Attendee-List:

• @Andreas Geißler 

• @Andrew Lamb 

• @Jack Lucas 

• @Marek Szwałkiewicz 

• @Mateusz Pilat 

• @Byung-Woo Jun 

• @Shrikant.Tarale 

Agenda

Video:

Open

Today's topic:

• CI/CD for open source SMO (@James Li) →

  • Slides presented:

    • Contributions - SMO - Confluence (o-ran-sc.org)

    • https://wiki.o-ran-sc.org/download/attachments/35881444/2024-1-10%20OSC%20IT-DEP%20SMO%20Deployment%20Upgrade.pdf?api=v2

  • Comments required:
    
    

    • Created page: Feedback for OOM

  • Open changes:

    • https://gerrit.o-ran-sc.org/r/c/it/dep/+/12430

    • https://gerrit.o-ran-sc.org/r/c/it/dep/+/12429

• Gating status:

  • Open: 

    • https://gerrit.onap.org/r/c/oom/+/136948 Update SDNC related images to version to 2.6.0

      • Gating failed

    • https://gerrit.onap.org/r/c/oom/+/136744 [SDNC] Version bump for Montreal

      • will be moved to NewDelhi, as it requires changes in SO,... due to deprecated API (see SDNC R12 London Architecture Review)

      • → created OOM ticket (OOM-3259: Configure charts to support the RFC 8040 SDNC APIIn Progress) and "configration" patch for API change (https://gerrit.onap.org/r/c/oom/+/136908)
        Results show problems and need to be analyzed by Dan
        Additionally DT team will have a look for needed SO changes

    • https://gerrit.onap.org/r/c/oom/+/136832 [POLICY] Update docker images to latest versions

      • not clear, if part of Montreal

      • if not → update chart version(s)

• Gateway-API

  • Gateway-API enabled in Daily/Gating pipeline

  • Add UDP route for DCAE SNMP trap collector (in https://gerrit.onap.org/r/c/oom/+/136836)

  • News: → Istio does not support UDP routing

    • possible alternative for the UDP ?

      https://github.com/nginxinc/nginx-gateway-fabric/blob/main/README.md

• @Jack Lucas Testing SNMP trap collector

  • SNMP UDP sending between pods is not working

  • currently no Istio ServiceMesh is used

  • OOM-3251: common.containerPorts template doesn't set protocolClosed _pod.tpl needs to be changed (containerPorts templates)

  • Maybe podAnnotation is required to exclude the UDP port from sidecar (example: https://git.onap.org/oom/tree/kubernetes/common/cassandra/values.yaml#n158)

• Hardening Istion with SPIRE/SPIFFE (https://blog.spiffe.io/hardening-istio-security-with-spire-d2f4f98f7a63) → need to check within DT
  Used in Nephio

• Tata (@ematpil ) install ONAP Montreal/London and made improvements
  
  

  • will show improvements Tata did and might contribute to OOM

  • Presentation shown: (Platform Customization-oom v2.pptx) .

  • → Enhancements proposed:

    • Security enhancements (e.g. Keycloak/OAuthProxy, AuthorizationPolicy,...)

    • Logging enhancements,...

Others:

• Change "bash" to "sh"

  • https://gerrit.onap.org/r/q/topic:bashisms

  • Started by Orange, but not finished

• Describe ONAP component deployment via ArgoCD

  • create "Application" config dir in oom repo ?

Open Jira issues:

Showing 20 out of 103 issues Refresh

Backlog from older meetings (to be cleaned up)

Pending component fixes:

(2023-05-03: No update)

• CDS-UI CCSDK-3814 - CDS-UI must be able to listen on HTTP Open → DT /TM has a look

  • maybe postpone to M

• SO Monitor SO-4027 - Make SO-Service-Monitor ServiceMesh compatible Open → Byung mentioned, that E/// team try to resolve the issue (Byung's note: It was assigned to Viresh Navalli, Capgemini. E/// plans to assist Viresh as needed.)
  → postpone to Montreal

• CLI will not work without fix... ( OOM-3096 - [CLI] Remove AAF dependency Delivered )

• UUI - not clear if working

  • MSB issue reported: MSB-755 - The route from the MSB module to the usecase-ui module does not support HTTP Closed (helong <hwx171157@163.com>)

Helm chart cleanup: OOM-2975 - Remove dependencies on AAF Open

(2023-05-10: No update)

• Common → Andreas

• Platform

• MSB

• VFC

Ingress enhancements for non-HTTP interfaces:

• External Kafka access → https://gerrit.onap.org/r/c/oom/+/133767

  • Doc: Test external Kafka access in London

• SDNC CallHome (SSH) → part of https://gerrit.onap.org/r/c/oom/+/133861

• Plan to update _ingress.tpl for Gateway-API support and AuthorizationPolicy

Oauth2-proxy setup (Andreas):

(2023-05-03: No update)

• Documentation: Oauth2-Proxy implementation and configuration

• Oauth2-Proxy: https://gerrit.onap.org/r/c/oom/+/130445

• Adding Oauth2-proxy client to ONAP realm: https://gerrit.onap.org/r/c/oom/+/133699

To be started:

(2023-05-03: No update)

• Ingress template improvements:

  • OOM-3108 - Investigate to change to K8S Gateway-API Open

  • OOM-3075 - Extend the Ingress template and add Component ingress configuration Open

• Remove unused components:

  • OOM-3074 - Remove components and options from charts Open

• MariaDB:

  • OOM-3072 - Resolve and improve the existing MariaDB-Galera templates Open → DT (with TM) to investigate

• Remove NodePort in Ingress environments:

  • OOM-3012 - Remove NodePort in Service definitions under ServiceMesh In Progress → will be automatically fixed with cleanups

• UDP Ingress support:

  • UDP Nodeport support in _service-tpl OOM-3107 - Allow NodePorts for UDP services Open → can be closed

  • Possible solution: UDPRoute support in Gatway-API

Others:

(2023-05-03: No update)

• SDC Listener HTTP issue SDC-4233 - SDC Distribution Client should work with lower-case Header entries Closed → Marek provided patch → merged, need to be released and can be used in the clients

  • When released, all clients need to be updated (CDS, AAI, Policy, SO, ...)

  • Create tickets for all clients....

2023-05-31:  Discussed presentation to TSC/PTL meeting proposing a new global requirement to rely (exclusively) on service mesh mechanisms for intra-ONAP authentication and authorization (get rid of HTTP basic auth).  To be presented to TSC on 2023-06-01.