Tuesday, 2025-05-20

daleeshello TC, could I request a topic update of channel #openstack-containers - the meeting time and frequency has changed, so please update to "Meeting: alternate Tuesdays @ 8AM UTC"01:16
daleesfor confirmation see meeting agenda etherpad, meeting notes and mailing list post.01:17
gouthamrhey dalees : someone from opendev-infra can help with that request (ping: fungi frickler)… you may also want to edit this: https://meetings.opendev.org/#Magnum_Team_Meeting02:03
gouthamrdalees: the source for that is: https://opendev.org/opendev/irc-meetings/src/branch/master/meetings/magnum-team-meeting.yaml02:03
opendevreviewMerged openstack/openstack-manuals master: Remove installation guide for openSUSE/SLES  https://review.opendev.org/c/openstack/openstack-manuals/+/94883402:04
gouthamrdalees: you could also request to be an operator on the #openstack-containers channel by editing https://opendev.org/openstack/project-config/src/commit/4ffb3a6cd88fa85c12ce3f02063210b4099305ed/accessbot/channels.yaml#L16302:07
gouthamrthat would let you set the channel topic etc by chatting with ChanServ02:08
gouthamrhere are some docs: https://docs.opendev.org/opendev/system-config/latest/irc.html02:09
opendevreviewOpenStack Proposal Bot proposed openstack/security-doc master: Updated from openstack-manuals  https://review.opendev.org/c/openstack/security-doc/+/95020702:12
daleesgouthamr: thank you for those links, I will update the meetings repo with the new info.04:09
fungitc-members: please see https://lists.openstack.org/archives/list/openstack-discuss@lists.openstack.org/thread/A7S24NMKOQZFXRAAEEYQX23S6UF4WML2/#A7S24NMKOQZFXRAAEEYQX23S6UF4WML2 as i mentioned last week. short notice but could be worth trying to squeeze into the agenda if possible12:51
gouthamrTy, I added it to the tc meeting last night13:40
fungiawesome, much appreciated14:15
JayFfungi: \o/ \o/ \o/ \o/ \o/14:26
fungitechnical implementation for that will be trivial. documentation updates will be the bigger amount of work, and communicating workflow changes (git commit -s) to our contributor community of course14:28
JayFyeah, CI validation that DCO was done will be crucial14:31
JayFdoesn't help that some projects used to -1 specifically for adding a DCO line even though it wasn't needed14:32
clarkbwe wouldn't do it in CI. We would have gerrit enforce it same as with the CLA today14:32
JayFGerrit enforcing it is in CI from a UX even if not an engineering perspective :D 14:35
JayFCI = robots telling us to be better :D 14:35
funginot ci, commits get rejected before they're even pushed15:00
funginot reported in the ui at all, reported in command-line error responses to the user15:00
fungithe ci system is not involved at all15:01
JayFah, nice, that's how it works in Gentoo15:07
*** ralonsoh is now known as ralonsoh_out15:08
fungias clarkb noted, it's the same as how the icla is enforced today, your push is refused if you haven't signed one and you just get the error back (from gerrit) during the git push15:10
JayFI believe back when I first openstack'd, it would let you push without CLA and some  robot fussed at you about it15:14
JayFbut that's long enough ago now that could just be a false memory15:14
fungiit's always been enforced at push, in the early days it was done with a gerrit group of who was approved to push and then we synced user ids from a launchpad team where volunters added people after checking icla agreement mssages manually15:16
fungilater gerrit added a cla enforcement feature and we tied that to gerrit's contact information form to do a backend api check to the foundation member database15:17
fungibut when gerrit dropped the contact filing feature we ceased checking that each cla matched up to a foundation membership (which was never required by the bylaws anyway)15:18
funginote that only deliverable repos for openstack were traditionally set to require a cla, some repos like infra ones allowed users with no cla to push15:18
fungipre-gerrit used the same launchpad team tied to permissions for pushing to lp's bazaar, which is why we ended up with that situation initially for the transition to gerrit15:22
JayFHonestly at this point I'm mainly impressed with how well you can recollect all this :D 15:23
fungiswitching our cla enforcement from the launchpad team sync to gerrit's cla feature was one of my first projects after moving from hp to foundation staff employment in 201315:24
noonedeadpunk`git commit -s` - I also wonder about quirks with IDE integrations15:43
clarkbIt is a common process for many projcets. I expect any IDE with git integration can add it15:44
fungienough big projects already require it (linux kernel, kubernetes, etc)15:44
fungii'd be surprised by any ide which had a problem with that15:45
noonedeadpunkyes, I know, which is sort of annoying to deal with15:45
noonedeadpunkas not all of them do it "right"15:45
noonedeadpunkand respect the author changes15:45
noonedeadpunk(maybe it's already fixed)15:45
noonedeadpunkok, it's probably fine now indeed15:48
noonedeadpunkso disregard :)15:48
JayFYou can also update git config to automatically do DCO15:48
JayF(git config --global format.signoff true)15:49
noonedeadpunkyeah, right, I jsut found that in man :D15:51
clarkbnote the note in the manpage15:57
clarkb"Note: Adding the Signed-off-by trailer to a patch should be a conscious act and means that you certify you have the rights to submit this work under the same open source license."16:02
gouthamrtc-members: a gentle reminder that we're gathering here for our weekly meeting in ~58 mins16:03
cardoeI’m in the Scottish highlands. Won’t make it. But ping on anything to review and I will when I am back at the hotel tonight.16:03
gouthamrcardoe: ack16:04
gouthamrenjoy your vacation!16:04
cardoeThanks!16:04
fungimake sure to have some irn-bru16:05
opendevreviewGoutham Pacha Ravi proposed openstack/governance master: Fix outdated info on the tc-guide  https://review.opendev.org/c/openstack/governance/+/95044616:50
* frickler needs to skip the meeting, too, sorry16:57
gouthamrfrickler: ack16:57
gouthamr#startmeeting tc17:00
opendevmeetMeeting started Tue May 20 17:00:14 2025 UTC and is due to finish in 60 minutes.  The chair is gouthamr. Information about MeetBot at http://wiki.debian.org/MeetBot.17:00
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.17:00
opendevmeetThe meeting name has been set to 'tc'17:00
gouthamrWelcome to the weekly meeting of the OpenStack Technical Committee. A reminder that this meeting is held under the OpenInfra Code of Conduct available at https://openinfra.dev/legal/code-of-conduct.17:00
gouthamrToday's meeting agenda can be found at https://wiki.openstack.org/wiki/Meetings/TechnicalCommittee17:00
gouthamr#topic Roll Call17:00
mnasiadkao/17:01
gouthamrnoted absence: c a r d o e,   s p o t z,   f r i c k l e r17:01
noonedeadpunko/17:01
gouthamrcourtesy ping: gmaan, gtema, bauzas17:01
gmaano/17:01
bauzashere but on another meeting 17:02
gouthamrwe've a smaller-than-usual crowd today.. lets get started 17:05
gouthamr#topic Last Week's AIs17:05
gouthamri don't think we took many.. 17:05
gouthamrwe spent a while discussion governance proposals on gerrit, and the discussion continued in the respective patches17:06
gouthamrthese have been updated, and could use reviews17:06
gouthamr#link https://review.opendev.org/q/project:openstack/governance+status:open (Open reviews on the governance repo) 17:07
bauzasack17:08
gouthamra couple of other AIs pertain to topics we're discussing today17:08
gouthamrcontributor experience, and the topic regarding ICLA/DCO17:09
noonedeadpunkAm I right that we never heard back from person who asked for quantum?17:09
fungii don't think they were asked any questions17:09
gouthamri did17:09
gouthamrprivately17:09
noonedeadpunkdid you get any responce17:10
gouthamri sent them an email 21 hours ago, stating this:17:10
gouthamr"A member of the OpenStack Technical Committee wanted you to comment17:10
gouthamron, or support this request with a "+1":17:10
gouthamrhttps://review.opendev.org/c/openstack/governance/+/949783/comments/087aa18a_d00f2fcf17:10
gouthamrWould you be able to do that? You would need to sign up for an account17:10
gouthamron https://review.opendev.org. If you're not comfortable doing that,17:10
gouthamrfeel free to share any insights on the mail thread, and we'll still17:10
gouthamrconsider it your position."17:10
gouthamrno response yet17:10
gmaannit irrespective of their response/question, proposed resolution is good way to give go ahead from us. 17:11
gmaanimplementation can be done now or later depends on need17:12
gouthamri was going to jinx by stating the same thing :) 17:12
gouthamrthis resolution has gathered enough RC votes to merge.. it was last updated a week ago17:13
gmaan++17:13
noonedeadpunkWell, I mean, won't it be weird situation to have a resolution and get stuck with it?17:13
gouthamrstuck with?17:13
noonedeadpunkas if we won't transfer control, it would be weird to have it17:13
gouthamryou mean if the person doesn't want this anymore?17:13
noonedeadpunkyeah17:13
gouthamrah, we17:13
gouthamrhave clarified the next steps17:13
JayFI think you all sometimes underestimate how much of a barrier it is to folks to signup for all the accounts needed to vote on a change in gerrit17:14
gmaanthan it can be used as approval/ref for future if anyone need17:14
gouthamrthey can delete the project if they wish17:14
JayFThat said, I would not take their lack of gerrit participation as a sign of disinterest17:14
clarkbJayF: not only that but what value does doing so add here? they already made the request why do they need to approve the request again?17:14
noonedeadpunkJayF: and reply to email thread they've started?17:14
JayFclarkb: ++17:14
gouthamrJayF: i didn't, which is why i suggested they just respond on the mail thread they started17:14
clarkbeven if they already had a gerrit account it feels superfluous17:14
JayFgouthamr: ah, I misread17:14
gmaanclarkb: ++17:14
fungiit's way more red tape than we went through when we handed over reddwarf a few months ago, fwiw17:15
gmaanresolution/merging it etc are internal way to support their request, we do not need them to re-confirm on multiple places17:15
fungiw're squatting tons of project names on pypi we never used, would be a pain to keep going through this for every one17:16
gouthamri agree, however, multiple people on the TC expressed the desire to formalize this.. and i respect that17:16
gouthamri don't know if we'd care about all of the other names the same way17:16
noonedeadpunkit's probably me spoiled by my wife who made her carrer at risk&abuse verifying customers and their requests for domain names transfers :D17:16
fungimaybe quantum is "special" in some way and we don't need to engage in this level of debate for other project names we're not using17:17
noonedeadpunkso I'm inventing smth which is totally unnecessary here17:17
noonedeadpunkyeah, right17:18
gouthamrany other AIs to discuss/17:19
gouthamrlets move on17:19
gouthamr#topic CLA to DCO17:19
gouthamr#link https://lists.openinfra.org/archives/list/foundation@lists.openinfra.org/thread/PXMTX67TRL2B4ONICTT2E2XZLG4J4LAL/17:19
gouthamrjbryce _may_ be here.. 17:20
jbrycei am!17:20
gouthamr#link https://developercertificate.org/ (Developer Certificate of Origin)17:20
gouthamrhey there jbryce17:20
gouthamr#link https://lists.openstack.org/archives/list/openstack-discuss@lists.openstack.org/thread/A7S24NMKOQZFXRAAEEYQX23S6UF4WML2/ ([tc][all] Moving from CLA to DCO for OpenInfra Contributions)17:21
gouthamrthis move comes to us from the LF transition discussions that have been occurring within the OpenInfra board for the past few months17:21
bauzaslooks to me a good change 17:22
gouthamrjbryce noted that the change would be part of the "broader transition into the Linux Foundation and could take effect starting June 1, 2025"17:22
gouthamrso we have a timeline too ^17:22
gouthamrttx pointed us to the old TC resolution to this regard17:22
gouthamr#link https://governance.openstack.org/tc/resolutions/20140909-cla.html 17:23
gmaanEven this was resolution for request from TC to board17:23
gouthamrbut, i don't have context of what happened between then and now to judge if we need to re-litigate this17:23
jbrycewhat we would need from the TC is a re-confirmation that the TC still wants to go this direction since it's been a decade plus. preferably in the next 2 weeks so we can make it effective June 117:23
gmaanand this time is coming from board which matches both side desire to move to DOC17:23
noonedeadpunkYeah, I think the question here not about switching or not, but how to do that in a most smooth for contributors way17:23
gmaanjbryce ++17:23
gmaanI think a new resolution  (confirming the board recommendation this time) can also be helpful as it provide way for community members to express their opinion as formal way (in favor or against)17:24
gouthamri don't think it can be smooth17:24
jbrycei think the main thing that has happened is that the DCO has a much longer history and the board was generally supportive of adopting it this time around17:24
funginote that the effective date would basically be permission to start the process of switching over on the tc/openstack's preferred timetable, it would not need to be an immediate cut-over17:24
bauzaswhile I'm fine with the move forward, I wonder about the interim period 17:25
gouthamrhow would it look if it wasn't an immediate cut-over?17:25
noonedeadpunkfungi: but can we distinguish DCO from CLA user in CI?17:25
fungici doesn't come into the picture17:25
fungiwe enforce it with gerrit permissions17:25
gmaanyeah17:25
noonedeadpunkoh, ok17:26
gouthamrJayF noted earlier that gerrit enforcement is CI according to the developer "UX" :D 17:26
noonedeadpunkso if no signed-off in commit message but user has signed CLA - it is fine?17:26
fungionce we have the all-clear to make the switch, we can start making people aware it's coming, prepare changes to documentation, and so on17:26
clarkbthe current Gerrit permission checks membership against the icla group. With DCO you configure gerrit to require the signed off by message footer in the commit message on push17:26
gmaanand it can be valid (I mean format for commit msg) from the new commits17:26
bauzasfungi: would it be transparent for our contributors ?17:26
noonedeadpunkliek gerrit will pass it?17:26
JayFbetter than CI if it gives feedback on push :D 17:26
jbryceas far as timing, ideally there would be a clean cutover where no one signs a CLA after May 3117:26
fungibauzas: no, contributors will need to use a different workflow (git commit -s or add a config option to their git tooling)17:26
clarkbnoonedeadpunk: no it would be one or the other in the requirement. I don't think you can express either is fine in gerrit17:27
clarkb(you can require one, the other, or both but not either)17:27
gouthamrjbryce: ah, makes sense.. a sunset date to grey out the ICLA17:27
noonedeadpunkso it will be immediate cut-off then17:27
bauzasAh, Signed-Off I see17:27
fungiwe would schedule a date to do that, it wouldn't be the same as the effective date we'd be allowed17:28
bauzasthen my main concern is again about the deadline we have 17:28
fungiwe have no deadline afaik17:28
noonedeadpunkI don't think we have a deadline17:28
noonedeadpunkor well, we can define that17:28
bauzascool then 17:28
gmaanonly question I have is, do we need to update existing in-progress commit with  Signed-Off ?17:29
noonedeadpunkso we have time to prepare docs, communication, etfc17:29
fungijbryce can correct me if i'm wrong, but we first need the "new" openinfra board under the lf to confirm it's acceptable (or not say it isn't) at their first meeting, though we've gotten tacit approval from the "old" board consistingof the same people17:29
noonedeadpunkIf it's gerrit ACL, I'd imagine that yes, if one needs to be updated17:29
clarkbgmaan: the enforcement is on push so I don't think so. The old code was pushed udner the cla and the new would be under the dco. But jbryce can clarify if there is a legal need to update17:29
fungigmaan: from what i understand, the tc can decide what timeline they want once we get confirmation that it's allowed17:30
fungithis isn't a deadline imposed from outside17:30
jbrycefungi: no the new governance docs do not require a cla so we don't need a policy update there. i discussed this with our existing counsel as well17:30
fungiokay, so as long as we wait for the old foundation to be dissolved we can do it any any point thereafter?17:31
jbrycegmaan: i think we can say it would be for contributions post May 31, not existing in process contributions17:31
gmaan++, that will be easy implementation then 17:31
bauzasah cool17:31
jbrycefungi: no it is not related to the delaware corp at all17:32
gouthamrnoob question: we'd enforce this on new patches to ongoing/open changes too?17:32
gmaanjbryce: maybe something we can explicitly state in board approval? or maybe in TC resolution if we push that17:32
fungiif this is still as discussed in the board meeting, we don't have to do the cut-over immediately though, we can continue accepting contributions under the old icla until th etransition has been completed, however long the tc wants that to take, correct?17:32
fungiso if they wanted it to be effective starting january 2026, for example, that would still be allowed?17:32
jbrycethere is no board approval required for it. it's really down to the projects to agree and implement17:32
fungi(not that i expect it would take that long)17:32
jbrycea january 2026 date would create challenges because we would have to create new CLAs and have contributors post june 1 sign them and then do a switch to dco later17:33
gmaanohk. then fine. 17:33
fungiwait, so it *does* have to be switched prior to june 1? that seems counter to what was presented previously17:34
fungithat doesn't really give any time to update documentation and notify contributors17:34
JayFJune ... 2025? Like in two weeks?17:34
noonedeadpunkthat can be problematic then as it's just 10 days to collect the feedback/agreement and prepare docs/recommendations17:34
gouthamrthe only doc i see that needs updating is this one:17:34
gouthamrhttps://opendev.org/openstack/contributor-guide/src/branch/master/doc/source/common/setup-gerrit.rst17:34
gmaanyeah, in 10 days17:34
bauzasyeah17:35
gouthamrwe've not called out CLA/ICLA anywhere else afaik17:35
fungithe technical implementation is simple, it could be done now (in a matter of hours anyway), but the human component is not trivial to change17:35
JayFgouthamr: And endless internal onboarding documentation which might refer to CCLA/ICLA17:35
bauzasthat's very short in time17:35
noonedeadpunkand sort out for orgs who signed CCLA17:35
jbryceyeah i know. unfortunately this is what we realized in the discussion last week. we will have to make a switch to handle the contributions going to a new entity for management17:35
noonedeadpunkand if /how they should legally approach changes17:36
* JayF == noonedeadpunk 17:36
jbryceso it's either new CLAs for the new entity or a switch to DCO (or both sequenced in whatever timeframe)17:36
JayFThis will require re-evaluation of contribution policies in some orgs17:36
gmaanI think once we update the doc/gerrit verification, communication can be done gradually for example, ask in cmt msg review if not done as per DCO17:36
JayFand so we should be very careful about taking rapid action17:36
clarkbgmaan: gerrit will not let you push unless you do it properly so there won't be anything to ask for in review17:36
mnasiadkaThat's actually an interesting aspect - because knowing legal reality - it might stop some orgs from contributing until they sort out the new reality...17:36
bauzasdo we really want to block proposals ?17:37
gmaanclarkb: perfect, then it is much easy to communiocate 17:37
fungiwhat is the legal risk of we don't make the june 1 deadline?17:37
noonedeadpunkclarkb: that's why I thought it would be done with zuul kinda, as usually sign-off is checked with some job / github action17:37
gmaanit is not block, it is a very easy thing to do. and many commit msg/developer already do the same17:37
fungithe "cut over" will be users getting errors when they try to push new changes or revisions to existing changes17:37
gouthamr#link  https://gerrit-review.googlesource.com/Documentation/user-signedoffby.html (Gerrit implementation doc)17:37
clarkbbauzas: noonedeadpunk: yes its actually an important feature aiui. This way you're only ever looking at content that you are able to accept in the first place17:37
fungierrors at the git command line (not ci/webui errors)17:38
clarkbit avoids awkward situations where something is pushed that you then have to pretend never existed17:38
JayFTen days is not enough time to allow downstream organizations to react, regardless of if we, upstream, can check all our boxes. Downstream orgs may have to re-engage legal or ospo and update internal documentation.17:38
jbryceis it possible to have multiple CLAs active in gerrit? where if someone has accepted the delaware corp version they can continue to contribute but if they haven't they would be presented with an new version for the new entity?17:38
noonedeadpunkyeah, right, I agree it's better overall17:38
fungiyes, the way gerrit's cla feature works is that as long as users have accepted *a* cla then can continue pushing patches, so they could contribute under the old icla or under a new icla. existing users who have the old icla agreed to would be able to keep pushing patches17:39
noonedeadpunkbut seems that reality is pointing towards support of check of either old CLA or DCO17:39
gmaanI feel this does not require much effort from developer when they push new change. 10 days are even enough to communicate in ML etc :)  Sometime, longer time make communication harder :)17:39
bauzasthat would be ideal17:39
noonedeadpunkgmaan: they may not be _allowed_ by internal policy / legal team17:39
JayFgmaan: not my current employer; but I have worked places where I'd have to restart a multi-week process to regain ability to contribute with this kinda change17:40
gouthamrto use the DCO?17:40
noonedeadpunkit's not that they can't do it17:40
noonedeadpunkgouthamr: to push patch outside fo the org17:40
gouthamrseems weird, all it says it, i accept whatever license that's on the file i'm editing17:40
jbryceok i can check if that is acceptable legally or if we would need pre-existing contributors to also sign a new CLA for the new entity17:40
gmaanIs it? I am not sure DCO are blocked by org.? but I might be wring17:40
gmaanwrong17:40
JayFgmaan: it's more about the conditions of contribution being laid out in detail in policy17:40
fungihowever, mixing cla and dco enforcement would require both (agreeing to a cla and adding signed-off-by to their commits)17:40
JayFgmaan: if the OSS contribution policy for openstack says "you can contribute as long as you are listed in the ccla", does that means I'm OK to use DCO? These are questions downstreams need to answer17:41
fungiso when we turn on dco enforcement it would make sense to turn off cla enforcement17:41
noonedeadpunkyou might be blocked by your contract as contributions are IP of the comany17:41
jbryceagree. if we implement dco, i would not want to mix it with CLA for a variety of reasons17:41
gmaanJayF: i see. 17:41
noonedeadpunkand CCLA could be treated by some as official agreement to push data to17:41
JayFnoonedeadpunk: that's /exactly/ how  it was treated at the place I'm thinking17:41
noonedeadpunkbut I'm not a lawyer, and not sure these lawyers are right, but I know that such things totally exist17:42
noonedeadpunkright17:42
JayFnoonedeadpunk: yeah, I agree with you on the vibe it seems like overkill, and isn't even an issue with my current job, but I think we'll freeze people out, especially with only 10 days notice17:42
gouthamrwe do have a list of CCLA and ICLA signers, can we send an email to each of them indicating this change? 17:42
gmaanJayF: but if it is coming from the OpenStack community, I feel it is under same umbrellas of following community way of doing the things instead of requiring a new legal check 17:42
gmaanunless istio past case of changing governance etc but that was a big change from other organization perspective 17:43
jbryceto summarize, it sounds like the timeline is too short to implement dco by june 1. i will check if we can require new entity CLAs from only net new contributors after June 1 or if we will need all contributors to agree to a new entity CLA even if they had previously agreed.17:43
noonedeadpunkI have no idea about my current job, for instance. by I do not all my contributions from the name of the org I'm affilated with... And I totally can do some personal contributions with DCA. But I might need approval from org that I can continue with DCA from their name17:44
fungii'm pretty sure we can hide the old icla when adding a new one, so that new users are presented the new one to agree to, but i would need to test that17:44
JayFjbryce: one thing that might also be wise: ensure foundation member companies/reps have done this downstream policy homework in their companies, as well, if that's a lever you can pull17:44
noonedeadpunkI'd say if we have to sign new CLA for all who signed old one - better go with DCO17:45
bauzasagreed 17:45
noonedeadpunkas both cases will be equally blockers 17:45
JayF++17:45
noonedeadpunkand DCO is just eaier/more wise choice overall17:45
fungithough to reiterate, if contributors can't contribute to openstack under the dco, then that likely precludes them from contributing to other popular dco-using projects (linux kernel, kubernetes, et cetera)17:45
bauzasyeah all is about the upgrade impact17:45
bauzasif we expect contributors workflow changes, then please request DCO rather than signing a new CLA17:46
noonedeadpunkfungi: it's more about time I guess. And no, k8s is not in the list of projects I can contribute to.17:46
gmaanyeah, downstream policy checks valid for new CLA also17:46
noonedeadpunkat least through affilation, not as a private person in my free time17:47
gmaanDCO makes things easy for developers as downstream checks 3etc17:47
gouthamrnoonedeadpunk: interesting, has that got anything to do with the kubernetes's licensing or contributor agreement? 17:47
jbrycenoonedeadpunk: i have to check with the lawyers to see if it's possible. i know the current CLA will cover past contributions, but not sure it will cover contributions to the new entity17:48
noonedeadpunkit6 has to do with an explicit list of organizations being maintained17:48
noonedeadpunkagain. I guess it won't be a problem after all, but it might need some time to get approvals17:48
noonedeadpunkand also we don't have the strictest rules from what I've heard17:49
JayFNone of it is hard with sufficient notice; the 10 days is what really makes it difficult.17:50
noonedeadpunk++17:50
gouthamrack, jbryce noted this conclusion, and took an AI17:50
jbryceyeah i also wish we would have realized this earlier17:51
gmaanmeanwhile in parallel, do we want TC to start the formal vote as part of resolution or so?17:52
noonedeadpunkmaybe we should start writing resolution regardless?17:52
gmaanyeah17:52
gouthamrhow would you resolve something that you've already resolved to?17:52
gouthamri mean, should we call out the CLA changes as well as the DCO enforcement in one go here?17:52
JayFgouthamr: the wording of that was very aspirational; a resolution with detail about how to migrate would be additional detail and valuable, I bet17:53
noonedeadpunkset a transition date of 1st of june :)17:53
gmaanold one is request to board about DCO approval but new one will make confirmation about current requst17:53
gmaanand more about transition dates etc17:53
bauzas+1 communication is key17:53
bauzasa resolution would be the first document 17:54
gouthamrack.. we can debate the date after jbryce follows up on this?17:54
noonedeadpunkit doesn't sound like there's much choice atm...17:54
fungibasically, users should update their workflow/configs asap, and then they won't get their pushes rejected on whatever cut-over date the tc decides on17:54
bauzasfwiw, we only have one TC meeting left before June 117:54
noonedeadpunkif we go with path of new CLA - then yeah, we can17:54
fungiand we can have documentation updates staged to merge at roughly the same time17:55
noonedeadpunk++17:55
JayFfungi: we might wanna communicate to projects to accept patches with the DCO signoff if that's the suggested path17:55
bauzasso I guess we need to work on that asap and probably async17:55
fungifair, i didn't know any projects were rejecting it, i've seen lots of users who clearly are just in the habit of doing it already17:55
gmaan++, yeah17:55
noonedeadpunkor having it in global git config :)17:56
bauzas(I personally have one week left as I'll take some time-off days before June)17:56
clarkbJayF: all of that is centrally managed and we don't need their intervention to apply it (even trhoguh normal review processes)17:56
gouthamryes, noone's rejecting it - its been happening in storage projects a while since we have ceph and kubernetes contributors setting a global git config17:56
bauzasthere are different concerns: one is about the workflow change, the other is company policy17:56
JayFclarkb: To be clear: I've seen, in the history of openstack, project reviewers -1 a patch with the only feedback being to remove the DCO signoff17:56
JayFclarkb: that's what I refer to 17:56
gouthamrahh17:56
gouthamrJayF: any examples17:57
fungiyeah, if anyone's leaving negative votes or refusing to review changes because they contain a signed-off-by, then we'd need them to know to stop doing that17:57
JayFI don't remember specifically, it's not the kind of interaction I'd *want* to remember specifics about tbh17:57
gmaanI think company policy is something applicable for both options (new CLA or DCO) so I am nt seeing that as blocker but yes it can impact ongoing development if company need mroe time to decide17:57
noonedeadpunkthese 2 are different legally17:58
gouthamrhttps://review.opendev.org/q/message:Signed-off-by+project:%5Eopenstack.*17:58
noonedeadpunkafaik17:58
bauzasI've seen a couple patches already 17:58
fungithough with the plan jbryce has suggested, if it can be confirmed acceptable, only new contributors would need their employer to review a different icla17:58
bauzaswith the tag 17:58
gouthamr(stephenfin obviously) 17:58
fungi(and only unyil we're ready for the dco switch)17:58
noonedeadpunkso if the policy is - what is not explicitly allowed is prohibited - you will get blocked17:58
noonedeadpunkyes, right17:58
noonedeadpunkit might be best option tbh17:59
bauzasthat would be *the less worst*17:59
noonedeadpunkwe jsut don't know if it's possible, so need to prepare to the worst one17:59
gouthamrtime check17:59
gouthamrgood discussion so far, and i think we have enough data to take next steps here, and an AI to dig further18:00
gmaanblocked you mean especially from company policy checks/time they need? 18:00
gmaanbcz from developer action to correct the commit is easy one18:00
bauzasthat would certainly need some proper onboarding period 18:01
bauzaseven for devs 18:01
gouthamralright, we're a bit over.. and we had several other agenda items we didn't cover.. I don't want to stop discussing this particular topic because it is an important one18:01
gmaando not want to say on behalf of org as each org has different process but it is unlikely that org will say NO to DCO18:01
gouthamrso please don't let meetbot's messages interrupt you18:01
gouthamrthank you all for attending today's meeting18:01
gouthamr#endmeeting18:02
opendevmeetMeeting ended Tue May 20 18:02:06 2025 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)18:02
opendevmeetMinutes:        https://meetings.opendev.org/meetings/tc/2025/tc.2025-05-20-17.00.html18:02
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/tc/2025/tc.2025-05-20-17.00.txt18:02
opendevmeetLog:            https://meetings.opendev.org/meetings/tc/2025/tc.2025-05-20-17.00.log.html18:02
mnasiadka I don't think anyone is saying it's going to be a problem, we rather need a mechanism to inform them of the changes - because every org has a different process of adapting to that change (internally)18:03
JayFTBH I'm a little worried it'll make us look like we don't know what were doing, from a governance perspective, to do a change this major with that small amount of notice or debate.18:04
JayFWe have a lot of governance infrastructure we ask folks to buy into and volunteer time for; it'll look like a failure of that infrastructure to make this big of a change in short notice.18:04
JayF(to be clear: I love the change; I've wanted this forever; but for a project that maintains API contracts forever; we're breaking a contributor API with <2 weeks notice)18:05
mnasiadkaWell, <2 weeks notice is not enough, surely - unless we can just accept old CLA/ICLA (for some reasonable amount of time) and require DCO only for new contributors18:07
gouthamr-1 on that thought, i don't think two weeks is short notice for individual developers.. most will shrug this off and do it in a second.. we should worry specifically about the legal implications grey area.. 18:07
JayFWe're not individual developers. This isn't a hobbyist project. Most of us contribute for pay, and have requisite downstream policies we have to follow while doing it. 18:08
fungithe other plan to replace the old icla only for new contributors would also be basically no worse than today, because the process is still effectively the same for them (new user has to agree to a cla anyway, and will agree to the one they're told to, which will be the one for the new org)18:08
gmaanmixing CLA is more problem and confusing then single shot transition 18:08
bauzasgouthamr: my concerns are about people not around and back on June 18:09
bauzasthat and indeed the company legal implications of a contractual change18:09
gouthamrbauzas: i don't think its a problem, they'll see that gerrit just rejected their change, panic and then read the communication18:09
gouthamrlegal yes18:10
gmaanbauzas: that is valid and for many part time contributors who are not so frequent contributors to community. 18:10
fungiwe need to double-check what the error message from git-review looks like, but i'm hoping it's fairly clear and when a user gets it they'll know to just `commit --amend -s` and retry18:10
gouthamr^ +!18:10
gouthamr^ +118:10
JayFThat kinda limited-frequency contributors are the people most likely to be burned by this; openstack-focused contributors are going to get their policy fixed :D 18:10
bauzasgouthamr: as gmaan said, we're now all full-time contributors18:10
JayFfungi: it's really, really clear if you implement it anywhere similarly to the branch protections on gentoo18:10
bauzasand we know a fraction of our community doesn't read emails18:10
gmaanwe need to communicate it more than ML/resolution. maybe be via PTL/project leaders in their IRC/meetings18:11
bauzaswhich is still a fraction of our community18:11
gouthamrfungi: you'd enforce this with gerrit's submit-requirements plugin, yeah?18:12
fungino, gerrit's dco enforcement option18:12
mnasiadkaThere are always people that don't read emails and don't attend meetings, I don't think we have a way to get that message to them in another way that dco enforcement on submit (and updates in contributor documentation - but they probably don't read that as well)18:13
* bauzas remembers old days of OpenStack Upstream Trainings at Summits and how difficult it already was to explain about the CLA 18:14
gmaansomething they will ready if they are submitting changes :)18:14
fungiwe would switch from https://review.opendev.org/Documentation/config-project-config.html#receive.requireContributorAgreement to https://review.opendev.org/Documentation/config-project-config.html#receive.requireSignedOffBy18:14
bauzassurely a gerrit enforced DCO would give them a shorter and easier to identify answer which is "I need to do something" than the current "I need to accept the ICLA" situation18:14
mnasiadka+118:15
bauzasbut again, don't forget the companies legal aspect, our contributors would be afraid of signing-off a DCO without getting a blessing from their employer18:15
JayF++ Yeah, I think the single dev experience is the easy case. My only logistical concern at all is around restrictive OSS policies, and limited-time contributors having that limited-time eaten up filing tickets against LEGAL in jira at $corp :D 18:15
bauzasjinxed18:16
JayFWhen bauzas and I agree so clearly, you know you're in trouble :D 18:16
JayFlol18:16
bauzaswe have Foundation members, that would be a first start 18:16
gouthamrfungi: "Sign-off is a line at the end of the commit message which certifies who is the author of the commit." -- so this would fail if its not alongside Change-Id - i.e., in the last paragraph18:16
clarkbI think you get a message like "not Signed-off-by author/committer/uploader in message footer" after looking at the gerrit code18:16
clarkbin the rejection message18:16
fungii think the gerrit documentation just has a typo, it enforces the presence of "Signed-off-by" rather than "Sign-off"18:17
JayFoh interesting, so this will have a change then for taking over patches18:17
JayFbecause we'll have to add an additional signoff18:17
JayFthat's a nice little side effect18:17
gouthamryes!18:18
gouthamrand gerrit UI edits must also somehow do this?18:18
fungiyes, the committer will need to add signed-off-by for themselves, it's typical to see that in other dco-using projects already18:18
JayF++ it's that way in Gentoo for sure, if I land someone elses patch it needs their+my DCO18:19
bauzasclarkb: fungi: tbc, only the commit msg header would be sufficient ? no need to accept the DCO somewhere else ?18:19
fungifooter, not header18:20
JayFDCO is signed everytime you do Signed-Off-By on a commit 18:20
JayFthere's no separate document or action18:20
clarkbbauzas: right the way the DCO works typically is a project would have the DCO listed somewhere prominently then say when you sign off by in your commits you are agreeing to the DCO18:20
JayFother than theoretically actually reading what the DCO says and mentally going "yep" before you signoff :)18:20
clarkband then commonly signed off by is tied to the DCO so that shouldnt' surprise anyone (but I think it is intentionalyl more vague so that you could use it to indicate something else)18:21
fungiwhen the original tc resolution was approved, markmc added this in the wiki: https://en.wikipedia.org/wiki/Developer_Certificate_of_Origin18:21
bauzasclarkb: the DCO would be staying somewhere in the project's repo .18:21
bauzas?18:21
fungier, wrong link18:21
JayFoh, that's a REALLY good point bauzas 18:21
clarkbbauzas: it would go somewhere. Maybe in the openstack contributor docs18:22
clarkbpossibly in each repo. I don't know exactly where18:22
JayFIdeally it'd be referenced in readme in each repo18:22
bauzasdon't we need each repo to communicate about that ?18:22
JayFbut that need not be a flag day thing18:22
bauzaseither thru a pointer or something else ?18:22
JayFbauzas: that actually make a lot of sense to me, becaues if gerrit tells you "do a signed-off-by", you don't know/read DCO, have you agreed to anything?18:22
clarkbhttps://docs.kernel.org/process/submitting-patches.html#sign-your-work-the-developer-s-certificate-of-origin this appears to be where the kernel puts it18:23
bauzasI'm indeed curious about the contract I'm about to sign off18:23
fungihttps://wiki.openstack.org/wiki/OpenStackAndItsCLA#The_Developer_Certificate_of_Origin was the url i meant to paste18:24
bauzasI can give a blank check because I trust the OIF but some people may want better explanations18:24
gmaanI think we do not need all project readme instead we need to update this which is pointed from the project contributor doc18:24
gmaanhttps://docs.openstack.org/contributors/common/setup-gerrit.html#individual-contributor-license-agreement-icla18:24
clarkbhttps://github.com/torvalds/linux/blob/master/Documentation/process/submitting-patches.rst that lives in there but is not in the readme18:24
gmaanproject side we have this doc linked https://docs.openstack.org/nova/latest/contributor/contributing.html18:24
bauzasyup18:24
bauzasI was thinking about the repo implications18:25
bauzasbut the contrib guide should save us :)18:25
fungioh, actually fontana added most of that wiki article, markmc just made some edits here and there18:26
gmaanI do not think we need to state that at repo level. any openstack contributors should start from what contrib guide has which is applicable for OpenStack as community /for all repo under openstack18:26
bauzasthat still leaves 10 days to file a patch to modify the contrib guide :)18:26
bauzasgmaan: yup, agreed18:26
bauzasI was afraid of any repo change but shouldn't be needed18:27
JayFStarting at the OpenStack contrib guide is def. not true in practice for most Ironic contributors, but we do link to it in places. I also suspect we're a bit of a snowflake in that we probably get more unique (e.g. not contributing to rest of openstack) contributors than most other openstack repos18:27
gmaanyeah, that is doable but main is when TC approve it officially so you can -7 days from today (if it need resolution to merge)18:27
JayFSo I'd suggest that Ironic add something; but I do think contributor guide is good enough from a "CYA" standpoint18:27
bauzasah fun, I don't have any CCLA listed in my Gerrit Agreements :)18:28
clarkbbauzas: the ccla is not tracked in gerrit (never was)18:28
clarkbthe icla operates as a proxy for the backend ccla management18:28
bauzassad I am18:28
fungiyeah, the ccla is handled manually by foundation executive management and various contributor company lawyers18:28
bauzasI was considering my 10-year experience of OpenStack as a personal IP :)18:29
fungither eis no public record, nor even a publicly-available copy of the ccla text18:29
bauzasand we expect such company-level agreements to be achieved in the next 10 days ? :)18:29
fungii suspect, but do not know for certain, that there may even be variations in the text of cclas for different companies18:30
clarkbI'm not a lawyer but my understanding here is the DCO is a much much lower bar and it is one that is quite common18:30
fungibauzas: there will be no ccla going forward18:30
clarkbso it isn't far fetched to think that most companies contributing would already be comfortable with the DCO and it should make contributing by individuals much easier18:30
clarkboverall this should work out better than requiring some form of cla for everyone18:30
fungithe plan, as it was presented anyway, is that the dco would replace the ccla+icla/usgcla documents18:31
bauzasclarkb: because OpenStack DCO = Linux DCO ?18:31
bauzasI mean the kernel one18:31
clarkbbauzas: yes my understanding is we would use the same DCO18:31
bauzasI see18:31
clarkbthe DCO originated with the linux kernel iirc, but now is regularly reused18:32
clarkbhttps://en.wikipedia.org/wiki/Developer_Certificate_of_Origin18:32
fungihttps://developercertificate.org/ is "the" dco afaik18:32
bauzasgotcha, yeah, it's versioned18:32
bauzasDCO 1.118:33
bauzasstupid question but does the current DCO match our current resolution about AI contributions ?18:34
fungiin what way?18:34
fungiin what way are you thinking it might not match, i mean?18:34
gmaanI think that is separate addition declaration for AI helped contribution. DCO is anyways a separate agreement for any contriobution 18:35
jrosserI need to be able to give a url to the lawyer that explains everything going on here in a way that looks official and  like an openstack policy doc18:35
jrosserI can’t start any approval for contributions under a new arrangement until that exists18:36
fungibauzas: i guess it's a philosophical question of whether using a tool (whether it's vim or chatgpt) to compose a contribution means that it was "created in whole or in part by me"?18:36
fungijrosser: so making sure the right details get incorporated into the tc resolution, you're saying?18:37
bauzasfungi: nothing specific in mind, I was wondering all the implications18:37
bauzasand I have no context yet about the current state we have (can't find the links yet) so I'll need to do some homework before continuing about that open thought18:38
jrosserI’m just saying without anything concrete to put in front of a lawyer people like me can’t even start getting an approval - and I would hope that contributor docs explaining the situation would be available for someone (like the lawyer) who has no context at all about openstack18:38
gmaanThe key things/time is when resolution will be merged? until then, it is difficult for anyone to present it to downstream for approval. 18:38
bauzasah, found it https://openinfra.org/legal/ai-policy18:39
bauzasgmaan: I assume my main concern is about the June 1 timeframe18:40
bauzasand what's changing there18:40
fungibauzas: my (admittedly not-a-lawyer) read is that if you couldn't contribute something under the dco because of our ai contribution policy, then you wouldn't be able to contribute it under the icla either. the assertions in both are effectively equivalent18:40
bauzasbecause the worst that I can imagine implies that we're ready to vote a written resolution by the next Tuesday meeting18:41
gmaanI am not much concerned about what changing but yes timeline can be/is a big challenge 18:41
gmaanI mean we know what changes will looks like18:41
bauzasand we would need to modify a substantial portion of our docs meanwhile18:41
gmaantrue18:41
gmaanand communication, because it will be issue if anyone just see their changes blocked next morning without any prior communication/discussion 18:42
gmaanit will be better, if we can float the discussion (formal approval) at least a week before18:43
gouthamri can take a stab at the resolution18:47
gouthamrlets put through formal review on gerrit and gather any thoughts on the change and the ML18:48
fungicorrecting my earlier statement, it looks like these days the ccla text is actually anonymously viewable by following the echosign link at https://openinfra.org/cla/ (not sure when that changed)18:48
fungialso i just heard that the foundation has not made exceptions for company-specific variances in the ccla text, to my surprise18:49
opendevreviewGoutham Pacha Ravi proposed openstack/governance master: [resolution] Replace CLA with DCO for all contributions  https://review.opendev.org/c/openstack/governance/+/95046320:41
gouthamrtc-members: please pitch-fork this.. ^20:42
opendevreviewGoutham Pacha Ravi proposed openstack/governance master: Clarify actions when no elections are required  https://review.opendev.org/c/openstack/governance/+/94943121:55
opendevreviewMerged openstack/governance master: fix prettytable deprecation warning  https://review.opendev.org/c/openstack/governance/+/94882522:03

Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!