Merge branch 'main' into staging

Signed-off-by: Kurt Garloff <kurt@garloff.de>

Author: garloff

CODEOWNERS

@@ -0,0 +1,5 @@
+# Members of the Project Board are the owners of the Community
+# Governance - see: 
+# https://docs.scs.community/community/governance/project-board
+/community/governance/ @SovereignCloudStack/project-board
+

blog/2026-05-28-keystone.md

@@ -28,7 +28,7 @@ The core issues are:
 
 - **Cross-Project EC2 Credentials (CVE-2026-43001):** Application credentials
   scoped to one project could be used to create EC2-style credentials for a
-i different project, enabling lateral movement across tenant boundaries.
+  different project, enabling lateral movement across tenant boundaries.
 
 - **Federated Token Rescoping (CVE-2026-44394):** In SAML2/OIDC deployments,
   federated users can maintain access indefinitely by repeatedly rescoping
@@ -71,10 +71,10 @@ the fix for CVE-2026-42999 modifies the trust policy structure. This may
 require manual updates to your custom policies to ensure continued
 functionality for services like Heat or image uploads.
 
-The SCS ecosystem software providers are providing fixed keystone images:
+The SCS ecosystem software providers are providing fixed Keystone images:
 
 - [OSISM](https://osism.tech/docs/appendix/security/ossa-2026-015)
-- [yaook](https://yaook.cloud/security-advisories-cve-2026-33551)
+- [yaook](https://yaook.cloud/security-advisories-cve-2026-42998-43001-44394/)
 
 ## Outlook
 
@@ -110,8 +110,8 @@ them down in deployment.
 
 The author would like to thank Boris Bobrov, Tim Shepherd, Erichen, and Artem
 Goncharov for their work in discovering and reporting these critical
-vulnerabilities and the OpenStack Vulnerabilty Mangement Team for handling
-and coordinating this and the OpenStack keystone upstream developers for
+vulnerabilities and the OpenStack Vulnerability Management Team for handling
+and coordinating this and the OpenStack Keystone upstream developers for
 addressing the issues.
 
 ## Sovereign Cloud Stack Security Contact

community/governance/project-board-2025.md

@@ -0,0 +1,29 @@
+# Project Board Term 2025
+
+For the term 2025 the project board consisted of:
+
+Spokesperson: Felix Kronlage-Dammers, @fkr
+
+| Name, Firstname         | Github Handle                              | E-Mail                                                        | Remark                         |
+| ----------------------- | ------------------------------------------ | ------------------------------------------------------------- | ------------------------------ |
+| Berendt, Christian      | [@berendt](https://github.com/berendt)     | [berendt@osism.tech](mailto:berendt@osism.tech)               | Elected by Community           |
+| Feder, Matej            | [@matofeder](https://github.com/matofeder) | [matej.feder@dnation.cloud](mailto:matej.feder@dnation.cloud) | Elected by Community           |
+| Garloff, Kurt           | [@garloff](https://github.com/garloff)     | [scs@garloff.de](mailto:scs@garloff.de)                       | Elected by Community           |
+| Kronlage-Dammers, Felix | [@fkr](https://github.com/fkr)             | [fkr@osb-alliance.com](mailto:fkr@osb-alliance.com)           | Represents Forum SCS-Standards |
+| Schoone, Jan            | [@jschoone](https://github.com/jschoone)   | [jan.schoone@uhurutec.com](mailto:jan.schoone@uhurutec.com)   | Elected by Community           |
+
+## Project Board Term 2025 Nominees
+
+For the project board election for the term 2025 the following people were nominated or have nominated themselves:
+
+| Name, Firstname    | Github Handle                                      | E-Mail                                                                        |
+| ------------------ | -------------------------------------------------- | ----------------------------------------------------------------------------- |
+| Bayr, Michael      | [@michaelbayr](https://github.com/michaelbayr)     | [mb@artcodix.com](mailto:mb@artcodix.com)                                     |
+| Berendt, Christian | [@berendt](https://github.com/berendt)             | [berendt@osism.tech](mailto:berendt@osism.tech)                               |
+| Büchse, Matthias   | [@mbuechse](https://github.com/mbuechse)           | [matthias.buechse@cloudandheat.com](mailto:matthias.buechse@cloudandheat.com) |
+| Feder, Matej       | [@matofeder](https://github.com/matofeder)         | [matej.feder@dnation.cloud](mailto:matej.feder@dnation.cloud)                 |
+| Garloff, Kurt      | [@garloff](https://github.com/garloff)             | [scs@garloff.de](mailto:scs@garloff.de)                                       |
+| Kemper, Janis      | [@janiskemper](https://github.com/janiskemper)     | [janis.kemper@syself.com](mailto:janis.kemper@syself.com)                     |
+| Schäfer, Jonas     | [@horazont](https://github.com/horazont)           | [jonas.schaefer@cloudandheat.com](mailto:jonas.schaefer@cloudandheat.com)     |
+| Schoone, Jan       | [@jschoone](https://github.com/jschoone)           | [jan.schoone@uhurutec.com](mailto:jan.schoone@uhurutec.com)                   |
+| Wolf, Tobias       | [@NotTheEvilOne](https://github.com/NotTheEvilOne) | [wolf@b1-systems.de](mailto:wolf@b1-systems.de)                               |

community/governance/project-board.md

@@ -14,6 +14,20 @@ Spokesperson: Kurt Garloff, @garloff
 | Bayr, Michael           | [@michaelbayr](https://github.com/michaelbayr) | [mb@artcodix.com](mailto:mb@artcodix.com)                   | Elected by Community                      |
 | Garloff, Kurt           | [@garloff](https://github.com/garloff)         | [scs@garloff.de](mailto:scs@garloff.de)                     | Elected by Community                      |
 | Kemper, Janis           | [@janiskemper](https://github.com/janiskemper) | [janis.kemper@syself.com](mailto:janis.kemper@syself.com)   | Deputy Representative Forum SCS-Standards |
-| Klare, Jan              | [@jklare](https://github.com/jklare)           | [klare@osism.tech](mailto:klare@osism.tech)                 | Elected by Community                      |
+| Klare, Jan              | [@jklare](https://github.com/jklare)           | [klare@osism.de](mailto:klare@osism.de)                     | Elected by Community                      |
 | Kronlage-Dammers, Felix | [@fkr](https://github.com/fkr)                 | [fkr@osb-alliance.com](mailto:fkr@osb-alliance.com)         | Represents Forum SCS-Standards            |
 | Schoone, Jan            | [@jschoone](https://github.com/jschoone)       | [jan.schoone@uhurutec.com](mailto:jan.schoone@uhurutec.com) | Elected by Community                      |
+
+## Project Board Term 2026 Nominees
+
+For the project board election for the term 2026 the following people were nominated or have nominated themselves:
+
+| Name, Firstname    | Github Handle                                  | E-Mail                                                              |
+| ------------------ | ---------------------------------------------- | ------------------------------------------------------------------- |
+| Bayr, Michael      | [@michaelbayr](https://github.com/michaelbayr) | [mb@artcodix.com](mailto:mb@artcodix.com)                           |
+| Berendt, Christian | [@berendt](https://github.com/berendt)         | [berendt@osism.tech](mailto:berendt@osism.tech)                     |
+| Garloff, Kurt      | [@garloff](https://github.com/garloff)         | [scs@garloff.de](mailto:scs@garloff.de)                             |
+| Klare, Jan         | [@jklare](https://github.com/jklare)           | [klare@osism.de](mailto:klare@osism.de)                             |
+| Pilka, Martin      | [@mpilka](https://github.com/mpilka)           | [martin.pilka@dnation.cloud](mailto:martin.pilka@dnation.cloud)     |
+| Schöchlin, Marc    | [@scoopex](https://github.com/scoopex)         | [marc.schoechlin@uhurutec.com](mailto:marc.schoechlin@uhurutec.com) |
+| Schoone, Jan       | [@jschoone](https://github.com/jschoone)       | [jan.schoone@uhurutec.com](mailto:jan.schoone@uhurutec.com)         |