• This meeting is reduced to 30 minutes
• Rotating host
  • volunteer for this week: Paweł Pawlak  / Byung-Woo Jun 

Byung-Woo Jun 

Andreas Geißler 

• An ArgoCD deployment to provide an alternative the helm deployment. Marek Szwałkiewicz , Andreas Geißler , any update? Andreas Geißler will check with Marek
• https://gerrit.onap.org/r/c/oom/+/138260, https://gerrit.onap.org/r/c/oom/+/138533 - merged

• CCSDK A1 controller committer permission for John Keeney; Dan Timoney will contact John Keeney and plan to promote John as a CCSDK committer. After an election for it, the result will be reported to TSC. 

• logo issue, https://gerrit.onap.org/r/q/%22new+onap+logo%22+-status:merged 
• Matt Watkins , Marek Szwałkiewicz , could you help Thomas? Please update the issue next week...

  • https://github.com/onap/.github/actions/runs/10384019781/job/28750135843

    Change 138730 has 404 errors in DOCS check

    e.g.

    urllib.error.HTTPError: HTTP Error 404: Not Found

  • Thomas Kulik , will follow up

• No MultiCloud activities for several ONAP releases.
• Discussed this with Seshu; only SO K8s plugin is using it but, we can lock the code and deprecated the project. 
• Let's check its dependencies to prepare for its deprecation.
  • Andreas Geißler , will check it; 
  • SO K8S Plugin has its dependencies. keep it for Oslo. 

Ramesh Murugan Iyer 

Byung-Woo Jun 

• Policy-GUI deprecation is approved by TSC on July 18th - Done 
  • Proceeding rest of the transition steps, Project State: Unmaintained 
• DMaaP DR deprecation is approved by TSC on July 25th
  • Error rendering macro 'jira' : Unable to locate Jira server for this macro. It may be due to Application Link configuration.
  • Proceeding rest of the transition steps, Project State: Unmaintained
  • The entire DMaaP will be deprecated, replaced by Kafka/Strimzi
  • https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-27045 was created to remove DMaaP Jenkins job, CLM scan and sonacloud report. - Kevin could handle this ticket. 
  • Andreas Geißler , archiving unmaintained projects - done

Update Jiras

Oslo Package

Amy Zwarico 

Paweł Pawlak 

Oslo task: [REQ-1592] PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASE - ONAP JIRA

Epic: https://jira.onap.org/browse/REQ-439

AAI: [AAI-3941] AAI PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR NEW DELHI RELEASE - ONAP JIRA

CCSDK: [CCSDK-4042] CCSDK PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR NEW DELHI RELEASE - ONAP JIRA

CPS: [CPS-2342] CPS PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR NEW DELHI RELEASE - ONAP JIRA

DCAE: [DCAEGEN2-3414] DCAE PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASE - ONAP JIRA

Multicloud: [MULTICLOUD-1507] MULTICLOUD PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASE - ONAP JIRA

Network Controller: [SDNC-1844] NETWORK CONTROLLER PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASE - ONAP JIRA

Policy: [POLICY-5103] POLICY PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR NEW DELHI RELEASE - ONAP JIRA

PortalNG: [PORTALNG-114] PORTALNG PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASE - ONAP JIRA

SDC: [SDC-4690] SDC PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASE - ONAP JIRA

SO: [SO-4130] SO PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASE - ONAP JIRA

UsecaseUI: [USECASEUI-840] UUI PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR OSLO RELEASE - ONAP JIRA

ONAP component mature state, Mature State Projects

Gold badging is a separate process from the project maturity in LFN?

• CPS got the gold badging
• Policy is working on it? Policy team got editing permissions for gold badging wiki pages - WIP
• What other components do we want to get the gold badging? Follow the http://tlhansen.us/onap/onap.html tool for gold badging
  • Requested the gold badging tool upgrade for: removing deprecated projects and updating editors
  • Ramesh Murugan Iyer , almost completed. once completed, please check it with SECCOM.

LF IT Support

• Update ONAP main pages for New Delhi release (wiki.onap.org, onap.org) - Sandra Jackson (Deactivated) 
• Submitted ticket for update 
• Lfx zoom meetings need backup owners for vacation and other occasions 

• Pending ticket opened by Marek:

  https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-25573

  • Kevin Sandi - a workaround solution will be tried;
  • Marek / Matthew - automatic building solution is needed; escalate this? Waiting for feedback from Marek 
  • Kevin/Matt/Kevin - create a ticket and try a solution (maybe Github action helps? PoC??)
  • Some action plans and updates next week
  • Kevin and Marek are working on it, testing and deployment. will report its status - 90% is working; WIP; scheduled for next week update

  Kevin: Jenkins' sandbox; security patching is working fine; downtime would be 30 mins; will notify the downtime by email to ONAP community - WIP

  Thomas Kulik - issues with Portal-NG and other documentation - 

  IT-26899 Project is not created in RTD - Kevin; found a root cause; almost done, pushed the fixes;

  Marek: Verifying of fixing; will follow up when Thomas Kulik  and Fiete Ostkamp back - next week report; related to RTD pipeline?  need further testing

  Ticket opened by Tony: IT-26848 - Tony is checking on it, still has issues; Kevin will work on it; Thomas will check; should not block any? will work; report its staus next week

CISA report on memory safe code: 

• joint-guidance-exploring-memory-safety-in-critical-open-source-projects-508c.pdf, 
• The-Case-for-Memory-Safe-Roadmaps-508c.pdf
  

  
  

• Maggie (NSA; SECCOM) forwarded the NIST special publication on Service Mesh Proxy Models for Cloud-Native Applications. It is pretty good documentation on Service Mesh, Threat analysis and recommendations, https://csrc.nist.gov/pubs/sp/800/233/ipd , https://doi.org/10.6028/NIST.SP.800-233.ipd

• 2 actions:

  1. OpenSSF- add/update their guidelines; Tony
  2. Locally for ONAP: impact assessment and reviewing if there are opportunities to remove those languages.

• Added memory safe code guidance to the architecture security review template, ONAP Component Architecture Review Template. PTL, please take a look at it.

Other Improvement suggestion

Andreas Geißler  

As we have no solution, we can not move to ODL Potasium.

Any Update for Oslo from Dan Timoney ?

Paweł Pawlak 

Amy Zwarico 

1. Recommended packages upgrades are available on the restricted Wiki. Jiras to be created per project. 

   • Oslo/wiki/spaces/SV/pages/16094458

   Need to check NG Portal status CLM jobs. Any update?

 - no solution for now:

• • 6/24/2021: PortalNG reports in spreadsheet on protected wiki page - New Delhi Package Updates - Security Vulnerabilities - Confluence (onap.org)

Ticket opened by Fiete: https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-26527 (ticket is closed)

• ongoing; Jessica and Fiete are discussing this.

We are missing NG Portal UI CLM job.

List of the ONAP components to be disabled prepared by Andreas: 

OOM New Delhi Release

On April 18th, TSC approved the list.

Ticket opened by Fiete for UI CLM scan: https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-26882 - not a maven based project - an issue? To be further eleborated with Jess.

Fiete Ostkamp , SECCOM-276 - Setup scanning jobs for portal-ng-ui Closed . Unable to locate Jira server for this macro. It may be due to Application Link configuration.

Matt Watkins , will follow up. Please let us know the outcome. 

• • TBD