Attendee-List:

• Andreas Geissler 
• Jack Lucas 
• Byung-Woo Jun 
• Andrew Lamb 
• Vladimir Turok
• Marek Szwalkiewicz

Agenda

Current activities:

• "New" ONAP streamlining (ONAP Streamlining - The Process)
  
  • ONAP Streamlining - the process report for TSC, https://wiki.onap.org/download/attachments/177079958/ONAP%20-%20Streamlining%20the%20process%20Report-2023-8-3.pptx?version=6&modificationDate=1690986096666&api=v2
    • Please feel free to review and add your suggestions
• OOM Issues:
  • Helm versioning
  • Helm dependencies
  • Deployment dependencies
    • → working to test role creation via ServiceAcount template
    • https://gerrit.onap.org/r/c/oom/+/135590
• Ingress support for "Gateway-API"
  • Ingress provider options
• Montreal plans:
  
  • OOM Montreal Release
  • Create Montreal Epics
    • Move Tasks/Tickets to new M Epics
• Release schedule for Montreal (Release Planning: Montreal)
  • Under discussion, if and how a release should look like in the new "ONAP"
• S2S Authorization ( OOM-3191 - Getting issue details... STATUS ):
  • InfoSys support (check with Girish Kumar )
  • SO, AAI analyzed and discussions will be started
  • Presentation: https://wiki.onap.org/download/attachments/177079452/Service_Mesh_Basic_Auth_Elimination_Analysis.pdf?api=v2 
  • Seshu will be contacted to discuss the SO changes (roles/users,,...)
  • SDC will be contacted by Andreas Geissler and Portal Team
  • Jira tasks are created under OOM-3191 - Getting issue details... STATUS
• External ONAP Access using Authentication OOM-3192 - Getting issue details... STATUS
  • Patch for _ingress.tpl to add "AuthorizationPolicy"
  • Test it with SDC FE
• Adding charts for portal-ng
  • Planned for the next week (Fiete Ostkamp )
• DB Update (Cassandra, MariaDB,...) OOM-3183 - Getting issue details... STATUS
  • Cassandra Operator patch OOM-3226 - Getting issue details... STATUS merged
  • MariaDB-Operator in progress
• Helm Chart Updates OOM-3082 - Getting issue details... STATUS
  • Added some tasks 
    • OOM-3208 - Getting issue details... STATUS Improve Helm Chart Verification
    • OOM-3227 - Getting issue details... STATUS Make charts ready for a Namespace change
• Create and implement a helm chart versioning concept OOM-3079 - Getting issue details... STATUS
  • Check with Florian Bachmann 
• Extend the Ingress template and add Component ingress configuration OOM-3075 - Getting issue details... STATUS
  • Patch planned soon to support Gateway-API OOM-3108 - Getting issue details... STATUS
• Others:
  • Resource Limits correction Vladimir Turok 
    • to be checked, whether CPU limits should be used again (https://gerrit.onap.org/r/c/oom/+/135433)
  • ServiceAccount setting for Jobs are missing (https://gerrit.onap.org/r/c/oom/+/135450)
  • MessageRouter removal (to be checked with Fiachra Corcoran 
    
    
  • Should we add charts for ONAP-Base (strimzi, keycloak,...) ?
  • Should we separate the ONAP testing component charts ?

Open Jira issues:

T	Key	Summary	Assignee	Reporter	P	Status	Resolution	Created	Updated	Due
	OOM-3172	[Common] rendering issue of template "common.nginxIngress"	Alexander Dehn	Alexander Dehn		In Progress	Unresolved	Apr 27, 2023	Apr 27, 2023
	OOM-3171	service-mesh-wait-for-job-container fails, when no sidecar exists	Andreas Geissler	Andreas Geissler		Open	Unresolved	Apr 27, 2023	Apr 27, 2023
	OOM-3170	[SDNC] Support kafka native interface	Alexander Dehn	Alexander Dehn		In Progress	Unresolved	Apr 25, 2023	Apr 26, 2023
	OOM-3169	For SDNC setup consider new Websocketport	Alexander Dehn	Herbert Eiselt		In Progress	Unresolved	Apr 24, 2023	Apr 27, 2023
	OOM-3168	Introduce cassandra-operator to OOM	Andreas Geissler	Andreas Geissler		Open	Unresolved	Apr 24, 2023	Apr 24, 2023
	OOM-3167	DOC: change the plugin installation instructions	Marek Szwałkiewicz	Marek Szwałkiewicz		Open	Unresolved	Apr 24, 2023	Apr 24, 2023
	OOM-3166	Kiali Validation - KIA0601 - Port name must follow [-suffix] form	Fiete Ostkamp	Fiete Ostkamp		In Progress	Unresolved	Apr 19, 2023	Apr 19, 2023
	OOM-3165	Policy-gui Ingress target is wrong	Andreas Geissler	Andreas Geissler		Open	Unresolved	Apr 19, 2023	Apr 19, 2023
	OOM-3162	Update Strimzi Operator to 0.34.0 and Kafka to 3.4.3	Fiachra Corcoran	Andreas Geissler		Open	Unresolved	Apr 13, 2023	Apr 13, 2023
	OOM-3161	[COMMON] Add monitoring to postgres	Miroslav Masaryk	Miroslav Masaryk		Open	Unresolved	Apr 12, 2023	Apr 13, 2023
	OOM-3159	Update OOM documentation	Andreas Geissler	Andreas Geissler		Open	Unresolved	Mar 31, 2023	Apr 13, 2023
	OOM-3155	Review license scan issues	Andreas Geissler	David McBride		In Progress	Unresolved	Mar 30, 2023	Apr 26, 2023
	OOM-3153	Feature Freeze	Andreas Geissler	David McBride		Open	Unresolved	Mar 30, 2023	Mar 30, 2023	Mar 23, 2023
	OOM-3151	Improve stability in Daily Master Deployments	Andreas Geissler	Andreas Geissler		Open	Unresolved	Mar 21, 2023	Mar 21, 2023
	OOM-3149	The chartmuseum binary download URL not working in OOM deployment	Andreas Geissler	Sankar Palanivel		Open	Unresolved	Mar 09, 2023	Apr 13, 2023
	OOM-3147	Create authorization policy for platform	Unassigned	Andrew Lamb		Open	Unresolved	Mar 06, 2023	Mar 08, 2023
	OOM-3146	Create authorization policy for Holmes	Unassigned	Andrew Lamb		Open	Unresolved	Mar 06, 2023	Mar 08, 2023
	OOM-3145	Create authorization policy for CPS	Unassigned	Andrew Lamb		Open	Unresolved	Mar 06, 2023	Mar 08, 2023
	OOM-3144	Create authorization policy for Cassandra	Unassigned	Andrew Lamb		Open	Unresolved	Mar 06, 2023	Mar 08, 2023
	OOM-3143	Create authorization policy for Consul	Unassigned	Andrew Lamb		Open	Unresolved	Mar 06, 2023	Mar 08, 2023

Showing 20 out of 103 issues Refresh

Backlog from older meetings (to be cleaned up)

Pending component fixes:

(2023-05-03: No update)

• CDS-UI CCSDK-3814 - CDS-UI must be able to listen on HTTP Open → DT /TM has a look
  • maybe postpone to M
• SO Monitor SO-4027 - Make SO-Service-Monitor ServiceMesh compatible Open → Byung mentioned, that E/// team try to resolve the issue (Byung's note: It was assigned to Viresh Navalli, Capgemini. E/// plans to assist Viresh as needed.)
  → postpone to Montreal
• CLI will not work without fix... ( OOM-3096 - [CLI] Remove AAF dependency Delivered )
• UUI - not clear if working
  • MSB issue reported: MSB-755 - The route from the MSB module to the usecase-ui module does not support HTTP Closed (helong <hwx171157@163.com>)

Helm chart cleanup: OOM-2975 - Remove dependencies on AAF Open

(2023-05-10: No update)

• Common → Andreas
• Platform
• MSB
• VFC

Ingress enhancements for non-HTTP interfaces:

• External Kafka access → https://gerrit.onap.org/r/c/oom/+/133767
  • Doc: Test external Kafka access in London
• SDNC CallHome (SSH) → part of https://gerrit.onap.org/r/c/oom/+/133861
• Plan to update _ingress.tpl for Gateway-API support and AuthorizationPolicy

Oauth2-proxy setup (Andreas):

(2023-05-03: No update)

• Documentation: Oauth2-Proxy implementation and configuration
• Oauth2-Proxy: https://gerrit.onap.org/r/c/oom/+/130445
• Adding Oauth2-proxy client to ONAP realm: https://gerrit.onap.org/r/c/oom/+/133699

To be started:

(2023-05-03: No update)

• Ingress template improvements:
  • OOM-3108 - Investigate to change to K8S Gateway-API Open
  • OOM-3075 - Extend the Ingress template and add Component ingress configuration Open
• Remove unused components:
  • OOM-3074 - Remove components and options from charts Open
• MariaDB:
  • OOM-3072 - Resolve and improve the existing MariaDB-Galera templates Open → DT (with TM) to investigate
• Remove NodePort in Ingress environments:
  • OOM-3012 - Remove NodePort in Service definitions under ServiceMesh In Progress → will be automatically fixed with cleanups
• UDP Ingress support:
  • UDP Nodeport support in _service-tpl OOM-3107 - Allow NodePorts for UDP services Open → can be closed
  • Possible solution: UDPRoute support in Gatway-API

Others:

(2023-05-03: No update)

• SDC Listener HTTP issue SDC-4233 - SDC Distribution Client should work with lower-case Header entries Closed → Marek provided patch → merged, need to be released and can be used in the clients
  • When released, all clients need to be updated (CDS, AAI, Policy, SO, ...)
  • Create tickets for all clients....

2023-05-31:  Discussed presentation to TSC/PTL meeting proposing a new global requirement to rely (exclusively) on service mesh mechanisms for intra-ONAP authentication and authorization (get rid of HTTP basic auth).  To be presented to TSC on 2023-06-01.