hackmd-github-sync-badge This document contains the notes from the CDEvents Working Group. Meeting Details Schedule APAC friendly Monday meetings are held at 11am UTC during summer time and at 12pm UTC during winter time). NA friendly Monday meetings are held at 3pm UTC during summer time and at 4pm UTC during winter time) Previous Years

hackmd-github-sync-badge This document contains the notes from the CDEvents Tools and Architecture Working Group. GitHub Repository Meeting Details Schedule Meetings are held every other Tuesday at 3pm UTC during summer time and at 4pm UTC during winter time).

Authors: Security reviewers: Table of contents MetadataSecurity links Overview Actors

Agenda in HackMD Zoom Link 24-July-2024 Attendees:Terry Cox, Bootstrap Agenda: Contributions to SIG The primary tasks remaining are:Populate the Community and References sections of the documentation with examples of best practice in action inside and outside the CDF community

HacmKD documents Quick links Logistics Meeting Recordings Agenda and Notes2024-07-18 Meeting 2024-07-04 Meeting (Cancelled) 2024-06-20 Meeting 2024-06-06 Meeting (Cancelled) 2024-05-16 Meeting (Cancelled)

Participants Jordan Goasdoué Mårten Svantesson Erik Landfors Archie Skeoch Minutes Election of chairMårten is reelected as chair for another term Tekton pipelines upgrade

Current Implementation at Opsmx: We are currently consuming events from CDs such as ArgoCD and Spinnaker and we get build events from Jenkins and Github Actions For Argo, Spinnaker and Github Actions, as there is no inherent support to send events in the CD events format, we do not use it for events For Jenkins, even though we do have a plugin that sends data in the CD Events format, it does not support sending a custom payload and to a sink of our choice, so we are using a custom implementation of Cloud Events to publish the event Vision: Current coverage of adapters available with CDEvents is limited, we intend to contribute towards improving it by implementing adapters. SSD at Opsmx requires integration with various CD Platforms and Scanning Platforms (Snyk, Trivy etc), due to which there can a good use case for implementation of CDEvents. Currently, SSD is only operating as a monitoring platform for events from various tools, which is one-way communication. SSD presents deployment firewall which presents the capability to interrupt the deployments based on security posture (derived from a set of policies). We intend to establish a cross-communication with CD Platforms to be able to interrupt the flow of pipelines in violation scenarios.

Participants Agenda Previous meeting Election of chair Tekton pipelines upgrade Introduction to jx3-versions integration tests Action items Roadmap

Participants Mårten Svantesson Jordan Goasdoué Archie Skeoch Minutes We discussed onboarding of Jordan and Archie as maintainers We will upgrade golang version We will upgrade tekton pipelines version When upgrade of tekton is done we will resume work on migration from our custom uses: task reuse mechanism to some native tekton pipeline mechanism.

Contributors: Andrea Frittoli References: GitHub Issue #168 Harbor Proposal Harbor Docs

Aim of this document is to map CDEvents subjects to GitOps: map CDEvents for specific platform such as ArgoCD and Flux identify GitOps events that have no corresponding one on CDEvents side (if any), and submit a proposal to add them to the spec ArgoCD Events Environment is an ArgoCD Cluster. Service is an ArgoCD Application. Subjects

hackmd-github-sync-badge This SIG meets every four weeks on Tuesdays at 3pm UTC during summer time and at 4pm UTC during winter time). See the CDF Public Calendar for zoom link and other meeting details. For older meetings please see our playlist on YouTube The SIG was initiated as a workstream under SIG Interoperability and its first meeting was held on June 8th 2020. Meeting notes for the workstream are managed on HackMD here, and published to GitHub here. Previous Notes SIG Events meeting notes from previous years can be found here:

Participants Tom Hobson Mårten Svantesson Minutes Tom is looking at switching to ESO for external secrets We brainstormed about the how to solve problems with quickstarts / pipeline catalog packsQuickstarts are not maintaned, especially because changes need to be tested manually It is hard to support different language versions of packs, especially in combination with other tools used (for example gradle / maven) since you need to create a separate for each variety. There is also the variation between building library and application. Somehow we would need pipelines to be composable while keeping ease of use We need to keep this in mind when continuing the work of removing support for the image: uses: syntax for reuse.

Contributors: Andrea Frittoli, IBM, UTC+1 Identify Continuous Delivery capabilities to be used as foundation component for the CD Reference Architecture. Current Art The starting point for this document is the work done by the SIG Best Practices, as well as capabilities identified by other groups and projects: SIG Best Practices:Reference Architecture Capabilities

HacmKD documents Quick links Logistics Agenda and Notes2023-03-09 Meeting 2023-02-23 Meeting 2023-02-09 Meeting 2023-01-12 Meeting 2022-12-22 Meeting - Cancelled 2022-12-08 Meeting

Artifacts in CDEvents Artifacts in CDEvents are described as the product of a build. The current artifact subject data model is: Field Type Description Examples id

Status: discussion Contributors: Andrea Frittoli Emil Bäckmark Ben Powell Evan Elms Summary CDEvents are generated by tools that are used in CD pipelines and, more generically, as part of the software lifecycle, from the concept, through production and consumption.

Meeting cancelled since nobody showed up Participants Agenda Kubernetes 1.25Previous meeting Roll out support in jx gitops upgrade for showing release notes Release PR: https://github.com/jenkins-x/jx3-versions/pull/3643 Action items

Reference/working material VSMI Reference Architecture VSM & CDF Joint Charter Open issues Data store Where to keep all data? Some data lake will be needed. Scope of VSM vs CDEvents

Participants Mårten Svantesson Tom Hobson Minutes Kubernetes 1.25Upgrade Tekton Deadlock in release processIt's not possible to upgrade components one by one to support k8s 1.25. Instead we are working on a manual PR with all needed changes. https://github.com/jenkins-x/jx3-versions/pull/3643 Rollout plan