Cloud Native Computing Foundation KubeCon + CloudNativeCon North America 2022, 11 Nov 2022

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Keynote: How to Become an Open Source Mechanic - Emily Fox, Security Engineer, Apple

Description

Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon Europe in Amsterdam, The Netherlands from April 17-21, 2023. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

Keynote: How to Become an Open Source Mechanic - Emily Fox, Security Engineer, Apple

Speakers: Emily Fox
As our cloud native family expands and matures, we often learn that we may need a vehicle to sustain our progress. The idea of our project or group crawled along until we gave it legs to walk and run. But we need them to go farther. So we need a vehicle to make that happen, and we’ll need to understand the basic mechanics of successful projects in order to become a mechanic of our vehicle. In this session, Emily shares her common learnings from engaging multiple projects, groups, and foundations that can assist our cloud native community, maintainers, contributors, and new comers on becoming great open source mechanics to build our vehicles for the road ahead.

A

All right, everyone I'm thrilled to be here and excited that our focus is for building for the road ahead, because for some of you, you may not know that I'm, actually, a hobby mechanic, I love cars, I love taking road trips and many of my road trips I've, been on, have been truly remarkable. My cloud native road trip, however, I've met so many amazing projects and Incredibly driven people whom, to me many of them are considered open source mechanics. So I want to talk about. How do you become an open source mechanic?

A

What they are, what it is that they do and how we make our club, our Cloud native road trips great, and how we make them possible. Well, in my travels of late I've, been seeing a lot more potholes and roads closed and congestion and Cloud native and in other communities, because we're not the only ones that are struggling in this regard. So what what do we need to do? When we have a cloud native car we're going on a cloud native road trip?

A

We have to account for things that are unpredictable, like potholes roads, closed congestion and traffic flat tires, but there are things that we can actually do to plan and prepare that will help us consider when those events happen. Things like are you staying in hotels on your trip or are you camping? Are you taking a gas-powered car or maybe you have an EV? Is there infrastructure in place for you to charge your car along that trip?

A

There's a lot that goes into this, and you also want to bring all of your friends with you, because the cloud native road trip or any journey is better with people that support you and can help you make it the best possible. But you don't want to be the one. That's stuck doing all the work, because then you don't actually get to enjoy any part of the trip. You're not spending time with anybody, you're, not learning new things.

A

So what we're starting to see is that the proportion of contribution to usage of cloud native projects and open source projects is actually not sustainable. If you were to consider a project, slack Channel and look at how many people are in there, then you look at the stars and the downloads associated with those projects.

A

Maybe they've got an adopters file and there's a ton of folks in there, and you do a little bit of back the napkin math around who's actually contributing and by the way, that's just the commits, there's a lot more contributions that happen outside of GitHub. It's probably less than five percent of the people that are using these projects and applications that are actually contributing back to them and that's pretty normal.

A

Unfortunately, but we also need to consider that not everybody in the world is capable of doing this work and it's not that they don't want to it's. Just when you have too many mechanics working on a car, it doesn't get out of the shop any faster sure there are some jobs that take one or two or maybe even three people. But if you have a lot of people helping you you and they have jobs to do, you can actually get more jobs done faster.

A

So we need to consider how do we balance contributions to projects versus the usage that they're taking on and it's going to be unique to each project in each Community? What are their governance? What are their processes but realistically with so much adoption happening in our ecosystem today, there's an onslaught of help, requests and feature requests, because there's so much more adoption, we've been successful.

A

So when this happens, we start actually missing engagements, which means we don't get as many contributors anymore, which means less contributions, less features actually being completed, and then your adopters start leaving because they're not getting what they want out of the project and that starts to lead into project crisis.

A

Well, with this onslaught of requests for help and assistance and new features, maintainers are getting burned out, they can't keep up and burnout is an indicator that things are going downhill the wrong way and when you're, the only person pushing your Cloud native car uphill, it's probably going to come back down on you and you're going to need to run out of the way fast, it's not healthy.

A

So what I'm seeing is this same challenges? Repeated over and over and over again, we have people that show up. They want to help, but there's no information on how do you rotate drivers? How do you contribute to a project or what work needs to be done, so they leave and then there's other people, you've, probably seen them. I know I'm guilty hold. My checklist I got it that that's who they are they're there they're in everything you see them in every single project. Meeting you see them doing all the notes.

A

You see them reviewing all the PRS. They are the backbone of the project that makes it successful, but then something happens to them. Maybe they want to take a vacation. Maybe they were in a car accident and now they're no longer available.

A

The entire project can start to unravel if there's no one there to support them and to pick up those pieces or you're a maintainer you're so busy, you can't respond and give anyone the proper time to provide a good response to the pr that they just opened, especially if they're a first-time contributor, because that feedback is so essential. That means, as a maintainer you've become your own roadblock.

A

Contributions are the fuel of any open source project and they help keep your Cloud native car moving down the road, but those three experiences I just highlighted- are going to slow down your Cloud native road trip like a flat tire when you've got no spare, no fix the flat. You certainly do not have an air compressor in the back of your car unless it's Oblivion, so we have to prevent these experiences from happening, but how well everyone is struggling in the cncf other foundations and projects outside of Foundations too.

A

We need to find a community and we need to keep it while I'm burdening our maintainers or we're going to start seeing more and more Cloud native cars sitting on the side of the road abandoned, with all plans for a fantastic Journey left on the turnpike, so find a community they're self-forming, but they don't actually pop up on their own, which means you have to do something with them. Well, how do you do something with Cloud native Project Check out the contributing file?

A

How much information is in there and do they have any information about Beyond just code contributions? You can also look at their readme. If you remember the early days of Technology, readme was the thing that told you, but the software that you just downloaded off the internet was and how to use it, how to install it. How to maybe add the license to it.

A

Your readme for open source projects is the roadmap for your potential contributors and adopters to understand everything there is to know not only in how to use it, but how to become involved. What about your issues and PR's?

A

It's important that you have issues that you're using labels and labeling things like with goodfirst issue.dev, shout out to Chris anachek for letting me know about this. If you sign up as a project and you have good fish issue on there, this is a resource that will help people discover what the some of those problems are, and the PRS as a maintainer or maybe as a contributor to a project. You can review PRS, provide constructive feedback.

A

That's what helps people come back each and every time and there's a lot of research out there on what is that, first time, contributor experience look like so there's a lot that goes into finding a community, but how do we keep them? Well, just like with card you just got one. You have to actually maintain it, which means keeping those docs guides and all of that great information up to date. But you also need to ensure that you are engaging your community members.

A

If somebody shows up in a slack, Channel or a meeting with a brilliant idea, don't just write it down, invite them to take it on and Champion that work and maybe call out hasham and Barbara to help them out be specific. You can see everybody that joins the slack Channel, you see their name, you see their handle tag them on an issue in the slack Channel say: hey. Can you take a look at this and give me some feedback and then check in with them?

A

Maybe schedule 30 minutes a week to follow up with folks that allows you to collaborate and celebrate a lot of the contributions that help make these projects amazing.

A

But it's not just about maintenance, there's a lot that goes into Community, Management and maintainers. Quite frankly, they're doing everything they're being asked a lot and it continues to happen.

A

They're building the car they're, maintaining the systems to build it, they're their own safety inspector they're, their own manual writer as well, and that's a lot for two people, let alone one person, because there are projects that still only have one maintainer you all here are the best person to help these projects you're looking to them for your use cases to help solve, and therefore, with your fresh set of eyes, you can file issues to improve the documentation, improve all of that information associated with the project for the next person that comes behind you- and one thing you need to remember above all else- is that you all here in this room today and online are the vehicle of change that can help balance the proportion of contributions and usage that keep these projects.

A

Moving down the road you've made the decision, or perhaps somebody made it for you to invest your time in using these projects and integrating them and making them a part of your project or product business or organization, and these Investments they require work so pick up. Your tools find a community help, keep it strong and unburden. The maintainers go to contribute.cncf.io, join a project and assign yourself an issue, be the open source mechanic that this foundation and this community needs. Thank you.