search

kubernetes-retired / funding

Funding requests for project infrastructure, events, and consulting.
Apache License 2.0
16 stars 13 forks source link

CNCF MacOS Developer Account for Signing Release Binaries #30

Closed klaases closed 1 year ago

klaases commented 2 years ago

Organization or Repo

kubernetes/minikube

User affected

MacOS users

Describe the issue

Hi, the minikube team would like to sign release binaries for MacOS.

Could CNCF please supply us with an Apple developer account, or perhaps cover the annual fees?

Apple provides a few waiver for non-profits. However, minikube operates within CNCF and does not have its own non-profit entity.

ameukam commented 2 years ago

/transfer-issue funding

dims commented 2 years ago

+1

dims commented 2 years ago

cc @justaugustus

justaugustus commented 2 years ago

/assign

klaases commented 2 years ago

When users try to run minikube, and the coming minikube GUI, they are discouraged from continuing due to lack of security.

Specifically, Apple mentions that they cannot confirm whether minikube contains malware. By signing, we hope to provide a more secure user experience on Mac OS!

minikube-security

tpepper commented 2 years ago

+1

parispittman commented 2 years ago

+1

k8s-triage-robot commented 2 years ago

The Kubernetes project currently lacks enough contributors to adequately respond to all issues and PRs.

This bot triages issues and PRs according to the following rules:

You can:

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

klaases commented 2 years ago

Hi @justaugustus, have their been any updates with regards to being able to sign the minikube release binaries?

k8s-triage-robot commented 2 years ago

The Kubernetes project currently lacks enough active contributors to adequately respond to all issues and PRs.

This bot triages issues and PRs according to the following rules:

You can:

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle rotten

klaases commented 2 years ago

Hi, please remove the "lifecycle/rotten" label as we are still looking to sign the minikube binaries.

@justaugustus is there anything we can do to help speed up the process?

ncdc commented 2 years ago

/remove-lifecycle rotten

klaases commented 2 years ago

Friendly follow-up, would the minikube project be able to obtain funding or access to an Apple developer account for the purposes of signing the minikube release binary?

Here are the last two releases that we would like to be able to sign for the security of our users:

k8s-triage-robot commented 1 year ago

The Kubernetes project currently lacks enough contributors to adequately respond to all issues and PRs.

This bot triages issues and PRs according to the following rules:

You can:

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

palnabarun commented 1 year ago

/remove-lifecycle stale

k8s-triage-robot commented 1 year ago

The Kubernetes project currently lacks enough contributors to adequately respond to all issues.

This bot triages un-triaged issues according to the following rules:

You can:

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

k8s-triage-robot commented 1 year ago

The Kubernetes project currently lacks enough active contributors to adequately respond to all issues.

This bot triages un-triaged issues according to the following rules:

You can:

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle rotten

k8s-triage-robot commented 1 year ago

The Kubernetes project currently lacks enough active contributors to adequately respond to all issues and PRs.

This bot triages issues according to the following rules:

You can:

Please send feedback to sig-contributor-experience at kubernetes/community.

/close not-planned

k8s-ci-robot commented 1 year ago

@k8s-triage-robot: Closing this issue, marking it as "Not Planned".

In response to [this](https://github.com/kubernetes/funding/issues/30#issuecomment-1571348203): >The Kubernetes project currently lacks enough active contributors to adequately respond to all issues and PRs. > >This bot triages issues according to the following rules: >- After 90d of inactivity, `lifecycle/stale` is applied >- After 30d of inactivity since `lifecycle/stale` was applied, `lifecycle/rotten` is applied >- After 30d of inactivity since `lifecycle/rotten` was applied, the issue is closed > >You can: >- Reopen this issue with `/reopen` >- Mark this issue as fresh with `/remove-lifecycle rotten` >- Offer to help out with [Issue Triage][1] > >Please send feedback to sig-contributor-experience at [kubernetes/community](https://github.com/kubernetes/community). > >/close not-planned > >[1]: https://www.kubernetes.dev/docs/guide/issue-triage/ Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes/test-infra](https://github.com/kubernetes/test-infra/issues/new?title=Prow%20issue:) repository.