Hi Amy,

I created a simple GUI to have a better visualization of the java/python 
versions.
The results are based on the last weekly master CI/CD chains run last week

I considered as waiver list the following containers:
docker.nexus.azure.onap.eu/beats/filebeat:5.5.0
docker.nexus.azure.onap.eu/cassandra:3.11.4
nexus3.onap.org:10001/onap/music/cassandra_3_11:3.0.24
docker.nexus.azure.onap.eu/bitnami/cassandra:3.11.9-debian-10-r30

and I used the seccom recommended_version file decalred in master (Honolulu): 
https://github.com/onap/integration-seccom/blob/master/recommended_versions.yaml

the results can be found at 
https://logs.onap.org/onap-integration/weekly/onap_weekly_pod4_master/02-11-2021_22-02/security/versions/versions/

as we can see, on Master (so Honolulu candidate), we still have java8 and 
python2.7 around..
the color code:
- red: Houston we got a problem, still java 8 or python 2.7 only found in the 
docker
- green, it is OK
- light green, it is not the recommended version BUT at least the major version 
is respected, in other words it is python3 (but it can be python3.5 when the 
recommendation is python3.9) or java 11.0.8 (java 11.0.09 recommended for H)
- light yellow: it is ambiguous we got several versions including the 
recommended versions
- yellow: it is ambiguous we got several versions in the container including 
one that is at least the major version

What we can see
1) java
1.1 significant progress have been done in Guilin
1.2 there are unfortunately still major components in 1.8 (AAI, dmaap, 
portal,..)
1.3 I suspect that ambiguous dockers could be fixed by removing the old version 
in the Dockerfile
1.4 not sure that the baseline image:8.0.0 is used as lots of dockers are in 
java 11.0.8 (11.0.9 recommended for Honolulu)

2) python
2.1 I suspect that most of the python2.7 is due to the distrib used in the 
docker and it is not linked to the component. A cleanup of the Docker file 
shall fix the issue...Existing JIRAs may be amended
2.2 No one moves to Python3.9 => it means that the python baseline image:8.0.0 
is not used at all as this image provides python3.9

In both cases it seems that baseline images are not used...
I wonder if the effort to maintain these images (they are available since 2 
months, based on seccom reco in order to avoid last minute integration issues) 
- to be discussed during PTL meeting

As far as I know most of the JIRA had been created in Guilin and oved to 
Honolulu table 
(https://wiki.onap.org/display/DW/Honolulu+Integration+Blocking+Points versions 
table), but if you could cross check, it will be nice.

If display OK, I can try to integrate it as part of versions use case, there 
are still some minor issues with the integration of versions in CI/CD (some 
manual steps are needed to post process the results and create the GUI).

/Morgan

_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations 
confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce 
message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages 
electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou 
falsifie. Merci.

This message and its attachments may contain confidential or privileged 
information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete 
this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been 
modified, changed or falsified.
Thank you.



-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#22856): https://lists.onap.org/g/onap-discuss/message/22856
Mute This Topic: https://lists.onap.org/mt/80649066/21656
Group Owner: [email protected]
Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-


Reply via email to