As an Yaook operator, I want to spend minimal additional effort on setting up and ensuring ongoing SCS-compatible IaaS compliance. To achieve this, we aim to automate chores and ensure continuous monitoring and reconciliation. SCS features that are to be covered here: - compliance checks - e2e tests (via tempest), see SCS-0128 - mandatory flavors - mandatory images Not to be addressed here: - ensuring compliant Barbican config/secrets backend setup - ensuring mandatory service availability (SCS-0123), see meta#56 for S3