Attendee-List:

• @Andreas Geißler 

• @Byung-Woo Jun

• @Shrikant.Tarale

• @Tri Nguyen

• @Jack Lucas

• @jitendra sharma

• @Viresh Navalli

Agenda

Video:

Today's topic:

• OOM Oslo release

  • Chart versions have to be fixed (https://gerrit.onap.org/r/c/oom/+/140114?usp=search)

• Istio TLS version

  • Is Istio/Ingress supporting TLS 1.3 ?

  • https://istio.io/latest/docs/tasks/security/tls-configuration/workload-min-tls-version/

• ArgoCD deployment

  • Taken over work from @Marek Szwałkiewicz

  • Start modifications…

  • 2 Parts of a gating solution:

    • Gitlab project to start a pipeline to deploy the nodes/network (terraform), create Kubernetes cluster (via kubespray), deploy ArgoCD and register Project/Applications

    • Gitlab project (later part of OOM) including the ArgoCD Application configurations for Infrastructure components (Istio, operators) and ONAP components

• PM usecases require DCAE components (@Viresh Navalli ):

  • datafile-collector (DFC)

    • patch created to remove MR dependency (https://gerrit.onap.org/r/c/dcaegen2/collectors/datafile/+/139981?usp=search)

    • Jenkins job manually triggered to create a docker image (https://jenkins.onap.org/view/dcaegen2/job/dcaegen2-collectors-datafile-maven-docker-stage-master/)

    • Release patch required (TBD)

  • pm-mapper

    • Patch required to remove the MR dependency

  • Current issues:

    • DFC uses:

      • DMAAP data-router

    • Problem:

      • DMAAP is deprecated and unmaintained and DCAE components are not deployed because of the DMaaP removal

    • possible solution (@Jack Lucas )

      • instead of re-activation of DMaaP DR

      • DFC could send the file directly to PM-Mapper

      • Possible enhancement would be a retry mechanism

      • or instead of sending the file to use an object-store as an intermediate storage between DFC and PM-Mapper

Open Jira issues:

Showing 20 out of 103 issues Refresh

Backlog from older meetings (to be cleaned up)

Pending component fixes:

(2023-05-03: No update)

• CDS-UI CCSDK-3814 - CDS-UI must be able to listen on HTTP Open → DT /TM has a look

  • maybe postpone to M

• SO Monitor SO-4027 - Make SO-Service-Monitor ServiceMesh compatible Open → Byung mentioned, that E/// team try to resolve the issue (Byung's note: It was assigned to Viresh Navalli, Capgemini. E/// plans to assist Viresh as needed.)
  → postpone to Montreal

• CLI will not work without fix... ( OOM-3096 - [CLI] Remove AAF dependency Delivered )

• UUI - not clear if working

  • MSB issue reported: MSB-755 - The route from the MSB module to the usecase-ui module does not support HTTP Closed (helong <hwx171157@163.com>)

Helm chart cleanup: OOM-2975 - Remove dependencies on AAF Open

(2023-05-10: No update)

• Common → Andreas

• Platform

• MSB

• VFC

Ingress enhancements for non-HTTP interfaces:

• External Kafka access → https://gerrit.onap.org/r/c/oom/+/133767

  • Doc: Test external Kafka access in London

• SDNC CallHome (SSH) → part of https://gerrit.onap.org/r/c/oom/+/133861

• Plan to update _ingress.tpl for Gateway-API support and AuthorizationPolicy

Oauth2-proxy setup (Andreas):

(2023-05-03: No update)

• Documentation: Oauth2-Proxy implementation and configuration

• Oauth2-Proxy: https://gerrit.onap.org/r/c/oom/+/130445

• Adding Oauth2-proxy client to ONAP realm: https://gerrit.onap.org/r/c/oom/+/133699

To be started:

(2023-05-03: No update)

• Ingress template improvements:

  • OOM-3108 - Investigate to change to K8S Gateway-API Open

  • OOM-3075 - Extend the Ingress template and add Component ingress configuration Open

• Remove unused components:

  • OOM-3074 - Remove components and options from charts Open

• MariaDB:

  • OOM-3072 - Resolve and improve the existing MariaDB-Galera templates Open → DT (with TM) to investigate

• Remove NodePort in Ingress environments:

  • OOM-3012 - Remove NodePort in Service definitions under ServiceMesh In Progress → will be automatically fixed with cleanups

• UDP Ingress support:

  • UDP Nodeport support in _service-tpl OOM-3107 - Allow NodePorts for UDP services Open → can be closed

  • Possible solution: UDPRoute support in Gatway-API

Others:

(2023-05-03: No update)

• SDC Listener HTTP issue SDC-4233 - SDC Distribution Client should work with lower-case Header entries Closed → Marek provided patch → merged, need to be released and can be used in the clients

  • When released, all clients need to be updated (CDS, AAI, Policy, SO, ...)

  • Create tickets for all clients....

2023-05-31:  Discussed presentation to TSC/PTL meeting proposing a new global requirement to rely (exclusively) on service mesh mechanisms for intra-ONAP authentication and authorization (get rid of HTTP basic auth).  To be presented to TSC on 2023-06-01.