2021-08-03 Security Subcommittee Meeting Notes (under preparation)

Seccom criteria for the integration tests to pass a release

• Add Python and Java version checks
• Achieve 100% level
• Follow exception process if relevant

• Few (3 or 4) projects should add ONAP wording in their description as they do not show up in CII Badging dasboard.
• https://logs.onap.org/onap-integration/daily/onap_daily_pod4_master/2021-07/15_02-27/ For the security testing we score at 40% as of today - our target is to add java and python version testing ar reach 100% to release.
• Please update statuses of your Jira tickets for SECCOM Global Requirements

Currently 3 use cases are using ESR:

• ETSI alignment (AAI external system directory API)
• Network slicing (ESR server) but can use AAI external system directory API
• CCVPN case (using ESR GUI server) , they can use AAI sending notification oto DMaaP and SDNC and VFC can pick-up

SO currently ESR in maintenance mode but can be obsolete. If nobody is using ESR, let's remove it from the Istanbul release.

CCVPN to be check by Byung if they will use AAI. 

note: Henry Yu from CCVPN confirmed they can use the direct AAI APIs for Istanbul.

Also, I am checking with Kamel Idir for the Network Slicing case. Last time, he said they could use the direct AAI, but I am waiting for his confirmation for Istanbul.

ETSI alignment already uses the direct AAI APIs

Software BOMs, Hardware BOMs - Muddasar

Update from LFN 

(IT-22333by Pawel, and IT-22334by Thierry)

• Waiting for Thierry’s return