30 mins

Cross-project discussion

• This meeting is reduced to 30 minutes

• Rotating host

  • volunteer for this week: @Paweł Pawlak  / @Byung-Woo Jun 

• TSC election 

• https://lf-onap.atlassian.net/l/cp/940j1AJX

• Email

• 2024 TSC Election Candidates Wiki Page

• Jira ticket created (for election and for a list of active ONAP members)

RelEng/Infrastructure

@Jessica Gonzalez @Paweł Pawlak 

@Byung-Woo Jun 

• @Jessica Gonzalez , cleaning up ONAP confluence pages, attachments;

  • Action Point: the biggest attachments are TSC, SECCOM, PTLs...

    • @Byung-Woo Jun replaced SECCOM mp4 files with the PCC links; removed the SECCOM mp4 file from the confluence.

    • PTLs need to check their meeting recordings

    • @Jessica Gonzalez, prepared this list: ONAP wiki attachments Oct 2024-bwj.xlsx, check this out. use the PCC recording links and remove the mp4 files.

    • @Jessica Gonzalez , could you please regenerate the list?

• For uploading videos to Youtube, please contact @Casey Cain.

• Fiete issued a ticket, https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27296 for sonacloud broken job; Matthew and Kevin will work on it; Matt, we can close this. Hope by next week, it can be done. Matt, will update.

• Matt provide additional enhancements (weekly); dependency scanning…

• @Fiete Ostkamp , https://sonarcloud.io/organizations/onap/projects updated and fixed

• FYI, according to @Andreas Geißler, DT is facing again issues in the connection to nexus3 from Deutsche Telekom network. The DT team is working on it.; still has the problem.

Oslo Release update

@Byung-Woo Jun 

@Paweł Pawlak 

• Oslo related Wiki under creation by Byung, Release Planning: Oslo

• Project Status in Oslo Release

• Oslo Release Key Updates,  thanks PTLs

  • RAN Simulator plans to be added into Oslo. @Vishal Varvate will add RAN Simulator key updates

  • Update with Target Date!

• The Architecture diagram for Oslo, Oslo-R15 Architecture Diagram; new diagram

• Oslo Architecture main wiki pages, Oslo-R15 Architecture/ArchCom Wiki Page ; see its sub directories for project architecture pages

• @Thomas Kulik , any update ? @Fiete Ostkamp , worked on SDC for outdated Ruby - will update...

  • @Jessica Gonzalez, will look for resource for the ruby migration. She will update.

  • @Andreas Geißler , DT has their own resources for this update. They are working on it. Thanks !!!

    • @Fiete Ostkamp , SDC ruby issue; DT is working on it; get the pipeline ongoing (fixed); ruby upgrade is ongoing

Paris Release update

@Byung-Woo Jun

• The next Paris release schedule is proposed, Release Planning: Paris 

  • TSC plans to vote for the schedule in November

• Long Term Release Roadmap

OOM 

@Andreas Geißler 

• An ArgoCD deployment to provide an alternative the helm deployment. @Marek Szwałkiewicz , @Andreas Geißler , DT is working on it.; will decide where DT applies..

•  

  • @Andreas Geißler , will check with Marek and let us know...

  • @Marek Szwałkiewicz , WIP; Matt needs a ticket for a check; update next week

Policy

@Ramesh Murugan Iyer 

• Any update on the Policy Framework Gold Badging process?

• Almost there; needs 90% code coverage, exception policy-apex-pdp 88%; needs merge to increase it to above 90%

• https://sonarcloud.io/organizations/onap/projects?search=policy 

• WIP; will schedule its review with ONAP SECCOM; target date: this Tuesday; review it with SECCOM tomorrow.

• PF security survey is already done.

RAN-SIM (Target Oslo)

@Vishal Varvate

@Andreas Geißler

• @Andreas Geißler helped @Vishal Varvate where RAN Simulator enhancements will be checked in for Oslo

• @Vishal Varvate, plans to share the enhancement features and scopes with @Byung-Woo Jun this week.

Update Jiras

Oslo Package

@Amy Zwarico 

@Paweł Pawlak 

@Toine Siebelink

@Toine Siebelink updated the following: (Thanks!!!).

• Assignee, please check the tickets

• For the ticket without assignees, we need to find new assignees

Epic: https://jira.onap.org/browse/REQ-439
Oslo task: REQ-1592: PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASETo Do

@Matt Watkins , will update next week

@Fiete Ostkamp , is there any automated tool for dependency checking from Gerrit? Matthew will provide its update. Matt/kevin will check; may use portal-ng as a test project/candidate; Fieta will a LF IT ticket toward Matt/Kevin. ; Matt put a couple of patches, still working on it. Matt gave us update…

The Github2Gerrit is under IT-27340

The Nexus IQ job is under IT-27251; It is done.

The gerrit code merge issue opened by Tony is IT-26848

@Toine Siebelink , https://sonarcloud.io/summary/overall?id=onap_cps

https://sonarcloud.io/organizations/onap/projects

https://sonarcloud.io/summary/overall?id=onap_cps-ncmp-dmi-plugin

LF IT Support

@Paweł Pawlak @Jessica Gonzalez 

• Pending ticket opened by Marek:

  https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-25573

  • Kevin Sandi - a workaround solution will be tried;

  • Marek / Matthew - automatic building solution is needed; escalate this? Waiting for feedback from Marek 

  • Kevin/Matt/Kevin - create a ticket and try a solution (maybe Github action helps? PoC??)

  • Some action plans and updates next week

  • Kevin and Marek are working on it, testing and deployment. will report its status - 90% is working; WIP; scheduled for next week update

  • wait for argo-cd deployment update. will revisit...

  • wait for Marek's return

  • Marek is working on it. 

  • @Kevin Sandi , waiting for Marek’s confirmation. Update next time.

  Kevin: Jenkins' sandbox; security patching is working fine; downtime would be 30 mins; will notify the downtime by email to ONAP community - WIP

•  

  Thomas Kulik - issues with Portal-NG and other documentation - 

  Kevin / marek: WIP; update in two weeks.

•  

  • Kevin / Marek are working on it. wait for Argo CD finish

  IT-26899 Project is not created in RTD - Kevin; found a root cause; almost done, pushed the fixes;

  Ticket opened by Tony: IT-26848 - Tony is checking on it, still has issues; Kevin will work on it; Let us know.

  • @Kevin Sandi , working on it; removing gerrit plugins as a possible solution; update the ticket with findings and will check them with Tony; 

  • @Byung-Woo Jun , will ask Tony for this at the SECCOM tomorrow.

  • Tony confirmed it still does not work; Kevin is working on this. 

RelEng/Infrastructure

@Kevin Sandi

• @Kevin Sandi, Github action ticket (Kevin Sandi) - bypassing -1 for option jobs : any update? Jira ticket for tracking RELENG-5602

  • If patches are fixed today, Kevin can start testing.

New bypassable workflow is in place and working. There are a couple of improvements I’m working on to avoid deprecation notices and use the correct voting github action.

Testing Environment

Testing Improvement

CSIT Review

ToolChain Improvement

Documentation

Other Improvement suggestion

@Andreas Geißler  @Dan Timoney 

In Oslo, Plan to migrate ONAP components to use RFC8040. and will Keep the New Delhi CCSDK/SDNC as LTS (long term support) for Biermann APIs. In Oslo, only RFC8040 will be supported.

@Dan Timoney, reviewed the above CCSDK/SDNC plan with ARCCOM and ARCCOM approved it.

Subcommittee Updates for PTLs

@Paweł Pawlak 

@Amy Zwarico 

1. Recommended packages upgrades are available on the restricted Wiki. Jiras to be created per project. 

   Oslo Package Updates

   Need to check NG Portal status CLM jobs. Any update? 

 - no solution for now:

•  

  • 6/24/2021: PortalNG reports in spreadsheet on protected wiki page - New Delhi Package Updates - Security Vulnerabilities - Confluence (onap.org)

  • will check it again

  • Matt is working on it.; hopefully by next week; 

  • Pawel shared the report with SECCOM; Pawel will double-check it.

@Fiete Ostkamp , SECCOM-276: Setup scanning jobs for portal-ng-uiClosed.

@Matt Watkins , will follow up. Please let us know the outcome. 

• This is the Nexus IQ/Sonartype Lifecycle ticket Ref: https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27251

• Here is the scan result: https://nexus-iq.wl.linuxfoundation.org/assets/index.html#/applicationReport/onap-portal-ng-ui/28f50ec63db94687a0556a343940e14f/policy

• WIP; Fiete has scans, Matthew is working on; maybe in 2 weeks, the issue can be resolved.; WIP

• Matt to provide an update next week on merge.

Sharing Best Practices

Technical debt

@Fiete Ostkamp 

Chef dependency in SDC related to Ruby conflict (2.0 is pretty old)  SDC-4691: catalog-be docker build is failing due to ruby dependency conflictOpen

• Fiete is workin on it.

• will merge this with the section above…

Other Technical discussions 

• @Muddasar Ahmed, SPDX 3.0 is not yet ISO standard; they plan to work on it;

• LF TAC: two special seats (security and blueprint); maybe one additional seat for AI?? ; wip

• @Byung-Woo Jun AI model openness; LF AI & Data; Model Openness Framework; WIP

IaC scans

@Paweł Pawlak 

@Byung-Woo Jun 

Reference: https://www.checkov.io/1.Welcome/What%20is%20Checkov.html

• @Jessica Gonzalez , started the IaC scan with CPS, https://github.com/onap/cps/actions/runs/11040721512/job/30669364326

• SECCOM and Nephio SIG Security teams plan to discuss the basseline and/or best practices

• SECCOM (@Muddasar Ahmed, @Paweł Pawlak) suggested using SonarCloud criteria.

  • @Byung-Woo Jun is working on it.

IF TIME ALLOWS ....

15 mins

Release status

5 mins

Upcoming Events

• Kubecon and CloudNativeCon North America 2024 (November 12-15), https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/?utm_source=google&utm_medium=paid-search&utm_campaign=kubecon-na-2024&utm_term=events-kubecon-na-2024-cncf&utm_content=kubecon-na_rsa&campaignid=21541954784&adgroupid=166431838780&creative=708046449585&matchtype=e&network=g&device=c&keyword=kubecon%202024&utm_term=kubecon%202024&utm_campaign=Events+-+KubeCon+NA+2024+-+CNCF&utm_source=google&utm_medium=ppc&hsa_acc=8666746580&hsa_cam=21541954784&hsa_grp=166431838780&hsa_ad=708046449585&hsa_src=g&hsa_tgt=aud-2235032889006:kwd-2276042045987&hsa_kw=kubecon%202024&hsa_mt=e&hsa_net=adwords&hsa_ver=3&gad_source=1&gclid=Cj0KCQjww5u2BhDeARIsALBuLnO86USewI8c0_a4uKus91l491oBwGC-cQoGruwKx3Sz5WUeGTuCFa0aAj_3EALw_wcB 

10 mins

Remaining Action Items