Grafeas roadmap and general questions

[Balázs Gyurák]

Hello Grafeas maintainers,

My company and I are currently investigating Grafeas & Kritis for using it in our internal CI/CD pipelines. We are very interested to learn more about the short/long term plans. I have the following specific questions:

1. Are there any timelines for moving over the "v1" API, for both Grafeas and Kritis? Is this viable in the near future (2-3 months), or is it further down the line?
2. Is there a specific roadmap available for public consumption? I have read the last community update in this forum, but we'd be very interested to learn about the specifics of the two mentioned goals. We'd like to get a sense of the current state and the available resources of the project.
   
3. Could you please share more details about the on-prem Grafeas and on-prem Kritis? What does this mean exactly and how do you envision this? Would it be a fork, or a paid-for support model?
   
4. We are considering implementing Grafeas from scratch in the .NET ecosystem, and would potentially contribute it back to the community. Is this something you would consider? I know you are actively looking for contributions for the current implementation, but I'm not sure if you would like to include a completely separate implementation.
5. I've seen in this group that there were some community calls in the past - do you have something similar scheduled in the near future? If so, I would like to attend - will it be announced on this forum beforehand?

Thank you and the other contributors for your work on these tools - they are very promising and will fill a much-needed gap.

Thanks,

Balazs

[Aysylu Greenberg]

Hi Balázs,

Answers to your questions are inline below:

On Thu, May 28, 2020 at 8:44 AM Balázs Gyurák <ba3...@gmail.com> wrote:

Hello Grafeas maintainers,

My company and I are currently investigating Grafeas & Kritis for using it in our internal CI/CD pipelines. We are very interested to learn more about the short/long term plans. I have the following specific questions:

This is great to hear about your interest in Grafeas and Kritis!

 

1. Are there any timelines for moving over the "v1" API, for both Grafeas and Kritis? Is this viable in the near future (2-3 months), or is it further down the line?

There's currently not set timeline for v1 Grafeas and Kritis, and we definitely accept external contributions to help with this. It is something that we'd like to have, but I don't think it'll happen in the next 2-3 months, without external help.

 

1. Is there a specific roadmap available for public consumption? I have read the last community update in this forum, but we'd be very interested to learn about the specifics of the two mentioned goals. We'd like to get a sense of the current state and the available resources of the project.
   

Yes, here it is: link. It's from the latest talk on Grafeas and Kritis, at KubeCon San Diego 2019.

 

2. Could you please share more details about the on-prem Grafeas and on-prem Kritis? What does this mean exactly and how do you envision this? Would it be a fork, or a paid-for support model?
   

The on-prem Grafeas and Kritis are already available today: we publish images for both during our releases and the reference server implementation is ready for use. We do plan on making this available in hybrid cloud solutions as well, I'd recommend following Binary Authorization (proprietary Kritis) and Container Analysis API (proprietary Grafeas API). The goal is to ensure these can work seamlessly across the versions.

 

2. We are considering implementing Grafeas from scratch in the .NET ecosystem, and would potentially contribute it back to the community. Is this something you would consider? I know you are actively looking for contributions for the current implementation, but I'm not sure if you would like to include a completely separate implementation.

Yes, we'd be happy to have your contributions! I'd recommend keeping a separate GH repo for this, as we're working on splitting the reference server implementation from the API and the storage backends integration into separate repos. And we'd be happy to list your .NET implementation in our docs. If there are any other improvements that you make that you'd like to contribute to the Go implementation, these contributions are welcome!

 

1. I've seen in this group that there were some community calls in the past - do you have something similar scheduled in the near future? If so, I would like to attend - will it be announced on this forum beforehand?

We're in the planning phase for the next community call. The date is TBD but it'll definitely be announced on this mailing list (and also grafeas-users@ and kritis-users@), so please stay tuned.

 

Thank you and the other contributors for your work on these tools - they are very promising and will fill a much-needed gap.

Thank you so much for your kind words! I'm happy to hear you and your company are finding this useful.

 

Thanks,

Balazs

--
You received this message because you are subscribed to the Google Groups "Grafeas Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to grafeas-user...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/grafeas-users/ba7e4976-368a-4948-aa83-a82f5ee03dfe%40googlegroups.com.

[Balázs Gyurák]

Hi Aysylu,

Thanks so much for the detailed reply. We'll be in touch via GitHub if and when we are in a position to contribute.

Regards,

Balazs

To unsubscribe from this group and stop receiving emails from it, send an email to grafea...@googlegroups.com.