Dear all, from the amount of people who hummed and by who hummed, or did not hum, it is my understanding that we have reached consensus.
Thank you, Richard PS: I agree that Julien's PR should make it into 1.0.0 proper. On Thu, Apr 23, 2020 at 1:40 PM Richard Hartmann <richih.mailingl...@gmail.com> wrote: > > Dear all, > > This is a call for consensus within Prometheus-team on releasing > node_exporter 1.0.0 as-is. > > node_exporter 1.0.0-rc.0 has been cut on 2020-02-20[1]. It features > experimental TLS support[2]. We are planning to use this TLS support > as a template for all other exporters within and outside of Prometheus > proper. To make sure we didn’t build a footgun nor that we’re holding > it wrong, CNCF is sponsoring an external security review by Cure53. We > have not been giving a clear timeline but work should start in week 22 > (May 25th) at the latest with no time to completion stated. > > There are two positions: > * Wait for the security review to finish before cutting 1.0.0 > * Release ASAP, given that this feature is clearly marked as > experimental and it will not see wider testing until we cut 1.0.0 > > I am asking Prometheus-team to establish rough consensus with a hum. > > Should the maintainers (Ben & Fish) be allowed to release without > waiting for the audit to finish? > > > Best, > Richard > > [1] https://github.com/prometheus/node_exporter/releases/tag/v1.0.0-rc.0 > [2] https://github.com/prometheus/node_exporter/pull/1277 -- Richard -- You received this message because you are subscribed to the Google Groups "Prometheus Developers" group. To unsubscribe from this group and stop receiving emails from it, send an email to prometheus-developers+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/prometheus-developers/CAD77%2BgQab5eEbNoGm8PMLFCvWX-74U%2B%3Dwr4QOQk49UQD0UMAhA%40mail.gmail.com.
