From 1a61a28d43c3181c7dd1314198920ce8147741b7 Mon Sep 17 00:00:00 2001 From: Marvin Frommhold Date: Wed, 6 May 2026 14:52:05 +0200 Subject: [PATCH 1/4] set certificate validity period to one year Signed-off-by: Marvin Frommhold --- Standards/scs-0004-v1-achieving-certification.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Standards/scs-0004-v1-achieving-certification.md b/Standards/scs-0004-v1-achieving-certification.md index cc6cab5db..13655a9b7 100644 --- a/Standards/scs-0004-v1-achieving-certification.md +++ b/Standards/scs-0004-v1-achieving-certification.md @@ -20,7 +20,7 @@ As operator, I want to obtain a certificate with the scope SCS-compatible IaaS o 0. Certificates are issued by the SCS certification assessment body. This is either the _Forum SCS-Standards_, part of the Open Source Business Alliance e.V. (OSBA), or an organization appointed by the _Forum SCS-Standards_ . An interested party has to apply for certification with this body, which in turn determines the rules that govern what parties are eligible for application (fees may apply). -1. Each certificate issued pertains to a given combination of subject (specific cloud environment including IaaS regions or KaaS configurations), scope (such as _SCS-compatible IaaS_ or _SCS-compatible KaaS_), and version of that scope. The certificate is only valid for that combination and for the time frame that ends when the scope expires, or for six months if the expiration date for the scope is not yet fixed. +1. Each certificate issued pertains to a given combination of subject (specific cloud environment including IaaS regions or KaaS configurations), scope (such as _SCS-compatible IaaS_ or _SCS-compatible KaaS_), and version of that scope. The certificate is only valid for that combination for the period of one year. The certificate remains valid for this period, even if the scope expires for which it applies. If the subject complies with the succeeding scope, the certificate will also apply to the new scope, but only for its remaining validity period. 2. The operator MUST ensure that the official [SCS compliance test suite](https://github.com/SovereignCloudStack/standards/tree/main/Tests) (which does not require admin privileges) is run at regular intervals and that all tests pass. The operator MUST submit the resulting reports to the [SCS compliance monitor](https://github.com/SovereignCloudStack/standards/tree/main/compliance-monitor). From e291da6643c5af8d343f372aee7479b43fc0e8ec Mon Sep 17 00:00:00 2001 From: Marvin Frommhold Date: Thu, 7 May 2026 16:05:13 +0200 Subject: [PATCH 2/4] remove certificate validity for new scope version Signed-off-by: Marvin Frommhold --- Standards/scs-0004-v1-achieving-certification.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Standards/scs-0004-v1-achieving-certification.md b/Standards/scs-0004-v1-achieving-certification.md index 13655a9b7..c50c59f70 100644 --- a/Standards/scs-0004-v1-achieving-certification.md +++ b/Standards/scs-0004-v1-achieving-certification.md @@ -20,7 +20,7 @@ As operator, I want to obtain a certificate with the scope SCS-compatible IaaS o 0. Certificates are issued by the SCS certification assessment body. This is either the _Forum SCS-Standards_, part of the Open Source Business Alliance e.V. (OSBA), or an organization appointed by the _Forum SCS-Standards_ . An interested party has to apply for certification with this body, which in turn determines the rules that govern what parties are eligible for application (fees may apply). -1. Each certificate issued pertains to a given combination of subject (specific cloud environment including IaaS regions or KaaS configurations), scope (such as _SCS-compatible IaaS_ or _SCS-compatible KaaS_), and version of that scope. The certificate is only valid for that combination for the period of one year. The certificate remains valid for this period, even if the scope expires for which it applies. If the subject complies with the succeeding scope, the certificate will also apply to the new scope, but only for its remaining validity period. +1. Each certificate issued pertains to a given combination of subject (specific cloud environment including IaaS regions or KaaS configurations), scope (such as _SCS-compatible IaaS_ or _SCS-compatible KaaS_), and version of that scope. The certificate is only valid for that combination for the period of one year. The certificate remains valid for this period, even if the scope expires for which it applies. 2. The operator MUST ensure that the official [SCS compliance test suite](https://github.com/SovereignCloudStack/standards/tree/main/Tests) (which does not require admin privileges) is run at regular intervals and that all tests pass. The operator MUST submit the resulting reports to the [SCS compliance monitor](https://github.com/SovereignCloudStack/standards/tree/main/compliance-monitor). From f2bf7022c389e6e55b9135abbf773969825fed46 Mon Sep 17 00:00:00 2001 From: Marvin Frommhold Date: Thu, 7 May 2026 16:06:16 +0200 Subject: [PATCH 3/4] fix scope vs scope version Signed-off-by: Marvin Frommhold --- Standards/scs-0004-v1-achieving-certification.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Standards/scs-0004-v1-achieving-certification.md b/Standards/scs-0004-v1-achieving-certification.md index c50c59f70..67bd9a59d 100644 --- a/Standards/scs-0004-v1-achieving-certification.md +++ b/Standards/scs-0004-v1-achieving-certification.md @@ -20,7 +20,7 @@ As operator, I want to obtain a certificate with the scope SCS-compatible IaaS o 0. Certificates are issued by the SCS certification assessment body. This is either the _Forum SCS-Standards_, part of the Open Source Business Alliance e.V. (OSBA), or an organization appointed by the _Forum SCS-Standards_ . An interested party has to apply for certification with this body, which in turn determines the rules that govern what parties are eligible for application (fees may apply). -1. Each certificate issued pertains to a given combination of subject (specific cloud environment including IaaS regions or KaaS configurations), scope (such as _SCS-compatible IaaS_ or _SCS-compatible KaaS_), and version of that scope. The certificate is only valid for that combination for the period of one year. The certificate remains valid for this period, even if the scope expires for which it applies. +1. Each certificate issued pertains to a given combination of subject (specific cloud environment including IaaS regions or KaaS configurations), scope (such as _SCS-compatible IaaS_ or _SCS-compatible KaaS_), and version of that scope. The certificate is only valid for that combination for the period of one year. The certificate remains valid for this period, even if the scope version expires for which it applies. 2. The operator MUST ensure that the official [SCS compliance test suite](https://github.com/SovereignCloudStack/standards/tree/main/Tests) (which does not require admin privileges) is run at regular intervals and that all tests pass. The operator MUST submit the resulting reports to the [SCS compliance monitor](https://github.com/SovereignCloudStack/standards/tree/main/compliance-monitor). From 9b13db6c1df03a97e0b9ea1ca510db28b3d9d3f1 Mon Sep 17 00:00:00 2001 From: Marvin Frommhold Date: Fri, 8 May 2026 12:34:05 +0200 Subject: [PATCH 4/4] simplify wording MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-authored-by: Matthias Büchse Signed-off-by: Marvin Frommhold --- Standards/scs-0004-v1-achieving-certification.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Standards/scs-0004-v1-achieving-certification.md b/Standards/scs-0004-v1-achieving-certification.md index 67bd9a59d..20e0df009 100644 --- a/Standards/scs-0004-v1-achieving-certification.md +++ b/Standards/scs-0004-v1-achieving-certification.md @@ -20,7 +20,7 @@ As operator, I want to obtain a certificate with the scope SCS-compatible IaaS o 0. Certificates are issued by the SCS certification assessment body. This is either the _Forum SCS-Standards_, part of the Open Source Business Alliance e.V. (OSBA), or an organization appointed by the _Forum SCS-Standards_ . An interested party has to apply for certification with this body, which in turn determines the rules that govern what parties are eligible for application (fees may apply). -1. Each certificate issued pertains to a given combination of subject (specific cloud environment including IaaS regions or KaaS configurations), scope (such as _SCS-compatible IaaS_ or _SCS-compatible KaaS_), and version of that scope. The certificate is only valid for that combination for the period of one year. The certificate remains valid for this period, even if the scope version expires for which it applies. +1. Each certificate issued pertains to a given combination of subject (specific cloud environment including IaaS regions or KaaS configurations), scope (such as _SCS-compatible IaaS_ or _SCS-compatible KaaS_), and version of that scope. The certificate is only valid for that combination for the period of one year (regardless of the expiration date of the scope version). 2. The operator MUST ensure that the official [SCS compliance test suite](https://github.com/SovereignCloudStack/standards/tree/main/Tests) (which does not require admin privileges) is run at regular intervals and that all tests pass. The operator MUST submit the resulting reports to the [SCS compliance monitor](https://github.com/SovereignCloudStack/standards/tree/main/compliance-monitor).