-
Notifications
You must be signed in to change notification settings - Fork 22
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[SANDBOX ONBOARDING] KusionStack #295
Comments
@Cmierly this should be good to go to begin onboarding :) @SparkYuan tagging you here as an FYI, please tag any others from the project who should follow this issue. |
Thanks @mrbobbytables! We will follow up on the items in this issue. |
I am working on the following items:
Question about this one: Does "neutral" here represent "not in a GHE account currently"? We are planning to transfer all repositories currently under the There are 3 private repos and 2 public-archived repos at the moment. Can they be transferred while staying private/archived, or do we need to get rid of them first? We are also cleaning up the outdated repos and then everything else should be good to transfer. These can be expected by the end of the week:
These two might take a bit longer:
Could you please also tag the CNCF staff that can help with the following?
|
This artwork PR is ready for review. Since our logo is basically just words, I'm using Helm as a reference which uses the same set images for horizontal, stacked and logo.
|
Correct. 👍 As a followup we can update the wording in the template to make that a bit more clear. |
@ffforest with the Slack migration either myself of @RobertKielty are happy to assist! The same with: |
myself, @krook or @jeefy can help here. How many channels do you have? If its a small number the easiest method might be to manually recreate them in cncf or kubernetes slack. |
Hi @ffforest, for FOSSA and/or Snyk we will need one or more email addresses to invite you to join the CNCF service instances that are provided to CNCF Projects. You send us the email addresses by emailing them to [email protected] For FOSSA and Snyk - The email addresses you send us need to be associated with GitHub user accounts that have access to the code repos that will be scanned. |
@ffforest, I have made a KusionStack Team on CNCF FOSSA and a KusionStack Organziation on CNCF Snyk for the project. @Cmierlym, I've added KusionStack to our internal records. |
Thanks @mrbobbytables! |
We have 2 channels with about 70 people in them. What would you recommend? Create a new one and redirect people to it from the existing one? |
as-is is fine - a good chunk of projects use private repos for things like security patch testing before pushing to public etc |
Thanks @RobertKielty! |
That's perfect thank you. I have received the emails you have sent over. cc @Cmierly Next step would be to state a preference for the project to use either FOSSA or Snyk. |
For that amount of users, I'd probably lean towards import. @RobertKielty @idvoretskyi would either of you be able to help? |
Absolutely. FOSSA would do. |
@ffforest thank you! I have emailed out FOSSA invites to the maintainer team: @SparkYuan @liu-hm19 @zuomo @wu8685 @elliotxx @Eikykun @adohe @ruquanzhao @Yangyang96 @ColdsteelRail @shaofan-hs Please note the following:
For the initial license scans of the code repos we only need one maintainer to sucessfully register and import the repos so that we can see reports on the 3rd party licenses used in the project code repos. Feel free to have one of the maintainers reach out to me on CNCF Slack if support is required on getting setup. If there is work to be done to bring the code repos into compliance with the 3rd Party License policy then we can focus on getting all of the maintainers on-boarded onto FOSSA. I have sent out all of the invites, (one of the maintainers email addresses already had a FOSSA a/c associated with their email address) I will let you know who that was in my next comment. |
Hi @SparkYuan, The email address that @ffforest passed on to us for you was already registered on FOSSA. From a KusionStack on-boarding point of view, this is fine; as long as one of the other maintainers accepts their invite and imports the project's code repos into FOSSA then that will do for now. If however you want to register with CNCF FOSSA now there are two options to choose from: either
Typically, we use the FOSSA support transfer option for accounts where a maintainer just used their email address to setup FOSSA for learning purposes and are happy to delete that account, and we use an alternate address for people who are already using FOSSA for work and need to keep using their existing FOSSA setup. |
Quick update: Review and understand
Contribute and transfer
Update and document
|
Thank you @RobertKielty! I have just signed up and joined the CNCF FOSSA Org. My email is [email protected]. |
@Eikykun Thank you for accepting the FOSSA invite! I have added you to the KusionStack Team in CNCF FOSSA as a Team Admin. As a Team Admin when the rest of your colleagues accept their invites you will be able to add them to the Team on CNCF FOSSA. Be sure to also give your colleagues the Team Admin role so that they can self-serve on team administration tasks. For a description of the Team Admin Role within FOSSA see: https://docs.fossa.com/docs/role-based-access-control#team-roles The next step now is to import the KusionStack code repos into FOSSA You can follow the instructions to import a project repos here https://docs.fossa.com/docs/getting-started#importing-a-project Important Notes:
If you need any support in getting a repo import completed, let me know, I am only 7hrs ahead of you. Typically, the import task takes a few minutes to setup and the first scans will start soon after setup is complete. From there, merging new Pull Requests will trigger scans on FOSSA. |
@RobertKielty thank you! 😺 @ffforest I have added you as a team admin. Thank you for taking care of the next steps. |
Update on 10/15:
|
Items needing assistance from the CNCF:
Could you please send the invite? The organization is KusionStack.
We are using Google Analytics. Does this involve the transfer of a Google Analytics account?
I'm preparing the export file. Where should I send the file to?
Could you please let me know if you could help with these? cc @caniszczyk @mrbobbytables @Cmierly @idvoretskyi @RobertKielty @jeefy @krook |
Invite sent!
Can you please submit a ServiceDesk ticket, we'll proceed from there. |
@idvoretskyi I'm assuming you mean https://cncfservicedesk.atlassian.net/servicedesk/customer/portal/1 but I'm not able to log in there. I did send an email (titled KusionStack Sandbox Onboarding - Maintainers Emails) to [email protected] last week but perhaps it wasn't processed yet. I am able to submit a ticket via the LF service though but there are no Slack-related service there. |
Regarding this one
The agreement also mentions the transfer of social media accounts and such. We have a KusionStack account for X and Medium. Are they expected to transferred during onboarding? If so, how is that done (do we provide the username and password)? I'm assuming we are still in charge of producing contents for each. Procedure-wise, I understand that we are expected to send a signed copy to [email protected], after which we will receive a mutually signed copy back. |
@RobertKielty What is the expected response for (and time window to address) the issues exposed in the license scan? I noticed some of them are common issues among CNCF projects (dual licenses in vendor projects, etc). Do we need to provide a detailed comment in FOSSA with explanation for each of the issue (I've seen people done that for other projects but I don't have the permission to create a comment yet) and proceed to click ignore on the issue? |
@ffforest - on timelines for working through the reported license issues I think that is something the KusionStack project team should work on while the project is in the Sandbox. For 3rd party dependancies that are dual licensed they must be wholly licenseable under a permitted license as described in https://github.com/cncf/foundation/blob/main/allowed-third-party-license-policy.md#approved-licenses-for-allowlist For onboarding, getting repos scanned by FOSSA is the necessary task to complete. If you have contributors who can look at the reported issues now that is perfect.
Also on that call I learned that documentation repos need to be licensed under the Creative Commons Attribution 4.0 International License as described in https://github.com/cncf/foundation/blob/main/charter.md#11-ip-policy Thank you @jeefy and @mrbobbytables! |
EDIT: NM - thought of .github, not website - both need licenses.^^;;; |
Thanks @RobertKielty and @mrbobbytables for the quick response!
Yes I'm aware of this list. I went through the full list of issues identified and most of them are accounted for (all of the licenses linked below are using the proper versions for dependencies in the KusionStack projects):
Can the above be properly ignored with a comment stating the same? This is the only one I'm currently not very clear on:
|
@mrbobbytables Just to clarify, do you mean both .github and website repos need licenses or do they both need Creative Commons Attribution 4.0 International License? |
Currently Open PRs: |
DevStats instance created. |
Following up on these items:
I still don't have access to CNCF Service Desk to create a ticket for this. An email (titled KusionStack Sandbox Onboarding - Maintainers Emails) was send to [email protected] couple days ago. Can you please check if it has been processed?
Not clear on how to proceed on this one. Are we expected to transfer the Google Analytics account? These are also pending:
I'm working on these two:
cc @RobertKielty @jeefy @krook @Cmierly @mrbobbytables |
@ffforest I have sent out invites to add your maintainers to service desk. Let me know if you have any issues accepting the invite or need it resent |
Thanks @Cmierly ! |
Done! Please check. |
Project has been added to CLOMonitor |
Thank you @idvoretskyi and @cynthia-sg ! |
Regarding this agreement, our legal team has made some modifications. To highlight the key changes for your review:
KusionStack Trademark and Account Assignment Agreement - Ant Edits.pdf Please review the revised document and let me know if you have any questions or require further clarifications. cc @caniszczyk @mrbobbytables @RobertKielty @jeefy @krook @Cmierly Edit: Relevant question: The agreement also mentions the transfer of social media accounts and such. We have a KusionStack account for X and Medium. Are they expected to transferred during onboarding? If so, how is that done (do we provide the username and password)? |
Thank you @ffforest ! |
hi @ffforest ! |
Thanks for the update @Cmierly. Is there an approximate ETA for this? |
Welcome to CNCF Project Onboarding
ref: #83
This is an issue created to help onboard your project into the CNCF after the TOC has voted to accept your project.
We would like your project to complete onboarding within one month of acceptance.
Please track your progress by using "Quote reply" to create your own copy of this checklist in an issue, so that you can update the status as you finish items.
Review and understand
Contribute and transfer
thelinuxfoundation
as an organization owner to ensure neutral hosting of your project.Update and document
README
on GitHub.README
file).CNCF staff tasks
The text was updated successfully, but these errors were encountered: