 Good morning, everyone. I hope you all had a lovely evening last night. And welcome to day two of KubeCon Cloud NativeCon Europe 2023 and our second set of keynotes. It's fantastic to see the auditorium packed. This is wonderful. We hope you enjoyed our video updates from graduated projects yesterday because today we're kicking things off with some more updates and some exciting progress with Kubernetes. So sit back and let's hear what's new with Kubernetes. This is Sheen. I'm happy to share with you some highlights from Sixth Origin. We have a GA feature that delegates FS group to the CSI driver so that warning permissions can be controlled using month options. In 1.27, we have a beta feature that speeds up container startup time by mounting warnings with the correct security label. We have another beta feature where a new persistent volume access mode can restrict access to a single pod on a single node. In 1.27, we also introduce an app feature that allows the CSI driver to support consistent group snapshot of multiple volumes. Come to our next session to learn more. Thank you. Hello, this is Mike Ng, one of the open cluster management developers. OCM is a project focused on multi-cluster fleet scenarios while being cloud vendor agnostic. It provides a lightweight control plane and it's easily extensible. It features a cluster inventory, portal distribution, content placement, policy for configuration and governance, application lifecycle management, a flexible add-on framework, and much more. Some of our new features in recent releases are STO multi-cluster mesh add-on, community collaboration, ARGO CD integration, Visual Studio Co extension, policy add-ons enhancements for resource management templating. The OCM community is growing rapidly. Please visit our sessions and website for more information. Thank you. Hi, everyone. I am Navaram from the Kubernetes Steering Committee. Today, I bring to you some major governance updates targeted at improving the long-term sustainability of the project. First, we formally split the chair and tech lead roles. Earlier, the tech lead role could roll up into the chair if no tech leads were defined. And this led to a lot of confusion with people conflating the roles together. Second, expanding on our sub-project owners were adding a new role, the sub-project lead. This is largely to formally recognize the people who are already doing the work. These changes should clarify responsibilities and pave a way for more people to step into leadership. An announcement. Kubernetes now publishes container images to a shiny new registrator, registry.krs.io, which is faster and offers a much better experience. You should switch to the new registry as the old one is no longer updated and will go away in the future. If you're interested in contributing or want to chat with some of our maintainers, swing by the Kubernetes Meet and Greet tomorrow. Thanks. A big hello from SigDocs. The localization sub-project is now official and we have our docs available in 15 different languages. The following languages still need some support to make sure they're delivering quality content. Ukrainian, German, Polish, and newly launched in 2022, Hindi. There's been renewed interest in creating a localization and so we want to remind everyone that to do so, you need to be a Kubernetes organization member, which means you're already contributing to the project in some way. We really look forward to seeing new localizations and continued work on our current languages throughout 2023. Welcome everyone to our SigRelease project update for KubeCon. We finally released Kubernetes 1.27, so a huge shout out to the whole release team and everyone who is involved in this process. We also enhanced our processes around platform support, optimized our build pipelines, and reworked the enhancements as part of our roadmap and vision. You should also apply to the upcoming 128 release cycle as a shadow. And also, what's next in release engineering? This was a challenge for the release engineering team. We did our part to help with the registry migration from blog posts to adapting the processes to the new community infra. This hasn't stopped us from innovating, though when we've improved the way we built our system packages, standard release banner isn't even created a new subset that's there for anybody to use. Thanks Adolfo. And if you're interested in SigRelease, feel free to reach out to us directly or just attend our weekly meetings. Thanks. My name is Marley Puckett and this is the Sig CLI project update. In 2022, we saw customized V5 and Q313 release. We also saw improvements to discovery caching by utilizing open API V3. If you've got a sub-resources cap, also was graduated from Alfa to data. The crew plugin index grew to 213 plugins. And finally, you've got a lot of completions where we work such that they're much more performant. Thanks Marley. A couple of things that are top of mind for us are translation, server side apply, separating client configs from Kube config and new contributors as always. You can join us on our meetings on Wednesday or you can find us on the Kubernetes Slack and we're having a maintainer session this Friday at 12 o'clock. So thanks and come stop by. We're here from Kubernetes Sig Security. Here's what we've been up to. Our third party security audit sub-project is excited to report that the audit is close to being published, coming soon to a repo near you. Sig Security tooling sub-project is excited to share that the Kubernetes official CVE feed is now beta in 1.27. Check it out. Our newest sub-project is security self-assessments. Their first project was the cluster API self-assessment and now they're working on one for vSphere CSI driver. Want your own security self-assessment? Want to help with someone else's? Requests are welcome. Sig Security docs has been working on the Kubernetes hardening guide and is looking for additional contributors to that. Sig Security, like Kubernetes security as a whole, is what everybody makes it. Everyone's welcome, no matter your skill level. Come hack the planet with us. Hello, KubeCon. This is Mansi from the Sig Windows community and I'm here to give the project updates so let's see what's new. We have container D1.7 with HyperV preview, host process container improvements and the port sandbox starts from currently kept. We have HPC stable now, so please check it out. We have SWT, which is making Windows easier to contribute. We have a new workflow with KMU, which will allow anyone with a laptop to contribute. We have the Windows Kube proxy out of tree experimenter project based on KPNG and the new node lock query feature, which will allow cluster administrators to be in node locks. We also have new Windows performance dashboard and as always, we're looking for new contributors. So please reach out to Jaya for a meme on the Sig Windows Slack channel and come see us at the maintainer store. So thank you to our Kubernetes maintainers and Sig track chairs and so on. If you would like to join, these are the types of people in groups that you want to go take a look for and they're very friendly, so please consider joining if you would like to help with Kubernetes.