• This meeting is reduced to 30 minutes
• Rotating host
  • volunteer for this week: Paweł Pawlak  / Byung-Woo Jun 

Byung-Woo Jun 

Ramesh Murugan Iyer 

Byung-Woo Jun 

• Policy-GUI deprecation is approved by TSC on July 18th 
  • Proceeding rest of the transition steps, Project State: Unmaintained 
• DMaaP DR deprecation is approved by TSC on July 25th
  • ONAPARC-805 - Getting issue details... STATUS
  • Proceeding rest of the transition steps, Project State: Unmaintained
  • The entire DMaaP will be deprecated, replaced by Kafka/Strimzi
  • https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27045 was created to remove DMaaP Jenkins job, CLM scan and sonacloud report.
  • Andreas Geißler , please remove DMaaP from OOM

Oslo task: [REQ-1592] PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASE - ONAP JIRA

Epic: https://jira.onap.org/browse/REQ-439

AAI: [AAI-3941] AAI PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR NEW DELHI RELEASE - ONAP JIRA

CCSDK: [CCSDK-4042] CCSDK PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR NEW DELHI RELEASE - ONAP JIRA

CPS: [CPS-2342] CPS PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR NEW DELHI RELEASE - ONAP JIRA

DCAE: [DCAEGEN2-3414] DCAE PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASE - ONAP JIRA

Multicloud: [MULTICLOUD-1507] MULTICLOUD PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASE - ONAP JIRA

Network Controller: [SDNC-1844] NETWORK CONTROLLER PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASE - ONAP JIRA

Policy: [POLICY-5103] POLICY PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR NEW DELHI RELEASE - ONAP JIRA

PortalNG: [PORTALNG-114] PORTALNG PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASE - ONAP JIRA

SDC: [SDC-4690] SDC PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASE - ONAP JIRA

SO: [SO-4130] SO PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASE - ONAP JIRA

UsecaseUI: [USECASEUI-840] UUI PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASE - ONAP JIRA

ONAP component mature state, Mature State Projects

Gold badging is a separate process from the project maturity in LFN?

• CPS got the gold badging
• Policy is working on it? Policy team got editing permissions for gold badging wiki pages - WIP
• What other components do we want to get the gold badging? Follow the http://tlhansen.us/onap/onap.html tool for gold badging
  • Requested the gold badging tool upgrade for: removing deprecated projects and updating editors

• Update ONAP main pages for New Delhi release (wiki.onap.org, onap.org) - Sandra Jackson 
• Submitted ticket for update 
• Lfx zoom meetings need backup owners for vacation and other occasions 

• Pending ticket opened by Marek:

  https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-25573

  • Kevin Sandi - a workaround solution will be tried;
  • Marek / Matthew - automatic building solution is needed; escalate this? Waiting for feedback from Marek 
  • Kevin/Matt/Kevin - create a ticket and try a solution (maybe Github action helps? PoC??)
  • Some action plans and updates next week
  • Kevin and Marek are working on it, testing and deployment. will report its status - 90% is working; WIP; scheduled for next week update

  Kevin: Jenkins' sandbox; security patching is working fine; downtime would be 30 mins; will notify the downtime by email to ONAP community - WIP

  Thomas Kulik - issues with Portal-NG and other documentation - 

  IT-26899 Project is not created in RTD - Kevin; found a root cause; almost done, pushed the fixes;

  Marek: Verifying of fixing; will follow up when Thomas Kulik  and Fiete Ostkamp back - next week report; related to RTD pipeline?  need further testing

  Ticket opened by Tony: IT-26848 - Tony is checking on it, still has issues; Kevin will work on it; Thomas will check; should not block any? will work; report its staus next week

  IT-27005 Removing SonarCloud reports for ONAP deprecated project (Policy GUI) - done

CISA report on memory safe code: 

• joint-guidance-exploring-memory-safety-in-critical-open-source-projects-508c.pdf, 
• The-Case-for-Memory-Safe-Roadmaps-508c.pdf
  

  
  

• Maggie (NSA; SECCOM) forwarded the NIST special publication on Service Mesh Proxy Models for Cloud-Native Applications. It is pretty good documentation on Service Mesh, Threat analysis and recommendations, https://csrc.nist.gov/pubs/sp/800/233/ipd , https://doi.org/10.6028/NIST.SP.800-233.ipd

• 2 actions:

  1. OpenSSF- add/update their guidelines; Tony
  2. Locally for ONAP: impact assessment and reviewing if there are opportunities to remove those languages.

• Added memory safe code guidance to the architecture security review template, ONAP Component Architecture Review Template

Andreas Geißler 

• CCSDK A1 controller committer permission for John Keeney; Dan Timoney will contact John Keeney and plan to promote John as a CCSDK committer. After an election for it, the result will be reported to TSC.

Andreas Geißler  

As we have no solution, we can not move to ODL Potasium.

Any Update for Oslo from Dan Timoney ?

Paweł Pawlak 

Amy Zwarico 

1. Recommended packages upgrades are available on the restricted Wiki. Jiras to be created per project. 

   • Oslo/wiki/spaces/SV/pages/16094458

   Need to check NG Portal status CLM jobs. Any update?

 - no solution for now:

• • 6/24/2021: PortalNG reports in spreadsheet on protected wiki page - New Delhi Package Updates - Security Vulnerabilities - Confluence (onap.org)

Ticket opened by Fiete: https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-26527 (ticket is closed)

• ongoing; Jessica and Fiete are discussing this.

We are missing NG Portal UI CLM job.

List of the ONAP components to be disabled prepared by Andreas: 

OOM New Delhi Release

On April 18th, TSC approved the list.

Ticket opened by Fiete for UI CLM scan: https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-26882 - not a maven based project - an issue? To be further eleborated with Jess.

• • TBD