PTL 2019-05-27

zoom bridge: https://zoom.us/j/283628617

27 May 2019	PTL Recordings	Zoom Chat Log

Duration 60 minutes

Duration	Agenda Item	Requested by	Notes / Links
START RECORDING
30min	Dublin end game plans RC2 - May 30th (Euro holiday) Sign-off - June 6th	Former user (Deleted)	RC1 Follow-up: Deliverables for RCx Milestone Checklist Template !!! PTLs to provide latest RELEASE Images ASAP, especially if you made changes post-RC0 !!! #75479: Release of OOF RC0 artifacts #75986: Please release SO libs artifacts Pair-wise testing still in progress for Policy (91%), Portal (67%) and SO (89%) teams Test Coverage Waivers for AAF, Multi-Cloud and SDC are in progress but as per today, DCAE – 52.5% - https://sonar.onap.org/dashboard?id=org.onap.sdc.dcae-d.dt-be-main%3Adcae_dt_be_main%3Adublin and and 52.6% -https://sonar.onap.org/dashboard?id=org.onap.sdc.dcae-d.dt-be-main%3Adcae_dt_be_main%3Amaster MUSIC – 53.3% - https://sonar.onap.org/dashboard?id=org.onap.music%3AMUSIC Integration Weather Board for Dublin Release Integration Blockers: Dublin Release Integration Test Blocking Issues Remaining Highest/High Defects: Defect Status for Dublin Documentation Tickets: Documentation Status for Dublin Integration Tests Status: Dublin Release Integration Testing Status 14 out of 34 are completed 14 out of 34 are at >=60% test completion 6 out of 34 <60% test completion Dublin Risks: Dublin Risks Projects: Project Status in Dublin Release Review Marketing Messages - https://lists.onap.org/g/onap-discuss/message/17065 Please update JIRA bugs, tasks, user stories, etc, but do not close tickets when the work is not done No Medium, Low, Lowest defect to be fixed at this stage on Dublin branch - only High/Highest Please provide your RC2 checklist no later than May 29th 11am PST- thank you
10min	CII badging and vulnerability disclosure	Krzysztof Opasiak	Call to action: Update you CII badging info Pawel created a ticket to improve readthedoc, working with Sofia accordingly (SECCOM): provide template for PTLs to report their security/vulnerability issues including rules for exposing ports outside the cluster #2 CII badging - e-mail sent to PTLs & Security #2.1 SO is ok to be reviewed by Security #2.2. another few projects still need to complete their items
10 min	El Alto security priorities	Paweł Pawlak	Key components versioning, recommendations after known vulnerabilities analysis, follow-up with fixes related to OJSI tickets, ONAP communication matrix #3.1 Work in progress. Natacha is working on a proposition to be presented during ONAP DDF in Sweden Additional recommendations from Security about K8S, Tomcat, Alpine, etc. should be defined for the incoming releases so each project will have a common OS, common open source strategy #3.2 OSJI tickets - interaction with PTLs is required - Please have a look at them asap Holmes, Logging, Portal, UUI, VFC, VNFSDK - vulnerability table OOM - CII Badging - now updated #3.3 Other item: Early disclosure to Operators has been approved by TSC. In the future, audience could be reviewed - SECCOM to assess Any TUESDAY, feel free to join SECCOM if you have any suggestion

Zoom Chat Log

From Me to Everyone: 03:05 PM

#Dublin Release

From Me to Everyone: 03:20 PM

#info review remaining Highest/high

From Me to Everyone: 03:53 PM

#Review your documentation tickets but please do not close your tickets without any comment or without making any change otherwise we will re-open the tickets :-(

#Integration status - feedback from Tao received

# Please review Dublin messaging when you have few mins

#CIA- presentation to postpone to June 3rd

#info Security topics

#1 Pawel created a ticket to improve readthedoc, working with Sofia accordingly

#2 CII badging - e-mail sent to PTLs & Security

#2.1 SO is ok to be reviewed by Security

#2.2. another few projects still need to complete their items

#3 key component versioning

#3.1 Work in progress. Natacha is working on a proposition to be presented during ONAP DDF in Sweden

Additional recommendations from Security about K8S, Tomcat, Alpine, etc. should be defined for the incoming releases so each project will have a common OS, common open source strategy

#3.2 OSJI tickets - interaction with PTLs

#3.3 Other item:

Early disclosure to Operators has been approved by TSC. In the future, audience could be reviewed - SECCOM to assess

Any Wednesday, feel free to join SECCOM if you have any suggestion

From Amy Zwarico to Everyone: 03:57 PM

Projects that have not completed vulnerability review tables:

Holmes, Logging, Portal, SO, UUI, VFC, VNFSDK

From Me to Everyone: 04:01 PM

PTLs to provide RELEASE Images ASAP

If you have the ONAP Helpdesk ticket then please share so we can bring them on top of the list

From Mike Elliott to Everyone: 04:03 PM

@Pawel, CII badging updated for OOM

Action Items

2/11: Migrate Docker image releases from Nexus3 into Docker Hub (Architecture Independence) by Dublin M4.
<2-15-2019> Preparing a preso for review of all known infrastructure change requests for review at PTL meeting 2-25-2019
<2019-04-08: global-jjb progress report: start on DCAE soon - focus on El Alto delivery (precursor to Dockerhub)<2019-04-22 - Using mvn staging plugins to deploy - unfort many of the changes need to be in the source code to insure the job is running><2019-05-27> global-jjb still in progress
Tlab persistent storage IO architecture Rich Bennett
Request from Rich Bennett about Storage/Persistent Data Architecture Plan/PTLs - Single NFS server?
<2019-04-22: performance issues with old config - have bare metal cluster - - want to bring in more realistic operational aspects to the testing - network storage vs direct, would like to place modules in isolation into the environment. Evaluating the utility of testing this way.