/
PTL 2022-02-28

PTL 2022-02-28

Owned by David McBride
Last updated: Oct 26, 2022 by Kenny Paul
  • Zoom bridge: https://zoom.us/j/283628617?pwd=aWM3WjliUkFtcGFPUEdEMStIRll1UT09  passcode: 248130 
  • PTL Recordings
  • Antitrust Policy Notice

We will start our meetings by mentioning the project's Antitrust Policy, which you can find linked from the LF and project websites. The policy is important where multiple companies, including potential industry competitors, are participating in meetings. Please review and if you have any questions, please contact your company legal counsel. Members of the LF may contact Andrew Updegrove at the firm Gesmer Updegrove LLP, which provides legal counsel to the LF.

Agenda

START RECORDING

Duration

Agenda Item

Requested byNotes / Links
1 hour

Cross-project discussions

David McBride 

Reminder:  Unmaintained Projects meeting today at 8 a.m. (Pacific).

If you would like to attend, but haven't received the invitation, please let me know.

LF IT Support

Amy Zwarico 




Kevin Sandi 



Thomas Kulik 

Pawel opened IT-23650 because all of the ONAP jenkins jobs are failing (https://jenkins.onap.org/view/CLM/). It has now been 19 days since there was a successful build. There have been no successful NexusIQ scans run for 19 days, which is preventing SECCOM from performing the final assessment of log4j in the Istanbul maintenance release.

Do we need a process or tool change so that problems like this are detected and resolved sooner?

Risks:

  • Status of Istanbul Maintenance Release
  • Jakarta M3 scheduled for this week (March 3)


Follow-up on Liquibase licensing

  • Do we have a plan?

Kevin needs additional details from Dan via IT Jira ticket.  Dan says that he can do this today.

  • Dan Timoney to submit Jira ticket to IT to provide additional details on Liquibase licensing


List of ACTIVE repos associated with projects in unmaintained state (IT-23624)

  • Status?

Patches submitted and merged for affected repos.  Issue is resolved.

Testing Environment

Kenny Paul 

Intel → UNH-IOL Lab

Volunteers to test project workloads in new lab?

Question from Fiachra Corcoran regarding the use of UNH lab for gating.  Will follow up with Lincoln Lavoie via email.

Kenny unavailable.  Follow up next week.

Testing Improvement

Former user (Deleted) 

Scancode tool to scan ONAP images licenses (generates SBOM)

  • hosted at:  scancode.onap.eu
  • Instructions sent to mailing list (onap-discuss) Feb 16
  • Fiachra reports timeout error 
  • Report bugs to INT Jira project
  • Former user (Deleted) reports that metadata is missing from Java packages for many projects
    • Submit as best practice for next release? 
  • Need to tie this effort into SBOM effort.  Alexander to join SECCOM meeting on March 8 to discuss with Muddasar Ahmed 
  • Former user (Deleted) submit ticket to IT for support in creating description of process for adding metadata to Java packages in order to create Best Practice requirement in Jira for the Kohn release.
  • Former user (Deleted) to publish list of license policies to INT repo, then review with PTLs in gerrit.  
  • Fiachra Corcoran file ticket regarding scancode timeout issue in iNT Jira 

CSIT Review



ToolChain Improvement



Documentation

Other Improvement suggestion



Subcommittee Updates for PTLs



Sharing Best Practices



IF TIME ALLOWS ....
15 minsRelease status

David McBride 

Jakarta Release

Risk to schedule due to status of Jenkins (see notes above)

Istanbul Maintenance Release

  • Conditional approval by TSC on Feb 17, pending completion of release notes
  • Open issues

Dan Timoney and Liam Fallon to close open release note Jira issues

  • Amy Zwarico and Paweł Pawlak to review release notes wrt log4j CVE resolution and verify that the description is sufficient
5 minsUpcoming Events


10 minsRemaining Action Items



Zoom Chat Log 

06:31:04 From David McBride : lylavoie@iol.unh.edu (Lincoln Lavoie)

Action Items 

  • Type your task here, using "@" to assign to a user and "//" to select a due date