 Morning folks. Hello. Hey Duffy. Where'd you get your paint? Did you paint your picture that is here? No, it was uh Who was it? It was a company? I think it was like gravitar or something like that. No, that's not right No, that might be I think I've seen that before I sent them a picture on me and just had them pick somebody to do a drawing for me. It turned out pretty good Yeah, I've had them do the characters Red Hat Summit always has like the people that come in and do those And I absolutely hated it. I was like, oh, I am not ever using this your digital copy I like the uh, I like that the stuffy to the background Emily So the fox makes sense. But where does the raccoon fall into that Emily? I've never asked That is Ricky raccoon the mascot of tag security Hello Duffy fancy seeing you here. We met up last night How is your how is your awake level? Are you? So, uh, okay coffee A bunch of Londoners in San Francisco. I'm like, I imagine the jet lag is killing them Neat. We've got most folks here. Did we already say that Aaron was running this one? Perfect. All right, which I totally forgot so Thank you for the reminder, but I I I can fly by the seat of my pants. So no, this is gonna be wonderful. Um, uh, welcome This is Tuesday's uh meeting for october the third for the tfc It's gonna be updates from the tags and erin boyd is leading. So I will pass to erin. Hooray. We've started there And uh, I appreciate the festive sweater. Amy. I think we all need to to give props to to october and your Sometimes, you know All right, so I'm actually very excited to have all the tags here and hear the updates. Um Just going through the general meeting logistics. I think we've all seen the Lf legal stuff and how we're gonna run it The agenda today is to get some updates and you know The tocs put in requests about how we do those updates to make them more useful and helpful to everyone So we're all on the same page And you know, especially want to hear about projects applying to more levels and then questions I know there's been some confusion about annual reviews. So we can cover that at the end if we have time So let's kick it off with tag after delivery Or continue to update their slides. So like like i'm gonna pause to be able to see like if there's something if there's somebody from after delivery is here Be able to like come speak to that. Um, it happens sometimes All right moving on there now tag contributed strategy. So thanks erin Thanks for pausing. Yeah, I was like, why is this out of order? Okay. So um, whoever's here from tag contributed strategy If you could kick it off, that'd be great Yeah, I don't I don't see josh. I thought he was gonna do it, but he's not here. So I will I will do it Um, so from a health standpoint, we have we have lots of new initiatives, which I will kind of talk about when we go through the slide We from an activity standpoint, most of our stuff is is mostly staffed. So the governance working group is in pretty good shape the new deaf and hard of hearing initiative, which is another new initiative that one's in really good shape as is the mentoring program Where we could use some help is contributor growth and maintainers are called those are ones we've continued to struggle to get people involved in those so if you know anyone who wants to help us just just let us know Over engaged with lots of projects. Um, cillium, chromata, cloud events, k native telepresence CRIO We've completed some work. So that's been really good. We've got a vendor neutrality doc, which Is pending. I think it's just waiting on some final approvals, but it's it's pretty much done We've done governance reviews this month with chromata crio and cillium So those those are done as well We've also Finished some work on a new governance review template so that that's a little bit more robust than the one we had in the past And then we just published a guide with advice on running inclusive and accessible events, which is also linked here So I feel like we got we got a lot done this month We still have some stuff in progress. So the moving levels task force, which is a big project They're working on defining the criteria for levels. So that's working progress right now And then the other thing we're working on is a governance self evaluation because what we've found is that in doing the governance reviews with a lot of projects um If we just gave them a checklist they could fix a lot of things and we wouldn't have to iterate over and over on the governance reviews So we're working on a governance self evaluation forum for projects where they can just fill it out And as they're filling it out they can fix the things that maybe aren't ideal and make it make the process easier for everyone And this also puts a bit more I think this will give us a little more buy-in from the projects because they're doing their own governance self assessment And it doesn't feel like take contributor strategy I don't know assessing them with a capital a So we're hoping this makes the process a little more productive And then we're also working on a higher ed initiative that's getting getting some traction, but it's still kind of work in progress Did I Did I miss anything? Catherine's on the line Catherine and Ali. Did I miss anything? Looks good to me So there was a question in chat from Emily around the vendor neutrality doc Um, was that more of a statement or a question about oh, sorry. I must have missed that. I'll I'll do that now Yep, just more of a statement. It's ready to go. Okay. Great. Thank and so I'm Really interested in the efficiencies that you're putting in place for the self Evaluation of governance and and would love to see the template that you guys have come up with As well as sharing that ventral vendor neutrality doc. So are those available for public consumption? Because they don't see a link to them here. Um, they They might be Ali. Do you know the governance self evaluation? Is that um Is that a pr somewhere that we can share or is that the draft doc? Not yet. So we are working on that in a feature branch so that we can work collaboratively, but it's not there yet So it's working progress Okay, um, can you maybe drop the feature link to the feature branch in the chat so Cool And it looks like Emily's dropped the vendor neutrality one in the in the doc Any other questions? Yeah, um, how would the slide template work for you? Uh, we have a lot of initiatives. So we kind of struggle to get everything onto the slide. I think we did a bit of uh rearranging um, but I think I think I think once we got it got the stuff in there. I think it I think it seems to work It it feels a little bit busier, but in in talking through it. I felt like the maybe the flow was a lot better than in the past Okay, and tricky part around this is basically like we won't do this again until december So we'll have like everything from kubecon as well. So just kind of getting feedback now around like is it working? What do you want to change? And sounds like we'll just work through it. So erin back to you Great. And so under request, you didn't have anything that you needed help on it. Looks like you do have a lot of work Is that still accurate? Uh, yeah, I don't think there's anything we need help on. It's um a lot of stuff is just in flight right now Okay, great. Thank you for the update done. Thanks and allie. All right. Moving on. Amy uh tag environmental sustainability Hello, um So for us we focus a lot this week and next week on the cloud name sustainability week It's going down next week. Um, we have A lot planned we have every day a blog post um also a live stream a virtual event and 24 meetups, but a couple of meetups are also a little bit later in the month So, um, there's a lot to focus on that And we also work quite a bit on green reviews. Um, so we have The new working group. We are kind of starting um a couple of efforts, um, we have a lot of like focus collaboration with the falco team And i'm just getting basically um the working group started Uh, another focus is on getting the Comps working group started finally So we already voted on the working group a couple of months ago, but We didn't have like a lot of traffic. Uh Because yeah, maybe Uh, it was like maybe not like the best. Um, like we didn't have like charter and everything So we're kind of like reiterating over this So now we have a charter we have like a more like a better plan how this working group is structured for example, we are playing to have sub team leads for example for uh pushing social media posts so that we already have like delegation in place and like a better structure overall like a more clear Like overview how this working group should be structured. Um, so we are focusing on getting this running this Like in next weeks And also one of the um requests would be it would be great to have But we will also send comms Probably later this week to have a review of the um working group comms charter And we know that it's already approved and it's already it's kind of straightforward what like the outline is But still I think this would be very helpful um contributor activity Right, we have a couple of new blog posts in the works. Um, these blog posts focus on things like how to get started as a contributor Because it's like probably also for the other tags one of the most common questions that we get And just linking to a blog post probably helps Or certainly helps We also have like some other blog posts Um for like a general topic for example, like what is In cloud name sustainability So what is like our focus? Um things like this Um, we also have a couple of blog posts Which are part of the cloud name sustainability week. So we are working with kepler scafandre, uh cube green Also linkerd provided blog posts. So we are working also with them to write some awesome blog posts for the event And we also have a couple of new contributors who are just Like organizing meetups Right um projects engaged already mentioned this so we are in contact with um like the biggest tools or projects in our Um field so they can have like an introduction Or like a project spotlight blog post Um, I think that would help a lot For example also kepler's here to the cncf I don't I don't think they already have like a Larger blog post the same thing also for scafandre, which is not part of the cncf, but it's very much a cloud native project. So I think Um, it's also very interested just to look into this project too Um, right completed work. So we had a couple of special meetings for the cloud name sustainability week a lot of meetings actually So we have like everybody in sync. Um, there's a lot of organizers So this took quite a couple of like extra meetings Um, also we have had some extra meetings to discuss the comps charter So I think that's great Um, right and I think multiple blogs I already mentioned this And upcoming um tomorrow we have our tag meeting again. Um, we are planning to Talk about like the goals like what we want to talk about in the maintainer talk at kubecon like what can we um Finish until end of this year. So just outlining or reiterating on our goals um, I think that's uh Very much needed. We have the same thing also for the working group green reviews defining like more clear goals um So everybody's aware of that And yeah, that's pretty much it a lot of a lot of focus on the cloud name sustainability week Great, it would be really helpful if you could add in Especially for the comms charter work group a link to that. Um, so that um, we can easily perform that review and provide feedback So if if you wouldn't mind providing it in the meeting chat, I can drop it into the notes as well I'll stop at the link in a second Are there more questions? There was a question as well in the meeting chat from kathy around where the blogs are going to be published So the blogs will be published on the cncf blog. So the regular blog And also on the tag blog. So we have Um one second I can send the link So we have this website And there's also in the top bar the link to the cloud name sustainability week and there's also a link to the blogs And next week we will publish Um every day one blog on this page and also on the cncf blog I have an adaptation. What does this work come? What does that represent comms? um, the comms working group is so a lot of our efforts focus around like outreach and For example, also the cloud name sustainability week is more or less like a big effort just to talk about environment sustainability and comms is for communications or everything for for example social media posts meetups which we plan to have for example at bigger conferences All this needs to be planned and in the past One of the coaches or somebody else took just this app But it makes a lot of sense. I think also to enable new contributors to have this as a role as a sub team So we don't like flood the regular meeting also with these discussions Um right also for example like how to get started with attack Um as a contributor. I think this also falls under communication a little bit Okay, and I see that Emily dropped in the draft charter. So I'll add that to the notes as well And chris short also offered the kubernetes comm sub project if you're not Um familiar with that leo it might be something great for For all of you in that working group to maybe review as a as an exemplar That's that's a good link. I think We are kind of familiar with this, but I don't think we have just looked looked it up for this one, but it's a good shout out. Yeah, thanks Chris all right. Anyone else have any questions for tag environmental sustainability? All right, great. Thank you leo moving on to tag network all right, well, we have a I have a something about a question maybe to start things off us. We have a few projects that have their annual review up. I think most of those are Sandbox. Well, most of them are sandbox level And they're listed in the upper right hand corner of the slide and and I wanted to make sure that Tag network is doing everything that the tag is supposed to currently do. Um, there's an I know that there's some some Process in flight or So there's an open discussion. Maybe Emily was helping advance. I think with with some other folks about Oh well tag involvement in Doing something alongside, you know with the annual reviews We've on occasion will will review them. It's a little more happenstance than it is A particular process and so some projects are Ameanable to or asked to present their annual review Um, whereas probably the majority um, don't and so I just wanted to do a quick check to see if there was To make sure that we were touting the The line to towing the I think for the most part like the reviews we are are just up for Our own our own reviews. So I think I think you're in good shape there I don't think there's anything particularly needed for some I've seen most of these in the In the open review list that we're we're working on trying to get through Uh, we I'm actually glad you brought this up because this has been a point of confusion So let me provide a little bit more clarity for everyone on the call. Um, there is a Document that was written as part of transitioning in your reviews to the tags There is a process that is defined in there about how a tag conducts the sandbox annual review At the september 19th to c meeting We confirmed that the tags were able to get through as many of them as they could So the next steps are for any sandbox annual review that is still on the toc repo that has an annual review label And a tag label associated with it that is still with the tags to complete Everything else that doesn't have a tag label on it is going to be on the toc to resolve Um, I will find that process and share it with you in chap here and lee I will make sure that you get a copy of that as well All right, very good Good there are Most of the ones that are listed in this slide, I think have tag network as a label if I'm looking at the right project board Which which I must be uh, so good. So there's there's Some work for us to do there then that's All right, um fair enough and then for the rest of tag network so we there were on two pro the two projects that have most recently presented for Oh Sandbox are spider pool and ease grass And so um, they think they I know ease grass. Um, probably hasn't been up for review just yet. I'm not Not sure if spider pool has but But um, they did a Good job of presenting There's a one project within tag network that is up for an archival It's some surface mesh interface so SMI Which is a spec project. Um, there had been A large portion of the that specs scope Over time had been more and more absorbed into One of the kubernetes working groups and that over time there had been a kubernetes working group established More specifically just to helping advance more of that interoperability and and sort of um api gateway based network based configuration It's referred to as a the gamma project as a Working group I think within sig network and so Uh, there'd been so anyway, that's sort of the history. There'd been a Less and less momentum on surface mesh interface itself About three months ago the we had Stopped hosting those meetings and so There weren't there weren't a lot of um Service meshes that had implemented SMI that that were that was complaining that we weren't meeting and and so just organically the The group of maintainers has arrived at a proposal to archive the project. So The history there And near as I understand, I think that's just currently up for Review by the tuc at some point And I think it's perfectly acceptable to archive projects when they have met that bar and I don't want us to necessarily be Overly hesitant about it. I think the only way we can maintain this healthy ecosystem at the scale at it As it is is to make sure we are paying attention to the health of these things Um, the annual reviews the tags, you know, really providing the boots on the ground view of this. So, um, thank you Lee, I appreciate your initiative and getting that done. So Are there any questions for tag network? I have one. How's the health of the leadership team? Yeah Yeah, we're well, um, there are three co-chairs Um currently two of them are on hiatus or maybe waiting waiting to be um replaced uh, so ken owens and Oh geez, um ed Who's here in austin? um and then there's uh One individual lin son who'd recently been i'm interested in co-chairing. So we we'd met and She she had she hadn't joined any meetings before she had offered to co-chair and so in that that was a a couple of months ago in that time She we have had one meeting together. Uh, she hosted this last meeting Under her own it was really just uh ease gress maintainer and her And one other person there they Yep, so so it needs to be better I don't they looking over the notes it wasn't uh I think that they we have to go back and offer some different counsel to ease gress In terms of what they what they were expecting So I would recommend reaching out with tag contributor strategy and seeing how you can help bootstrap some of that pipeline to tag network leadership I think there's some opportunities and some lessons learned from them working with projects that are experiencing similar Issues and challenges, but I think there's an opportunity here I can show you the strategy. All right and So I just throw on this out there Um, because you have current workload is nominal to moderate and I think we all recognize when we created the tags We were a pretty immature organization trying to build momentum and projects Do you feel like they're It needs to like tag networking needs to exist in isolation by itself it has enough work there I'm just Wondering as far as not only the health of the leadership to Emily's question But the health of the community coming to support the tag. Is that still vibrant and growing or are we kind of in a Yeah, I wouldn't Yeah, I don't yeah, I wouldn't characterize it as vibrant and growing it. Um at the moment It's like some of those parts a number of the projects that come Um are quite network centric Or like they associate with it because it's We have but but Yeah, but we're not proactively asking for either soliciting projects that might want to propose to come and present or where we had Actually, it's listed right here toward the bottom. There was a really active working group that was taking on the four initiatives that are listed there um that it had Multiple organizations involved now almost to the extent that it was probably overwhelming and so as of like the turn of this year There was a backing off from that or from so much activity. I think it was just and So it's quite quite healthy quite vibrant people were stopping in and various contributors were just showing up um But yeah, oh in over the last six months or so there it Not one of the like I don't know within this last month There was a request to help expand the disaster recovery white paper from tag storage as an example of new New working material outside of sand house out of sandbox reviews or or incubation reviews, but So there's there's projects that identify they clearly align with that with this topic, but And we had initiatives like it was quite healthy quite, you know, quite a lot of activity in the past But um between the the other two co-chairs Getting busy elsewhere Yeah, we're not we're not actively drumming up new discussions So yeah, I think it's something we we need to you know, bring as probably this You know, not health should include what is the health or the community behind it? And I don't think we're going to solve that today But I think it's worth starting to think about what does Tag networking look like in another six months and how are we measuring that health and activity and contribution and that's something You know, I think we should consider as a yeah I think it'd be a great discussion to have face to face with the to see in the tag Is is to how we solve that and how do we move forward where we Where we aren't seeing that momentum we had before what is what is the best use of everyone's time? right So Yeah, Duffy asked if you would be in Chicago Lee I won't. Um, I just don't have the the budget Everyone no one does don't worry. You're not alone there Okay, well, we'll figure out something. I just I just think it's worth asking so I appreciate it and Uh, because I didn't ask on the last one Is this template helpful for tag networking to be able to articulate all the issues that are going on Yeah, I think so. I mean just even across just even even in this this last like small discussion of like It's it's a helpful comparative. I think just as you as it's a common template And then yeah, it gives We didn't have a problem. Otherwise filling in whatever a blank slate but but I but I totally get Use of a template like yeah, I think it's a good a good idea. It's a great idea Great. All right. Thank you, Lee Moving on. There are no other questions to tag observability Hello, okay. Go ahead. Sorry, Matt Uh, hi, um, so, uh, it's nice to see everybody. Um, I Do have some feedback on the previous topic, but I'll blast through this really quick Um, I will lead to put this together, but I I think she's not here. So I'll cover this Um in terms of the overall template. Oh, I think I find it helpful actually to call out the specific areas As a forcing function. Uh, but anyway, uh as to the health Of things and what's going on. I I think given the level of engagement and active participation we have You know a number of humans We're doing quite well that said It's not on the slide, but I'll speak to it after I think there's a huge opportunity across a couple of different domains for for contribution and and really Both novel work and work that that pushes the That advances the the state of the technology And i'm excited about it, but we have two two we have a work group that's been moving along for some time now With with, you know active meetings that have been going through the summer around query language standardization We've spoken on it before but that's quite healthy and and they're moving along We've also had a series of speakers over the last six months that we've invited to speak from various specialties And and sort of a distinguished speakers series. We'd like to turn this into right now It's it's gaining critical mass. I think we need to do some programming out For the next couple of quarters And build on the success that we've already had And we've been highlighting projects that are actually not in the CNCF necessarily, but are MIT or Apache such as Klein a streaming graph interpreter or as an example We also have some active discussion, but in terms of health I think Again, we kind of have a lot of onlookers And we've carved out and defined in the tag issues in github a number of our opportunities many of them Collaborative in nature with other tags And that's what I'll speak to later about We also have a long running white paper That sort of had I view it As as both positive and opportunities for improvement, right? Like it's positive in that We've had an initial set of contributors do a whole bunch of work over the course of you know The better part of a year and then for various reasons they cycled out and new contributors cycled in and then picked it up So the overall length of how long it took to complete is you know quite long But now we've got to a point where we're going to we're engaging With the cncf's marketing folks, and we'll have the actual white paper published And it's undergone a ton of review, and it's better for it. So that's cool We've had a request uh to to review the Kubernetes metrics work group charter and activities Aulia, I think has the current status on that, but that's uh going to be ongoing We've also had a number of projects Present to the tag in the over the last few months the logging operator Open cost and kube burner are the most three recent ones We have some work going on In progress around pixie and then i'm not i'm not personally yet familiar with inspector gadget I haven't seen that on that one yet, but I know that's upcoming as well As to sort of a more what's not on the slide and How are the health of things and what one of the opportunities For a long time now. We've needed a third active co-chair We've we've messaged that up through our liaison and we're an active search But if if anyone knows or can recommend Someone who would who would be an active third co-chair for the tag that would be really good Aulia and I are have been juggling and tap dancing But our third would would spread the the load a little bit better In addition, we have I think huge opportunities for strong technical leads or just contributors Who want to participate in in in a number of opportunities? And I I see a commonality between the following domains. There's supply chain security Really the intersection of the tag secure tag security and tag observability, but With with the impact of Of that fiscally and and with all all of the eyeballs and stuff on it There's that kubernetes observability And cost monitoring all of those three have graph data science opportunities In common right so All of those things can be modeled as heterogeneous spatio temporal graphs Right so graphs that track time And a number of the projects that that we've had present As well as projects in the domain are all kind of converging around this a lot of the deep learning stuff I'll be brief around large language models, which really convolutional neural networks There are a specific instance of graph neural networks, right? So graphs and graph data science From lots of other fields over the last 20 years I think can be applied to a lot of the challenges we have in in the cloud And any native ecosystem that drive up a lot of the costs around observability tooling as well as the difficulty in saying, you know Did a cve come out yesterday that i'm running in my massive cluster farm, you know, and do I care? Uh and kind of use profiling data to know if I do have the cve Is the part of the cve that is a risk even running in my environment That's almost an unanswerable question at scale, but graphs provide the answer So I think we have a lot of like cerebral nerdy academic engagement We could do with various research arms of cncf member companies like microsoft and google and vmware They all have huge research groups to end their members And we also have projects that are positioned to be boots on the ground To the vendors that comprise the cloud native end user ecosystem What we have in the tag is like the right organizational and structural Entity where that innovation can happen I'm hoping that with coup con and and maybe the toc can help here. Uh, we can really just get More people realizing that they can just step up and do things and then join And I think what would really unlock that in terms of practical reality at least for tag observability And I'm not sure if this might be true for other tags, but uh, we have a huge back a lot of videos that need editing We need we need, you know programs around The speaker series for example, but you know with enough resourcing so that we can do lead ins and and and Interesting interviews and we can really market it to get that engagement that can fuel this potential innovative reactor So I know that there's a lot of the tripping language there And this isn't about the cup, but really it's we do need Contribute, you know traditional contributors, but really non-code contributors I think we're more than limiting factor in the gaming factor to realizing that so we need both in other words so I'm picking up on a pattern of most of the tags Needing to engage with tag contributor strategy in one way or the other and I'd hate for that to be a one-off to each one of the tags because it does sound like Um, there's a lot of overlap between the tags and the purpose of this meeting is to at least take the leadership within each One of those and see where there are parallels and we can work together, but maybe that Love to hear from the tags going forward. What are the impediments to doing that and understanding the work and where these two things come together? Um, there is a new tag being proposed around AI and cloud native and it sounds like there's some overlap there so As far as the co-chair goes, I'm curious is to Um, the people currently Showing up and contributing on tag observability why there isn't an opportunity for someone who is very active in that to be a chair And what what the search entails of finding that third co-chair? So to respond in order, um, I think those are all I agree with those points. Um, I don't see however They're being overlap in terms of duplicative overlap I I see sort of like a Venn diagram where where there's overlap. It's possible because But you know for for example in supply chain security, right there There are there's the observability to to get the signals that you need that feed into sort of sort of all of the stuff happening in in the in the land of packages and cvds and and really it really is those two Set of domain experts collaborating That that is what I mean by that that that overlap just to be clear. I I don't see it as duplicative or redundant. I see it as Complementary. Yeah, I see it as complimentary too. I'm just okay. Well, I wanted to just Creating those overlaps in the Venn diagram and the most efficient way possible and I exactly yeah I highlighted a few but you've elaborated on a lot of them in the issues as to the However, the more the more impactful question you're asking around the the co-chair search It's been sort of ad hoc and there's been a little bit of ambiguity about what the right way to do that is like We've messaged up through our liaisons and we've kind of like You know kind of been consistently Putting out there in our meetings and things like hey, there's an opportunity here However, what we don't have and probably should is a more well formed Intentional search as you would do an executive search or as you would do, you know, a search for steering committee members for some Deliberative body or technical body And so if there is a template for that or if there is a Well-formed recommendation from tech contributor strategy other Or other we could use it, but I think there's a general feeling and this is me inferring things Which could be wrong that you know through the TOC and through the other bodies in the CNCF and the Linux foundation that's sort of like the networking conduit by which we would source Not own, you know folks like co-chairs that that could actually motivate resourcing as well and then really be a great fit that kind of search isn't something that That ad hoc I think is is Doing it ad hoc isn't quite enough. So I think that we could benefit from something more formalized and more open Right, like so that we could leverage that network that that we must have one in the CNCF and just on this call alone So so how to how to engage in that communication that that that over the That's been getting better and all of the work around tag TOC interactions. I think Pushes that along but we could use some help there Okay, that's excellent feedback. Thank you. I've captured it in my notes and we'll put it in the formal document Yeah, it could be a little bit verbose sometimes so I'll stop No, it's all good if if you wouldn't mind adding At minimum the link to the k8s metrics work group charter and activity so that can be reviewed Um, and then anytime that you all have links for instance to pixie or inspector gadget It's really nice just to be able to if someone only has this presentation to link those out for the next meeting That would be great. Yes I'll put in you know over the last number of years. We've actually been very very link heavy this one slide. Um, Case in point. We're a little resource constrained. Uh, so But but to your point I'll update this slide in the existing deck a little later today And in general as you can see from the last three years or so Pretty much the whole slide is one giant link A link field rather This one's an almost thank you matt appreciate the feedback and um, thank you for your feedback as well. I'm looking forward to All the good things coming out of out of this fall All right. Thanks tag runtime All right, so hi everyone. This is heba. I will represent the tag runtime today. So, uh, about the health we are busy Planning and preparing for the cube calm. We had a kiosk and cube calm this year and we have a project meeting as well Trying to gather more presentations and talks during, you know, like these two opportunities for all the working groups and the old and other projects like from sandbox to graduation to come and share with everyone what they are we're we're doing is the last the last couple of months And about about the health as well like we have a regular meeting Sometimes it's like every week. We are trying to push back a little bit to have it bi-weekly but You know, like because we have a lot of Of projects. So sometimes we have it weekly and the good news that we have a very active and very Big addition to diagram time Rajesh, so we have a new technique And Yeah, the thing that we decided to To have it so we can just gather all the information from the working group because we have About four or five working groups right now and working on the you know, like to add another one we we had a new Meeting just it's a quarterly meeting With all the working group leads Making sure that we know what's going on if there is any blockers if we can help Just to make sure that we we keep connecting with all the working groups And of course, you know, like they can they can know Which working group is working with what and you know, like if there is any opportunity to to collaborate Moving to the contributor activities We worked with the tocs on sending the thank you to contributors who Who did like, you know, like amazing job, which It was really good Good thing and we had a really good feedback from from the contributors as well and About the projects we have a long list of projects We we had the dragonfly just presented and We have Coordinated gbt Usernets it's it's a lot of other projects as as we mentioned here And also about the work we Got number of sandbox annual reviews already completed So it it was a good collaboration from lots of members within all All the diagram runtime members Yeah, so In progress we have Two things in progress the first one As I mentioned before we are In the final steps to have the os working group ready By, you know, like selecting the chairs the leads, you know, like the meeting cadence And about the AI working groups We are about to Reach out to tag observability because this would be a collaboration From the ownership Between us and the tag observability. We wanted to have this discussion first and hopefully we can Move forward with AI working group Um, yeah, I think that's it great On the on the collaboration part in the toc issue. I think I wrote a couple weeks ago From tag observability that it is consistent with our charter as well. So we're looking forward to that very much sure Great it sounds like It's a healthy Contribution right now in tag runtime and leadership as well Just gathering that from the amount of projects you have and work groups that are being creative Uh, is there any questions for tag runtime? You okay with the slide template Uh, yeah, it works. Uh, there is a lot of things to to share. So it was a little bit tight for us But as you know, like a structure, I I like it. Got it. Okay. Thank you Great. Thank you Right moving right along tag security Hello everyone. Uh, this is Pushkar. I'll represent our tag today. So we have very exciting announcement this month Uh, we have a co-chair transition uh, Aradna Was our co-chair for a couple of years. She did a lot of work starting as a member A few years back with cloud native security white paper then Still continuing on doing new things with zero trash white paper We're glad she's gonna stick around in the tag and continue to contribute But with that, we also have a new chair, uh, marina moore Who has been a tech lead in the past? A few years has been a member for more has been a prolific contributor on security supply chain She is I think also on the call. So I encourage everyone use your zoom emojis to welcome her Uh, and uh, yeah, very excited. Also. Thank you in terms of uh Doing the transition Uh, few months apart where I joined in june and then now we have marina joining So as a result, we were able to smooth out the transition versus last time when Suddenly two chairs were transitioned around the same time. So appreciate that being made possible by toc In terms of a contributor activity We've started to do more of boards Instead of individual issues for different working groups and tracks So security assessment board has been long standing for a while These you can click on the link and find issues that are In different statuses are generally the ones in in progress and Backlog are the ones actively being worked on Uh, we have supply gene working group board as also which is using the newer github boards So we have three statuses there new backlog in progress and then As we make progress those will change into different columns A couple of requests from the overall community not for a toc. So both those links are Not ready for a toc review yet, but Something we want to share with the wider audience since we have reviewed it internally right now so the first one is supply gene security related One or two pager which is intended for Executive audience. So anyone who will approve funding for any supply gene security programs and end users If you want to make a case for them on why this is important for your organization This is what we focus in the community in the group have drafted So please share with your friends colleagues working on this field Give us your feedback. I think that will really help and just remember the audience is more executives like CISOs CTOs or VPs The second one is mostly on Maintainer perspective. So there we have made a spreadsheet essentially with the list of security tools that map to different supply gene security controls and we are asking for Folks who maintain those tools to add their names The tools and what different controls this particular project supports So share same thing share with your friends. If you are one of those maintainers, please add yourself as a column there and Looking forward to gathering more of that information In terms of projects engaged, we continue to have a strong list of projects Either engaged with presentations or security assessments catalog and karmada are the new ones compared to last time Two items to call out in terms of completed work Pixi security review is wrapped up zero trust white paper Has been reviewed extensively by the group so far. So we're Pretty soon going to do a final round of review between our chairs Then I share it with TOC liaisons and then basically go from there in parallel We have created a ticket with the CNCF marketing to also make sure the design is in progress the in progress items flat car assessments We have security pals relaunch with nyu Which will pick up momentum around just after coupon until mid december or so when a bunch of different Student groups will help us do self assessments for different CNCF projects We are very lucky to have One of our tech leads who is an nyu professor also A tech lead in tax security do Leading this from both sides. So we'll continue to work with justin on that And in terms of upcoming things, we have cube flow assessment in progress Very excited to talk soon. Just waiting for a call with linsee later today About security hub and ctf for upcoming cube con We've taken a lot of feedback from last time when we did security village and Just the attempt would be to make it better than it was last time And finally Research block sub activity where we would want to publish things that are Relevant to the community and then how do we make it as a process that is consistent overall? So, yeah, I'll stop there. I know there is another attack We need to cover in the time we have Thank you. Pushkar. It's a very good overview with a lot of Dense information. Um, so thank you for adding that all in here. Um, the research blog sub activity, I guess is that Intentional is that meant to be a work group or what what exactly do you mean by that? Or is that just organizing blogs onto the cncf website if you could just elaborate on that quickly before Yeah, it's mostly like starting as a proposal We generally start as anything as a proposal then it will be converted to a project within the tag If there is interest and then we will just continue to support it as an ongoing project in attack I don't believe we need a working group at this time for this Great. That makes sense. Does anyone have any questions for tag security? Do you give the slide does a lot in here? Yeah, I think templates is great. Uh, one thing I was curious would be Can we add sections like for example if I had more information to share about security hub? I was thinking just put it in a separate section with some Very salient points. Is that possible? Yeah, I mean like the we're really just trying to be able to have like the uh How are things going? What requests do you have and really being able to surface those in a way that like just kind of makes more sense? So, um Be bold basically All right. Okay. Cool. That I mean december december is your next opportunity for this. So, um, uh, Are there plenty of time to be able to plan and plenty time to forget about it one of the two? Yeah, I I'll plan to remember and that's totally fine. Totally fine. All right. Um, that was all I had All right. Thank you, Amy Great. All right Tag storage Take it away Hi, this is shing from tech storage We finished the sandbox reviews for two projects KDA up and for vika There is another story project one yard that has submitted their Any reviews? We don't know the timeline for when that needs to be done yet. So reviews pending for that waiting for more guidance from the toc on that and uh canister So can you suggest got approved to be a new sandbox project? another sandbox project open ebs Got some concerns from toc regarding The house There was an issue that proposes the project to be archived But there are comments from the open ebs community that the project is still Active. So toc asked tech storage to make recommendations We are working on that And since last update, uh, we have this project called kahu It's a kubernetes backup and restore project That gave a presentation at the tech meeting. They are interested in applying for cncf sandbox However, they are already a sub project under soda, which is On the links foundation already. So Uh, I that's a question for the toc. I don't know in that case Can they still apply for sandbox or it's already part of the Yep They can apply to normal channels. Um, if they want to be able to come over we can work out what needs to happen around all of that. So Okay, yeah, encourage them to apply. How's that there? Sure, I will let them know Um, and so, uh, we have a new tech storage co-chair rafio Uh, so he was initially planning to attend a kubecton shanghai in person But unfortunately he couldn't get a visa approved So we recorded a maintainer session for kubecton shanghai instead We will be there for kubecton north america. We have a maintainer session there Uh, the the white paper that we collaborated with Uh, data on kubecton needs community On database patterns is still reviewing progress. There are some great comments. So we are still working on addressing them Uh So li mentioned earlier that we have this new initiative which is to collaborate with tech network on clownative disaster recovery networking options And so in terms of a house We do have contributors who are helping with the sandbox reviews and the white paper contributions And if you have new projects got presented at the tag um So one question we have is uh, the we did open an issue With cncf to publish a blog for their cloud native disaster recovery White paper, but has been pending for quite a while. How do we move forward? Is that If you open an issue we might not have actually like tracked it directly point it toward point point me towards it And I'll see what I can do to be able to help and block you on that. Okay. Thank you. Cool Uh, that's all from tech storage All right. Thank you. Is there any questions for tech storage? thank you Thanks, is that the end? Amy? It is it is the end. Um, uh projects moving levels is now at the board. Um, and the updated link is The nine link not five. So I will correct the error Matt you have a question Oh, no, I actually Okay, you are unmuted and not on purpose. Lovely. All right All right, um, thank you all for providing the toca on feedback with the template and how it's working for you And we'll continue to refine it as we go forward. Um, we'll be especially interested if you're able to fit all the content after cube con looking forward I won't be there in person, but I know many of the toc will be um, I'll be joining remotely though I'm looking forward to the collaborative discussions plan between the tag and the toc. So thank you all for your updates today See you in Chicago All right