License compliance clarification for unlisted projects

[shubham1172]

Hi,

The following projects are used by software under CNCF today, but these do not comply with CNCF Allowlist License Policy and are not listed under License exceptions. We are looking to understand the status of these projects - are they going to be moved under the exception lists?

Project URL	License	Used by
https://github.com/mitchellh/cli	MPL-2.0	https://github.com/kubernetes/kubernetes
https://github.com/hashicorp/consul	MPL-2.0	https://github.com/kubernetes/kubernetes
https://github.com/bketelsen/crypt	MIT	https://github.com/kubernetes/kubernetes
https://github.com/hashicorp/go-immutable-radix	MPL-2.0	https://github.com/kubernetes/kubernetes
https://github.com/hashicorp/go-retryablehttp	MPL-2.0	https://github.com/argoproj/argo-cd
https://github.com/hashicorp/go-rootcerts	MPL-2.0	https://github.com/kubernetes/kubernetes
https://github.com/hashicorp/go-sockaddr	MPL-2.0	https://github.com/kubernetes/kubernetes
https://github.com/hashicorp/go-uuid	MPL-2.0	https://github.com/kubernetes/kubernetes
https://github.com/smartystreets/goconvey	MPL-2.0	https://github.com/kubernetes/kubernetes
https://github.com/mitchellh/gox	MPL-2.0	https://github.com/kubernetes/kubernetes
https://github.com/hashicorp/logutils	MPL-2.0	https://github.com/kubernetes/kubernetes
https://github.com/hashicorp/memberlist	MPL-2.0	https://github.com/kubernetes/kubernetes
https://github.com/hashicorp/serf	MPL-2.0	https://github.com/kubernetes/kubernetes
https://github.com/armon/consul-api	MPL-2.0	https://github.com/helm/helm

[shubham1172]

@amye I see that this was added and removed from the license exceptions project board. Will this be also addressed in the next meeting? Is there any other information that I can provide here?

[amye]

This has several requests in it which make it difficult to track, and right now I'm prioritizing project requests directly. However, it is likely that many of these will be resolved in this next round of reviews.

[shubham1172]

Okay, please let me know if I can help sorting them in any way to make it easier for tracking. We can also track them as a part of #297 if that is easier.

[amye]

Appreciated! We're just now rolling out a more direct process for this to be able to help deal with backlog, I will leave this open as we work through this.

[shubham1172]

Thank you @amye!

[jeromeinsf]

https://github.com/hashicorp/memberlist not only used by https://github.com/kubernetes/kubernetes but also https://github.com/cortexproject/