CNCF Incubation Readiness: Governance Restructuring & DD Required Items

[gbartolini]

Tracking issue for CloudNativePG's CNCF incubation due diligence, per cncf/toc#1961 and the feedback being received from the TOC as part of the process.

Two workstreams feed this epic:

1. Five DD-required items that must close before the TOC vote (plus one post-incubation commitment).
2. A governance restructuring, proposed by the maintainers and supported by the TOC, that separates org-level governance authority (Steering Committee) from technical authority (subproject maintainer committees).

Before the TOC vote

• Ratify the governance restructuring proposal (community review) — cloudnative-pg/governance
• Rewrite GOVERNANCE.md: subprojects, maintainer committees, steering charter — cloudnative-pg/governance
• Implement org-balanced voting (one vote per org) — cloudnative-pg/governance
• Formalise non-EDB maintainer pathway; elevate initial non-EDB subproject maintainers — cloudnative-pg/governance
• Form the Steering Committee; hold first meeting with published minutes — cloudnative-pg/governance
• Document the Security Response Team (roles, triage, escalation) — cloudnative-pg/governance
• Fix EDB logo/commercial link on cloudnative-pg.io — cloudnative-pg/cloudnative-pg.github.io
• Update SECURITY-INSIGHTS.yml primary contact to security@cloudnative-pg.io — cloudnative-pg/cloudnative-pg
• Update .goreleaser.yml maintainer to a project email — cloudnative-pg/cloudnative-pg
• Complete TOC adopter verification interviews (3+ required) — cloudnative-pg/governance

Post-incubation

• 6-month progress update to the TOC — cloudnative-pg/governance

References

• CNCF project-template: GOVERNANCE-subprojects.md
• CNCF vendor neutrality guidelines