OOM Meeting Notes - 2024-04-17
Attendee-List:
@Andreas Geißler
@Andrew Lamb
@Jack Lucas
@Marek Szwałkiewicz
@Mateusz Pilat
@Byung-Woo Jun
@Shrikant.Tarale
Agenda
Video:
Today's topic:
Proposal for ONAP component disabling: OOM New Delhi Release
Update of New Delhi Key Updates: New Delhi Release Key Updates
Logging improvement proposal (TCL) @Mateusz Pilat
All components have to log to STDOUT
They should use a common format (JSON struct) with defined attributes (example: https://git.onap.org/oom/tree/kubernetes/cps/components/cps-core/resources/config/logback-spring.xml)
A list will be provided for the required changes in components
Presentation next week in the TSC
Patches:
Readiness is updated, as it did not support services without "Selector"
https://gerrit.onap.org/r/c/oom/readiness/+/137651?usp=search
Created new release 6.0.3 (https://gerrit.onap.org/r/c/oom/readiness/+/137657?usp=search)
Patch to update the OOM charts to use 6.0.3 and the "service" option https://gerrit.onap.org/r/c/oom/+/137672?usp=search
DB Operators
Add mongodb-init chart to be added (TBD)
ONAP Streamlining
Patch for imagePullSecret: https://gerrit.onap.org/r/c/oom/+/137537
Chart restructuring
Move DGBuilder and network-name-gen under SDNC (https://gerrit.onap.org/r/c/oom/+/137663?usp=search)
Platform Updates
K8S version update to 1.18.6 (later 1.29.x)
Istio (1.21.0)
Strimzi + Kafka https://gerrit.onap.org/r/c/oom/+/137184?usp=search
Documenting Infrastructure changes: https://gerrit.onap.org/r/c/oom/+/137636?usp=search (WIP)
Make ONAP production ready, Epic: https://lf-onap.atlassian.net/browse/OOM-3288
Charts have host paths mounted (etc. /etc/localtime), which conflicts with common policies (at least in DT)
we need to check the OOM charts and remove these paths, if possible
e.g. https://gerrit.onap.org/r/c/oom/+/137479?usp=search (AAI)
Removed entries: https://gerrit.onap.org/r/c/oom/+/137689?usp=search
...
Keycloak/Oauth2Proxy/Realm
Update of Keycloak version https://lf-onap.atlassian.net/browse/OOM-3267
Update of Oauth2Proxy version (7.5.1) and update of configuration (check with @Mateusz Pilat ): https://lf-onap.atlassian.net/browse/OOM-3268
Received charts for "authentication" creating:
Keycloak deployment
Realm creation for keycloak
Oauth2 setup and configuration incl. Redis setup
Created a page to sum up the proposal (Improvement for NewDelhi Release)
Questions:
MeshConfig (see https://docs.onap.org/projects/onap-oom/en/latest/sections/guides/infra_guides/oom_infra_base_config_setup.html#istio-service-mesh=
vs. RequestAuthenticationOauth2-proxy config
MR indepenency:
Policy
Patch for Policy (https://gerrit.onap.org/r/c/oom/+/137529?usp=search) → (Drools is disabled, as some investigation is ongoing)
NBI
Patch for NBI only in DT internal fork, as NBI in Archived mode)
TSC Decision request for "NewDelhi"
→ if we disable MR, should we disable NBI ?
HOLMES
No patch available, as not active
TSC Decision request for "NewDelhi"
→ if we disable MR, should we disable Holmes ?
SDNC
SDNC-DMAAP-Listener (to be checked)
Is the Listener required ?
currently listening on, but none topic exists:
DEBUG 2024-03-25 17:45:31.268 +0000 DmaapListener - Initializing consumer org.onap.ccsdk.sli.northbound.dmaapclient.OofPciPocDmaapConsumers(/opt/onap/sdnc/data/properties/dmaap-consumer-oofpcipoc.properties) DEBUG 2024-03-25 17:45:31.275 +0000 DmaapListener - Initializing consumer org.onap.ccsdk.sli.northbound.dmaapclient.A1AdapterPolicyDmaapConsumer(/opt/onap/sdnc/data/properties/dmaap-consumer-a1Adapter-policy.properties) DEBUG 2024-03-25 17:45:31.282 +0000 DmaapListener - Initializing consumer org.onap.ccsdk.sli.northbound.dmaapclient.CMNotifyDmaapConsumer(/opt/onap/sdnc/data/properties/dmaap-consumer-CMNotify.properties) DEBUG 2024-03-25 17:45:31.288 +0000 DmaapListener - Initializing consumer org.onap.ccsdk.sli.northbound.dmaapclient.SdncRANSliceDmaapConsumer(/opt/onap/sdnc/data/properties/dmaap-consumer-RANSlice.properties) ...INFO 2024-03-25 17:46:07.549 +0000 SdncDmaapConsumer - A1AdapterPolicyDmaapConsumer received ResponseMessage: No such topic exists.-[A1-P] INFO 2024-03-25 17:46:07.548 +0000 SdncDmaapConsumer - CMNotifyDmaapConsumer received ResponseMessage: No such topic exists.-[CM-NOTIFICATION] INFO 2024-03-25 17:46:07.551 +0000 SdncDmaapConsumer - SdncDhcpEventConsumer received ResponseMessage: No such topic exists.-[VCPE-DHCP-EVENT] INFO 2024-03-25 17:46:02.473 +0000 SdncDmaapConsumer - SdncLcmDmaapConsumer received ResponseMessage: No such topic exists.-[SDNC-LCM-READ] INFO 2024-03-25 17:46:02.472 +0000 SdncDmaapConsumer - OofPciPocDmaapConsumers received ResponseMessage: No such topic exists.-[SDNR-CL] INFO 2024-03-25 17:46:02.448 +0000 SdncDmaapConsumer - SdncRANSliceDmaapConsumer received ResponseMessage: No such topic exists.-[RAN-Slice-Mgmt]
TSC Decision request for "NewDelhi"
→ if we disable MR, should we disable SDNC DmaaP Listener ?
DCAEGEN2-Services MSs
dcae-ves-collector →
dcae-prh → , https://gerrit.onap.org/r/c/oom/+/137153
dcae-pmsh
dcae-tcagen2
dcae-son-handler
dcae-slice-analysis-ms
dcae-heartbeat
dcae-kpi-ms
dcae-datafile-collector
dcae-snmptrap-collector
(UPDATE info by DT) So there is a DCAE SDK for interaction with DMaaP.
We have changed the implementation of that SDK to talk to Kafka directly.
This new SDK is now used in VES collector and PRH services.
If other services are using the SDK to talk to DMaaP, they can use this new version now.
We have updated documentation of this SDK as well.https://docs.onap.org/projects/onap-dcaegen2/en/latest/sections/sdk/apis.htmlTSC Decision request for "NewDelhi"
→ if we disable MR, should we disable all DCAE MS, which are not migrated to native Kafka ?
Hardening Istio with SPIRE/SPIFFE (https://blog.spiffe.io/hardening-istio-security-with-spire-d2f4f98f7a63) → need to check within DT
Used in NephioFYI, Service Mesh + SPIFFE infrastructure ongoing study in Nephio, Study: Nephio security collaboration study
There is a separate study in Nephio for workload registration and workload/node attestation, https://docs.google.com/presentation/d/1L79WrZ64Uar3IrH-jL_IeQTlPoLtXGZKHIIfVCXLoco/edit#slide=id.g2c18d699447_0_40
Tata (@ematpil ) install ONAP Montreal/London and made improvements
will show improvements Tata did and might contribute to OOM
Presentation shown: (Platform Customization-oom v2.pptx) .
→ Enhancements proposed:
Security enhancements (e.g. Keycloak/OAuthProxy, AuthorizationPolicy,...) eg: authentication.tar, oauth2 +KC research: rbac_research_wrap.pdf
Logging enhancements,...
Others:
Change "bash" to "sh"
Started by Orange, but not finished
Describe ONAP component deployment via ArgoCD
create "Application" config dir in oom repo ?
Open Jira issues:
T | Key | Summary | Assignee | Reporter | P | Status | Resolution | Created | Updated | Due |
|---|---|---|---|---|---|---|---|---|---|---|
Alexander Dehn | Alexander Dehn | In Progress | Unresolved | Apr 27, 2023 | Apr 27, 2023 | |||||
service-mesh-wait-for-job-container fails, when no sidecar exists | Andreas Geissler | Andreas Geissler | Open | Unresolved | Apr 27, 2023 | Apr 27, 2023 | ||||
Alexander Dehn | Alexander Dehn | In Progress | Unresolved | Apr 25, 2023 | Apr 26, 2023 | |||||
Alexander Dehn | Herbert Eiselt | In Progress | Unresolved | Apr 24, 2023 | Apr 27, 2023 | |||||
Andreas Geissler | Andreas Geissler | Open | Unresolved | Apr 24, 2023 | Apr 24, 2023 | |||||
Marek Szwałkiewicz | Marek Szwałkiewicz | Open | Unresolved | Apr 24, 2023 | Apr 24, 2023 | |||||
Kiali Validation - KIA0601 - Port name must follow [-suffix] form | Fiete Ostkamp | Fiete Ostkamp | In Progress | Unresolved | Apr 19, 2023 | Apr 19, 2023 | ||||
Andreas Geissler | Andreas Geissler | Open | Unresolved | Apr 19, 2023 | Apr 19, 2023 | |||||
Fiachra Corcoran | Andreas Geissler | Open | Unresolved | Apr 13, 2023 | Apr 13, 2023 | |||||
Miroslav Masaryk | Miroslav Masaryk | Open | Unresolved | Apr 12, 2023 | Apr 13, 2023 | |||||
Andreas Geissler | Andreas Geissler | Open | Unresolved | Mar 31, 2023 | Apr 13, 2023 | |||||
Andreas Geissler | David McBride | In Progress | Unresolved | Mar 30, 2023 | Apr 26, 2023 | |||||
Andreas Geissler | David McBride | Open | Unresolved | Mar 30, 2023 | Mar 30, 2023 | Mar 23, 2023 | ||||
Andreas Geissler | Andreas Geissler | Open | Unresolved | Mar 21, 2023 | Mar 21, 2023 | |||||
The chartmuseum binary download URL not working in OOM deployment | Andreas Geissler | Sankar Palanivel | Open | Unresolved | Mar 09, 2023 | Apr 13, 2023 | ||||