+1 binding 

On Thu, Jan 28, 2021 at 1:00 PM Barak Stout <bstout@...> wrote:

+1 NB

Barak Stout

---

From: cncf-toc@... <cncf-toc@...> on behalf of Bhaarat Sharma via lists.cncf.io <bsharma=goraft.tech@...>
Sent: Thursday, January 28, 2021 7:59:21 AM
To: Amye Scavarda Perrin <ascavarda@...>; justin.cormack@... <justin.cormack@...>; michelle.noorali@... <michelle.noorali@...>
Cc: CNCF TOC <cncf-toc@...>
Subject: Re: [cncf-toc] [VOTE] Open Policy Agent from incubating to graduated

 

+1 non binding

--

Bhaarat Sharma

Raft | CTO

M. 703-708-4463

Schedule a meeting (Calendly)

bsharma@...

SBA 8(a) Certified | WOSB

---

From: cncf-toc@... <cncf-toc@...> on behalf of Michelle Noorali via lists.cncf.io <michelle.noorali=microsoft.com@...>
Sent: Thursday, January 28, 2021 7:33 AM
To: Amye Scavarda Perrin <ascavarda@...>; justin.cormack@... <justin.cormack@...>
Cc: CNCF TOC <cncf-toc@...>
Subject: Re: [cncf-toc] [VOTE] Open Policy Agent from incubating to graduated

 

+1 binding

---

From: cncf-toc@... <cncf-toc@...> on behalf of Justin Cormack via lists.cncf.io <justin.cormack=docker.com@...>
Sent: Thursday, January 14, 2021 4:27 PM
To: Amye Scavarda Perrin <ascavarda@...>
Cc: CNCF TOC <cncf-toc@...>
Subject: [EXTERNAL] Re: [cncf-toc] [VOTE] Open Policy Agent from incubating to graduated

 

+1 binding

Justin

On Wed, Sep 30, 2020 at 5:02 PM Amye Scavarda Perrin <ascavarda@...> wrote:

The Open Policy Agent project has applied for graduation from incubation to graduated. (https://github.com/cncf/toc/pull/520)

The due diligence document can be found here: https://docs.google.com/document/d/19M5fTpe57rQIMNxawRl5wSWvJUapuzY-CkV4O5pvieU/edit
 
Brendan Burns has called for public comment: https://lists.cncf.io/g/cncf-toc/message/5281

Please vote (+1/0/-1) by replying to this thread.

Remember that the TOC has binding votes only, but we do appreciate non-binding votes from the community as a sign of support!

--

Amye Scavarda Perrin | Program Manager | amye@...

+1 NB

Barak Stout

---

From: cncf-toc@... <cncf-toc@...> on behalf of Bhaarat Sharma via lists.cncf.io <bsharma=goraft.tech@...>
Sent: Thursday, January 28, 2021 7:59:21 AM
To: Amye Scavarda Perrin <ascavarda@...>; justin.cormack@... <justin.cormack@...>; michelle.noorali@... <michelle.noorali@...>
Cc: CNCF TOC <cncf-toc@...>
Subject: Re: [cncf-toc] [VOTE] Open Policy Agent from incubating to graduated

 

+1 non binding

--

Bhaarat Sharma

Raft | CTO

M. 703-708-4463

Schedule a meeting (Calendly)

bsharma@...

SBA 8(a) Certified | WOSB

---

From: cncf-toc@... <cncf-toc@...> on behalf of Michelle Noorali via lists.cncf.io <michelle.noorali=microsoft.com@...>
Sent: Thursday, January 28, 2021 7:33 AM
To: Amye Scavarda Perrin <ascavarda@...>; justin.cormack@... <justin.cormack@...>
Cc: CNCF TOC <cncf-toc@...>
Subject: Re: [cncf-toc] [VOTE] Open Policy Agent from incubating to graduated

 

+1 binding

---

From: cncf-toc@... <cncf-toc@...> on behalf of Justin Cormack via lists.cncf.io <justin.cormack=docker.com@...>
Sent: Thursday, January 14, 2021 4:27 PM
To: Amye Scavarda Perrin <ascavarda@...>
Cc: CNCF TOC <cncf-toc@...>
Subject: [EXTERNAL] Re: [cncf-toc] [VOTE] Open Policy Agent from incubating to graduated

 

+1 binding

Justin

On Wed, Sep 30, 2020 at 5:02 PM Amye Scavarda Perrin <ascavarda@...> wrote:

The Open Policy Agent project has applied for graduation from incubation to graduated. (https://github.com/cncf/toc/pull/520)

The due diligence document can be found here: https://docs.google.com/document/d/19M5fTpe57rQIMNxawRl5wSWvJUapuzY-CkV4O5pvieU/edit
 
Brendan Burns has called for public comment: https://lists.cncf.io/g/cncf-toc/message/5281

Please vote (+1/0/-1) by replying to this thread.

Remember that the TOC has binding votes only, but we do appreciate non-binding votes from the community as a sign of support!

--

Amye Scavarda Perrin | Program Manager | amye@...

Hi all,

 

Does anyone have details on what “Distribution” is? That is a super generic name and the linked issue doesn’t have any pointers to other resources to orient me.

 

Joe

 

From: cncf-toc@... <cncf-toc@...> on behalf of Amye Scavarda Perrin <ascavarda@...>
Date: Tuesday, January 26, 2021 at 9:52 AM
To: CNCF TOC <cncf-toc@...>
Subject: [cncf-toc] Projects included into Sandbox from the 1/26 sandbox review meeting

The TOC has reviewed the projects that have applied to be included in Sandbox, see the results below. 

Our next Sandbox review meeting is March 23, 2021. 

GitOps Working Group
 passes with a majority vote of the TOC
Piraeus-Datastore
 passes with a majority vote of the TOC
cloudquery
 not included
calabash
 not included
Tuna Lang
 not included
KubeInvaders
 License issues need to be reviewed before this can be included
Curiefense
 passes with a majority vote of the TOC
Athenz
 passes with a majority vote of the TOC
Kube-OVN
 passes with a majority vote of the TOC
k8dash
 passes with a majority vote of the TOC - but TOC would like the project to rename to reduce confusion
Distribution
 passes with a majority vote of the TOC

 

--

Amye Scavarda Perrin | Program Manager | amye@...

Sorry folks, I've got a conflict for tomorrow's TOC meeting, and I will have to skip this one

Liz

On Thu, 14 Jan 2021 at 19:25, Matt Farina <matt@...> wrote:
>
> I think there is some nuance in here but it's worth discussing.
>
> For example, if a project is using SemVer there are a couple parts of the spec that come to mind...
>

Let's face it. Most uses of x.y.z aren't SemVer and most people
haven't read the spec :)

I think something about graduated projects having a documented policy
around versioning is probably worthwhile, that feels like a useful
maturity gauge.

In the wider software ecosystem you see examples of popular and widely
adopted software with most types of version numbers. I think
consistency within a project is important, but it doesn't appear the
market in general cares that much about consistency between different
projects.

Gareth


> 4. Major version zero (0.y.z) is for initial development.
>
>
> If a project doesn't have a 1.0.0 yet and it's using SemVer than I don't think it should be graduated because it's still in initial development.
>
> I realize different people do different things with versions. But, versions are about communication. Graduated projects should be clear on their communication of versions.
>
> 1. Software using Semantic Versioning MUST declare a public API.
>
>
> and
>
> 8. Major version X (X.y.z | X > 0) MUST be incremented if any backwards incompatible changes are introduced to the public API.
>
>
> and on the CNCF projects page it talks about Graduated Projects being for the majority. They aren't experiments but things that more cautious businesses can adopt.
>
> A graduated project should state what it's API is (network, library interface, UI output, etc) and then properly version that so that consumers can know what they are getting and when things will change.
>
> These are policy based and different projects can do different things. For example, Kubernetes does not follow SemVer but does specify what is in the supported API policy and how it changes. Helm does something similar with the Go API and output from helm commands. For example, on Helm we have one place where the date format is different from the rest in the output but we can't change that until Helm v4 as a default because we know external tools parse that output.
>
> I would expect graduated projects to do things in a way that communicates clearly on what's happening with versions and have stable releases.
>
> Just my 2 cents.
>
> - Matt Farina
>
> On Thu, Jan 14, 2021, at 1:33 PM, alexis richardson wrote:
>
> IMO, everyone's using version numbers in different ways now.  For example many projects go to 1.0 once they are feature complete, and hit production way before that.  I think insisting on 1.0 for graduation is unfair and not very helpful.
>
> I realise that many enterprise users still see 1.0 as being the first production ready version.  Much as Quinton says.
>
> So, I suggest we leave everything as it is, and make sure that our own graduation criteria are clear.
>
>
>
> On Thu, 14 Jan 2021, 18:27 Quinton Hoole, <quinton@...> wrote:
>
> I'm not convinced that in people's minds, or practically, v1.0 and Graduated mean similar things. As a concrete example, Kubernetes went to v 1.0 several years before it graduated.  In my mind, version numbers tend to denote the maturity of the software. Graduation levels add to that the maturity of the process and community around the software.
>
> I do however think that there would be value striving for some amount of consistency in the semantics of version numbering across CNCF projects (possibly) to avoid the kind of confusion that Liz ran into.  I don't know exactly what that would look like, but I imagine something along the lines of:
>
> - pre 1.0 denotes "not recommended for production use"
> - post x.y denotes "go for it, people are starting to use it successfully in production"
> - post p.q denotes "rock solid, widely used in production - almost definitely graduated unless there are extenuating circumstances"
>
> ... and so on might make sense.
>
> This detail may well have been debated in depth elsewhere in the CNCF, in which case I apologise for not being up to speed on that :-)
>
> Q
>
>
> On Thu, Jan 14, 2021 at 9:50 AM Michelle Noorali via lists.cncf.io <michelle.noorali=microsoft.com@...> wrote:
>
> +1 imo a graduated project should have some documented backward compatibility guarantees and semantic versioning helps denote this. It has been a best practice on all the projects I've worked on. I'd be supportive of adding a criteria around stability and defining what that means and recommending using a semantic version to denote this for graduation.
>
> ________________________________
> From: cncf-toc@... <cncf-toc@...> on behalf of Liz Rice via lists.cncf.io <liz=lizrice.com@...>
> Sent: Thursday, January 14, 2021 12:26 PM
> To: cncf-toc@... <cncf-toc@...>
> Subject: [EXTERNAL] [cncf-toc] What do we mean by “Version 1.0”?
>
> Hi folks,
>
> Someone I spoke with today said something along the lines “if <this project> is stable, why is it still at v0.something?” and that got me thinking - does it make any sense to expect Graduated projects to be at v1.0 or above?
>
> I know this is easily gamed, in the sense that project maintainers can release any version number they like, but let’s set that aside for now and assume that maintainers are well intentioned. I wonder if the signals that are sent by releasing a v1.0 are similar to what Graduation means?
>
> (I have not checked the version numbers of existing graduated projects)
>
> Thoughts?
>
> Liz
>
>
>
>
>
> --
> Quinton Hoole
> quinton@...
>
>
>
>
>



--
Gareth Rushgrove
@garethr

garethr.dev
devopsweekly.com

+1 binding

Justin

On Wed, Sep 30, 2020 at 5:02 PM Amye Scavarda Perrin <ascavarda@...> wrote:

The Open Policy Agent project has applied for graduation from incubation to graduated. (https://github.com/cncf/toc/pull/520)

The due diligence document can be found here: https://docs.google.com/document/d/19M5fTpe57rQIMNxawRl5wSWvJUapuzY-CkV4O5pvieU/edit
 
Brendan Burns has called for public comment: https://lists.cncf.io/g/cncf-toc/message/5281

Please vote (+1/0/-1) by replying to this thread.

Remember that the TOC has binding votes only, but we do appreciate non-binding votes from the community as a sign of support!

--

Amye Scavarda Perrin | Program Manager | amye@...

The Open Policy Agent project has applied for graduation from incubation to graduated. (https://github.com/cncf/toc/pull/520)

The due diligence document can be found here: https://docs.google.com/document/d/19M5fTpe57rQIMNxawRl5wSWvJUapuzY-CkV4O5pvieU/edit
 
Brendan Burns has called for public comment: https://lists.cncf.io/g/cncf-toc/message/5281

Please vote (+1/0/-1) by replying to this thread.

Remember that the TOC has binding votes only, but we do appreciate non-binding votes from the community as a sign of support!

--

Amye Scavarda Perrin | Program Manager | amye@...