[SANDBOX PROJECT ONBOARDING] Shipwright

[Cmierly]

Welcome to CNCF Project Onboarding!

This is an issue created to help onboard your project into the CNCF after the TOC has voted to accept your project into the Sandbox.

We would like your project to complete onboarding within one month of acceptance.

Please track your progress by using "Quote reply" to create your own copy of this checklist in an issue, so that you can update the status as you finish items.

Review and understand

• [x] The Technical Leadership Principles that outlines the expected behavior for any maintainer in a leadership role.
• [x] The project proposal process and requirements.
• [x] The services available for your project at the CNCF.
• [x] The CNCF IP Policy.
• [x] The trademark guidelines.
• [x] The license allowlist.
• [x] The online program guidelines.
• [x] Optional: Book time with CNCF staff for any onboarding questions.

Contribute and transfer

• [x] Move your project to its own separate neutral GitHub organization. This will make it transferable to the CNCF's GitHub Enterprise account. If it's already in a GHE account, you will need to remove it from that first.
• [x] Accept the invite to join the CNCF GitHub Enterprise account. We'll then add thelinuxfoundation as an organization owner to ensure neutral hosting of your project.
• [x] Migrate your Slack channels (if any) to the Kubernetes or CNCF Slack workspace. CNCF staff can help.
• [x] Submit a pull request to add your project as a Sandbox project to the Cloud Native Landscape by updating landscape.yml following these instructions.
• [x] Transfer your domain to the CNCF. The "LF Stakeholder email" is projects@cncf.io.
• [x] Transfer any trademark and logo assets to the Linux Foundation.
• [x] Submit a pull request with your artwork.
• [x] Transfer website analytics to projects@cncf.io. CNCF staff can help.

Update and document

• [x] Ensure that DCO (preferred) or CLA are enabled for all GitHub repositories of the project.
• [x] Ensure that that the CNCF Code of Conduct (or your adopted version of it) are explicitly referenced at the project's README on GitHub.
• [x] Ensure LF footer is on your website and guidelines are followed (if your project doesn't have a dedicated website, please adopt those guidelines for the README file).
• [x] Create a maintainer list and add it to the aggregated CNCF maintainer list via pull request.
• [x] Provide emails for the maintainers to get access to the maintainers mailing list and Service Desk. Email them to project-onboarding@cncf.io.
• [x] Start working on written, open governance.
• [x] Start on an OpenSSF Best Practices Badge.

CNCF staff tasks

• [x] Add the project to DevStats.
• [x] Add the project to CLOmonitor.
• [x] Add the project to LFX Insights. This is done by adding a read-only app to your GitHub organization once it's in CNCF GHE.
• [x] Add the project to LFX Project Control Center.
• [x] Add a license scanning tool, like FOSSA or Snyk.
• [x] Invite developers to the #maintainers-circle Slack channel.
• [x] Send a welcome email to confirm maintainer list access.

[lukaszgryglicki]

DevStats instance ready.

[lukaszgryglicki]

Project added do Project Health and All Projects Health.

[qu1queee]

Hello all! I'm following on this issue on behalf of the Shipwright Community and I would provide a status update on where we are, in the following days.

[adambkaplan]

Regarding Slack - we have a pre-existing channel on Kubernetes slack - #shipwright

[cynthia-sg]

Project has been added to CLOMonitor

[qu1queee]

Hi folks, I'm providing you here an update on where we are, and what is currently missing. If we need help, we will add a new comment to this issue. We are tracking daily our updates in https://github.com/shipwright-io/community/issues/240 .

Review and understand

• [x] The project proposal process and requirements.
• [x] The services available for your project at the CNCF.
• [x] The CNCF IP Policy.
• [x] The trademark guidelines.
• [x] The license allowlist.
• [x] The online program guidelines.
• [x] Optional: Book time with CNCF staff for any onboarding questions.

Contribute and transfer

• [x] Move your project to its own separate neutral GitHub organization. This will make it transferable to the CNCF's GitHub Enterprise account. If it's already in a GHE account, you will need to remove it from that first.
• [x] Accept the invite to join the CNCF GitHub Enterprise account. We'll then add thelinuxfoundation as an organization owner to ensure neutral hosting of your project.
• [x] Migrate your Slack channels (if any) to the Kubernetes or CNCF Slack workspace. CNCF staff can help.
• [x] Submit a pull request to add your project as a Sandbox project to the Cloud Native Landscape by updating landscape.yml following these instructions. https://github.com/cncf/landscape/pull/4035
• [x] Transfer your domain to the CNCF. The "LF Stakeholder email" is projects@cncf.io.
• [ ] Transfer any trademark and logo assets to the Linux Foundation.
• [x] Submit a pull request with your artwork. https://github.com/cncf/artwork/pull/507
• [ ] Transfer website analytics to projects@cncf.io. CNCF staff can help.

Update and document

• [x] Ensure that DCO (preferred) or CLA are enabled for all GitHub repositories of the project. DCO was enabled and an email sent to the developer mailing list.
• [x] Ensure that that the CNCF Code of Conduct (or your adopted version of it) are explicitly referenced at the project's README on GitHub. https://github.com/shipwright-io/.github/pull/5
• [x] Ensure LF footer is on your website and guidelines are followed (if your project doesn't have a dedicated website, please adopt those guidelines for the README file). https://github.com/shipwright-io/website/pull/131
• [x] Create a maintainer list and add it to the aggregated CNCF maintainer list via pull request. https://github.com/shipwright-io/community/pull/242 and https://github.com/cncf/foundation/pull/860
• [x] Provide emails for the maintainers to get access to the maintainers mailing list and Service Desk. Email them to project-onboarding@cncf.io. Email sent.
• [x] Start working on written, open governance. https://github.com/shipwright-io/community/issues/243
• [x] Start on an OpenSSF Best Practices Badge. See https://www.bestpractices.dev/en/projects/5315

[adambkaplan]

[ ] Transfer your domain to the CNCF. The "LF Stakeholder email" is projects@cncf.io.

Domain registration (shipwright.io) was previously transferred to the Linux Foundation when the project was donated to the CDF. I'm not sure if anything needs to be done to mark this item "done" (maybe some record keeping on the CNCF/LF side of things?)

[krook]

[ ] Transfer your domain to the CNCF. The "LF Stakeholder email" is projects@cncf.io.

Domain registration (shipwright.io) was previously transferred to the Linux Foundation when the project was donated to the CDF. I'm not sure if anything needs to be done to mark this item "done" (maybe some record keeping on the CNCF/LF side of things?)

I just marked this as complete. I see the LF is the registrant for it.

[qu1queee]

Hello all,

We are almost completed with the on-boarding items, see our previous comment. There are only two open items on our side:

[ ] Transfer any trademark and logo assets to the Linux Foundation.

We are wondering if there is something to do here, as we are coming from the Continuous Delivery Foundation.

[ ] Transfer website analytics to projects@cncf.io. CNCF staff can help.

We kindly ask for your help on this one.

[krook]

@RobertKielty can you please assist with FOSSA and/or Synk?

[RobertKielty]

Hi @qu1queee @SaschaSchwarze0 @adambkaplan

Can you please let me know what preference you have for license scanning services? I can setup you up on CNCF Service Instances for FOSSA or Snyk.

[qu1queee]

@RobertKielty we seem not to have one, could you give us a recommendation?

[adambkaplan]

@RobertKielty I'm personally more familiar with Snyk.

[RobertKielty]

@qu1queee @SachaSchwarze I have added you to the Shipwright FOSSA Team.

@adambkaplan I have re-sent the FOSSA Invite. If you want to look at FOSSA to actively comply with the CNCF 3rd Party License policy, please import your code repos into FOSSA using the FOSSA Shipwright Team.

@adambkaplan I have also sent out invites for Snyk to you, @qu1queee and @SachaSchwarze. On Snyk, the invites are tied to the Snyk Shipwright Organziaion I have just created.

Feel free to try both services and let me know which one settle on.

[RobertKielty]

@qu1queee has sucessfully joined the Shipwright Organization within the CNCF Group on Snyk.

[krook]

Hello folks! Looks like this is nearly ready to be closed

Project team (@adambkaplan @qu1queee) , can you please confirm you've read this piece of text:

• [ ] The Technical Leadership Principles that outlines the expected behavior for any maintainer in a leadership role.

And @Cmierly can you please confirm this email has been sent:

• [ ] Send a welcome email to confirm maintainer list access.

[qu1queee]

@krook yes, confirmed.

[Cmierly]

Thanks @qu1queee and congrats on completing onboarding!