Skip to content

Commit 43f25af

Browse files
chore: export 16 LFX programs for 2026 Term 3 (Sep-Nov) (#1992)
Auto-generated by lfx-export workflow. Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
1 parent cd59661 commit 43f25af

3 files changed

Lines changed: 393 additions & 3 deletions

File tree

programs/lfx-mentorship/2026/03-Sep-Nov/README.md

Lines changed: 138 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -39,10 +39,17 @@ Mentee application instructions can be found on the [Program Guidelines](https:/
3939
- [CloudEvents Webhook Notifications for Schema Changes](#cloudevents-webhook-notifications-for-schema-changes)
4040
- [Prompt Template Playground in the Registry UI](#prompt-template-playground-in-the-registry-ui)
4141
- [Federated AI Agent Search Across Instances](#federated-ai-agent-search-across-instances)
42+
- [HAMi](#hami)
43+
- [Reduce HAMi-core Initialization Lock Contention](#reduce-hami-core-initialization-lock-contention)
44+
- [Fix GPU Memory Isolation for Child and SSH Processes](#fix-gpu-memory-isolation-for-child-and-ssh-processes)
4245
- [Kubeflow](#kubeflow)
4346
- [Abstracting Pod Lifecycle Diagnostics for Kubeflow Pipelines](#abstracting-pod-lifecycle-diagnostics-for-kubeflow-pipelines)
4447
- [Kubernetes](#kubernetes)
4548
- [Expand Declarative Validation (DV) in Kubernetes](#expand-declarative-validation-dv-in-kubernetes)
49+
- [Kyverno](#kyverno)
50+
- [Update Pod Security Standards for User Namespaces](#update-pod-security-standards-for-user-namespaces)
51+
- [AI Assistant](#ai-assistant)
52+
- [Policy Decision Log](#policy-decision-log)
4653
- [OpenTelemetry](#opentelemetry)
4754
- [Declarative instrumentation configuration for otelc](#declarative-instrumentation-configuration-for-otelc)
4855
- [Zero-code AI Agent observability for otelc](#zero-code-ai-agent-observability-for-otelc)
@@ -161,6 +168,62 @@ CNCF - Apicurio Registry: Federated AI Agent Search Across Instances (2026 Term
161168
- Upstream Issue: https://github.com/Apicurio/apicurio-registry/issues/8424
162169
- LFX URL: https://mentorship.lfx.linuxfoundation.org/project/06ed3695-1b51-4166-a1df-0131887ec4fb
163170

171+
### HAMi
172+
173+
#### Reduce HAMi-core Initialization Lock Contention
174+
175+
CNCF - HAMi: Reduce HAMi-core Initialization Lock Contention (2026 Term 3)
176+
177+
- Description:
178+
179+
> ## Description
180+
>
181+
> Improve HAMi-core startup performance when hundreds of processes initialize CUDA concurrently and compete for the shared unified lock. The work should follow the maintainer discussion in the upstream issue and preserve correctness while reducing initialization latency and contention.
182+
>
183+
> ## Expected outcomes
184+
>
185+
> - A reproducible benchmark for concurrent HAMi-core initialization.
186+
> - A maintainer-approved locking design based on the approaches accepted in the upstream discussion.
187+
> - An implementation with concurrency and regression tests.
188+
> - Before-and-after measurements of startup latency, throughput, and relevant resource usage.
189+
> - Documentation of the design, compatibility considerations, and operational impact.
190+
> - The implementation submitted for HAMi maintainer review.
191+
192+
- Recommended Skills: Linux concurrency, performance profiling, benchmarking, synchronization design, testing
193+
- Technologies: C/C++, Linux, CUDA, NVML, HAMi-core
194+
- Mentor(s):
195+
- Mengxuan Li (@archlitchi, mengxuan.li@dynamia.ai)
196+
- Shouren Yang (@shouren, yangshouren@gmail.com)
197+
- Upstream Issue: https://github.com/Project-HAMi/HAMi/issues/1662
198+
- LFX URL: TBD
199+
200+
#### Fix GPU Memory Isolation for Child and SSH Processes
201+
202+
CNCF - HAMi: Fix GPU Memory Isolation for Child and SSH Processes (2026 Term 3)
203+
204+
- Description:
205+
206+
> ## Description
207+
>
208+
> Investigate and fix cases where processes started later inside a HAMi-managed container, including child processes and processes reached through SSH or a new login shell, may not retain the expected GPU memory limit. The first milestone is to reproduce the behavior on a current supported HAMi release. The implementation approach must be agreed with HAMi maintainers rather than assuming a specific configuration mechanism in advance.
209+
>
210+
> ## Expected outcomes
211+
>
212+
> - A reproducible test case and documented root cause.
213+
> - A maintainer-reviewed design covering the intended isolation boundary, compatibility, and failure modes.
214+
> - A maintainer-approved implementation, or a validated design and prototype if platform constraints prevent full delivery within the term.
215+
> - Regression tests covering the original process, child processes, and supported SSH or new-shell scenarios.
216+
> - Documentation of supported configuration, migration guidance, and known limitations.
217+
> - The implementation submitted for HAMi maintainer review.
218+
219+
- Recommended Skills: Linux debugging, container runtime analysis, security reasoning, C/C++, testing
220+
- Technologies: Kubernetes, Linux containers, NVIDIA GPU, HAMi-core
221+
- Mentor(s):
222+
- Mengxuan Li (@archlitchi, mengxuan.li@dynamia.ai)
223+
- Jimmy Song (@rootsongjc, rootsongjc@gmail.com)
224+
- Upstream Issue: https://github.com/Project-HAMi/HAMi/issues/2125
225+
- LFX URL: TBD
226+
164227
### Kubeflow
165228

166229
#### Abstracting Pod Lifecycle Diagnostics for Kubeflow Pipelines
@@ -220,6 +283,81 @@ CNCF - Kubernetes: Expand Declarative Validation (DV) in Kubernetes (2026 Term 3
220283
- Upstream Issue: https://github.com/kubernetes/kubernetes/issues?q=is%3Aissue%20state%3Aopen%20label%3Aarea%2Fapi-validation
221284
- LFX URL: https://mentorship.lfx.linuxfoundation.org/project/841f2363-4c93-4d3e-931b-030499af82df
222285

286+
### Kyverno
287+
288+
#### Update Pod Security Standards for User Namespaces
289+
290+
CNCF - Kyverno: Update Pod Security Standards for User Namespaces (2026 Term 3)
291+
292+
- Description:
293+
294+
> ## Description
295+
>
296+
> Kubernetes user namespaces is now GA!
297+
>
298+
> https://kubernetes.io/docs/concepts/workloads/pods/user-namespaces/
299+
> https://kubernetes.io/blog/2025/04/25/userns-enabled-by-default/
300+
>
301+
> This impacts pod security standards and the Kyverno policy set that supports these.
302+
>
303+
> ## Expected outcomes
304+
>
305+
> We need to be update the pod security libraries to add user namespaces:
306+
>
307+
> https://kubernetes.io/docs/concepts/workloads/pods/user-namespaces/#integration-with-pod-security-admission-checks
308+
309+
- Recommended Skills: Go, Kubernenets, Containers, Security
310+
- Technologies: Go, Kubernenets, Containers, Security
311+
- Mentor(s):
312+
- Shuting Zhao (@realshuting, shuting@nirmata.com)
313+
- Ammar Yasser (@aerosouund, ammar.yasser@nirmata.com)
314+
- Upstream Issue: https://github.com/kyverno/kyverno/issues/15979
315+
- LFX URL: TBD
316+
317+
#### AI Assistant
318+
319+
CNCF - Kyverno: AI Assistant (2026 Term 3)
320+
321+
- Description:
322+
323+
> ## Description
324+
>
325+
> Kyverno's maintainers spend significant recurring effort on low-judgment, repetitive tasks: reviewing/merging Dependabot PRs, keeping open PRs rebased with main and re-running CI, triaging a high volume of incoming issues, reproducing bug reports, running the right subset of conformance/unit tests for a given diff, and answering repeat questions in Slack/GitHub Discussions. This work competes for maintainer time with code review, design, and roadmap work, and slows down contributor turnaround (stale PRs, delayed triage labels, slow first response on issues).
326+
>
327+
> ## Expected Outcomes
328+
>
329+
> Build an AI Maintainer Assistant: a sandboxed, permission-scoped autonomous agent (e.g., running an agent runtime such as OpenHands/OpenClaw/Hermes-style sandboxed coding agent) that runs on a schedule and via GitHub/Slack webhooks to automate routine maintainer workflows, always via auditable, revertible actions (comments, labels, draft PRs).
330+
331+
- Recommended Skills: AI Engineering, AI agent harness, Claude Code, GitHub Copilot, GitHub Actions, Hermes
332+
- Technologies: AI Engineering, AI agent harness, Claude Code, GitHub Copilot, GitHub Actions, Hermes
333+
- Mentor(s):
334+
- Jim Bugwadia (@JimBugwadia, jim@nirmata.com)
335+
- Shuting Zhao (@realshuting, shuting@nirmata.com)
336+
- Upstream Issue: https://github.com/kyverno/kyverno/issues/16665
337+
- LFX URL: TBD
338+
339+
#### Policy Decision Log
340+
341+
CNCF - Kyverno: Policy Decision Log (2026 Term 3)
342+
343+
- Description:
344+
345+
> ## Description
346+
>
347+
> Kyverno's CEL engine runs a whole pipeline on the way to an admit or deny (scope filtering, match conditions, variables, validation expressions, autogen rule expansion, mutation, exception handling) and discards the per-expression detail the moment it has a final answer. When a CEL policy does something surprising (matches a resource you didn't expect, skips one you did, denies with a message that doesn't say which clause fired, or fails with a bare "no such key"), there is no supported way to see which sub-expression produced which value.
348+
>
349+
> ## Expected Outcomes
350+
>
351+
> This feature proposes an opt-in, structured decision trace: capture what the engine already computes, once, in a stable machine-readable form, and surface it where users look (the CLI first, then reports and the running controller). It broadens KDP https://github.com/kyverno/kyverno/pull/91 from a two-phase CLI-plus-runtime feature into a decision-explainability primitive for the whole CEL pipeline.
352+
353+
- Recommended Skills: Kubernetes, Golang, CEL
354+
- Technologies: Kubernetes, Golang, CEL
355+
- Mentor(s):
356+
- Jim Bugwadia (@JimBugwadia, jim@nirmata.com)
357+
- Jyotiraditya Panda (@rx18-eng, remopanda7@gmail.com)
358+
- Upstream Issue: https://github.com/kyverno/kyverno/issues/16692
359+
- LFX URL: TBD
360+
223361
### OpenTelemetry
224362

225363
#### Declarative instrumentation configuration for otelc

0 commit comments

Comments
 (0)