Skip to content

Latest commit

 

History

History
139 lines (97 loc) · 7.34 KB

README.md

File metadata and controls

139 lines (97 loc) · 7.34 KB

Welcome to the CNCF Artifacts Working Group

CI

In the distributed world of cloud-native computing different artifacts and packages are used to transport configuration and code for the many services and capabilities that comprise and support workloads and applications. As an example, today ArtifactHub advertises that it can crawl about 20 such artifact types [1]. These "cloud-native" bundles add to the previous proliferation of package and artifact types for software dependencies such as Maven and npm and for system packages like deb and rpm. This abundance of package types and formats adds complexity and risk for cloud application developers and architects trying to provision and run cloud-native workloads. Different tools and controllers must be carefully learned and installed to bundle, unbundle, verify and deploy each artifact type. This complexity slows product development by users, impedes innovation and collaboration amongst projects, and increases risks of insecure configuration. To reduce this complexity and facilitate collaboration and innovation, WG Artifacts will gather stakeholders from many CNCF and open source projects offering packaging, distribution and deployment mechanisms for bundles of configuration and code.

The charter describes the goals and activites of this group.

Old working document of the charter.

The CNCF Artifacts Working Group is under the App Delivery Technical Advisory Group hosted by the Cloud Native Computing Foundation (CNCF).

Chairs

  • Andrew Block (@sabre1041)
  • Ramkumar Chinchani (@rchincha)

Use Cases

A list of common use cases that are implemented across various package managers.

Use Case /
Package Manager
Alpine
(APK)
Cargo Carvel Helm Maven npm OCI PyPi rpm
List of Packages 🟢 🔴* 🟢
Filter a List of Packages 🟢 🔴 🟡
List versions 🔴 🟡* 🟢
De-dupability 🟡 🟢 🟢
Multi-Arch Support 🟢 🟢 🟢
Dependency Tracking 🟢 🟢 🟢
<use-case> 🟡

Getting Started

Currently, the working group is evaluating the current state of various software ecosystems and whether it is feasible to standardize and also suggest changes.

# Clone this repository
git clone https://github.com/cncf-tags/wg-artifacts.git

# Enter cloned dir
cd wg-artifacts

# Check metadata query support across software ecosystems
make conformance

Contributing

Our project welcomes contributions from any member of our community. To get started contributing, please see our Contributor Guide.

Meeting Notes

Scope

  • Define a set of query interfaces that can standardized across various software ecosystems.

Communications

  • Slack Channel:

Slack channel

  • Public Meeting Schedule and Links:

This working group meets on 2nd and 4th Friday of each month @ 1700 UTC

Zoom: https://zoom.us/j/7276783015?pwd=R0RJMkRzQ1ZjcmE0WERGcTJTOEVyUT09 Passcode: 77777

Agendas and notes: https://docs.google.com/document/d/1E7iKPOuyA1jxPe8vDG8aPd8jtnCEbpDpCifXDvDCnA0/

CNCF Community

WG Artifacts - Project Meeting TAG App Delivery

Resources

Meeting Notes

License

This project is licensed under Apache 2.0

Conduct

We follow the CNCF Code of Conduct.