Attendee-List:

• @Andreas Geißler 

• @Jack Lucas 

• @Byung-Woo Jun 

• @Andrew Lamb 

• ccteng

• Louis Li

• @N.K. Shankaranarayanan 

Agenda

Video:

Today's topic:

• Currently problems in Gating (Azure cluster) → manually started in DT lab

  • Update of DT lab for Gating/Daily to 
    
    

          kubernetes_release: v1.27.5
          kubespray_version: v2.23.0s_release: v1.23.7
          helm_release: v3.13.1
    
    

          istio_release: "1.19.3"

• Discussion about project branching in Montreal

  • @Thomas Kulik Now people (projects) starting to create branches named “montreal”.
    If I have understood correctly they should name their branch “13.0.0”.
    Then we (doc) create a branch named “montreal” and “collect” all the included projects (and their docs) using the 13.0.0 branch names.
    In a later release (e.g. N) we will do the same, but using the latest version branches as provided by the projects (e.g. 14.0.0, 13.1.0, 13.0.1 …).
    I think that must be discussed in the TSC …

• RC1 tomorrow (Project Status in Montreal Release):

  • Still missing "portal-ng"

  • OOM patches currently not mergable without gating

• DB Updates:

  • Fixes for Cassandra Operator

  • Fixes for MariaDB Operator (new version)

  • New support for Postgres (https://gerrit.onap.org/r/c/oom/+/136179)

  • B&R for MDB, Cassandra

• @Byung-Woo Jun presents his draft presentation for the DDF in Budapest:
  
  

  • https://wiki.lfnetworking.org/display/LN/2023-11+-+ONAP%3A+ONAP+Streamlining+Evolution+-+Security+Enhancements+and+Strategy+for+NF+Security

  • https://wiki.lfnetworking.org/display/LN/2023-11+-+ONAP%3A+ONAP+Streamlining+Evolution+-+for+individual+ONAP+component+build+and+deployment+thru+CD 

  • Recording of SECCOM presentation: https://lf-onap.atlassian.net/wiki/download/attachments/16524308/2023-10-03_SECCOM_week.mp4?version=1&modificationDate=1696955536000&api=v2

• @Jack Lucas Looking into the SNMP trap collector

  • Remove MR dependency

  • UDP support requires the activation of the Gateway-API and UDPRoute creation

  • Gateway-API UPD support might require Update of Istio and K8S version

  • → found out, that the SNMP collector is not working since a couple of releases

    • uses old libraries for configuration and falls back to a default config and try to send events to MR on localhost...

    • started to investigate and rebuild the SNMP collector (fixing the dependencies)

Current activities:

• Correction patch for CPU limits:

  • https://gerrit.onap.org/r/c/oom/+/136308?usp=search

• AAF Certificate Fix (< London)

  •  Notes: Create AAF CA certificates

  • 1st patch: https://gerrit.onap.org/r/c/oom/+/135975?usp=search
    
    

    • asked stakeholders to check the results in their labs → If OK, we try to merge it for Kohn

  • → no further updates

• DB Update (Cassandra, MariaDB,...) OOM-3183: Update the Cassandra, MariaDB, Postgres chartsClosed

  • MariaDB-Operator

    • Update of operator version requires patch → https://gerrit.onap.org/r/c/oom/+/136153

    • correction for "service" setting in clients → https://gerrit.onap.org/r/c/oom/+/136310?usp=search

  • Cassandra operator:

    • clients to check for reaper startup → https://gerrit.onap.org/r/c/oom/+/136155?usp=search

    • TBD → maybe required HEAP size updates (see https://docs.datastax.com/en/cassandra-oss/2.1/cassandra/operations/ops_tune_jvm_c.html#ops_tune_jvm_c__tuning-the-java-heap)

• AAI

  • Performance problems detected in DT, investigations ongoing

    • patch to mane HEAP sizes configurable via helm → https://gerrit.onap.org/r/c/oom/+/136316?usp=search

• Reminder: DCAE SNMP trap collector patch for Ingress route !

• → enable gateway-api in OOM

• Reminder: contact InfoSys !!

Others:

• Describe ONAP component deployment via ArgoCD

  • create "Application" config dir in oom repo ?

Open Jira issues:

Showing 20 out of 103 issues Refresh

Backlog from older meetings (to be cleaned up)

Pending component fixes:

(2023-05-03: No update)

• CDS-UI CCSDK-3814 - CDS-UI must be able to listen on HTTP Open → DT /TM has a look

  • maybe postpone to M

• SO Monitor SO-4027 - Make SO-Service-Monitor ServiceMesh compatible Open → Byung mentioned, that E/// team try to resolve the issue (Byung's note: It was assigned to Viresh Navalli, Capgemini. E/// plans to assist Viresh as needed.)
  → postpone to Montreal

• CLI will not work without fix... ( OOM-3096 - [CLI] Remove AAF dependency Delivered )

• UUI - not clear if working

  • MSB issue reported: MSB-755 - The route from the MSB module to the usecase-ui module does not support HTTP Closed (helong <hwx171157@163.com>)

Helm chart cleanup: OOM-2975 - Remove dependencies on AAF Open

(2023-05-10: No update)

• Common → Andreas

• Platform

• MSB

• VFC

Ingress enhancements for non-HTTP interfaces:

• External Kafka access → https://gerrit.onap.org/r/c/oom/+/133767

  • Doc: Test external Kafka access in London

• SDNC CallHome (SSH) → part of https://gerrit.onap.org/r/c/oom/+/133861

• Plan to update _ingress.tpl for Gateway-API support and AuthorizationPolicy

Oauth2-proxy setup (Andreas):

(2023-05-03: No update)

• Documentation: Oauth2-Proxy implementation and configuration

• Oauth2-Proxy: https://gerrit.onap.org/r/c/oom/+/130445

• Adding Oauth2-proxy client to ONAP realm: https://gerrit.onap.org/r/c/oom/+/133699

To be started:

(2023-05-03: No update)

• Ingress template improvements:

  • OOM-3108 - Investigate to change to K8S Gateway-API Open

  • OOM-3075 - Extend the Ingress template and add Component ingress configuration Open

• Remove unused components:

  • OOM-3074 - Remove components and options from charts Open

• MariaDB:

  • OOM-3072 - Resolve and improve the existing MariaDB-Galera templates Open → DT (with TM) to investigate

• Remove NodePort in Ingress environments:

  • OOM-3012 - Remove NodePort in Service definitions under ServiceMesh In Progress → will be automatically fixed with cleanups

• UDP Ingress support:

  • UDP Nodeport support in _service-tpl OOM-3107 - Allow NodePorts for UDP services Open → can be closed

  • Possible solution: UDPRoute support in Gatway-API

Others:

(2023-05-03: No update)

• SDC Listener HTTP issue SDC-4233 - SDC Distribution Client should work with lower-case Header entries Closed → Marek provided patch → merged, need to be released and can be used in the clients

  • When released, all clients need to be updated (CDS, AAI, Policy, SO, ...)

  • Create tickets for all clients....

2023-05-31:  Discussed presentation to TSC/PTL meeting proposing a new global requirement to rely (exclusively) on service mesh mechanisms for intra-ONAP authentication and authorization (get rid of HTTP basic auth).  To be presented to TSC on 2023-06-01.