2019-10-17 DCAE Meeting Notes

 Time (est)

 Topics

 Requester/Assignee

 Notes/Links

1

Project Status

@Vijay Kumar

START RECORDING

PARTICIPANT LIST

• Release updates

  • https://lf-onap.atlassian.net/wiki/display/DW/Release+Planning#ReleasePlanning-El-AltoRelease

• Review Action Items from previous week

• Review El-Alto Earlydrop Commitments       

  Getting issues...

• Project Status in El-Alto Release

• DCAE Pair Wise Testing for El Alto Release 

• 1: El Alto Release Integration Test Blocking Issues

• INT-1296, INT-1181 (PRH to be re-released; doc updated pending required by EOW), DCAEGEN2-1754, DCAEGEN2-1793 (no new container), DCAEGEN2-1853( PRH staging job)

• El-Alto branch change from "el-alto" to "elalto"

  • "el-alto" marked as READONLY

  • "elalto" will be official ONAP branch for El-Alto release

• CSIT failures - https://jenkins.onap.org/view/dcaegen2/

  • DataFileCollector

  • HV-VES

  • VES

  • PRH  - dcaegen2-master-csit-prh-testsuites

• Documentation

  • Repo has been branched

  • Component owner to verify version/tag/blueprint reference under documentation repo ( dcaegen2)

  • Will be branched by10/07

2

El-Alto Commitments

@Vijay Kumar

Release candidate

EarlyDrop  (Code completion and artifact released by August 2, 2019) 5.0.0

Branching will be done with released component by tomorrow; master branch can be used for Frankfurt work (need minor version updated to avoid conflict with El-Alto patch/bug fixes)

Second/Final El-Alto drop 5.1.0

Docker containers that are finished to be released Aug 30

• k8s-dcae-cleanup-container

• configbindingservice (cherry picked to el-alto?)

  • only in master

Code completion and artifact released by Sep 6, 2019

Branching/tagging & new CI-job for el-alto COMPLETED for above components

Branching for following completed (same as Dublin)

 3

Frankfurt features 

@Vijay Kumar  

Review commitments for Frankfurt from DCAE standpoint

Frankfurt Release Requirements

 4

 DL Handler

 @Lingli Deng @Guobiao Mo

DL Handler advancement from POC done in Dublin

• Integration with DMaaP

• K8s integration pending

DCAEGEN2-1849: DataLake component integration with DCAEClosed

 5

Security vulnerabilities

 @Vijay Kumar

 DCAEGEN2-1808: Frankfurt Security complainceClosed

 6

VES spec 7.1.1 updates

 @alok411

Review planned updates for VES 7.1.1

AttServiceSpecification-VesEventListener-v7.1.1 - AG1 DRAFT.docx

VES Event Registration Specification 3.2.1 Draft.docx

• Impacts VES Collector to use new VES schema file (CommonEventFormat_30.1.1.json)

Provide any feedback by 10/24 to @alok411. Targeting formalize/release of VES updates by EOM; will be work with VNFSDK and Modelleing for release.

7

CBS TLS in SDK

@Piotr Wielebski

ticket: https://gerrit.onap.org/r/#/c/dcaegen2/services/sdk/+/94266/

Confluence: TLS support for CBS - Migration Plan

K8s plugin updates (DCAEGEN2-1550)

1. Cloudify deployments of service components should include following environments

2.  

   • CONFIG_BINDING_SERVICE=<cbs_k8s_service_name>

   • DCAE_CA_CERTPATH=/opt/dcae/cacert/cacert.pem  (this will be default unless overridden by component via blueprint)

   • CBS_CONFIG_URL=https://config-binding-service/service_component_all/<scn> 

     • #scn → Unique Servicecomponent name

"Library Enhancement (CBS java sdk - DCAEGEN2-1552, CBS python util - DCAEGEN2-1551)

1. Verify if the new environment setting for TLS (below) added by K8s plugin is visible within POD.

2.  

   • CONFIG_BINDING_SERVICE=<cbs_k8s_service_name>

   • DCAE_CA_CERTPATH=<path>

3. If DCAE_CA_CERTPATH is defined, use the cacert for establishing secure end-point to interface with CBS (port 10443)

   1. An optional CBS_CONFIG_URL will be exposed providing the exact URL to be used for configuration retrieval. Application/Libraries can use this URL directly instead of constructing URL from HOSTNAME (which refers to ServiceComponentName) and CONFIG_BINDING_SERVICE env's.  By default, this URL will use HTTPS CBS interface

4. If TLS env is undefined, use R4 service name and port (10000) to interface with CBS (HTTP)

Note: Libraries should stop using Consul service discovery to find CBS; instead rely on kubernetes DNS name (exposed via env CONFIG_BINDING_SERVICE) and port 10000 for HTTP and 10443 for HTTPS. Service registration on Consul will not be done for CBS TLS service"

Current implementation relies on trust.jks being available. Following options to be explored

• Option 1: Work/address issue around using cacert.pem for CBS connection (original proposal)

• Option 2: Enabled use_tls: true for all DCAE MS deployment (in blueprint) to ensure all AAF cert/trust and distributed (regardless of the MS/component being setup as server or not)

• Option 3: Modify K8s plugin to include trust.jks distribution by default along with cacert.pem

Note: Current SDK change https://gerrit.onap.org/r/#/c/dcaegen2/services/sdk/+/94266/ relies on Option#2

Docker build consistentency ( DCAEGEN2-1579)

JIRA cover broad aspect of standardizing DCAE component build process and docker tagging.

1. Nokia team proposal identifies best practice for docker tagging optimized-dockers-jvm.pdf. 

2. Following components migrated to new docker tagging best-practice

   1. PRH

   2. PM-Mapper

Need volunteer from community to support

• Standardize pom/jjb template for all dcae component (java and python)

• Plugin list alignment with oparent

• Python build dependency on script to be reduced;