[Governance Review]: Dapr

[msfussell]

Project Name

Dapr

Project Website

dapr.io

Contact Details 1

@msfussell

Contact Details 2

@yaron2

Links to communication channels

https://discord.com/channels/778680217417809931/786316016241475624 (Discord maintainers channel)

Reason for governance review request

Application for moving levels from Incubation to Graduation

Are there any sub-projects, plugins, and related?

https://github.com/dapr/components-contrib
https://github.com/dapr/cli
https://github.com/dapr/java-sdk
https://github.com/dapr/js-sdk
https://github.com/dapr/dotnet-sdk
https://github.com/dapr/python-sdk
https://github.com/dapr/go-sdk

Governance model

The Dapr governance model was based mostly on a reduced version of the Kubernetes governance and Knative governance hence closely aligns with the CNCF Governance Templates.

The Dapr project has a Steering and Technical Committee (STC) for governance consisting of Alibaba, Diagrid, Dotmatics, Intel and Microsoft. The STC has been in place since Nov 2021 when Dapr was submitted to CNCF.

Governance documents

• Project Roles, Membership levels and Community Manager responsibilities
• STC Charter https://github.com/dapr/community/blob/master/steering-and-technical-committee-charter.md
• Maintainers https://github.com/dapr/community/blob/master/MAINTAINERS.md
• Code of Conduct https://github.com/dapr/community/blob/master/CODE-OF-CONDUCT.md
• Release Process https://github.com/dapr/community/blob/master/release-process.md
• Security Response Process https://docs.dapr.io/operations/support/support-security-issues/

Governance Execution Examples

Voting

• The Dapr project has a Steering and Technical Committee (STC) consisting of Alibaba, Dotmatics, Diagrid, Intel and Microsoft. See STC charter and members.

• The agenda and notes from each STC meeting held each month are recorded in issues. Annual goals are set in Dec for example 2023 goals and 2024 goals

• In Oct 2023 open STC elections were held and a new STC was voted in, currently at 7 members. We are looking to expand the STC to 9 or 11 members.

Promoting a contributor / demoting a maintainer

• Promoting example - Contributor to Approver REQUEST: Approver status in dapr/dapr for cicoyle dapr/community#526
• Removal example - REQUEST: Remove Maintainer Role in js-sdk for DeepanshuA dapr/community#522

Security Response

• Example of this in practice, the latest v1.13.4 patch release was due to a reported CVE, showing that this process is in operation. This was reported to the security alias for the maintainers.

Meeting recordings

• The monthly agenda and notes for each STC meeting are recorded in issues.
• The biweekly community calls are on the Dapr You Tube Channel

Governance Evolution

We haven't made adjustments to the steering and technical committee.

Any specific aspects of your governance structure are you seeking feedback on?

The main desire to expand the STC from 7 to 11 members, which is stated in the current charter.

Do you have any concerns or specific areas where you feel your governance could be improved?

None currently

Additional notes and resources

No response

[dims]

xref: cncf/toc#1354

[angellk]

@aliok @geekygirldawn @jberkus is someone officially assigned to work on this governance review for a project that is in due diligence for Graduation?

[jberkus]

/assign @mrbobbytables @ edrob999

Ed and Bob are taking this one.

[geekygirldawn]

Merged as #724