Foundational Infrastructure: Working Group Charter

June 25, 2026 · View on GitHub

Mission

Provide infrastructure automation and core capabilities shared across CF projects, including BOSH, identity management, credential management, and integrated data services.

Goals

  • Operators have a multi-cloud deployment system that can deploy Cloud Foundry onto VMs with a strong set of day 2 operator features.
  • Provide a flexible identity/authentication and credential management system for use within BOSH and Cloud Foundry.
  • Maintain a set of databases, required for the self-contained deployment and operation of BOSH and Cloud Foundry.

Scope

  • Maintain public roadmaps for BOSH, UAA, and Credhub
  • Operate https://bosh.io
  • Provide the community with a multi-cloud reference deployment of the BOSH Director
  • Package up all infrastructure related components as BOSH releases

Non-Goals

  • Provide generic operational databases for other use-cases
  • Solve non-CF related identity and credential problems.

Roles & Technical Assets

Components from the BOSH, BOSH Backup and Restore, CredHub, MySQL, Postgres, and UAA projects.

name: Foundational Infrastructure
execution_leads:
- name: Ruben Koster
  github: rkoster
technical_leads:
- name: Ruben Koster
  github: rkoster
- name: Beyhan Veli
  github: beyhan
- name: Aram Price
  github: aramprice
bots:
- name: bosh-admin-bot
  github: bosh-admin-bot
- name: runtime-bot
  github: tas-runtime-bot
- name: cf-bosh-ci-bot
  github: cf-bosh-ci-bot
- name: cf-uaa-ci-bot
  github: cf-identity
- name: mysql-ci
  github: pcf-core-services-writer
areas:
- name: Credential Management (Credhub)
  approvers:
  - name: Peter Chen
    github: peterhaochen47
  - name: Hongchol Sinn
    github: hsinn0
  - name: Prateek Gangwal
    github: coolgang123
  - name: Markus Strehle
    github: strehle
  - name: Daniel Linsley
    github: dlinsley
  reviewers:
  - name: Duane May
    github: duanemay
  - name: Ajita Jain
    github: jajita
  - name: Andrew Costa
    github: acosta11
  - name: Greg Cobb
    github: gerg
  repositories:
  - cloudfoundry-incubator/credhub-api-docs
  - cloudfoundry/credhub
  - cloudfoundry/credhub-acceptance-tests
  - cloudfoundry/credhub-api-site
  - cloudfoundry/credhub-cli
  - cloudfoundry/credhub-ci-locks
  - cloudfoundry/credhub-deployments 
  - cloudfoundry/credhub-oss-ci
  - cloudfoundry/credhub-perf-release
  - cloudfoundry/secure-credentials-broker
- name: Identity and Auth (UAA)
  approvers:
  - name: Peter Chen
    github: peterhaochen47
  - name: Markus Strehle
    github: strehle
  - name: Hongchol Sinn
    github: hsinn0
  - name: Florian Tack
    github: tack-sap
  - name: Adrian Hoelzl
    github: adrianhoelzl-sap
  - name: Duane May
    github: duanemay
  - name: Prateek Gangwal
    github: coolgang123
  - name: Daniel Garnier-Moiroux
    github: kehrlann
  - name: Filip Hanik
    github: fhanik
  reviewers:
  - name: Irene Gonzalez Ruiz
    github: ireneGonzalezRuiz
  - name: Praveen K Kumar
    github: praveenkalluri18
  - name: Joe Mahady
    github: joemahady-comm
  - name: Georgi Genchev
    github: gdgenchev
  repositories:
  - cloudfoundry/cf-identity-acceptance-tests-release
  - cloudfoundry/cf-uaa-lib
  - cloudfoundry/cf-uaac
  - cloudfoundry/identity-tools
  - cloudfoundry/omniauth-uaa-oauth2
  - cloudfoundry/uaa
  - cloudfoundry/uaa-cli
  - cloudfoundry/uaa-key-rotator
  - cloudfoundry/uaa-release
  - cloudfoundry/uaa-singular
  - cloudfoundry/uaa-ci
- name: Identity and Auth (UAA) Go Client
  approvers:
  - name: Peter Chen
    github: peterhaochen47
  - name: Markus Strehle
    github: strehle
  - name: Hongchol Sinn
    github: hsinn0
  - name: Florian Tack
    github: tack-sap
  - name: Adrian Hoelzl
    github: adrianhoelzl-sap
  - name: Filip Hanik
    github: fhanik
  - name: Duane May
    github: duanemay
  reviewers:
  - name: Prateek Gangwal
    github: coolgang123
  repositories:
  - cloudfoundry/go-uaa
- name: Integrated Databases (Mysql / Postgres)
  approvers:
  - name: Andrew Garner
    github: abg
  - name: Colin Shield
    github: colins
  - name: Kim Basset
    github: kimago
  - name: Ryan Wittrup
    github: ryanwittrup
  - name: Pascal Zimmermann
    github: ZPascal
  - name: Nishad Mathur
    github: alphasite
  reviewers:
  - name: Andreas Kyrian
    github: Jobsby
  repositories:
  - cloudfoundry/mysql-backup-release
  - cloudfoundry/mysql-monitoring-release
  - cloudfoundry/postgres-release
  - cloudfoundry/pxc-release
- name: System Logging and Metrics (rsyslog / event-log)
  approvers:
  - name: Ben Fuller
    github: Benjamintf1
  - name: Jovan Kostovski
    github: chombium
  reviewers:
  - name: Joris Baum
    github: jorbaum
  - name: Wei Li
    github: weili-broadcom
  repositories:
  - cloudfoundry/blackbox
  - cloudfoundry/bosh-system-metrics-server-release
  - cloudfoundry/system-metrics-release
  - cloudfoundry/syslog-release
  - cloudfoundry/windows-syslog-release
- name: Stemcell Release Engineering (BOSH)
  approvers:
  - name: Rajan Agaskar
    github: ragaskar
  - name: Maya Rosecrance
    github: mrosecrance
  - name: Brian Upton
    github: ystros
  - name: Long Nguyen
    github: lnguyen
  - name: Ramon Makkelie
    github: ramonskie
  - name: Aram Price
    github: aramprice
  - name: Joerg W
    github: joergdw
  - name: Ansh Rupani
    github: anshrupani
  - name: Chris Selzo
    github: selzoc
  - name: Nitin Ravindran
    github: xtreme-nitin-ravindran
  - name: Nishad Mathur
    github: alphasite
  - name: Julian Hjortshoj
    github: julian-hj
  - name: Benjamin Guttmann
    github: benjaminguttmann-avtq
  - name: Felix Moehler
    github: fmoehler
  - name: Ahmed Hassanin
    github: a-hassanin
  - name: Clay Kauzlaric
    github: KauzClay
  - name: Ned Petrov
    github: neddp
  - name: Colin Shield
    github: colins
  - name: Ivaylo Ivanov
    github: ivaylogi98
  reviewers:
  - name: Allan Yu
    github: ay901246
  - name: Yuri Adam
    github: yuriadam-sap
  - name: Danitsa Kostova
    github: lunaticomic-vc
  - name: Saumya Dudeja
    github: dudejas
  - name: Harry Metske
    github: metskem
  - name: Rene Dollevoet
    github: lodener
  repositories:
  - cloudfoundry/concourse-infra-for-fiwg
  - cloudfoundry/bosh-stemcells-ci
- name: VM deployment lifecycle (BOSH)
  approvers:
  - name: Long Nguyen
    github: lnguyen
  - name: Ramon Makkelie
    github: ramonskie
  - name: Aram Price
    github: aramprice
  - name: Rajan Agaskar
    github: ragaskar
  - name: Maya Rosecrance
    github: mrosecrance
  - name: Brian Upton
    github: ystros
  - name: Chris Selzo
    github: selzoc
  - name: Ahmed Hassanin
    github: a-hassanin
  - name: Ansh Rupani
    github: anshrupani
  - name: Nishad Mathur
    github: alphasite
  - name: Julian Hjortshoj
    github: julian-hj
  - name: Benjamin Guttmann
    github: benjaminguttmann-avtq
  - name: Felix Moehler
    github: fmoehler
  - name: Clay Kauzlaric
    github: KauzClay
  - name: Sebastian Heid
    github: s4heid
  - name: Matthew Kocher
    github: mkocher
  - name: Ned Petrov
    github: neddp
  - name: Maria Shaldybin
    github: mariash
  - name: Colin Shield
    github: colins
  - name: Ivaylo Ivanov
    github: ivaylogi98
  reviewers:
  - name: Allan Yu
    github: ay901246
  - name: Alexander Lais
    github: peanball
  - name: Yuri Adam
    github: yuriadam-sap
  - name: Danitsa Kostova
    github: lunaticomic-vc
  - name: Saumya Dudeja
    github: dudejas
  repositories:
    - cloudfoundry/backup-and-restore-sdk-release
    - cloudfoundry/bbl-state-resource
    - cloudfoundry/bosh
    - cloudfoundry/bosh-acceptance-tests
    - cloudfoundry/bosh-agent
    - cloudfoundry/bosh-agent-index
    - cloudfoundry/bosh-apt-resources
    - cloudfoundry/bosh-aws-cpi-release
    - cloudfoundry/bosh-aws-light-stemcell-builder
    - cloudfoundry/bosh-azure-cpi-release
    - cloudfoundry/bosh-backup-and-restore
    - cloudfoundry/bosh-backup-and-restore-test-releases
    - cloudfoundry/bosh-bbl-ci-envs
    - cloudfoundry/bosh-bootloader
    - cloudfoundry/bosh-cli
    - cloudfoundry/bosh-common
    - cloudfoundry/bosh-cpi-certification
    - cloudfoundry/bosh-cpi-go
    - cloudfoundry/bosh-cpi-ruby
    - cloudfoundry/bosh-deployment
    - cloudfoundry/bosh-deployment-resource
    - cloudfoundry/bosh-disaster-recovery-acceptance-tests
    - cloudfoundry/bosh-dns-aliases-release
    - cloudfoundry/bosh-dns-release
    - cloudfoundry/bosh-docker-cpi-release
    - cloudfoundry/bosh-google-cpi-release
    - cloudfoundry/bosh-io-releases
    - cloudfoundry/bosh-io-releases-index
    - cloudfoundry/bosh-io-stemcells-core-index
    - cloudfoundry/bosh-io-stemcells-cpi-index
    - cloudfoundry/bosh-io-stemcells-legacy-index
    - cloudfoundry/bosh-io-stemcells-windows-index
    - cloudfoundry/bosh-io-web
    - cloudfoundry/bosh-io-worker
    - cloudfoundry/bosh-linux-stemcell-builder
    - cloudfoundry/bosh-openstack-cpi-release
    - cloudfoundry/bosh-package-golang-release
    - cloudfoundry/bosh-package-nginx-release
    - cloudfoundry/bosh-package-python-release
    - cloudfoundry/bosh-package-ruby-release
    - cloudfoundry/bosh-package-rust-release
    - cloudfoundry/bosh-psmodules
    - cloudfoundry/bosh-shared-ci
    - cloudfoundry/bosh-utils
    - cloudfoundry/bosh-virtualbox-cpi-release
    - cloudfoundry/bosh-vsphere-cpi-release
    - cloudfoundry/bosh-warden-cpi-release
    - cloudfoundry/bosh-windows-stemcell-builder
    - cloudfoundry/bpm-release
    - cloudfoundry/config-server
    - cloudfoundry/config-server-release
    - cloudfoundry/docs-bosh
    - cloudfoundry/exemplar-backup-and-restore-release
    - cloudfoundry/exemplar-release
    - cloudfoundry/go-socks5
    - cloudfoundry/gofileutils
    - cloudfoundry/gosigar
    - cloudfoundry/greenhouse-ci
    - cloudfoundry/jumpbox-deployment
    - cloudfoundry/os-conf-release
    - cloudfoundry/sample-windows-bosh-release
    - cloudfoundry/socks5-proxy
    - cloudfoundry/stembuild
    - cloudfoundry/usn-resource
    - cloudfoundry/windows-utilities-release
- name: Ali Cloud VM deployment lifecycle (BOSH)
  approvers:
  - name: He Guimin
    github: xiaozhu36
  - name: Tai Kang
    github: ali-tkang
  repositories:
  - cloudfoundry/bosh-alicloud-cpi-release
  - cloudfoundry/bosh-alicloud-light-stemcell-builder
  - cloudfoundry/stemcells-alicloud-index

- name: Prometheus (Bosh)
  approvers:
    - name: Benjamin Guttmann
      github: benjaminguttmann-avtq
    - name: Nicolas Herbst
      github: nmaurer23
  reviewers:
    - name: Fabian Kittel
      github: fkittelinger
  repositories:
    - cloudfoundry/bosh_exporter
    - cloudfoundry/cf_exporter
    - cloudfoundry/firehose_exporter
    - cloudfoundry/node-exporter-boshrelease
    - cloudfoundry/prometheus-boshrelease
  bots:
    - name: cf-prometheus-ci-bot
      github: cf-prometheus-ci-bot

- name: Storage CLI
  approvers:
  - name: Long Nguyen
    github: lnguyen
  - name: Ramon Makkelie
    github: ramonskie
  - name: Aram Price
    github: aramprice
  - name: Rajan Agaskar
    github: ragaskar
  - name: Maya Rosecrance
    github: mrosecrance
  - name: Brian Upton
    github: ystros
  - name: Chris Selzo
    github: selzoc
  - name: Ahmed Hassanin
    github: a-hassanin
  - name: Ansh Rupani
    github: anshrupani
  - name: Julian Hjortshoj
    github: julian-hj
  - name: Benjamin Guttmann
    github: benjaminguttmann-avtq
  - name: Felix Moehler
    github: fmoehler
  - name: He Guimin
    github: xiaozhu36
  - name: Florian Braun
    github: FloThinksPi
  - name: Philipp Thun
    github: philippthun
  - name: Johannes Haass
    github: johha
  - name: Michael Oleske
    github: moleske
  - name: Nishad Mathur
    github: alphasite
  - name: Seth Boyles
    github: sethboyles
  - name: Sven Krieger
    github: svkrieger
  - name: Tim Downey
    github: tcdowney
  - name: Katharina Przybill
    github: kathap
  - name: Ben Fuller
    github: Benjamintf1
  - name: Sam Gunaratne
    github: samze
  - name: Jochen Ehret
    github: jochenehret
  - name: Greg Cobb
    github: gerg
  - name: Stephan Merker
    github: stephanme
  - name: Clay Kauzlaric
    github: KauzClay
  reviewers:
  - name: Allan Yu
    github: ay901246
  - name: Alexander Lais
    github: peanball
  - name: Al Berez
    github: a-b
  - name: Evan Farrar
    github: evanfarrar
  - name: Shwetha Gururaj
    github: gururajsh
  - name: Sriram Nookala
    github: nookala
  - name: Serdar Özer
    github: serdarozerr
  repositories:
  - cloudfoundry/bosh-ali-storage-cli
  - cloudfoundry/bosh-azure-storage-cli
  - cloudfoundry/bosh-davcli
  - cloudfoundry/bosh-gcscli
  - cloudfoundry/bosh-s3cli
  - cloudfoundry/storage-cli

- name: Cloud Service Broker
  approvers:
  - name: Georgi Dim. Dimitrov
    github: georgidimdimitrov
  - name: Bogomil Kuzmanov
    github: bogomil-kuzmanov
  bots:
  - name: Services Enablement bot
    github: servicesenablement
  - name: cf-gitbot
    github: cf-gitbot    
  repositories:
  - cloudfoundry/cloud-service-broker
  - cloudfoundry/csb-brokerpak-azure
  - cloudfoundry/csb-brokerpak-aws
  - cloudfoundry/csb-brokerpak-gcp
  - cloudfoundry/jdbctestapp
  - cloudfoundry/upgrade-all-services-cli-plugin
  - cloudfoundry/terraform-provider-csbpg
  - cloudfoundry/terraform-provider-csbmysql
  - cloudfoundry/terraform-provider-csbsqlserver
  - cloudfoundry/brokerapi

config:
  github_project_sync:
    mapping:
      cloudfoundry: 21
  deploy_keys:
    repositories:
    - cloudfoundry/bosh
    - cloudfoundry/bosh-agent-index
    - cloudfoundry/bosh-aws-cpi-release
    - cloudfoundry/bosh-aws-light-stemcell-builder
    - cloudfoundry/bosh-azure-storage-cli
    - cloudfoundry/bosh-backup-and-restore
    - cloudfoundry/bosh-cli
    - cloudfoundry/bosh-cpi-go
    - cloudfoundry/bosh-davcli
    - cloudfoundry/bosh-deployment
    - cloudfoundry/bosh-docker-cpi-release
    - cloudfoundry/bosh-gcscli
    - cloudfoundry/bosh-google-cpi-release
    - cloudfoundry/bosh-io-releases-index
    - cloudfoundry/bosh-io-stemcells-core-index
    - cloudfoundry/bosh-io-stemcells-cpi-index
    - cloudfoundry/bosh-io-web
    - cloudfoundry/bosh-package-golang-release
    - cloudfoundry/bosh-package-nginx-release
    - cloudfoundry/bosh-package-python-release
    - cloudfoundry/bosh-package-ruby-release
    - cloudfoundry/bosh-package-rust-release
    - cloudfoundry/bosh-s3cli
    - cloudfoundry/bosh-warden-cpi-release
    - cloudfoundry/bpm-release
    - cloudfoundry/config-server
    - cloudfoundry/credhub
    - cloudfoundry/credhub-acceptance-tests
    - cloudfoundry/credhub-api-site
    - cloudfoundry/credhub-cli
    - cloudfoundry/credhub-deployments
    - cloudfoundry/credhub-oss-ci
    - cloudfoundry/jumpbox-deployment
    - cloudfoundry/os-conf-release
    - cloudfoundry/postgres-release
    - cloudfoundry/socks5-proxy
    - cloudfoundry/windows-utilities-release