Jumping back up thread:

We don't have a blanket CLA policy for the CDF - we allow projects to choose what they want. The LF has tooling in place (EasyCLA) to make it easy for projects to use a CLA if they choose (Tekton uses this for example). Jenkins X and Spinnaker on the other hand, do not use CLAs. As far as recommendations/reasons to use one or not use one - we'd need to ask LF/corporate legal teams for their recommendations.

Repo access controls are now a bit easier - thanks Brian! We could setup automation on this (check out how Tekton does this: https://github.com/tektoncd/community/tree/master/org), but it may be overkill. 

Dan Lorenc

On Tue, Jul 7, 2020 at 2:57 PM Tara Hernandez <tarahernandez@...> wrote:

Damn, had forgotten all about those (so, yay for me adding it to the notes against that eventuality)

:)

I don't have a list of repos per se,  this was more around a general policy question that arose out of another discussion -- do we have any kind of consistent policy or recommended best practice for our projects with regards to CLAs and should the CDF be handling that on behalf of the projects.  Put another way, is there a reason NOT to just do it everywhere?  

The second item also came up during that discussion because we realized the CDF repos were pretty locked down and nobody seemed to have admin access other than Dan (and now Brian), so getting some teams and roles in there would be lovely.

On Tue, Jul 7, 2020 at 6:07 AM Dan Lorenc <dlorenc@...> wrote:

Tara had a couple TOC agenda items for today:

• [tara] Need a CLA or similar for ambassadors/contributors to clarify contributions from individuals vs. corps 

Tara, could you clarify which repos you'd like to get the CLA setup on? We should be able to use EasyCLA for this.

• [tara] TOC should define teams/policies around github org access

I agree here. +Brian Warner - do you have the admin permissions on github.com/cdfoundation? Would you mind adding me so I can setup teams/permissions?

Dan Lorenc

--

Tara Hernandez

Engineering Manager Google Cloud