You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 350 Next »

 


 

 

 

  • Ahila P Network slicing automation
  • List of log4j vulnerability impacted pods in ONAP
    • Today morning Trivy was ran on ONAP daily master

      Pods
      onap-cli-757c76f546-zfd4m in vulnerable!
      onap-message-router-0 in vulnerable!
      onap-sdnrdb-coordinating-only-6f6d6b887b-kzr9x in vulnerable!
      onap-sdnrdb-master-0 in vulnerable!
      onap-sdnrdb-master-1 in vulnerable!
      onap-sdnrdb-master-2 in vulnerable!
      onap-vfc-huawei-vnfm-driver-57fddd8bc7-nqn7b in vulnerable!
      onap-vnfsdk-56d9fb886f-sk4s4 in vulnerable!
      
      Images:
      nexus3.onap.org:10001/onap/cli:6.0.1 -> onap-cli-757c76f546-zfd4m
      nexus3.onap.org:10001/onap/dmaap/dmaap-mr:1.3.0 -> onap-message-router-0
      docker.nexus.azure.onap.eu/bitnami/elasticsearch:7.9.3 -> onap-sdnrdb-coordinating-only-6f6d6b887b-kzr9x, onap-sdnrdb-master-X
      nexus3.onap.org:10001/onap/vfc/nfvo/svnfm/huawei:1.3.9 -> onap-vfc-huawei-vnfm-driver-57fddd8bc7-nqn7b
      nexus3.onap.org:10001/onap/vnfsdk/refrepo:1.6.3 -> onap-vnfsdk-56d9fb886f-sk4s4
    • There are more and more critical issue found, but these are just for cve-2021-44228

 

 

  • Nexus doesn't work - tests doesn't work....
  • When it worked we had several tests issues
    • needed to check if we don't use same kubeconfig on many tests pipelines
      • that can create conflicts because one test tries to create an instance of existing resource
  • Kubescape tests
    • could be useful but won't replace already existing tests
      • root pods check based just on the kubernetes resource definition (pod, deployment, statefulset etc.) and not check if the root user is disabled on the image
    • could be possible to add them into pipeline soon
  • Azure lab - should we migrate tests there? - discussion
    • there are currently 3 Azure labs
      • 2 gatings and 1 integration lab with ONAP
    • needs to ask TSC if it's possible to add one more to run daily tests - outside of any company infrastructure (currently Orange, Nokia, DT)
    • we could run daily on the 1 integration lab machine, but there is a risk we won't have a working lab if during daily execution ONAP creation fails
  • Migration Integration repos to GitLab?
    • it's not required and will take a lot of time and resources, leave it as it is
  • scancode.io - Alexander Mazuruk back and would work on that


Integration weekly meetings 2021 archives

Integration weekly meeting 2020 archives

Integration weekly meeting 2019 archives

Integration weekly meeting 2018 archives

Integration weekly meeting 2017 archives




  • No labels