Merge branch 'main' into feat/move-old-adr

Author: garloff

.zuul.d/config.yaml

@@ -6,7 +6,9 @@
     periodic-daily:
       jobs:
         - scs-check-iaas
-        - scs-check-kaas
+        - scs-check-kaas1
+        - scs-check-kaas2
+        - scs-check-kaas3
     periodic-hourly:
       jobs:
         - scs-check-scs2-main
@@ -16,14 +18,20 @@
     check:
       jobs:
         - scs-check-adr-syntax
+- semaphore:
+    name: semaphore-iaas
+    max: 1  # run at most one iaas job at the same time
+- semaphore:
+    name: semaphore-kaas
+    max: 1  # run at most one kaas job at the same time
 - job:
     name: scs-check-adr-syntax
     parent: base
     nodeset: pod-fedora-40
     pre-run: playbooks/pre.yaml
     run: playbooks/adr_syntax.yaml
 - job:
-    name: scs-check-scs2
+    name: scs-check-base
     parent: base
     secrets:
      - name: clouds_conf
@@ -44,6 +52,11 @@
     run: playbooks/compliance_check.yaml
     post-run:
      - playbooks/post_cloud.yaml
+- job:
+    name: scs-check-scs2
+    parent: scs-check-base
+    semaphores:
+      - semaphore-iaas
 - job:
     name: scs-check-scs2-main
     parent: scs-check-scs2
@@ -59,17 +72,30 @@
     vars:
       preset: iaas
 - job:
-    name: scs-check-kaas
-    parent: scs-check-scs2-main
+    name: scs-check-kaas1
+    parent: scs-check-base
+    branches: main
+    semaphores:
+      - semaphore-kaas
     # timeout:
     # a) these tests take a lot of time, I'm afraid, particularly Sonobuoy
     # b) keep in mind that this job covers ALL test subjects (at most 4 in parallel)
     timeout: 21600  # 6 hrs -- 5 hrs was almost sufficient (reports came through sometimes)
     attempts: 1  # this job is heavy, and retries aren't very promising
     vars:
-      preset: kaas
+      preset: kaas1
       iaas: false
       kaas: true
       section: '.auto'  # only do 'heavy' tests on Saturdays
       do_provision: true
       do_cleanup: false
+- job:
+    name: scs-check-kaas2
+    parent: scs-check-kaas1
+    vars:
+      preset: kaas2
+- job:
+    name: scs-check-kaas3
+    parent: scs-check-kaas1
+    vars:
+      preset: kaas3

.zuul.d/secure.yaml

@@ -458,16 +458,16 @@
           /Lt6+yMJMB7AUVpwXkI7cMmf+QXbDnnE6eX0UBosTM6MjdA/zhkjJ6PK9E0FnngW4HRDZ
           eAiVSQiN4CSa9bylrwLhvarAEhR+5avRv4yTurgAYe6I6Gh05pBPCgTXmCNxPU=
       scaleup_api_server: !encrypted/pkcs1-oaep
-        - H4F/zi6Lp/CbkHPG4tEzhFVRprH6uxVqoOirUZNKOg1pDI33ilXG4K99O/CH9dCqbFiV0
-          GnI4p8b0Csho6S63DEuMikjXBLfNWsd2BncQ4gu4bGhHef3bkCjEmybk3AmEyA789vRNS
-          o6xjZUAJB0ZEQeuWudSo28fJDGxGOVcVW0Sda+OSk0K3qftucg047KZdJ5bWZmHTPvOha
-          4R2+nsbnecAQJtMDWVERPYTD62pF4CAHD6XVf9mUuZNnLYibl5uQz0t6JZQANu83pFYDZ
-          C5Z7T4/UJxKlyBpL2XtF/cHuKavEP41cheD/ihG1EI9Yf3InFCRllbIGzMj8fq8d4bZKV
-          tC1iui2RrL3s38GrOyyGE7odyHlvl08zbrJTkWb5UcI20jPxBCxHAvlqIWjl+9Ite7OuM
-          nXq62IgXUqVWWgrGWRINyJlvRgcQPxCVq7ty3OMB1Vp4R0ldDRWWR9+PozmK86fRXYatE
-          cgRi579JMBvKjbP9hKcZOkb12PVyZTTOLmyepfMAqZVpBULtpNza26ysCl5Wu14+0o3bh
-          d6Kst5qeZz4P8QjJe2UQU67B8JcX88zbpNYM1uxLhtXlAk0/8Hd8KWm+KiU/NfNzgr7jd
-          jxRhMEdHUuMOKHaSR/hwJs7kWp1RVR6l7L+SXv02VrYgzysGCiGqXhV9FwrEQw=
+        - VCeER+5TfxyzOnvIWrAx30FRdwa4I837hPnELGWWmmzdyPQCKVqP4dKEX09nmzwabLnWF
+          WEzMhG9tHsIPBImP2x6VMAqwGsocAdS+Xw73gJXJm0P79gc2xqbnL8BpirraAH+TpCG+G
+          eYcQKzfKfhIViVix7WJfeqodN6sB3oaAodlcvjMpqeYL+USQsZj+ejZZc61P0ec8AybXd
+          lCxuRrdutks6aJlnIaQ9o1G+40DUzljd6RrrGQDPfQOx8XZCaN+eskpox/iKVX6Fso23U
+          Zv8ZCQg2FsT9M9s2GC/KcLgQcHVIkKTYpr6Fnx4ymoxfCE4D2l2B6hK6PcT8I4OAMDZKn
+          MtV8wSsSbnohUpCGN8qMyjTf5q2WHr55BWaYmvRVkAwm+eAEd2/EBr6FSXss9C0hKNznr
+          w60LZhXC5QCXvc3tS+A+8s913luzQI8zmlQCSHHqIJujtLNhP/BO/7EpR9GMHD9KZxP17
+          IqElVTiWYJX2tzx309+G4zhw5L8qwG9FvaDVr9DBdv1mgrKl7QTi5SbfQMn4DExCCaJmR
+          kglEjdtYoHoulJP0KD9a1Sfrg0sQDPBag44cjORfN8mvzPcI2QLAz+iClZhi2pHVnwEZH
+          k49ZE1+gp/PUdlFPDdhHVAJgB4tzZEXPOrbgUGCIqqNam9IwzOrRuFR8fIvXVo=
       scaleup_ca_data: !encrypted/pkcs1-oaep
         - CDar1TQ3Q4HrBXIDwVFvzL0FgPFy7r3K4joQmKnIbCJZ9pmbtrGGSD7xOsJnfIm5e89ZK
           g4D654VfvK4+upredcVP5MRkfXY/SKfh9glR9okQMpsRS0T5l3kS+RpZOLPCuvvit3i1h

CODEOWNERS

@@ -3,9 +3,3 @@
 /compliance-monitor/   @mbuechse @depressiveRobot
 
 /Tests/                @mbuechse @depressiveRobot
-
-# Members of the Project Board are the owners of the Community
-# Governance - see: 
-# https://docs.scs.community/community/governance/project-board
-/Community-Governance/ @SovereignCloudStack/project-board
-

Community-Governance/2024-12-project-board-nominees.md

@@ -20,7 +20,7 @@ As operator, I want to obtain a certificate with the scope SCS-compatible IaaS o
 
 0. Certificates are issued by the SCS certification assessment body. This is either the _Forum SCS-Standards_, part of the Open Source Business Alliance e.V. (OSBA), or an organization appointed by the _Forum SCS-Standards_ . An interested party has to apply for certification with this body, which in turn determines the rules that govern what parties are eligible for application (fees may apply).
 
-1. Each certificate issued pertains to a given combination of subject (specific cloud environment including IaaS regions or KaaS configurations), scope (such as _SCS-compatible IaaS_ or _SCS-compatible KaaS_), and version of that scope. The certificate is only valid for that combination and for the time frame that ends when the scope expires, or for six months if the expiration date for the scope is not yet fixed.
+1. Each certificate issued pertains to a given combination of subject (specific cloud environment including IaaS regions or KaaS configurations), scope (such as _SCS-compatible IaaS_ or _SCS-compatible KaaS_), and version of that scope. The certificate is only valid for that combination for the period of one year (regardless of the expiration date of the scope version).
 
 2. The operator MUST ensure that the official [SCS compliance test suite](https://github.com/SovereignCloudStack/standards/tree/main/Tests) (which does not require admin privileges) is run at regular intervals and that all tests pass. The operator MUST submit the resulting reports to the [SCS compliance monitor](https://github.com/SovereignCloudStack/standards/tree/main/compliance-monitor).
 

Community-Governance/2025-01-project-board.md

@@ -119,7 +119,7 @@ three weeks in advance of happening and run for a week.
 
 Every person who is part of the Sovereign Cloud Stack GitHub organization can be
 nominated for the board. Likewise, one can nominate oneself.
-The nomination is done by adding the person with the required data to the file corresponding to the term in the "Community-Governance" folder in the [Standards](https://github.com/sovereignCloudStack/standards/) repository. Obviously, the person, that is to be nominated, should be asked before being added to the file.
+The nomination is done by adding the person with the required data to the file corresponding to the term in the [docs](https://github.com/SovereignCloudStack/docs/tree/main/community/governance) repository. Obviously, the person in question should be asked before being added to the file.
 
 ### Eligible for voting
 

Community-Governance/2025-12-project-board-nominees.md

@@ -1,6 +1,9 @@
-# Procuring Open Source Projects
-
-OSS project health check
+---
+title: Open Source Software Health Check
+type: Decision Record
+status: Draft
+track: Global
+---
 
 ## Four Opens