[
https://issues.apache.org/jira/browse/YUNIKORN-2430?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Craig Condit updated YUNIKORN-2430:
-----------------------------------
Description:
Currently, we do not include license files from third-party components. As some
licenses require attribution, we should include the correct license files from
components we depend on.
For the go modules we can probably leverage
[https://github.com/google/go-licenses] to provide the metadata. This provides
both dependency checking of forbidden licenses, and automatic downloads of
license files.
The yunikorn-web repository only needs our own LICENSE/NOTICE files, as we have
no 3rd party go dependencies, and javascript deps are written to
/html/3rdpartydependencies.txt in the generated image.
was:
Currently, we do not include license files from third-party components. As some
licenses require attribution, we should include the correct license files from
components we depend on.
For the go modules we can probably leverage
[https://github.com/google/go-licenses] to provide the metadata. This provides
both dependency checking of forbidden licenses, and automatic downloads of
license files.
For javascript dependencies, some more work may be needed.
> [UMBRELLA] Third-party license attribution
> ------------------------------------------
>
> Key: YUNIKORN-2430
> URL: https://issues.apache.org/jira/browse/YUNIKORN-2430
> Project: Apache YuniKorn
> Issue Type: Improvement
> Components: core - common, scheduler-interface, shim - kubernetes,
> webapp
> Reporter: Craig Condit
> Assignee: Craig Condit
> Priority: Major
>
> Currently, we do not include license files from third-party components. As
> some licenses require attribution, we should include the correct license
> files from components we depend on.
> For the go modules we can probably leverage
> [https://github.com/google/go-licenses] to provide the metadata. This
> provides both dependency checking of forbidden licenses, and automatic
> downloads of license files.
> The yunikorn-web repository only needs our own LICENSE/NOTICE files, as we
> have no 3rd party go dependencies, and javascript deps are written to
> /html/3rdpartydependencies.txt in the generated image.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
