jfrog / kubenab

Kubernetes Admission Webhook to enforce pulling of Docker images from the private registry.
Apache License 2.0
46 stars 12 forks source link

[DISCUSSION] Roadmap to version 1.0.0 #36

Open l0nax opened 5 years ago

l0nax commented 5 years ago

Since I can not create a Milestone this Issue is a Request to create such a Milestone.

This Project uses Semantic Versioning and the "declaration" of Version 1.0.0 is that the Project is production ready. All Versions below 1.0.0 is "tagged" as breaking-changes may occur.

Here are some breaking Changes which I want to make to get this Project (really?) production-ready:

So @rimusz is this a good goal for Version 1.0.0?

rimusz commented 5 years ago

@l0nax first thanks a lot for all your contributions to the project, we really appreciate it.

l0nax commented 5 years ago

@rimusz Updated

Can you explain me what the Xray Feature is? As I understood it's a advanced Feature of the JFrog Artifactory.

rimusz commented 5 years ago

JFrog Xray scans artefacts in Artifactory, by Xray feature I mean to implement https://github.com/jfrog/kubexray into Kubenab. e.g. Kubenab checks image against Xray and if the image has security issues Kubenab will fail the image usage.

l0nax commented 5 years ago

Ah ok. Is the Xray API documentation public available?

rimusz commented 5 years ago

yup https://www.jfrog.com/confluence/display/XRAY/Xray+REST+API but you could take a look to https://github.com/jfrog/kubexray it has all that implemented already :) https://github.com/jfrog/kubexray/blob/master/cmd/kubexray/handler.go#L593 @DarthFennec could help you there

l0nax commented 5 years ago

Okay thanks

Could you create a Milestone and a develop branch? So we can keep track and other Users will have the stable Version of kubenab after cloning.

rimusz commented 5 years ago

I have created the milestone and dev-1.0.0 branch

l0nax commented 5 years ago

Thanks :)

lhotrifork commented 4 years ago

Hi, Is anybody working on this? There doesn't seem to be any activity on dev-1.0.0 branch I'd love to help out in any way I can (also because I have some features that I would like to see :) ).

l0nax commented 4 years ago

Hey @lhotrifork currently this project – especially release v1 – has a very high priority on our internal (and personal) Task list.

So if you have any ideas/ features please post it here so we can discuss about it :D

l0nax commented 4 years ago

@rimusz could you please give me the privileges to push to the dev-1.0.0 branch? This would help me in my development cycle. But if it isn't possible it's not a big deal ^^

l0nax commented 4 years ago

And whats about the CI/CD? Which CI/CD service do you use? Is it possible that we can use Travis CI - since it's the defacto standard in OpenSource projects, also because everyone can check out the build logs, process, ...

rimusz commented 4 years ago

@l0nax github does not support privileges per branch :( We used TravisCI before but as JFrog acquired Shippable we have to use our products for CI/CD. Let me double check that again.

l0nax commented 4 years ago

@l0nax github does not support privileges per branch :(

Ok :(

Let me double check that again.

Ok, thanks :)

l0nax commented 4 years ago

@rimusz Can the helm chart be split into a separate repository? Or ie. (later) into the JFrog Charts.

rimusz commented 4 years ago

@l0nax yes, the chart will be moved to JFrog charts github repo

l0nax commented 4 years ago

Started working on those features on dev-1.0.0 branch.

l0nax commented 4 years ago

@rimusz Any updates about the Travis CI?

rimusz commented 4 years ago

@l0nax I have no update on Travis Ci yet

rimusz commented 4 years ago

@l0nax CircleCi will be used https://github.com/jfrog/kubenab/issues/42

l0nax commented 4 years ago

Top, thanks @rimusz :)

l0nax commented 4 years ago

I have now some "free" time so I will start integrating all those features – and update the chart, etc...

l0nax commented 4 years ago

Should the things we discussed separated in different Issues (and linked here) to discuss about them and create PR's which are related to them? But keep the "global" discussion about v1 in this Issue.

rimusz commented 4 years ago

Should the things we discussed separated in different Issues (and linked here) to discuss about them and create PR's which are related to them? But keep the "global" discussion about v1 in this Issue.

yes :)

rimusz commented 4 years ago

I have now some "free" time so I will start integrating all those features – and update the chart, etc...

I will take care of CircleCI integration

cprivitere commented 3 years ago

Just wondering if a path to 1.0.0 is still planned? Or did everyone jump ship to tugger or something?