- CONTINUATION OF PACKAGES UPGRADES IN DIRECT DEPENDENCIES (REQ-439)
- COMPLETION OF JAVA LANGUAGE UPDATE (v8 → v11) (REQ-438)
- COMPLETION OF PYTHON LANGUAGE UPDATE (v2.7 → v3.8) (REQ-437)
- LOGS MANAGEMENT - PHASE 1: COMMON PLACE FOR DATA (REQ-441)
- COMPLETION OF HELM MIGRATION (v2 → v3) (REQ-442)
- CONTINUATION OF CII BADGING SCORE IMPROVEMENTS FOR SILVER LEVEL (REQ-443)
- Support for the Multi Tenancy in ONAP (REQ-463)
- Identification of events that compromise the ONAP system (REQ-464)
CONTINUATION OF PACKAGES UPGRADES IN DIRECT DEPENDENCIES (REQ-xxx)
R9 PRESENTATION:
| ITEM | DETAILS |
| R9 Presentation | |
| Recording mp4 | |
| Audio only |
Key Contacts - Paweł Pawlak Amy Zwarico
Executive Summary - All ONAP projects shall continue their efforts to reduce the risks associated with software vulnerabilities in the ONAP code base by upgrading all outdated, vulnerable direct dependencies in their code bases following the recommendations of SECCOM. The project and repo specific recommendations are provided in the Security Vulnerability space for Honolulu release.
Business Impact - Improves the security posture of ONAP.
Business Markets - All operators and service providers can leverage the of fewer vulnerabilities in the open source dependencies in ONAP
Funding/Financial Impacts - N/A
Organization Mgmt, Sales Strategies -There is no additional organizational management or sales strategies for this requirement outside of a service providers "normal" ONAP deployment and its attendant organizational resources from a service provider.
COMPLETION OF JAVA LANGUAGE UPDATE (v8 → v11) (REQ-xxx)
R9 PRESENTATION:
| ITEM | DETAILS |
| R9 Presentation | |
| Recording mp4 | |
| Audio only |
Key Contacts - Amy Zwarico Paweł Pawlak
Executive Summary - All remaining ONAP projects that received exception approval in Honolulu release for using java v8 shall reduce the risks associated with no regular support for java v8 software as it causes increase of usage risk, as recommended by SECCOM. Continuation of REQ-351. and REQ-438
Business Impact - Improves the security posture of ONAP.
Business Markets - All operators, service providers and entities using ONAP.
Funding/Financial Impacts - N/A
Organization Mgmt, Sales Strategies -There is no additional organizational management or sales strategies for this requirement outside of a service providers "normal" ONAP deployment and its attendant organizational resources from a service provider.
COMPLETION OF PYTHON LANGUAGE UPDATE (v2.7 → v3.8) (REQ-xxx)
R9 PRESENTATION:
| ITEM | DETAILS |
| R9 Presentation | |
| Recording mp4 | |
| Audio only |
Key Contacts - Amy Zwarico Paweł Pawlak
Executive Summary - All remaining ONAP projectsthat received exception approval in Honolulu release using Python shall reduce the risks associated with no community support for Python 2.7 software as it causes increase of usage risk, as recommended by SECCOM. Continuation of REQ-373 and REQ-437.
Business Impact - Improves the security posture of ONAP.
Business Markets - All operators, service providers and entities using ONAP.
Funding/Financial Impacts - N/A
Organization Mgmt, Sales Strategies -There is no additional organizational management or sales strategies for this requirement outside of a service providers "normal" ONAP deployment and its attendant organizational resources from a service provider.
LOGS MANAGEMENT - PHASE 1: COMMON PLACE FOR DATA (REQ-441)
R8 PRESENTATION:
| ITEM | DETAILS |
| R8 Presentation | |
| Recording mp4 | |
| Audio only |
Key Contacts - rouzaut Amy Zwarico Paweł Pawlak
Executive Summary - All ONAP applications should generate logs that can be collected by Kubernetes.
Business Impact - Improves the security posture of ONAP.
Business Markets - All operators, service providers and entities using ONAP.
Funding/Financial Impacts - N/A
Organization Mgmt, Sales Strategies -There is no additional organizational management or sales strategies for this requirement outside of a service providers "normal" ONAP deployment and its attendant organizational resources from a service provider.
CONTINUATION OF CII BADGING SCORE IMPROVEMENTS FOR SILVER LEVEL (REQ-xxx)
Key Contacts - Tony Hansen Amy Zwarico Paweł Pawlak
Executive Summary - ONAP project will provide their feedback for the Application Security questions:
- Crypto Credentials Agility – ½ od apps in met and almost half not yet answered
- Implement Secure Design – 1/3 of projects did not answer
- Crypto Weaknesses – tests to be applied (3 including Morgan)
Projects that have already answered this question positively, should verify that the answer is still correct.
Continuation of REQ-350. and REQ-443.
Business Impact - Improves the security posture of ONAP by lessening the risk.
Business Markets - All operators and service provider.
Funding/Financial Impacts - N/A
Organization Mgmt, Sales Strategies -There is no additional organizational management or sales strategies for this requirement outside of a service providers "normal" ONAP deployment and its attendant organizational resources from a service provider.