Merge branch 'main' into main

Signed-off-by: Nate W <[email protected]>

programs/lfx-mentorship/2025/01-Mar-May/project_ideas.md

@@ -19,6 +19,68 @@
 
 ## Proposed Project ideas
 
+### KCL
+
+#### A test framework developed for the KCL package management tool
+
+- Description: The main content of this topic is to refer to the structure of the test part of common programming languages, such as go and rust, to develop a test framework for KCL's package management tool to help developers better write test cases for the project. The main function of the test framework is to provide a mock environment that supports compiling KCL and interacting with simulated environments such as OCI/Git registry.
+- Expected Outcome: 
+  - A mock environment is started during testing. This mock environment can complete the test without being affected by the network.
+  - In this mock environment, complete the test of: `kcl run`, `kcl mod add`, `kcl mod pull`, `kcl mod push`.
+- Recommended Skills: Go, Rust
+- Mentor(s):
+  - Zhe Zong (@zong-zhe, [email protected])
+  - Heipa (@He1pa, [email protected])
+- Upstream Issue: https://github.com/kcl-lang/kpm/issues/593
+
+#### KPM & LSP Integrated
+
+- Description: Sometimes users will edit the `kcl.mod` file in the IDE to update project dependencies. The integration between LSP and KPM needs to be strengthened, it mainly includes two parts of functions. 
+  - According to the content written by the user in the kcl.mod file, the IDE automatically calls the `kcl run/mod add/mod metadata` and other functions, and feeds back the results in the IDE. 
+  - According to the user's operations in the command line, the changes of `kcl.mod` and project content are synchronized to the IDE.
+
+examples:
+
+1. When users update kcl.mod in the IDE, the required dependencies are automatically downloaded.
+
+2. When users use the kpm tool to update dependencies, the IDE can be updated (recompiled). For example
+```kcl
+import k8s  # Error: Module not found
+```
+
+use `kcl mod add k8s` to download the dependency `k8s`.
+
+kpm will download the k8s package and then the IDE errors will be eliminated
+
+- Expected Outcome: 
+  - Complete at least the following parts:
+    - IDE triggers automatic dependencies updates of package management tools.
+    - Automatic synchronization of kcl.mod files.
+    - IDE users actively trigger dependency downloads, it looks like: a button or link for user to download the missing dependencies.
+    - After the dependency update is complete, the IDE triggers a recompile to clear the error
+- Recommended Skills: Go, Rust
+- Mentor(s):
+    - Heipa (@He1pa, [email protected])
+    - Zhe Zong (@zong-zhe, [email protected])
+- Upstream Issue: https://github.com/kcl-lang/kcl/issues/1847
+
+### KubeArmor
+
+#### Providing Zero-Trust policies for popular workloads
+
+- Description: KubeArmor can whitelist processes and assets based on set of rules provided through the policies. This feature allows KubeArmor to achieve zero trust for a workload. However, knowing the allowed behaviour for a workload and manually creating these policies is a pain. Therefore we want to provide Zero-trust policies for popular workloads like grafana, WordPress, redis, etc. (let's say some 100 workloads). We want to make these Zero-Trust policies available as artifacts.
+
+- Expected Outcome: Create a registry of policies that allow users to seamlessly fetch and apply policies for popular workloads.
+
+- Extended Goal: Since applications will have newer versions and the existing Zero-Trust policies may not work as expected. We can have an automated system to generate these Zero-Trust policies and so we can also automate the process of generating Zero-Trust policies for every version available or newer versions as well.
+
+- Recommended Skills: familiarity with Golang, K8s CRD(Custom Resource Definition), YAML.
+- Mentor(s):
+  - Rishabh Soni (@rootxrishabh, [email protected])
+  - Prateek Nandle (@Prateeknandle, [email protected])
+  - Barun Acharya (@daemon1024, [email protected])
+* Upstream Issue: https://github.com/kubearmor/KubeArmor/issues/1959
+
 ### OpenKruise
 
 #### Implement Fuzz testing for OpenKruise