2022-02-01 DCAE Meeting Notes

S.NO

 Time (est)

 Topics

 Requester/Assignee

 Notes/Links

Note to Moderator

START RECORDING

PARTICIPANT LIST

Istanbul Maintenance release

@Vijay Kumar 

DCAEGEN2-3022 - Log4j vulnerability (2.0-beta9 to 2.14.1)

• https://www.helpnetsecurity.com/2021/12/13/log4shell-update-cve-2021-44228/

• https://www.kaspersky.com/blog/log4shell-critical-vulnerability-in-apache-log4j/43124/

• https://logging.apache.org/log4j/2.x/security.html

Recommendation from SECCOM was 2.16.0 in December; new CVE has been identified and  2.17.1 is the new target recommended version for now*

02/01/22 - Gerrit submission for OOM/doc pending to be reviewed/merged; TSC targetting 2/10 sign-off

01/25/22 - OOM merge pending ; cherry-pick oom/istanbul. Doc for maintenance rls will be done this week (will include log4j & son-handler)

01/20/22 - All impacted component updated to 2.17.1 and released; OOM update pending

01/04/22 - Upgrade impacted DCAE components to 2.17.1 once SECCOM/TSC confirms 

12/17/21 - VESCollector, RESTConf, VES-Mapper impacted; new containers released using 2.16.0

Jakarata Release Updates

@Vijay Kumar 

Completed

• Release Planning: Jakarta

• R10 M1 -DCAEGEN2-2979 -  Rescheduled to 12/09/2021 

• ARC - ONAPARC-724 (Scheduled for 01/25/2022)

Ongoing

• R10 M2 - DCAEGEN2-3009  (01/27/2022) (02/03/2022)

• DCAE R10 Jakarta M2 Release Planning   

• Jakarta Impact View per Component

• DCAE R10 Vulnerability - SECCOM Report (DCAEGEN2-3006)

Jakarata - Helm migration 

@Vijay Kumar 

Discuss DCAE transformation planned items for J release - DCAEGEN2-2773

Priorities

• Switch components to latest SDK version (DCAEGEN2-2890) blocks DCAEGEN2-2968/DCAEGEN2-3002 (CBS removal) 

  •  Holmes completed; RESTConf in-progress, PM-Mapper - in-progress   

• OOM charts updates to disable Cloudify/handlers (CBS may be exception depending on above item)

  • Iteration 1 (once OOM branching is done)- Disable all cloudify/handlers under dcaegen2 

  • Iteration 2 (M3/Jakarta)- Move VESOpenAPI to dcaegen2-services 

  • Iteration 3 - Remove/move CBS 

• Integration testsuite migration

  • @Krzysztof Kuzmicki  update as of 1/18 

    • Bulk-PM testsuite almost ready for re-enabled in gating (to be worked with Morgan/Michal)

    • CMPv2 will be next followed by DCAE-MOD

• Helm flow support through MOD 

• DMaap Provisioning optimization

  • DR Pub/sub credential handling alignment - OKAY to proceed 

  • Topic/Feed cleanup on undeploy

    • Topic cleanup to be split into separate Jira and assessed later ; Feed cleanup OKAY to proceed. (Impacted by AAF removal, Strimzi Operator introduction)

• Configuration update through Configmap 

  • @Jack Lucas  will review the solution options for  DCAEGEN2-2935

    • Solution options discussed (as documented in jira); will be reviewed with OOM team and option narrowed down for implementation by next week

To Do 

• dcaegen2/deployment - updated to remove CM container build  - DONE

• BBS-Eventprocessor (dcaegen2/services) - Builds and sub-component repo will be removed post ARC meeting/review (M2). 

  • Once approved by ARC - need buld jobs and corresponding helm-charts removed/disabled.

• Documentation update for DCAE deployment and MOD setup

DIscuss PM-Mapper switch to use unauthenticated topic for below items.

• Multiple subscriber issue (DCAEGEN2-2937)

• Dmaap/Strimzi migration

• Servicemesh compliancy

@Vijay Kumar 

EPIC DCAEGEN2-3031 created to track this update for J release

Dependent on DCAEGEN2-3032 (PM-Mapper) -  @Former user (Deleted) / @Former user (Deleted)/Nokia Team (Commited for Jakarta); change in gerrit for review

Once delivered, KPI-MS/Slice-Analysis/SON-handler to be updated 

Servicemesh Compatibility for DCAE MS

@Vijay Kumar 

EPIC DCAEGEN2-3037 created for tracking DCAE impact; currently marked as "Stretch-Goal" for J 

Analysis for all DCAE services captured here - DCAE Services Component - Service Mesh Compatibility

• Component owners to review findings and support non-TLS mode as config + startup without dependency on AAF cert

Need volunteers to support 

SECCOM update

@Tony Hansen 

Security review to be done (needed every 5 year) across ONAP project; SECCOM will share proposal and projects impacts in coming weeks.

Topics/Demos' for future meetings

<Topics can be added below by presenters as they are ready>

@Vijay Kumar

NA

@Tony Hansen

NA

@Jack Lucas

NA

@Former user (Deleted)

NA

@Former user (Deleted)

NA

@Former user (Deleted)

NA

@Niranjana Y 

NA