Jenkins Governance Meetings, 23 Mar 2022

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Jenkins Governance Meeting Mar 23, 2022

Description

Jenkins Governance meeting Apriol 6, 2022 with topics including:

* News
* Action Items
* Expense approvals for security team
* Does meeting time need to adjust again because of daylight saving time?
* Ukraine invasion by Russia and how it relates to the Jenkins project
* CDF Community Awards nominations are now open, close March 29, 2022
* Jenkins is the Way replacement site - Gavin Mogan
* cdCon 2022 and Jenkins Contributor Summit - Austin, TX, USA June 7-8, 2022
* Google Summer of Code progress report
* Forums and community topics

A

Welcome to jenkins governance meetings, the 23rd of march 2022.

A

So, agenda review got news, a question on expense approvals for the security team, reimbursements uh meeting time questions. So the we'll talk that one briefly, a question in terms of the jenkins project and the ukraine invasion by russia, cdf community awards nominations jenkins, is the way replacement site contributor summit and cdcon 2022 and oh oleg. I think we've got one there. It's now has a remote compo right.

A

It was almost right and then google summer of code, progress report that I can do if we have time and forums and topics are there other topics that need to go on the agenda.

B

Maybe one minor topic so currently the google commander invite points you to google meet neutral.

A

Oh dear, I'm sorry, which does the calendar.

B

This one uh calendar for this invite by default, you want to go to zoom.

A

ah Okay, so let me put that on as an action item for me and I'll I'll, give you.

B

A

You invite a new person.

B

uh Google calendar automatically it's a google meet. Oh, oh, how helpful of them? Okay,.

A

The zoom is also in the location, tag yeah, but if it's got google meet, that's that creates confusion so for this meeting so remove the google meet link from this meeting on jenkins calendar I'll. Do that thanks any other items that need to be on the agenda.

A

Okay, then, let's go ahead so news just that the next next long-term support release candidate has been released just today or has been delivered as a release candidate. Today, it's ready to test encourage people to do it. um Tim has followed the a very good working pattern. We've got a different release lead and we've been alternating between various release leads. This continues. The alt alternation with, I think il defonso montero as the as the current release lead for this release.

A

So gavin had brought one expense approvals for the security team. um I think that there's a question that so gavin, maybe you can give background on it.

C

Yeah so uh wadick emailed the governance list asking to approve some get it getting an account into expensify, so he can submit expenses from the security team, nice and bug bounties and stuff. um But it's been sitting for two weeks, so I figured we should bring it up in the meeting.

B

uh Yes, so I can provide a quick update, so we might use wallet. We got him in the system so with required two iterations because of some weirdness in his account common configuration, but uh currently there is a pending uh expensify request from what it and I need to approve it.

B

um So I it's something like 50 dollars, so you don't see any reason to know approve it. Last year we approved one thousand dollar budget for security monkeys, so it can just go forward uh yeah. So I will approve that so regarding having permissions uh so about one year ago, a bit more well, almost two years ago, when we were setting it up, I basically asked all government board members to join so only joined mark because he didn't have time uh but yeah.

B

Now it definitely makes sense to regroup, because I guess I'm the only going board number four. We still have access to this system.

C

I definitely have an account uh linux foundation, account and expensify. I just don't have any elevated permissions so.

B

Yeah, so it's a bit tricky there, because we design system for having only one person managing finance.

B

What could possibly go wrong, but last time we applied a hug, so I can submit another request to heather, so that sheds you manually as uh it means to the system yeah.

C

Yeah, it's just the uh delegate, access or whatever right.

B

Yeah yeah, so while we are here, we still have some issues with his money, so I guess both are on your plane trademark. So one is tracy miranda. She still hasn't submitted uh money for jenkins from fosdem.

B

So I guess: okay, okay, we just need to get it over the line.

A

B

A

So this is another.

B

One uh what we discussed for google summer, of course, 2021 again, the linux foundation, hasn't transferred the funds from mentorship to watching.

A

Okay- and that was for 2021., yes,.

B

So we discussed it uh a few times at all currently meetings, but I have no idea who was actually taking.

A

Care of it yeah, I think those were on me and I have not done them. So it's not funds funds from gsoc 2021.

A

So, let's put that just to as a reminder, all right mark take the action item to run, to find and complete those transfers.

A

That makes sense. Let's.

B

Check the theme for google season of dog section.

A

I thought we had. We had handled that one, but it's worth asking it's a good safety check.

B

Definitely required a lot of uh plum brick. On my side, uh I I definitely remember that money have arrived to the linux foundation, but I'm not 100 sure they arrived to jenkins account after that. I'm just looking.

B

Yeah we got uh money.

A

Good all right so confirmed excellent, very good. Okay.

A

Great anything else with regard to funds or expense approvals.

B

We should spend funds because we would have something like 10 each key if tracy transfers the remainder and you get for gsoc.

B

Okay, well, it's not a huge sum, but definitely it allows at least doing something.

A

Right yeah. Well that would allow, for instance, a community bridge project right. Community bridges is much less less than 10k.

C

What's the community bridge project community.

A

Bridge allows us to do a sponsored sponsored a funded development project with uh yeah, so it's called lfx mentorship, oops.

B

Oops using the.

A

Wrong name: yes, lfx mentorship! Thank you. Yeah.

C

Yeah, so I was going to say, it also means that if there's some based on the the convos in the mailing list, there are interest in doing bug. Bounties or I don't know what they're called but bounty a an issue, which means that you know we could contribute to that as well. Oh all, right, um I don't know that's another discussion we should probably have, but you know.

A

Right there was an open question about about bounty, bounty systems right so good question. Yes,.

A

Great okay, anything else with regard to funds.

A

Okay, next topic, then, does the meeting time need to adjust because of government manipulation of clocks? I'm sorry daylight saving time, so I was hoping.

C

Evelina would have been able to make it because it's her and oleg, which is probably the bigger proponent of changing this right now. But I guess the question is: do we need to change it for, like.

A

Yeah, so like I, what time of day is it right now? Is it 10.

B

A

B

9 p.m: at 10 p.m.

A

B

I'm finally, skipping 10 p.m, so this will change, it would be 11 pm, and it's also fine with me.

C

B

You haven't had.

C

The change yet no yeah.

B

C

Will happen now later? Okay, yeah. I know my our change was last weekend. So.

B

Yeah, so I'm perfectly fine with this is the question is having more people on the calls not adjusting. uh The time is if everyone is fine, yeah.

A

Great, so we can check with evelina at the next meeting, just to confirm what works well for her next meeting is. Is your time change, then, within the next two weeks, oleg.

A

Yes, it doesn't matter when, when when we meet next, we can ask the question again just to be sure.

B

Yeah, so if our commander is configured properly, I'm just checking so if it's configured for utc, so ception 6 and it's configured properly, so it will be still 9 pm, utc or 11 pm central european time and yeah.

B

A

It's okay, all right! So we'll we stay with this time for now and double check each each time we meet until we're settled thanks.

A

Next there was a community forum conversation proposing to update the this is from melissa tong, proposing to for a period update the jenkins that I o root level page with a new icon of jenkins, this one and using some phrasing from that that the cdf is using with regard to standing with the people of ukraine and encouraging contributions to the international committee of the red cross.

A

I wanted to open it up here to see if board members have have further guidance, they want to give or a strong opinion one way or the other.

B

I had an action item to draft statement from the last meeting. I didn't write it uh so for me another two questions. Firstly, the message I mean the eject message is perfectly fine, uh uh uh so well, basically similar to how cd foundation applied there again. I do have uh some reservations because it focuses only ukraine but uh yeah. Well, it's people are dying there.

B

The question is about loga. So for longer, I will abstain.

B

So I understand the reasoning for the slovak, but uh well it can be interpreted completely differently, because cossacks is just a part of ukrainian culture. It doesn't represent. uh All the history plus historically concerts will basically mercenaries. So if you want to put mercenaries with stop the world logo, I do have some questions.

B

Not to speak about that, the term of kozaks is completely russia used kazakhstan as one of its propaganda branches. So it's also probably not very appropriate from this standpoint.

B

B

Okay, yes for statement for loga, I think it needs more votes personally, knowing the history. If I saw this logo, let's say I would have had a mixed opinions.

A

Okay, thanks gavin, any any comments from you.

C

No, I've been very trying really hard to abstain from even engaging in that topic. I know we talked about it last week. We, uh I think, as a board, we did come up with a decision which is you know. Ollie was going to craft the message which again, I think, is fine with the version the elicit posted, but I don't know enough to get involved and I feel like I'm not. I don't know. I don't know how to say in the play this way, but I don't I'm not invested enough to really make a statement.

C

I'm happy if the majority want us to switch um jenkins website or logo or anything else, I'm not objecting to it, but I don't know if I can really make an informed decision.

B

So I can provide so in the captain. We changed the logo based on the community consensus.

B

So in our keys we got around 30 votes and 26 of them were plus one three abstain, including me, and it was minus one. uh So in this case uh we discussed with uh the person who voted against. uh They were fine with boston, so from kaplan's standpoint, consensus was reached, but it was only about changing the logo and in the case of captain it wasn't controversial because we just changed the colors to the colors of the uh ukrainian flag. So similarly to what the cncf did.

C

Yeah, that might be a.

C

No, not a workaround, it can't compromise.

B

Well, yeah, the coloring jenkins might be arguably more complicated than captain, because captain slogan is really simplified. I will just put it to the nodes, but so yeah. Of course it was something like that if it a load so on mark's side.

B

There, oh okay, so basically this is what we need and that's it. So if jenkins just changed the background et cetera, it would be one of the options uh but yeah so basically using horse arcs for ukrainians. Let's say you can use cowboys or indians to represent the american nation, and it can make come across like that. So it might seem completely okay from external side, but for people inside it might be dividing.

C

So, let's assuming mark doesn't disagree, let's um move the vote on moving forward with the message like, I think, that's something we can do right now and I think we all someone support um and then maybe have some sort of community vote on the logo or alternative or something because I don't want to do nothing, but I also don't want to make the problem worse.

A

Right so so I think what you were saying is: let's split it into two votes: cd foundation message as one and then logo uh logo change, logo. Modification as another did. I understand that right, kevin.

C

I mean yes, but I think the board could just vote on the foundation message in the community logo right exactly.

B

So adopting the message from the cdf is fine yeah, so this message was approved by the cd of governing board.

B

I also plus one plus one data there. So right just adopting this message is not a big problem.

C

A

Right and gavin I was assuming you're plus one as well yeah, I'm definitely plus one great okay. So let me put that one as mark to to take the action item to propose the pull request for that change.

A

Great excellent, thank you and on the logo modification, I assume the two of you are okay. If I bring the the comments here back to the the conversational community.jenkins.io and we asked for further community further conversation, there.

C

Yeah I just yeah just so out of my depth there. I don't know what to do so.

B

Right makes sense, okay, so this case would rather ukrainian nationals, I'm not sure how many of them you have in the jenkins community right now. So I definitely know a few people, but I'm not sure whether they are reachable taken. uh The situation in ukraine.

A

Yeah, I think that's that's that's a good invitation. We should. We should encourage and invite uh insights from ukrainian nationals, in particular, uh if, if we have friends or contacts that are ukrainian nationals, it would be very interesting to have their insights.

C

um We can, as let's say, an alternative or maybe, in addition to, we can also uh add the flag to social media, um and we could just change the background colors of like the logo does, but without the foreground change as well.

C

Okay, so as alternatives.

C

Sorry you're very.

B

C

So I'm having trouble hearing.

B

Yes, sorry so we have red circle, uh for example, on linkedin, etc. So just changing.

C

Yeah, I mean again, it wouldn't be as meaningful, but it is an option.

B

Yeah well for twitter account. We still have uh jenkins 2.0 logo. So it's a separate system.

A

A

Anything else, then, on on that topic with regard to ukraine,.

C

A

Okay, so next was cdf community awards. Nominations are now open, um they actually close the march 29 2022, so please submit submit your nominations.

A

There's been a blog post created and uh the blog post gives links to the to the correct nomination locations trying to fi, I believe, they're following the same nomination technique as they lose yet used last year of public nominations.

A

I I have several I'm going to nominate, so I have not yet placed it on the jumbotron, like I agreed to sorry my time off was much more fun than it probably should have been, and now I need to get that done. So you say that, but I saw you replying to everything.

A

Well, I was I did not suspend my life, that's for sure, but I had a lot of fun. Oh my I had fun.

C

Yeah, no, I realized, I think you just uh took time off work, so many your work responsibilities, but in your other, like hobby stuff, you uh were engaged with, which was a nice. You know bridge between the two, not bridge uh divide. I don't know word nice word.

A

C

The two of them good enough.

A

Yeah, so next is gavin. I wanted to hear us. Let you share status on the jenkins is the way replacement site.

C

Yeah there hasn't been a lot of updates since the last uh meeting, but um I got a new version. It's running purely in gatsby, it's a standalone site.

C

Yeah, it's all hooked up and to ci it'll, auto, deploy to netify. We got fastly installed to you know, cache page hits and everything else. So I mean all the maintenance done. uh Infra team is just finishing off some refactoring on dns, so they won't be able to get the new dns for a couple days.

C

In the meantime, I'm trying to just finish a few of the polish things that were mentioned on the forums.

C

So hopefully we can have this live, but before the end of the month and yeah- and you know I still kind of want to have the the full url be way the is jenkins.io. But it's kind of horrible.

A

Yeah, your your inversion of the phrase for me was really hard to read. I yeah I'm.

C

Not so good at.

A

Reading right to lift.

C

But then it's the uh the yoda speak and it's on brand right. Okay,.

C

But yeah I mean there's not a lot of progress, I'm hoping I'm gonna try hooking up uh probably tonight uh the gas netlify cms, which essentially gives you the ability to do submit things with the wysiwyg, but it's all via github prs, so no database, no, nothing!

C

Oh great! Actually, that's excellent, and if that works out, we can probably backboard it to other things. So you.

B

Know it's a good excuse.

C

To try things when not not critical, so.

A

Thank you. Okay, anything else on the jenkins is the way replacement site. No, I don't think so. Okay next topic, then, was cdcon 2022 and the jenkins contributor summit. So there's a remote presentation component. Oleg you had mentioned. I think that you were considering a uh the future of jenkins talk. Are you willing to do that remotely?

A

Yes, I'm gonna do.

B

It remotely, if it's not pretty recorded so the problem that nobody clarified, what exactly the virtual experience would be, and my experience with linux foundation, virtual events that it's terrible experience for both speakers and participants.

B

So I don't commit to do it right now, uh but I'm waiting for details.

A

Okay, great now, if, if it were not, I do I still plan to be there in person. So if they were to choose not to do what you were considering remotely, would you be willing to? Let me still be a voice to do something.

B

A

On site, I'm perfectly fine with.

B

A

A

Excellent, thank you so and cdcon is being promoted on the jumbo jumbotron. We're still working to get them to tell us a final date for the contributor summit. Elissa tongs coordinating that with with the folks at cdcon, uh contributor, summit, agenda and topics and attendance will work those in the future.

A

B

My understanding that some individual contributors and companies are still going to embargo travel to texas uh so for jinx contributor summit. uh You can see the hybrid or virtual options, or do we.

A

Go in person, I was going to plan for an in-person and then do a do a an online session as a separate exercise, but not immediately at the same time. You know so, possibly several weeks later or a month later. If we want to do an online, I thought you given good advice previously that hybrid of hybrid experiences tend to be sub-optimal for both the on-site people and the remote people.

A

So I was thinking. Let's do this one purely local and if they're embargoed they won't be able to attend we're we'll we'll meet as we can face to face and then look at. Should we do a later in june, or an early in july, backslash from jenkins. There can personal event uh in texas.

A

They can I I don't, but, but I I may be wrong. I I'm right now checking to see if there is. If there is a backlash, I I'm not I'm not expecting, because at least here in the us, I'm not seeing those kind of concerns.

C

I don't think we would get backlash for having an event at an event if we were hosting our own event, pierly jenkins in texas. There might be backlash.

C

I don't know what backlash but yeah yeah.

C

Okay, we do know that texas is currently getting tornadoes, so that's a whole different issue.

A

Ouch, okay, anything else on contributing, oh, go.

A

Okay, last topic I had was just to give a brief status on google summer of code things. We've got lots of interactions happening in the getter channel, we're hosting sessions with potential candidates, we're still feeling it's still feeling a little short on number of mentors, but and we've got good discussions going on in a mentors group and in in general, in gsoc on community.jenkins.io.

A

So it feels like we're making progress there. I had a good discussion yesterday with with a group working on one particular project idea and good involvement from mentors and from the candidates.

A

Gavin you had forum and topics you want to take that one up for us.

C

Yeah, it's again pretty light. um No, not it just is uh the publish over um right, starting with publish over ssh. I think it's no publish over one of them is is now migrated to github. I have to go look at which one it is.

C

uh The maintainer says they plan to do all them, but they're, starting with just um the first one so and there has been a new release to fix the because it was almost suspended uh suspended um a couple months ago, and so there should be a new release out that prevents that issue yeah. Well, you said not what I said.

A

Yeah, that's- and I am I am interested- I haven't followed that nearly well enough on what it means to have migrated a plug-in's issue tracker to github and the impact on the security team. But I assume they've got ways to handle that and yeah.

C

I well, the security team has always been in his own project in jira, so I don't think that would really impact the security team, but yeah I don't know I I really don't know, but there are plug-ins moving back and forth they're, not back and forth, but one way or the other.

C

So I know there is a script. The info team worked on the script to do their migration, so in this case the script is being used. I don't know how ready it is for other people to use it, but it does exist.

A

Good excellent thanks um and then oh.

C

You're done and.

A

C

In the mailing list there is a topic, an ongoing topic about using external translation systems. um I don't know the name of them offhand you might mark, but essentially you know, have a ui to let you fill out translations and then export them into plugins or core or whatever.

A

Yeah so alex alex brandis known as not not my fault is his login account um showed crowded enterprise to the docsig uh two weeks ago. Cool and uh I've got the action item to enable exactly that's that on two or three of the plugins that I maintain that are low risk, yeah and we'll do some testing with. He was willing to do a german translation and I think, I've. I know several people are willing to do french translations that are native just to see.

A

How does it feel and and what he showed as the demonstration of the doc suit was very, very positive and much easier to use than the pearl script. Yeah. I've heard.

C

Nothing but good things about those toolings so and they I wish they existed. You know 10, 15 years ago, when I had to do custom solutions in various companies, so yeah.

C

And then our earlier conversation reminded me uh bug bounties, oh, yes, okay, um there was a discussion on the mail mist and I think there was confusion. I think we figured on the end um to enable any of the bug bounty systems. We would need to enable uh github issues for jenkins core. If we wanted core issues solved, um I'm personally not a fan of having multiple systems enabled.

C

I think it's really confusing, and you know I replied to as such and, like uh you know, I think we can do one or the other, but we can't do both um so, but there's no reason that plugins couldn't opt in to using the plugins that have migrated could not there's no reason.

C

There are too many negatives in this sentence. Plugins can opt into using any of the bounty systems. I don't think they need to opt into. I think about a bounty can be placed for any github issue.

B

C

I don't know I have not looked into it.

A

Yeah and I I know, I'm I'm not ready to switch jenkins core to use github issues that that let's stay with you for now, let's change.

C

That uh to be big bounty systems for jenkins, where we require uh github issues being enabled, because we don't have to use them fully. But it does have to be enabled.

B

Yeah, good, okay, yeah. So the question is: what do we do with duplicates etc and whether we have any capacity to even handle that.

A

Yeah right- and I think I think I think we fundamentally do not have the capacity to handle it and don't get enough value out of such a transition to justify.

B

It rather consider bug bounties for fixing issues uh fixing bugs, but for reporting new ones right now. I don't think we're in position for.

C

That right, yeah, I I couldn't find out if uh the one that was mentioned uh even supports jira, like I swear, I've seen them in the past using jira, but I couldn't.

B

There was uh freedom sponsors, I'm not sure whether it's still alive, but at some point the junkies was even connected to it yeah, but yeah. The systems was rather not very active.

A

And the discussion on the mailing list highlighted that that bounty systems have not we've had them in the past for jenkins and they have not been net positive. As far as I could tell yeah so.

B

Freedom sponsors site is that it currently shows whatever online casino but yeah. The code is still there, so maybe.

C

Now go finish, okay, uh my my feeling is, I think, if we want to get this activated and not even us, if people in the community want to get it activated, I want to see it working in a plug-in before we'd, even consider it in core, just like the translation system, because it's a lot easier and faster to move in a plug-in that is in core.

A

I like that, I like that as a good standard is, if it were successful and motivated motivated improvements to plug some a few plug-ins, then it might be worth evaluating. But until then core is core is off limits or.

C

Is one of the slowest moving parts of jenkins just infra wise as it should be? Oh, it should be.

C

Would want it working and successful with multiple plug-ins.

A

Great okay, excellent, any other topics we need to. We need to discuss before we close I'll.

C

Like did post the link to the old system in chat, if you want to put that in notes or one of those computers- okay great, so this right here.

B

You know one of the biggest problems that so if we had an easier option to send spark, it would be a solution because we could just issue discount codes, but the linux foundation system is completely useless in this regards because it's super expensive when it comes to delivery. It requires manual provisioning for issue discount code.

C

So yeah, so gatsby has a system that we could look into because they do most of their stuff public that um when you submit a pr you get credit, the more credits you get, the higher better swag you can get. So you know again if we wanted to spend the time and effort to do it, but I think we're all overwhelmed and it's not a part. Oh someone else is in the dock.

C

um Yeah great is that a parrot icon? No, it's a whale walrus, oh okay,.

A

Any any other topics for today nope- I don't think so- all right, thanks um I'll upload, the recording, probably within the next 24 to 48 hours, thanks very much.