We start our meetings by mentioning the project's Antitrust Policy, which you can find linked from the LF and project websites. The policy is important where multiple companies, including potential industry competitors, are participating in meetings. Please review and if you have any questions, please contact your company legal counsel. Members of the LF may contact Andrew Updegrove at the firm Gesmer Updegrove LLP, which provides legal counsel to the LF.

Agenda

START RECORDING

Duration	Agenda Item	Requested by	Notes / Links
30 mins	Cross-project discussion		This meeting is reduced to 30 minutes Rotating host volunteer for this week: Paweł Pawlak / Byung-Woo Jun
	Oslo Release update	Byung-Woo Jun	Oslo related Wiki under creation by Byung, Release Planning: Oslo Project Status in Oslo Release Oslo Release Key Updates The Architecture diagram for Oslo, Oslo-R15 Architecture Diagram Oslo Architecture main wiki pages, Oslo-R15 Architecture/ArchCom Wiki Page ; see its sub directories for project architecture pages O-parent removal from Oslo?? Ericsson presented their O-parent removal experience to the TSC meeting See Adheli's Removal of O-Parent from Policy, Removal of O-Parent from Policy Each PTL needs to open a Jira ticket for O-Parent removal from their projects For the projects without PTLs, SECCOM will open a Jira ticket ARCCOM: open for requirement/architecture reviews
	Deprecated project	Ramesh Murugan Iyer Byung-Woo Jun	Policy-GUI deprecation is approved by TSC on July 18th Proceeding rest of the transition steps, Project State: Unmaintained DMaaP DR deprecation is approved by TSC on July 25th ONAPARC-805 - Getting issue details... STATUS Proceeding rest of the transition steps, Project State: Unmaintained The entire DMaaP will be deprecated, replaced by Kafka/Strimzi https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27045 was created to remove DMaaP Jenkins job, CLM scan and sonacloud report. Andreas Geißler , please remove DMaaP from OOM
	Update Jiras Oslo Package	Amy Zwarico	Oslo task: [REQ-1592] PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASE - ONAP JIRA Epic: https://jira.onap.org/browse/REQ-439 AAI: [AAI-3941] AAI PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR NEW DELHI RELEASE - ONAP JIRA CCSDK: [CCSDK-4042] CCSDK PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR NEW DELHI RELEASE - ONAP JIRA CPS: [CPS-2342] CPS PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR NEW DELHI RELEASE - ONAP JIRA DCAE: [DCAEGEN2-3414] DCAE PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASE - ONAP JIRA Multicloud: [MULTICLOUD-1507] MULTICLOUD PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASE - ONAP JIRA Network Controller: [SDNC-1844] NETWORK CONTROLLER PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASE - ONAP JIRA Policy: [POLICY-5103] POLICY PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR NEW DELHI RELEASE - ONAP JIRA PortalNG: [PORTALNG-114] PORTALNG PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASE - ONAP JIRA SDC: [SDC-4690] SDC PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASE - ONAP JIRA SO: [SO-4130] SO PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASE - ONAP JIRA UsecaseUI: [USECASEUI-840] UUI PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASE - ONAP JIRA
	Project Maturity	Byung-Woo Jun	ONAP component mature state, Mature State Projects Gold badging is a separate process from the project maturity in LFN? CPS got the gold badging Policy is working on it? Policy team got editing permissions for gold badging wiki pages - WIP What other components do we want to get the gold badging? Follow the http://tlhansen.us/onap/onap.html tool for gold badging Requested the gold badging tool upgrade for: removing deprecated projects and updating editors
	LF IT Support		Update ONAP main pages for New Delhi release (wiki.onap.org, onap.org) - Sandra Jackson (Deactivated) Submitted ticket for update Lfx zoom meetings need backup owners for vacation and other occasions Pending ticket opened by Marek: https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-25573 Kevin Sandi - a workaround solution will be tried; Marek / Matthew - automatic building solution is needed; escalate this? Waiting for feedback from Marek Kevin/Matt/Kevin - create a ticket and try a solution (maybe Github action helps? PoC??) Some action plans and updates next week Kevin and Marek are working on it, testing and deployment. will report its status - 90% is working; WIP; scheduled for next week update Kevin: Jenkins' sandbox; security patching is working fine; downtime would be 30 mins; will notify the downtime by email to ONAP community - WIP Thomas Kulik - issues with Portal-NG and other documentation - IT-26899 Project is not created in RTD - Kevin; found a root cause; almost done, pushed the fixes; Marek: Verifying of fixing; will follow up when Thomas Kulik and Fiete Ostkamp back - next week report; related to RTD pipeline? need further testing Ticket opened by Tony: IT-26848 - Tony is checking on it, still has issues; Kevin will work on it; Thomas will check; should not block any? will work; report its staus next week ~~IT-27005 Removing SonarCloud reports for ONAP deprecated project (Policy GUI) - done~~
	Open Source Security / SECCOM	Byung-Woo Jun	CISA report on memory safe code: joint-guidance-exploring-memory-safety-in-critical-open-source-projects-508c.pdf, The-Case-for-Memory-Safe-Roadmaps-508c.pdf Maggie (NSA; SECCOM) forwarded the NIST special publication on Service Mesh Proxy Models for Cloud-Native Applications. It is pretty good documentation on Service Mesh, Threat analysis and recommendations, https://csrc.nist.gov/pubs/sp/800/233/ipd , https://doi.org/10.6028/NIST.SP.800-233.ipd 2 actions: OpenSSF- add/update their guidelines; Tony Locally for ONAP: impact assessment and reviewing if there are opportunities to remove those languages. Added memory safe code guidance to the architecture security review template, ONAP Component Architecture Review Template
	OOM	Andreas Geißler	https://gerrit.onap.org/r/c/oom/+/138260 - Kaixi Liu abandoned it; Kaixi and Keguang contacted Andreas Geisser for help
	CCSDK	Byung-Woo Jun	CCSDK A1 controller committer permission for John Keeney; Dan Timoney will contact John Keeney and plan to promote John as a CCSDK committer. After an election for it, the result will be reported to TSC.
	MultiCloud	Byung-Woo Jun	No MultiCloud activities for several ONAP releases. Discussed this with Seshu; only SO K8s plugin is using it but, we can lock the code and deprecated the project. Let's check its dependencies to prepare for its deprecation.
	Testing Environment
	Testing Improvement
	CSIT Review
	ToolChain Improvement
	Documentation
	Other Improvement suggestion	Andreas Geißler	Plan to migrate ONAP components to use RFC8040. SDNC and SO decided to move it to Oslo. ---- As backup Dan is working on Biermann but not progressed. ODL is not supporting it. Restconf stack is based on RFC draft. Preferred approach is to move to RFC8040 (Alternative 1). Originally proposed back in the Kohn release Plan for the New Delhi release Andreas Geißler DT has someone working on the SO piece to try and port to RFC8040 ONAP components will be moved to RFC8040 in New Delhi Alternative 2: keep maintaining Biermann interface. may support either London or Montreal as a long term release Alternative 3: rollback to version before Argon. ~~Alternative~~ ~~4 (the most drastic): stay where we are for now and begin to work with moving off from ODL.~~ As we have no solution, we can not move to ODL Potasium. Any Update for Oslo from Dan Timoney ?
	Subcommittee Updates for PTLs	Paweł Pawlak Amy Zwarico	Recommended packages upgrades are available on the restricted Wiki. Jiras to be created per project. Oslo/wiki/spaces/SV/pages/16094458 Need to check NG Portal status CLM jobs. Any update? - no solution for now: 6/24/2021: PortalNG reports in spreadsheet on protected wiki page - New Delhi Package Updates - Security Vulnerabilities - Confluence (onap.org) Ticket opened by Fiete: https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-26527 (ticket is closed) ongoing; Jessica and Fiete are discussing this. We are missing NG Portal UI CLM job. List of the ONAP components to be disabled prepared by Andreas: OOM New Delhi Release On April 18th, TSC approved the list. Ticket opened by Fiete for UI CLM scan: https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-26882 - not a maven based project - an issue? To be further eleborated with Jess.
	Sharing Best Practices
	Others	Paweł Pawlak	ONAP Licensing scans: https://lfscanning.org/reports/onap/onap-2024-06-0592bdfc-78a5-4fa8-a9fd-a7de581457ec.html
IF TIME ALLOWS ....
15 mins	Release status

5 mins	Upcoming Events		TBD
10 mins	Remaining Action Items

Zoom Recordings

https://zoom.us/rec/share/yyE4VeUCcrVtcq_PZdgIQU8GGLrjTwK3U-QRksT2sOranry7B2Fz1f1eqyVR1AuQ.q5ROWnsTk0N6iCpw

Zoom Chat Log

Browser not supported