Skip to content

Commit c45a19b

Browse files
garloffgarloff
authored
Merge branch 'main' into feat/add-iaas-diskless-flavor
Signed-off-by: Kurt Garloff <[email protected]>
2 parents 0a6d2f8 + 0ffff94 commit c45a19b

File tree

18 files changed

+3385
-2194
lines changed

18 files changed

+3385
-2194
lines changed

‎.github/workflows/build.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ jobs:
1414
- name: Setup Node
1515
uses: actions/setup-node@v3
1616
with:
17-
node-version: 18
17+
node-version: 20
1818
- name: Cache dependencies
1919
uses: actions/cache@v3
2020
with:

‎.github/workflows/build_and_deploy.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ jobs:
2020
- name: Setup Node
2121
uses: actions/setup-node@v3
2222
with:
23-
node-version: 18
23+
node-version: 20
2424

2525
- name: Cache dependencies
2626
uses: actions/cache@v3

‎.github/workflows/build_and_staging.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818
- name: Setup Node
1919
uses: actions/setup-node@v3
2020
with:
21-
node-version: 18
21+
node-version: 20
2222

2323
- name: Cache dependencies
2424
uses: actions/cache@v3

‎.github/workflows/link-validator.yml‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,7 @@
11
on: [pull_request]
22
name: Check links for modified files
3+
permissions:
4+
contents: read
35
jobs:
46
markdown-link-check:
57
runs-on: ubuntu-latest

‎community/cloud-resources/cloud-resources.md‎

Lines changed: 17 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -22,25 +22,27 @@ As suggested in [#155](https://github.com/SovereignCloudStack/standards/issues/1
2222
> **Note**
2323
> ATM this is not directly connected to the SovereignCloudStack github org membership, accounts will be created manually for now.
2424
25+
<!-- markdownlint-disable search-replace -->
26+
2527
Example:
2628

27-
|github handle | plusserver login |
28-
|:-----------: | :-----------------: |
29-
| frosty-geek | u500924-frosty-geek |
30-
| fkr | u500924-fkr |
31-
| | |
29+
| github handle | plusserver login |
30+
| :-----------: | :-----------------: |
31+
| frosty-geek | u500924-frosty-geek |
32+
| fkr | u500924-fkr |
33+
| | |
3234

3335
### SCS2 Service Users
3436

3537
Service users will have their default_project_id set to a specific project and will NOT be granted full access to other projects by default.
3638

3739
| Unique Identifier | Service User Name | Full Access on | Community Contact | Description | Needed until |
3840
| :------------------------------: | -------------------------- | ------------------------- | ------------------------ | --------------------------------------------- | :----------: |
39-
| 9a1576af59644a2dbbace773ad17158d | u500924-svc-sig-monitoring | p500924-sig-monitoring1 | fkr | Service User - SIG Monitoring | 31.12.2023 |
40-
| 4925967416894fd78be6701689059653 | u500924-svc-cloudmon | p500924-cloudmon-target | Erik-Kostelansky-dNation | Service User - VP12 Test Project | 31.12.2024 |
41+
| 9a1576af59644a2dbbace773ad17158d | u500924-svc-sig-monitoring | p500924-sig-monitoring1 | fkr | Service User - SIG Monitoring | 31.12.2023 |
42+
| 4925967416894fd78be6701689059653 | u500924-svc-cloudmon | p500924-cloudmon-target | Erik-Kostelansky-dNation | Service User - VP12 Test Project | 31.12.2024 |
4143
| f89b3d64ddff4d9d8cadb5e06fa22299 | u500924-svc-healthmonitor | p500924-scs-healthmonitor | garloff | Service User - SCS Health Monitor | ∞ |
4244
| 49cc3d72fbdf41fe8dc407f57f026dbf | u500924-svc-standards | p500924-scs-healthmonitor | garloff | Service User - SCS Standards Compliance Check | ∞ |
43-
| 1b6bb583fc5e40e49f2a7e9b4301de65 | u500924-svc-zuul | p500924-scs-zuul | o-otte | Service User - SCS Zuul | 30.11.2024 |
45+
| 1b6bb583fc5e40e49f2a7e9b4301de65 | u500924-svc-zuul | p500924-scs-zuul | o-otte | Service User - SCS Zuul | 30.11.2024 |
4446
| | | | | | |
4547

4648
### SCS2 Projects
@@ -54,12 +56,12 @@ Service users will have their default_project_id set to a specific project and w
5456
| 34d3d89fc74e4db5a6df1c9ebf2f3a2a | p500924-scs-zuul | garloff | SCS Zuul | ∞ |
5557
| 293b765e3492413ba8b0067b7edcb3a3 | p500924-monitoring | garloff | SCS Monitoring | ∞ |
5658
| f2eccb67b16f4430b6d5e70afb515f9d | p500924-harbor | chess-knight | SCS Registry (Harbor) | ∞ |
57-
| 45b5e27a5fe3431083e450cf2d13e71b | p500924-kaas-playground1 | jschoone | Playground1 for Hackathon | 30.09.2025 |
58-
| ef12fed77f114eb4a20068f0422a8109 | p500924-kaas-playground2 | jschoone | Playground2 for Hackathon | 30.09.2025 |
59+
| 45b5e27a5fe3431083e450cf2d13e71b | p500924-kaas-playground1 | jschoone | Playground1 for Hackathon | 30.09.2025 |
60+
| ef12fed77f114eb4a20068f0422a8109 | p500924-kaas-playground2 | jschoone | Playground2 for Hackathon | 30.09.2025 |
5961
| bf8d511728a44072b7c97b1fe00947b8 | p500924-kaas-playground3 | jschoone | Moin Cluster | ∞ |
60-
| 61b315797c75431787dc20a61cbaf052 | p500924-kaas-playground4 | jschoone | Playground4 for Hackathon | 30.09.2025 |
61-
| 94f7c7507be1484a9ce6aba20d19d1c6 | p500924-kaas-playground5 | jschoone | Playground5 for Hackathon | 30.09.2025 |
62-
| | p500924-openDesk-playground | gerbsen | Playground for openDesk | 30.11.2025 |
62+
| 61b315797c75431787dc20a61cbaf052 | p500924-kaas-playground4 | jschoone | Playground4 for Hackathon | 30.09.2025 |
63+
| 94f7c7507be1484a9ce6aba20d19d1c6 | p500924-kaas-playground5 | jschoone | Playground5 for Hackathon | 30.09.2025 |
64+
| | p500924-openDesk-playground | gerbsen | Playground for openDesk | 30.11.2025 |
6365

6466
## Wavecon
6567

@@ -76,3 +78,5 @@ Service users will have their default_project_id set to a specific project and w
7678
| 718964b4b87446688ac04b151519fb51 | scs | garloff | SCS Health Monitor | ∞ |
7779
| c46ccc9e695c4b23bacee2ad11145d9a | scs-health-monitor | garloff | SCS Health Monitor | ∞ |
7880
| 00de553df86949b49365baee6375fb5a | scs-standards | itrich | SCS Health Monitor | ∞ |
81+
82+
<!-- markdownlint-enable search-replace -->

‎docs/05-iam/domain-manager-setup-and-usage.md‎

Lines changed: 2 additions & 27 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,5 @@
11
# Domain Manager setup and usage
22

3-
:::info
4-
5-
The following documentation refers to a SCS standard that is still in draft state.
6-
It is not meant for productive use yet but CSPs are encouraged to test-drive and provide feedback!
7-
8-
:::
9-
103
## Preface
114

125
SCS defines the **Domain Manager** standard, introducing a special persona to the OpenStack Keystone identity manager.
@@ -15,19 +8,10 @@ Its intended use case is to offer extensive identity management self-service cap
158

169
This guide will explain setup, configuration and usage of the SCS Domain Manager standard.
1710

18-
### Warning regarding the exposure of domain names
19-
20-
Due to architectural limitations currently existing in OpenStack Keystone, assigning the `manager` role to users while the configuration of the SCS Domain Manager standard has been applied will **enable them to see the IDs and names of all existing domains**.
21-
This includes domains other than their own, meaning that other tenant's identities might be exposed depending on the relation between them and the name of their domain.
22-
CSPs aiming to appoint Domain Manager users must be aware of this limitation and should exclusively **use pseudonymized domain names across the whole infrastructure**.
23-
If CSPs strictly follow the [SCS naming conventions](https://github.com/SovereignCloudStack/standards/blob/main/Standards/scs-0301-v1-naming-conventions.md) for domains this is already addressed.
24-
If this is not feasible for the CSP, they may opt to refrain from making use of the Domain Manager functionality at all, i.e. never assign the `manager` role to tenant users.
25-
2611
:::info
2712

28-
This architectural limitation will be fixed in upcoming OpenStack and SCS releases.
29-
30-
See [https://bugs.launchpad.net/keystone/+bug/2041611](https://bugs.launchpad.net/keystone/+bug/2041611)
13+
The Domain Manager functionality was natively integrated into OpenStack starting with release 2024.2 ("Dalmatian").
14+
When using an OpenStack release equal to 2024.2 or later, you can omit the instructions for Keystone API policy adjustments.
3115

3216
:::
3317

@@ -89,15 +73,6 @@ Refer to the SCS Domain Manager standard for more information.
8973
9074
The following sections describe actions available to CSP operators that possess the `admin` role.
9175

92-
### Creating domains
93-
94-
:::caution
95-
96-
It is highly recommended to use pseudonymized domain names when creating domains, since Domain Managers will currently be able to see the names of all existing domains.
97-
See [Warning regarding the exposure of domain names](#warning-regarding-the-exposure-of-domain-names) for more details.
98-
99-
:::
100-
10176
For each tenant for which a self-service area (i.e. a domain) is to be established, a domain should be created before creating any users, projects or groups for this tenant:
10277

10378
```bash

‎docs/glossary.md‎

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -125,6 +125,16 @@ Swift is the so-called object storage that can be used by Nova. This is responsi
125125

126126
A Ceph OSD (Object Storage Daemon) logically represents a storage device in a Ceph cluster, which can logically be a hard disk, which is the ideal case. In other cases it can also be a raid, which however leads to considerable performance limitations due to caching or other raid optimization.
127127

128+
## Cluster Stacks
129+
130+
The following terms can be used to distinguish between the various components of the Cluster Stacks.
131+
132+
| Object | Name |
133+
|--------------|------------------------------------|
134+
| scs2-* | scs2 Cluster Stack |
135+
| scs2-1-33-* | scs2 1.33 Cluster Stack releases |
136+
| scs2-1-33-v2 | scs2 1.33 v2 Cluster Stack release |
137+
128138
## Personas
129139

130140
| Persona | Description |

0 commit comments

Comments
 (0)