July 3, 2023 Meeting

• #15164: td-agent version pinning
• #15520: Cwag-CI taking huge disk-space
• #15217: NMS yarn test (unit test) failing
• #15222: Summarizing the current state of CI Issues.
• Discuss DevOps workflows for patch-level semvers if we move from 1.9 to 1.9.0 label. Can we have smaller + more frequent releases?

• Yogesh catch up with features group to pick release date: No discussion as the participation was very low.
• Jordan → propose mid august for 1.9 release date, discuss when we have quorum of TSC members
• Max - has not been a pr since 2nd may : Need to fix other CI issues (like CWAG, NMS)
• Jordan→ Ubuntu, need to plan upgrade, bring to features group
• Max → suggest we do a survey related to Docker
  
  • Survey:
    • Which deployment are you using, Debian or Docker?
    • What do you expect in 1.9?
  • Customers still using 1.6/debian
• Som → is it possible/feasable to make 1.9 docker only?
• Lucas → suggest debian for 1.9 and docker after
• Max → ensure features group changes go through TSC vote (folks agreed)
• Yogesh → testing tool
  • Som → action, resurrect tool/lab request process
  • Lucas → suggest start thinking about 1.10 and 1.10 is docker and performance testing
  • Max → not looking or thinking about docker is the equivalent of dropping it, not supporting docker in this release is essentially a vote against 
  • Lucas → connect5g can not live without docker
• Action → Yogesh will repost notes to TSC for feedback

• Lucas proposed "refactor reviewdog-workflow.yml for security" https://github.com/magma/security/issues/147

• Som proposed windowing scheme
• The Security WG discussed disclosure of security weakness in bounties for fixing them.

• Refactoring reviewdog-workflow.yml approved. Lucas to move the issue from the security repo to the public repo. (https://github.com/magma/magma/issues/15192)
• Shubham to document two bounty proposals: upgrade Kubernetes; create CI job to scan Docker images for vulnerabilities using trivy

• Som to create a page in the LF wiki on the bounty program.

  • Som will coordiate with Ben once bounty program proposal has been fully greenlit
• Need draft Quickstart for anyone who wants to recommend a bug bounty program (process & timeline) - Jordan will start doc, Ben add in budget info. 
• Bounty amounts need to be defined
• Bounty Program Process
  [ NEED TO CLOSE THIS - TSC members please review/comment]
• Folks will review and comment this week
• Ben Draft README for github
• Discuss in outreach Decide on budget and budget per issue.

Upcoming town hall meeting planner - July, 2023 - Town Hall planner

Secured Town Hall keynote speaker

• Action items and next steps are captured in document
•  Pick topics and date for next town hall
• Develop aggressive comms plan as part of town hall planning

Other:

• eBPF 

• • Revisit due to slack discussion
  • TSC Will Vote On The Following
    • Force merging is off by default
    • Only Linux Foundation, IE Benjamin Sternthal, is allowed to set it to on.
    • LF may only enable it by vote of the TSC.
    • Lucas proposed change → Requires two TSC members to vote on approval
  • Max → unclear on what goals we are tying to accomplish
  • Vote will be recorded here. 

Review progress and future steps

Max → time to step down from TSC, make room for other folks to join TSC

Action → ben to work on dates and election