Re: security & CNCF projects
+ Pranab and Vasu (product/eng leads on LFX I believe.)
Jim
From: cncf-toc@... <cncf-toc@...>
On Behalf Of Chris Aniszczyk
Sent: Tuesday, February 16, 2021 7:13 AM To: alexis richardson <alexis@...> Cc: Alexis Richardson via cncf-toc <cncf-toc@...> Subject: Re: [cncf-toc] security & CNCF projects
I'll follow up Alexis on the ticket but it's just white labeled https://snyk.io
If you are already using, say Snyk via github action (https://github.com/snyk/actions/tree/master/golang) you won't see anything new (which is available for open source projects).
On Tue, Feb 16, 2021 at 3:54 AM alexis richardson <alexis@...> wrote:
-- Chris Aniszczyk (@cra) |
|
|
|
Re: security & CNCF projects
alexis richardson
Thanks Chris It would be great if this data was readily accessible. I don't think packing into GH actions provides that, however useful it may be for other purposes On Tue, 16 Feb 2021, 14:13 Chris Aniszczyk, <caniszczyk@...> wrote:
|
|
|
|
Re: security & CNCF projects
I'll follow up Alexis on the ticket but it's just white labeled https://snyk.io If you are already using, say Snyk via github action (https://github.com/snyk/actions/tree/master/golang) you won't see anything new (which is available for open source projects). On Tue, Feb 16, 2021 at 3:54 AM alexis richardson <alexis@...> wrote:
--
Chris Aniszczyk (@cra) |
|
|
|
security & CNCF projects
alexis richardson
Hi all Has anyone looked at this? How do we see project data? I wanted to take a look at flux. I had to create a login. Then, I had to "request" a view, which turned out to mean filing a JIRA ticket. Since then, tumbleweed. Can we have something more open & useful please? a |
|
|
|
Agenda for TOC Meeting for 2/16
Amye Scavarda Perrin
Hi all, We'll be meeting tomorrow at 8am Pacific. We'll have a short discussion about TOC liaisons with the SIGs, and then have an open floor for discussion. Presentation: https://docs.google.com/presentation/d/1YenQj3alN9qSEFTnGg1W8kx9M3ajk0jgMiEeRfLWgjA/edit#slide=id.gbd5cdf7888_0_0 Thanks! |
|
|
|
Re: [cncf-flux-maintainers] [cncf-toc] Flux for Incubation Public Comment Period
Michael Bridgen <michael@...>
Hi Liz, Michelle, all, Stefan and Daniel have responded on individual points. I'll attempt to fill in the remainder -- On Thu, 11 Feb 2021 at 14:17, Liz Rice <liz@...> wrote:
The discussion in https://github.com/fluxcd/flux2/discussions/620 may run for a while. Current project descriptions for Flux are a little vague (my fault) and don't account for recent developments like Flagger being included; but I don't think they mischaracterise Flux. If they are not quite fit for official communications, we'll happily work with CNCF folks to tighten them up -- or indeed, put more effort into bringing #620 to a conclusion.
These are now resolved, as Stefan reported.
There is good circumstantial evidence that people are migrating from v1, in addition to those coming new to Flux v2: - there's a steady stream of people asking about using image update automation (a Flux v1 feature that's only recently been added to Flux v2). Some of those people mention holding off migration until they can use the automation, and some people appear to be migrating in two stages (without automation first, and planning to add the automation when ready); - similarly, people asking about updating from Helm operator (v1) to Helm controller (v2) -- this was made more urgent by Helm2 being deprecated, of course; - we get a lot of engagement from people who want parts of Flux v2 to work a little more like v1 (e.g., people weighing in on https://github.com/fluxcd/kustomize-controller/pull/253) However, I'm afraid we don't have telemetry or other data from which to calculate the proportion of Flux v1 end users that have migrated. The CNCF Technology Radar is based on reports from Flux v1 users only -- v2 was at version 0.0.1 at the time the radar was published. I feel that being placed in the "Adopt" category of the radar is not simply a one-off endorsement, but sets the bar to keep measuring ourselves against. In consequence, there's a strong impetus to help people migrate their systems to v2, and give them plenty of time, so they don't feel stranded and let down.
Thanks for pointing that out -- after the first question, the FAQs there are out of date. Daniel has given things a nudge. Cheers, Michael
|
|
|
|
Re: [cncf-flux-maintainers] [cncf-toc] Flux for Incubation Public Comment Period
Stefan Prodan <stefan@...>
Hi Liz, We've updated the Flagger logo on the docs website including all diagrams. The description now states that Flagger is part of the Flux family. Please let us know if there is something else we need to address around Flagger. Thanks, Stefan On Mon, 15 Feb 2021 at 12:30, Daniel Holbach <daniel@...> wrote:
|
|
|
|
Re: Flux for Incubation Public Comment Period
Daniel Holbach <daniel@...>
Hello everybody, On Thu, 11 Feb 2021 at 11:40, Liz Rice <liz@...> wrote:
In argoproj/gitops-engine#126 I updated the FAQ to reflect the current situation, but didn't want to update the rest of FAQ as I didn't want to speak for the Argo project. I just filed argoproj/gitops-engine#218 as a reminder to update the other FAQ entries as well. Have a great day, Daniel |
|
|
|
Re: Flux for Incubation Public Comment Period
Liz Rice
Thanks Michelle, and everyone involved in putting this DD together! I have a few questions so I have copied in the Flux maintainers list too. I see the note that Flux is working on a broader project description, which is great. Is this close? If it's possible I'd love to have this in place so that CNCF doesn't end up promoting a description that is out of date. As I understand it the idea is to include Flagger as part of Flux in this move to Incubation? It's part of the gIthub.com/fluxcd org. But a couple of notes on the Flagger docs that I would like to see resolved before incubation: * The intro page says "Flagger is a Cloud Native Computing Foundation project." but doesn't mention that it's part of Flux * Uses the Weave logo (though I see this is noted as a to-do in the DD doc) Looks like lots of work went into helping users transition from Flux v1 to v2. Do we know what proportion of end users have made the migration? When the Technology Radar put it in the "adopt" category, would this have referred to v1, v2, or a mixture? Something of a small aside - I think the first Q&A in this FAQ about Argo / Flux collaboration reflects the current status, but do the subsequent questions reflect what the aspirations were originally in the Flux/Argo collaboration? And those are no longer being worked on together, right? Liz On Thu, Feb 4, 2021 at 2:00 PM Michelle Noorali via lists.cncf.io <michelle.noorali=microsoft.com@...> wrote:
|
|
|
|
Flux for Incubation Public Comment Period
Michelle Noorali
Hello,
Flux is applying for incubation status:
DD has been reviewed by myself and SIG App Delivery. We've also conducted interviews with end
users. We are supportive of Flux going into incubation. We are now calling for the 2 week public comment period
prior to the vote.
Thank you,
|
|
|
|
Re: TOC Election Results for GB and End User Seats
Richard Hartmann
Congratulations and thank yous for old and new TOC members. This set
of people a solid choice, indeed. On a janitorial level, I think it would be great if company affiliations could be listed alongside announcements. On Tue, Feb 2, 2021 at 1:00 AM Amye Scavarda Perrin <ascavarda@...> wrote:
|
|
|
|
Re: TOC Election Results for GB and End User Seats
Saad Ali
Big congrats to all the new TOC members. Looking forward to working with you all. And thank you Brendan, Matt, and Xiang for all your hard work! On Mon, Feb 1, 2021 at 4:01 PM Amye Scavarda Perrin <ascavarda@...> wrote:
|
|
|
|
Re: [EXTERNAL] Re: [cncf-toc] TOC Election Results for GB and End User Seats
Cornelia Davis
Thank you all so much for the warm welcome! So thrilled to join you all. On Tue, 2 Feb 2021 at 05:31, Cheryl Hung <chung@...> wrote:
--
Cornelia Davis CTO, Weaveworks @cdavisafc +1 805 452 8941 |
|
|
|
Re: [EXTERNAL] Re: [cncf-toc] TOC Election Results for GB and End User Seats
Cheryl Hung <chung@...>
On Tue, Feb 2, 2021 12:44 PM, Michelle Noorali via lists.cncf.io michelle.noorali=microsoft.com@... wrote:
Cheryl Hung <chung@linuxfoundation.org> VP of Ecosystem, Cloud Native Computing Foundation |
|
|
|
Re: [EXTERNAL] Re: [cncf-toc] TOC Election Results for GB and End User Seats
Michelle Noorali
Congratulations to our new members. What a great list of folks. Thank you to the outgoing members. It has been a pleasure working with you all. From: cncf-toc@... <cncf-toc@...> on behalf of Uma Mukkara via lists.cncf.io <umasankar.mukkara=mayadata.io@...>
Sent: Tuesday, February 2, 2021 4:14 AM To: alexis <alexis@...> Cc: Amye Scavarda Perrin <ascavarda@...>; CNCF TOC <cncf-toc@...>; Kiran Mova <kiran.mova@...>; Liz Rice <liz@...> Subject: [EXTERNAL] Re: [cncf-toc] TOC Election Results for GB and End User Seats Dear new TOC members,
Congratulations!!
Best,
Uma
On Tue, 2 Feb 2021 at 2:43 PM, alexis richardson <alexis@...> wrote:
-----
Uma Mukkara
Co-Founder & COO, MayaData
|
|
|
|
Re: TOC Election Results for GB and End User Seats
Justin Cormack
Thanks to the outgoing members for all your work, I am sure we will all continue working together, and welcome new members. Justin On Tue, Feb 2, 2021 at 12:00 AM Amye Scavarda Perrin <ascavarda@...> wrote:
|
|
|
|
Re: TOC Election Results for GB and End User Seats
Dear new TOC members, Congratulations!! Best, Uma On Tue, 2 Feb 2021 at 2:43 PM, alexis richardson <alexis@...> wrote:
--
----- Uma Mukkara Co-Founder & COO, MayaData |
|
|
|
Re: TOC Election Results for GB and End User Seats
alexis richardson
+1 big thank-you to outgoing TOC On Tue, Feb 2, 2021 at 9:03 AM Liz Rice <liz@...> wrote:
|
|
|
|
Re: TOC Election Results for GB and End User Seats
Liz Rice
Thank you so much Matt, Xiang & Brendan - you've done so much work and brought so much wisdom to the TOC, you will all be missed! I hope you'll continue to share your views with the TOC community. Huge congratulations to all the new members, I'm really excited to be working with you all!🎉 Liz On Tue, Feb 2, 2021 at 7:37 AM Kiran Mova <kiran.mova@...> wrote:
|
|
|
|
Re: TOC Election Results for GB and End User Seats
Kiran Mova
Congratulations to all the new members! Thank you Brendan Burns, Matt Klein and Xiang Li! On Tue, Feb 2, 2021 at 5:30 AM Amye Scavarda Perrin <ascavarda@...> wrote:
|
|
|