2022-02-08 DCAE Meeting Notes

S.NO

 Time (est)

 Topics

 Requester/Assignee

 Notes/Links

Note to Moderator

START RECORDING

PARTICIPANT LIST

Istanbul Maintenance release

@Vijay Kumar 

DCAEGEN2-3022 - Log4j vulnerability (2.0-beta9 to 2.14.1)

• https://www.helpnetsecurity.com/2021/12/13/log4shell-update-cve-2021-44228/

• https://www.kaspersky.com/blog/log4shell-critical-vulnerability-in-apache-log4j/43124/

• https://logging.apache.org/log4j/2.x/security.html

Recommendation from SECCOM was 2.16.0 in December; new CVE has been identified and  2.17.1 is the new target recommended version for now*

02/08/22 - Istanbul patch (https://gerrit.onap.org/r/c/oom/+/126806) under review (pending successful gating); new TSC signoff targetted 2/17

02/01/22 - Gerrit submission for OOM/doc pending to be reviewed/merged; TSC targetting 2/10 sign-off

01/25/22 - OOM merge pending ; cherry-pick oom/istanbul. Doc for maintenance rls will be done this week (will include log4j & son-handler)

01/20/22 - All impacted component updated to 2.17.1 and released; OOM update pending

01/04/22 - Upgrade impacted DCAE components to 2.17.1 once SECCOM/TSC confirms 

12/17/21 - VESCollector, RESTConf, VES-Mapper impacted; new containers released using 2.16.0

Jakarata Release Updates

@Vijay Kumar 

Completed

• Release Planning: Jakarta

• R10 M1 -DCAEGEN2-2979 -  Rescheduled to 12/09/2021 

• ARC - ONAPARC-724 (Scheduled for 01/25/2022)

• R10 M2 - DCAEGEN2-3009  (01/27/2022) (02/03/2022)

• DCAE R10 Jakarta M2 Release Planning   

• Jakarta Impact View per Component

Ongoing

• DCAE R10 Vulnerability - SECCOM Report (DCAEGEN2-3006)

• R10 M3 - DCAEGEN2-3070  (03/03/2022)

Jakarata - Helm migration 

@Vijay Kumar 

Discuss DCAE transformation planned items for J release - DCAEGEN2-2773

Priorities

• Switch components to latest SDK version (DCAEGEN2-2890) blocks DCAEGEN2-2968/DCAEGEN2-3002 (CBS removal) 

  •  Holmes - DONE; RESTConf in-progress, PM-Mapper  - DONE

• OOM charts updates to disable Cloudify/handlers (CBS may be exception depending on above item)

  • Iteration 1 (once OOM branching is done)- Disable all cloudify/handlers under dcaegen2 

  • Iteration 2 (M3/Jakarta)- Move VESOpenAPI to dcaegen2-services 

  • Iteration 3 - Remove/move CBS 

• Integration testsuite migration

  • @Krzysztof Kuzmicki  update as of 1/18 

    • Bulk-PM testsuite almost ready for re-enabled in gating (to be worked with Morgan/Michal)

    • CMPv2 will be next followed by DCAE-MOD

• Helm flow support through MOD 

• DMaap Provisioning optimization

  • DR Pub/sub credential handling alignment - OKAY to proceed 

  • Topic/Feed cleanup on undeploy

    • Topic cleanup to be split into separate Jira and assessed later ; Feed cleanup OKAY to proceed. (Impacted by AAF removal, Strimzi Operator introduction)

• Configuration update through Configmap 

  • @Jack Lucas  will review the solution options for  DCAEGEN2-2935

    • Solution options discussed (as documented in jira); will be reviewed with OOM team and option narrowed down for implementation by next week

    • Generic configmap based update for DCAE not blocking Jakarta; will be deferred to K release and addressed under OOM possibly

To Do 

• dcaegen2/deployment - updated to remove CM container build  - DONE

• BBS-Eventprocessor (dcaegen2/services) - Builds and sub-component repo will be removed post ARC meeting/review (M2). 

  • Once approved by ARC - need buld jobs and corresponding helm-charts removed/disabled.

• Documentation update for DCAE deployment and MOD setup

• JIRA for migrating current DFC testsuites to use configmap (instead of Consul)  - INT-2074: BulkPM testsuite updates to switch from using ConsulOpen

Topics/Demos' for future meetings

<Topics can be added below by presenters as they are ready>

@Vijay Kumar

NA

@Tony Hansen

NA

@Jack Lucas

NA

@Former user (Deleted)

NA

@Former user (Deleted)

NA

@Former user (Deleted)

NA

@Niranjana Y 

NA