Skip to content

add standard for CNCF Kubernetes conformance#1154

Merged
depressiveRobot merged 15 commits intomainfrom
feat/scs-0201-cncf-conformance
Apr 24, 2026
Merged

add standard for CNCF Kubernetes conformance#1154
depressiveRobot merged 15 commits intomainfrom
feat/scs-0201-cncf-conformance

Conversation

@depressiveRobot
Copy link
Copy Markdown
Contributor

@depressiveRobot depressiveRobot commented Apr 15, 2026

Caused by #1022

This PR introduces a draft for a new standard scs-0201-v1 and a corresponding supplement. It also adds versioning to the Sonobuoy configuration.

@depressiveRobot depressiveRobot added standards Issues / ADR / pull requests relevant for standardization & certification KaaS Issues or pull requests relevant to the SCS KaaS layer. labels Apr 15, 2026
@depressiveRobot depressiveRobot linked an issue Apr 15, 2026 that may be closed by this pull request
Create standard for CNCF Conformance #1022
Closed
depressiveRobot and others added 6 commits April 21, 2026 11:11
@depressiveRobot
add draft for new standard scs-0201-v1
49a0199 
Signed-off-by: Marvin Frommhold <depressiveRobot@users.noreply.github.com>
@depressiveRobot
fix Markdown reference link
d5a9eb4 
Signed-off-by: Marvin Frommhold <depressiveRobot@users.noreply.github.com>
@depressiveRobot
Revert "fix Markdown reference link"
22c9d8f 
This reverts commit 388c223.

Signed-off-by: Marvin Frommhold <depressiveRobot@users.noreply.github.com>
@depressiveRobot @mbuechse
rename FOCIS to Cloud&Heat IaaS (#1155)
3e07419 
* rename FOCIS to Cloud&Heat IaaS
* use link to English page
* fix missing space
* fix ansible template
* fix .zuul.d/secure.yaml

---------

Signed-off-by: Marvin Frommhold <depressiveRobot@users.noreply.github.com>
Co-authored-by: Matthias Büchse <matthias.buechse@alasca.cloud>
Signed-off-by: Marvin Frommhold <depressiveRobot@users.noreply.github.com>
@mbuechse @garloff @depressiveRobot
Relax scs-0210-v2: extend update time for patch versions (#1153)
01f9fd0 
* Relax scs-0210-v2: extend update time for patch versions

Signed-off-by: Matthias Büchse <matthias.buechse@alasca.cloud>

* Fix testcase...

Signed-off-by: Matthias Büchse <matthias.buechse@alasca.cloud>

* Suggest 3 time periods as discussed in #1153.

- 1 month MUST for any patch version
- 2 weeks MUST for patch w/ CVE w/ CVSS >= 8.
- 2 days RECOMMENDED for patch w/ CVE w/ CVSS >= 8.

I moved the recommendation from behind the "critical CVE" definition
next to the requirement, so it becomes a tad easier to parse.

Signed-off-by: Kurt Garloff <kurt@garloff.de>

* fix spelling

Signed-off-by: Marvin Frommhold <depressiveRobot@users.noreply.github.com>

* Update tests for k8s version policy to reflect new language in standard

Signed-off-by: Matthias Büchse <matthias.buechse@alasca.cloud>

---------

Signed-off-by: Matthias Büchse <matthias.buechse@alasca.cloud>
Signed-off-by: Kurt Garloff <kurt@garloff.de>
Signed-off-by: Marvin Frommhold <depressiveRobot@users.noreply.github.com>
Co-authored-by: Kurt Garloff <kurt@garloff.de>
Co-authored-by: Marvin Frommhold <depressiveRobot@users.noreply.github.com>
Signed-off-by: Marvin Frommhold <depressiveRobot@users.noreply.github.com>
@depressiveRobot
fix Markdown link
ae78893 
Signed-off-by: Marvin Frommhold <depressiveRobot@users.noreply.github.com>
@depressiveRobot depressiveRobot force-pushed the feat/scs-0201-cncf-conformance branch from 09984ee to ae78893 Compare April 21, 2026 09:11
janiskemper
janiskemper reviewed Apr 21, 2026
View reviewed changes
Comment thread Standards/scs-0201-v1-cncf-conformance.md
mbuechse
mbuechse reviewed Apr 21, 2026
View reviewed changes
Copy link
Copy Markdown
Contributor

@mbuechse mbuechse left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the initiative! I have a few remarks. I can imagine some more polishing (beyond my remarks), but for the first draft, I wouldn't be too pedantic.

Comment thread Standards/scs-0201-v1-cncf-conformance.md Outdated
Comment thread Standards/scs-0201-w1-implementation-testing.md Outdated
Comment thread Tests/kaas/sonobuoy_handler/run_sonobuoy.py Outdated
Comment thread Tests/kaas/sonobuoy_handler/sonobuoy_handler.py Outdated
Comment thread Tests/scs-compatible-kaas.yaml Outdated
@fkr fkr removed their request for review April 21, 2026 11:00
@fkr
Copy link
Copy Markdown
Member

fkr commented Apr 21, 2026

I have not the needed insights into kubernetes networking to be able to review this, so I removed myself from the list of reviewers.

@mbuechse
Copy link
Copy Markdown
Contributor

mbuechse commented Apr 21, 2026

I have not the needed insights into kubernetes networking to be able to review this, so I removed myself from the list of reviewers.

Don't be confused by the discussion above. This standard is not about kubernetes networking. It's our wrapper around CNCF kubernetes conformance.

@depressiveRobot
keep reference to CNCF
79393aa 
Signed-off-by: Marvin Frommhold <depressiveRobot@users.noreply.github.com>
@depressiveRobot
remove misleading reference to decision record
ad46af9 
Signed-off-by: Marvin Frommhold <depressiveRobot@users.noreply.github.com>
@depressiveRobot
add reference to test configuration
a402692 
Signed-off-by: Marvin Frommhold <depressiveRobot@users.noreply.github.com>
@depressiveRobot
remove default value
7f11daf 
Signed-off-by: Marvin Frommhold <depressiveRobot@users.noreply.github.com>
@depressiveRobot
Copy link
Copy Markdown
Contributor Author

depressiveRobot commented Apr 21, 2026 •
edited
Loading

Added a reference to the test configuration in the supplement, see a402692

mbuechse
mbuechse reviewed Apr 21, 2026
View reviewed changes
Comment thread Tests/kaas/sonobuoy_handler/run_sonobuoy.py Outdated
@depressiveRobot
remove yet another default value
228c56b 
Signed-off-by: Marvin Frommhold <depressiveRobot@users.noreply.github.com>
@depressiveRobot
fix wording
d8be49d 
Signed-off-by: Marvin Frommhold <depressiveRobot@users.noreply.github.com>
mbuechse
mbuechse approved these changes Apr 23, 2026
View reviewed changes
Copy link
Copy Markdown
Contributor

@mbuechse mbuechse left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me. However, it could be worth to consider whether we want to adopt the style of scs-0219, where we address the exceptions only in the supplement.

@mbuechse
Copy link
Copy Markdown
Contributor

mbuechse commented Apr 23, 2026

Oh, the link in scs-0219-w1 would need to be updated (however, merge main or rebase to main first)

@depressiveRobot
Merge branch 'main' into feat/scs-0201-cncf-conformance
82a3e10 
Signed-off-by: Marvin Frommhold <depressiveRobot@users.noreply.github.com>
@depressiveRobot
update link
1b965b7 
Signed-off-by: Marvin Frommhold <depressiveRobot@users.noreply.github.com>
@depressiveRobot
Copy link
Copy Markdown
Contributor Author

depressiveRobot commented Apr 23, 2026

Looks good to me. However, it could be worth to consider whether we want to adopt the style of scs-0219, where we address the exceptions only in the supplement.

That's a good point. However, I consider this important so that I rather don't want to "hide" this information in the supplement.

@depressiveRobot depressiveRobot merged commit bc862b9 into main Apr 24, 2026
7 of 8 checks passed
@depressiveRobot depressiveRobot deleted the feat/scs-0201-cncf-conformance branch April 24, 2026 12:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@janiskemper janiskemper janiskemper left review comments

@mbuechse mbuechse mbuechse approved these changes

@benedikt-haug benedikt-haug Awaiting requested review from benedikt-haug

@fzakfeld fzakfeld Awaiting requested review from fzakfeld

@garloff garloff Awaiting requested review from garloff garloff is a code owner

Assignees

No one assigned

Labels

KaaS Issues or pull requests relevant to the SCS KaaS layer. standards Issues / ADR / pull requests relevant for standardization & certification

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Create standard for CNCF Conformance

4 participants

@depressiveRobot @fkr @mbuechse @janiskemper