►
From YouTube: CNCF Harbor's Community Zoom Meeting - Jan 26, 2022
Description
CNCF Harbor's Community Zoom Meeting
A
Okay,
hello,
everyone,
my
name
is
olympus
silv
and
I'm
the
community
manager
for
harvard
today
is
january
26th
and
that's
the
official
community
meeting
for
harbor.
So
with
that
said,
it
follows
the
code
of
conduct
from
cncf,
so
please
just
be
nice
and
behave
with
the
others.
I'm
sorry
for
my
voice.
I
have
some
some
issues
so
bear
with
me
with
this
one.
Thank
you
for
this
one.
I'm
gonna
share
the
agenda.
For
today
we
have,
we
have
still
stuff
to
discuss
so
the
first
one
welcome
everyone
and
january.
B
Yeah,
okay,
so
our
cosine
integration
is
the
anchor
feature
of
2.5,
so
we
have
almost
done
all
the
implementation
so
far,
so
today
I
want.
I
just
want
to
give
you
a
briefly
introduction
about
the
hard
integration
about
harbor
plus
cosine.
B
Before
I
start
the
demo,
let
me
give
you
some
background
on.
We
want
to
enable
the
cosign
to
sign
I'll,
say,
artifact
and
install
the
signature
into
harbor,
and
so
we
dropped
a
proposal
about
the
integration.
So
if
anyone
want
to
see
some
details,
just
go
to
the
community
report
to
see
these
two
proposals,
the
the
one
is
the
support,
cosine
signaturing.
B
However,
in
order
to
integrate
cosine,
we
just
draft
another
proposal
about
the
accessory
and
the
accessory
is
the
new
definition
in
hardware
in
2.5,
and
that
is
the
accessory
is
a
independent
but
linked
to
an
existing
subject,
artifact
in
harbor,
and
it
helps
harbor
to
enabling
its
stability
of
oci
artifact,
like,
for
example,
on
hello
world,
can
have
several
signatures
and
a
spawn
and
other
things
attached
to
the
subject
hollow
world
this.
This
stuff.
We
call
it
that
accessory.
B
Yeah,
so
by
introducing
the
new
definition,
we
will
do
the
integration
with
process
signature
in.
B
A
available
and
is
a
container
signing
on
the
verification
solution
in
in
registry.
That
means
that
the
cosine
kind
of
sign,
oci
artifact,
and
they
push
the
signature
into
oci
registry
like
hardware,
okay
and
let
me
start
the
dyno.
B
You
can
see
that
the
hardware
the
hollywood
is
now
shows
that
shoes
is
signed
by
cosine
and
it's
if
you
expand
the
hollywood.
B
You
can
either
remove
the
signature
individually
or
it
can
be
removed
together
with
the
subject
deletion
together
with
the
cosine
and
signature,
we
also
introduced
a
new
deployment
policy,
landmark
name
is
cosine
and
the
behavior
is.
This
policy
is
the
same
as
the
content,
trust
in
an
auditory.
B
B
Signature
replication.
That
means
the
as
the
image
shows
up
here
is
that
when
user
tries
to
replicate
artifacts
from
harbor
to
harbor,
if
there
are
some
signatures
attached
to
the
sauce
artifact,
it
will
be
copied
to
the
target
harbor.
Let
me
time
on
that.
B
So
we
have
a
target
harbor
and
now
cosines
and
projects
is
empty,
and
I
have
already
at
the
the
target
harbor
exhaust
harbor
as
a
accessory
endpoint,
and
I
just
create
a
replication
rule
to
replicate
the
images
in
under
project
library
and
to
the
target
consent
project.
B
It's
success
now:
okay,
the
follower
and
base
box
are
success
to
be
copied
to
the
attacking
harbor.
Now,
let's
see
the
whole
world
yeah,
you
can
see
that
the
signature
is
replicated
together
with
the
hello
world
and
now
other
word
is
signed
in
the
target.
B
However,
so,
and
we
can
use
cosine
coi
to
wi-fi
that.
B
B
B
No
difference
with
a
previous
I
only
it's
just
all
the
dyno
on
from
empire.
A
Okay,
great,
I
have
some
some
questions.
Can
I
ask
because
I
I
I
didn't
catch
the
proposal?
Quite
honestly,
we're
not
going
to
get
rid
of
notary
right
or
or
we
are.
B
B
B
A
A
A
Great
and
last
question,
then
it's
a
ask
more
another
question.
I
hope
that
will
be
merchant
two
five
right.
So
are
you
planning
to
create
some
like
a
blog
post
or
video
to
to
demo
the
new
functionality.
B
A
B
Yeah
because
we
we
will
provide
the
record
to
the
kubicon,
so
we
can
share
that
record
to
the
community.
A
C
Okay,
then,
I
have
a
question
about
the
cosine
in
terms
of
gc
like
what
what
data
will
be
cleaned
in
terms
of
cosine?
Well,
when
the
user
triggers
a
gc
job.
In
addition
to
like,
except
except
for
the
current
data,
like
the
storage,
the
the
the
tag,
the
revision
and
the
blobs
will
be,
will
be
cleaned
up
right
and
the
data
in
the
database
will
also
be
cleaned.
And
what
are
the
other
data
in
terms
of
core
sound
will
be
deleted
as
well,
when
used
against
gc.
B
So
I
actually
the
closest
signature
is
the
standard
oci
artifact
that's
stored
in
the
backend
story,
so,
like
other.
B
Yeah,
if,
if
user
just
remove
the
subject
artifact,
so
all
the
signatures
that
attached
to
the
subject
r5
will
be
removed
by
gc.
B
I'm
sorry,
could
you
pardon
me,
could
you
repeat
it?
I
mean
I've
used
it
remove
the
subject.
Artifact
and
all
the
cosine
signatures
that
attach
to
the
subject:
artifact
will
be
removed
together
and
gc
will
collect
all
the
subject
and
the
signatures
together.
In
the
background,
no
difference.
A
A
Thank
you
so
yeah.
I
want
okay,
so
I'm
gonna
share.
If
that's
okay,
so
I
have
a
request
again.
Do
we
have
a
like
a
date
for
to
the
2.5,
or
at
least
they
date,
each
kind
of
stuff.
B
So
our
visit
date
is
february,
11.
A
February,
11th:
okay,
that's
right!
After
your
your
your
holidays,
right.
A
Right
so
I'm
gonna
edit
this
one
so
february,
11th
great,
so
my
request
on
this
one
is:
if
we
can
communicate
prior
the
the
actual
release,
so
we
can
work
on
blog
posts,
the
the
content
for
it
for
the
new
functionality,
the
twitter
posts
and
everything
else
in
the
mailing
list.
C
Pardon
me
excuse
me:
I
believe
that
february
11th
would
only
be
like
a
future
complete.
The
release
will
be
yeah.
A
C
A
A
Cool
all
right,
so
we
have
plenty
of
time.
I
was
yeah
because
I'll
be
off
on
the
week
on
the
february,
the
first
week
of
february.
So
it's
good
that.
A
D
Hello,
yes,
so
I
wanted
to
share
with
you.
I
think
we
might
have
mentioned
this
before,
but
I
wanted
to
do
another
blast
to
you
all.
We
are
planning
in
february
to
to
launch
a
technical
writing
working
group
within
the
harbor
community,
so
this
will
be
a
group
that
will
focus
on
helping
to
write
documentation,
maybe
pick
some
things
around
the
website.
D
It's
also
one
big
project
we
want
to
look
into
is
helping
to
make
sure
that
the
localizations
that
we
have
for
the
harbor
ui
have
been
updated.
We
actually,
we
have
a
lot
of
community,
contributed
translations
for
the
harbor
ui,
but
I'm
not
sure
how
much
how
how
how
regularly
those
have
been
updated
for
each
release.
D
So
if
this
is
something
that
you're
interested
in
helping
out
with,
please
look
for
we'll
definitely
do
more
announcements
and
we'll
have
an
official
kickoff
going
on
in
february,
so
I
just
wanted
to
throw
that
out
there
and
I
hope
people
are
able
to
join
yeah.
Thank
you.
D
They
certainly
can.
I
will
definitely
be
around
to
help
with
with
that
and
if
we
make
documentation
issues
and
if
that's
something
someone
would
like
to
help
with
you
know
definitely
we'll
be
open
to
that.
But
that
would
still
be
something
that
I'm
I'll
be
around
to
help
with
as
well.
A
B
A
Great
okay,
I'm
gonna!
That's
for
the
eu
edition
right.
A
Yeah,
okay,
because
at
some
point
we
have
to
discuss
who
is
going
join?
Are
we
gonna
have
present
on
the
vmware
booth
if
we're
gonna
have
any
at
all?
So
if
the
borders
and
everything
is,
are
open,
I'll
I'll
be
definitely
there?
A
B
E
Harbor
should
also
have
a
part
of
a
community
booth
depending
on
how
things
are
set
up.
A
Do
you
know
if
that
cncf
will
announce
that
like
to
apply
for
that
boot
or
yeah?
They
always
do
so.
E
That's
yeah
that
should
come
soon
ish,
I
hope,
yeah
and
then
you
apply.
If
you
want
to
be
a
part
of
that
the
cncf
not
booth,
but
they
call
it
like.
A
All
right,
so
we
have
to
wait
for
for
that
announcement
that
we
can
do
whatever
we
we
are
going
to
decide
to
do.
I
suppose
vadim
will
also
join
on
the
kubecon
eu,
but
he's
not
around
so,
but
we
can
discuss
that
whenever
we
have
that
mail.
A
Yeah,
okay,
by
the
way,
did
anyone
see
the
the
vadim's
message
from
yesterday
that
harbor
sorry
helm,
3.8
g8
the
oci,
so
he
he
mentioned
that
we
have
to
discuss
that,
but
since
he
is
not
around,
I
think
it
doesn't
make
sense
to
to
put
that
in
your
agenda
to
discuss.
B
Yeah,
I
just
noticed
that
the
I
think
we
we
can
have
a
discuss
with
alex
about
the
if
we
can
announce
the
deprecation
of
charming
team
in
2.6,
since
amtras
just
have
official
announcement
about
the
oci
support.
So
we
can
start
the
deprecation
process
of
chinese,
but
we
will
have
a
discuss
with
alex.
A
Okay,
because
if
there
are
too
many,
maybe
we
can
like
get
some
feedback
from
the
community.
If
we
should
keep
it
around
a
bit
more
or
we
should
get
rid
of
it
sooner.
B
Yeah
yeah,
we
have
already
opened
the
discussion-
okay,
yeah
yeah,
but
we
review
wait
for
more
comments
on
that
and
and
based
on
the
comments
we
can
decide
when
we
should
do
the
application.
A
And
do
we
have
opened
like
discussion
like
the
one
we
did
for
the
2.6
requirements
or
it's
some
other
format.
B
A
So
we
we
can
get
more
informed
decision
when
we're
gonna
duplicate
it
completely
yeah,
I'm
sorry
for
my
voice
again:
okay,
great
I'm
gonna,
take
a
note
on
this
one
and
try
to
address
it.