[EPIC] KaaS standards

[martinmo]

SCS Compatible KaaS v1

Standardization

• Standardize k8s networking policies (CNI) #769
• [Feature Request] CNCF conformance tests #709
• [Standard] Node distribution v2 #494
• [Standard] Stabilize node distribution standard #639
• [Feature Request] Implement tests for scs-0210-v2, scs-0214-v1 #481
• [Feature Request] add Implementation Notes to scs-0214-v2 (as Supplement) #535
• [Standardization] KaaS Robustness features issues#414
• Update Standard "Baseline K8s Cluster Security" - rename to "K8s cluster hardening" #475
• [Standard] A simple, usable default StorageClass should be available in Kubernetes clusters #652

Conformance test implementation

• Small updates to conformance test for scs-0214-v1 #489
• Refine CVE check in scs-0210-v2 test script. #526
• [Testing] KaaS Robustness features issues#549
• [Testing] Tests for K8s cluster hardening issues#670
• [Testing] Registry Standard Tests issues#662
• [Feature Request] KaaS conformance tests with other providers/implementations #649
• [BUG] Conformance check for scs-0211-v1 (and v2) is broken #662

SCS Compatible KaaS v2

Standardization

TBD

Conformance test implementation

TBD

Possible future standards and ADRs

• Metrics server issues#224
• Define "SCS compliance" for Container Image Registries #234
• Standardize additional storage classes issues#214
• [Standardization] KaaS ControlPlane/worker machine flavors issues#421
• [Standardization] KaaS Gitops tooling issues#420
• [Standardization] KaaS Cluster Management Gitops Controller issues#419
• [Standardization] KaaS Logging/Monitoring/Tracing issues#418
• [Standardization] KaaS IAM federation with ID broker issues#417
• [Standardization] KaaS Optional Cert-Manager issues#416
• Move Keycloak onto kubernetes powered runtime on management plane issues#258
• researching interconnections in between resources, planning further benchmark tests  issues#648

Other issues

• Write ADR for Container Networking/CNI #324
• Forwarding-porting and retesting of upstream intel patchset for SGX and OpenStack issues#246

Links

• Epic in issues repository: SCS K8s cluster standardization issues#181
• KaaS standards
• Certificate scope SCS Compatible KaaS

[martinmo]

Because I couldn't find an epic issue with a good overview for the standardizatio in the KaaS layer, I created one. Basically, it came up in last week's Team Container call that an overview is missing. Furthermore, I've been going through all issues in the standards and issues repositories and added the Container label where it was (clearly) missing.

It would be nice if we can somehow agree on and add an ETA for the finalization of the v2 KaaS scope.

[mbuechse]

We do have this one already: SovereignCloudStack/issues#181
But yours is more like a roadmap, so not too bad either!

[martinmo]

Thanks for the hint! I linked the other epic and added some missing tasks to the list here. I agree that having this roadmap style issue has value, after all I felt the need to create it, but I didn't intend to duplicate stuff :( Maybe we can focus on this issue here and close the other one – IMHO the standards repo is the right place anyway.