-
Notifications
You must be signed in to change notification settings - Fork 66
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
private-distributors-list: add DaoCloud #180
Comments
+1 to be added @neolit123 (VMware) |
+1 @ritazh (Microsoft) |
ack |
@kubernetes/security-response-committee any update? |
I haven't forgotten, just haven't had time to update distributor requirements. |
Updated some new approvers/reviewers in Kubernetes Community from DaoCloud. |
@kubernetes/security-response-committee ACK |
The Kubernetes project currently lacks enough contributors to adequately respond to all issues. This bot triages un-triaged issues according to the following rules:
You can:
Please send feedback to sig-contributor-experience at kubernetes/community. /lifecycle stale |
/remove-lifecycle stale |
@enj do we have any new requirements for being in the private distributor list? So I can evaluate them and add them to our action items. |
Actively monitored security email alias for our project: kubernetes-security@daocloud.io
1. Be an actively maintained and CNCF-certified distribution of Kubernetes components.
DaoCloud is in the list of https://www.cncf.io/certification/software-conformance/
Certified Kubernetes - Installer
part of the page above.2. Have a user base not limited to your own organization.
Yes
3. Have a publicly verifiable track record up to the present day of fixing security issues.
4. Not be a downstream or rebuild of another distribution.
No.
5. Be a participant and active contributor in the community.
https://k8s.devstats.cncf.io/d/9/companies-table?orgId=1
DaoCloud ranks 7th in kubernetes community contributions in history, and top 5 if only counting recent 3 years.
Some of the active contributors from DaoCloud in the community:
Besides code contributions, we also organized several KCD and KCS in China including KCS China 2023, KCD Beijing 2021&2023, KCD Shanghai 2021&2024, KCD Chengdu 2022 and KCD Shenzhen 2023. @pacoxu is the co-chair of KubeCon China 2024.
Most of the SIG maintainer talks in KubeCon China 2023 are by DaoClouder, including SIG-Scheduling, SIG-Node, SIG-Instrumentation, Kubespray, KWOK sessions.
BTW, we also try to maintainer kube lts version in https://github.com/klts-io/kubernetes-lts for an extended period, and it is open-source and only focus on high value CVEs currently.
6. Accept the Embargo Policy.
Yes.
7. Be willing to contribute back.
yes
8. Have someone already on the list vouch for the person requesting membership on behalf of your distribution.
VMware and Microsoft below.
More information can be found in https://github.com/DaoCloud (we add more information about projects that were founded or maintained by DaoClouder there), https://www.daocloud.io/en/ and https://docs.daocloud.io/en/.
The text was updated successfully, but these errors were encountered: