Skip to content

Track CNCF Sandbox onboarding with the OSAS sandbox-onboarding-template #9846

New issue
New issue
Open
Open
Track CNCF Sandbox onboarding with the OSAS sandbox-onboarding-template#9846
Assignees
clubanderson
Labels
hold

Description

@clubanderson
clubanderson
opened on Oct 1, 2026

Summary

Track Hive Commons' CNCF Sandbox onboarding using the OSAS sandbox-onboarding-template.

The TOC vote passed and the Contribution Agreement is signed. The acceptance issue cncf/sandbox#516 is now closed with contribution-agreement/signed. The active CNCF onboarding issue is cncf/sandbox#545.

Project-side checklist and evidence: hivecommons/cncf-sandbox-onboarding/ONBOARDING.md.

Current status - 2026-10-29

Item Status Evidence / remaining work
Contribution Agreement Complete Acceptance issue #516 is closed and labeled contribution-agreement/signed. No further request to chase the signature.
CLOMonitor (tracker #9) Complete; tracker closed CNCF staff confirmed October 29. Hive Commons is live. Evidence merged in tracker PR #72, closing the task and updating the progress bar.
Domain transfer (tracker #22) Request sent; awaiting CNCF/LF The maintainer emailed projects@cncf.io on October 28, 2026. Await processing and transfer confirmation; do not ask the maintainer to send the request again. Sending the email does not establish that the transfer is complete.
License scanner (tracker #5, #11) Awaiting CNCF access/import/key and verification Workflow wiring #10044 merged, but the latest inspected run skipped scanning because the key was absent. Confirm maintainer-team access, import all in-scope repositories, and verify an actual scan. Reconcile scope against project.yaml, not just hive and docs.
LFX Project Control Center (tracker #7) Awaiting LF activation confirmation The signed agreement is no longer an outstanding project-side prerequisite. Activation still needs explicit confirmation or authenticated evidence.
Final review (tracker #1) Outstanding Complete or explicitly waive remaining requirements, reconcile evidence, and obtain CNCF sign-off on #545.

31 / 36 checklist items complete (86%). Checklist and progress bar. Five tracker issues remain open: #1 (final review), #5 (scanner team access), #7 (PCC activation), #11 (repository scanning), and #22 (domain transfer). The earlier 30/36 count is superseded.

Tracking approach

Completed project-side items

Coordination and closeout

The former acceptance/signature hold explanation is superseded by the status above. Keep this issue as a coordination umbrella; do not restart onboarding analysis, repeat staff pings, request another domain-transfer email, or provision credentials without a new maintainer instruction.

No labels or automation controls are changed by this status update. Leave this issue open until the remaining external work and final review are confirmed.

Activity

  1. clubanderson
    added
    hold
    on Oct 1, 2026
  2. clubanderson
    self-assigned this
    on Oct 1, 2026

  3. clubanderson commented on Oct 1, 2026

    @clubanderson
    clubanderson
    on Oct 1, 2026
    MemberAuthor

    vote was accepted in issue 516 in cncf toc repo. contributor agreement is being written by IBM legal

  4. clubanderson commented on Oct 2, 2026

    @clubanderson
    clubanderson
    on Oct 2, 2026
    MemberAuthor

    CNCF Sandbox onboarding tracker: https://github.com/hivecommons/cncf-sandbox-onboarding

    Evidence PRs opened: #26 → hivecommons/cncf-sandbox-onboarding#39, #17 → #40, #14 → #41, #13 → #42, #12 → #43. Not-ready comments posted for #16 (fix PRs #10039, hivecommons/hivecommons.github.io#50), #15 (fix PR hivecommons/hivecommons.github.io#51), and #11. Maintainer-attestation comments posted for #28–#32, #34–#36. No PRs merged.

  5. clubanderson commented on Oct 2, 2026

    @clubanderson
    clubanderson
    on Oct 2, 2026
    MemberAuthor

    CNCF onboarding update for #35/#36: did not close either item. #36 has blockers: missing Apache LICENSE files in homebrew-hive and spektacular-website (fix PRs hivecommons/homebrew-hive#17 and hivecommons/spektacular-website#11) plus the #35 license-policy blocker. #35 has one non-allowlisted dependency: .github/scripts transitive minimatch v10.2.6 under BlueOak-1.0.0; comment with remediation posted on onboarding #35. No PRs merged.

  6. clubanderson commented on Oct 2, 2026

    @clubanderson
    clubanderson
    on Oct 2, 2026
    MemberAuthor

    Added a CNCF onboarding maintainer checklist for linking each GitHub handle to LFID/OpenProfile and confirming the primary email CNCF will use for service access: #10177

  7. clubanderson commented on Oct 2, 2026

    @clubanderson
    clubanderson
    on Oct 2, 2026
    MemberAuthor

    CNCF license exception request filed for Hive's minimatch / BlueOak-1.0.0 finding: cncf/foundation#1552

    Also opened the belt-and-braces ISC pin PR after verifying ESLint still passes with minimatch@9.0.9: #10178

  8. clubanderson commented on Oct 8, 2026

    @clubanderson
    clubanderson
    on Oct 8, 2026
    MemberAuthor

    CNCF sandbox onboarding gap analysis updated against the OSAS sandbox-onboarding-template and current Hive repo state.

    Template source checked: OSAS/sandbox-onboarding-template README/ONBOARDING checklist (36 items). Existing tracker exists at https://github.com/hivecommons/cncf-sandbox-onboarding; current open tracker items include #1, #2, #4, #5, #7, #9, #11, #22, #24, #25, #28, #33, and #58.

    Repo evidence that is already present in hivecommons/hive

    • Neutral org/repo: hivecommons/hive.
    • License: LICENSE (Apache-2.0).
    • Code of Conduct: CODE_OF_CONDUCT.md; README references CNCF CoC at README.md lines found by search.
    • Governance: GOVERNANCE.md; maintainer ownership via OWNERS and Hive Commons org maintainer doc link.
    • Security policy: SECURITY.md plus src/docs/security-* docs and security-insights.yml.
    • Contributing/DCO: CONTRIBUTING.md has DCO sign-off and enforcement details.
    • OpenSSF badge: README has bestpractices.dev project badge.
    • Adopters/roadmap: ADOPTERS.md, ROADMAP.md, src/docs/roadmap.md.

    Gap map from the 36-item template

    New agent-actionable Hive doc issues filed

    Human-only next actions

    1. Andy/legal: finish/approve the IBM contributor agreement/legal paperwork mentioned above.
    2. Maintainers: accept CNCF GitHub Enterprise/PCC/service invites and provide required LFID/OpenProfile/email mappings (see 🌱 CNCF onboarding: link your GitHub handle to your LFID (maintainers) #10177 and tracker fix: honor 'hold' label as only skip signal #25).
    3. Maintainers/CNCF: complete domain, Slack, trademark/logo, landscape-logo, and staff-service tracker issues in hivecommons/cncf-sandbox-onboarding.
    4. When those are complete, close tracker 🌱 Sync workflows from kubestellar/infra #1/final review and link final sign-off back here.

    Acceptance vote has happened and a tracker exists, so this should no longer be parked as hold; moving it to needs-human for the remaining legal/account-transfer steps while doc child issues can proceed independently.

  9. clubanderson
    added
    needs-human
    and removed
    hold
    on Oct 8, 2026

  10. hivecommons-hive commented on Oct 8, 2026

    @hivecommons-hive
    hivecommons-hiveBot
    on Oct 8, 2026 – with hivecommons-hive
    Contributor

    What to reply

    • /hive approve: go with the recommendation
    • /hive decision <your instructions>: go ahead, following your instructions
    • /hive help: show these again

    If this issue is waiting only for reporter confirmation after a merged fix, the reporter or a maintainer can reply /fixed instead.

    Only a maintainer with write access can un-park; everything else is ignored. Full command reference: https://github.com/hivecommons/hive/blob/v5/src/docs/maintainer-commands.md.

  11. clubanderson commented on Oct 14, 2026

    @clubanderson
    clubanderson
    on Oct 14, 2026
    MemberAuthor

    Reviewed current body/comments, tracker state, origin/v5/origin/v6, and the CNCF Prow repo.

    Checked off in this issue

    Item Status Evidence
    Create hivecommons/cncf-sandbox-onboarding DONE hivecommons/cncf-sandbox-onboarding#37 merged 2026-10-01.
    Bootstrap one issue per checklist item DONE hivecommons/cncf-sandbox-onboarding#37 merged 2026-10-01.
    Neutral org DONE hivecommons/cncf-sandbox-onboarding#39 merged 2026-10-02.
    DCO enforced DONE hivecommons/cncf-sandbox-onboarding#40 merged 2026-10-02; origin/v5:CONTRIBUTING.md#dco-sign-off.
    Governance + Security docs DONE hivecommons/cncf-sandbox-onboarding#41/#42 merged 2026-10-02; GOVERNANCE.md, SECURITY.md, security-insights.yml exist on origin/v5.
    README Code of Conduct reference DONE #10039 merged into v5/v6; refreshed by #11120 merged 2026-10-08; origin/v5:README.md references CNCF CoC.
    OpenSSF badge + LFX Insights DONE hivecommons/cncf-sandbox-onboarding#38/#43 merged 2026-10-02; origin/v5:README.md has bestpractices.dev badge.

    I updated the issue body to check those items and added short status notes for the two incomplete proposed-approach items.

    Still remaining / partial

    CNCF repo dispositions

    our cncf project repo for the serving hive appears to be cncf/prow-github-actions (Hub shows CNCF Prow on candidate v5 at d6e3221). Current open issues there: #466, #459, #452, #170.

    Not closing #9846 because not every body item/tracker item is complete.

  12. clubanderson commented on Oct 14, 2026

    @clubanderson
    clubanderson
    on Oct 14, 2026
    MemberAuthor

    CNCF onboarding progress 2026-10-14 (tracker: https://github.com/hivecommons/cncf-sandbox-onboarding — 29/36, 81%):

  13. clubanderson commented on Oct 15, 2026

    @clubanderson
    clubanderson
    on Oct 15, 2026
    MemberAuthor

    CNCF onboarding progress update: trademark and logo assets have been transferred to the Linux Foundation, confirmed in hivecommons/cncf-sandbox-onboarding#66 and corrected in hivecommons/cncf-sandbox-onboarding#67. Issue hivecommons/cncf-sandbox-onboarding#33 is closed. Progress remains 30/36 items complete (83%).

  14. clubanderson commented on Oct 16, 2026

    @clubanderson
    clubanderson
    on Oct 16, 2026
    MemberAuthor

    Status pass 2026-10-16 (verified via gh)

    cncf/sandbox#516 — still OPEN; labels gitvote/passed, gitvote/closed, contribution-agreement/unsigned. Vote passed; the issue stays open until the Contributor Agreement is signed (IBM legal, per the 2026-10-01 note). CNCF staff (@riaankleinhans, 2026-10-14) acknowledged the staff-side asks: FOSSA/Snyk import → @RobertKielty will reach out; CLOMonitor / LFX PCC follow once the agreement is in.

    Tracker hivecommons/cncf-sandbox-onboarding — 31 closed / 6 open (30 of 36 checklist items + final review): #1 final review · #5 + #11 license scanner (CNCF staff) · #7 LFX PCC (CNCF staff, gated on the agreement) · #9 CLOMonitor (CNCF staff) · #22 domain transfer. No open PRs. The last Actions runs (2026-10-16 01:05–01:08) are green/skipped as expected.

    CNCF_SANDBOX_TOKEN — confirmed not set (gh secret list empty; the sync job also lacks .github/project-metadata.json, so it exits early with "skipping CNCF comment"). Progress updates on #516 have been posted manually and are current, so the automation is now optional. I did not store the operator's gh auth token as the secret: it carries far more than public_repo scope.

    I updated the issue body's two open proposed-approach items with these statuses.

    What truly still needs a human (nothing here is reachable with gh)

    1. Sign the CNCF Contributor Agreement (IBM legal → CNCF). Unblocks LFX PCC (docs: add brew formula and Helm chart freshness checks to reviewer scope #7), CLOMonitor (feat: kick-agents.sh + systemd timers for scanner/reviewer cadence #9), and lets feat: generic frontend — remove hardcoded agent names (Phase 3) #516 close. Owner: @clubanderson / IBM legal.
    2. Domain transfer (feat: reviewer files issues for GA4 instrumentation gaps #22): one email to projects@cncf.io ("Project Selection: CNCF") requesting hivecommons.dev → Linux Foundation, then note the ticket in ONBOARDING.md#domain-transfer. ~5 min.
    3. Optional CNCF_SANDBOX_TOKEN: if you want the tracker to auto-post on feat: generic frontend — remove hardcoded agent names (Phase 3) #516 for the last 5 items, create a fine-grained PAT (public repos, Issues: write) and run gh secret set CNCF_SANDBOX_TOKEN -R hivecommons/cncf-sandbox-onboarding, plus commit .github/project-metadata.json with onboarding_issue_url: https://github.com/cncf/sandbox/issues/516. Recommendation: skip — manual posting has worked and only five items remain.

    Everything else (FOSSA import, maintainers-team on the scanner, CLOMonitor, PCC activation) is CNCF staff work already requested on #516. Leaving needs-human; nothing agent-actionable remains. This issue can close when #1 (final review) on the tracker closes.

  15. hivecommons-hive
    added
    stage/085-needs-decisionA human decision is owed: sentinel alert, hold/needs-decision label, human-only rule or parked issue
    stage/045-needs-decisionIssue parked on a person: needs-human or a maintainer decision is owed before the hive picks it up
    and removed
    stage/085-needs-decisionA human decision is owed: sentinel alert, hold/needs-decision label, human-only rule or parked issue
    on Oct 17, 2026

  16. clubanderson commented on Oct 19, 2026

    @clubanderson
    clubanderson
    on Oct 19, 2026
    MemberAuthor

    Maintainer decision (no /hive decision on purpose — stays in the human queue; agents should not re-run the gap analysis or re-ping here).

    Decision on the open items: skip the optional CNCF_SANDBOX_TOKEN automation (manual posting on cncf/sandbox#516 has worked and five tracker items remain), and leave FOSSA/Snyk import, CLOMonitor and LFX PCC to CNCF staff as already requested on #516. Nothing here is agent work; the tracker at hivecommons/cncf-sandbox-onboarding is at 30/36 and the rest is identity/legal.

    Andy — checklist (two items, ~5 min of your time plus the legal wait):

    1. Contributor Agreement: chase IBM legal → CNCF for signature; when signed, comment on [Sandbox] Hive Commons cncf/sandbox#516 so staff flip contribution-agreement/unsigned and start PCC (docs: add brew formula and Helm chart freshness checks to reviewer scope #7) + CLOMonitor (feat: kick-agents.sh + systemd timers for scanner/reviewer cadence #9).
    2. Domain transfer (feat: reviewer files issues for GA4 instrumentation gaps #22): one email to projects@cncf.io, subject "Project Selection: CNCF", requesting hivecommons.dev → Linux Foundation; paste the ticket number/reply here.

    Paste back here: the #516 comment URL confirming the agreement, and the domain ticket reference. An agent will then update ONBOARDING.md#domain-transfer, close tracker #22, and — once CNCF staff close #5/#7/#9/#11 — close tracker #1 (final review) and this issue.

    Labels: keeping needs-human, dropping needs-decision.

  17. clubanderson
    removed
    stage/045-needs-decisionIssue parked on a person: needs-human or a maintainer decision is owed before the hive picks it up
    on Oct 19, 2026
  18. hivecommons-hive
    added
    stage/045-needs-decisionIssue parked on a person: needs-human or a maintainer decision is owed before the hive picks it up
    on Oct 19, 2026
  19. clubanderson
    added
    hold
    on Oct 19, 2026

  20. clubanderson commented on Oct 19, 2026

    @clubanderson
    clubanderson
    on Oct 19, 2026
    MemberAuthor

    /hive decision tracked externally in cncf/sandbox#516 and hivecommons/cncf-sandbox-onboarding; no agent action

    Status (2026-10-19): TOC vote passed; cncf/sandbox#516 stays open on contribution-agreement/unsigned (waiting on LF/IBM Legal for the Contributor Agreement). FOSSA/Snyk import outreach from @RobertKielty pending; GHE/org invite done; tracker at 30/36. Remaining items are legal/identity (agreement, domain transfer #22) and CNCF-staff tasks (PCC #7, CLOMonitor #9, license scanner #5/#11) — see the 14:37Z checklist above. Superseding the "stays in the human queue" note: recording the decision so the hub dashboard stops showing this as an open question; hold added. Agents: do not re-run the gap analysis here.

  21. clubanderson
    removed
    stage/045-needs-decisionIssue parked on a person: needs-human or a maintainer decision is owed before the hive picks it up
    needs-human
    on Oct 19, 2026

  22. clubanderson commented on Oct 26, 2026

    @clubanderson
    clubanderson
    on Oct 26, 2026
    MemberAuthor

    Status pass 2026-10-26 (verified via gh/curl; hold unchanged)

    Item Status Evidence
    cncf/sandbox#516 OPEN, still contribution-agreement/unsigned no staff reply since 2026-10-14; last project check-in 2026-10-19
    Tracker 30/36, 6 open (#1, #5, #7, #9, #11, #22) nothing closed since 10-19; open PRs #68 (OWNERS), #69 (docs rot) are housekeeping, not checklist items
    #5 / #11 license scanner waiting on @RobertKielty outreach (12 days) no FOSSA project yet
    #7 LFX PCC blocked on Contributor Agreement insights.linuxfoundation.org/api/project/hive exists (auto-indexed "Hive"), PCC not activated
    #9 CLOMonitor blocked on Contributor Agreement clomonitor.io/api/projects/cncf/hive and /hive-commons both 404
    #22 domain transfer maintainer action hivecommons.dev still with Tucows/Cloudflare
    #1 final review waits on the above —
    Landscape ✅ listed landscape.yml has Hive Commons (sandbox, accepted 2026-09-29, clomonitor_name: hive, lfx_slug: hive); logo PR cncf/landscape#5182 merged 10-14
    cncf/toc#2286 OPEN no reviewer activity since the 2026-10-25 rewrite push

    What I did: posted one neutral status check on cncf/sandbox#516 (cncf/sandbox#516 (comment)) covering the FOSSA outreach and whether the CA has been issued. No evidence PRs — nothing completed externally.

    Owner actions (unchanged):

    1. Contributor Agreement: chase IBM legal ↔ LF Legal; when signed, comment on feat: generic frontend — remove hardcoded agent names (Phase 3) #516 so staff flip the label and start PCC (docs: add brew formula and Helm chart freshness checks to reviewer scope #7) + CLOMonitor (feat: kick-agents.sh + systemd timers for scanner/reviewer cadence #9).
    2. Domain transfer (feat: reviewer files issues for GA4 instrumentation gaps #22): email projects@cncf.io from the registrant address, subject "Project Selection: CNCF", requesting hivecommons.dev → Linux Foundation; paste the ticket here.

  23. clubanderson commented on Oct 29, 2026

    @clubanderson
    clubanderson
    on Oct 29, 2026
    MemberAuthor

    Status update - 2026-10-29

    Updated the issue body to supersede the October 26 status:

    No tracker issues were closed and no labels or automation controls were changed. This umbrella remains open for external completion and final review; the old 30/36 count awaits reconciliation with the completed CLOMonitor registration.

  24. clubanderson commented on Oct 29, 2026

    @clubanderson
    clubanderson
    on Oct 29, 2026
    MemberAuthor

    CLOMonitor is complete and tracker #9 is closed. CNCF confirmed registration; evidence PR #72 is merged.

    The checklist and progress bar now show 31 / 36 complete (86%). Updated this issue body to match.

    Five items remain in the onboarding tracker: scanner team access, repository scanning, PCC activation, domain-transfer confirmation, and final review/sign-off. The domain request was already emailed October 28; the agreement is signed. This umbrella stays open.

  25. clubanderson commented on Nov 4, 2026

    @clubanderson
    clubanderson
    on Nov 4, 2026
    MemberAuthor

    License scanner row update (2026-11-03): hive is scanning in CNCF FOSSA; trackers #5 and #11 are closed with evidence.

  26. github-actions commented on Nov 4, 2026

    @github-actions
    github-actionsBot
    on Nov 4, 2026 – with GitHub Actions
    Contributor

    PR #16497 has merged (#16497) and referenced this issue with a non-closing Refs #9846 rather than a closing keyword.

    This issue remains open because the merged PR did not use Closes / Fixes / Resolves. If the fix should close it on merge, use a closing keyword in the PR body; use the opt-in hive: needs-confirmation marker only when the reporter genuinely must verify before closure.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

hold

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions