[VOTE] Establish Apache Reqsign as a top-level project

[Xuanwo]

Hi all,

Based on the prior community discussion in apache/opendal-reqsign#821, the confirmed initial PMC and Chair discussion in apache/opendal-reqsign#846, and the review in this thread, I am calling a vote on the proposal to establish Apache Reqsign as a standalone Apache top-level project.

This single vote covers the proposal as a whole: the ASF Board resolution, the initial PMC, Zili Chen as the initial Chair, the transfer of the Reqsign subproject from Apache OpenDAL, and the transition plan below.

The suitable-name search for "Apache Reqsign" remains in progress in parallel. This proposal uses the name "Apache Reqsign" subject to successful name approval. If the name review requires a material change, the revised proposal will return to the community before Board submission.

Voting

This is a procedural vote. Votes from Apache OpenDAL PMC members are binding; all other votes are advisory and welcome. The proposal passes by a simple majority of binding votes.

The vote will remain open for at least seven days, through 2026-09-01 23:59 UTC.

Please cast your vote as:

• +1: Approve the proposal
• +0: No opinion
• -1: Do not approve the proposal because...

Please cast or confirm your vote after this formal vote has opened. Votes posted while this thread was still an RFC will not be counted automatically.

Proposed ASF Board resolution

Resolution to Establish the Apache Reqsign Project from the Apache
OpenDAL Reqsign Subproject

X. Establish the Apache Reqsign Project

WHEREAS, the Board of Directors deems it to be in the best interests
of the Foundation and consistent with the Foundation's purpose to
establish a Project Management Committee charged with the creation
and maintenance of open-source software, for distribution at no
charge to the public, related to signing HTTP requests to cloud
services.

NOW, THEREFORE, BE IT RESOLVED, that a Project Management Committee
(PMC), to be known as the "Apache Reqsign Project", be and hereby is
established pursuant to Bylaws of the Foundation; and be it further

RESOLVED, that the Apache Reqsign Project be and hereby is responsible
for the creation and maintenance of software related to signing HTTP
requests to cloud services; and be it further

RESOLVED, that the office of "Vice President, Apache Reqsign" be and
hereby is created, the person holding such office to serve at the
direction of the Board of Directors as the chair of the Apache
Reqsign Project, and to have primary responsibility for management
of the projects within the scope of responsibility of the Apache
Reqsign Project; and be it further

RESOLVED, that the persons listed immediately below be and hereby are
appointed to serve as the initial members of the Apache Reqsign
Project:

* Chojan Shang <psiace@apache.org>
* Erick Guan <erickguan@apache.org>
* Han Xu <suyanhanx@apache.org>
* Hao Ding <xuanwo@apache.org>
* Hao Jiang <dentiny@apache.org>
* Liuqing Yue <liuqingyue@apache.org>
* Mingzhuo Yin <silver@apache.org>
* Qinxuan Chen <koushiro@apache.org>
* Zili Chen <tison@apache.org>

NOW, THEREFORE, BE IT FURTHER RESOLVED, that Zili Chen be appointed
to the office of Vice President, Apache Reqsign, to serve in
accordance with and subject to the direction of the Board of
Directors and the Bylaws of the Foundation until death, resignation,
retirement, removal or disqualification, or until a successor is
appointed; and be it further

RESOLVED, that the Apache Reqsign Project be and hereby is tasked
with the migration and rationalization of the Apache OpenDAL Reqsign
subproject; and be it further

RESOLVED, that all responsibilities pertaining to the Apache OpenDAL
Reqsign subproject encumbered upon the Apache OpenDAL Project are
hereafter discharged.

Background and rationale

Reqsign is an ASF-hosted Rust project for signing HTTP requests to AWS, Azure, Google, Huawei, Aliyun, Tencent, Oracle, and other cloud services without requiring full vendor SDKs. It already has a separate repository, release cycle, and users outside OpenDAL, including uv and sccache.

Reqsign has been developed under the Apache OpenDAL PMC and ASF processes. Its provenance and IP review are recorded in the OpenDAL Reqsign IP clearance, and its source releases are published through the Apache OpenDAL distribution area.

The readiness assessment and remaining governance considerations are documented in apache/opendal-reqsign#821. Establishing a focused PMC would give the distinct Reqsign community direct responsibility for releases, security, community growth, infrastructure, and Board reporting.

Proposed transition plan

After the ASF Board approves the resolution, the new PMC would coordinate with the OpenDAL PMC and ASF Infrastructure to:

1. Rename apache/opendal-reqsign to apache/reqsign, retaining repository history, issues, pull requests, and discussions.
2. Establish reqsign.apache.org and migrate the project website.
3. Create dev@reqsign.apache.org, private@reqsign.apache.org, and commits@reqsign.apache.org, then update repository notification routing.
4. Move source-release distribution, KEYS references, release metadata, and archive paths from the OpenDAL area to the Reqsign area.
5. Transfer GitHub release environments, crates.io publishing access, and other release credentials to the new PMC.
6. Establish the initial committer roster in coordination with the OpenDAL PMC while preserving contributor history and appropriate existing access.
7. Publish standalone governance, security, community, compatibility, and release documentation.
8. Add Apache Reqsign project metadata, including its DOAP entry, and begin the Board reporting schedule for a newly established TLP.
9. Update OpenDAL documentation and metadata to describe Reqsign as a related standalone ASF project rather than an OpenDAL subproject.

Until the Board resolution is approved and the relevant infrastructure transition is complete, Reqsign remains an Apache OpenDAL subproject governed by the OpenDAL PMC.

Best,
Xuanwo

[github-actions[bot]]

Mailing list thread: https://lists.apache.org/thread/b4tlm4vcbzknr0sjq6z0jzppyr565l2y

[tisonkun]

+1

Why not just call a vote to reduce paper work :D

The consensus has already softly reached in the previous thread.

[Xuanwo]

I'm a bit confused here. My currnet understanding is we don't need a vote anymore

[tisonkun]

Fair enough as the consensus is very clear.

Just a bit sticky not to have a [VOTE] thread. But it should be fine.

[Xuanwo]

Let me just update this one.

[Xuanwo]

+1 (binding)

I support establishing Apache Reqsign as a standalone ASF top-level project, including the proposed Board resolution, initial PMC, Chair, transfer from Apache OpenDAL, and transition plan.

[PsiACE]

+1 binding

[dentiny]

+1

[Xuanwo]

this is a binding vote.

[yihong0618]

+1 binding

[Xuanwo]

this is a non-binding vote

[morristai]

+1 binding

[silver-ymz]

+1 binding

[koushiro]

+1 binding

[suyanhanx]

+1 binding

[erickguan]

+1 binding

[Xuanwo]

The vote has concluded and passed.

Binding votes:

• +1: 9
• 0: 0
• -1: 0

Advisory votes:

• +1: 1
• 0: 0
• -1: 0

The Apache OpenDAL PMC has approved the proposal to establish Apache Reqsign as a standalone ASF top-level project, subject to successful completion of the suitable-name review as stated in the vote.

The next steps are to complete the name review and prepare the Board resolution for submission.

Thanks to everyone who reviewed and voted.