In the distributed world of cloud-native computing different artifacts and packages are used to transport configuration and code for the many services and capabilities that comprise and support workloads and applications. As an example, today ArtifactHub advertises that it can crawl about 20 such artifact types [1]. These "cloud-native" bundles add to the previous proliferation of package and artifact types for software dependencies such as Maven and npm and for system packages like deb and rpm. This abundance of package types and formats adds complexity and risk for cloud application developers and architects trying to provision and run cloud-native workloads. Different tools and controllers must be carefully learned and installed to bundle, unbundle, verify and deploy each artifact type. This complexity slows product development by users, impedes innovation and collaboration amongst projects, and increases risks of insecure configuration. To reduce this complexity and facilitate collaboration and innovation, WG Artifacts will gather stakeholders from many CNCF and open source projects offering packaging, distribution and deployment mechanisms for bundles of configuration and code.
The charter describes the goals and activites of this group.
Old working document of the charter.
The CNCF Artifacts Working Group is under the App Delivery Technical Advisory Group hosted by the Cloud Native Computing Foundation (CNCF).
- Andrew Block (@sabre1041)
- Ramkumar Chinchani (@rchincha)
A list of common use cases that are implemented across various package managers.
| Use Case / Package Manager |
Alpine (APK) |
Cargo | Carvel | Helm | Maven | npm | OCI | PyPi | rpm |
|---|---|---|---|---|---|---|---|---|---|
| List of Packages | 🟢 | ⚪ | ⚪ | ⚪ | ⚪ | ⚪ | 🔴* | 🟢 | ⚪ |
| Filter a List of Packages | 🟢 | ⚪ | ⚪ | ⚪ | ⚪ | ⚪ | 🔴 | 🟡 | ⚪ |
| List versions | 🔴 | ⚪ | ⚪ | ⚪ | ⚪ | ⚪ | 🟡* | 🟢 | ⚪ |
| De-dupability | 🟡 | ⚪ | ⚪ | ⚪ | ⚪ | ⚪ | 🟢 | 🟢 | ⚪ |
| Multi-Arch Support | 🟢 | ⚪ | ⚪ | ⚪ | ⚪ | ⚪ | 🟢 | 🟢 | ⚪ |
| Dependency Tracking | 🟢 | ⚪ | ⚪ | ⚪ | ⚪ | ⚪ | 🟢 | 🟢 | ⚪ |
| <use-case> | ⚪ | ⚪ | ⚪ | ⚪ | ⚪ | ⚪ | ⚪ | 🟡 | ⚪ |
Currently, the working group is evaluating the current state of various software ecosystems and whether it is feasible to standardize and also suggest changes.
# Clone this repository
git clone https://github.com/cncf-tags/wg-artifacts.git
# Enter cloned dir
cd wg-artifacts
# Check metadata query support across software ecosystems
make conformanceOur project welcomes contributions from any member of our community. To get started contributing, please see our Contributor Guide.
- Define a set of query interfaces that can standardized across various software ecosystems.
- Slack Channel:
- Public Meeting Schedule and Links:
This working group meets on 2nd and 4th Friday of each month @ 1700 UTC
Zoom: https://zoom.us/j/7276783015?pwd=R0RJMkRzQ1ZjcmE0WERGcTJTOEVyUT09 Passcode: 77777
Agendas and notes: https://docs.google.com/document/d/1E7iKPOuyA1jxPe8vDG8aPd8jtnCEbpDpCifXDvDCnA0/
WG Artifacts - Project Meeting TAG App Delivery
This project is licensed under Apache 2.0
We follow the CNCF Code of Conduct.