►
From YouTube: CNCF TOC Meeting 2020-06-23
Description
CNCF TOC Meeting 2020-06-23
A
We're
recording
hurrah,
okay,
so
I'm
just
gonna
quickly
share
this
share
my
screen
and
just
very
quickly
remind
everyone
of
what
we're
talking
about
for
review
submissions
is
the
project
a
fit
for
the
cncf.
A
According
to
the
charter
and
the
toc
principles,
I
think
things
that
we
need
to
bear
in
mind
for
the
charter
and
the
toc
principles
are
largely.
Is
it
cloud
native
and
there
is
a
thing
in
the
toc
principles,
about
having
a
strong
technical
identity
so
kind
of
not
just
any
old
project.
We
are
looking
for
high
quality
projects.
A
Does
the
project
appear
to
be
on
a
good
path
to
being
well
governed
and
vendor
neutral
also
remind
ourselves
that,
if
we're
going
to
reject
so,
if
we
do
vote
no
on
any
project,
we
should
make
some
notes
about
what
the
reasons
were
for
voting.
No
all
right
with
that
in
mind.
A
B
It's
it's
diffic.
I
mean
it's
difficult
to
know.
If
they've
got
what
kind
of
governance
at
all
there
is,
or
I
mean
it
doesn't-
have
a
maintainers
file
which
makes
and
yes
michelle
says
something
for
code
of
conduct.
I
mean
how
how
how
much
are
we
going
to
ask
for
upfront
for
kind
of
structured
governance
and
things
like
that.
D
C
B
C
A
To
when
I
was
looking
at
this,
I
thought
the
the
website,
and
so
on
is
quite
saluto
oriented.
So
I
think
maybe,
if
we're
going
to
say
no,
we
should
also
give
them
some
advice
around
making
sure
that
they
understand
the
vendor
neutrality
requirements.
F
Right
can
folks
hear
me,
yes,
hey
so
when
I,
when
I
talked
to
these
folks
like
a
year
ago,
one
problem
that
I
found
with
this
project
is:
they
had
no
story
around
key
rotation.
Do
we
and
they
didn't
seem
to
care
about
that
either.
Do
we
do
we
know
if
that
has
changed
here.
G
A
F
I
think
we
should
be
very
careful
about
saying
things
like
that.
Yeah
me
too,
I
I
don't.
I
really
would
prefer
not
to
get
into
the
language
game
right.
Okay,
yeah.
I
mean
my
my
main
issue
with
this
project
was
the
key
rotation
stuff,
which
is
it?
I
mean
it
sounded
like
a
fine
idea
to
me,
but
the
fact
at
the
time
that
they
hadn't
even
thought
about
it
seemed
odd.
So
I
I
would
just
want
to
know
that
they
are
at
least
thinking
about
that,
but.
B
They
they
did
have
a
detailed
threat
model,
which
I
thought
was
unusual
for
a
project
in
this
kind
of
stage,
which
I
was
quite,
but
I
didn't
have
a
chance
to
read
it
or
throw
and
see
what
was
in
it.
But
I
did
think
that
they
had
actually
spent
at
least
spent
some
time
thinking
about
what
they
would
about
those
kinds
of
things.
So.
A
I'm
just
looking
at
a
pr
that
says,
add
support
it's
a
merged
pr
income
is
add,
support
for
automatic
key
rotation.
A
A
Yeah,
okay,
so
we
should
just
get
them
to
double
check
that
they
are
happy
with
that
and
if
they
want
to
add
a
coc
resubmit,
we'll
do
them
next
time.
A
A
A
A
It
okay,
how
about
if,
if
I
say,
votes
for
cni
genie
in
the
chat
and
then
people
can
put
their
you
know
we'll
know
that
it's
in
for
cni
genie.
A
A
D
A
D
D
A
I
A
A
A
bit
sparse,
I'm
just
reading
that
out
because
of
for
the
for
the
benefit
of
the
recording
yeah
all
right.
So
let's
go
back
to
victoria,
metrics
and
kind
of
double
check
on
the
trademark
issue.
The
fact
that
it
is
you
know
a
year
old,
so
they
may
have
rethought.
We
might
want
to
just
check.
I
think
that
in
other
respects
it
looked
like
an
interesting,
an
active
project.
So
if
I
didn't
have
concerns
about
the
trademark
side
of
things,
I'd
be
voting
for
it.
J
A
I
believe
they're
not
merging
and
they
decided
they
wanted
to
stay
as
a
project
in
their
own
right.
But
I
think
one
of
the
maintainers
from
kudo
is
now
also
a
maintainer
on
operator
framework
to
try
and
help
with
the
kind
of
collaboration
between
the
two
projects.
D
J
A
A
Chaos
mesh
is
the
next
one
on
the
list.
So
there's
two
of
these
chaos
projects,
this
one's
pin
cap
and
the
other
one-
is
litmus
project
litmus
chaos.
Sorry
from
maya
data.
A
A
Yeah,
hopefully
we
can
make
this
process
kind
of
frequent
enough
that
it
doesn't
doesn't
seem
too
much
of
a
blocker
yeah,
okay
right
moving
on
clown
custodian,
I
have
to
express
like
kind
of
conflict
of
interest,
because
my
company
does
something
similar
to
this,
so
I'm
just
putting
that
out
in
the
open.
I
Yeah,
I
think
it's
you
know
it's
end
user
driven
and
it's
also
quite
active.
I
I
I
like
to
look
at
the
contributor
community
and
the
the
commit
frequency
I
mean
this
one
is
like
way
up.
There.
A
A
H
The
work
group
should
have
a
c
code
of
conduct,
at
least.
A
I
think
this
is
kind
of
in
the
spirit
of
things
that
the
cncf,
you
know
it's
a
neutral,
neutral
ground
for
collaboration,
but
they
can
presumably
carry
on
under
the
working
group
regardless.
So.
A
B
G
A
A
A
I
don't
know
if
any
of
you
are
following
the
comments
on
this
spreadsheet
if
anyone
wants
to
go
and
double
check
into
the
my
new
shy
of
exactly
who
from
vmware
has
all
has
not
contributed
to
this
at
any
point
in
time,.
A
There's
a
note
in
the
spreadsheet
saying
the
code
of
contact
is
the
core
os
code
of
conduct.
I
don't
think
we
don't
actually
require
a
specific
code
of
conduct.
We
just
require
that
there
is
one
and
it's
reasonable
right.
H
Right
are
we
gonna
say
as
part
of
being
accepted
into
sandbox
that
they
have
to
change
to
the
cncf
code
of
conduct?
That's.
G
Generally,
what
we
recommend-
I
mean,
there's
been
exceptions
where,
like
kubernetes,
has
a
slightly
different,
you
know
model
where
they
have
a
code
of
conduct
committee,
the
cncf
one's
a
little
bit
different,
where
it
just
goes
to
kind
of
staff
and
optionally,
a
mediator.
H
A
A
And
the
one
thing
I
thought
about
this
was
this
was
from
maya
data
and
the
project
is
quite
sort
of
labeled
as
as
a
maya
data
project
at
the
moment,
so
it
would
need
some
work
to
look
more
vendor
neutral
than
it
currently
does.
G
A
E
E
H
Okay
and
who's
going
to
follow
up
to
make
sure
this
gets.
G
A
A
A
Well,
I
don't
know
if
this
is
I
was.
I
was
asking
myself
why,
whether
there
are
any
alternative
projects
to
this
and
and
what
the
motivation
for
joining
cncf
is
for
this.
E
E
A
Much
neutrality
it
had
at
this
point,
which
you
know:
it's
not
a
requirement
for
sandbox
projects,
but
I
it
was
that
question
of
does
it
have,
and
I
might
be.
A
Right
it
just
makes
me
ask
the
question
of
like:
is
that
what
they're
aiming
for
with
with
the
application?
You
know?
Maybe
that's
it.
Maybe
you
know
by
joining
the
cncf
they
are
going.
They
are
looking
for
that
vendor
neutrality,
but
I
don't
they're
not
particularly
on
that
path.
As
we
look
at
them
today,
it
doesn't
have
to
be
a
blocker,
but
is.
B
E
Have
they
also
have
a
plugable
model
for
for
providers?
And,
although
ironic
is,
is
the
only
one
today
they
have
all
the
hooks
for
implementing
others.
E
H
I
You
know
I
have,
I
have
a
question.
Is
this
still
a
cncf
funded
project?
You
know
there
are
just
a
very
small
number
of
developers
actually
working
and
are
they
are
they
consultants.
G
Yeah
there's
there's
contractors
that
are
working
on
this
and
I
think
matt
farina
is
helping
out
from
the
helm
community.
As
far
as
I
know,
but
I'm
not
involved
day
to
day,
I
could
find
out
more
information,
yeah.
B
E
G
H
D
As
well,
the
artifact
hub
is
has
been
around
for
just
a
couple
of
months.
The
initiative
was
presented
in
january
and
I
think
there
was
kind
of
some
traction
in
march,
so
it's
still
not
enough.
I
think
to
get
now
like
enough
community
around
it
yet,
but
I
still
think
it's
a
good
idea
overall
as
a
project.
E
E
D
And
yeah
agreeing
with
michelle
here
as
well,
I've
been
admitting
when
our
default
club
was
introduced
to
the
end
user
community
and
it
was,
I
would
say,
tiltingly
plotter
is
a
positive
end,
but
yeah.
I
think
it
requires
a
bit
more
time
to
actually
see
that.
A
H
A
D
A
A
G
I
I'm
just
I'm
just
more
concerned
from
you
know
if
a
project
hasn't
released
in
a
year,
what
does
that
mean?
Is
it
stable,
not
really
maintained
anymore,
just
something
to
consider
as
you
review
project
proposals.
H
A
A
A
Does
it
look
like
it's
on
a
path
to
kind
of
community?
Adoption
seems
a
bit
soon
to
say
that
to
me.
A
B
Yeah
I
mean
the
project
was
supposed
to
have
a
natural
community
of
the
people
distributing
artifacts
that
and
the
existing
artifact
project,
and
I'm
I
kind
of
had
assumed
that
they
would
get
involved
when
this
thing
came
out
and
I'm
just
a
big
concern
that
that
they
haven't
been
at
all,
because
these
were
the
you
know.
These
were
the
people.
It
was
meant.
A
B
I
I
I
I
think
so
because
from
my
perspective,
you
know
what
I
listened
to
about
this
project
is.
This
chris
specifically
seems
like
cncf
is
pretty
committed
to
you
know
to
funding
it
and
that,
for
me,
that's
no
different
from
a
startup
funding,
a
project,
and
you
know
any
any
any
other
projects
that
the
folks
behind
it
could
be
pulled
as
well
and
and-
and
you
know,
as
sandbox-
I
think
that
alone
probably
qualifies.
I
But
but
you
know,
I
certainly
would
I
I
actually
kind
of
believe
we
should.
You
know
it's
just
like
just
like.
We
shouldn't
treat
cncf
finger
in
us
in
a
special
way,
but
but
we
shouldn't
reverse
discriminate
either.
So
if,
if,
if
you
know,
if
our
own
organization
wants
to
fund
the
project,
I
just
don't
feel
like
they
should
be
held
at
a
higher
standard.
A
So
there's
a
couple
of
interesting
comments
in
the
chat
chris
mentioned
that
you
know,
project
sandbox
goes
around
with
reviews,
so
we
always
have
a
chance
to
say
no
after
a
year
if
it
isn't
going
anywhere.
As
a
fail-safe
michelle
saying
the
question
I
go
back
to
the
project
with
all
the
feedback
I
give
is
how
do
you
plan
on
getting
the
community
involved,
because
I
don't
want
this
to
be
an
effort
only
sustained
by
contractors.
A
I
Project
I
mean
I
I
think
so
I
looked
at
I
looked
at
the
git
repo
they're,
even
running
a
little
service.
You
know
it's
a
discovery
service.
It
took
me
a
while.
Initially
I
was
a
little
confused,
but
I
think
once
matt
explained
it
to
me.
It
seems
to
make
sense
and
there's
no
guarantee
it's
gonna
be
successful,
but
you
know
it's
certainly
something
worth
doing.
A
A
I
I'd
be
curious
about
matt's
opinion
too,
because
it's
it's,
I
talked
to
kong
about
it
actually,
but
since
it's
a
envoy
you
know.
F
From
a
from
a
sandbox
perspective,
I'm
for
sure
supportive,
like
I
don't,
I
don't
really
see
the
harm
you
know
they
appear
to
be
attempting
it
in
a
non-kong
specific
way
and
they've
made
good
effort
on
their
website
and
their
documentation.
You
know
to
not
really
reference
kong,
so
you
know
I.
I
would
not
be
supportive
of
any
stage
beyond
sandbox,
but
you
know,
especially
with
the
lack
of
a
envoy-based
service
mesh
in
the
foundation.
Currently,
it
seems
fine
to
me
sorry,
I
think
michelle's
asking
do
they
have
a
freemium
model.
F
I
mean
the
the
whole
thing
is
free.
As
far
as
I
know,
I
I
don't
actually
know
of
any
any
enterprise
product
that
they're
doing
currently.
If
anything,
they
would
be
doing
support.
So
I
don't,
I
don't
think,
there's
any
open
core
type
model
here.
A
F
G
F
B
Just
to
say
that
I've-
I
am
a,
I
was
a
founder
of
this
project
and
I
they
have
added
a
code
of
conduct.
So
I
probably
won't
oh
yeah.
I've
got
a
conflict
of
interest
on
this
one,
but
it's
good.
It's
a
it's.
I'm
not
really
very
much
involved
now,
apart
from
talking
to
them,
because
it's
mainly
I'm
working
on
it
now,
but.
A
I
thought
this
look,
look
really
cool.
I
was
it's
actually
really
close
to
hardware.
I
was
I
guess
that
was
my
one
question
is:
is
cncf
the.
B
I
mean
they,
they
are
working
closely
with
spiffy
and
they
are
basically
they
want
a
neutral
ground
to
work
in,
because
microsoft
wanted
that
before
they
contribute-
and
it
was
originally,
I
mean
we
I
was
involved
because
originally
because
we
were
using
it
potentially
for
container-based
use
cases,
and
I
think
that's
still
a
use
case
that
they're
very
interested
in
as
well.
So
I
think
it's
generally
applicable,
I
mean
yeah
that
there
potentially
are
other
places
in
their
life.
I
I
I
think
it's
a,
I
think
it's
a
really
cool
project.
I
I
talked
to
them
about
it.
It's
it's
a
very
ambitious
project,
but
you
know,
but
it's
I
think
technically
it's
technically.
It's
really
sound.
It's
just
a
lot
of
you
know
like
key
management
kind
of
capabilities.
Obviously
we
know
that
the
the
the
really
the
most
secure
form
is
through
hardware,
but
there's
just
no
standards
for
it.
I
Everyone
does
it
a
little
differently
and
they're
they're
kind
of
I
mean
at
a
grand
scale,
they're
trying
to
create
some
kind
of
a
common
interface
for
that.
So
it's
quite
noble.
You
know,
you
know,
you
know,
you
know.
If
arm
takes
the
lead,
I
think
it's
a
really
good
thing
for
the
for
the
industry.
A
There's
a
nice
load
of
you
know
different
organizations
involved.
I
thought
it
was.
You
know
really
good
candidate,
for
we
want
to
be
in
a
foundation
because
of
neutrality,
so
yeah
all
right.
Should
we
take
this
one
to
a
vote.
I
A
A
A
C
I
mean
I
I'm,
I
think
it's
a
pretty
interesting
project.
It
is
a
little
bit
tied
into
upbound
upbound
than
their
company,
but
I
think
that
not
any
more
than
a
lot
of
other
projects,
so.