PTL 2024-12-02

We start our meetings by mentioning the project's Antitrust Policy, which you can find linked from the LF and project websites. The policy is important where multiple companies, including potential industry competitors, are participating in meetings. Please review and if you have any questions, please contact your company legal counsel. Members of the LF may contact Andrew Updegrove at the firm Gesmer Updegrove LLP, which provides legal counsel to the LF.

Agenda

START RECORDING

Duration

Agenda Item

Requested by

Notes / Links

Duration

Agenda Item

Requested by

Notes / Links

30 mins

Cross-project discussion

 

  • This meeting is reduced to 30 minutes

  • Rotating host

    • volunteer for this week: @Paweł Pawlak  / @Byung-Woo Jun 

 

@Sandra Jackson (Deactivated)

@Paweł Pawlak

@Byung-Woo Jun

Security

@Amy Zwarico

@Byung-Woo Jun

PTLs reported vulnerability reports are not accurate

  • NexusIQ reports and scripts have discrepancies - Fiete Ostkamp

  • May be a process issue - PTLs update based on the reports at the beginning of the release

  • Action items:

    • are PTLs willing to fix new vulnerabilities found up to code freeze? PTLs can fix new findings in NexusIQ

    • Bring up at the next PTL meeting (9am ET) - December 2nd

  • Now, we have automated vulnerability reports

  • PTLs can pull up the latest and greatest reports from NexusIQ (https://nexus-iq.wl.linuxfoundation.org/ ) anytime, not just at the beginning of the release

  • What would be the new process? We can discuss it further at SECCOM;

  • It seems that the periodic report is a good idea, and PTLs can access the report and make their decision on which release the issues are applied.

  • PTLs can add more people for the Nexus access (but maybe there are some license limitations);

  • A Nexus access demo can be provided by @Amy Zwarico / Hannah ; December 9th PTL; can be changed.

  • CLM link, https://jenkins.onap.org/view/CLM/

RelEng/Infrastructure

@Jessica Gonzalez @Paweł Pawlak 

@Byung-Woo Jun 

  • @Jessica Gonzalez , cleaning up ONAP confluence pages, attachments;

    • Action Point: the biggest attachments are TSC, SECCOM, PTLs...

      • @Byung-Woo Jun replaced SECCOM mp4 files with the PCC links; removed the SECCOM mp4 file from the confluence.

      • PTLs need to check their meeting recordings

      • @Jessica Gonzalez, prepared this list: ONAP wiki attachments Oct 2024-bwj.xlsx, check this out. use the PCC recording links and remove the mp4 files.

      • @Jessica Gonzalez , could you please regenerate the list?

  • For uploading videos to Youtube, please contact @Casey Cain.

  • Matt provide additional enhancements (weekly); dependency scanning…

  • @Fiete Ostkamp , https://sonarcloud.io/organizations/onap/projects updated and fixed

  • FYI, according to @Andreas Geißler, DT is facing again issues in the connection to nexus3 from Deutsche Telekom network. The DT team is working on it.; @Andreas Geißler , any update?

  • According to@Andreas Geißler , Michael opened an LF IT ticket for bypassing, https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27443; any update?

    • anton is assigned; Kevin will check it for any update.

RelEng/Infrastructure

@Ramesh Murugan Iyer

@Kevin Sandi

  • Jenkins issues to discuss

  • @Deena Mukundan , cannot push images to nexus; gerrit command does not trigger jobs; … IT-27514 => Jenkins Jobs exhibits inconsistent behaviour when called from gerrit and sandbox

  • @murali parthasarathy k , raised tickets; IT-27507: (IT-27519)

    docker push to nexus failing from jenkins job

    push jobs to jenkins sandbox via gerrit comment

  • @Kevin Sandi , IT-27520, IT-27520

    Error in Creating Releng Go Jobs as per guide

  • @matt wakins, is working on it

  • report new status at TSC or PTL

Oslo Release update

@Byung-Woo Jun 

@Paweł Pawlak 

 

Paris Release update

@Byung-Woo Jun

OOM 

@Andreas Geißler 

  • An ArgoCD deployment to provide an alternative the helm deployment. @Marek Szwałkiewicz , @Andreas Geißler , DT is working on it.; will decide which release that DT applies..

    • @Andreas Geißler , will check with Marek and let us know... Postponed to Paris

    • @Marek Szwałkiewicz , WIP; Matt needs a ticket for a check; update next week

RAN-SIM (Target Oslo)

@Vishal Varvate

@Andreas Geißler

  • @Andreas Geißler helped @Vishal Varvate where RAN Simulator enhancements will be checked in for Oslo

  • @Vishal Varvate, plans to share the enhancement features and scopes with @Byung-Woo Jun this week.; We have not yet received the feature summary.

  • Postponed to Paris

Update Jiras

Oslo Package

@Amy Zwarico 

@Paweł Pawlak 

@Toine Siebelink

@Toine Siebelink updated the following: (Thanks!!!).

  • Assignee, please check the tickets

  • For the ticket without assignees, we need to find new assignees

Epic: https://jira.onap.org/browse/REQ-439
Oslo task: REQ-1592: PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASETo Do

key summary assignee status resolution
Loading...
Refresh



@Fiete Ostkamp , is there any automated tool for dependency checking from Gerrit? Matthew will provide its update. Matt/kevin will check; may use portal-ng as a test project/candidate; Fieta will a LF IT ticket toward Matt/Kevin. ; Matt put a couple of patches, still working on it. Matt gave us update…

The Github2Gerrit is under IT-27340; about to merge; Matt, let us know; maybe this week;

The Nexus IQ job is under IT-27251; It is done.

The gerrit code merge issue opened by Tony is IT-26848; It is done

Tony opened a new ticket; @Kevin Sandi is working on it, IT-27455;

@Toine Siebelink , https://sonarcloud.io/summary/overall?id=onap_cps

https://sonarcloud.io/organizations/onap/projects

https://sonarcloud.io/summary/overall?id=onap_cps-ncmp-dmi-plugin

LF IT Support

@Jessica Gonzalez 

  • *** note: please check if the following issues are still open ***

  • Pending ticket opened by Marek:

    https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-25573

    • Kevin Sandi - a workaround solution will be tried;

    • Marek / Matthew - automatic building solution is needed; escalate this? Waiting for feedback from Marek 

    • Kevin/Matt/Kevin - create a ticket and try a solution (maybe Github action helps? PoC??)

    • Some action plans and updates next week

    • Kevin and Marek are working on it, testing and deployment. will report its status - 90% is working; WIP; scheduled for next week update

    • wait for argo-cd deployment update. will revisit...

    • wait for Marek's return

    • Marek is working on it. 

    • @Kevin Sandi , waiting for Marek’s confirmation. Update next time; update it at the TSC meeting this Thursday.

    •  

    Kevin: Jenkins' sandbox; security patching is working fine; downtime would be 30 mins; will notify the downtime by email to ONAP community - WIP, still pending; let us know.

  •  

    Thomas Kulik - issues with Portal-NG and other documentation - 

    Kevin / marek: WIP; update in two weeks.

  •  

    • Kevin / Marek are working on it. wait for Argo CD finish

    IT-26899 Project is not created in RTD - Kevin; found a root cause; almost done, pushed the fixes;

    Ticket opened by Tony: IT-26848 - Tony is checking on it, still has issues; Kevin will work on it; Let us know.

    • @Kevin Sandi , working on it; removing gerrit plugins as a possible solution; update the ticket with findings and will check them with Tony; 

    • @Byung-Woo Jun , will ask Tony for this at the SECCOM tomorrow.

    • Tony confirmed it still does not work; Kevin is working on this. 

    • IT-27455, @Kevin Sandi is working on it.

RelEng/Infrastructure

@Kevin Sandi

  • @Kevin Sandi, Github action ticket (Kevin Sandi) - bypassing -1 for option jobs : any update? Jira ticket for tracking RELENG-5602

    • If patches are fixed today, Kevin can start testing.

New bypassable workflow is in place and working. There are a couple of improvements I’m working on to avoid deprecation notices and use the correct voting github action.

It is working, but @Toine Siebelink , will create a new ticket for a new policy on checking the RTD links toward @Kevin Sandi ; @Thomas Kulik , reported there are many broken ONAP wikis; treat every warning as a warning??

@Toine Siebelink , created a new ticket, https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27475 .

  • Any update? @Kevin Sandi will work on it later

Testing Environment

 

 

Testing Improvement

 

 

CSIT Review

 

 

ToolChain Improvement

 

 

Documentation

 

 

Other Improvement suggestion

@Andreas Geißler  @Dan Timoney 

In Oslo, Plan to migrate ONAP components to use RFC8040. and will Keep the New Delhi CCSDK/SDNC as LTS (long term support) for Biermann APIs. In Oslo, only RFC8040 will be supported.

@Dan Timoney, reviewed the above CCSDK/SDNC plan with ARCCOM and ARCCOM approved it.

@Andreas Geißler , any update from Sanket?

 

Subcommittee Updates for PTLs

@Paweł Pawlak 

@Amy Zwarico 

  1. Recommended packages upgrades are available on the restricted Wiki. Jiras to be created per project. 

    Need to check NG Portal status CLM jobs. Any update? 

 - no solution for now:

 

@Fiete Ostkamp , SECCOM-276: Setup scanning jobs for portal-ng-uiClosed.

Error rendering macro 'jira' : Unable to locate Jira server for this macro. It may be due to Application Link configuration.
; will check them

@Matt Watkins , will follow up. Please let us know the outcome. 

Sharing Best Practices

 

 

IF TIME ALLOWS ....

15 mins

Release status

 

 

 

 

 

 

5 mins

Upcoming Events

 

10 mins

Remaining Action Items

 

 

Zoom Recordings

Video Conferencing, Web Conferencing, Webinars, Screen Sharing

Zoom Chat Log