30 mins

Cross-project discussion

• This meeting is reduced to 30 minutes

• Rotating host

  • volunteer for this week: @Byung-Woo Jun 

TSC Strategy

@Byung-Woo Jun

@Byung-Woo Jun plans to present the following brainstorming ideas to the TSC, as an initiative.

Brainstorm:

• Ensure ONAP core components are focused and operate independently, from build to runtime

  • DT finishes Argo-CD based component independent deployment

    • Argo-CD is a DT choice, but ONAP can allow other CDs, e.g., Flux (need contributors)

    • DT plans to productize some of the selected ONAP core components early next year in their TNAP production environment

  • Declarative and Intent-based component operations by the Repository-based Network Automation : see the ideas from ONAP Architecture Evolution - Ideas (November 2023)

• Make ONAP core components more autonomous and ready for use by both ONAP, LF and other external users

  • During New Delhi and Oslo releases, CPS and Policy achieved the OpenSSF Gold Badging status. Kudos to the team!

  • Continue to promote/facilitate other ONAP core components for the Gold Badging status (e.g., UUI, SDNC)

• Incorporate more GenAI capabilities and use cases to the ONAP components, and promote the adoption of open-source LLM models and frameworks aligned with LF AI & Data and GenAI Commons

  • Collaborate with LF AI & Data GenAI Commons and Nephio GenAI for 5G and 6G

  • Open-source based models and controls

  • AI-Based Control Loop

  • AI Model-As-A-Service 

  • ETSI ISG NFV compliance for AI?

• Foster inter-community collaboration with other LF communities, such as O-RAN and Nephio

  • SDNC enhancements (which is used by O-RAN OAM as is)

  • Resource-based Orchestration Pattern (leveraging CD and Operator)

  • Energy saving / monitoring 

• Ensure the security of ONAP components and operations 

  • The latest security mechanism for communications (service mesh enhancements leveraging Istio and coming Ambient Mesh)

  • Deprecate unused sub-components and mitigate security vulnerabilities

• Define a secure LFN CI/CD pipeline by leveraging OpenSSF-associated reference tools

TSC Activities

• TSC vice chair is elected: Congratulations !!!

  • @Andreas Geißler , DT

  • @Keguang He , China Mobile

  • @Paweł Pawlak , CloudLinux/TuxCare

Security

• SECCOM discussed the topic of vulnerability report handling with PTLs at the SECCOM on January 14, 2025; Amy Zwarico presented how we use NexusIQ and how to use for ONAP components and Policy-OPA-PDP; Video Conferencing, Web Conferencing, Webinars, Screen Sharing

• SECCOM will review the Java 21 and Maven upgrades from the security perspective. 

SDNC Library, Policy, Doc Update

• @Ramesh Murugan Iyer, @Andreas Geißler , Policy needs to be updated XACML pdp image update? What is the current status?

  • this week the Policy team plans to merge the change into the master branch for Paris - ongoing; @Andreas Geißler , this is for Paris only, not for Oslo

• The following issues are resolved for Oslo release:

• Dan Timoney opened the (https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27657

• https://gerrit.onap.org/r/c/so/+/137558 RFC 8040 API Support in SO : Merged

• https://gerrit.onap.org/r/c/so/+/139918 Bump version to 1.15.0-SNAPSHOT

• created new images and OOM patches with new SDNC and SO versions. 

• @Andreas Geißler , confirmed this. cherry-picked it for Oslo. Some issues with the CatalogDB with version 1.15.x.; used the old version 1.12.x to make it work.; the team will work on its upgrade in the Paris release.

• @Thomas Kulik , done!; @Andreas Geißler , so release note will be updated for the so branch for Oslo

Oslo Release update

@Byung-Woo Jun 

@Andreas Geißler

@Thomas Kulik

• Oslo sign off date is January 16th. 

  • TSC voted to approve sign-off date to Jan16 (Chat vote)

• Release Planning: Oslo

• Project Status in Oslo Release

• Oslo Release Key Updates,  thanks PTLs

• Any pending issue?

Paris Release Update

@Byung-Woo Jun

@Marek Szwałkiewicz

@Andreas Geißler

@Ramesh Murugan Iyer

@Vishal Varvate

• The next Paris release schedule is TSC approved on 05 Dec 2024 , Release Planning: Paris 

  • TSC approved the current Paris release schedule on December 5th

  • An ArgoCD deployment to provide an alternative the helm deployment

  • RAN Simulator enhancement

  • Policy-OPA-PDP

  • MAAS

  • SDC Ruby upgrade

  • Project package upgrade

• PTLs, if you have any feature update, please add to the Paris key update wiki page and review the feature update with ARCCOM.

• Long Term Release Roadmap

• Release Planning: Paris

• Paris Release Key Updates

• Paris Milestone Status

GoLang Job Issues

@murali parthasarathy k

@Deena Mukundan

@Ramesh Murugan Iyer

@Kevin Sandi

• https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27520 - waiting for Murali - on hold

• Error in Creating Releng Go Jobs as per guide

• Kevin Sandi, is working on it and waiting for Murali's input

• What is the current status? almost done by Kevin Sandi. Deena, Murali and Kevin need to work together to finalize it.

• Requesting guidance on adding goLang based project to Nexus IQ - Project Services Support - Service Project
  (IT-27561) - In Progress, https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27561

• Kevin Sandi, New JJB template for Golang CLM scan is ready for review and approval => https://gerrit.linuxfoundation.org/infra/c/releng/global-jjb/+/73372 , once that change is approved and merged by LF we can proceed to upgrade the GlobalJJB version at ONAP and then merge following change https://gerrit.onap.org/r/c/ci-management/+/139794

• Ramesh Murugan Iyer, Policy team will check vulnerabilities on direct dependencies; may need to open a ticket for the product (Sonatype) company; Kevin Sandi, asked Murali to send the test results before raising tickets; CycloneDX-based SBOM; may need a conversion between CycloneDX and SPDX;

  • Working on this; doing some testing for the conversion.

• Helm chart in OOM (OPA pdp image is not available from docker) - investigating this.

• the OPA PDP does not have the staging; not push to the docker image… @Ramesh Murugan Iyer , @Andreas Geißler will update.

OOM, SDNC, SO Update

@Andreas Geißler 

@Dan Timoney

• Any update for Oslo

Update Jiras

Oslo Package

@Amy Zwarico 

@Paweł Pawlak 

@Toine Siebelink

** Moved this task to Paris **

Byung-Woo Jun, for those projects without PTLs, we fileed vulnerability exception. Those package update will be revisited in Paris. TSC approved it on December 12th.

@Toine Siebelink updated the following: (Thanks!!!).

• Assignee, please check the tickets

• For the ticket without assignees, we need to find new assignees

Epic: https://jira.onap.org/browse/REQ-439
Oslo task: REQ-1592: PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR PARIS RELEASETo Do

• @Fiete Ostkamp , is there any automated tool for dependency checking from Gerrit? Matthew will provide its update. Matt/kevin will check; may use portal-ng as a test project/candidate; Fieta will a LF IT ticket toward Matt/Kevin. ; Matt put a couple of patches, still working on it. Matt gave us update…

• The Github2Gerrit is under IT-27340; about to merge; Matt, let us know;

• https://sonarcloud.io/summary/overall?id=onap_cps-ncmp-dmi-plugin

@Fiete Ostkamp , how to deal with vulnerabilities. SDC, UUI - Angular dependency issues. MPM dependencies; We will discuss this at the SECCOM;

RelEng/Infrastructure

@Kevin Sandi

Note: Postponed to Paris

• @Kevin Sandi, Github action ticket (Kevin Sandi) - bypassing -1 for option jobs : any update? Jira ticket for tracking RELENG-5602

  • If patches are fixed today, Kevin can start testing.

  • Done; resolved.

New bypassable workflow is in place and working. There are a couple of improvements I’m working on to avoid deprecation notices and use the correct voting github action.

It is working, but @Toine Siebelink , will create a new ticket for a new policy on checking the RTD links toward @Kevin Sandi ; @Thomas Kulik , reported there are many broken ONAP wikis; treat every warning as a warning??

@Toine Siebelink , created a new ticket, https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27475 .

• Any update? @Kevin Sandi will work on it later; backlog; Postponed to Paris

• make a job build more intelligent - still ongoing

MSB

@Fiete Ostkamp

• UUI still depends on MSB; will discuss this issue with @Keguang He ;

• also AAI some parts use MSB - need to remove the sections.

Testing Environment

Testing Improvement

CSIT Review

ToolChain Improvement

Documentation

Other Improvement suggestion

Sharing Best Practices

IF TIME ALLOWS ....

15 mins

Release status

5 mins

Upcoming Events

@LJ Illuzzi

• KubeCon+CloudNativeCon, and Open Networking & Edge Summit, next April 2025 in London

• LFN DTF schedule will be announced when it is available

• Open Networking & Edge Summit Registration: Register | LF Events

10 mins

Remaining Action Items