Introducing ORY Hydra


alexis richardson
 

Hi folks

I've discussed this with Aeneas

I think this is a very interesting project from a "product manager" point of view.  I don't feel technically qualified to sponsor this though.  Can someone step in please?

A


On Mon, 13 May 2019, 15:39 Aeneas Rekkas, <aeneas@...> wrote:
Hello,

I am writing in reference to the ORY open source organization. The project's focus is cloud native end-user, service, workload, and IoT authentication and authorization.

ORY has to date 11k GitHub Stars and 3.5M+ Docker Pulls in total. The project provides exhaustive documentation and established community management processes, including 1k chat users on Discord, an active Discourse forum  Last month alone there were over one billion API requests according to optional telemetry. ORY is used by several organizations, including Deutsche Boerse AGSegmentRaspberry PI, in production. All our projects are written in Go, designed with cloud native principles and work best in Kubernetes environments. ORY integrates well with other CNCF projects, e.g. Open Policy Agent, as well as projects from the wider Kubernetes Ecosystem for instance Ambassador.

We strongly believe in headless, API-first services. Our projects solve problems with clear domain boundaries. ORY Hydra  our flagship project, is a cloud native, OpenID Certified OpenID Connect and OAuth 2.0 Provider which integrates by design with any login system. What stands out is that all of our projects work independently/stand-alone or in combination with one-another as well as in combination with other open or closed source software projects with adjacent problem domains.

Therefore we would like to present our ecosystem and specifically ORY Hydra to the TOC (issue). Alexis Richardson (cc) and Fabian Reinartz (cc) encouraged us to directly apply for the incubating stage, which is why we are looking for a Sponsor. We were told that contacting the CNCF mailing list would be the best course of action for this. If anyone finds the projects interesting, I would be more than happy to get in touch and present the ecosystem.

I am looking forward to hearing from you.

Best regards
Aeneas


Aeneas Rekkas <aeneas@...>
 

Hello,

I am writing in reference to the ORY open source organization. The project's focus is cloud native end-user, service, workload, and IoT authentication and authorization.

ORY has to date 11k GitHub Stars and 3.5M+ Docker Pulls in total. The project provides exhaustive documentation and established community management processes, including 1k chat users on Discord, an active Discourse forum  Last month alone there were over one billion API requests according to optional telemetry. ORY is used by several organizations, including Deutsche Boerse AGSegmentRaspberry PI, in production. All our projects are written in Go, designed with cloud native principles and work best in Kubernetes environments. ORY integrates well with other CNCF projects, e.g. Open Policy Agent, as well as projects from the wider Kubernetes Ecosystem for instance Ambassador.

We strongly believe in headless, API-first services. Our projects solve problems with clear domain boundaries. ORY Hydra  our flagship project, is a cloud native, OpenID Certified OpenID Connect and OAuth 2.0 Provider which integrates by design with any login system. What stands out is that all of our projects work independently/stand-alone or in combination with one-another as well as in combination with other open or closed source software projects with adjacent problem domains.

Therefore we would like to present our ecosystem and specifically ORY Hydra to the TOC (issue). Alexis Richardson (cc) and Fabian Reinartz (cc) encouraged us to directly apply for the incubating stage, which is why we are looking for a Sponsor. We were told that contacting the CNCF mailing list would be the best course of action for this. If anyone finds the projects interesting, I would be more than happy to get in touch and present the ecosystem.

I am looking forward to hearing from you.

Best regards
Aeneas


Liz Rice
 

Hi Aeneas, 

This looks really interesting and I'd love to learn more about it. 

Question for the TOC folks (and other interested parties) regarding processes / scaling / new SIGs: should projects like this present to a SIG first? Or do we want to see it first and then ask the SIGs to help with a deeper dive and DD? 

Thanks
Liz


On 13 May 2019, at 15:39, Aeneas Rekkas <aeneas@...> wrote:

Hello,

I am writing in reference to the ORY open source organization. The project's focus is cloud native end-user, service, workload, and IoT authentication and authorization.

ORY has to date 11k GitHub Stars and 3.5M+ Docker Pulls in total. The project provides exhaustive documentation and established community management processes, including 1k chat users on Discord, an active Discourse forum  Last month alone there were over one billion API requests according to optional telemetry. ORY is used by several organizations, including Deutsche Boerse AGSegmentRaspberry PI, in production. All our projects are written in Go, designed with cloud native principles and work best in Kubernetes environments. ORY integrates well with other CNCF projects, e.g. Open Policy Agent, as well as projects from the wider Kubernetes Ecosystem for instance Ambassador.

We strongly believe in headless, API-first services. Our projects solve problems with clear domain boundaries. ORY Hydra  our flagship project, is a cloud native, OpenID Certified OpenID Connect and OAuth 2.0 Provider which integrates by design with any login system. What stands out is that all of our projects work independently/stand-alone or in combination with one-another as well as in combination with other open or closed source software projects with adjacent problem domains.

Therefore we would like to present our ecosystem and specifically ORY Hydra to the TOC (issue). Alexis Richardson (cc) and Fabian Reinartz (cc) encouraged us to directly apply for the incubating stage, which is why we are looking for a Sponsor. We were told that contacting the CNCF mailing list would be the best course of action for this. If anyone finds the projects interesting, I would be more than happy to get in touch and present the ecosystem.

I am looking forward to hearing from you.

Best regards
Aeneas


Chris Aniszczyk
 

Ideally, presenting to a SIG first makes sense unless the TOC states otherwise.

In this case, the Security SIG makes is a natural fit probably.

On Mon, May 13, 2019 at 2:18 PM Liz Rice <liz@...> wrote:
Hi Aeneas, 

This looks really interesting and I'd love to learn more about it. 

Question for the TOC folks (and other interested parties) regarding processes / scaling / new SIGs: should projects like this present to a SIG first? Or do we want to see it first and then ask the SIGs to help with a deeper dive and DD? 

Thanks
Liz


On 13 May 2019, at 15:39, Aeneas Rekkas <aeneas@...> wrote:

Hello,

I am writing in reference to the ORY open source organization. The project's focus is cloud native end-user, service, workload, and IoT authentication and authorization.

ORY has to date 11k GitHub Stars and 3.5M+ Docker Pulls in total. The project provides exhaustive documentation and established community management processes, including 1k chat users on Discord, an active Discourse forum  Last month alone there were over one billion API requests according to optional telemetry. ORY is used by several organizations, including Deutsche Boerse AGSegmentRaspberry PI, in production. All our projects are written in Go, designed with cloud native principles and work best in Kubernetes environments. ORY integrates well with other CNCF projects, e.g. Open Policy Agent, as well as projects from the wider Kubernetes Ecosystem for instance Ambassador.

We strongly believe in headless, API-first services. Our projects solve problems with clear domain boundaries. ORY Hydra  our flagship project, is a cloud native, OpenID Certified OpenID Connect and OAuth 2.0 Provider which integrates by design with any login system. What stands out is that all of our projects work independently/stand-alone or in combination with one-another as well as in combination with other open or closed source software projects with adjacent problem domains.

Therefore we would like to present our ecosystem and specifically ORY Hydra to the TOC (issue). Alexis Richardson (cc) and Fabian Reinartz (cc) encouraged us to directly apply for the incubating stage, which is why we are looking for a Sponsor. We were told that contacting the CNCF mailing list would be the best course of action for this. If anyone finds the projects interesting, I would be more than happy to get in touch and present the ecosystem.

I am looking forward to hearing from you.

Best regards
Aeneas



--
Chris Aniszczyk (@cra) | +1-512-961-6719


Aeneas Rekkas <aeneas@...>
 

Hi Liz,

we're really happy to hear that you're interested in the project(s)! I'd be more than happy to walk you through the ecosystem this or next week. If you let me know which times work for you I can set up a video conference. We're currently located in CEST. This Thursday would work very well for me for example!

Best
Aeneas

On 13.05.2019 21:17, Liz Rice wrote:
Hi Aeneas, 

This looks really interesting and I'd love to learn more about it. 

Question for the TOC folks (and other interested parties) regarding processes / scaling / new SIGs: should projects like this present to a SIG first? Or do we want to see it first and then ask the SIGs to help with a deeper dive and DD? 

Thanks
Liz


On 13 May 2019, at 15:39, Aeneas Rekkas <aeneas@...> wrote:

Hello,

I am writing in reference to the ORY open source organization. The project's focus is cloud native end-user, service, workload, and IoT authentication and authorization.

ORY has to date 11k GitHub Stars and 3.5M+ Docker Pulls in total. The project provides exhaustive documentation and established community management processes, including 1k chat users on Discord, an active Discourse forum  Last month alone there were over one billion API requests according to optional telemetry. ORY is used by several organizations, including Deutsche Boerse AGSegmentRaspberry PI, in production. All our projects are written in Go, designed with cloud native principles and work best in Kubernetes environments. ORY integrates well with other CNCF projects, e.g. Open Policy Agent, as well as projects from the wider Kubernetes Ecosystem for instance Ambassador.

We strongly believe in headless, API-first services. Our projects solve problems with clear domain boundaries. ORY Hydra  our flagship project, is a cloud native, OpenID Certified OpenID Connect and OAuth 2.0 Provider which integrates by design with any login system. What stands out is that all of our projects work independently/stand-alone or in combination with one-another as well as in combination with other open or closed source software projects with adjacent problem domains.

Therefore we would like to present our ecosystem and specifically ORY Hydra to the TOC (issue). Alexis Richardson (cc) and Fabian Reinartz (cc) encouraged us to directly apply for the incubating stage, which is why we are looking for a Sponsor. We were told that contacting the CNCF mailing list would be the best course of action for this. If anyone finds the projects interesting, I would be more than happy to get in touch and present the ecosystem.

I am looking forward to hearing from you.

Best regards
Aeneas
--

Aeneas Rekkas
Founder & CEO, ORY GmbH
www.ory.sh | aeneas@...
Company Address: Belfortstr. 14, DE-81667 Munich
Register: Local court Munich HRB 216983
Managing Director: Aeneas Rekkas
This e-mail message may contain confidential or legally privileged information and is intended only for the use of the intended recipient(s). Any unauthorized disclosure, dissemination, distribution, copying or the taking of any action in reliance on the information herein is prohibited. E-mails are not secure and cannot be guaranteed to be error free as they can be intercepted, amended, or contain viruses. Anyone who communicates with us by e-mail is deemed to have accepted these risks. ORY GmbH is not responsible for errors or omissions in this message and denies any responsibility for any damage arising from the use of e-mail. Any opinion and other statement contained in this message and any attachment are solely those of the author and do not necessarily represent those of the company.



Quinton Hoole
 

+1 to what Chris said. I'd suggest that the TOC ask the Security SIG to do the deep due diligence and produce a brief DD report along the lines of the recent one done for OpenEBS by Xiang and the Storage SIG.

Q
From:Chris Aniszczyk <caniszczyk@...>
To:Liz Rice <liz@...>
Cc:Aeneas Rekkas <aeneas@...>;CNCF TOC <cncf-toc@...>;Alexis Richardson <alexis@...>;Fabian Reinartz <fab.reinartz@...>
Date:2019-05-14 03:23:30
Subject:Re: [cncf-toc] Introducing ORY Hydra

Ideally, presenting to a SIG first makes sense unless the TOC states otherwise.

In this case, the Security SIG makes is a natural fit probably.

On Mon, May 13, 2019 at 2:18 PM Liz Rice <liz@...> wrote:
Hi Aeneas, 

This looks really interesting and I'd love to learn more about it. 

Question for the TOC folks (and other interested parties) regarding processes / scaling / new SIGs: should projects like this present to a SIG first? Or do we want to see it first and then ask the SIGs to help with a deeper dive and DD? 

Thanks
Liz


On 13 May 2019, at 15:39, Aeneas Rekkas <aeneas@...> wrote:

Hello,

I am writing in reference to the ORY open source organization. The project's focus is cloud native end-user, service, workload, and IoT authentication and authorization.

ORY has to date 11k GitHub Stars and 3.5M+ Docker Pulls in total. The project provides exhaustive documentation and established community management processes, including 1k chat users on Discord, an active Discourse forum  Last month alone there were over one billion API requests according to optional telemetry. ORY is used by several organizations, including Deutsche Boerse AGSegmentRaspberry PI, in production. All our projects are written in Go, designed with cloud native principles and work best in Kubernetes environments. ORY integrates well with other CNCF projects, e.g. Open Policy Agent, as well as projects from the wider Kubernetes Ecosystem for instance Ambassador.

We strongly believe in headless, API-first services. Our projects solve problems with clear domain boundaries. ORY Hydra  our flagship project, is a cloud native, OpenID Certified OpenID Connect and OAuth 2.0 Provider which integrates by design with any login system. What stands out is that all of our projects work independently/stand-alone or in combination with one-another as well as in combination with other open or closed source software projects with adjacent problem domains.

Therefore we would like to present our ecosystem and specifically ORY Hydra to the TOC (issue). Alexis Richardson (cc) and Fabian Reinartz (cc) encouraged us to directly apply for the incubating stage, which is why we are looking for a Sponsor. We were told that contacting the CNCF mailing list would be the best course of action for this. If anyone finds the projects interesting, I would be more than happy to get in touch and present the ecosystem.

I am looking forward to hearing from you.

Best regards
Aeneas



--
Chris Aniszczyk (@cra) | +1-512-961-6719


Quinton Hoole
 

Apologies, I meant TiKV, not OpenEBS.

I blame it on jetlag :-)

Q
From:Quinton Hoole <quinton.hoole@...>
To:Chris Aniszczyk <caniszczyk@...>;Liz Rice <liz@...>
Cc:Aeneas Rekkas <aeneas@...>;CNCF TOC <cncf-toc@...>;Alexis Richardson <alexis@...>;Fabian Reinartz <fab.reinartz@...>
Date:2019-05-15 04:39:24
Subject:RE: [cncf-toc] Introducing ORY Hydra

+1 to what Chris said. I'd suggest that the TOC ask the Security SIG to do the deep due diligence and produce a brief DD report along the lines of the recent one done for OpenEBS by Xiang and the Storage SIG.

Q
From:Chris Aniszczyk <caniszczyk@...>
To:Liz Rice <liz@...>
Cc:Aeneas Rekkas <aeneas@...>;CNCF TOC <cncf-toc@...>;Alexis Richardson <alexis@...>;Fabian Reinartz <fab.reinartz@...>
Date:2019-05-14 03:23:30
Subject:Re: [cncf-toc] Introducing ORY Hydra

Ideally, presenting to a SIG first makes sense unless the TOC states otherwise.

In this case, the Security SIG makes is a natural fit probably.

On Mon, May 13, 2019 at 2:18 PM Liz Rice <liz@...> wrote:
Hi Aeneas, 

This looks really interesting and I'd love to learn more about it. 

Question for the TOC folks (and other interested parties) regarding processes / scaling / new SIGs: should projects like this present to a SIG first? Or do we want to see it first and then ask the SIGs to help with a deeper dive and DD? 

Thanks
Liz


On 13 May 2019, at 15:39, Aeneas Rekkas <aeneas@...> wrote:

Hello,

I am writing in reference to the ORY open source organization. The project's focus is cloud native end-user, service, workload, and IoT authentication and authorization.

ORY has to date 11k GitHub Stars and 3.5M+ Docker Pulls in total. The project provides exhaustive documentation and established community management processes, including 1k chat users on Discord, an active Discourse forum  Last month alone there were over one billion API requests according to optional telemetry. ORY is used by several organizations, including Deutsche Boerse AGSegmentRaspberry PI, in production. All our projects are written in Go, designed with cloud native principles and work best in Kubernetes environments. ORY integrates well with other CNCF projects, e.g. Open Policy Agent, as well as projects from the wider Kubernetes Ecosystem for instance Ambassador.

We strongly believe in headless, API-first services. Our projects solve problems with clear domain boundaries. ORY Hydra  our flagship project, is a cloud native, OpenID Certified OpenID Connect and OAuth 2.0 Provider which integrates by design with any login system. What stands out is that all of our projects work independently/stand-alone or in combination with one-another as well as in combination with other open or closed source software projects with adjacent problem domains.

Therefore we would like to present our ecosystem and specifically ORY Hydra to the TOC (issue). Alexis Richardson (cc) and Fabian Reinartz (cc) encouraged us to directly apply for the incubating stage, which is why we are looking for a Sponsor. We were told that contacting the CNCF mailing list would be the best course of action for this. If anyone finds the projects interesting, I would be more than happy to get in touch and present the ecosystem.

I am looking forward to hearing from you.

Best regards
Aeneas



--
Chris Aniszczyk (@cra) | +1-512-961-6719