Attendee-List:
- Andreas Geißler
- Andrew Lamb
- Jack Lucas
- Marek Szwałkiewicz
- Mateusz Pilat
- Byung-Woo Jun
- Shrikant.Tarale
Agenda
Video:
Today's topic:
- CI/CD for open source SMO (James Li) →
- Comments required:
- Created page: Feedback for OOM
- Additional :
- Comments required:
- Keycloak/Oauth2Proxy/Realm
- Update of Keycloak version - OOM-3267Getting issue details... STATUS
- Update of Oauth2Proxy version (7.5.1) and update of configuration (check with Mateusz Pilat ):
-
OOM-3268Getting issue details...
STATUS
- Received charts for "authentication" creating:
- Keycloak deployment
- Realm creation for keycloak
- Oauth2 setup and configuration incl. Redis setup
- Received charts for "authentication" creating:
- SDNC API update
- today we had a meeting with Dan and Sanket to discuss the required changes for SO
- result: both SDNC and SO need to be upgraded as selflink attributes in SDNC are hardcoded
- Strimzi/Kafka Update
- Currently testing strimzi-operator update and Kafka update 3.4.0→3.6.x
- Possibly the MR is not compatible with a new Kafka version
- I checked with Fiachra Corcoran , he thinks Lifeness/Readiness probes
- DMaaP removal, components updates
- DCAE:
- dcae-ves-collector → https://gerrit.onap.org/r/c/oom/+/137002?usp=search code: https://git.onap.org/dcaegen2/collectors/ves/commit/?id=47195e4ac559963cd33dc155f219bd2b127ef025
- dcae-prh → Gating planned, https://gerrit.onap.org/r/c/oom/+/137153
- dcae-pmsh
- dcae-tcagen2
- dcae-son-handler
- dcae-slice-analysis-ms
- dcae-heartbeat
- dcae-kpi-ms
- dcae-datafile-collector
- dcae-snmptrap-collector
- (UPDATE info by DT) So there is a DCAE SDK for interaction with DMaaP.
We have changed the implementation of that SDK to talk to Kafka directly.
This new SDK is now used in VES collector and PRH services.
If other services are using the SDK to talk to DMaaP, they can use this new version now.
We have updated documentation of this SDK as well.https://docs.onap.org/projects/onap-dcaegen2/en/latest/sections/sdk/apis.html
- NBI → planned by DT
- AAI-resources → planned by DT
- SO-bpmn-infra → planned by DT
- SDC-BE → to be checked why still connecting to MR
- Michael Morris :
From SDC point of view yes, but for any components subscribing to the messages (using sdc-distribution-client or their own implementation)
then they will need to be updated to new kafka based version of sdc-distribution-client (2.0.1) or update their own impl if not using the sdc-distribution-client
sdc-BE and sdc-distibution-client were both updated to support using either DMaaP or kafka.
- Michael Morris :
- Policy
- apex-pdp
- xacml-pdp
- apew-pdp
- SDNC
- dmaap-listener
- Holmes
- DCAE:
- DB Operators:
- Postgres-operator → https://gerrit.onap.org/r/c/oom/+/136179?usp=search
- needed patches for CPS, Multicloud, UUI
- MongoDB → TBD https://gerrit.onap.org/r/c/oom/+/136873?usp=search
- Postgres-operator → https://gerrit.onap.org/r/c/oom/+/136179?usp=search
- Hardening Istio with SPIRE/SPIFFE (https://blog.spiffe.io/hardening-istio-security-with-spire-d2f4f98f7a63) → need to check within DT
Used in Nephio - Tata (ematpil ) install ONAP Montreal/London and made improvements
- will show improvements Tata did and might contribute to OOM
- Presentation shown: (Platform Customization-oom v2.pptx) .
- → Enhancements proposed:
- Security enhancements (e.g. Keycloak/OAuthProxy, AuthorizationPolicy,...)
- Logging enhancements,...
Others:
- Change "bash" to "sh"
- https://gerrit.onap.org/r/q/topic:bashisms
- Started by Orange, but not finished
- Describe ONAP component deployment via ArgoCD
- create "Application" config dir in oom repo ?
Open Jira issues:
T | Key | Summary | Assignee | Reporter | P | Status | Resolution | Created | Updated | Due |
---|---|---|---|---|---|---|---|---|---|---|
OOM-3172 | [Common] rendering issue of template "common.nginxIngress" | Alexander Dehn | Alexander Dehn | In Progress | Unresolved | Apr 27, 2023 | Apr 27, 2023 | |||
OOM-3171 | service-mesh-wait-for-job-container fails, when no sidecar exists | Andreas Geissler | Andreas Geissler | Open | Unresolved | Apr 27, 2023 | Apr 27, 2023 | |||
OOM-3170 | [SDNC] Support kafka native interface | Alexander Dehn | Alexander Dehn | In Progress | Unresolved | Apr 25, 2023 | Apr 26, 2023 | |||
OOM-3169 | For SDNC setup consider new Websocketport | Alexander Dehn | Herbert Eiselt | In Progress | Unresolved | Apr 24, 2023 | Apr 27, 2023 | |||
OOM-3168 | Introduce cassandra-operator to OOM | Andreas Geissler | Andreas Geissler | Open | Unresolved | Apr 24, 2023 | Apr 24, 2023 | |||
OOM-3167 | DOC: change the plugin installation instructions | Marek Szwałkiewicz | Marek Szwałkiewicz | Open | Unresolved | Apr 24, 2023 | Apr 24, 2023 | |||
OOM-3166 | Kiali Validation - KIA0601 - Port name must follow [-suffix] form | Fiete Ostkamp | Fiete Ostkamp | In Progress | Unresolved | Apr 19, 2023 | Apr 19, 2023 | |||
OOM-3165 | Policy-gui Ingress target is wrong | Andreas Geissler | Andreas Geissler | Open | Unresolved | Apr 19, 2023 | Apr 19, 2023 | |||
OOM-3162 | Update Strimzi Operator to 0.34.0 and Kafka to 3.4.3 | Fiachra Corcoran | Andreas Geissler | Open | Unresolved | Apr 13, 2023 | Apr 13, 2023 | |||
OOM-3161 | [COMMON] Add monitoring to postgres | Miroslav Masaryk | Miroslav Masaryk | Open | Unresolved | Apr 12, 2023 | Apr 13, 2023 | |||
OOM-3159 | Update OOM documentation | Andreas Geissler | Andreas Geissler | Open | Unresolved | Mar 31, 2023 | Apr 13, 2023 | |||
OOM-3155 | Review license scan issues | Andreas Geissler | David McBride | In Progress | Unresolved | Mar 30, 2023 | Apr 26, 2023 | |||
OOM-3153 | Feature Freeze | Andreas Geissler | David McBride | Open | Unresolved | Mar 30, 2023 | Mar 30, 2023 | Mar 23, 2023 | ||
OOM-3151 | Improve stability in Daily Master Deployments | Andreas Geissler | Andreas Geissler | Open | Unresolved | Mar 21, 2023 | Mar 21, 2023 | |||
OOM-3149 | The chartmuseum binary download URL not working in OOM deployment | Andreas Geissler | Sankar Palanivel | Open | Unresolved | Mar 09, 2023 | Apr 13, 2023 | |||
OOM-3147 | Create authorization policy for platform | Unassigned | Andrew Lamb | Open | Unresolved | Mar 06, 2023 | Mar 08, 2023 | |||
OOM-3146 | Create authorization policy for Holmes | Unassigned | Andrew Lamb | Open | Unresolved | Mar 06, 2023 | Mar 08, 2023 | |||
OOM-3145 | Create authorization policy for CPS | Unassigned | Andrew Lamb | Open | Unresolved | Mar 06, 2023 | Mar 08, 2023 | |||
OOM-3144 | Create authorization policy for Cassandra | Unassigned | Andrew Lamb | Open | Unresolved | Mar 06, 2023 | Mar 08, 2023 | |||
OOM-3143 | Create authorization policy for Consul | Unassigned | Andrew Lamb | Open | Unresolved | Mar 06, 2023 | Mar 08, 2023 |
Showing 20 out of 103 issues Refresh
Backlog from older meetings (to be cleaned up)
Pending component fixes:
(2023-05-03: No update)
- CDS-UI - CCSDK-3814CDS-UI must be able to listen on HTTP Open → DT /TM has a look
- maybe postpone to M
- SO Monitor - SO-4027Make SO-Service-Monitor ServiceMesh compatible Open → Byung mentioned, that E/// team try to resolve the issue (Byung's note: It was assigned to Viresh Navalli, Capgemini. E/// plans to assist Viresh as needed.)
→ postpone to Montreal - CLI will not work without fix... ( - OOM-3096[CLI] Remove AAF dependency Delivered )
- UUI - not clear if working
Helm chart cleanup: - OOM-2975Remove dependencies on AAF Open
(2023-05-10: No update)
- Common → Andreas
- Platform
- MSB
- VFC
Ingress enhancements for non-HTTP interfaces:
- External Kafka access → https://gerrit.onap.org/r/c/oom/+/133767
- SDNC CallHome (SSH) → part of https://gerrit.onap.org/r/c/oom/+/133861
- Plan to update _ingress.tpl for Gateway-API support and AuthorizationPolicy
Oauth2-proxy setup (Andreas):
(2023-05-03: No update)
- Documentation: Oauth2-Proxy implementation and configuration
- Oauth2-Proxy: https://gerrit.onap.org/r/c/oom/+/130445
- Adding Oauth2-proxy client to ONAP realm: https://gerrit.onap.org/r/c/oom/+/133699
To be started:
(2023-05-03: No update)
- Ingress template improvements:
- Remove unused components:
- MariaDB:
- Remove NodePort in Ingress environments:
- UDP Ingress support:
Others:
(2023-05-03: No update)
- SDC Listener HTTP issue - SDC-4233SDC Distribution Client should work with lower-case Header entries Closed → Marek provided patch → merged, need to be released and can be used in the clients
- When released, all clients need to be updated (CDS, AAI, Policy, SO, ...)
- Create tickets for all clients....
2023-05-31: Discussed presentation to TSC/PTL meeting proposing a new global requirement to rely (exclusively) on service mesh mechanisms for intra-ONAP authentication and authorization (get rid of HTTP basic auth). To be presented to TSC on 2023-06-01.