OOF 2018-02-26 Meeting Notes

Date: Feb 26, 2018

Agenda:

LF toolchain updates:
- verify/merge jobs are running fine
- Nexus artifacts
- Sonar
- CLM: something specific to the pom dependencies
Functional testing updates
- Dockerization of HAS
- Dockerization of OSDF
Unit tests coverage:
- OSDF
- HAS
API:
- Northbound SO/OOF API
- Swagger

Time	Item	Who	Notes

Item	Who	Notes
Need a pre git review mechanism to see diff	Ikram, Sastry	Request from Ikram: Need a mechanism to see diff before sending a git review. Something like codecloud branch interface. Suggestion: We can use git diff or GUI clients (https://www.slant.co/topics/1324/~diff-tools-for-git). Other option is to mirror the repo in a local instance and use that for diff viewing. In most cases, git review is a reasonable place.
Security issues from code scan	Shankar, Ikram, Pam, Sastry	There are errors with packages such as junit and such. We need to "fix" them. However, these are packages that are not pulled into the project at all (they are dependencies from pom.xml files used for testing).
Functional testing process (M3 deadline)	Shankar, Leonardo, Ramki, Ikram, Sastry, Pam	OOF-HAS relies on Music heavily, so functional tests with it require Music to be spun up. Approaches considered are (a) mocking, (b) running Music internally, and (c) mock functionality via some simple messaging queue system. Option (c) is ruled out for now. Leaning towards (c).
Policy operators	Srini, Ankit	Need to support more operators (e.g. range). We may also have parallel developments towards supporting 'general expressions'. Also, clamp project has complex policies. Ankit will add policy examples soon since HPA folks need them soon.

@dr_patel_an: Add policy examples for operations such as `range`

@Ikram Ikramullah (and others can too): Follow up on code scan security issues

@Shankaranarayanan Puzhavakath Narayanan: Converge on how Music will be used in functional testing (docker, vs mocking REST calls)

@Sastry Isukapalli: Move old pending here