[SANDBOX PROJECT ONBOARDING] PipeCD

[amye]

Welcome to CNCF Project Onboarding! This is an issue created to help onboard your project into the CNCF after the TOC has voted to accept your project. We would like to complete onboarding within one month of acceptance.

From the project side, please ensure that you:

• [x] Understand the project proposal process and reqs: https://github.com/cncf/toc/blob/main/process/project_proposals.md#introduction
• [x] Understand the services available for your project at CNCF https://www.cncf.io/services-for-projects/
• [x] Ensure your project meets the CNCF IP Policy: https://github.com/cncf/foundation/blob/master/charter.md#11-ip-policy
• [x] Review the online programs guidelines: https://github.com/cncf/foundation/blob/master/online-programs-guidelines.md
• [x] Understand the trademark guidelines: https://www.linuxfoundation.org/en/trademark-usage/
• [x] Understand the license allowlist: https://github.com/cncf/foundation/blob/master/allowed-third-party-license-policy.md#approved-licenses-for-allowlist
• [x] Is your project working on written, open governance? see https://contribute.cncf.io/maintainers/governance/
• [x] Slack: Are your slack channels migrated to the Kubernetes or CNCF Slack? (see https://slack.com/help/articles/217872578-Import-data-from-one-Slack-workspace-to-another for more details)
• [x] Is your project in its own separate neutral github organization?
• [x] Submitted a Pull request to add your project as a sandbox project to https://landscape.cncf.io
• [x] Create maintainer list + add to aggregated https://maintainers.cncf.io list by submitting a PR to it
• [x] Artwork: Submit a pull request to https://github.com/cncf/artwork with your artwork
• [x] Domain: transfer domain to the CNCF - https://jira.linuxfoundation.org/plugins/servlet/theme/portal/2/create/63

Things that CNCF will need from the project:

• [x] Provide emails for the maintainers added to https://maintainers.cncf.io in order to get access to the maintainers mailing list and ServiceDesk - project-onboarding@cncf.io is the best email to send those to
• [ ] Trademarks: transfer any trademark and logo mark assets over to the LF - https://github.com/cncf/foundation/tree/master/agreements has agreements
• [x] GitHub: ensure 'thelinuxfoundation' and 'caniszczyk' are added as initial org owners, this helps us make sure we have continuity of GH ownership that we will onboard to our GitHub Enterprise instance: https://github.com/enterprises/cncf
• [x] GitHub: ensure DCO or CLA are enabled for all GitHub repositories of the project
• [x] GitHub: ensure that that the CNCF Code of Conduct (or your adopted version of it) are explicitly referenced at the project's README on GitHub
• [x] Website: ensure LF footer is there and website guidelines followed (if your project doesn't have a dedicated website, please adopt those guidelines to the README file of your project on GitHub).
• [x] Website: Analytics transferred to projects@cncf.io
• [ ] OpenSSF Best Practices Badge: Start on an OpenSSF Best Practices Badge https://bestpractices.coreinfrastructure.org/en

Things that the CNCF will do or help the project to do:

• [x] Devstats: add to devstats https://devstats.cncf.io/
• [x] Insights: add to LFX Insights https://insights.v3.lfx.linuxfoundation.org/
• [ ] Marketing: update relevant intro + slide decks
• [ ] Events: update CFP + Registration + CFP Area forms
• [ ] ServiceDesk: confirm maintainers have read https://www.cncf.io/services-for-projects/
• [x] CNCF Welcome Email Sent to confirm maintainer list access
• [ ] Book time with the team with http://project-meetings.cncf.io
• [ ] Create space for meetings/events on https://community.cncf.io, e.g., https://community.cncf.io/pravega-community/ - (https://github.com/cncf/communitygroups/blob/main/README.md#cncf-projects)
• [x] Adopt a license scanning tool, like FOSSA or Snyk

[lukaszgryglicki]

DevStats page added. Will also be added to All CNCF around Monday next week.

[lukaszgryglicki]

Also added to All CNCF, table.

[khanhtc1202]

'thelinuxfoundation' and 'caniszczyk' are invited/added, ptal when you have time

[khanhtc1202]

PR opened https://github.com/cncf/foundation/pull/570, ptal when you guys have time 😄

[amye]

Checking in on this one:

• Submitted a Pull request to add your project as a sandbox project to https://landscape.cncf.io/

This both puts your project on the landscape and the CNCF projects page, so it's pretty important!

[khanhtc1202]

Checking in on this one:

• Submitted a Pull request to add your project as a sandbox project to https://landscape.cncf.io/

This both puts your project on the landscape and the CNCF projects page, so it's pretty important!

@amye I created PR to landscape repo, and it's merged already 👍 https://github.com/cncf/landscape/pull/3201

[khanhtc1202]

Also, this is the current status of onboarding tasks (ref: https://github.com/pipe-cd/pipecd/issues/4341)

Tasks

From the project side, please ensure that you:

• [x] Understand the project proposal process and reqs: https://github.com/cncf/toc/blob/main/process/project_proposals.md#introduction
• [x] Understand the services available for your project at CNCF https://www.cncf.io/services-for-projects/
• [x] Ensure your project meets the CNCF IP Policy: https://github.com/cncf/foundation/blob/master/charter.md#11-ip-policy
• [x] Review the online programs guidelines: https://github.com/cncf/foundation/blob/master/online-programs-guidelines.md
• [x] Understand the trademark guidelines: https://www.linuxfoundation.org/en/trademark-usage/
• [x] Understand the license allowlist: https://github.com/cncf/foundation/blob/master/allowed-third-party-license-policy.md#approved-licenses-for-allowlist
• [x] Is your project working on written, open governance? see https://contribute.cncf.io/maintainers/governance/
• [x] Slack: Are your slack channels migrated to the Kubernetes or CNCF Slack? (see https://slack.com/help/articles/217872578-Import-data-from-one-Slack-workspace-to-another for more details)
• [x] Is your project in its own separate neutral github organization?
• [x] Submitted a Pull request to add your project as a sandbox project to https://landscape.cncf.io/
• [x] Create maintainer list + add to aggregated https://maintainers.cncf.io/ list by submitting a PR to it
• [x] Artwork: Submit a pull request to https://github.com/cncf/artwork with your artwork
• [x] Domain: transfer domain to the CNCF - https://jira.linuxfoundation.org/plugins/servlet/theme/portal/2/create/63

Things that CNCF will need from the project:

• [x] Provide emails for the maintainers added to https://maintainers.cncf.io/ in order to get access to the maintainers mailing list and ServiceDesk - project-onboarding@cncf.io is the best email to send those to
• [ ] Trademarks: transfer any trademark and logo mark assets over to the LF - https://github.com/cncf/foundation/tree/master/agreements has agreements
• [x] GitHub: ensure 'thelinuxfoundation' and 'caniszczyk' are added as initial org owners, this helps us make sure we have continuity of GH ownership that we will onboard to our GitHub Enterprise instance: https://github.com/enterprises/cncf
• [x] GitHub: ensure DCO or CLA are enabled for all GitHub repositories of the project
• [x] GitHub: ensure that that the CNCF Code of Conduct (or your adopted version of it) are explicitly referenced at the project's README on GitHub
• [x] Website: ensure LF footer is there and website guidelines followed (if your project doesn't have a dedicated website, please adopt those guidelines to the README file of your project on GitHub).
• [ ] Website: Analytics transferred to projects@cncf.io
• [ ] OpenSSF Best Practices Badge: Start on an OpenSSF Best Practices Badge https://bestpractices.coreinfrastructure.org/en

Please confirm and update the issue description when you have time 🙏

[amye]

Updated! Anything else we can help with?

[khanhtc1202]

Hi @amye there are several things left 🙏

Provide emails for the maintainers added to https://maintainers.cncf.io/ in order to get access to the maintainers mailing list and ServiceDesk - project-onboarding@cncf.io is the best email to send those to

~We have received an invitation to ServiceDesk, but how can we know we get access to the maintainers mailing list?~

We accessed the Cncf-PipeCD-Maintainers successfully so this is done, right?

Trademarks: transfer any trademark and logo mark assets over to the LF - https://github.com/cncf/foundation/tree/master/agreements has agreements

Do we have anything to do with this? Like sign to the PDF and resubmit somewhere?

Website: Analytics transferred to projects@cncf.io

This requires adding projects@cncf.io mail as the analytics admin, isn't it?

Also please check and merge https://github.com/cncf/artwork/pull/411 when you have time 🙏

[amye]

Trademarks: Do we have anything to do with this? Like sign to the PDF and resubmit somewhere? Yes, send a signed copy of either the registered trademarks or non registered to project-onboarding@cncf.io and we'll get these turned around. Yes on the website analytics, inviting projects@cncf.io as the owner is the right way forward.

[Cmierly]

Hi @khanhtc1202 ! My name is Crystal and I am the new project coordinator in charge of onboarding sandbox projects!

Following up on Amye's previous post, were you able to submit a signed copy of the trademark agreement? I can help answer any questions you might have regarding the process if not!

[ffjlabo]

Hi @amye ! My name is Yoshiki Fujikane! I've been a maintainer for PipeCD since a month ago. https://github.com/cncf/foundation/pull/652

I would like to use cncf service desk. How can I get to access it?

[Cmierly]

Hi @ffjlabo ! In order to gain service desk access, you will need to email cncf-maintainer-changes@cncf.io with your request. This goes for any other maintainers in this project who have yet to be added to the PipeCD mailing list and service desk. Once we get the email we will get you added ASAP!

[krook]

Added to LFX Insights

• Insights documentation
• Insights support
• Insights feedback

[RobertKielty]

I have sent out invites to FOSSA and Snyk to all maintainers.

@khanhtc1202 @kentakozuka @stormcat24 @nghialv @t-kikuc @ffjlabo

If you want to try FOSSA please let me know when you have accepted the invite.

I will need to manually add one of you to the team I have created there for pipe-cd.

Then once that is done you can import your code repo for license scanning in FOSSA.

For Snyk you can just go ahead and import your code repo(s).

[RobertKielty]

Hi @khanhtc1202 @kentakozuka @stormcat24 @nghialv @t-kikuc @ffjlabo

Can one of you DM me on Slack? We can work through any issues that are present for the project on starting License Scanning.

[khanhtc1202]

Hi @RobertKielty, Thanks for mentioning 🙏 I just accepted the invitation and read around both. For the Snyk, I imported some repos from pipe-cd org and tried it now. For FOSSA, I will DM via slack. Thanks a lot for the support 😄

[RobertKielty]

Great stuff!

I did a read-only scan of the project and there was only one license flagged with a warning. We can get advice from the CNCF Projects team as whole to figure out what we need to do on that.

For now though, importing the code repo is all that is required to mark this task complete.

[RobertKielty]

Great stuff!

I did a read-only scan of the project and there was only one license flagged with a warning. We can get advice from the CNCF Projects team as whole to figure out what we need to do on that.

For now though, importing the code repo is all that is required to mark this task complete.

UPDATE:

Scanned on Snyk and the team is also set up on FOSSA to explore its functionality later.

Thank you again @khanhtc1202 !

[khanhtc1202]

@RobertKielty Thank you for the detailed guideline 🙏