lukasz.

• OpenSSF tool http://tlhansen.us/onap/onap.html project and editor lists are outdated. Sandra Jackson (Deactivated) , Tony Hansen  - could you please check this? WIP

  • CLI
  • MSB
  • Champ
  • DMaaP Buscontroller 
  • ESR
  • Holmes
  • Modeling
  • OOF
  • VNF SDK
  • DMaaP DR and all the DMaaP components 

Byung-Woo Jun 

• The Architecture diagram for Oslo, Oslo-R15 Architecture Diagram
• Oslo Architecture main wiki pages, Oslo-R15 Architecture/ArchCom Wiki Page ; see its sub directories for project architecture pages
  • Updated Oslo project component architecture descriptions

SECCOM: Amy prepared following jiras as Oslo task: [REQ-1592] PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASE - ONAP JIRA

• Epic: https://jira.onap.org/browse/REQ-439
• AAI: [AAI-3941] AAI PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR NEW DELHI RELEASE - ONAP JIRA
• CCSDK: [CCSDK-4042] CCSDK PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR NEW DELHI RELEASE - ONAP JIRA
• CPS: [CPS-2342] CPS PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR NEW DELHI RELEASE - ONAP JIRA
• DCAE: [DCAEGEN2-3414] DCAE PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASE - ONAP JIRA
• Multicloud: [MULTICLOUD-1507] MULTICLOUD PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASE - ONAP JIRA
• Network Controller: [SDNC-1844] NETWORK CONTROLLER PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASE - ONAP JIRA
• Policy: [POLICY-5103] POLICY PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR NEW DELHI RELEASE - ONAP JIRA
• PortalNG: [PORTALNG-114] PORTALNG PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASE - ONAP JIRA
• SDC: [SDC-4690] SDC PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASE - ONAP JIRA
• SO: [SO-4130] SO PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASE - ONAP JIRA
• UsecaseUI: [USECASEUI-840] UUI PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASE - ONAP Jira

CISA report on memory safe code: 

• joint-guidance-exploring-memory-safety-in-critical-open-source-projects-508c.pdf, 
• The-Case-for-Memory-Safe-Roadmaps-508c.pdf
• Maggie (NSA; SECCOM) forwarded the NIST special publication on Service Mesh Proxy Models for Cloud-Native Applications. It is pretty good documentation on Service Mesh, Threat analysis and recommendations, https://csrc.nist.gov/pubs/sp/800/233/ipd , https://doi.org/10.6028/NIST.SP.800-233.ipd

• 2 actions:

  1. OpenSSF- add/update their guidelines; Tony Hansen 
  2. Locally for ONAP: impact assessment and reviewing if there are opportunities to remove those languages.

• Added memory safe code guidance to the architecture security review template, ONAP Component Architecture Review Template