TSC Meeting (04 Jan 2022): New StackStorm-Exchange, v3.7.0 Planning

[arm4b]

January 2022 @StackStorm/tsc 1 hour planned meeting: Tuesday, 04 Jan 2022, 09:30 AM US Pacific.
See #33 for more info about how to join.

TSC Meeting Host: @armab

Meeting Agenda

New StackStorm-Exchange demo by @cognifloyd

• StackStorm-Exchange CI was refactored by migrating from CircleCI to GH Actions [RFC] Use Github Actions for StackStorm-Exchange CI and Maintenance #63
• Led by @cognifloyd, he'll show demo w benefits, changes, corner cases, security, progress, and outcomes behind the new Exchange.

StackStorm v3.7.0 release planning

• Release Manager & Assistant: WHO from @StackStorm/maintainers?
• Target month?
• Project & Roadmap: https://github.com/orgs/StackStorm/projects/23
  • New feature: Disable/Enable st2 content on load: Add support for overridding whether resources are enabled st2#5506 by @amanda11
  • Problem: py3.6 is EOL in Dec 2021: used in EL7, EL8, U18
  • CentOS 8 EOL end 2021 #88 plan:
    • Agree which distro we'll use: RockyLinux or AlmaLinx or Oracle Linux as a replacement for CentOS8.
    • @StackStorm/tsc to do the homework and have opinions/data about the distro we'll use for producing EL8-compatible artifacts, as well as testing and CI/CD/releases.
  • ChatOps: what's the st2chatops state and problems with the new Slack API?
  • anything else?

Brainstorming: StackStorm Maintenance & Security

• Discuss security tasks/ideas in the project: https://github.com/orgs/StackStorm/projects/25

[arm4b]

Participants

Attendees:

• @StackStorm/maintainers: @armab @amanda11 @m4dcoder @winem @cognifloyd @nzlosh
• @StackStorm/contributors: @arms11 @rush-skills & more new community folks
• Thanks everyone for joining!

Meeting Minutes

Demo: StackStorm-Exchange refactoring by @cognifloyd

• Original RFC Discussion: [RFC] Use Github Actions for StackStorm-Exchange CI and Maintenance #63
• @cognifloyd did a demo guiding us through the StackStorm-Exchange CI/CD changes
• CircleCI was replaced by GH Actions
  • better model: instead of pushing to Exchange-index (before), Exchange CI is now pulling changes via cron task from all the packs and then regenerating the index
  • caveat to keep in mind: index regeneration happens every ~20mins as GH Actions doesn't guarantee every 5mins cron execution/scheduling. Already in production, no complaints so far.
  • enhancement: better security
    • every pack CD repo doesn't have write access to the Exchange index repo
    • outside pack maintainers can't do SSH debugging like it was in CircleCI
• Thanks to @lm-ydubler for the assistance
• Thanks @winem for the reviews
• WIP: A workflow for automatic onboarding new pack into Exchange:
  • instead of doing it manually, the new workflow is an automation effort based on GH Actions 👍
  • pack bootstrap workflow StackStorm-Exchange/exchange-incubator#172
  • Needs more 👀 from @StackStorm/tsc and @StackStorm/maintainers

StackStorm v3.7.0 release planning

• Project: https://github.com/orgs/StackStorm/projects/23
• (Tentatively) Release Manager: @cognifloyd
• (Tentatively) Approx Release Target date: March 2022
• Still looking for a Release Assistant from @StackStorm/maintainers and @StackStorm/contributors
• Py 3.6 -> 3.8 update for EL8 - deprecate EL8 as it reached its EOL
• Discuss the CentOS 8 EOL end 2021 #88 plan
  • CentOSStream conclusion: we won't build on it as it might become incompatible with EL8 due to its nature of tracking ahead and development-focused.
  • Between the RockyLinux, AlmaLinx, Oracle Linux as a replacement for CentOS8 we've decided to try RockyLinux
  • Experiment with RockyLinux, build artifacts, try if they're backward-compatible with EL8, and if everything works OK - go with that distro as a CI replacement for EL8 when producing the .rpm artifacts.
  • Eventually, .rpm artifact produced in the RockyLinux environment could be used by the community to install st2 on any of: CentOS8, RHEL8, OracleLinux, Almalinux.
  • From https://rockylinux.org/: "Rocky Linux is an open-source enterprise operating system designed to be 100% bug-for-bug compatible with Red Hat Enterprise Linux®."
  • TODO next TSC meeting: Reiterate on v3.7.0 planning, RockyLinux

Brainstorming: StackStorm Maintenance & Security (Out of time)

• Discuss the project items: https://github.com/orgs/StackStorm/projects/25
• TODO: Continue during the next TSC meeting