deSEC-community github org?

1

Hello! So… Since I’ve begun my migration towards deSEC, I’ve found that I had to push for tiny improvements in a lot of webhooks and providers that are maintained by the open community. The awesome people behind don’t necessarily have time to review my changes.

While I can operate with my fixed forks, I’d prefer that there is only ever one, say, terraform/opentofu provider, one external-dns webhook, one cert-manager webhook, one terranix module, etc., and that they’re all “above capacity” in terms of addressing small changes. But since that is not the case, I stand to maintain a lot of forks with inappropriately identical names.

Since I come from the Nix community, I am wondering if deSEC would be interested in a similar model as the GitHub “nix-community” org: It maintains a lot of unofficial projects that are widely used, but where the governance is more scattered. All projects are maintained by active community members, but without direct oversight from the parent organisation.

That is, what would deSEC think of a GitHub org called “desec-community” with maintained forks of the most popular providers, webhooks, REST clients and whatnot, as they get orphaned?

1 Like
2

Hi,

That seems like a nice idea! I think that could be done (if you feel like you’d have the capacity for kickstarting it). Before we jump right into it, I’d like to hear some thoughts from other community members.

Stay secure,
Peter

2 Likes
3

I do have time to maintain it. I don’t think it’s very demanding, since deSEC’s REST API isn’t changing a lot. I would prefer if as much authority is preserved with the original authors, without hindering bugfixes like throttling or missing/unpublished Helm charts. But that can happen in a shared org with the main advantages that we can have fallback maintenance and ease of discovery.

I look forward to hear what others have to say about it.

4

I’ve reserved the GitHub org in case we go forward with this idea.

I can disable it in case we don’t.

2 Likes
5

Can we ping other community members that might have an opinion?

I’ve encouraged @pinguino over email to comment on whether he likes the idea.