[SANDBOX PROJECT ONBOARDING] Microcks

[amye]

Welcome to CNCF Project Onboarding! This is an issue created to help onboard your project into the CNCF after the TOC has voted to accept your project. We would like to complete onboarding within one month of acceptance.

From the project side, please ensure that you:

• [x] Understand the project proposal process and reqs: https://github.com/cncf/toc/blob/main/process/project_proposals.md#introduction
• [x] Understand the services available for your project at CNCF https://www.cncf.io/services-for-projects/
• [x] Ensure your project meets the CNCF IP Policy: https://github.com/cncf/foundation/blob/master/charter.md#11-ip-policy
• [x] Review the online programs guidelines: https://github.com/cncf/foundation/blob/master/online-programs-guidelines.md
• [x] Understand the trademark guidelines: https://www.linuxfoundation.org/legal/trademark-usage
• [x] Understand the license allowlist: https://github.com/cncf/foundation/blob/master/allowed-third-party-license-policy.md#approved-licenses-for-allowlist
• [x] Is your project working on written, open governance? see https://contribute.cncf.io/maintainers/governance/
• [x] Slack: Are your slack channels migrated to the Kubernetes or CNCF Slack? (see https://slack.com/help/articles/217872578-Import-data-from-one-Slack-workspace-to-another for more details)
• [x] Is your project in its own separate neutral github organization?
• [x] Submitted a Pull request to add your project as a sandbox project to https://landscape.cncf.io
• [x] Create maintainer list + add to aggregated https://maintainers.cncf.io list by submitting a PR to it
• [x] Artwork: Submit a pull request to https://github.com/cncf/artwork with your artwork
• [x] Domain: transfer domain to the CNCF - https://jira.linuxfoundation.org/plugins/servlet/theme/portal/2/create/63

Things that CNCF will need from the project:

• [x] Provide emails for the maintainers added to https://maintainers.cncf.io in order to get access to the maintainers mailing list and ServiceDesk - [email protected] is the best email to send those to
• [x] Trademarks: transfer any trademark and logo mark assets over to the LF - https://github.com/cncf/foundation/tree/master/agreements has agreements
• [x] GitHub: ensure 'thelinuxfoundation' and 'caniszczyk' are added as initial org owners, this helps us make sure we have continuity of GH ownership that we will onboard to our GitHub Enterprise instance: https://github.com/enterprises/cncf
• [x] GitHub: ensure DCO or CLA are enabled for all GitHub repositories of the project
• [x] GitHub: ensure that that the CNCF Code of Conduct (or your adopted version of it) are explicitly referenced at the project's README on GitHub
• [x] Website: ensure LF footer is there and website guidelines followed (if your project doesn't have a dedicated website, please adopt those guidelines to the README file of your project on GitHub).
• [x] Website: Analytics transferred to [email protected]
• [x] OpenSSF Best Practices Badge: Start on an OpenSSF Best Practices Badge https://bestpractices.coreinfrastructure.org/en

Things that the CNCF will do or help the project to do:

• [x] Devstats: add to devstats https://devstats.cncf.io/
• [x] Insights: add to LFX Insights https://insights.v3.lfx.linuxfoundation.org/
• [ ] Events: update CFP + Registration + CFP Area forms
• [x] ServiceDesk: confirm maintainers have read https://www.cncf.io/services-for-projects/
• [x] CNCF Welcome Email Sent to confirm maintainer list access
• [x] Book time with the team with http://project-meetings.cncf.io
• [ ] Adopt a license scanning tool, like FOSSA or Snyk

[yada]

Welcome to CNCF Project Onboarding! This is an issue created to help onboard your project into the CNCF after the TOC has voted to accept your project. We would like to complete onboarding within one month of acceptance.

We thank the CNCF Technical Oversight Committee (TOC) members for their validation and the TAG App Delivery team for their invaluable support during this process.

Please see below an update regarding the actions performed:

From the project side, please ensure that you:

• [x] Understand the project proposal process and reqs: https://github.com/cncf/toc/blob/main/process/project_proposals.md#introduction

✅ read, understood and validated.

• [x] Understand the services available for your project at CNCF https://www.cncf.io/services-for-projects/

✅ read, understood and validated.

• [x] Ensure your project meets the CNCF IP Policy: https://github.com/cncf/foundation/blob/master/charter.md#11-ip-policy

✅ read, understood and validated.

• [x] Review the online programs guidelines: https://github.com/cncf/foundation/blob/master/online-programs-guidelines.md

✅ read, understood and validated.

• [x] Understand the trademark guidelines: https://www.linuxfoundation.org/legal/trademark-usage

✅ read, understood and validated.

• [x] Understand the license allowlist: https://github.com/cncf/foundation/blob/master/allowed-third-party-license-policy.md#approved-licenses-for-allowlist

✅ read and understood. We have a deep assessment of our dependencies are have well known libraries using non-approved (or not listed) licenses in the Allowlist (ex: Eclipse public license): we can allow them with some assistance? Thank you for clarifications on this point.

• [x] Is your project working on written, open governance? see https://contribute.cncf.io/maintainers/governance/

✅ read and understood. We will work on it asap.

• [x] Slack: Are your slack channels migrated to the Kubernetes or CNCF Slack? (see https://slack.com/help/articles/217872578-Import-data-from-one-Slack-workspace-to-another for more details)

✅ See: https://cloud-native.slack.com/messages/microcks channel ID on CNCF Slack is C05BYHW1TNJ

• [x] Is your project in its own separate neutral github organization?

✅ Yes

• [x] Submitted a Pull request to add your project as a sandbox project to https://landscape.cncf.io

✅ See: https://github.com/cncf/landscape/pull/3285

• [x] Create maintainer list + add to aggregated https://maintainers.cncf.io list by submitting a PR to it

✅ See: https://github.com/cncf/foundation/pull/588

• [x] Artwork: Submit a pull request to https://github.com/cncf/artwork with your artwork

✅ See: https://github.com/cncf/artwork/pull/416

• [x] Domain: transfer domain to the CNCF - https://jira.linuxfoundation.org/plugins/servlet/theme/portal/2/create/63

✅ See: https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-25739

Things that CNCF will need from the project:

• [x] Provide emails for the maintainers added to https://maintainers.cncf.io in order to get access to the maintainers mailing list and ServiceDesk - [email protected] is the best email to send those to

✅ Email sent:

from: | Yacine Kheddache <[email protected]>
-- | --
to: | [email protected]
cc: | Laurent Broudoux <[email protected]>,Amye Scavarda Perrin <[email protected]>
date: | Jun 28, 2023, 11:18 AM
subject: | [Microcks] access to the maintainers mailing list and ServiceDesk

• [ ] Trademarks: transfer any trademark and logo mark assets over to the LF - https://github.com/cncf/foundation/tree/master/agreements has agreements

✅ read and understood. Microcks logo and trademark is owned by the community. Could you please send to the maintainers a non-corporate and non-registered agreement?

Maintainers emails available to sign are: [email protected] [email protected]

• [x] GitHub: ensure 'thelinuxfoundation' and 'caniszczyk' are added as initial org owners, this helps us make sure we have continuity of GH ownership that we will onboard to our GitHub Enterprise instance: https://github.com/enterprises/cncf

✅ invitation to join has been sent.

• [x] GitHub: ensure DCO or CLA are enabled for all GitHub repositories of the project

✅ DCO has been setup and activated.

• [x] GitHub: ensure that that the CNCF Code of Conduct (or your adopted version of it) are explicitly referenced at the project's README on GitHub

✅ See: https://github.com/microcks/microcks Section "Getting Started"

• [x] Website: ensure LF footer is there and website guidelines followed (if your project doesn't have a dedicated website, please adopt those guidelines to the README file of your project on GitHub).

✅ See: https://microcks.io/

• [ ] Website: Analytics transferred to [email protected]

Waiting for confirmation (see question below).

• [ ] OpenSSF Best Practices Badge: Start on an OpenSSF Best Practices Badge https://bestpractices.coreinfrastructure.org/en

WIP, see: https://bestpractices.coreinfrastructure.org/en/projects/7513

Things that the CNCF will do or help the project to do:

• [ ] Devstats: add to devstats https://devstats.cncf.io/
• [ ] Events: update CFP + Registration + CFP Area forms
• [ ] ServiceDesk: confirm maintainers have read https://www.cncf.io/services-for-projects/
• [ ] CNCF Welcome Email Sent to confirm maintainer list access
• [ ] Book time with the team with http://project-meetings.cncf.io
• [ ] Adopt a license scanning tool, like FOSSA or Snyk

[yada]

Website: Analytics transferred to [email protected]

✅ See:

@amye can you confirm it is what you are expecting on this task?

[lukaszgryglicki]

DevStats instance added. Also added in All CNCF projects health instance. Will be fully-added to all other All CNCF dashboards on Friday (affiliations research started today, and will be imported as it progresses).

[lbroudoux]

Domain: transfer domain to the CNCF - https://jira.linuxfoundation.org/plugins/servlet/theme/portal/2/create/63

✅ Done. See https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-25739

[yada]

Comment above updated with tick on all tasks done.

[lbroudoux]

OpenSSF Best Practices Badge: Start on an OpenSSF Best Practices Badge https://bestpractices.coreinfrastructure.org/en

✅ Done. Current completion is 88%. See https://bestpractices.coreinfrastructure.org/en/projects/7513

[yada]

Hi, We are happy to finalize our onboarding sandbox process.

As: "Domain: transfer domain to the CNCF" is done "Website: Analytics transferred" is done "OpenSSF Best Practices Badge: Start on an OpenSSF Best Practices Badge" reached 91%, so guess it is done. See: https://www.bestpractices.dev/en/projects/7513

For: "Trademarks: transfer any trademark and logo mark assets over to the LF" Microcks' logo and trademark is owned by the community. Could you please send the maintainers a non-corporate and non-registered agreement? Maintainers emails available to sign are: [email protected] [email protected]

Regarding "Understand the license allowlist", we have removed some dependencies and will update this accordingly asap.

I am looking forward to seeing who will do or help us with "Things that the CNCF will do or help the project to do:"

I appreciate your support. Regards, Yacine

[amye]

Question: Your application has a different company as contributing -- I see https://postman.com/. Should someone from that group sign?

[yada]

Only the two maintainers have to sign.

[yada]

Hi, Can we close "Trademarks: transfer any trademark and logo mark assets over to the LF"? We are just waiting to sign on our side. Reminder:

• non-corporate and non-registered agreement
• Maintainers emails available to sign are: [email protected] [email protected]

Thanks

[amye]

Not sure what this means? We have two agreements, non-registered and registered trademarks, but your application has a contributing company associated with it.

[yada]

In our submission we have added Postman to the "Contributing or Sponsoring Org" as their are sponsoring Microcks. But they do not need to sign as the project is owned by the two maintainers. Which explain why they do not need to sign from our point fo view, let me know if I missed anything ?

[yada]

Happy New Year, and all the best for 2024 🎉 https://www.linkedin.com/feed/update/urn:li:activity:7150492809869926400

🪄 As our New Year's Resolutions and wish, let's finish this sandbox onboarding process this Q1 🙌

Only 7 tasks to close, and we are done: @amye @Cmierly @caniszczyk and the team, let me know if anything is missing on our side, and we will process it accordingly.

From the project point of view:

1. " Trademarks: transfer any trademark and logo mark assets over to the LF" Maintainers ([email protected] & [email protected]) are waiting for the non-corporate and non-registered agreement and will sign it immediately. As the thread above explains, maintainers are the only ones who need to sign.

2. "Insights: add to LFX Insights" ✅ See: https://insights.lfx.linuxfoundation.org/foundation/cncf/overview?project=microcks

3. "Events: update CFP + Registration + CFP Area forms" What do you expect from us on this point? Any link/info will be appreciated.

4. "ServiceDesk: confirm maintainers have read https://www.cncf.io/services-for-projects/" ✅ confirmed.

5. "CNCF Welcome Email Sent to confirm maintainer list access" ✅ Received: [cncf-microcks-maintainers] Welcome to [email protected] Group Notification [email protected] Fri, Jun 30, 2023, 12:18 PM

6. "Book time with the team with http://project-meetings.cncf.io" ✅ booked and meeting done on November 7th, 2023 (during KubeCon + CloudNativeCon North America) with Jake Pineda.

7. "Adopt a license scanning tool, like FOSSA or Snyk" Can we have some help setting it up and accessing the license via CNCF agreements?

Thank you Yacine

[Cmierly]

Hi @yada ! I'll ping @RobertKielty to help you with the license scanning tool!

[RobertKielty]

I have invted @yada and @lbroudoux to the team on FOSSA, @yada can now add a repo for scanning

[RobertKielty]

Once @lbroudoux has accepted their invite and added the main Microcks repos as project to their Team in FOSSA then we can tick this box.

@yada thanks again for reaching out to me!

[RobertKielty]

Project has been added to the Microcks team in FOSSA.

[Cmierly]

Microcks is now fully on boarded!

[yada]

Thank you, @Cmierly, and the entire CNCF team, for your time and assistance 🙌