[SANDBOX PROJECT ONBOARDING] ORAS (OCI Registry as Storage)

[amye]

Welcome to CNCF Project Onboarding!
This is an issue created to help onboard your project into the CNCF after the TOC has voted to accept your project.
We would like to complete onboarding within one month of acceptance.

From the project side, please ensure that you:

• Understand the project proposal process and reqs: https://github.com/cncf/toc/blob/main/process/project_proposals.adoc#introduction
• Understand the services available for your project at CNCF https://www.cncf.io/services-for-projects/
• Ensure your project meets the CNCF IP Policy: https://github.com/cncf/foundation/blob/master/charter.md#11-ip-policy
• Review the online programs guidelines: https://github.com/cncf/foundation/blob/master/online-programs-guidelines.md
• Understand the trademark guidelines: https://www.linuxfoundation.org/en/trademark-usage/
• Has your project adopted open governance already? see http://opengovernance.dev
• Slack: Are your slack channels migrated to the Kubernetes or CNCF Slack?
• Is your project in its own separate neutral github organization?
• Submitted a Pull request to add your project as a sandbox project to https://landscape.cncf.io

Things that CNCF will need from the project:

• Owners file: Please add a link to your owners file to this issue, this is used to be able to create your maintainers mailing list.
• Create maintainer list + added to aggregated https://maintainers.cncf.io list
• Domain: transfer domain to the CNCF - please send a transfer code to project-onboarding@cncf.io
• Trademarks: transfer any trademark and logo mark assets over to the LF - https://github.com/cncf/foundation/tree/master/agreements has agreements
• GitHub: ensure 'thelinuxfoundation' and 'caniszczyk' are added as initial org owners, this helps us make sure we have continuity of GH ownership
• GitHub: ensure DCO or CLA are enabled for all GitHub repositories of the project
• Artwork: Ensure logos present on https://github.com/cncf/artwork
• Website: ensure LF footer is there and website guidelines followed
• Website: Analytics transferred to amye@linuxfoundation.org
• Adopt a license scanning tool, like FOSSA or Snyk
• CII: Start on a CII best practices badge https://bestpractices.coreinfrastructure.org/en

Things that the CNCF will do or help the project to do:

• Devstats: add to devstats https://devstats.cncf.io/
• Marketing: update relevant intro + slide decks
• Events: update CFP + Registration + CFP Area forms
• ServiceDesk: confirm maintainers have read https://www.cncf.io/services-for-projects/
• CNCF Welcome Email Sent to confirm maintainer list access, welcome email has monthly project sync details
• Create space for meetings/events on community.cncf.io, e.g., https://community.cncf.io/pravega-community/

[amye]

@SteveLasker: Which is the most appropriate owners file: https://github.com/oras-project/oras/blob/main/OWNERS ?

[SteveLasker]

• Owners File: https://github.com/oras-project/oras/blob/main/OWNERS
• "Is your project in its own separate neutral github organization?": Yes: https://github.com/oras-project/
• Slack: CNCF #ORAS
• Logo is at: https://raw.githubusercontent.com/oras-project/oras-www/main/docs/assets/images/oras.png

[bridgetkromhout]

GitHub: ensure 'thelinuxfoundation' and 'caniszczyk' are added as initial org owners, this helps us make sure we have continuity of GH ownership

Invitations sent.

[amye]

GitHub: ensure 'thelinuxfoundation' and 'caniszczyk' are added as initial org owners, this helps us make sure we have continuity of GH ownership

Invitations sent.

Odd thing, our systems are telling us that they're not complete? Try full organization invites instead.

[lukaszgryglicki]

Devstats instance created.

[SteveLasker]

Odd thing, our systems are telling us that they're not complete? Try full organization invites instead.

@amye, cra was in the full org, but thelinuxfoundation wasn't. Can you check again?

[amye]

Odd thing, our systems are telling us that they're not complete? Try full organization invites instead.

@amye, cra was in the full org, but thelinuxfoundation wasn't. Can you check again?

It's still showing 'none', so try it again for thelinuxfoundation. We'll get it!

Is there artwork? re: Artwork: Ensure logos present on https://github.com/cncf/artwork

[bridgetkromhout]

ORAS CNCF Project Onboarding Checklist Updates

1. Maintainers have done these, so they can be marked as done:

• Has your project adopted open governance already? see http://opengovernance.dev (yes: https://github.com/oras-project/community/blob/main/governance/GOVERNANCE.md)
• Submitted a Pull request to add your project as a sandbox project to https://landscape.cncf.io
• GitHub: ensure DCO or CLA are enabled for all GitHub repositories of the project
• Website: ensure LF footer is there and website guidelines followed

2. CNCF to do:

• ServiceDesk: confirm maintainers have read https://www.cncf.io/services-for-projects/
• CNCF Welcome Email Sent to confirm maintainer list access, welcome email has monthly project sync details
• Create space for meetings/events on community.cncf.io, e.g., https://community.cncf.io/pravega-community/
• GitHub: ensure 'thelinuxfoundation' and 'caniszczyk' are added as initial org owners, this helps us make sure we have continuity of GH ownership (Invite re-sent - thelinuxfoundation needs to accept)

3. Maintainers to do:

• Ensure your project meets the CNCF IP Policy: https://github.com/cncf/foundation/blob/master/charter.md#11-ip-policy
• Domain: transfer domain to the CNCF - please send a transfer code to project-onboarding@cncf.io
• Trademarks: transfer any trademark and logo mark assets over to the LF - https://github.com/cncf/foundation/tree/master/agreements has agreements
• Website: Analytics transferred to amye@linuxfoundation.org
• Adopt a license scanning tool, like FOSSA or Snyk
• CII: Start on a CII best practices badge https://bestpractices.coreinfrastructure.org/en

[bridgetkromhout]

It's still showing 'none', so try it again for thelinuxfoundation. We'll get it!

@amye I tried sending this invite again:

"You've invited The Linux Foundation to OCI Registry As Storage (ORAS)! They'll be receiving an email shortly. They can also visit https://github.com/oras-project to accept the invitation."

[amye]

Got it! I'll poke the team to accept that invite.
(1) artwork is the next big thing, does that exist?

[bridgetkromhout]

artwork is the next big thing, does that exist?

Thanks, @amye - I see a note in cncf/artwork#291 (comment) asking for other styles of artwork. What I submitted is the only art that exists. Can CNCF provide art? I opened an issue for the project maintainers to weigh in on what they want: oras-project/oras-www#15

[amye]

@bridgetkromhout: that's for DevStats, I'll work with that team on getting that resolved.

[amye]

@bridgetkromhout: Checking back in here, let me know if there's anything else I can help you complete.

[bridgetkromhout]

@amye I have re-invited the LF account - can you look into what's preventing them from accepting?

[jdolitsky]

Here is all the background on the original logo: oras-project/oras#82 (comment)

The oras.land domain was purchased by me, and I transferred this into LF about a month ago.

I do not claim any IP on the logo or domain, and it is my understanding that LF is now in ownership.

Website and analytics are currently hosted in a Netlify account, which @bridgetkromhout should have full access to.

There is no license scanning enabled to my knowledge.

Let me know if anything else I can help with on this.

[amye]

We still need the 'non registered trademark' agreement for this. :)

[bridgetkromhout]

The oras.land domain was purchased by me, and I transferred this into LF about a month ago.

@amye can you verify if the domain transfer is complete?

[bridgetkromhout]

Website and analytics are currently hosted in a Netlify account, which @bridgetkromhout should have full access to.

@jdolitsky I do not see oras.land when I log into netlify. see below - I now have access to the Helm org which currently holds the oras.land netlify setup.

[bridgetkromhout]

We still need the 'non registered trademark' agreement for this. :)

@amye looks like https://github.com/cncf/foundation/blob/master/agreements/CNCF%20Trademark%20and%20Account%20Assignment%20Agreement%20(2020%20-%20no%20reg%20trademarks).pdf is the correct form? (it says 2020 but there is no 2021 edition).

Questions remaining: who exactly signs this? and after they successful edit the PDF, where do they send it? Thanks.

[bridgetkromhout]

@amye @caniszczyk Do you want the oras.land site in netlify moved from the Helm netlify org into the CNCF Projects org? It appears I may be able to use the "Transfer site" option, or Chris could likely do it. I believe @jdolitsky originally put it in with Helm for expedience, but of course ORAS is now a stand-alone sandbox project.

[caniszczyk]

I transferred it over the CNCF projects site

…

On Wed, Oct 20, 2021 at 11:42 AM Bridget Kromhout ***@***.***> wrote: @amye <https://github.com/amye> @caniszczyk <https://github.com/caniszczyk> Do you want the oras.land site in netlify moved from the Helm netlify org into the CNCF Projects org? It appears I may be able to use the "Transfer site" option, or Chris could likely do it. I believe @jdolitsky <https://github.com/jdolitsky> originally put it in with Helm for expedience, but of course ORAS is now a stand-alone sandbox project. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#231>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAAPSIKWL5LO465FVJPBETDUH3WOFANCNFSM5AJTWUKA> . Triage notifications on the go with GitHub Mobile for iOS <https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android <https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>.

-- Cheers, Chris Aniszczyk https://aniszczyk.org

[bridgetkromhout]

Website: Analytics transferred to amye@linuxfoundation.org

@amye does the move of oras.land into the CNCF Projects Netlify account give you what you need for this item? or is there some other thing required to give you the right access?

[amye]

We still need the 'non registered trademark' agreement for this. :)

@amye looks like https://github.com/cncf/foundation/blob/master/agreements/CNCF%20Trademark%20and%20Account%20Assignment%20Agreement%20(2020%20-%20no%20reg%20trademarks).pdf is the correct form? (it says 2020 but there is no 2021 edition).

Questions remaining: who exactly signs this? and after they successful edit the PDF, where do they send it? Thanks.

If it's a Microsoft project, we can have your legal team sign it. We've also done agreements in the past where the project contributors sign this, it's kindof up to the project to determine prior owners.
You can send a signed PDF to me and I will return a fully executed copy.

[amye]

The oras.land domain was purchased by me, and I transferred this into LF about a month ago.

@amye can you verify if the domain transfer is complete?

We are complete on domain!

[amye]

Last thing: Create space for meetings/events on community.cncf.io, e.g., https://community.cncf.io/pravega-community/ < -- this is up to the project if you want this or not.

[bridgetkromhout]

Last thing: Create space for meetings/events on community.cncf.io, e.g., https://community.cncf.io/pravega-community/ < -- this is up to the project if you want this or not.

@amye Yes, we do want this. Can you start with @SteveLasker listed as the authorized party?

[amye]

Last thing: Create space for meetings/events on community.cncf.io, e.g., https://community.cncf.io/pravega-community/ < -- this is up to the project if you want this or not.

@amye Yes, we do want this. Can you start with @SteveLasker listed as the authorized party?

https://community.cncf.io/oras-community/ is now live!

[sajayantony]

I just wanted to thank @bridgetkromhout @amye and @SteveLasker. +1

[amye]

I just wanted to thank @bridgetkromhout @amye and @SteveLasker. +1

Happy to help! We're so close here!

[bridgetkromhout]

@amye now that the trademark paperwork is signed, this one can be checked off:

Ensure your project meets the CNCF IP Policy: https://github.com/cncf/foundation/blob/master/charter.md#11-ip-policy

[amye]

@bridgetkromhout: Checking in again, we'd like to get all project onboarding closed out by December 15th. Thanks!

[SteveLasker]

ack

[bridgetkromhout]

@bridgetkromhout: Checking in again, we'd like to get all project onboarding closed out by December 15th. Thanks!

@amye Thanks! Will aim for finishing before that.

[bridgetkromhout]

Due to vacation schedules, we'll resume work on this in January.

[amye]

Due to vacation schedules, we'll resume work on this in January.

Confirmed!

[amye]

Picking this back up, not sure if these will be relevant!

• Adopt a license scanning tool, like FOSSA or Snyk
• CII: Start on a CII best practices badge https://bestpractices.coreinfrastructure.org/en

[bridgetkromhout]

Thanks, @amye! @SteveLasker has started the CII best practices badge: https://bestpractices.coreinfrastructure.org/en/projects?q=oras

[amye]

Checking back in here!

[bridgetkromhout]

Checking back in here!

Hi, @amye! We're so close to done! I filed CNCFSD-1197 based on the request in oras-project/oras#334 (comment).

[bridgetkromhout]

Hi, @amye! My FOSSA helpdesk issue has been resolved - is there any work left to do? Are we finished onboarding ORAS? Thanks!

[amye]

We are complete here!