Pamela Dragosh

New Policy API - SO/SDNC - OK?

• Pamela Dragosh  to initiate discussion with Dan and Seshu Kumar Mudiganti

• Review unused Jenkins Jobs <Jess to add the list> CIMAN-339 - Getting issue details... STATUS
  • Two area affected: storage and builders
  • Task is to reduce costs
  • Teams running a combination of old and new jobs. Need to make sure that all old jobs are deprecated.
  • All changes to be documented in JIRA ^^

Morgan Richomme

Lasse Kaihlavirta

• Currently few failing jobs - please direct attention to getting these tests functioning correctly.
• Will continue to review here (ptl mtg)
• Brian Freeman notes that the usecase master verify job has not run successfully for a month
• Useless CSIT test elimination

• Impact Assessment on the tool-chain i.e. JJB jobs using some Python 2 scripts
• David McBride notes that there is a milestone task to identify python in use

• Request to add pylint as part of our toolchain to improve code quality. Pylint is a source-code, bug and quality checker for the Python programming language
• No feedback from the PTL on the call so let's move to the implementation.
• ACTION (LF IT): Share the roadmap of the pylint implementation

David McBride

Sofia Wallin

Any feedback regarding

#1 Frankfurt Documentation

not adding additional work , only creating greater visibility for progress tracking of deliverables
concerns expressed over low participation in docathons

Sofia Wallin will be providing a releasenote template. Currently there is a template that defines content but not style. 

#2 Release Planning Template

feedback has been minimal. Today is the deadline.

#3 Mx Milestone - Frankfurt Deliverables by Milestone

#4 Code Impact View per Component - Frankfurt Code Impact View per Component

• Comment:  start earlier in the release cycle

El-Alto Retrospective - please submit your feedback by Nov 15th - these will be reviewed during the PTL Call on 11/18.

Would you like to get the PTL agenda every Friday through "onap-release" mailing list?

No agenda email was requested by the PTLs - PTLs should look at the meeting page for the agendas

S3P Security maturity update proposal: Add at least 2 sections: vulnerabilities remediation  (OJSIs management + known vulnerabilities) and increased tests code coverage (example could be increase by 5% for each project).

Seshu Kumar Mudiganti & Pamela Dragosh both note that a flat 5% effort will vary greatly between projects.

Vijay Kumar & Manoop Talasila note that older code is time consuming and they do not have available resources 

Rationale: 3 security maturity KPIs:

• fixed OJSIs tickets
• CII Badging
• known vulnerabilities management

Known vulnerabilities management - PLEASE complete your analysis, respond to comments for El Alto release.

Heads-up: Information (not the code) requested by the SECCOM must be provided as part of the Frankfurt release. Otherwise the component and its associated use cases/requirements will be descoped from the ONAP Frankfurt release. SECCOM will provide a proposal to the TSC on 10/31.

David McBride

Paweł Pawlak djhunt

Alla.Goldner

Stephen terrill

Hui Deng  Andy Mayer

Pamela Dragosh

El-Alto:

• Follow-up on the remaining El Alto Sign-off conditions: Release note updates and Vulnerability tables
• OOM Tagging
  • submodules have been tagged already
  • early drop was 5.0.0  public release is 5.0.1
  • Krzysztof Opasiak notes concerns raised over retagging - not a good practice
  • AGREED: aai/oom repo will be tagged as 5.0.2 but General  release note will refer to 5.0.1 - https://docs.onap.org/en/elalto/release/index.html#release-notes
    

Frankfurt:

• Collect questions/concerns from the teams
  • Any clarification required regarding Use Cases/Requirements
    • Security requirements demystification - Paweł Pawlak , Amy Zwarico 
    • S3P Frankfurt requirements - same as Dublin
      
    • Anything else? 
  • Any Resource gap identified
    • Call for Technical Support Expertise for the Documentation project
    • Call for Testers to validate Security requirements related to Portal SDK
  • Anything else?

David McBride

David McBride