@Andreas Geißler

@Keguang He 

@Byung-Woo Jun 

@N.K. Shankaranarayanan 

@Dan Timoney 

@Paweł Pawlak 

Guanyu Zhu (@zhuguanyu)

@Dong Wang

We are encouraging ONAP consumers to share with us their feedback, so we could prioritize our activities and make ONAP better suited their needs and requirements.

• Discussions between Arpit Joshipura, Byung-Woo Jun, Jilll Lovato, Louis Llluzzi and Sunny Cai:

• Arpit's input:

  • Highlight the value proposition of ONAP, including overall statistics (e.g., contributors, LOC, etc.) over its lifetime.

  • Provide deployment examples with links to DT, CMCC, Ericsson, and others

  • Emphasize the product integration of ONAP

  • Use headlines like: "From Control loops and Intent-based to full AI Orchestration and Management."

  • Highlight security contributions, such as those provided during the OPS 5G project by US Government for Networking slicing

    • Byung-woo Jun plans to add details about ONAP's service mesh and Ingress architecture and implementation

  • Address past criticisms of ONAP being too large and complex by emphasizing recent efforts, such as "streamlining microservices and modules, archiving legacy software, etc."

    • Byung-Woo Jun explained the ONAP Streamlining Evolution initiative to address these concerns

  • This is one shot we get. Let's make it BIG!

• Byung-Woo Jun, together with ONAP TSC members, will collaborate with Jill, Louise, Sunny to create compelling marketing catch points. 

• Byung-Woo Jun, Jill Lovato, Louise Lluzzi and Sunny Cai (along with others) plan to hold an initial call sometime next week to outline our plans. Byung intends to engage with TSC members following the initial discussion.

From the Paris release, TSC needs to discuss ONAP focus areas and strategies / roadmaps

•  

  TSC members to add thoughts

Let's discuss more this year for Paris +

@Byung-Woo Jun presented the brainstorm at the TSC meeting this week.

Brainstorm:

• Ensure ONAP core components are focused and operate independently, from build to runtime

  • DT finishes Argo-CD based component independent deployment

    • Argo-CD is a DT choice, but ONAP can allow other CDs, e.g., Flux (need contributors)

    • DT plans to productize some of the selected ONAP core components early next year in their TNAP production environment

  • Declarative and Intent-based component operations by the Repository-based Network Automation : see the ideas from ONAP Architecture Evolution - 2025.pdf

• Make ONAP core components more autonomous and ready for use by both ONAP, LF and other external users

  •  

    • During New Delhi and Oslo releases, CPS and Policy achieved the OpenSSF Gold Badging status. Kudos to the team!

    • Continue to promote/facilitate other ONAP core components for the Gold Badging status (e.g., UUI, SDNC)

• Incorporate more GenAI capabilities and use cases to the ONAP components, and promote the adoption of open-source LLM models and frameworks aligned with LF AI & Data and GenAI Commons

  • Collaborate with LF AI & Data GenAI Commons and Nephio GenAI for 5G and 6G

  • Open-source based models and controls

  • AI-Based Control Loop

  • AI Model-As-A-Service 

  • ETSI ISG NFV compliance for AI?

• Foster inter-community collaboration with other LF communities, such as O-RAN and Nephio

  • SDNC enhancements (which is used by O-RAN OAM as is)

  • Resource-based Orchestration Pattern (leveraging CD and Operator)

  • Energy saving / monitoring 

• Ensure the security of ONAP components and operations 

  • The latest security mechanism for communications (service mesh enhancements leveraging Istio and coming Ambient Mesh)

  • Deprecate unused sub-components and mitigate security vulnerabilities

• Define a secure LFN CI/CD pipeline by leveraging OpenSSF-associated reference tools

• TSC Vice chairs are elected as following. Congratulations!!!

  • @Andreas Geißler, DT

  • @Keguang He, China Mobile

  • @Paweł Pawlak, CloudLinux/TuxCare

• Byung holds a TSC preparation meeting ONAP TSC vice chairs.

• For the Paris release features, we need to discuss the package updates; who is doing what?

12 issuesRefresh

Note: PTLs, thank you very much for closing the package update. 

Note: SO, SDC, MultiCloud and DCAE (without PTLs) are open; DT offered their help on  SDC, MultiCloud and DCAE. Thank you very much!!!

Note: I will contact Seshu for the SO.

• @Fiete Ostkamp, reported that UUI still depends on MSB; @Byung-Woo Jun,sent email to @Keguang He for their plans to resolve the issues.

  • @Fiete Ostkamp, fixed UUI (frontend), working on the backend.  

  • @Andreas Geißler, may need to clean up OOM for this after UUI update.

• @Fiete Ostkamp, also reported some parts of AAI still use MSB. 

  • Only OOM chart itself; @Andreas Geißler, will check it

• LF Networking Project Release Blog Template: https://docs.google.com/forms/d/e/1FAIpQLSc1Dmp8kQfN8n2eVcFdI19p9P1-ZzLbQGSSqih3abqWsXTZew/viewform

• Oslo Release 

  • The Oslo release has been signed off on January 16th.

    TSC vote: TSC approves the Oslo release sing-off on January 16th. - Approved

•  

  • TSC approved a vulnerability exception for some projects; Package upgrades for vulnerability mitigation will be handled in Paris

  • SDC Ruby update is postponed to Paris

  • Release Planning: Oslo

  • Project Status in Oslo Release

  • Oslo Release Key Updates

• @Andreas Geißler, OOM update for Oslo; will cherry-pick some Portal (small issue); oslo version update in the OOM

• The next Paris release schedule is TSC approved on Dec 5, 2024 , Release Planning: Paris 

  • TSC approved the current Paris release schedule on December 5th

  • An ArgoCD deployment to provide an alternative the helm deployment

  • RAN Simulator enhancement

  • Policy-OPA-PDP

  • MAAS

  • SDC Ruby upgrade

  • Project package upgrade

  • SDNC/CCSDK - need to upgrade Java 21 and Maven ; PTL, SECCOM and ARCCOM will handle this

  • not only SDNC, may be other components too. SECCOM will discuss

• Long Term Release Roadmap

• https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27520 - waiting for Murali - on hold

• Error in Creating Releng Go Jobs as per guide

• @Kevin Sandi, is working on it and waiting for Murali's input

• What is the current status? almost done by @Kevin Sandi. Deena, Murali and Kevin need to work together to finalize it.

• Requesting guidance on adding goLang based project to Nexus IQ - Project Services Support - Service Project
  (IT-27561) - In Progress, https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27561

• @Kevin Sandi, New JJB template for Golang CLM scan is ready for review and approval => https://gerrit.linuxfoundation.org/infra/c/releng/global-jjb/+/73372 , once that change is approved and merged by LF we can proceed to upgrade the GlobalJJB version at ONAP and then merge following change

• IT-27720; @Kevin Sandi, will check

• https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27696 , Kevin will check

• https://gerrit.onap.org/r/c/ci-management/+/139794

• @Ramesh Murugan Iyer, Policy team will check vulnerabilities on direct dependencies; may need to open a ticket for the product (Sonatype) company; @Kevin Sandi, asked Murali to send the test results before raising tickets; CycloneDX-based SBOM; may need a conversion between CycloneDX and SPDX;

• So far, LFN supports SPDX only for their pipeline SBOM. SECCOM will discuss it further with the LF team. We need a conversion between CycloneDX and SPDX.

• @Deena Mukundan, 

• Policy Staging job for imaging - will discuss more at the PTL next week

• ARCCOM plans to work on the ONAP marketing catch points and architecture for the Paris release.

• PTLs, please plan for the ARCCOM reviews for your new features, requirements and enhancements for Paris.

• More ONAP Streamlining documentation, ONAP Streamlining Evolution and its sub-wiki pages. 

• TLS 1.3 support thru the Service Mesh and Ingress Gateway? The current TLS 1.2 is broken. 

  • @Andreas Geißler, we can configure for TLS 1.3; it would be for Paris.

  • @Byung-Woo Jun, Paris architecture will address this update.

• SECCOM will review the Java 21, Python, and Maven upgrades from the security perspective. 

  • @Paweł Pawlak, will explore the current status of versions; will discuss this further at the SECCOM; scanner from the weekly pipelines may help?? @Andreas Geißler, will check.

• How to deal with vulnerabilities. e.g., SDC, UUI - Angular dependency issues. Also, MPM

• SECCOM plans to discuss these issues with PTLs at the next SECCOM meeting (next SECCOM meeting 2/4/2025)

Events & Meetings

(5 minutes)

Upcoming Events & Housekeeping

• KubeCon+CloudNativeCon, and Open Networking & Edge Summit, next April 2025 in London

• LFN DTF - not yet; a week from next Monday, LFN will discuss the LFN DTF schedule. @louis li, will let us know.

• Open Networking & Edge Summit Registration: https://events.linuxfoundation.org/open-networking-edge-summit-europe/register/

  • There are no community sessions for this event. It’s a 100% curated agenda. There will be keynotes by LFN and LFE, and strategy sessions.