[onap-discuss] [integration][sdnc][so][vid] Integration Working session

2018-10-18 Thread Helen Chen
BEGIN:VCALENDAR
METHOD:REQUEST
PRODID:Microsoft Exchange Server 2010
VERSION:2.0
BEGIN:VTIMEZONE
TZID:Pacific Standard Time
BEGIN:STANDARD
DTSTART:16010101T02
TZOFFSETFROM:-0700
TZOFFSETTO:-0800
RRULE:FREQ=YEARLY;INTERVAL=1;BYDAY=1SU;BYMONTH=11
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:16010101T02
TZOFFSETFROM:-0800
TZOFFSETTO:-0700
RRULE:FREQ=YEARLY;INTERVAL=1;BYDAY=2SU;BYMONTH=3
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
ORGANIZER;CN=Yunxia Chen:MAILTO:helen.c...@huawei.com
ATTENDEE;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP=TRUE;CN=onap-discu
 ss:MAILTO:onap-discuss@lists.onap.org
ATTENDEE;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP=TRUE;CN=dtimoney@a
 tt.com:MAILTO:dtimo...@att.com
ATTENDEE;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP=TRUE;CN=Seshu m:MA
 ILTO:seshu.kuma...@huawei.com
ATTENDEE;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP=TRUE;CN=os0695@att
 .com:MAILTO:os0...@att.com
DESCRIPTION;LANGUAGE=en-US:When: Friday\, October 19\, 2018 10:00 AM-11:00 
 AM. (UTC-08:00) Pacific Time (US & Canada)\nWhere: https://zoom.us/j/44666
 6\n\n*~*~*~*~*~*~*~*~*~*\n\nHI\, Team\,\n\nWe are making solid progres
 s. And we will continue testing vFW use case for VNF instantiation tomorro
 w.\n\n\n\nHi\, Seshu\, I know this time is not good for you\, could you pl
 ease assign someone from SO team to help us?\n\n\n\nBest regards\,\n\n\n\n
 Helen Chen\n
SUMMARY;LANGUAGE=en-US:[integration][sdnc][so][vid] Integration Working ses
 sion
DTSTART;TZID=Pacific Standard Time:20181019T10
DTEND;TZID=Pacific Standard Time:20181019T11
UID:A05B864E-7745-4DF6-83A3-7484220037F0
CLASS:PUBLIC
PRIORITY:5
DTSTAMP:20181019T050227Z
TRANSP:OPAQUE
STATUS:CONFIRMED
SEQUENCE:0
LOCATION;LANGUAGE=en-US:https://zoom.us/j/44
X-MICROSOFT-CDO-APPT-SEQUENCE:0
X-MICROSOFT-CDO-OWNERAPPTID:2116719803
X-MICROSOFT-CDO-BUSYSTATUS:TENTATIVE
X-MICROSOFT-CDO-INTENDEDSTATUS:BUSY
X-MICROSOFT-CDO-ALLDAYEVENT:FALSE
X-MICROSOFT-CDO-IMPORTANCE:1
X-MICROSOFT-CDO-INSTTYPE:0
X-MICROSOFT-DISALLOW-COUNTER:TRUE
BEGIN:VALARM
ACTION:DISPLAY
DESCRIPTION:REMINDER
TRIGGER;RELATED=START:-PT15M
END:VALARM
END:VEVENT
END:VCALENDAR


Re: [onap-discuss] [TCA] No Policy Threshold violated by the VES CEF Message

2018-10-18 Thread Jorge Hernandez
Hi Xoan,

I’m a bit confused by the logs too, you should see a “FINAL: SUCCESS” matching 
the receipt of the APPC “SUCCESS” but failure reporting is ok for “duplicated” 
transactions, which are expected in this use case since DCAE ONSETs comes into 
policy in multiples for the same operation.   Resources should be locked based 
on the target vnf id.   In any case, keep an eye on it, if you can reproduce it 
on an stable environment as I am not very clear, how the changed target vnf id, 
that you mention at the bottom of the page, would affect the rules processing 
of the flow.

Best regards,
Jorge

From: onap-discuss@lists.onap.org [mailto:onap-discuss@lists.onap.org] On 
Behalf Of jkzcristiano
Sent: Thursday, October 18, 2018 8:10 AM
To: onap-discuss@lists.onap.org
Subject: Re: [onap-discuss] [TCA] No Policy Threshold violated by the VES CEF 
Message

Dear Jorge,

thank you for your help.

I had several issues due to some misconfigurations between ONAP services 
(vNicUsageArray/vNicPerformanceArray, the closedLoopControlName was different 
between TCA and the pushed policy, the target VNF was already running, etc.).

Now the CL is working.

[cid:image001.png@01D46724.160EA890]

However, despite it is working, by inspecting drools' network.log file I still 
observe some issues:


...
...
[2018-10-18T12:38:06.906+00:00|Session 
org.onap.policy-engine.drools.amsterdam:policy-amsterdam-rules:0.1.0:closedloop-amsterdam][OUT|UEB|POLICY-CL-MGT]
{
  "AAI": {
"generic-vnf.resource-version": "1539010321583",
"generic-vnf.nf-role": "",
"generic-vnf.prov-status": "PROV",
"generic-vnf.orchestration-status": "Active",
"generic-vnf.is-closed-loop-disabled": "false",
"generic-vnf.service-id": "eb5c770a-ec21-43df-87ed-82fbc326e4f6",
"generic-vnf.in-maint": "false",
"generic-vnf.nf-type": "",
"generic-vnf.nf-naming-code": "",
"generic-vnf.vnf-name": "VNF-vFWSNK-vFWCL-08-10-Ins-4",
"generic-vnf.model-version-id": "0b83692c-f944-411d-8103-36bd26d2b974",
"generic-vnf.model-customization-id": 
"1894e439-88d9-40a4-a591-c1e9de88f121",
"generic-vnf.nf-function": "",
"generic-vnf.vnf-type": "vFirewall-Service/vFWSNK 0",
"generic-vnf.model-invariant-id": "8864d433-a569-4b99-ba09-48b3d6d8d6db",
"generic-vnf.vnf-id": "cd4204ed-a2a9-42c5-baaa-d39953ff6178"
  },
  "closedLoopAlarmStart": 1539866241522408,
  "closedLoopControlName": 
"ControlLoop-vFirewall-d0a1dfc6-94f5-4fd4-a5b5-4630b438850a",
  "version": "1.0.2",
  "requestId": "0549eb14-2f56-418f-adc3-d503d3bf96f6",
  "closedLoopEventClient": "DCAE_INSTANCE_ID.dcae-tca",
  "targetType": "VNF",
  "target": "generic-vnf.vnf-name",
  "from": "policy:amsterdam",
  "policyScope": "com",
  "policyName": 
"com.Config_BRMS_Param_BRMSParamvFirewall.EVENT.MANAGER.OPERATION.LOCKED.GUARD_PERMITTED",
  "policyVersion": "1",
  "notification": "OPERATION",
  "message": "actor=APPC,operation=ModifyConfig,target=Target [type=VNF, 
resourceID=9b231b3a-a6e6-43df-9ed1-13a2b70da856],subRequestId=1",
  "notificationTime": "2018-10-18 12:38:06.906000+00:00",
  "history": []
}
[2018-10-18T12:38:06.907+00:00|Session 
org.onap.policy-engine.drools.amsterdam:policy-amsterdam-rules:0.1.0:closedloop-amsterdam][OUT|UEB|APPC-CL]
{
  "CommonHeader": {
"TimeStamp": 1539866286906,
"APIver": "1.01",
"RequestID": "0549eb14-2f56-418f-adc3-d503d3bf96f6",
"SubRequestID": "1",
"RequestTrack": [],
"Flags": []
  },
  "Action": "ModifyConfig",
  "Payload": {
"generic-vnf.vnf-id": "44662895-0e3e-475d-bc9b-6f734ba0f495",
"pg-streams": {
  "pg-stream": [
{
  "id": "fw_udp1",
  "is-enabled": "true"
},
{
  "id": "fw_udp2",
  "is-enabled": "true"
},
{
  "id": "fw_udp3",
  "is-enabled": "true"
},
{
  "id": "fw_udp4",
  "is-enabled": "true"
},
{
  "id": "fw_udp5",
  "is-enabled": "true"
}
  ]
}
  }
}
[2018-10-18T12:38:07.048+00:00|UEB-source-APPC-CL][IN|UEB|APPC-CL]
{
  "CommonHeader": {
"TimeStamp": 1539866286906,
"APIver": "1.01",
"RequestID": "0549eb14-2f56-418f-adc3-d503d3bf96f6",
"SubRequestID": "1",
"RequestTrack": [],
"Flags": []
  },
  "Action": "ModifyConfig",
  "Payload": {
"generic-vnf.vnf-id": "44662895-0e3e-475d-bc9b-6f734ba0f495",
"pg-streams": {
  "pg-stream": [
{
  "id": "fw_udp1",
  "is-enabled": "true"
},
{
  "id": "fw_udp2",
  "is-enabled": "true"
},
{
  "id": "fw_udp3",
  "is-enabled": "true"
},
{
  "id": "fw_udp4",
  "is-enabled": "true"
},
{
  "id": "fw_udp5",
  "is-enabled": "true"
}
  ]
}
  }
}
[2018-10-18T12:38:07.246+00:00|UEB-source-APPC-CL][IN|UEB|APPC-CL]

Re: [onap-discuss] ONAP Support for Secure Communication

2018-10-18 Thread Jorge Hernandez
Yes, correct, that’s the plan.  -Jorge

From: ZWARICO, AMY
Sent: Thursday, October 18, 2018 8:49 PM
To: onap-discuss@lists.onap.org; HERNANDEZ-HERRERO, JORGE 
Subject: RE: [onap-discuss] ONAP Support for Secure Communication

Thank you. Are there plans to support https for the new components in Dublin?

From: onap-discuss@lists.onap.org 
[mailto:onap-discuss@lists.onap.org] On Behalf Of HERNANDEZ-HERRERO, JORGE
Sent: Thursday, October 18, 2018 7:13 PM
To: onap-discuss@lists.onap.org
Subject: Re: [onap-discuss] ONAP Support for Secure Communication

***Security Advisory: This Message Originated Outside of AT ***
Reference http://cso.att.com/EmailSecurity/IDSP.html for more information.

Hello Amy,



Responding on behalf of Pam D., Policy PTL, that is currently on vacations.



https is supported across all policy components with the exception of the new 
ones introduced in Casablanca release (apex-pdp, policy-distribution).



Jorge


-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13138): https://lists.onap.org/g/onap-discuss/message/13138
Mute This Topic: https://lists.onap.org/mt/27369768/21656
Group Owner: onap-discuss+ow...@lists.onap.org
Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-



Re: [onap-discuss] ONAP Support for Secure Communication

2018-10-18 Thread Yang Bin
MSB for sure is part of Casablanca release, but not sure about ISTIO, I need 
confirmation from @Huabing.

Best Regards,
Bin Yang,Solution Engineering Team,Wind River
ONAP Multi-VIM/Cloud PTL
Direct +86,10,84777126Mobile +86,13811391682Fax +86,10,64398189
Skype: yangbincs993

From: ZWARICO, AMY [mailto:az9...@att.com]
Sent: Friday, October 19, 2018 10:10 AM
To: Yang, Bin; zhao.huab...@zte.com.cn
Cc: onap-discuss@lists.onap.org
Subject: RE: [onap-discuss] ONAP Support for Secure Communication

Is MSB/ISTIO part of Casablanca?

From: Yang, Bin [mailto:bin.y...@windriver.com]
Sent: Thursday, October 18, 2018 9:08 PM
To: ZWARICO, AMY ; zhao.huab...@zte.com.cn
Cc: onap-discuss@lists.onap.org
Subject: RE: [onap-discuss] ONAP Support for Secure Communication

Hi Amy,

Multi-VIM/Cloud: Yes within OOM deployed ONAP with the integration of MSB/ISTIO

@Huabing, please correct me if I put the wrong statement.

Thanks

Best Regards,
Bin Yang,Solution Engineering Team,Wind River
ONAP Multi-VIM/Cloud PTL
Direct +86,10,84777126Mobile +86,13811391682Fax +86,10,64398189
Skype: yangbincs993

From: onap-discuss@lists.onap.org 
[mailto:onap-discuss@lists.onap.org] On Behalf Of Amy Zwarico
Sent: Tuesday, October 16, 2018 10:05 PM
To: onap-discuss@lists.onap.org
Subject: [onap-discuss] ONAP Support for Secure Communication






PTLs: The security subcommittee is tracking ONAP support of secure 
communication on all ONAP interfaces (typically HTTPS), which is one of the S3P 
requirements. Please respond to this email with a the status of your project’s 
support of secure communication. ("Yes" or "No")

Amy Zwarico, LMTS

Chief Security Office / Enterprise Security Support / Cloud Security Services

AT Services

(205) 613-1667






-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13137): https://lists.onap.org/g/onap-discuss/message/13137
Mute This Topic: https://lists.onap.org/mt/27369768/21656
Group Owner: onap-discuss+ow...@lists.onap.org
Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-



Re: [onap-discuss] ONAP Support for Secure Communication

2018-10-18 Thread Yang Bin
Hi Amy,

Multi-VIM/Cloud: Yes within OOM deployed ONAP with the integration of MSB/ISTIO

@Huabing, please correct me if I put the wrong statement.

Thanks

Best Regards,
Bin Yang,Solution Engineering Team,Wind River
ONAP Multi-VIM/Cloud PTL
Direct +86,10,84777126Mobile +86,13811391682Fax +86,10,64398189
Skype: yangbincs993

From: onap-discuss@lists.onap.org [mailto:onap-discuss@lists.onap.org] On 
Behalf Of Amy Zwarico
Sent: Tuesday, October 16, 2018 10:05 PM
To: onap-discuss@lists.onap.org
Subject: [onap-discuss] ONAP Support for Secure Communication






PTLs: The security subcommittee is tracking ONAP support of secure 
communication on all ONAP interfaces (typically HTTPS), which is one of the S3P 
requirements. Please respond to this email with a the status of your project’s 
support of secure communication. ("Yes" or "No")

Amy Zwarico, LMTS

Chief Security Office / Enterprise Security Support / Cloud Security Services

AT Services

(205) 613-1667






-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13136): https://lists.onap.org/g/onap-discuss/message/13136
Mute This Topic: https://lists.onap.org/mt/27369768/21656
Group Owner: onap-discuss+ow...@lists.onap.org
Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-



答复: [onap-discuss] [integration] Beijing images in Casablanca Release manifest

2018-10-18 Thread Yan Yang
Hi Gary,

 

For onap/vfc/nfvo/svnfm/nokia,1.1.0 , vfc will deliver the same Beijing
docker image for Casablanca. Thanks.

 

 

Best Regards,

Yan

发件人: onap-discuss@lists.onap.org [mailto:onap-discuss@lists.onap.org] 代
表 Gary Wu
发送时间: 2018年10月18日 13:55
收件人: onap-discuss
主题: [onap-discuss] [integration] Beijing images in Casablanca Release
manifest

 

The following entries in the Release docker manifest have not been updated
since Beijing.

 

If any entry below is no longer applicable for Casablanca, pleased it from
the manifest.

Otherwise, unless you’re intending to deliver the same Beijing docker image
for Casablanca, please release your new images ASAP and update the manifests
accordingly.

 

onap/aaf/sms,2.0.0

onap/aaf/smsquorumclient,2.0.0

onap/aai/esr-gui,1.1.0

onap/aai/esr-server,1.1.0

onap/admportal-sdnc-image,1.3.4

onap/cli,2.0.2

onap/msb/msb_apigateway,1.1.0

onap/msb/msb_discovery,1.1.0

onap/multicloud/vio-vesagent,1.0.0

onap/music/cassandra_music,3.0.0

onap/music/music,2.5.3

onap/oom/kube2msb,1.1.0

onap/org.onap.dcaegen2.deployments.bootstrap,1.1.3

onap/org.onap.dcaegen2.deployments.redis-cluster-container,1.0.0

onap/org.onap.dcaegen2.deployments.tca-cdap-container,1.1.0

onap/org.onap.dcaegen2.platform.cdapbroker,4.1.0

onap/sdc-api-tests,1.2.0

onap/sdc-backend,1.2.0

onap/sdc-backend-init,1.2.0

onap/sdc-cassandra,1.2.0

onap/sdc-cassandra-init,1.2.0

onap/sdc-elasticsearch,1.2.0

onap/sdc-frontend,1.2.0

onap/sdc-init-elasticsearch,1.2.0

onap/sdc-kibana,1.2.0

onap/sdc-onboard-backend,1.2.0

onap/sdc-onboard-cassandra-init,1.2.0

onap/sdc-simulator,1.2.0

onap/sdc-ui-tests,1.2.0

onap/sdc/sdc-workflow-designer,1.1.0

onap/sniroemulator,1.0.0

onap/usecase-ui,1.1.1

onap/usecase-ui/usecase-ui-server,1.1.1

onap/vfc/nfvo/svnfm/nokia,1.1.0

onap/vnfsdk/ice,1.1.0

onap/vnfsdk/vnftest,1.1.0

 

 

Thanks,

Gary

 

 




-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13135): https://lists.onap.org/g/onap-discuss/message/13135
Mute This Topic: https://lists.onap.org/mt/27411526/21656
Group Owner: onap-discuss+ow...@lists.onap.org
Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-



Re: [onap-discuss] [integration] Beijing images in Casablanca Release manifest

2018-10-18 Thread Yang Bin
Dear Gary,

W.r.t. "onap/multicloud/vio-vesagent,1.0.0",  Ethan confirmed that he is 
intending to deliver the same Beijing docker image for Casablanca. Thanks


Best Regards,
Bin Yang,Solution Engineering Team,Wind River
ONAP Multi-VIM/Cloud PTL
Direct +86,10,84777126Mobile +86,13811391682Fax +86,10,64398189
Skype: yangbincs993

From: onap-discuss@lists.onap.org [mailto:onap-discuss@lists.onap.org] On 
Behalf Of Gary Wu
Sent: Thursday, October 18, 2018 1:55 PM
To: onap-discuss
Subject: [onap-discuss] [integration] Beijing images in Casablanca Release 
manifest

The following entries in the Release docker manifest have not been updated 
since Beijing.

If any entry below is no longer applicable for Casablanca, pleased it from the 
manifest.
Otherwise, unless you're intending to deliver the same Beijing docker image for 
Casablanca, please release your new images ASAP and update the manifests 
accordingly.

onap/aaf/sms,2.0.0
onap/aaf/smsquorumclient,2.0.0
onap/aai/esr-gui,1.1.0
onap/aai/esr-server,1.1.0
onap/admportal-sdnc-image,1.3.4
onap/cli,2.0.2
onap/msb/msb_apigateway,1.1.0
onap/msb/msb_discovery,1.1.0
onap/multicloud/vio-vesagent,1.0.0
onap/music/cassandra_music,3.0.0
onap/music/music,2.5.3
onap/oom/kube2msb,1.1.0
onap/org.onap.dcaegen2.deployments.bootstrap,1.1.3
onap/org.onap.dcaegen2.deployments.redis-cluster-container,1.0.0
onap/org.onap.dcaegen2.deployments.tca-cdap-container,1.1.0
onap/org.onap.dcaegen2.platform.cdapbroker,4.1.0
onap/sdc-api-tests,1.2.0
onap/sdc-backend,1.2.0
onap/sdc-backend-init,1.2.0
onap/sdc-cassandra,1.2.0
onap/sdc-cassandra-init,1.2.0
onap/sdc-elasticsearch,1.2.0
onap/sdc-frontend,1.2.0
onap/sdc-init-elasticsearch,1.2.0
onap/sdc-kibana,1.2.0
onap/sdc-onboard-backend,1.2.0
onap/sdc-onboard-cassandra-init,1.2.0
onap/sdc-simulator,1.2.0
onap/sdc-ui-tests,1.2.0
onap/sdc/sdc-workflow-designer,1.1.0
onap/sniroemulator,1.0.0
onap/usecase-ui,1.1.1
onap/usecase-ui/usecase-ui-server,1.1.1
onap/vfc/nfvo/svnfm/nokia,1.1.0
onap/vnfsdk/ice,1.1.0
onap/vnfsdk/vnftest,1.1.0


Thanks,
Gary




-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13134): https://lists.onap.org/g/onap-discuss/message/13134
Mute This Topic: https://lists.onap.org/mt/27400125/21656
Group Owner: onap-discuss+ow...@lists.onap.org
Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-



Re: [onap-discuss] ONAP Support for Secure Communication

2018-10-18 Thread Jorge Hernandez
Hello Amy,

 

Responding on behalf of Pam D., Policy PTL, that is currently on vacations. 

 

https is supported across all policy components with the exception of the new 
ones introduced in Casablanca release (apex-pdp, policy-distribution).

 

Jorge

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13132): https://lists.onap.org/g/onap-discuss/message/13132
Mute This Topic: https://lists.onap.org/mt/27369768/21656
Group Owner: onap-discuss+ow...@lists.onap.org
Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-



Re: [onap-discuss] ONAP Support for Secure Communication

2018-10-18 Thread Vijay VK
For Amy,
 For DCAE – its no.
The capability is there but not all components were enabled for TLS in R3.

Regards,
Vijay

From: onap-discuss@lists.onap.org  On Behalf Of 
ZWARICO, AMY
Sent: Tuesday, October 16, 2018 10:05 AM
To: onap-discuss@lists.onap.org
Subject: [onap-discuss] ONAP Support for Secure Communication

***Security Advisory: This Message Originated Outside of AT ***
Reference http://cso.att.com/EmailSecurity/IDSP.html for more information.





PTLs: The security subcommittee is tracking ONAP support of secure 
communication on all ONAP interfaces (typically HTTPS), which is one of the S3P 
requirements. Please respond to this email with a the status of your project’s 
support of secure communication. ("Yes" or "No")

Amy Zwarico, LMTS

Chief Security Office / Enterprise Security Support / Cloud Security Services

AT Services

(205) 613-1667






-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13131): https://lists.onap.org/g/onap-discuss/message/13131
Mute This Topic: https://lists.onap.org/mt/27369768/21656
Group Owner: onap-discuss+ow...@lists.onap.org
Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-



[onap-discuss] [integration][portal][sdc][dmaap][sdnc][oom] Integration test work session

2018-10-18 Thread Yang Xu
BEGIN:VCALENDAR
METHOD:REQUEST
PRODID:Microsoft Exchange Server 2010
VERSION:2.0
BEGIN:VTIMEZONE
TZID:Eastern Standard Time
BEGIN:STANDARD
DTSTART:16010101T02
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
RRULE:FREQ=YEARLY;INTERVAL=1;BYDAY=1SU;BYMONTH=11
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:16010101T02
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
RRULE:FREQ=YEARLY;INTERVAL=1;BYDAY=2SU;BYMONTH=3
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
ORGANIZER;CN="Yang Xu (Yang, Fixed Network)":MAILTO:yang@huawei.com
ATTENDEE;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP=TRUE;CN=onap-discu
 s...@lists.onap.org:MAILTO:onap-discuss@lists.onap.org
DESCRIPTION;LANGUAGE=en-US:Agenda:\n\nInvestigate failures for ONAP install
 ation during last night ONAP OOM installation with staging images\n\n1.   
Pods not starting correctly (aaf\, aai\, dmaap\, sdnc)\n2.  Health 
 check failure (Portal\, DMAAP\, SDC)\n\n
SUMMARY;LANGUAGE=en-US:[integration][portal][sdc][dmaap][sdnc][oom] Integra
 tion test work session
DTSTART;TZID=Eastern Standard Time:20181018T13
DTEND;TZID=Eastern Standard Time:20181018T15
UID:04008200E00074C5B7101A82E008408C0F9BDD66D401000
 010003C93AE3FA7E99447BBAE0D1A0CB95769
CLASS:PUBLIC
PRIORITY:5
DTSTAMP:20181018T162821Z
TRANSP:OPAQUE
STATUS:CONFIRMED
SEQUENCE:0
LOCATION;LANGUAGE=en-US:https://zoom.us/j/44
X-MICROSOFT-CDO-APPT-SEQUENCE:0
X-MICROSOFT-CDO-OWNERAPPTID:1838327778
X-MICROSOFT-CDO-BUSYSTATUS:TENTATIVE
X-MICROSOFT-CDO-INTENDEDSTATUS:BUSY
X-MICROSOFT-CDO-ALLDAYEVENT:FALSE
X-MICROSOFT-CDO-IMPORTANCE:1
X-MICROSOFT-CDO-INSTTYPE:0
X-MICROSOFT-DISALLOW-COUNTER:FALSE
BEGIN:VALARM
ACTION:DISPLAY
DESCRIPTION:REMINDER
TRIGGER;RELATED=START:-PT15M
END:VALARM
END:VEVENT
END:VCALENDAR


Re: [onap-discuss] ONAP Support for Secure Communication

2018-10-18 Thread Brian
I’m just trying to correctly show the progress that has been made in some areas.
No implies you dont have any SSL/HTTPS which is not accurate hence I think its 
a two part question :)

Brian


From: FORSYTH, JAMES
Sent: Thursday, October 18, 2018 11:56 AM
To: FREEMAN, BRIAN D ; onap-discuss@lists.onap.org; ZWARICO, 
AMY 
Cc: PAROULEK Pavel OSK (ext.) ; NAMBI, ARUL 
; KAJUR, HARISH V ; AGGARWAL, MANISHA 
; LEE, TIAN ; BLIMKIE, STEVEN 

Subject: Re: [onap-discuss] ONAP Support for Secure Communication

Hi, Brian,

Seemed like the question was yes or no for the whole project, so I thought I 
couldn’t answer yes – seems like you are giving us a little more daylight, so 
I’ll take it!

AAI: “Yes, except for the GUI”

Thanks,
jimmy



From: "FREEMAN, BRIAN D" mailto:bf1...@att.com>>
Date: Thursday, October 18, 2018 at 11:47 AM
To: "onap-discuss@lists.onap.org" 
mailto:onap-discuss@lists.onap.org>>, "FORSYTH, 
JAMES" mailto:jf2...@att.com>>, "ZWARICO, AMY" 
mailto:az9...@att.com>>
Cc: "PAROULEK Pavel OSK (ext.)" 
mailto:pavel.parou...@orange.com>>, "NAMBI, ARUL" 
mailto:arul.na...@amdocs.com>>, HARISH V KAJUR 
mailto:vk2...@att.com>>, "AGGARWAL, MANISHA" 
mailto:amani...@att.com>>, "LEE, TIAN" 
mailto:ti...@amdocs.com>>, "BLIMKIE, STEVEN" 
mailto:steven.blim...@amdocs.com>>
Subject: RE: [onap-discuss] ONAP Support for Secure Communication

Dont you need two responses.

AAI:
GUI:No
REST: Yes

?

Brian


From: onap-discuss@lists.onap.org 
mailto:onap-discuss@lists.onap.org>> On Behalf Of 
FORSYTH, JAMES
Sent: Thursday, October 18, 2018 11:44 AM
To: onap-discuss@lists.onap.org; ZWARICO, 
AMY mailto:az9...@att.com>>
Cc: PAROULEK Pavel OSK (ext.) 
mailto:pavel.parou...@orange.com>>; NAMBI, ARUL 
mailto:arul.na...@amdocs.com>>; KAJUR, HARISH V 
mailto:vk2...@att.com>>; AGGARWAL, MANISHA 
mailto:amani...@att.com>>; KAJUR, HARISH V 
mailto:vk2...@att.com>>; LEE, TIAN 
mailto:ti...@amdocs.com>>; BLIMKIE, STEVEN 
mailto:steven.blim...@amdocs.com>>
Subject: Re: [onap-discuss] ONAP Support for Secure Communication

***Security Advisory: This Message Originated Outside of AT ***
Reference http://cso.att.com/EmailSecurity/IDSP.html for more information.
Hi, Amy,

The response for AAI is “No” – our UI could not be integrated with the https 
version of the portal.

Thanks,
jimmy

From: mailto:onap-discuss@lists.onap.org>> on 
behalf of "ZWARICO, AMY" mailto:az9...@att.com>>
Reply-To: "onap-discuss@lists.onap.org" 
mailto:onap-discuss@lists.onap.org>>, "ZWARICO, 
AMY" mailto:az9...@att.com>>
Date: Tuesday, October 16, 2018 at 10:18 AM
To: "onap-discuss@lists.onap.org" 
mailto:onap-discuss@lists.onap.org>>
Subject: [onap-discuss] ONAP Support for Secure Communication

***Security Advisory: This Message Originated Outside of AT ***
Reference http://cso.att.com/EmailSecurity/IDSP.html for more information.





PTLs: The security subcommittee is tracking ONAP support of secure 
communication on all ONAP interfaces (typically HTTPS), which is one of the S3P 
requirements. Please respond to this email with a the status of your project’s 
support of secure communication. ("Yes" or "No")

Amy Zwarico, LMTS

Chief Security Office / Enterprise Security Support / Cloud Security Services

AT Services

(205) 613-1667






-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13128): https://lists.onap.org/g/onap-discuss/message/13128
Mute This Topic: https://lists.onap.org/mt/27369768/21656
Group Owner: onap-discuss+ow...@lists.onap.org
Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-



Re: [onap-discuss] ONAP Support for Secure Communication

2018-10-18 Thread Srini
Hi Amy and all,

I think “secure communication” here is meant Mutual TLS, right? If so, can it 
be mentioned explicitly?

From security perspective, it is also good to know:

-Cipher suites being used


Note: As I understand NIST recommends: PFS – Diffie Hellman,  RSA 
authentication with 2K size).

Thanks
Srini


From: onap-discuss@lists.onap.org [mailto:onap-discuss@lists.onap.org] On 
Behalf Of Amy Zwarico
Sent: Tuesday, October 16, 2018 7:05 AM
To: onap-discuss@lists.onap.org
Subject: [onap-discuss] ONAP Support for Secure Communication






PTLs: The security subcommittee is tracking ONAP support of secure 
communication on all ONAP interfaces (typically HTTPS), which is one of the S3P 
requirements. Please respond to this email with a the status of your project’s 
support of secure communication. ("Yes" or "No")

Amy Zwarico, LMTS

Chief Security Office / Enterprise Security Support / Cloud Security Services

AT Services

(205) 613-1667






-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13127): https://lists.onap.org/g/onap-discuss/message/13127
Mute This Topic: https://lists.onap.org/mt/27369768/21656
Group Owner: onap-discuss+ow...@lists.onap.org
Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-



Re: [onap-discuss] ONAP Support for Secure Communication

2018-10-18 Thread Jimmy Forsyth
Hi, Brian,

Seemed like the question was yes or no for the whole project, so I thought I 
couldn’t answer yes – seems like you are giving us a little more daylight, so 
I’ll take it!

AAI: “Yes, except for the GUI”

Thanks,
jimmy



From: "FREEMAN, BRIAN D" 
Date: Thursday, October 18, 2018 at 11:47 AM
To: "onap-discuss@lists.onap.org" , "FORSYTH, 
JAMES" , "ZWARICO, AMY" 
Cc: "PAROULEK Pavel OSK (ext.)" , "NAMBI, ARUL" 
, HARISH V KAJUR , "AGGARWAL, MANISHA" 
, "LEE, TIAN" , "BLIMKIE, STEVEN" 

Subject: RE: [onap-discuss] ONAP Support for Secure Communication

Dont you need two responses.

AAI:
GUI:No
REST: Yes

?

Brian


From: onap-discuss@lists.onap.org  On Behalf Of 
FORSYTH, JAMES
Sent: Thursday, October 18, 2018 11:44 AM
To: onap-discuss@lists.onap.org; ZWARICO, AMY 
Cc: PAROULEK Pavel OSK (ext.) ; NAMBI, ARUL 
; KAJUR, HARISH V ; AGGARWAL, MANISHA 
; KAJUR, HARISH V ; LEE, TIAN 
; BLIMKIE, STEVEN 
Subject: Re: [onap-discuss] ONAP Support for Secure Communication

***Security Advisory: This Message Originated Outside of AT ***
Reference http://cso.att.com/EmailSecurity/IDSP.html for more information.
Hi, Amy,

The response for AAI is “No” – our UI could not be integrated with the https 
version of the portal.

Thanks,
jimmy

From: mailto:onap-discuss@lists.onap.org>> on 
behalf of "ZWARICO, AMY" mailto:az9...@att.com>>
Reply-To: "onap-discuss@lists.onap.org" 
mailto:onap-discuss@lists.onap.org>>, "ZWARICO, 
AMY" mailto:az9...@att.com>>
Date: Tuesday, October 16, 2018 at 10:18 AM
To: "onap-discuss@lists.onap.org" 
mailto:onap-discuss@lists.onap.org>>
Subject: [onap-discuss] ONAP Support for Secure Communication

***Security Advisory: This Message Originated Outside of AT ***
Reference http://cso.att.com/EmailSecurity/IDSP.html for more information.





PTLs: The security subcommittee is tracking ONAP support of secure 
communication on all ONAP interfaces (typically HTTPS), which is one of the S3P 
requirements. Please respond to this email with a the status of your project’s 
support of secure communication. ("Yes" or "No")

Amy Zwarico, LMTS

Chief Security Office / Enterprise Security Support / Cloud Security Services

AT Services

(205) 613-1667






-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13126): https://lists.onap.org/g/onap-discuss/message/13126
Mute This Topic: https://lists.onap.org/mt/27369768/21656
Group Owner: onap-discuss+ow...@lists.onap.org
Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-



Re: [onap-discuss] ONAP Support for Secure Communication

2018-10-18 Thread denghui (L)
Modeling: No

From: onap-discuss@lists.onap.org [mailto:onap-discuss@lists.onap.org] On 
Behalf Of gaoweitao
Sent: Thursday, October 18, 2018 11:50 PM
To: onap-discuss@lists.onap.org; amy.zwar...@att.com
Subject: Re: [onap-discuss] ONAP Support for Secure Communication

Hi Amy,

  VNFSDK:No

BR
Victor
发件人:Amy Zwarico
收件人:onap-discuss@lists.onap.org,
时间:2018-10-16 22:18:36
主 题:[onap-discuss] ONAP Support for Secure Communication






PTLs: The security subcommittee is tracking ONAP support of secure 
communication on all ONAP interfaces (typically HTTPS), which is one of the S3P 
requirements. Please respond to this email with a the status of your project’s 
support of secure communication. ("Yes" or "No")

Amy Zwarico, LMTS

Chief Security Office / Enterprise Security Support / Cloud Security Services

AT Services

(205) 613-1667






-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13125): https://lists.onap.org/g/onap-discuss/message/13125
Mute This Topic: https://lists.onap.org/mt/27369768/21656
Group Owner: onap-discuss+ow...@lists.onap.org
Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-



Re: [onap-discuss] ONAP Support for Secure Communication

2018-10-18 Thread gaoweitao
Hi Amy,

  VNFSDK:No

BR
Victor
发件人:Amy Zwarico
收件人:onap-discuss@lists.onap.org,
时间:2018-10-16 22:18:36
主 题:[onap-discuss] ONAP Support for Secure Communication






PTLs: The security subcommittee is tracking ONAP support of secure 
communication on all ONAP interfaces (typically HTTPS), which is one of the S3P 
requirements. Please respond to this email with a the status of your project’s 
support of secure communication. ("Yes" or "No")


Amy Zwarico, LMTS

Chief Security Office / Enterprise Security Support / Cloud Security Services

AT Services

(205) 613-1667







-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13124): https://lists.onap.org/g/onap-discuss/message/13124
Mute This Topic: https://lists.onap.org/mt/27369768/21656
Group Owner: onap-discuss+ow...@lists.onap.org
Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-



Re: [onap-discuss] ONAP Support for Secure Communication

2018-10-18 Thread Brian
Dont you need two responses.

AAI:
GUI:No
REST: Yes

?

Brian


From: onap-discuss@lists.onap.org  On Behalf Of 
FORSYTH, JAMES
Sent: Thursday, October 18, 2018 11:44 AM
To: onap-discuss@lists.onap.org; ZWARICO, AMY 
Cc: PAROULEK Pavel OSK (ext.) ; NAMBI, ARUL 
; KAJUR, HARISH V ; AGGARWAL, MANISHA 
; KAJUR, HARISH V ; LEE, TIAN 
; BLIMKIE, STEVEN 
Subject: Re: [onap-discuss] ONAP Support for Secure Communication

***Security Advisory: This Message Originated Outside of AT ***
Reference http://cso.att.com/EmailSecurity/IDSP.html for more information.
Hi, Amy,

The response for AAI is “No” – our UI could not be integrated with the https 
version of the portal.

Thanks,
jimmy

From: mailto:onap-discuss@lists.onap.org>> on 
behalf of "ZWARICO, AMY" mailto:az9...@att.com>>
Reply-To: "onap-discuss@lists.onap.org" 
mailto:onap-discuss@lists.onap.org>>, "ZWARICO, 
AMY" mailto:az9...@att.com>>
Date: Tuesday, October 16, 2018 at 10:18 AM
To: "onap-discuss@lists.onap.org" 
mailto:onap-discuss@lists.onap.org>>
Subject: [onap-discuss] ONAP Support for Secure Communication

***Security Advisory: This Message Originated Outside of AT ***
Reference http://cso.att.com/EmailSecurity/IDSP.html for more information.





PTLs: The security subcommittee is tracking ONAP support of secure 
communication on all ONAP interfaces (typically HTTPS), which is one of the S3P 
requirements. Please respond to this email with a the status of your project’s 
support of secure communication. ("Yes" or "No")

Amy Zwarico, LMTS

Chief Security Office / Enterprise Security Support / Cloud Security Services

AT Services

(205) 613-1667






-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13123): https://lists.onap.org/g/onap-discuss/message/13123
Mute This Topic: https://lists.onap.org/mt/27369768/21656
Group Owner: onap-discuss+ow...@lists.onap.org
Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-



Re: [onap-discuss] ONAP Support for Secure Communication

2018-10-18 Thread Jimmy Forsyth
Hi, Amy,

The response for AAI is “No” – our UI could not be integrated with the https 
version of the portal.

Thanks,
jimmy

From:  on behalf of "ZWARICO, AMY" 
Reply-To: "onap-discuss@lists.onap.org" , 
"ZWARICO, AMY" 
Date: Tuesday, October 16, 2018 at 10:18 AM
To: "onap-discuss@lists.onap.org" 
Subject: [onap-discuss] ONAP Support for Secure Communication

***Security Advisory: This Message Originated Outside of AT ***
Reference http://cso.att.com/EmailSecurity/IDSP.html for more information.





PTLs: The security subcommittee is tracking ONAP support of secure 
communication on all ONAP interfaces (typically HTTPS), which is one of the S3P 
requirements. Please respond to this email with a the status of your project’s 
support of secure communication. ("Yes" or "No")

Amy Zwarico, LMTS

Chief Security Office / Enterprise Security Support / Cloud Security Services

AT Services

(205) 613-1667






-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13122): https://lists.onap.org/g/onap-discuss/message/13122
Mute This Topic: https://lists.onap.org/mt/27369768/21656
Group Owner: onap-discuss+ow...@lists.onap.org
Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-



[onap-discuss] [VNFSDK] VNFSDK Weekly Meeting(2018-10-18) Cancelation

2018-10-18 Thread gaoweitao
Dear VNFSDK folks,

 Tomorrow's VNFSDK weekly meeting is canceled. If you have urgent 
issue, please send email to me.

 BTW:

 VNFSDK Pass RC0 on today's TSC meeting, thanks for your hard working.

 One thing we need exchange ideas via email : I heard from Moshe that 
guys come from Israel don't work Fridays (will work Sundays instead). we need 
arrange a new meeting time. Please feedback your suggestion and I will setup a 
doodle pull after that.

BR
Victor

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13121): https://lists.onap.org/g/onap-discuss/message/13121
Mute This Topic: https://lists.onap.org/mt/27403489/21656
Group Owner: onap-discuss+ow...@lists.onap.org
Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-



Re: [onap-discuss] [TCA] No Policy Threshold violated by the VES CEF Message

2018-10-18 Thread jkzcristiano
Dear Jorge,

thank you for your help.

I had several issues due to some misconfigurations between ONAP services 
(vNicUsageArray/vNicPerformanceArray, the closedLoopControlName was different 
between TCA and the pushed policy, the target VNF was already running, etc.).

Now the CL is working.

However, despite it is working, by inspecting drools' network.log file I still 
observe some issues:

...
...
[2018-10-18T12:38:06.906+00:00|Session 
org.onap.policy-engine.drools.amsterdam:policy-amsterdam-rules:0.1.0:closedloop-amsterdam][OUT|UEB|POLICY-CL-MGT]
{
  "AAI": {
    "generic-vnf.resource-version": "1539010321583",
    "generic-vnf.nf-role": "",
    "generic-vnf.prov-status": "PROV",
    "generic-vnf.orchestration-status": "Active",
    "generic-vnf.is-closed-loop-disabled": "false",
    "generic-vnf.service-id": "eb5c770a-ec21-43df-87ed-82fbc326e4f6",
    "generic-vnf.in-maint": "false",
    "generic-vnf.nf-type": "",
    "generic-vnf.nf-naming-code": "",
    "generic-vnf.vnf-name": "VNF-vFWSNK-vFWCL-08-10-Ins-4",
    "generic-vnf.model-version-id": "0b83692c-f944-411d-8103-36bd26d2b974",
    "generic-vnf.model-customization-id": 
"1894e439-88d9-40a4-a591-c1e9de88f121",
    "generic-vnf.nf-function": "",
    "generic-vnf.vnf-type": "vFirewall-Service/vFWSNK 0",
    "generic-vnf.model-invariant-id": "8864d433-a569-4b99-ba09-48b3d6d8d6db",
    "generic-vnf.vnf-id": "cd4204ed-a2a9-42c5-baaa-d39953ff6178"
  },
  "closedLoopAlarmStart": 1539866241522408,
  "closedLoopControlName": 
"ControlLoop-vFirewall-d0a1dfc6-94f5-4fd4-a5b5-4630b438850a",
  "version": "1.0.2",
  "requestId": "0549eb14-2f56-418f-adc3-d503d3bf96f6",
  "closedLoopEventClient": "DCAE_INSTANCE_ID.dcae-tca",
  "targetType": "VNF",
  "target": "generic-vnf.vnf-name",
  "from": "policy:amsterdam",
  "policyScope": "com",
  "policyName": 
"com.Config_BRMS_Param_BRMSParamvFirewall.EVENT.MANAGER.OPERATION.LOCKED.GUARD_PERMITTED",
  "policyVersion": "1",
  "notification": *"OPERATION"* ,
  "message": "actor=APPC,operation=ModifyConfig,target=Target [type=VNF, 
resourceID=9b231b3a-a6e6-43df-9ed1-13a2b70da856],subRequestId=1",
  "notificationTime": "2018-10-18 12:38:06.906000+00:00",
  "history": []
}
[2018-10-18T12:38:06.907+00:00|Session 
org.onap.policy-engine.drools.amsterdam:policy-amsterdam-rules:0.1.0:closedloop-amsterdam][OUT|UEB|APPC-CL]
{
  "CommonHeader": {
    "TimeStamp": 1539866286906,
    "APIver": "1.01",
    "RequestID": "0549eb14-2f56-418f-adc3-d503d3bf96f6",
    "SubRequestID": "1",
    "RequestTrack": [],
    "Flags": []
  },
  "Action": "ModifyConfig",
  "Payload": {
    "generic-vnf.vnf-id": "44662895-0e3e-475d-bc9b-6f734ba0f495",
    "pg-streams": {
      "pg-stream": [
        {
          "id": "fw_udp1",
          "is-enabled": "true"
        },
        {
          "id": "fw_udp2",
          "is-enabled": "true"
        },
        {
          "id": "fw_udp3",
          "is-enabled": "true"
        },
        {
          "id": "fw_udp4",
          "is-enabled": "true"
        },
        {
          "id": "fw_udp5",
          "is-enabled": "true"
        }
      ]
    }
  }
}
[2018-10-18T12:38:07.048+00:00|UEB-source-APPC-CL][IN|UEB|APPC-CL]
{
  "CommonHeader": {
    "TimeStamp": 1539866286906,
    "APIver": "1.01",
    "RequestID": "0549eb14-2f56-418f-adc3-d503d3bf96f6",
    "SubRequestID": "1",
    "RequestTrack": [],
    "Flags": []
  },
  "Action": "ModifyConfig",
  "Payload": {
    "generic-vnf.vnf-id": "44662895-0e3e-475d-bc9b-6f734ba0f495",
    "pg-streams": {
      "pg-stream": [
        {
          "id": "fw_udp1",
          "is-enabled": "true"
        },
        {
          "id": "fw_udp2",
          "is-enabled": "true"
        },
        {
          "id": "fw_udp3",
          "is-enabled": "true"
        },
        {
          "id": "fw_udp4",
          "is-enabled": "true"
        },
        {
          "id": "fw_udp5",
          "is-enabled": "true"
        }
      ]
    }
  }
}
[2018-10-18T12:38:07.246+00:00|UEB-source-APPC-CL][IN|UEB|APPC-CL]
{"Status":{"Value": *"ACCEPTED"* 
,"Code":"100"},"CommonHeader":{"OriginatorID":null,"SubrequestID":null,"RequestID":"0549eb14-2f56-418f-adc3-d503d3bf96f6","APIver":"1.01","TimeStamp":"1539866286906"},"Payload":{"generic-vnf.vnf-id":"44662895-0e3e-475d-bc9b-6f734ba0f495","pg-streams":"{\\\"pg-streams\\\":
 {\\\"pg-stream\\\":[{\\\"id\\\":\\\"fw_udp1\\\", 
\\\"is-enabled\\\":\\\"true\\\"},{\\\"id\\\":\\\"fw_udp2\\\", 
\\\"is-enabled\\\":\\\"true\\\"},{\\\"id\\\":\\\"fw_udp3\\\", 
\\\"is-enabled\\\":\\\"true\\\"},{\\\"id\\\":\\\"fw_udp4\\\", 
\\\"is-enabled\\\":\\\"true\\\"},{\\\"id\\\":\\\"fw_udp5\\\", 
\\\"is-enabled\\\":\\\"true\\\"}]}}"}}
[2018-10-18T12:38:07.248+00:00|Session 
org.onap.policy-engine.drools.amsterdam:policy-amsterdam-rules:0.1.0:closedloop-amsterdam][OUT|UEB|POLICY-CL-MGT]
{
  "AAI": {
    "generic-vnf.resource-version": "1539010321583",
    "generic-vnf.nf-role": "",
    "generic-vnf.prov-status": "PROV",
    "generic-vnf.orchestration-status": 

Re: [onap-discuss] ONAP Support for Secure Communication

2018-10-18 Thread Martial
CLAMP: “No”

From: onap-discuss@lists.onap.org  On Behalf Of 
ZWARICO, AMY
Sent: mardi 16 octobre 2018 16:05
To: onap-discuss@lists.onap.org
Subject: [onap-discuss] ONAP Support for Secure Communication

***Security Advisory: This Message Originated Outside of AT ***
Reference http://cso.att.com/EmailSecurity/IDSP.html for more information.





PTLs: The security subcommittee is tracking ONAP support of secure 
communication on all ONAP interfaces (typically HTTPS), which is one of the S3P 
requirements. Please respond to this email with a the status of your project’s 
support of secure communication. ("Yes" or "No")

Amy Zwarico, LMTS

Chief Security Office / Enterprise Security Support / Cloud Security Services

AT Services

(205) 613-1667






-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13119): https://lists.onap.org/g/onap-discuss/message/13119
Mute This Topic: https://lists.onap.org/mt/27369768/21656
Group Owner: onap-discuss+ow...@lists.onap.org
Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-



Re: [onap-discuss] SDC UI --- How to create VSP without Heat Template

2018-10-18 Thread Avdhut K
  *   Is SDNC preload per service basis or per service instance basis or both?
  *   What kind of information are you expecting from SDNC preloads in case of 
Azure based workload deployment?
  *   Can SDNC preload be avoided and use UserParams of ‘CreateVNF’ API of SO 
to pass parameters and values (from VID)? In K8S too, there is concept called 
‘values’. This is similar to ‘parameters’ in case of HEAT.  Thought process is 
that ‘values’ (that need to be overridden on instance basis) is sent via 
userParams.  But we see SDNC preload and hence wondering when to use which one.

On Day0 configuration:


  *   How is it passed in case of Azure workloads?
  *   In case of K8S, thought process is  that same  VNF is used for multiple 
instances. There would need to be instance specific (like customer) Day0 
configuration.  In K8S, Day0 configuration is expected to be passed during 
workload deployment (as configMap).  Hence thought process is to let Day0 
configuration is uploaded (via API) on per customer basis.  During service 
instantiation (as part of createVNF API of SO), we expect VID to pass Day0 
configuration reference as UserParams. And expect SO to pass this information 
to MC.  K8S plugin of MC gets the Day0 configuration from the reference and use 
it to create configMap as per Helm charts.  I am wondering how Day0 
configuration is being taken care in case of Azure based plugin.
[Avdhut Kholkar] [Avdhut Kholkar] SDNC pre-load is on a per instance basis. 
Pre-load is mainly related to the assignment of the network resources like IP 
address, subnets, etc – probably from external systems like IPAM that a service 
provider intends to interface. Since we executed the vFW and vDNS use cases for 
Azure, the pre-load data consisted of IP address, subnets, vnf-config scripts, 
etc.
As I understand, You have an option in VID and the SO API to not invoke the 
pre-load from SO but we have not tried it out. In this case, I guess the data 
should come in the input request. So you should be able to override the values 
charts with the input params
Not sure if answered all, but it depends on how you intend to get the runtime 
instance data – either preload/assigned by some interfacing systems or send it 
in the input request that will be passed from SO to MC.

Regards,
Avdhut Kholkar
Amdocs Technology Pune
2091-54623

From: Addepalli, Srinivasa R 
Sent: Tuesday, October 16, 2018 10:07 PM
To: Avdhut Kholkar ; onap-discuss@lists.onap.org; 
Sudhakar Reddy 
Subject: RE: [onap-discuss] SDC UI --- How to create VSP without Heat Template

On this
“Probably, there needs to be well defined folder for Cloud based artifacts like 
azure, aws templates, k8s ymls, etc. The only issue I see if SDC retains the 
structure that you upload.
“
I also think that there should be well defined folder for cloud based 
artifacts. Let us work out details. In today architecture meeting also, Chaker 
from Huawei requested for changes we are suggesting in CSAR.

The current code in SO that ingests SDC TOSCA looks for a Heat file. Hence it 
fails to load the artifacts the its DB

Yes. We will be proposing changes to SO to make it HEAT independent. Since SO 
does not interpret (correct me if I am wrong here) the HEAT and ENV artifacts, 
thinking of SO avoiding downloading of artifacts. It is up to the Multi-Cloud 
to download these artifacts and analyze them to make API calls to cloud.

I have one more topic and set of questions on SDNC preloads. Since you are 
using these as per documentation, trying to understand from you the benefit of 
SDNC preload vs using UserParams.




Thanks
Srini


From: Avdhut Kholkar [mailto:avdhut.khol...@amdocs.com]
Sent: Tuesday, October 16, 2018 3:55 AM
To: Addepalli, Srinivasa R 
mailto:srinivasa.r.addepa...@intel.com>>; 
onap-discuss@lists.onap.org; Sudhakar Reddy 
mailto:sudhakar.re...@amdocs.com>>
Subject: RE: [onap-discuss] SDC UI --- How to create VSP without Heat Template

See inline..

Regards,
Avdhut Kholkar

From: Addepalli, Srinivasa R 
mailto:srinivasa.r.addepa...@intel.com>>
Sent: Monday, October 15, 2018 8:52 PM
To: Avdhut Kholkar 
mailto:avdhut.khol...@amdocs.com>>; 
onap-discuss@lists.onap.org; Sudhakar Reddy 
mailto:sudhakar.re...@amdocs.com>>
Subject: RE: [onap-discuss] SDC UI --- How to create VSP without Heat Template

Thanks Avdhut. That is my understanding too. Thanks for confirming.



  1.  Did you also try keeping the ARM artifacts in input CSAR before 
onboarding to SDC?  Wanted to avoid GUI based step. Do you see any issues?
[Avdhut Kholkar] No. We did not try it. I am not sure if SDC retains the CSAR 
structure that you upload. I think it repackages it when the service is defined 
in the Catalog. The folders where the artifacts are to be uploaded are defined 
by SDC  - for eg. There is a folder for VES events, etc.we did not have any 
such folder, hence we used the ‘OTHER’ folder. Probably, there needs to be 

Re: [onap-discuss] [sdc] SVC4063 error while submitting VF for testing

2018-10-18 Thread Michael Lando
Hi,

What is the vf you are onboarding?

Is it your own or own of the vnfs used by onap?









BR,

[Michael Lando]

AT Network Application Development · NetCom
Tel Aviv | Tampa | Atlanta | New Jersey |Chicago
···
Office: +972 (3) 5451487
Mobile: +972 (54) 7833603
e-mail: michael.la...@intl.att.com

From: onap-discuss@lists.onap.org  On Behalf Of 
Kedar Ambekar
Sent: Tuesday, October 16, 2018 08:52
To: onap-discuss@lists.onap.org
Subject: Re: [onap-discuss] [sdc] SVC4063 error while submitting VF for testing

Hi Rene,

Thanks for sharing your experience.

I should have mentioned before that, post ONAP installation I was able to 
instantiate vLB use case without much trouble. This SVC4063 issue has started 
afterwards all of sudden.

From: onap-discuss@lists.onap.org 
mailto:onap-discuss@lists.onap.org>> On Behalf Of 
Rene Robert
Sent: Monday, October 15, 2018 8:32 PM
To: onap-discuss@lists.onap.org; Kedar 
Ambekar mailto:ake...@techmahindra.com>>
Subject: Re: [onap-discuss] [sdc] SVC4063 error while submitting VF for testing

Hello

We also faced that issue with "master" version.
We determined that SDC initialisation had failed when injecting all objects in 
SDC database (a set of python scripts that called some SDC API to initialize 
the SDC catalog).
So we relaunched SDC installation...


[Logo 
Orange]

René Robert
«Open and Smart solutions for autOmating Network Services»
ORANGE/IMT/OLN/CNC/NARA/OSONS

Fixe : +33 2 96 07 39 29 

Mobile : +33 6 74 78 68 43 

rene.rob...@orange.com





De : onap-discuss@lists.onap.org 
[mailto:onap-discuss@lists.onap.org] De la part de Kedar Ambekar
Envoyé : lundi 15 octobre 2018 16:01
À : onap-discuss@lists.onap.org
Objet : [onap-discuss] [sdc] SVC4063 error while submitting VF for testing

Hi SDC team,

As a designer (cs0008), when I submit any VF for testing, I am getting below 
error.
I tried to look into SDC FE & BE logs to get some clue. Part of BE logs where I 
see errors while doing this operation are attached with this email.

Appreciate any help on this !

I am using Beijing release with OOM based installation.

[cid:image005.png@01D466C7.6DA7DE30]



Disclaimer:  This message and the information contained herein is proprietary 
and confidential and subject to the Tech Mahindra policy statement, you may 
review the policy at 
http://www.techmahindra.com/Disclaimer.html
 externally 
http://tim.techmahindra.com/tim/disclaimer.html
 internally within TechMahindra.


_



Ce message et ses pieces jointes peuvent contenir des informations 
confidentielles ou privilegiees et ne doivent donc

pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce 
message par erreur, veuillez le signaler

a 

Re: [onap-discuss] ONAP Support for Secure Communication

2018-10-18 Thread Michael Lando
Hi
It is now for sdc.
The capability is there but because of time constraints we were not able to 
finalize the certificate creation and so on.









BR,

[Michael Lando]

AT Network Application Development · NetCom
Tel Aviv | Tampa | Atlanta | New Jersey |Chicago
···
Office: +972 (3) 5451487
Mobile: +972 (54) 7833603
e-mail: michael.la...@intl.att.com

From: onap-discuss@lists.onap.org  On Behalf Of 
ZWARICO, AMY
Sent: Tuesday, October 16, 2018 17:05
To: onap-discuss@lists.onap.org
Subject: [onap-discuss] ONAP Support for Secure Communication

***Security Advisory: This Message Originated Outside of AT ***
Reference http://cso.att.com/EmailSecurity/IDSP.html for more information.





PTLs: The security subcommittee is tracking ONAP support of secure 
communication on all ONAP interfaces (typically HTTPS), which is one of the S3P 
requirements. Please respond to this email with a the status of your project’s 
support of secure communication. ("Yes" or "No")

Amy Zwarico, LMTS

Chief Security Office / Enterprise Security Support / Cloud Security Services

AT Services

(205) 613-1667






-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13116): https://lists.onap.org/g/onap-discuss/message/13116
Mute This Topic: https://lists.onap.org/mt/27369768/21656
Group Owner: onap-discuss+ow...@lists.onap.org
Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-



Re: [onap-discuss] [sdc][integration] SDC GUI can not be brought up from Portal

2018-10-18 Thread Michael Lando
This is now fixed please redeploy









BR,

[Michael Lando]

AT Network Application Development · NetCom
Tel Aviv | Tampa | Atlanta | New Jersey |Chicago
···
Office: +972 (3) 5451487
Mobile: +972 (54) 7833603
e-mail: michael.la...@intl.att.com

From: onap-discuss@lists.onap.org  On Behalf Of 
Alexis de Talhouet
Sent: Tuesday, October 16, 2018 20:50
To: onap-discuss ; Alexis de Talhouët 

Cc: Yang Xu (Yang, Fixed Network) 
Subject: Re: [onap-discuss] [sdc][integration] SDC GUI can not be brought up 
from Portal

Proposed fix: 
https://gerrit.onap.org/r/#/c/70585/
 if ever my understanding of the issue was correct.

Alexis


On Oct 16, 2018, at 1:20 PM, Alexis de Talhouet 
mailto:adetalhoue...@gmail.com>> wrote:

Team,

based on my findings, it seems the culprit is the following: 
https://gerrit.onap.org/r/#/c/69807/8/catalog-fe/src/main/java/org/openecomp/sdc/fe/servlets/PortalServlet.java
What’s happening is portal tries to authenticate to SDC fe, SDC checks cookies 
for userId, but userId remains empty as assignment from the decryption is no 
longer done to userId, hence SDC refuse the connection saying missing header…

Can this be fixed? This is blocking testing.

Alexis


On Oct 16, 2018, at 10:58 AM, Yang Xu 
mailto:yang@huawei.com>> wrote:

SDC team,

With the latest ONAP installation using staging docker, I can’t bring up SDC 
GUI from Portal. See details 
onhttps://jira.onap.org/browse/SDC-1839.
 The ONAP instance is installed on Integration-OOM-Staging-Daily at Windriver 
lab, you are welcome to login and check. Right now integration test is blocked 
by it, please help.

Thanks,
-Yang




-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13115): https://lists.onap.org/g/onap-discuss/message/13115
Mute This Topic: https://lists.onap.org/mt/27370171/21656
Group Owner: onap-discuss+ow...@lists.onap.org
Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-