Attendee-List:

• @Andreas Geißler 

• @Byung-Woo Jun

• @Shrikant.Tarale

• @Tri Nguyen

• @Jack Lucas

• @jitendra sharma

• @Viresh Navalli

Agenda

Video:

Today's topic:

• Istio TLS version

  • Is Istio/Ingress supporting TLS 1.3, tested in the new ArgoCD environment

  • https://istio.io/latest/docs/tasks/security/tls-configuration/workload-min-tls-version/

  • needs to be documented (TBD)

• ArgoCD deployment

  • 2 Parts of a gating solution:

    • Gitlab project to start a pipeline to deploy the nodes/network (terraform), create Kubernetes cluster (via kubespray), deploy ArgoCD and register Project/Applications

    • Gitlab project (later part of OOM) including the ArgoCD Application configurations for Infrastructure components (Istio, operators) and ONAP components

    • Found a number of issues during tests and fixed them:

      • https://gerrit.onap.org/r/c/oom/+/140331?usp=search (SDNC size limit)

      • https://gerrit.onap.org/r/c/oom/+/140325?usp=search (Optional jobAnnotations)

      • https://gerrit.onap.org/r/c/oom/+/140382?usp=search (Update MariaDB Operator and template, Fix SO resource limits)

      • …

• Fixes for Security Vulnerabilities

  • see

    • https://jenkins.onap.org/view/CLM/

    • https://lf-onap.atlassian.net/issues/?jql=id%20IN%20linkedIssues%28%22REQ-1592%22%29%20AND%20type%20%21%3D%20Epic%20ORDER%20BY%20summary%20%20%20&src=confmacro

    • https://lf-onap.atlassian.net/wiki/pages/viewpageattachments.action?pageId=108527673&preview=%2F108527673%2F108527782%2FMasterReportOslo_07-01-24.xlsx&search_id=8f6e7fdf-b053-45fa-8306-392aee830987&additional_analytics=queryHash---72abbf3c5dfe3b9722584009ee259852d94d550e24fd29ff11518e1f63bd2bfe

  • MultiCloud (https://lf-onap.atlassian.net/browse/MULTICLOUD-1507):

    • Fix https://gerrit.onap.org/r/c/multicloud/framework/+/140251?usp=search

    • But staging fails: https://jenkins.onap.org/view/multicloud/job/multicloud-framework-maven-docker-stage-master/

  • DCAE (https://lf-onap.atlassian.net/browse/DCAEGEN2-3414):

    •  

• PM usecases require DCAE components (@Viresh Navalli ):

  • datafile-collector (DFC)

    • patch created to remove MR dependency (https://gerrit.onap.org/r/c/dcaegen2/collectors/datafile/+/139981?usp=search)

    • Jenkins job manually triggered to create a docker image (https://jenkins.onap.org/view/dcaegen2/job/dcaegen2-collectors-datafile-maven-docker-stage-master/)

    • Release patch required (TBD)

  • pm-mapper

    • Patch required to remove the MR dependency

  • Current issues:

    • DFC uses:

      • DMAAP data-router

    • Problem:

      • DMAAP is deprecated and unmaintained and DCAE components are not deployed because of the DMaaP removal

    • possible solution (@Jack Lucas )

      • instead of re-activation of DMaaP DR

      • DFC could send the file directly to PM-Mapper

      • Possible enhancement would be a retry mechanism

      • or instead of sending the file to use an object-store as an intermediate storage between DFC and PM-Mapper

Open Jira issues:

Showing 20 out of 103 issues Refresh

 

Backlog from older meetings (to be cleaned up)

Pending component fixes:

(2023-05-03: No update)

• CDS-UI

  
  CCSDK-3814 - CDS-UI must be able to listen on HTTP Open → DT /TM has a look

  • maybe postpone to M

• SO Monitor

  
  SO-4027 - Make SO-Service-Monitor ServiceMesh compatible Open → Byung mentioned, that E/// team try to resolve the issue (Byung's note: It was assigned to Viresh Navalli, Capgemini. E/// plans to assist Viresh as needed.)
  → postpone to Montreal

• CLI will not work without fix... (

  
  OOM-3096 - [CLI] Remove AAF dependency Delivered )

• UUI - not clear if working

  • MSB issue reported:

    
    MSB-755 - The route from the MSB module to the usecase-ui module does not support HTTP Closed (helong <hwx171157@163.com>)

Helm chart cleanup:

OOM-2975 - Remove dependencies on AAF Open

(2023-05-10: No update)

• Common → Andreas

• Platform

• MSB

• VFC

Ingress enhancements for non-HTTP interfaces:

• External Kafka access → https://gerrit.onap.org/r/c/oom/+/133767

  • Doc: Test external Kafka access in London

• SDNC CallHome (SSH) → part of https://gerrit.onap.org/r/c/oom/+/133861

• Plan to update _ingress.tpl for Gateway-API support and AuthorizationPolicy

Oauth2-proxy setup (Andreas):

(2023-05-03: No update)

• Documentation: Oauth2-Proxy implementation and configuration

• Oauth2-Proxy: https://gerrit.onap.org/r/c/oom/+/130445