Project Harbor Community, 31 May 2023

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: CNCF Harbor's Community Zoom Meeting - May 31, 2023

Description

CNCF Harbor's Community Zoom Meeting

A

Okay, we should be recording already uh hello. Everyone today is May 20 uh 31st and that's the official community meeting for Harbor as such. Please follow the kind of conduct and just be nice to each other. um With that said, I'm gonna paste into the chat, the uh Community meetings notes.

A

uh If you feel like at your topic there I'm gonna, share that same document.

A

um Sorry, if I sound a little bit funky today, but I have some stuff in my mouth I added some aligners, so I'm still trying to figure out how to speak with this stuff. So we don't have anything added for today, so I suppose it will be a freestyle kind of agenda.

A

Anyone wants to to talk about anything, any topics, any discussions, any questions, and so on.

A

All right or fully quiet, um I suppose everyone is thinking about summer vacation already so I understand that.

B

You have one subject: uh if I can uh we started our first album operator uh community meeting last Tuesday and we were only true with Marcel, so if any of you is interested in the appropriate development, uh we have weeks, we have a meeting every two weeks and will be glad to welcome you. In next meeting. We will talk about the 1.4 operator release which embed our bore, 2.6 version, if you're interested in.

C

What did you talk about in the last call? What was the information that you could share.

B

Yeah so last time we talked many about the cleaning of the of the project uh in the backlog in the reviewers. uh There were a lot of things that was that was broken and we talked about the M chart of operator, uh uh which was pretty blocked because the maximum size of the chart was reached. uh It's one one megabytes its maximum size of the secret in kubernetes and we reached it. So we couldn't add any new value in the operator crg.

B

So we talked about this problem and how to solve it, and we finally decided to start to unblock the situation, to remove the crg from them chart temporarily and next time we'll talk about how fix it long term how to to find a better fix.

B

We don't know yet if we create a separated, M chart for the CLG or and usual solution, we don't know for now.

D

E

D

The the the meaning to me I mean the the operated mandender.

A

Meeting it's in the uh it's in the calendar already and I've sent invites for this one. You can find it into.

A

um Let's hear this, let's see.

A

Here we go, you can see this one. Okay, okay got it. Thank you, I'll, send it to you to uh Zoom what is this one yeah here we go and also I'm going to edit and by the way, um that's the recording. So um the the video was uploaded to YouTube and we have a new playlist for the hardware appraiser Community meetings, so yeah. Everything which is from that meeting would go straight. There.

C

A

About this stuff or Thomas to.

C

Add yeah I have something to ask Thomas.

C

um Did you? Did you also discuss the topic of separating the uh the operator in two parts, like the the part where you it's responsible for installing and initial configuring of Hardware versus the part which is responsible of managing uh Harbor, that you did you discuss this separation or.

B

uh No, not at all, it was not a topic for us. uh What? What do you mean by managing you talk about day, two configurations.

C

Yeah yeah so like day, one is like the installation of Harbor right.

B

For the operator I'm great and day, two is like.

C

Creating projects creating repositories all those kind of a managing of our like A2.

B

I, don't know it was a subject, but indeed we could discuss about that and since the last meeting we merged the first day to Pro requests about our project. Maybe you saw it I don't know, but no we didn't configure that.

C

B

Maybe you could open an issue to discuss uh yeah.

C

I'll try to join next one to see that we can maybe right forward this discussion.

A

uh One thing from my side: uh keep calm, China and keep calm. North America. The cfp period is going to close on June 80th, so we have a few more weeks. um Anyone thinking about applying for this one. uh Do you need my help for some Logistics stuff or if you want me to join your stage.

D

You know I'm, looking with the Microsoft to um work together to have a safety about the hardware integration with.

A

D

um Or or we can call it another way too, so we wanna our idea to the integrate Hardware with another way to to do some signature.

A

D

Innovation on this.

A

I'm sorry I didn't get uh you're talking about notary version, 2, stuff or yeah.

D

Yeah I'm way, I'm working with the Microsoft team, the.

A

D

Maintenance group- and we want to work together to have a CFT regarding to the harbor integration with notation and as since, around that yeah.

C

E

C

What about the cfp for Harbor? The project should be submit the cfp for the helper project.

A

You mean the maintenance track, maintenance.

C

A

um Maintenance track they open a little bit later. Okay, but if you want, you can check that, but I suppose since yeah, you know you're not planning to travel to Shanghai right as far as I know, I.

C

I'm not planning to travel to Shanghai, no.

A

Okay, so maybe it makes sense um for the Chinese uh folks in the call to submit that maintenance track. I can submit for instead of anyone right but um to be from the local folks and and to have it like in person again, not virtual and then from North America I think we can do again, some kind of in person between uh maybe again you uh or someone else um and- and we are more folks.

C

A

C

A

I I'm I'm also not sure if I'm gonna travel to Shanghai um for now looks like I'm not going to. um There are many things to um to check before that. uh So yeah.

A

Okay, and um do you need any help with that cfp.

D

uh Not yet um we are still um on the disgust.

A

Okay, um on Keep Calm session stuff um I've requested some some help from cncf uh to have a new design for t-shirts to to get away a little bit from the standard, Harbor logo stuff, and to have something more interesting. Let's say uh we have that as a project uh as a graduated project. We we can do that so update you once I have something or if they need something I suppose they'll need some ideas. What kind of at least.

C

What in which area is this? This is it for the logo or is it for a swag t-shirts produce.

A

Rack for the t-shirts: okay, okay, no, no I'm, not asking about changing the logo I'm asking about the tissues design, okay, so I suppose we can do some some for Shanghai with some Chinese or Shanghai things, so it can be like relevant for the conference and then we can do the same thing for Chicago. So.

E

A

Can have a little bit more dedicated tissues to the to the event itself or if you want something else to be added um like some more I, don't know just to move it a little bit and to make it a little bit more, uh less formal and and more catchy uh so folks can enjoy wearing it yeah. So I'll update you on this one. Whenever I have something about this one.

F

Yeah, but the only thing that is a good idea, if you can I mean I, mean uh design the logo have a logo uh also plus some spacious and like Chinese Shanghai in Chinese. So you know that would that would be something special right. Yeah.

A

F

A

Was my that was my idea? Yeah, that's.

F

Good by the way, uh so very I mean for those uh t-shirts, so the budget we're coming from cncf is that management, correct.

A

uh Come again, I mean.

F

Put those t-shirts, so the budget will come from cncf, no.

A

F

Comes from companies like VMware.

A

And so on, uh I'm sorry folks, I have to leave you for just two minutes. I hope uh I, hope I'll be back in two minutes, all right sure.

C

Okay, all right, so we have yeah. We can create a new some T-shirts then or some brand brand t-shirts that we can hand out.

C

um I think we need to get some information, maybe in the slack channel right like some ideas, what you would like to see and then we can forward this information to All In that uh you know that's that he can kind of organize it with cncf and the designers. So if you have ideas just post it in the slack Channel.

C

C

D

C

Any other topics too, you would like to discuss so we have the the operator. um Is there anything on the um on the telephone provider? Do we need to maybe to plan a new release or something the telephone provider or is uh are all merge, requests released.

E

Sorry can you repeat, please.

C

um Our our older pull requests from a telephone provider released, or do we need to carve out a new release of the terraform provider.

E

Yeah I built a new wheelers last week. Yes,.

C

Yes, okay, so we have announcement then, to tell that there's a new telephone release.

E

No I didn't but yes, I wish we'll do it. Yeah.

C

E

D

Basis on which hardware version I'm in the osis works.

E

uh It's based on the 28, zero I think.

D

Oh yeah, yeah, sorry thank you um and by the way, do we have some environments to to water that or testing the the end-to-end scenarios in uh okay, action or somewhere and.

E

Yeah there is a yes, there is a git addiction which deployed the kubernetes environment and Deployable on it.

D

So we probably need to have announcement on this and in uh Twitter, Harvard official account.

C

Yes, maybe it makes sense yeah.

A

I I missed this one I'm, sorry I'm back.

C

A

Can you briefly repeat what we need to announce there.

C

Was a terraform provider released last week with the new functionalities and I think with we? We missed a few of those releases. I think it's not just the first of the long time, but for Florida is doing regularly releases and we need kind of announce them as well to the community informing them about the release, and they also maybe inform the downstream projects that depend on the telephone provider I'm thinking here about uh through me, the boomi provider.

C

You know who is built on the telephone provider so that they also know that there is a new version and they can update their site as well.

A

Yeah yeah uh is that again uh from polari.

C

Yeah exactly and good deal is the one.

A

Okay, and do we do we have a like a process of notifying them or just to.

C

Write him: okay, just there is no official process now.

A

Okay, so uh I'll take the release, notes and do some uh official, like announcement or mailing list and Twitter and I'm gonna contact again uh for this one yeah, okay,.

C

Yeah, so there was a three nine yeah. Three nine was a three nine was. uh Is.

E

In three nine I think I, uh there is some new feature and some.

C

E

Because of uh two eight of armor, exactly.

C

Yeah, so we should combine them: three: nine and three nine one into the one announcement.

C

A

C

D

Have I have one question regarding to the uh lessons tracking for Hardware repository? Do you have any update on that.

A

On on what I'm sorry.

D

um I recall that you have uh enabled the license tracking for Harbor repository um the tools, names and probably the falsa or or yeah.

A

D

This is uh but as if it's not it's not working right now, yeah.

A

D

A

Tried to address that I addressed that through the cncf channels with fossa, but these guys it also support a super slow. Oh.

D

A

Like it's a stale right now, yeah.

D

A

Yeah I cannot provide you much much more information than that. Maybe I have to re-trigger um all this um and.

D

A

Get it working properly, yeah, um yeah sure.

A

uh Fossil scanner- okay, um yeah and I I have another one on Stone conduct me offline uh to create a survey um to the community. um I can share with everyone the questions that the Beijing team popped up with. uh So if someone else like you about him or Florian or Thomas from the other projects like the the operator or the telephone provider, you want to add some some more questions about the sub project.

A

So we can have it in one. Go I! Think it's good. If we have a single survey instead of like a multiple people can get lost, so um we can craft the questions and use the Survey Monkey platform from cncf to to have that in place. So I'm gonna share the the questions in in some some form or another, uh and if you, if you want to add something or change, something to be more more informative, um just do that.

A

So we can work on on this one and to get it out in like a week or something I think it's uh we haven't done survey in a while, uh quite a while I'll say so. We we would love to see some more information and some more insights from the community uh like how they use, however, how they install hover and so on, and so on.

A

Yeah right now, they're like a stone semi like a 15-ish questions, so I'll sort that out um I know of them are like open questions, not ABC, but uh like an open uh to write something.

C

And the target is the community right, so you want to ask.

A

Yes, yes, yes, it's not it's not product targeted! It's Community, targeted, okay, yeah yeah. Of course everyone involved in this project and everyone is maintenance, as you are uh as VMware is and so on and so forth. They can translate that to products, but that's on their own uh effort. Right, for example, I think you're interested or at least I'm interested, as well like who is looking forward uh to have a Enterprise support for Harbor I. Think we discussed that like thousand times on on kubecon people are coming and asking hey.

A

Do someone provide a Enterprise support for Harbor and I? Think that's a relevant question for the survey.

A

uh Are you looking for a Enterprise or have you considered Enterprise support for your Hardware instance and stuff like this, so I think the survey should be open for anything like this and then yeah and we can decide what to to get in.

C

Make sense, that's good.

A

Yeah, so we can get more information not only uh like open source stuff but I. Think since they're folks, like you, like your company, Building Products out of this one and Services I, think it will be more more relevant for everyone to have more complete survey even a bit longer uh but more informative for everyone. So yeah.

C

And I think also like yeah what yeah, so what what people value in Harvard like what is their main main functionality there you know, cannot live without or something I, don't know like to see like what is the the main driver for Harbor. That makes makes it outstanding of maybe other registries yeah.

A

Yeah as if not there is such a question, so okay, perfect I'll, put that in some uh Google Docs or something and we'll send it out or we.

D

A

I'm not sure which one is the best way, but I think Google Docs is is the best. So we can all comment and and stuff the uh Wiki here is not it's not. That.

C

A

That's collaborative in in this way makes sense, yeah, yeah all right.

A

um Another one uh out of the harbor operator uh community meeting came out that um do we want to stick to that way of doing the community notes uh in that Wiki or do folks think we we can have a better way to do the community meetings notes like hack, MD or some other some other way. Some other projects from the kubernetes ecosystem are are doing that through the Google docs, for example, uh so think about it. It's not like decision to take right now, but um I think it's a relevant question.

A

If the the uh GitHub wiki page is the most convenient way to do a meeting notes yeah, especially uh in in simultaneous editing that can be real pain, so yep just think about it, and we can discuss it next time again or we can actually add that to the survey and see how but that's more a question for folks that are joining this particular call, not exactly the broader community, so yeah yeah.

F

B

C

The next agenda Yeah question I.

F

Think yeah I think we can. We can talk about this I think we could use a convenient everyone can access the easily uh if you use Google I, think not all the users have the Google Talk account or access I mean, especially in some some country like in China. We.

C

F

Many people cannot directly access the Google.

C

Yeah there's some Enterprises yeah.

F

So that is a problem. I think.

A

Yeah, okay, relevant input so yeah. It was just something that popped up from one of the discussions in the operator channel, so I'm bringing that up. If I'm happy with this one, it's just a little painful when, for example, I want to add something and then for example, you darling, you want to add something and the concurrency of saving it's it's kind of weird a little bit then something like, uh for example, Atkin d, where, like practically everyone, can have a count because it's out there and you can connect it to GitHub.

A

uh You can have simultaneous editing and then more it's more for collaboration than notes, taking uh as it's more for note, notes, taking, obviously and and more collaborative too than the wiki in GitHub. So now just just think about it. Maybe maybe we don't know, maybe we don't need to change I'm, just yeah all right and also it has hack and D has uh on the Fly updates for new stuff and the Wiki page you have to refresh anyway.

A

um It's not a super important thing. So, uh by the way the summer is coming up, at least I really hope it's coming up, because over here in Bulgaria it doesn't look like summer at all. It's like 10 degrees. It's super cold and rainy, but I really hope that the summer will show up at some point. So uh do we do do we continue with the irregular uh Cadence for the releases, because I think the next release should be somewhere around summer ish right August around that.

D

Yes, it's August.

A

Yes, so I suppose many folks are gonna take uh days off. For example, I'm gonna take the full August off, so I won't be around, which is not the issue in the release stuff as such, but um others can take some some days off. So do we keep the the idea of releasing, as we are supposed to release or we'll have to reconsider that a little bit.

A

All right, it's not to decide right now, but just think about it. If you haven't planned your vacations and stuff, we.

C

A

It next time so when you have that talk about that.

C

Okay, it makes sense to discuss the the date of week to date.

A

A

All right anyone else um there were some questions in the slack channel. uh Is there anyone from the slack Channel who wants to? No, it doesn't look like it um to use the time to do some office hours. um Some folks were asking some questions and in particular, I got conducted by uh a guy called Andre and he was asking if we plan to support or if we have some experience with applicable malware scanner into Harbor, like the one that we have, for example, trivia for vulnerability scanning, but they were interested in malware.

D

And they have to refer to their local scanners, Spark to Implement their own adapter and then Harbor can integrate that their scanner at.

D

A

That's the reason why I asked you like a week ago where I can find the source code, because I.

E

F

A

It yeah so it's related to that same topic, but there are like uses of the malware scanner, not the actual, the vendor of the scanner so um yeah and they use uh some kind of Microsoft thing and and Trend Micro um uh malware scanners, so I'm I'm not sure where they are with this stuff. But uh I was expecting the same yeah as we have the plugable thing.

A

Practically it can be malware, not necessarily vulnerabilities kind of so yeah. That's why I'm bringing that that topic up if.

C

um In a channel no.

A

It's uh uh you know when I, when someone joins the the main place, I'm sending them like welcome mail and- and he responded back- that I can Loop you in. If you want um it's Andre from some satellite company yeah. uh If, if you Vadim are interested or you, you.

C

Know what I would like to know more? Yes,.

A

Yeah uh someone do you want to Loop you in yeah, yeah yeah.

D

So I I are they willing to contribute to Harvard to uh Implement a new adapter for their scanner.

A

They're they're users.

D

Their users of.

A

Harbor and the scanner they were looking for solution to plug in the the current scanner that they're, using from Trend Micro and Microsoft yeah.

A

But if we can use that thing to enlarge the capability and and for example, talk to Trend, Micro or or Microsoft they can plug in their stuff as we as we have it already for a few others. I think it will be good stuff, I, don't know just asking out.

C

Loud I think it would be a good good idea to have a kind of a typical malware, antivirus scanner, okay or container images. And after looking into this already in the past,.

E

A

Fantastic, so I'll contact you and we can drive this topic or what uh with them and maybe I think we can. We have some contacts from Trend Micro as they're listed as users of Harbor, so maybe you can track down someone from the from Trend Micro, either they're willing to uh spare some time and and and work on that I. Don't know, I find it useful, so I think we should invest a little bit time at least investigating what are the options. And if someone wants to to do something about it,.

D

A

A

I'm gonna add that as well, so not to forget I'm using that that list you see I miss using the list to take notes for my actions. uh Otherwise, it's gonna pop up.

E

A

Okay, I run out of topics for today.

A

If someone else has something to discuss.

D

um I do think that we need to send up a message to the whole Community regarding to the not read the application in 2009. So then I mean that the user can start microwave their signature from not very true cosine, because that we do not support migration, not really signature, so once they upgrade Harbor to to deny so then all the their signature will come. So so, if I I prefer that we can send a message right now,.

A

Until then, yes,.

D

They can start to prepare migration, yeah yeah.

A

um It's a great idea actually I was about to ask you similar thing, because we did that mistake for for the chart. Museum. Yes,.

D

A

um To do that, I think it should be like full article around how to migrate the notary signatures to cosine. So.

D

I yeah. Actually we do not support migration that just the the user has to remove the signature with uh not reselli. That's so then resend their artifacts with cosine. They just don't have to move their signature solution from notary to cosine, so yeah.

A

Yes, yeah, but my idea my point was to instead of only saying, hey Folks, by the way we're gonna remove notary from tonight, so you should migrate. It's it's gonna, be super Community, friendly and user friendly to give them some actionable things to do.

D

For the yeah yeah yeah, like.

A

Yeah you have to do this and that so, when you upgrade to 29 you're, not surprised your uh signatures are gone, but you have to take some precautious steps, so you still have signatures with cosine, even after migration and stuff like this I mean to prep them and not to be like just pure information. We are moving that functionality, so sorry uh and figure figure out on your own um how to do the cosine signatures, so it should be like complete, guide.

A

Okay, complete, not much complete like end-to-end, but it should be some guidance how to do this stuff, as we are moving functionalities.

D

Yeah sure I will write down a Wikipedia.

A

Yes, so if we can do some kind of again like Google, Docs or whatever, uh uh and and and to do that, blog post I think it, the best will be to do a blog post, and then we send the message out like a in two nine. We remove I'm not already check this out this blog post.

A

You can have all the details there about how to do the cosine signatures and what to expect in q9, not having nothing stuff like this I mean to like to prep them and to if, if it's not just a mail or tweet or something it's some something solid like a blog post, it would be more useful for future references.

A

If someone wants to- uh or someone has like questions like we had that questions about chart Museum like a thousand times and I, think I think you especially you send that link to the discussion like at least 20 times to different people, yeah I I'm, trying to avoid that loop again of sending links like crazy to community and try to explain why we did this and why we did that and what was the reason and so on. So all that in one place here you go.

A

That's the information you need feel free to use it so.

E

A

D

A

So I think we can. We can work together on the figure out all the words and everything about about the whole thing yeah and, uh as we have August release, I think if we try to aim that like enter this month, uh not this month but end of June. So.

F

A

Have some some time in July and.

D

A

I mean August if we aim for August I, think we'll be fine like one month and a half in advance, I think it's more enough and that's like not the First Communication about this stuff. It's like the official thing yeah so should be all right. Yeah.

D

Sure, let's work together to figure out yes.

A

Nice: okay, okay: another point.

A

All right, that's not exactly my correction but and use I, don't know all right, duplication what's wrong!.

A

All right all right, good stuff, yeah! Thank you. That is something that we we definitely need to do.

A

Right and anyone else wants to bring something up.

A

No volume is shaking hand uh head. So no all right, yeah yeah.

B

D

B

He was talking about the chat Museum migration um I I tried to use the the tool on GitHub to make greater shots and I didn't achieve uh it's not working I didn't achieve to make it work. I, don't know if here some people have worked with it, uh I'll use other tools and, moreover, the the problem with this tool is that it needs to to be run and as administrator of elbow and as a provider, I would like to give a tool to my customers to so that they will be able to to migrate them.

B

Theirselves and charts. I, don't know if someone adds the same use case here or is someone interested if I develop a script to do that.

A

Are referring to the one that.

D

A

Ones, team, developed and and.

D

A

D

Yeah we do have a Wiki page to document the migration staffs for either on the uh yes uh as Jordan shared. So sorry, can you open that link.

D

D

Yeah, we have a tool to help user to make way their uh try medium charts and it supports both um and Doc, composed Harbor or a kubernetes-based armor, so um yeah yeah. So how do you howling? Can you open the.

B

D

Then that Jordan shared in the chat.

A

D

Not Wiki is the the tool. Yes, yes, that is so you can. You can follow this wiki page to do the migration.

B

Okay, great I didn't find it yeah.

F

By the way Thomas, so when you mentioned that you, you use the tool so which tool you are using.

B

The one in the upper respository in tools slash migration,.

F

Oh okay, so that is in the Ripple one of the photo in Hubble Ripple right.

B

F

So so the Wikipedia is the latest Raw. We we have provided to do the migration, so that will maybe uh we need to think whether we need to add a link. Yes,.

B

Yeah, maybe okay, great thank you. I will take a look.

A

Right I've added the two links: one, um the Jolly sun and one volume that sent uh does the proxy for the second one is the proxy from artifactory right button: okay, okay,.

B

A

All right, foreign anything else for today, something like last minute: cool.

A

If not, thank you very much I'm going to pick my kids from kindergarten and see you in two weeks. Thank you. Bye.