2021-01-12 Security Subcommittee Meeting Notes

Please find below the Minutes of Meetings and recording for the SECCOM meeting that was held on 12th of January 2021.

Jira No

Summary

Description

Status

Solution

Jira No

Summary

Description

Status

Solution

 

SECCOM global requirements

#AGREED The TSC approves REQ-437 (Python 2 -> 3) and REQ-438 (Java 8 -> 11) as Global Requirements beginning with the Honolulu release.

-Exception process – TSC involvement (with +2 acceptance)

done

 

 

SECCOM best practices

HELMv3

CII Badging

Packages upgrades

 

 

 

Last PTL session – was in fact a TSC session

Discussion on global requirements and best practices for Honolulu

done

 

 

LFN Developer & Testing Forum - Feb 1 - 4, 2021.

Please register (Registration)

SECCOM proposals:

  • Global requirements and DCAE testimony on Java migration

  • Packages upgrades – Focus on most commonly used packages

  • CII Badging – 3 items: additional verification test for crypto weakness (integration team to be addressed), crypto credentials, secure design

  • Service Mesh update (TBC with Krzysztof)?

ongoing

Please propose topics by 15th of January (Proposals Page)

 

Synch with DCAE

Special guest star: Vijay joined us.

  • DCAE jiras review:

Python: DCAEGEN2-2494, DCAEGEN2-2427

Java: DCAEGEN2-2428, DCAEGEN2-2381

ongoing

Michal to be confirmed to support DCAE Python migrations

 

ONAP and ODL synch

Need to exchange with Dan – which ODL version is considered.

ongoing

E-mail to be sent to Dan. 

 

OUR NEXT SECCOM MEETING CALL WILL BE HELD ON 19th OF JANUARY'21. 

 

 

 

Recording:

 

SECCOM presentation: