2025-04-09 Policy Weekly Meeting

ONAP DT&F DAYs 2025 - Planning

murali parthasarathy k will be leading the presentation for opa-pdp.

Projects were asked to check vulnerabilities periodically and fix critical CVEs within a month by the TSC.

Nexus Iq access requested for Wayne. - Got the approval from TSC – still pending from Matt Wattkins. 

https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-28024

Waiting for Eric to update further as there is an issue with Nexus url on hardening criteria for gold badging. 

https://gerrit.onap.org/r/admin/repos/policy/opa-pdp,general

opa-pdp wiki : OPA PDP

Kevin has raised a request for sonatype scanning support for golang project. – still pending. 

Start looking in to Gold badging criteria for opa-pdp. - coverage is being worked on.

API and PAP helm charts might require changes for adding some predeployed policies for opa in OOM. – Ticket to be created.

Adam Kenihan

guru raja

In progress.

Reproduced the issue. But its not impacting the workflow/cause any failures.

opa-pdp has implemented a retry mechanism to retry registration if pap doesn't respond. 

Adam to retry the testing with manual deploy/undeploy after the error occurs.  – issue occurs if pdp is restarted.

Restart pdp

Check for no listener error

Trigger the workflow.

The issue was not reproduced in confluent kafka in helm deployment. Need to try with strimzi kafka.

PAP removing registered pdps after a certain period – Adheli is investigating the issue. 

Tested with apex, xacml and opa pdps in docker and helm. PDP was removed after missed heartbeats. But added back in PAP after the next heartbeat, workflow is fine later on. – Not seeing the same issue. 

Needs further investigation. – Require logs from opa-pdp deployment. – LOgs provided

Need to test with strimzi kafka