@Andreas Geißler

@Keguang He 

@Byung-Woo Jun 

@N.K. Shankaranarayanan 

@Dan Timoney 

@Paweł Pawlak 

Guanyu Zhu (@zhuguanyu)

@Dong Wang

We are encouraging ONAP consumers to share with us their feedback, so we could prioritize our activities and make ONAP better suited their needs and requirements.

From the Paris release, TSC needs to discuss ONAP focus areas and strategies / roadmaps

Let's discuss more this year for Paris +

@Byung-Woo Jun plans to present the brainstorm next week at the TSC meeting.

Brainstorm:

• Ensure ONAP core components are focused and operate independently, from build to runtime

  • DT finishs Argo-CD based component independent deployment

    • Argo-CD is a DT choice, but ONAP can allow other CDs, e.g., Flux (need contributors)

    • DT plans to productize some of the selected ONAP core components early next year in their TNAP production environment

  • Declarative and Intent-based component operations by the Repository-based Network Automation : see the ideas from ONAP Architecture Evolution - Ideas (November 2023)

• Make ONAP core components more autonomous and ready for use by both ONAP, LF and other external users

  •  

    • During New Delhi and Oslo releases, CPS and Policy achieved the OpenSSF Gold Badging status. Kudos to the team!

    • Continue to promote/facilitate other ONAP core components for the Gold Badging status (e.g., UUI, SDNC)

• Incorporate more GenAI capabilities and use cases to the ONAP components, and promote the adoption of open-source LLM models and frameworks aligned with LF AI & Data and GenAI Commons

  • Collaborate with LF AI & Data GenAI Commons and Nephio GenAI for 5G and 6G

  • Open-source based models and controls

  • AI-Based Control Loop

  • AI Model-As-A-Service 

  • ETSI ISG NFV compliance for AI?

• Foster inter-community collaboration with other LF communities, such as O-RAN and Nephio

  • SDNC enhancements (which is used by O-RAN OAM as is)

  • Resource-based Orchestration Pattern (leveraging CD and Operator)

  • Energy saving / monitoring 

• Ensure the security of ONAP components and operations 

  • The latest security mechanism for communications (service mesh enhancements leveraging Istio and coming Ambient Mesh)

  • Deprecate unused sub-components and mitigate security vulnerabilities

• Define a secure LFN CI/CD pipeline by leveraging OpenSSF-associated reference tools

•  

  • @Dan Timoney opened the (https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27657

  • https://gerrit.onap.org/r/c/so/+/137558 RFC 8040 API Support in SO : Merged

  • https://gerrit.onap.org/r/c/so/+/139918 Bump version to 1.15.0-SNAPSHOT

• Any more OOM update for Oslo?

  • some small issues with MariaDB, but fixed. Small patches on policy helm charts; the fix is part of Oslo.

  • OOM doc is done.

• @Thomas Kulik, any update for this? https://docs.onap.org/en/oslo/release/index.html 

  • All changes are done. Some repositories are missing; not sure we need branches. e.g., UUI, SO. SDC (no need), Portal-NG (wiill do branch) and A&AI (will do branch), DCAE2 (need branch). 

  • cherry-picks; compiling overall release note (Byung will send the note summary to Thomas by end of today).

• LF Networking Project Release Blog Template: https://docs.google.com/forms/d/e/1FAIpQLSc1Dmp8kQfN8n2eVcFdI19p9P1-ZzLbQGSSqih3abqWsXTZew/viewform

• Oslo Release 

  • Oslo sign off date is postponed to January 16th.

    TSC vote: TSC approves the Oslo release sing-off on January 16th. - Approved

• The next Paris release schedule is TSC approved on Dec 5, 2024 , Release Planning: Paris 

  • TSC approved the current Paris release schedule on December 5th

  • An ArgoCD deployment to provide an alternative the helm deployment

  • RAN Simulator enhancement

  • Policy-OPA-PDP

  • MAAS

  • SDC Ruby upgrade

  • Project package upgrade

  • SDNC/CCSDK - need to upgrade Java 21 and Maven ; PTL, SECCOM and ARCCOM will handle this

• Long Term Release Roadmap

• https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27520 - waiting for Murali - on hold

• Error in Creating Releng Go Jobs as per guide

• @Kevin Sandi, is working on it and waiting for Murali's input

• What is the current status? almost done by @Kevin Sandi. Deena, Murali and Kevin need to work together to finalize it.

• Requesting guidance on adding goLang based project to Nexus IQ - Project Services Support - Service Project
  (IT-27561) - In Progress, https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27561

• @Kevin Sandi, New JJB template for Golang CLM scan is ready for review and approval => https://gerrit.linuxfoundation.org/infra/c/releng/global-jjb/+/73372 , once that change is approved and merged by LF we can proceed to upgrade the GlobalJJB version at ONAP and then merge following change https://gerrit.onap.org/r/c/ci-management/+/139794

• @Ramesh Murugan Iyer, Policy team will check vulnerabilities on direct dependencies; may need to open a ticket for the product (Sonatype) company; @Kevin Sandi, asked Murali to send the test results before raising tickets; CycloneDX-based SBOM; may need a conversion between CycloneDX and SPDX;

• The Architecture diagram for Oslo, Oslo-R15 Architecture Diagram

• Oslo Architecture main wiki pages, Oslo-R15 Architecture/ArchCom Wiki Page ; see its sub directories for project architecture pages

• Action point: Update ONAP Architecture overview and key updates document for Oslo, 

  
  https://lf-onap.atlassian.net/browse/DOC-827. https://docs.onap.org/en/latest/ecosystem/architecture/index.html

• https://lf-onap.atlassian.net/browse/DOC-826 oslo doc

•  ONAP Streamlining documentation, ONAP Streamlining Evolution and its sub-wiki pages. 

• SECCOM discussed the topic of vulnerability report handling with PTLs at the SECCOM on January 14, 2025; @Amy Zwarico presented how we use NexusIQ and how to use for ONAP components and Policy-OPA-PDP; https://zoom.us/rec/play/kkLub_1CMz1R16LKO6dsmftww517xEQZCdLXhCQX0f6v4iduiUBwo3_pciOGQXj8Pi0iQw_1ZjfEJkhv.9KJWCLW_FHYIAnvG?canPlayFromShare=true&from=share_recording_detail&continueMode=true&componentName=rec-play&originRequestUrl=https%3A%2F%2Fzoom.us%2Frec%2Fshare%2FDif93NK5o_axOqLWXJL9zNSQvw0oYPl_YqNZA12K4B2r7066VIHR_PgwOUzLyGug.hpxUXI3yY3cfyfyL

• SECCOM will review the Java 21 and Maven upgrades from the security perspective. 

Events & Meetings

(5 minutes)

Upcoming Events & Housekeeping

• KubeCon+CloudNativeCon, and Open Networking & Edge Summit, next April 2025 in London

• LFN DTF - not yet; a week from next Monday, LFN will discuss the LFN DTF schedule.

• Open Networking & Edge Summit Registration: https://events.linuxfoundation.org/open-networking-edge-summit-europe/register/

  • There are no community sessions for this event. It’s a 100% curated agenda. There will be keynotes by LFN and LFE, and strategy sessions.