[SANDBOX PROJECT ONBOARDING] OpenFeature

[amye]

Welcome to CNCF Project Onboarding!
This is an issue created to help onboard your project into the CNCF after the TOC has voted to accept your project.
We would like to complete onboarding within one month of acceptance.

From the project side, please ensure that you:

• Understand the project proposal process and reqs: https://github.com/cncf/toc/blob/main/process/project_proposals.md#introduction
• Understand the services available for your project at CNCF https://www.cncf.io/services-for-projects/
• Ensure your project meets the CNCF IP Policy: https://github.com/cncf/foundation/blob/master/charter.md#11-ip-policy
• Review the online programs guidelines: https://github.com/cncf/foundation/blob/master/online-programs-guidelines.md
• Understand the trademark guidelines: https://www.linuxfoundation.org/en/trademark-usage/
• Understand the license allowlist: https://github.com/cncf/foundation/blob/master/allowed-third-party-license-policy.md#approved-licenses-for-allowlist
• Is your project working on written, open governance? see https://contribute.cncf.io/maintainers/governance/
• Slack: Are your slack channels migrated to the Kubernetes or CNCF Slack? (see https://slack.com/help/articles/217872578-Import-data-from-one-Slack-workspace-to-another for more details)
• Is your project in its own separate neutral github organization?
• Submitted a Pull request to add your project as a sandbox project to https://landscape.cncf.io
• Create maintainer list + add to aggregated https://maintainers.cncf.io list by submitting a PR to it
• Have added your project to https://github.com/cncf/contribute
• Artwork: Submit a pull request to https://github.com/cncf/artwork with your artwork
• Domain: transfer domain to the CNCF - https://jira.linuxfoundation.org/plugins/servlet/theme/portal/2/create/63

Things that CNCF will need from the project:

• Provide emails for the maintainers added to https://maintainers.cncf.io in order to get access to the maintainers mailing list and ServiceDesk
• Trademarks: transfer any trademark and logo mark assets over to the LF - https://github.com/cncf/foundation/tree/master/agreements has agreements
• GitHub: ensure 'thelinuxfoundation' and 'caniszczyk' are added as initial org owners, this helps us make sure we have continuity of GH ownership
• GitHub: ensure DCO or CLA are enabled for all GitHub repositories of the project
• GitHub: ensure that hat the CNCF Code of Conduct (or your adopted version of it) are explicitly referenced at the project's README on GitHub
• Website: ensure LF footer is there and website guidelines followed (if your project doesn't have a dedicated website, please adopt those guidelines to the README file of your project on GitHub).
• Website: Analytics transferred to projects@cncf.io
• CII: Start on a CII best practices badge https://bestpractices.coreinfrastructure.org/en

Things that the CNCF will do or help the project to do:

• Devstats: add to devstats https://devstats.cncf.io/
• Marketing: update relevant intro + slide decks
• Events: update CFP + Registration + CFP Area forms
• ServiceDesk: confirm maintainers have read https://www.cncf.io/services-for-projects/
• CNCF Welcome Email Sent to confirm maintainer list access, welcome email has monthly project sync details
• Create space for meetings/events on https://community.cncf.io, e.g., https://community.cncf.io/pravega-community/ - (https://github.com/cncf/communitygroups/blob/main/README.md#cncf-projects)
• Adopt a license scanning tool, like FOSSA or Snyk

[beeme1mr]

I'll start working on this from the OpenFeature side! Thanks for putting this checklist together.

[oleg-nenashev]

Me and @DavidPHirsch are also available to help with the project logistics

[lukaszgryglicki]

DevStats page added.

[beeme1mr]

I've invited 'thelinuxfoundation' and 'caniszczyk' as org owners.

[beeme1mr]

I've broken out a subset of the checklist so I can track our progress.

From the project side, please ensure that you:

• Understand the project proposal process and reqs: https://github.com/cncf/toc/blob/main/process/project_proposals.md#introduction
• Understand the services available for your project at CNCF https://www.cncf.io/services-for-projects/
• Ensure your project meets the CNCF IP Policy: https://github.com/cncf/foundation/blob/master/charter.md#11-ip-policy
• Review the online programs guidelines: https://github.com/cncf/foundation/blob/master/online-programs-guidelines.md
• Understand the trademark guidelines: https://www.linuxfoundation.org/en/trademark-usage/
• Understand the license allowlist: https://github.com/cncf/foundation/blob/master/allowed-third-party-license-policy.md#approved-licenses-for-allowlist
• Is your project working on written, open governance? see https://contribute.cncf.io/maintainers/governance/
• Slack: Are your slack channels migrated to the Kubernetes or CNCF Slack? (see https://slack.com/help/articles/217872578-Import-data-from-one-Slack-workspace-to-another for more details)
• Is your project in its own separate neutral github organization?
• Submitted a Pull request to add your project as a sandbox project to https://landscape.cncf.io/
• Create maintainer list + add to aggregated https://maintainers.cncf.io/ list by submitting a PR to it
• Have added your project to https://github.com/cncf/contribute
• Artwork: Submit a pull request to https://github.com/cncf/artwork with your artwork
• Domain: transfer domain to the CNCF - https://jira.linuxfoundation.org/plugins/servlet/theme/portal/2/create/63

Things that CNCF will need from the project:

• Provide emails for the maintainers added to https://maintainers.cncf.io/ in order to get access to the maintainers mailing list and ServiceDesk
• Trademarks: transfer any trademark and logo mark assets over to the LF - https://github.com/cncf/foundation/tree/master/agreements has agreements
• GitHub: ensure 'thelinuxfoundation' and 'caniszczyk' are added as initial org owners, this helps us make sure we have continuity of GH ownership
• GitHub: ensure DCO or CLA are enabled for all GitHub repositories of the project
• GitHub: ensure that hat the CNCF Code of Conduct (or your adopted version of it) are explicitly referenced at the project's README on GitHub
• Website: ensure LF footer is there and website guidelines followed (if your project doesn't have a dedicated website, please adopt those guidelines to the README file of your project on GitHub).
• Website: Analytics transferred to projects@cncf.io
• CII: Start on a CII best practices badge https://bestpractices.coreinfrastructure.org/en

Related PRs:

• Add OpenFeature to the landscape landscape#2650
• Add OpenFeature maintainers foundation#382
• Add OpenFeature Logos artwork#349

[beeme1mr]

PR to add OpenFeature on the CNCF landscape.

cncf/landscape#2650

[beeme1mr]

PR to add OpenFeature to the CNCF maintainers CSV.

cncf/foundation#382

@amye, what's the best way to provide you the emails of the maintainers?

[beeme1mr]

Hi @amye, @jeefy, and @caniszczyk,

Does the CNCF offer an email service? We would like to use a vendor neutral email address if possible. Currently, we've groups.io but it seems to be blocked by some services (i.e. NuGet).

Thanks!

[amye]

PR to add OpenFeature to the CNCF maintainers CSV.

cncf/foundation#382

@amye, what's the best way to provide you the emails of the maintainers?

An email to project-onboarding@cncf.io works best!

[amye]

Hi @amye, @jeefy, and @caniszczyk,

Does the CNCF offer an email service? We would like to use a vendor neutral email address if possible. Currently, we've groups.io but it seems to be blocked by some services (i.e. NuGet).

Thanks!

Groups.io is what we typically have for projects, but describe where you're running into issues?

[beeme1mr]

I'm trying to confirm the OpenFeature organization in NuGet using openfeature-core@groups.io but the email never shows up. My theory is that NuGet blocks generic domains like groups.io but I haven't confirmed that. I tried to email the NuGet support team a few days ago but haven't received a response.

[amye]

I'm trying to confirm the OpenFeature organization in NuGet using openfeature-core@groups.io but the email never shows up. My theory is that NuGet blocks generic domains like groups.io but I haven't confirmed that. I tried to email the NuGet support team a few days ago but haven't received a response.

Could be that it's a moderated list? I have not set up a groups.io email for you, you have a maintainers list at lists.cncf.io.

[beeme1mr]

I'll see if we accidently made it a moderated list. We set it up ourselves, so it's likely just a misconfiguration. Thanks for your help.

[beeme1mr]

Hi @caniszczyk, I believe you own the openfeature.dev domain already. Does this fulfil the CNCF domain ownership requirements?

[caniszczyk]

yes, CNCF/LF own it now

…

On Thu, Jul 21, 2022 at 12:14 PM Michael Beemer ***@***.***> wrote: Hi @caniszczyk <https://github.com/caniszczyk>, I believe you own the openfeature.dev domain already. Does this fulfil the CNCF domain ownership requirements? — Reply to this email directly, view it on GitHub <#857 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAAPSIJJKVNAMW6Y23EAU4DVVGAQBANCNFSM5YYOULXQ> . You are receiving this because you were mentioned.Message ID: ***@***.***>

-- Cheers, Chris Aniszczyk https://aniszczyk.org

[amye]

Marking a bunch of things off! Anything I missed?

[beeme1mr]

Hi @idvoretskyi, I noticed that you helped other projects setup Synk. Would you be able to help get us setup as well? We've configured an org already named "open-feature" but it's using the free plan. Thanks!

[beeme1mr]

Hi @amye, are web analytics required by the CNCF. If they are, is there a preferred tool? Also, what's the best way to get you the signed trademark and logo transfer doc?

[amye]

Ihor's out of the office, @jeefy can help with Synk.
(1) If you have web analytics, we'll need to be added as owners
(2) If you're ready for that, send the PDF to project-onboarding@cncf.io and we'll return a fully executed copy to you.

[beeme1mr]

@amye is the CNCF Trademark and Account Assignment Agreement PDF supposed to be editable?

[amye]

@amye is the CNCF Trademark and Account Assignment Agreement PDF supposed to be editable?

I can email you an editable copy, drop a note to amye@linuxfoundation.org.

[beeme1mr]

Hi @amye, we should be all set with the trademark transfer and adding CII best practices badge is underway.

[amye]

Hi @amye, we should be all set with the trademark transfer and adding CII best practices badge is underway.

Not quite, still waiting on a signed copy :)

[DavidPHirsch]

Hi @amye is the trademark transfer still missing?

[DavidPHirsch]

Hello @caniszczyk and @amye , is this still an open item?
Trademarks: transfer any trademark and logo mark assets over to the LF - https://github.com/cncf/foundation/tree/master/agreements has agreements

[amye]

Hello @caniszczyk and @amye , is this still an open item? Trademarks: transfer any trademark and logo mark assets over to the LF - https://github.com/cncf/foundation/tree/master/agreements has agreements

I don't have anything in my email, so yes. Let me know what you need.

[DavidPHirsch]

@amye thanks for getting back to me. Could you send me an email wirth exact details of what is missing so I can get this item closed. I will work with our legal team

[amye]

@amye thanks for getting back to me. Could you send me an email wirth exact details of what is missing so I can get this item closed. I will work with our legal team

Done!

[DavidPHirsch]

Hi @amye and @caniszczyk, I think all the point here shoul dbe covered and we can close the issue

[amye]

Things we're still missing:
Website: Analytics transferred to projects@cncf.io
CII: Start on a CII best practices badge https://bestpractices.coreinfrastructure.org/en
Fossa or Snyk?

[beeme1mr]

Hey @amye, we're not capturing analytics on the website. Is that a requirement?

Here's a link to the OpenSSF showing 6 of the repos having a score of 99% or above: https://bestpractices.coreinfrastructure.org/en/projects?q=openfeature

[amye]

Neat! Then FOSSA or Snyk is likely the last step!

[beeme1mr]

We're both on most repos. Here is an example that uses FOSSA for license compliance and Snyk for vulnerability monitoring.