Date   

Re: [cncf-gb] Formation of CNCF CoC Update Working Group

Josh Berkus
 

On 6/6/22 17:52, Davanum Srinivas wrote:
To members of the CNCF Community:
Is someone going to directly contact all of the groups who are being solicited for representatives? Or is that TBD?

--
-- Josh Berkus
Kubernetes Community Architect
OSPO, OCTO


[cncf-gb] Formation of CNCF CoC Update Working Group

Davanum Srinivas
 

To members of the CNCF Community:

FYI

---------- Forwarded message ---------
From: Gupta, Arun <arun.gupta@...>
Date: Mon, Jun 6, 2022 at 8:50 PM
Subject: [cncf-gb] Formation of CNCF CoC Update Working Group
To: cncf-gb <cncf-gb@...>
Cc: Taylor Waggoner <twaggoner@...>


To members of the CNCF Governing Board:

 

At KubeCon EU a few weeks ago, CNCF community members and staff came together to discuss making improvements to CNCF’s Code of Conduct (CoC) processes.  CoC process updates will happen in several phases, as described in our recent blog post on Upcoming Code of Conduct Updates at CNCF.  As one important step forward, we are now forming a CNCF Code of Conduct Update Working Group (WG) to continue developing and refining a set of proposed new processes and documentation.  Many thanks to those who have already been working on proposals that will help us move forward.

 

The intended output of this WG is a set of updated policies that can be submitted to the appropriate governing body* for approval, including:

·        Improvements to the CNCF Code of Conduct

·        Charter for a new CNCF CoC Committee 

·        Updated policies regarding communication, confidentiality, & transparency

·        Updated conflict of interest policy

·        Written policy outlining who has jurisdiction of which incidents (LF Events, CNCF CoC Committee, or project-level CoC Committee)

 

Although CNCF has already been operating in accordance with policies of the types listed above, we want to update and better document them through a collaborative community process.

 

*Updates to the Code of Conduct must be approved by the TOC (CNCF Charter §13), but creation of a CoC Committee to handle CoC incident response & resolution must be approved by the Governing Board (CNCF Charter §5(d)(vii)).

 

We are seeking Working Group participants from the following roles:

  • Any active Incubating + Graduated Maintainers who wish to volunteer
  • 1-2 representatives from the Governing Board (GB)
  • 1–2 representatives from the Technical Oversight Committee (TOC)
  • 1 representative from each TAG:
    • TAG-Security
    • TAG-Storage
    • TAG-App-Delivery
    • TAG-Network
    • TAG-Runtime
    • TAG Contributor Strategy
    • TAG Observability
  • 1 representative from the Kubernetes CoC Committee
  • 1 representative from the Marketing Committee
  • 2 CNCF staff 
  • 1 LF Events staff
  • External advisors for support

 

If you are an active Incubated or Graduated Maintainer or belong to one of the governing bodies listed above, and you would like to participate in the Working Group, please notify Taylor Waggoner <twaggoner@...> no later than June 14.  If there are more volunteers from a governing body than seats allocated, the governing body will select its representative.  The time commitment for WG participants would be 3-6 hours per month for a total of 4-6 months. The WG will have 2 co-chairs, one from TOC and one from the GB side to lead meetings, facilitate consensus, etc. 

 

Feedback from the broader community as well as the Governing Board and TOC will be solicited on a regular basis.  Anyone in the community is welcome to submit proposals (PRs on Github) and may be invited to a WG meeting to present it.  

 

The WG will use a private slack and a public github repository for formalizing content. We will schedule the first WG meeting shortly after the WG participants are confirmed.

 

Sincerely,

 

Chairs for CNCF Governing Board & Technical Oversight Committee

 



--
Davanum Srinivas :: https://twitter.com/dims


Brigade 2022 Annual Review

Kent Rancourt <Kent.Rancourt@...>
 

The Brigade 2022 Annual Review has been submitted.

 

https://github.com/cncf/toc/pull/845

 


Agenda for TOC meeting, 6/7

Amye Scavarda Perrin
 

Hi all, 
We'll be meeting tomorrow at 8am Pacific. 



Also note: we currently have one TOC seat open for nominations by the GB. That nomination closes tomorrow at noon (12pm), Pacific time. Reach out if you have questions!

-- amye 

--
Amye Scavarda Perrin | Director of Developer Programs, CNCF | amye@...


Re: [VOTE] Kyverno for incubation

Atul <atul@...>
 

+1 NB


Re: [VOTE] Kyverno for incubation

Jianbo Sun
 



+1 NB

Jianbo Sun

在 2022年5月30日,05:39,chipzoller@... 写道:



[Edited Message Follows]

+1 NB


Re: [VOTE] Kyverno for incubation

Ivan Sim
 

+1 NB


Re: [VOTE] Kyverno for incubation

mritunjaysharma394@...
 

+1 NB


[RESULT] TAG Security Technical Lead Nominations Approved

Amye Scavarda Perrin
 


Re: TAG Security Technical Lead Nominations

Matt Farina
 

+1 binding

On Thu, May 5, 2022, at 11:15 PM, Brandon Lum wrote:
Hi TOC,

The TAG Security Co-chairs would like to nominate Ragashree, Michael Lieberman, and Marina Moore as Technical Leads of TAG Security!

They have been awesome members of the community contributing across many different efforts, we look forward to working with them to further expand the community! Below are their nominations, which is a fraction of all the awesomeness they've done for the community.

Cheers
TAG-Security Co-Chairs

—----------------------------------------------------------------------------------------------------------------------

Nominee: Ragashree 

Github: @ragashreeshekar

Title: Cloud Security Specialist

Professional Affiliation: Nokia


Leadership/participation with TAG-Security:


  • Project Lead: TAG Security Community Manager (#692)

  • Project Lead: Cloud Native Security Lexicon (#735)

  • Project Co-lead Security Con EU 2022 (#811)

  • [Governance] Contributions to communication templates (#670)



Bio:


2021 Nokia Ada Lovelace Honoree, Ragashree M C is a Cloud Security enthusiast with 3+ years industry experience in the domain. She is an active member of several open source security forums such as OWASP, CNCF, CSA etc. She is passionate about all things STEM & security - information science, animal welfare & so on!


—----------------------------------------------------------------------------------------------------------------------


Nominee: Michael Lieberman

Github: @mlieberman85

Title: Supply Chain Security Engineer

Professional Affiliation: Citi


Other community affiliations:

  • Co-Chair, CNCF Financial Services User Group

  • Technical Advisory Committee, SLSA (OpenSSF)


Leadership/participation with TAG-Security:

  • Project Lead: Secure Software Factory Reference Architecture Paper (#679)

  • Contributions to Supply Chain Security Best Practices Paper (#510)

  • Contributions to Security Controls Mapping (#635)


Bio:


Michael Lieberman is an engineer and architect focused on technology transformation especially with regards to cloud native architectures, technologies and migrations. His passion is in applying his expertise to use cases where privacy and security are paramount. Most recently he has been focused on work within the software supply chain security space. He is co-chair of the CNCF Financial Services User Group, SLSA steering committee member, and recently co-lead the Secure Software Factory Reference Architecture for the Security Technical Advisory Group. Michael has also participated in multiple podcasts, panels and talks on behalf of the FSUG, the companies he’s worked for and on behalf of himself as an individual contributor in the tech community.


—----------------------------------------------------------------------------------------------------------------------


Nominee: Marina Moore 

Github: @mnm678

Title: PhD candidate, NYU Tandon’s Secure Systems Lab

Professional Affiliation: NYU, GoDaddy.com


Other community affiliations:

  • Maintainer, The Update Framework

  • Maintainer, Uptane (TUF variant)


Leadership/participation with TAG-Security:

  • Contributions to Supply Chain Security Best Practices Paper (#510)

  • Contributions to Secure Software Factory Reference Architecture Paper (#679)

  • Contributions to Cloud Native Security Whitepaper v2 (#844)



Bio:


Marina Moore is a PhD candidate at NYU Tandon’s Secure Systems Lab focusing on secure software updates and software supply chain security. She is a maintainer of The Update Framework (TUF), a CNCF graduated project, as well as Uptane, the automotive variant of TUF. She contributed to the updated TAG Security Whitepaper and has been actively involved in the supply chain security group, including contributing to the Software Supply Chain Security Best Practices paper. She has presented at the CNCF Security Day at both KubeCon NA and Europe.


—----------------------------------------------------------------------------------------------------------------------


Re: [VOTE] Kyverno for incubation

Erin Boyd
 

+1 binding

On Wed, May 25, 2022 at 12:04 PM Amye Scavarda Perrin <ascavarda@...> wrote:
Kyverno has applied to move to the incubation level.

PR: PR: https://github.com/cncf/toc/pull/784

Due Diligence doc: https://docs.google.com/document/d/18dWgOd2MUQz3RXI1R9vKntL3ULyZhOD1HEtijGOeaWg/edit?usp=sharing

Davanum Srinivas is the TOC sponsor for this project, has called for public comment and has approved a call for a public vote. (https://lists.cncf.io/g/cncf-toc/message/6859)

Please vote (+1/0/-1) by replying to this thread.

Remember that the TOC has binding votes only, but we do appreciate non-binding votes from the community as a sign of support!

--
Amye Scavarda Perrin | Director of Developer Programs, CNCF | amye@...



--

Erin A. Boyd

Director of Emerging Technologies OCTO

Distinguished Engineer

Red Hat

eboyd@...   


Re: TAG Security Technical Lead Nominations

Erin Boyd
 

+1 binding!

On Thu, May 5, 2022 at 9:18 PM Brandon Lum <lumjjb@...> wrote:
Hi TOC,

The TAG Security Co-chairs would like to nominate Ragashree, Michael Lieberman, and Marina Moore as Technical Leads of TAG Security!

They have been awesome members of the community contributing across many different efforts, we look forward to working with them to further expand the community! Below are their nominations, which is a fraction of all the awesomeness they've done for the community.

Cheers
TAG-Security Co-Chairs

—----------------------------------------------------------------------------------------------------------------------

Nominee: Ragashree 

Github: @ragashreeshekar

Title: Cloud Security Specialist

Professional Affiliation: Nokia


Leadership/participation with TAG-Security:


  • Project Lead: TAG Security Community Manager (#692)

  • Project Lead: Cloud Native Security Lexicon (#735)

  • Project Co-lead Security Con EU 2022 (#811)

  • [Governance] Contributions to communication templates (#670)



Bio:


2021 Nokia Ada Lovelace Honoree, Ragashree M C is a Cloud Security enthusiast with 3+ years industry experience in the domain. She is an active member of several open source security forums such as OWASP, CNCF, CSA etc. She is passionate about all things STEM & security - information science, animal welfare & so on!


—----------------------------------------------------------------------------------------------------------------------


Nominee: Michael Lieberman

Github: @mlieberman85

Title: Supply Chain Security Engineer

Professional Affiliation: Citi


Other community affiliations:

  • Co-Chair, CNCF Financial Services User Group

  • Technical Advisory Committee, SLSA (OpenSSF)


Leadership/participation with TAG-Security:

  • Project Lead: Secure Software Factory Reference Architecture Paper (#679)

  • Contributions to Supply Chain Security Best Practices Paper (#510)

  • Contributions to Security Controls Mapping (#635)


Bio:


Michael Lieberman is an engineer and architect focused on technology transformation especially with regards to cloud native architectures, technologies and migrations. His passion is in applying his expertise to use cases where privacy and security are paramount. Most recently he has been focused on work within the software supply chain security space. He is co-chair of the CNCF Financial Services User Group, SLSA steering committee member, and recently co-lead the Secure Software Factory Reference Architecture for the Security Technical Advisory Group. Michael has also participated in multiple podcasts, panels and talks on behalf of the FSUG, the companies he’s worked for and on behalf of himself as an individual contributor in the tech community.


—----------------------------------------------------------------------------------------------------------------------


Nominee: Marina Moore 

Github: @mnm678

Title: PhD candidate, NYU Tandon’s Secure Systems Lab

Professional Affiliation: NYU, GoDaddy.com


Other community affiliations:

  • Maintainer, The Update Framework

  • Maintainer, Uptane (TUF variant)


Leadership/participation with TAG-Security:

  • Contributions to Supply Chain Security Best Practices Paper (#510)

  • Contributions to Secure Software Factory Reference Architecture Paper (#679)

  • Contributions to Cloud Native Security Whitepaper v2 (#844)



Bio:


Marina Moore is a PhD candidate at NYU Tandon’s Secure Systems Lab focusing on secure software updates and software supply chain security. She is a maintainer of The Update Framework (TUF), a CNCF graduated project, as well as Uptane, the automotive variant of TUF. She contributed to the updated TAG Security Whitepaper and has been actively involved in the supply chain security group, including contributing to the Software Supply Chain Security Best Practices paper. She has presented at the CNCF Security Day at both KubeCon NA and Europe.


—----------------------------------------------------------------------------------------------------------------------




--

Erin A. Boyd

Director of Emerging Technologies OCTO

Distinguished Engineer

Red Hat

eboyd@...   


Re: TAG Security Technical Lead Nominations

Katie Gamanji
 

+1 binding!


On Tue, 31 May 2022, 11:09 Ricardo Rocha, <ricardo.rocha@...> wrote:
+1 binding

On Mon, May 30, 2022 at 08:07:59AM +0200, Dave Zolotusky via lists.cncf.io wrote:
> +1 binding
>
> On Fri, May 6, 2022 at 4:15 AM Brandon Lum <lumjjb@...> wrote:
>
> > Hi TOC,
> >
> > The TAG Security Co-chairs would like to nominate Ragashree, Michael
> > Lieberman, and Marina Moore as Technical Leads of TAG Security!
> >
> > They have been awesome members of the community contributing across many
> > different efforts, we look forward to working with them to further expand
> > the community! Below are their nominations, which is a fraction of all the
> > awesomeness they've done for the community.
> >
> > Cheers
> > TAG-Security Co-Chairs
> >
> >
> > —----------------------------------------------------------------------------------------------------------------------
> >
> > Nominee: Ragashree
> >
> > Github: @ragashreeshekar <https://github.com/ragashreeshekar>
> >
> > Title: Cloud Security Specialist
> >
> > Professional Affiliation: Nokia
> >
> > Leadership/participation with TAG-Security:
> >
> >
> >    -
> >
> >    Project Lead: TAG Security Community Manager (#692
> >    <https://github.com/cncf/tag-security/issues/692>)
> >    -
> >
> >    Project Lead: Cloud Native Security Lexicon (#735
> >    <https://github.com/cncf/tag-security/pull/735>)
> >    -
> >
> >    Project Co-lead Security Con EU 2022 (#811
> >    <https://github.com/cncf/tag-security/issues/811>)
> >    -
> >
> >    [Governance] Contributions to communication templates (#670
> >    <https://github.com/cncf/tag-security/pull/670>)
> >
> >
> >
> > Bio:
> >
> > 2021 Nokia Ada Lovelace Honoree, Ragashree M C is a Cloud Security
> > enthusiast with 3+ years industry experience in the domain. She is an
> > active member of several open source security forums such as OWASP, CNCF,
> > CSA etc. She is passionate about all things STEM & security - information
> > science, animal welfare & so on!
> >
> >
> > —----------------------------------------------------------------------------------------------------------------------
> >
> > Nominee: Michael Lieberman
> >
> > Github: @mlieberman85 <https://github.com/mlieberman85>
> >
> > Title: Supply Chain Security Engineer
> >
> > Professional Affiliation: Citi
> >
> > Other community affiliations:
> >
> >    -
> >
> >    Co-Chair, CNCF Financial Services User Group
> >    -
> >
> >    Technical Advisory Committee, SLSA (OpenSSF)
> >
> >
> > Leadership/participation with TAG-Security:
> >
> >    -
> >
> >    Project Lead: Secure Software Factory Reference Architecture Paper (
> >    #679 <https://github.com/cncf/tag-security/issues/679>)
> >    -
> >
> >    Contributions to Supply Chain Security Best Practices Paper (#510
> >    <https://github.com/cncf/tag-security/issues/510>)
> >    -
> >
> >    Contributions to Security Controls Mapping (#635
> >    <https://github.com/cncf/tag-security/issues/635>)
> >
> >
> > Bio:
> >
> > Michael Lieberman is an engineer and architect focused on technology
> > transformation especially with regards to cloud native architectures,
> > technologies and migrations. His passion is in applying his expertise to
> > use cases where privacy and security are paramount. Most recently he has
> > been focused on work within the software supply chain security space. He is
> > co-chair of the CNCF Financial Services User Group, SLSA steering committee
> > member, and recently co-lead the Secure Software Factory Reference
> > Architecture for the Security Technical Advisory Group. Michael has also
> > participated in multiple podcasts, panels and talks on behalf of the FSUG,
> > the companies he’s worked for and on behalf of himself as an individual
> > contributor in the tech community.
> >
> >
> > —----------------------------------------------------------------------------------------------------------------------
> >
> > Nominee: Marina Moore
> >
> > Github: @mnm678 <https://github.com/mnm678>
> >
> > Title: PhD candidate, NYU Tandon’s Secure Systems Lab
> >
> > Professional Affiliation: NYU, GoDaddy.com
> >
> > Other community affiliations:
> >
> >    -
> >
> >    Maintainer, The Update Framework
> >    -
> >
> >    Maintainer, Uptane (TUF variant)
> >
> >
> > Leadership/participation with TAG-Security:
> >
> >    -
> >
> >    Contributions to Supply Chain Security Best Practices Paper (#510
> >    <https://github.com/cncf/tag-security/issues/510>)
> >    -
> >
> >    Contributions to Secure Software Factory Reference Architecture Paper (
> >    #679 <https://github.com/cncf/tag-security/issues/679>)
> >    -
> >
> >    Contributions to Cloud Native Security Whitepaper v2 (#844
> >    <https://github.com/cncf/tag-security/issues/844>)
> >
> >
> >
> > Bio:
> >
> > Marina Moore is a PhD candidate at NYU Tandon’s Secure Systems Lab
> > focusing on secure software updates and software supply chain security. She
> > is a maintainer of The Update Framework (TUF), a CNCF graduated project, as
> > well as Uptane, the automotive variant of TUF. She contributed to the
> > updated TAG Security Whitepaper and has been actively involved in the
> > supply chain security group, including contributing to the Software Supply
> > Chain Security Best Practices paper. She has presented at the CNCF Security
> > Day at both KubeCon NA and Europe.
> >
> >
> > —----------------------------------------------------------------------------------------------------------------------
> >
> >
> >
> >
>
> --
> ~Dave
>
>
>
>
>






Re: [VOTE] Kyverno for incubation

Dave Zolotusky
 

+1 binding

On Wed, May 25, 2022 at 8:01 PM Amye Scavarda Perrin <ascavarda@...> wrote:
Kyverno has applied to move to the incubation level.

PR: PR: https://github.com/cncf/toc/pull/784

Due Diligence doc: https://docs.google.com/document/d/18dWgOd2MUQz3RXI1R9vKntL3ULyZhOD1HEtijGOeaWg/edit?usp=sharing

Davanum Srinivas is the TOC sponsor for this project, has called for public comment and has approved a call for a public vote. (https://lists.cncf.io/g/cncf-toc/message/6859)

Please vote (+1/0/-1) by replying to this thread.

Remember that the TOC has binding votes only, but we do appreciate non-binding votes from the community as a sign of support!

--
Amye Scavarda Perrin | Director of Developer Programs, CNCF | amye@...



--
~Dave


Re: [VOTE] Keptn for incubation

Dave Zolotusky
 

+1 binding

On Wed, May 25, 2022 at 8:01 PM Amye Scavarda Perrin <ascavarda@...> wrote:
Keptn has applied to move to the incubation level.

PR: https://github.com/cncf/toc/pull/670

Due Diligence doc: https://docs.google.com/document/d/14qFAc6kxhWX_JLMUKddgELcymaRw6jmhsq0OYxrHtc0

Lei Zhang is now the TOC sponsor for this project, has called for public comment and has approved a call for a public vote. (https://lists.cncf.io/g/cncf-toc/message/6851)

Please vote (+1/0/-1) by replying to this thread.

Remember that the TOC has binding votes only, but we do appreciate non-binding votes from the community as a sign of support!
--
Amye Scavarda Perrin | Director of Developer Programs, CNCF | amye@...



--
~Dave


Re: [VOTE] CubeFS for incubation

Richard Hartmann
 

+1 binding 

Sent by mobile; please excuse my brevity.

On Wed, Apr 13, 2022, 18:27 Amye Scavarda Perrin <ascavarda@...> wrote:
CubeFS (previously known as ChubaoFS) has applied to move to the incubation level.

- TOC PR proposal: https://github.com/cncf/toc/pull/586
- Presentation to CNCF TAG: https://docs.google.com/presentation/d/1TuBXEmGTSE5wLXOi5rA1FmpT-Nxj5afzI3snamQUWx0/edit
- GitHub: https://github.com/cubeFS/cubefs
- Due Diligence doc: https://docs.google.com/document/d/1WDJEeRDO8pHAetyCbU7TftZfvxSATc3bsLj7VJeNoJ0/edit#

Lei Zhang is the TOC sponsor for this project, has called for public comment and has approved a call for a public vote. (https://lists.cncf.io/g/cncf-toc/message/6806)

Please vote (+1/0/-1) by replying to this thread.

Remember that the TOC has binding votes only, but we do appreciate non-binding votes from the community as a sign of support!

--
Amye Scavarda Perrin | Director of Developer Programs, CNCF | amye@...


Re: [VOTE] Keptn for incubation

Zhang, Cathy H
 

+1 NB

 

Best regards,

Cathy Zhang, cathy.h.zhang@...

 

From: cncf-toc@... <cncf-toc@...> On Behalf Of Erin Boyd
Sent: Thursday, June 2, 2022 10:07 AM
To: prateek.pandey@...
Cc: cncf-toc@...
Subject: Re: [cncf-toc] [VOTE] Keptn for incubation

 

+1 binding

 

On Wed, Jun 1, 2022 at 11:21 AM Prateek Pandey via lists.cncf.io <prateek.pandey=nirmata.com@...> wrote:

+1 NB

 

--

Erin A. Boyd

Director of Emerging Technologies OCTO

Distinguished Engineer

Red Hat

eboyd@...   


Kubernetes Annual Report Summary 2021

Paris Pittman
 

TOC and community,

Kubernetes Annual Report 2021 Summary is live 
- Feedback issue inside of the blog post 

Important section to highlight is the Help Wanted. Our groups are making great progress with bubbling up their needs outside of /help-wanted issues on GitHub to target specific areas and high level initiatives that need work. Please forward to those you see fit. We will have more communication around this on social, other mailing lists, etc, going out today and over the course of the next few weeks.  

Paris
on behalf of Kubernetes Steering Committee 


Re: [VOTE] Keptn for incubation

Erin Boyd
 

+1 binding

On Wed, Jun 1, 2022 at 11:21 AM Prateek Pandey via lists.cncf.io <prateek.pandey=nirmata.com@...> wrote:
+1 NB
 

--

Erin A. Boyd

Director of Emerging Technologies OCTO

Distinguished Engineer

Red Hat

eboyd@...   


Re: [VOTE] Kyverno for incubation

vyankateshkd@...
 

+1 NB