Repository navigation
Commit 1825a2d
authored
docs(gtr): finalize editorial markers and pin submission version (#4221)
## What this PR does
Finalizes the editorial layer of the General Technical Review ahead of
filing the point-in-time snapshot for Incubation Due Diligence
(cncf/toc#1916, tracked in cozystack/community#75).
Resolves 13 `[maintainers: …]` markers whose answers are settled by
repository or documentation evidence, corrects two inaccurate
statements, pins the submission version, and assigns the
previously-vacant Security Champion role. The DRAFT banner is rewritten
so the remaining markers are grouped by *why* they stay open
(measurement / maintainer confirmation / governance / organization
action) instead of being mixed with editorial to-dos.
Resolved with verified content: end-user case studies (Protofire,
Cozyhr, CNCF announcement); compliance = no formal attestation (per
self-assessment); API versioning = no stability policy yet, group is
`v1alpha1`, tracked in #1251; deprecation communication; rollback = no
runbook published; FinOps = not implemented, roadmap;
known-failure-modes troubleshooting links; SBOM off by default (#2937);
component retirement = GOVERNANCE.md sourcing policy, no formal
retirement workflow; SLOs = adopter-defined with exposed SLIs
enumerated.
Corrections:
- **Loosening tenant isolation** — removed the "shared/flat networking"
claim; inter-tenant isolation is enforced by Cilium egress by design.
Documented the opt-in policy labels that actually exist (per the tenants
guide).
- **Alpha/beta flagging** — removed "marked as such"; there is no
per-application maturity field in `ApplicationDefinition` today.
Project Version pinned to **v1.6.3** (latest stable, 2026-09-04); Date
Updated 2026-09-11.
Also **assigns the previously-vacant Security Champion role to @tym83**
(weekly triage pass), which the GTR flagged as the genuine unmet target
in the SCA section; surfacing the rotation cadence into `SECURITY.md` is
the remaining governance step (CODEOWNER review).
What remains open is genuine DD work, unchanged otherwise: measurements
(load/scale, baseline overhead, upgrade→downgrade CI matrix), maintainer
confirmations (Talos reboot, control-plane restart, CRD cleanup, circuit
breaker), the `SECURITY.md` rotation/diversity surfacing, and
organization actions (publish the CVE-pipeline policy docs; close the
SCA write-back loop).
### Downstream repositories
- [x] No downstream repository is affected by this change
### Release note
```release-note
docs(gtr): finalize editorial GTR answers, correct tenant-isolation and alpha/beta wording, pin submission version to v1.6.3, assign Security Champion
```
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
* **Documentation**
* Updated the technical review for Cozystack 1.6.3 and its revision
date.
* Expanded deployment guidance for Talos, generic Linux/k3s,
bring-your-own Kubernetes, and provider-specific installations.
* Clarified API versioning, security, rollback, deprecation,
scalability, cost management, troubleshooting, compliance, and maturity
information.
* Updated governance roles and voting information, including removal of
the Directors role.
* Documented security reporting responsibilities, scanner integration
status, component updates, and recent nightly end-to-end test results.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->1 file changed
Lines changed: 28 additions & 32 deletions
0 commit comments