Thanks everyone for supporting it.

Yes, it's very slow to get tickets resolved by infra. I propose a minor
improvement to reduce interactions with infra.

So far, we have granted maintainer permission(read & write) to release
managers' personal accounts. This step needs help from infra to add new
members to the group for every new release manager.
In order to avoid this, I proposed that we create a new account for release
purpose only and share it with release managers. The new account will have
read & write permissions to all Apache Beam docker repositories. A password
will be shared on an as-needed basis and we can change the password
periodically if needed, which is in our control. Are there any concerns
which I am not aware of with the sharing account approach?

Thanks,
Hannah


On Thu, Jan 16, 2020 at 10:41 AM Kenneth Knowles <k...@apache.org> wrote:

> +1 very nice explanation
>
> On Wed, Jan 15, 2020 at 1:57 PM Ahmet Altay <al...@google.com> wrote:
>
>> +1 - Thank you for driving this!
>>
>> On Wed, Jan 15, 2020 at 1:55 PM Thomas Weise <t...@apache.org> wrote:
>>
>>> +1 for the namespace proposal.
>>>
>>> It is similar to github repos. Top-level is the org, then single level
>>> for repo (beam-abc, beam-xzy, ..)
>>>
>>>
>>>
>>> On Wed, Jan 15, 2020 at 1:45 PM Robert Bradshaw <rober...@google.com>
>>> wrote:
>>>
>>>> Various tags of the same image should at least logically be the same
>>>> thing, so I agree that we should not be trying to share a single
>>>> repository in that way. A full suite of apache/beam-{image_desc}
>>>> repositories, if apache is fine with that, seems like the best
>>>> approach.
>>>>
>>>> On Wed, Jan 15, 2020 at 1:32 PM Kyle Weaver <kcwea...@google.com>
>>>> wrote:
>>>> >
>>>> > +1, agree that moving current image name to tags is a non-starter.
>>>> Thanks for driving this Hannah. Let us know what they say about repo
>>>> creation.
>>>> >
>>>> > On Wed, Jan 15, 2020 at 1:16 PM Udi Meiri <eh...@google.com> wrote:
>>>> >>
>>>> >> SG +1
>>>> >>
>>>> >> On Wed, Jan 15, 2020 at 12:59 PM Hannah Jiang <
>>>> hannahji...@google.com> wrote:
>>>> >>>
>>>> >>> I have done some research about images released under apache
>>>> namespace at docker hub, and here is my proposal.
>>>> >>>
>>>> >>> Currently, we are using apachebeam as our namespace and each image
>>>> has its own repository. Version number is used to tag the images.
>>>> >>> ie: apachebeam/python2.7_sdk:2.19.0,
>>>> apachebeam/flink1.9_job_server:2.19.0
>>>> >>>
>>>> >>> Now we are migrating to apache namespace and docker hub doesn't
>>>> support nested repository names, so we cannot use
>>>> apache/beam/{image-desc}:{version}.
>>>> >>> Instead, I propose to use apache/beam-{image_desc}:{version} as our
>>>> repository name.
>>>> >>> ie: apache/beam-python2.7_sdk:2.19.0,
>>>> apache/beam-flink1.9_job_server:2.19.0
>>>> >>> => When a user searches for apache/beam at docker hub, it will list
>>>> all the repositories we deployed with apache/beam-, so no concerns that
>>>> some released images are missed by users.
>>>> >>> => Repository names give insights to the users which repositories
>>>> they should use.
>>>> >>> => A downside with this approach is we need to create a new
>>>> repository whenever we release a new image, time and effort needed for this
>>>> is pending, I am contacting apache docker hub management team.
>>>> >>>
>>>> >>> I have considered using beam as repository name and moving image
>>>> name and version to tags, (ie: apache/beam:python3.7_sdk_2.19.0), which
>>>> means put all images to a single repository, however, this approach has
>>>> some downsides.
>>>> >>> => When a user searches for apache/beam, only one repository is
>>>> returned. Users need to use tags to identify which images they should use.
>>>> Since we release images with new tags for each version, it will overwhelm
>>>> the users and give them an impression that the images are not organized
>>>> well. It's also difficult to know what kind of images we deployed.
>>>> >>> => With both image name and version included at tags, it is a
>>>> little bit more complicated to maintain the code.
>>>> >>> => There is no correct answer which image the latest tag should
>>>> point to.
>>>> >>>
>>>> >>> Are there any concerns with this proposal?
>>>> >>>
>>>> >>> Thanks,
>>>> >>> Hannah
>>>> >>>
>>>> >>>
>>>> >>>
>>>> >>>
>>>> >>> On Fri, Jan 10, 2020 at 4:19 PM Ahmet Altay <al...@google.com>
>>>> wrote:
>>>> >>>>
>>>> >>>>
>>>> >>>>
>>>> >>>> On Fri, Jan 10, 2020 at 3:33 PM Ahmet Altay <al...@google.com>
>>>> wrote:
>>>> >>>>>
>>>> >>>>>
>>>> >>>>>
>>>> >>>>> On Fri, Jan 10, 2020 at 3:32 PM Ankur Goenka <goe...@google.com>
>>>> wrote:
>>>> >>>>>>
>>>> >>>>>> Also curious to know if apache provide any infra support fro
>>>> projects under Apache umbrella and any quota limits they might have.
>>>> >>>>
>>>> >>>>
>>>> >>>> Maybe Hannah can ask with an infra ticket?
>>>> >>>>
>>>> >>>>>>
>>>> >>>>>>
>>>> >>>>>> On Fri, Jan 10, 2020, 2:26 PM Robert Bradshaw <
>>>> rober...@google.com> wrote:
>>>> >>>>>>>
>>>> >>>>>>> One downside is that, unlike many of these projects, we release
>>>> a
>>>> >>>>>>> dozen or so containers. Is there exactly (and only) one level of
>>>> >>>>>>> namespacing/nesting we can leverage here? (This isn't a
>>>> blocker, but
>>>> >>>>>>> something to consider.)
>>>> >>>>>
>>>> >>>>>
>>>> >>>>> After a quick search, I could not find a way to use more than one
>>>> level of repositories. We can use the naming scheme we currently use to
>>>> help with. Our repositories are named as apachebeam/X, we could start using
>>>> apache/beam/X.
>>>> >>>>>
>>>> >>>>>>>
>>>> >>>>>>>
>>>> >>>>>>> On Fri, Jan 10, 2020 at 2:06 PM Hannah Jiang <
>>>> hannahji...@google.com> wrote:
>>>> >>>>>>> >
>>>> >>>>>>> > Thanks Ahmet for proposing it.
>>>> >>>>>>> > I will take it and work towards v2.19.
>>>> >>>>
>>>> >>>>
>>>> >>>> Missed this part. Thank you Hannah!
>>>> >>>>
>>>> >>>>>>>
>>>> >>>>>>> >
>>>> >>>>>>> > Hannah
>>>> >>>>>>> >
>>>> >>>>>>> > On Fri, Jan 10, 2020 at 1:50 PM Kyle Weaver <
>>>> kcwea...@google.com> wrote:
>>>> >>>>>>> >>
>>>> >>>>>>> >> It'd be nice to have the clout/official sheen of apache
>>>> attached to our containers. Although getting the required permissions might
>>>> add some small overhead to the release process. For example, yesterday,
>>>> when we needed to create new repositories (not just update existing ones),
>>>> since we have top-level ownership of the apachebeam organization, it was
>>>> quick and easy to add them. I imagine we'd have had to get approval from
>>>> someone outside the project to do that under the apache org. But this won't
>>>> need to happen very often, so it's probably not that big a deal.
>>>> >>>>>>> >>
>>>> >>>>>>> >> On Fri, Jan 10, 2020 at 1:40 PM Ahmet Altay <
>>>> al...@google.com> wrote:
>>>> >>>>>>> >>>
>>>> >>>>>>> >>> Hi all,
>>>> >>>>>>> >>>
>>>> >>>>>>> >>> I saw recent progress on the containers and wanted to bring
>>>> this question to the attention of the dev list.
>>>> >>>>>>> >>>
>>>> >>>>>>> >>> Would it be possible to use the official ASF dockerhub
>>>> organization for new Beam container releases? Concretely, starting from
>>>> 2.19 could we release Beam containers to
>>>> https://hub.docker.com/u/apache instead of
>>>> https://hub.docker.com/u/apachebeam ?
>>>> >>>>>>> >>>
>>>> >>>>>>> >>> Ahmet
>>>>
>>>

Reply via email to