Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[License Exception Request] [Crossplane] [MPL-2.0] #787

Closed
jeanduplessis opened this issue Apr 29, 2024 · 7 comments
Closed

[License Exception Request] [Crossplane] [MPL-2.0] #787

jeanduplessis opened this issue Apr 29, 2024 · 7 comments
Assignees

Comments

@jeanduplessis
Copy link

jeanduplessis commented Apr 29, 2024

Component details

The https://github.com/crossplane/upjet/ project relies on MPL licensed code from Hashicorp for integration with their Terraform providers.

The list of MPL licensed code referenced in the project are:

Direct dependencies

Indirect dependencies

License name

Mozilla Public License (MPL) version 2.0

Code modified?

The dependencies are referenced externally and remains unmodified. https://github.com/crossplane/upjet/blob/main/go.mod

Changes contributed?

Not applicable currently, but if changes are needed we would look to contribute directly upstream as a first step.

Any alternatives?

We looked at OpenTofu, but since OpenTofu project is also MPL licensed and depends on many of the same dependencies as we do from github.com/hashicorp/, there are no viable alternatives currently.

Integrates with other components?

The MPL licensed components are used by Upjet to be able to integrate with the Terraform providers and generate Crossplane-compatible providers.

@jeanduplessis
Copy link
Author

In addition to the MPL licensed dependencies used by crossplane/upjet the following dependencies are used by the providers generated by Upjet:

Dependencies

  • github.com/hashicorp/aws-cloudformation-resource-schema-sdk-go
  • github.com/hashicorp/aws-sdk-go-base
  • github.com/hashicorp/awspolicyequivalence
  • github.com/hashicorp/errwrap
  • github.com/hashicorp/go-checkpoint
  • github.com/hashicorp/go-cleanhttp
  • github.com/hashicorp/go-multierror
  • github.com/hashicorp/hc-install
  • github.com/hashicorp/terraform-exec
  • github.com/hashicorp/terraform-plugin-framework-jsontypes
  • github.com/hashicorp/terraform-plugin-framework-timeouts
  • github.com/hashicorp/terraform-plugin-framework-timetypes
  • github.com/hashicorp/terraform-plugin-framework-validators
  • github.com/hashicorp/terraform-plugin-mux
  • github.com/hashicorp/terraform-plugin-testing
  • github.com/hashicorp/terraform-provider-aws
  • github.com/hashicorp/terraform-provider-azurerm
  • github.com/hashicorp/terraform-provider-google
  • github.com/hashicorp/terraform-provider-azuread
  • github.com/hashicorp/go-azure-helpers
  • github.com/hashicorp/go-azure-sdk/resource-manager
  • github.com/hashicorp/go-azure-sdk/sdk
  • github.com/hashicorp/go-retryablehttp

@jeanduplessis
Copy link
Author

jeanduplessis commented May 24, 2024

@krook Would it be accurate to assume this, #619 (comment), applies here as well?

@jeanduplessis
Copy link
Author

Also if an MPL licensed repo was forked and modified, but not vendored, and still linked to at build time, I assume it is still in compliance with the granted exception.

@krook
Copy link
Member

krook commented May 28, 2024

@krook Would it be accurate to assume this, #619 (comment), applies here as well?

Yes, the GB approval of a license exception for Issue #619 does apply to all CNCF projects, but the conditions of the prior GB approval still apply (i.e., "used in unmodified form by linking to the dependency at build time").

@krook
Copy link
Member

krook commented May 28, 2024

Also if an MPL licensed repo was forked and modified, but not vendored, and still linked to at build time, I assume it is still in compliance with the granted exception.

Unfortunately not. The exception granted by the GB for Issue #619 was only for use of those dependencies "so long as they are used in unmodified form by linking to the dependency at build time." If an exception is desired for a modified fork, the project needs to open a separate license exception request.

@amye amye removed their assignment May 29, 2024
@yordis
Copy link

yordis commented Jun 25, 2024

Hey folks, any updates on this one?

@krook
Copy link
Member

krook commented Oct 23, 2024

The CNCF Governing Board has approved this exception request in an October vote.

@krook krook closed this as completed Oct 23, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

4 participants