Technical Meeting 2026-07-22

[liamfallon]

Agenda

1. Priority PRs

• Prevent ensure-name-substring from mangling file names krm-functions-catalog#1285

2. Action Items Review
3. Decouple Function Execution from Pipeline Step Definition [Proposal] Decouple Function Execution from Pipeline Step Definition #4647 @mozesl-nokia
4. Demo: Add multi-repo upgrade and dependency maintenance utility Add multi-repo upgrade and dependency maintenance utility #4651 @aravindtga
5. Move podevaluator to porch-server Move podevaluator to porch-server porch#1119
6. PR triage
7. AOB

Attendance
To be updatead later.

• @liamfallon

• @ahmadu2305

• @zaadnsu

• @CsatariGergely

• @aravindtga

• @Catalin-Stratulat-Ericsson

• @efiacor

• @JamesMcDermott

• @mozesl-nokia

• @OisinJohnston2005

• @rendre-greyling

• @kushnaidu

• If you are not in the attendance list add your GitHub handle to a comment under the discussion

Note

We got to point 4 in the agenda, we'll take point 5 next week.

Minutes

@liamfallon chaired the meeting.

ensure-name-substring does not work

• see issue The "ensure-name-substring" krm function does not work #4652
• We'll replace 0.2.4/0.2.3/0.2.2/0.2.1 with a version that errors out immediately
• We'll release 0.2.5 when the fixing PR Prevent ensure-name-substring from mangling file names krm-functions-catalog#1285 is merged

Condition type discussion

• We will continue to use the custom condition type in kpt rather than the k8s one
• We should check duplicate types across Porch and kpt and see if there is some cleanup required. @liamfallon to come back next week on this.
• 2026-06-10 to 2026-07-22: No Progress

Release of the API

• We'll release the API at v1.0.0 and see if it works
• Can we delete v1.3.0 of the API: https://pkg.go.dev/github.com/nephio-project/porch/api
• 2026-07-01:
• API is released
• We need to file a request to delete v1.3.0, see https://pkg.go.dev/about#removing-a-package, @liamfallon will do this.
• 2026-07-08: No Progress
• 2026-07-15: A retract statement for v1.3.0 is added to the porch/api go.mod, we need to test if this works.
• 2026-07-22: Let's leave this, it seems there is no easy way to get rid of anything in the go module library

Tracking AI usage

• @mozesl-nokia has been testing https://usegitai.com/
• It aggressively pushes a lot of metadata onto PRs
• Pushing metadata onto PRs in the public may have consequences for security, privacy etc
• The metadata is "invisible" unless you go looking for it but if you do look for it, it is extensive
• It could help with statistics, it can do a line by line analysis showing what was done by AI, what was done by a human, and what was done by other tools
• For now, let's turn AI tracking off and seek guidance on this from the CNCF and others.
• 2026-07-08 - 2026-08-15: Bump this to the community meeting. @liamfallon

Independant subpackage renderStatus

• Can there be a RenderStatus on the independent cloned subpackage?
  • The subpackage render status should be cleared because the cloned Kptfile is not the upstream Kptfile, the status should all be cleared, Bug on subpackage. @Catalin-Stratulat-Ericsson to raise bug
  • Check if there is an exiting issue to improve rendering documentation
• 2026-07-15: This is raised as an issue now, PR on the way, we can close this here.
• 2026-07-22: PR is merged Clear the status of the subpackage Kptfile on subpackage clones and upgrades porch#1118 Close this

kpt-backstage-plugins

• It's a GUI for Porch
• It has vulnerabilities
• It needs an upgrade to the latest version of Backstage
• Should we continue to support kpt-backstage-plugins?
• GSoC/LFX mentoring?
• Oisín Johnston is taking a look at this, it's a version mess, and it's being fixed.
• 2026-07-22: More dependabot PRs have been raised on this

Splitting up repos into multiple modules

• How much do we want to fragment our repos?
• In kpt, the repositories could be pulled apart into multiple modules
• kpt and porch could be more modular
• The upgrades would become more complex but the dependencies would be clearer
• Upgrades might be smaller and impact less things
• First step is to stabalize the APIs
• What's the use of splitting the repos into modules in terms of security?
• For security it doesn't matter too much
• Some security tools looks at go.mod files
• The goal here is to make it easier for us, for example if cobra has an update, we shouldn't have to release the whole of kpt/porch
• We should document what the relationships between the modules in kptdev are first
• It could make releasing more complex, but if there are less releases to do maybe there is a tradeoff
• Would function-runner in Porch be a good case?
• First step, document all the kpt packages and their relationships and overlay Porch on them
• Elaborate the document to what structure we would like
• @mozesl-nokia will take a stab at this
• 2026-07-22: See [Proposal] Decouple Function Execution from Pipeline Step Definition #4647

e2e tests in Porch on krm functions

• We should keep them
• We could run them weekly, like the CR cache tests, run in DB Cache with v1alpha2 only
• @liamfallon will get them running, hard coding for now
• Absolute and relative
• n and n-1 and latest
• major, major + minor
• 2026-07-22:
• PR to fix the tests is merged: Fix e2e function tests porch#1123
• @efiacor to write CI job for this.

Decouple Function Execution from Pipeline Step #4647

• See the proposal on [Proposal] Decouple Function Execution from Pipeline Step Definition #4647
• The auxillary points may be separate issues
• If people can read the proposal and we can discuss further next week
• We can add this proposal on the topic list for the face to face meeting
• We need to think how this would work with the CRD approach
• Having an operator for running functions would be very useful, a render scheduler
• The render scheduler should be includable in the porch server or in the render scheduler.

PRs to be reviewed

kpt

Number	Title	Author	Draft	Updated	Comment
#4654	docs(#4556): Add comprehensive 3-way merge guide	efiacor	false	2026-07-21T17:11:46Z
#4651	Add multi-repo upgrade and dependency maintenance utility	aravindtga	false	2026-07-20T14:42:52Z
#4636	Tag lister improvements (restructure files, pass TLS certificates)	mozesl-nokia	true	2026-07-13T13:09:06Z
#4573	Adding AGENTS.md	CsatariGergely	false	2026-07-10T12:41:46Z
#4487	Proofreading chapter 2	mpgreaves	false	2026-07-09T06:31:00Z
#4469	feat: Add CEL-based conditional function execution (#4388)	SurbhiAgarwal1	false	2026-07-21T20:25:41Z
#4427	fix(update): preserve Kptfile formatting during upgrades	Jaisheesh-2006	false	2026-07-09T06:31:00Z
#4030	Test case for issue 4012 pkg update not updating kptfile	michaelvl	false	2026-02-10T12:19:39Z
#3367	[WIP] Function SDK guide	yuwenma	false	2026-02-10T12:10:20Z
#2230	Fix incorrect handling when unfetched packages are deleted from upstream	mortent	false	2026-02-11T13:44:53Z
#1513	WIP: prototype of nested package library	Liujingfang1	false	2026-02-10T11:58:08Z

Porch

Number	Title	Author	Draft	Updated	Comment
kptdev/porch#1127	Add additional E2E testing for subpackage interactions	JamesMcDermott	false	2026-07-22T10:24:25Z
kptdev/porch#1126	Add implementation of 'porch.kpt.dev/push-on-render-failure' for clone and upgrade	liamfallon	true	2026-07-22T10:00:28Z
kptdev/porch#1122	Refactor Performance Tests and expand Monitoring Stack	rendre-greyling	false	2026-07-20T09:01:36Z
kptdev/porch#1119	Move podevaluator to porch-server	dgyorgy-nokia	false	2026-07-22T10:12:48Z
kptdev/porch#1112	Remove overwriting the default HTTP transport	mozesl-nokia	false	2026-07-16T12:12:34Z
kptdev/porch#1111	Make porch-server manager-runnable	mozesl-nokia	false	2026-07-22T10:13:00Z
kptdev/porch#1100	Add PackageRevision CRD ValidatingWebhook	efiacor	false	2026-07-22T09:55:54Z
kptdev/porch#1089	Debulleting Porch Architecture & Components - Engine	lovesprung	false	2026-07-13T08:10:39Z
kptdev/porch#1019	FunctionConfig controller improvements 1	mozesl-nokia	true	2026-06-03T12:04:29Z
kptdev/porch#976	Add documentation for FunctionConfig CRD and reconciler	mozesl-nokia	true	2026-05-13T13:56:49Z
kptdev/porch#971	PackageRevision controller architecture docs	efiacor	false	2026-07-22T09:53:25Z
kptdev/porch#554	porchctl improvements	mozesl-nokia	true	2026-05-18T07:58:58Z
kptdev/porch#246	WIP: Create remove fetches	nagygergo	true	2026-03-04T15:51:40Z

krm-functions-catalog

Number	Title	Author	Draft	Updated	Comment
kptdev/krm-functions-catalog#1284	Fix documentation links that reference "master" to "main"	liamfallon	false	2026-07-21T11:56:18Z
kptdev/krm-functions-catalog#1064	[Feature] Set labels conditional spec selector	kemv	false	2026-01-19T21:59:10Z
kptdev/krm-functions-catalog#969	fix: avoid nameclashes by considering the filepath	bluebrown	false	2026-01-19T21:59:09Z
kptdev/krm-functions-catalog#930	feat: Add function set-standard-labels	yuwenma	false	2026-06-15T10:24:16Z
kptdev/krm-functions-catalog#926	Fix possible nil-pointer error; add golden test for set-name-prefix	justinsb	false	2026-01-19T21:59:09Z
kptdev/krm-functions-catalog#915	add wasm functionality to apply-setters and rewrite to new go kpt fn sdk	wmuizelaar	false	2026-01-19T21:59:09Z
kptdev/krm-functions-catalog#914	set-labels: added support for sourcing label values from other resources	droot	false	2026-01-19T21:59:09Z
kptdev/krm-functions-catalog#909	fix: set-image with more matching rules	zyy98	false	2026-01-19T21:59:09Z
kptdev/krm-functions-catalog#906	[WIP] proof test zyy98/image	yuwenma	false	2026-06-29T10:51:37Z
kptdev/krm-functions-catalog#905	analyze-deps: initial version of dependency analyzer	droot	false	2026-01-19T21:59:09Z
kptdev/krm-functions-catalog#890	Add set-default-label function	yuwenma	false	2026-01-19T21:59:09Z
kptdev/krm-functions-catalog#737	docs: Add example on how to use list of object	irvifa	false	2026-01-19T21:59:08Z
kptdev/krm-functions-catalog#529	ci: add ci to enfore conventional commit	mengqiy	false	2026-02-10T13:22:37Z

krm-functions-sdk

Number	Title	Author	Draft	Updated	Comment
kptdev/krm-functions-sdk#678	CEL support for navigating the resource list	johnbelamaric	false	2026-04-13T15:27:39Z
kptdev/krm-functions-sdk#643	feat: add --show-dockerfile to kfn build	yuwenma	false	2026-01-29T16:28:19Z
kptdev/krm-functions-sdk#642	nit: replace unnecessary go install; update go mod	yuwenma	false	2026-01-29T16:28:19Z
kptdev/krm-functions-sdk#627	WIP: Add Rename helper, along with ref visitors	justinsb	false	2026-01-29T16:28:19Z
kptdev/krm-functions-sdk#619	fix: add context result with field	zyy98	false	2026-01-29T16:28:19Z
kptdev/krm-functions-sdk#607	feat: modifying error message for subobject	zyy98	false	2026-01-29T16:28:19Z
kptdev/krm-functions-sdk#599	Improve functionRunner interface	yuwenma	true	2026-01-29T16:28:19Z
kptdev/krm-functions-sdk#546	feat: KubeObject can choose fieldpath with "K=V" selector	yuwenma	false	2026-01-29T16:28:19Z
kptdev/krm-functions-sdk#521	[HOLD] fork kyaml and api to go/internal/forked	yuwenma	false	2026-01-29T16:28:19Z

kpt-backstage-plugins

Number	Title	Author	Draft	Updated	Comment
kptdev/kpt-backstage-plugins#161	Bump @backstage/cli from 0.26.6 to 0.36.3	app/dependabot	false	2026-07-16T14:43:14Z
kptdev/kpt-backstage-plugins#156	Bump cypress from 7.7.0 to 15.18.1 in /packages/app	app/dependabot	false	2026-07-16T15:01:17Z
kptdev/kpt-backstage-plugins#152	Bump react-router-dom from 6.30.4 to 7.18.1 in /packages/app	app/dependabot	false	2026-07-16T15:02:40Z
kptdev/kpt-backstage-plugins#150	Bump step-security/harden-runner from 2.19.4 to 2.20.0	app/dependabot	false	2026-07-07T20:22:48Z
kptdev/kpt-backstage-plugins#149	Update dependencies	liamfallon	false	2026-07-07T14:20:55Z

kpt-samples

Number	Title	Author	Draft	Updated	Comment
kptdev/kpt-samples#26	Feat: Otel-demo for gsoc	Jaisheesh-2006	false	2026-07-22T07:58:29Z
kptdev/kpt-samples#23	Headlamp demo script	ciaranjohnston	false	2026-03-23T13:16:10Z
kptdev/kpt-samples#17	Add some infrastructure packages	justinsb	false	2022-10-03T14:21:00Z
kptdev/kpt-samples#16	Bank of anthos: kpt packages	droot	false	2022-09-09T07:23:59Z
kptdev/kpt-samples#15	feat: Add infra packages for Porch dogfooding	yuwenma	false	2022-08-31T17:55:03Z
kptdev/kpt-samples#13	POC: secret generated from init container	yuwenma	true	2022-08-01T18:13:39Z
kptdev/kpt-samples#12	ghost: Added mysql and ghost secrets	droot	false	2022-08-02T15:17:25Z
kptdev/kpt-samples#11	A simple POC to change non KRM files to a structured k8s resource	yuwenma	true	2022-07-30T01:14:31Z