12th Oct 2022 : Steering and Technical Committee (STC) meeting

[msfussell]

Oct 2022 STC meeting.

Proposed Agenda will be update based on email feedback and community raised issues

STC Attendees:
@msfussell (Diagrid)
@yaron2 (Diagrid)
@artursouza (Microsoft)
@jackzhao (Alibaba)
@cvictory (Alibaba)
@Forrest-zhao (Intel)
@paulyuk (Microsoft)

Previous Sept meeting notes #208

Action items from previous meetings

1. Action: @paulyuk - Update on shared Dapr credentials using 1Password account.
2. Action: @artursouza to create a plan for how the LTS branches are managed. On hold.
3. Action: @msfussell - Update the documentation. Update the cadence for security reviews and releases. docs#2795

Oct 2022 STC New Agenda

1. @yaron2 - how/if we can accept pluggable components contributions into Dapr. See discussion here: Request for 2 sandbox projects for pluggable components #231
2. @paulyuk - I'd like to share initial ideas to try this month on a revision of the dapr.io website.
3. @msfussell - Make STC aware of the Dapr release lifecycle proposal document. Shared here https://docs.google.com/document/d/1IOkhZSLsRxwhXqrhnCB6vTCD3JxLQ7nmc4P8Ua2uWJ8/edit
4. 1.10 release schedule. Planned for next Jan/Feb next year.
5. Agreed next STC meeting Thurs 10th Nov 2022

[yaron2]

I'd like to discuss how/if we can accept pluggable components contributions into Dapr. See discussion here: #231.

[paulyuk]

I'd like to share initial ideas to try this month on a revision of the dapr.io website. Note, unfortunately we do not have page-by-page level analytics working on this site (dapr/website#65), so my first proposal is to add deeper instrumentation this month, so we can learn about where users like content and/or drop off, and that will inform highest priority changes to make for next month.

Full details of the Oct 2022 refresh proposal are here:
dapr/website#66

I can demo the prototype in the meeting.

[paulyuk]

I'm also pleased to report the progress of moving all Dapr assets to the identity and credential vault used by STC, along with 2FA protection. We are 100% governed with Dapr independent identities, and 100% 2FA too with the exception of Nexus package manager for Java which does not support it.

[msfussell]

Resolved