2018-07-25 AAI Weekly Meeting Notes

James Forsyth

The AAI team needs a strategy for integrating with AAF and AAF certificate manager, including potentially using 2-way TLS in R3.

AAI-32 - Integrate with AAF Open

Update 6 June: Andy Baxter provided presentation

Update 13 June: Is it necessary to encrypt services behind the reverse proxy (msb/haproxy/kubernetes ingress controller)?

Update 11 July: Yes, it is. AAF is providing a new simplified client and new instructions for setting up AAF in the labs by the end of the week

Currently AAI is using HTTPs w/ Basic Auth. SECCOM is recommending 2-way TLS with CADI. Jonathan Gathman will issue certificates - unsure if all devs can/should request a cert from AAF for dev/test. AAI will evaluate if the new client and documentation is adequate to build a service with AAF + 2way TLS in time to socialize it to clients - if we can't deliver a working system w/ 2 -way TLS by M3 (API Freeze) we'll continue to use Basic Auth and load the existing credentials into AAF.

With HAPROXY, the client cert subject and issuer are placed in HTTP headers and passed along to the service. The service can send the DNs of the subject + issuer to AAF, and AAF will determine if the client is allowed to access the resource.

Update 18 July:  Documentation expected to be available next week, awaiting additional information from AAF.

Update 25 July: Pavel Paroulekwill look At HAProxy with AAF; Venkata Harish Kajur will send demo link to Pavel Paroulek.

Draft AAI-CCVPN schema proposal for comment

AAI-CCVPN Schema Proposal for Casablanca Release

Update 18 July: Short overview provided by Keong Lim; more updates to come.

Update 25 July: Walkthrough of proposal so far. Question: how to represent data from other ONAP domain?

PTL elections can be held the week of 2 July 2018. AAI Committers are eligible to vote. PTL term is 1 year.

Casablanca Release Developers Forum Session Proposals

Update 11 July: James Forsyth was unopposed and has been re-elected PTL for the AAI project

AAI PTL will be on vacation from 16 July - 27 July 2018. The AAI team will need a delegate to run the Wednesday calls during this time and attend the following calls:

Mondays: [ptls] Group ONAP1, Mon UTC 13:00 / China 21:00 / Eastern 09:00 / Pacific 06:00

Thursdays: [onap-tsc] TSC Meeting ONAP1, Thr UTC 14:00 / China 22:00 / Eastern 10:00 / Pacific 07:00

Update 11 July: Venkata Harish Kajur will be the delegate for both 7/18 and 7/26.  James Forsyth to request ONAP Meet 10 Zoom delegation for Venkata Harish Kajur

AAI R3 M1 Release Planning

Update 18 July:  wiki page to reflect Casablanca deliverables.

AAI R3 M2 Deliverables for Functionality Freeze Milestone Checklist

Update: 25 July: Venkata Harish Kajur working to complete the M2 milestone template

AAI is considering the ONAP API Common Versioning Strategy (CVS) Proposal in Dublin

AAI-1185 - Versioning for ONAP Components with Backward Compatibility Open

Christina Monteleone invited to next week's meeting to discuss the restructuring.

Update 6 June: API Versioning has been moved to 1902 release.

Update 18 July:  Moved to Dublin release

Champ is coming in Casablanca and will serve as the graph abstraction layer used by resources. Duplicates and other badness happens when multiple nodes are operating on the same objects concurrently. We need to investigate how to use potential locking features or other mechanism to prevent duplicates. Steven Blimkie will look for volunteer inside Amdocs to look for an owner of an Epic that James Forsyth will open in JIRA for Casablanca.

The Datagrooming tool recognizes bad data like duplicates and "phantom nodes"

Venkata Harish Kajur to create a US to document the datagrooming steps/parameters for Beijing.

Pavel Paroulek made a cool script to compare what's in nexus vs. what's in git - it's very cool, thanks, Pavel!

James Forsyth

Venkata Harish Kajur

For aai-common, resources, and traversal we've enabled jacoco threshold to make sure that code coverage doesn't fall on a commit. This will prevent users from contributing code that would negatively impact the overall code coverage on a repo. Let's discuss enabling this across the board on all AAI repos.

Update 11 April: James Forsyth and Venkata Harish Kajur - Look at automated PoC polling script, add test coverage.

Update 13 June: Code coverage for Casablanca expected to be 70 - 80% level.

Update 26 June: Code coverage is set to 50% for Casablanca. Need js coverage

Update  18 July: aai-sparky-be showing as 49.3, team aware and working on it.

James Forsyth

Arul Nambi

Wiki page with instructions on the process: CII Badging Program

We have two CII Badging submissions currently active on CII Best Practice Badge Program: 1) AAI and 2) Sparky-fe

The team needs to decide how to split up the project - AAI is too big to fit under a single project.  James Forsyth proposes the following breakdown for CII badging:

1) AAI core (REST providers and common code): James Forsyth - Project created, ongoing progress.

• aai-common
• aai-resources
• aai-traversal
• gizmo
• champ
• graphadmin
• event-client

2) GUI - Arul Nambi - Need to include more repos to the current "front-end" project

• sparky-fe
• sparky-be
• data-router
• search-data-service
• router-core

3) Model loader - Tian Lee / Mark Tooski- Need to create projects

• model-loader
• babel
  
  
• 4) Graph utils / eventing / logging - Steven Blimkie - Need to create projects

• spike
• gap - Tian Lee
• graphgraph - Stretch for Beijing
• event-client - Tian Lee
• rest-client

4) ESR - Zi Li - Project is created, still ongoing process to meet all the requirements

• esr-gui
• esr-server

The idea is that we assign one key person who will be responsible for getting the badge on their set of repos.  This is just a suggestion, and I invite discussion, re-categorization, and complete rewrites. Owners of the sets can decide whether it makes sense to group sets into one CII badging request, or split. Every repo above must be included in 1 CII submission.

23 Feb:

Need readout next week per repo as to where we stand and how we can close before M4 (3/29).

Zi Li and Arul Nambi will work together to see if same kind of scan will work for both components

2 March: SONAR will not report on java script based so those need to be run manually via another tool locally.

Update 3/8: Urgent - need to document our plan and have a commitment to get to 50% coverage by m4. Preferably sooner to prevent giving your PTL a heart attack.

Offending repos:

• aai-gizmo: 9.14%
• aai-common: 41.9% - will have by code freeze, Venkata Harish Kajur targets 23 March
• router-core: 37.0% - Francis Paquette will have by code freeze

ALSO: if your repo is part of Beijing but is NOT part of the SONAR scan, (Venkata Harish Kajur, graphadmin leaps to mind) please fix that ASAP

Update 9 March: Steven Blimkie needs James Forsyth’s signoff on moving small libraries within event and rest clients to aai.core; Spike and Gap not used in Beijing;  Tian Lee to create project for Model loader; may need secondary URL describing model-loader but point to aai.core.

Gizmo – Giulio Graziani requesting adding it to his team's work list.

Common – Venkata Harish Kajur working on

Router-core – AMDOCs to work

Update 16 March: James Forsyth to verify on PTL call if all vulnerabilities 4 or above need to be cleared in order to pass.

Update 21 March: Title of project must have ONAP as the first word; Mark Tooski to pickup Tian Lee's action items while he is out.

Update 4 April: We are at 97%

Update 13 June: CII Badging level for Casablanca to move from Passing to Silver

Update 27 June: Team would like to adopt name of repo included in the label

Update 18 July: Activity will continue in Casablanca, same people will continue to report.