September 2025 - Release-announce

kolla-ansible 18.8.0 (caracal)
by no-reply＠openstack.org 11 Sep '25

11 Sep '25

We are pumped to announce the release of: kolla-ansible 18.8.0 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 18.8.0 ^^^^^^ Security Issues *************** * Deny access to /server-status via the single frontend. LP#2121626 Bug Fixes ********* * Fixes bug LP#2118452 which stopped the RabbitMQ upgrade from version 3.13 to 4.1 even though it is supported. * Fixes configuration of backend TLS when network nodes are separate from controllers. LP#2117084 * Reduce the size of the fluentd buffers to avoid getting HTTP 413 errors when sending logs to opensearch/elasticsearch. The values chosen were based on what seemed a sensible size. These can be customised by editing the "fluentd_bulk_message_request_threshold" and "fluentd_buffer_chunk_limit_size" variables. LP#2079988 Changes in kolla-ansible 18.7.0..18.8.0 --------------------------------------- 942f5bcfe letsencrypt: add max_fail_percentage to site.yml 9e1e090a9 Deny access to `server-status` via `single frontend` df276af02 Replace outdated core team list by Gerrit links 410d4148c mariabackup: Grant ALTER on mysql.mariadb_backup_history adb5edad2 CI: Use opendev docker registry mirror 52a3e4a61 Tweak RabbitMQ version check to allow 3.13 to 4.1 e49fd63db Add network group to tls-backend f18a8057f fluentd: Add ovn logs to input 6cbade51d CI: Bump instance creation timeout to 5 minutes 7a449e6a5 Add size limits to Fluentd buffers 92e0bea51 Allow to override Cirros image URL for air-gapped environments d4fc97947 Fix path to heat config-generator.conf 1c1e55141 Docs: update RabbitMQ HA instructions Diffstat (except docs and test files) ------------------------------------- ansible/inventory/all-in-one | 1 + ansible/inventory/multinode | 1 + ansible/roles/common/defaults/main.yml | 15 +++++++ .../templates/conf/input/10-openvswitch.conf.j2 | 38 +++++++++++++++++ .../common/templates/conf/output/00-local.conf.j2 | 4 ++ .../common/templates/conf/output/01-es.conf.j2 | 2 + .../templates/conf/output/03-opensearch.conf.j2 | 2 + ansible/roles/heat/defaults/main.yml | 2 +- .../haproxy/haproxy_external_frontend.cfg.j2 | 1 + ansible/roles/mariadb/tasks/register.yml | 2 +- ansible/roles/rabbitmq/tasks/version-check.yml | 7 ++-- ansible/site.yml | 4 ++ ...llow-rabbitmq-3-13-to-4-1-8ae08d265c353301.yaml | 7 ++++ .../notes/bug-2117084-60fbff1b0616531d.yaml | 6 +++ ...tatus-via-single-frontend-33bbf3b9688a9ae4.yaml | 5 +++ .../notes/fluentd-buffers-86acb335b1cf3126.yaml | 9 ++++ tools/init-runonce | 2 +- zuul.d/base.yaml | 2 + 22 files changed, 118 insertions(+), 55 deletions(-)

1 0

ansible-role-atos-hsm 10.0.0.0rc1 (flamingo)
by no-reply＠openstack.org 11 Sep '25

11 Sep '25

Hello everyone, A new release candidate for ansible-role-atos-hsm for the end of the Flamingo cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/ansible-role-atos-hsm/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Flamingo release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/flamingo release branch at: https://opendev.org/openstack/ansible-role-atos-hsm/src/branch/stable/flami… Release notes for ansible-role-atos-hsm can be found at: https://docs.openstack.org/releasenotes/ansible-role-atos-hsm/ If you find an issue that could be considered release-critical, please file it at: https://storyboard.openstack.org/#!/project/1183 and tag it *flamingo-rc-potential* to bring it to the ansible-role-atos-hsm release crew's attention.

1 0

neutron-vpnaas 27.0.0.0rc1 (flamingo)
by no-reply＠openstack.org 11 Sep '25

11 Sep '25

Hello everyone, A new release candidate for neutron-vpnaas for the end of the Flamingo cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/neutron-vpnaas/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Flamingo release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/flamingo release branch at: https://opendev.org/openstack/neutron-vpnaas/src/branch/stable/flamingo Release notes for neutron-vpnaas can be found at: https://docs.openstack.org/releasenotes/neutron-vpnaas/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/neutron/+bugs and tag it *flamingo-rc-potential* to bring it to the neutron-vpnaas release crew's attention.

1 0

kayobe 17.6.0 (dalmatian)
by no-reply＠openstack.org 11 Sep '25

11 Sep '25

We eagerly announce the release of: kayobe 17.6.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://bugs.launchpad.net/kayobe/+bugs For more details, please see below. 17.6.0 ^^^^^^ New Features ************ * The "neutron-bgp-dragent" container will now be built by default when "kolla_enable_neutron_bgp_dragent" is true. Upgrade Notes ************* * Deployments using Juniper Junos OS switches are required to update their configuration according to Juniper Junos OS documentation (https://docs.openstack.org/kayobe/latest/configuration/reference /physical-network.html#juniper-junos-os). This is due to the "junos_config" module dropping support for the "provider" parameter. Bug Fixes ********* * Fixes physical network configuration for Juniper Junos OS switches. Note that users are required to update their configuration according to Juniper Junos OS documentation (https://docs.openstack.org/kayobe/latest/configuration/reference /physical-network.html#juniper-junos-os). LP#2111341 * Fixes duplicate "OS_CACERT" lines in "public-openrc.sh" when both admin and public cacert variables are set. LP#2116318 * Fixes configuration of backend TLS when network nodes are separate from controllers. LP#2117084 * Fixes wrong name of "gpgkey" used for EPEL repositories when "dnf_use_local_mirror" is enabled. LP#2119921 * Fixes CentOS Stream 9 seed and infra VMs not booting by switching to an EFI-compatible image. LP#2121588 * Fixes an issue where incorrect network-data.json would be generated when interfaces without IP addresses are attached to infrastructure VMs. LP#2118403 * Fixes failure to activate SR-IOV on GPU devices by bumping the "stackhpc.linux" collection to v1.3.4. * Fixes support for empty strings in the "dev-tools" package lists. This allows using expressions such as "{{ 'foo' if os_distribution == 'rocky' else '' }}". LP#2115000 * Fixes network connectivity check when a subset of hosts have the "no_ip" property set via group or host variables. LP#2120918 Changes in kayobe 17.5.0..17.6.0 -------------------------------- 157fbff5 Fix kolla_docker_namespace comment 2676ec0b Switch infra VMs to EFI-compatible CentOS image e666c5ff CI: Rename seed-vm-efi jobs to seed-vm-q35 d0b49ac6 Switch to EFI-compatible CentOS Stream cloud image c57ae1c7 Fix networking connectivity check with no_ip 504a4161 CI: Move failing job to experimental queue 88431b45 Fix version of EPEL GPG key 6e4d607e CI: Switch from td-agent to fluent-package (LTS) 263f9f47 public-openrc: avoid duplicate OS_CACERT d792e3ae Bump jriguera.configdrive to latest master commit 9e188f40 Add network group to tls-backend b7dd59e2 Fix documentation of seed_containers usage 458c5f02 junos-switch: Fix junos_config call 0098ad99 Enable building of neutron-bgp-dragent container 471b2056 Support empty strings in dev-tools package lists 73aa2587 Bump stackhpc.linux to 1.3.4 Diffstat (except docs and test files) ------------------------------------- ansible/inventory/group_vars/all/infra-vms | 4 ++-- ansible/inventory/group_vars/all/kolla | 3 +++ ansible/inventory/group_vars/all/seed | 3 ++- ansible/inventory/group_vars/all/seed-vm | 4 ++-- ansible/inventory/group_vars/all/switches/junos | 19 ------------------- ansible/network-connectivity.yml | 13 ++++++++++--- ansible/physical-network.yml | 1 - ansible/roles/dev-tools/defaults/main.yml | 2 +- ansible/roles/dnf/templates/epel.repo.j2 | 6 +++--- ansible/roles/junos-switch/README.md | 19 ++++--------------- ansible/roles/junos-switch/defaults/main.yml | 3 --- ansible/roles/junos-switch/tasks/main.yml | 4 +--- .../kolla-ansible/templates/overcloud-components.j2 | 1 + .../roles/public-openrc/templates/public-openrc.sh.j2 | 2 ++ .../configuration/reference/physical-network.rst | 14 ++------------ .../reference/seed-custom-containers.rst | 3 ++- etc/kayobe/infra-vms.yml | 2 +- etc/kayobe/kolla.yml | 2 +- etc/kayobe/seed-vm.yml | 2 +- etc/kayobe/seed.yml | 3 ++- .../overrides.yml.j2 | 6 +++--- releasenotes/notes/bug-2111341-706fe5689414a9c1.yaml | 15 +++++++++++++++ releasenotes/notes/bug-2116318-44f0c022cde1e686.yaml | 6 ++++++ releasenotes/notes/bug-2117084-8d1eaa375df1d1f8.yaml | 6 ++++++ releasenotes/notes/bug-2119921-b23dc13147e6bda4.yaml | 6 ++++++ releasenotes/notes/bug-2121588-ad6d8b33e3fcaff9.yaml | 6 ++++++ .../build-neutron-bgp-dragent-a6b28ce7e22d8145.yaml | 5 +++++ .../bump-jriguera-configdrive-e01c6f347507ee6f.yaml | 7 +++++++ .../bump-stackhpc-linux-1.3.4-0ae3e0ec9f4c25e2.yaml | 5 +++++ ...tools-packages-select-filter-17f432df42762625.yaml | 7 +++++++ ...ity-check-with-partial-no-ip-5efcc8ed6e76267e.yaml | 6 ++++++ requirements.yml | 4 ++-- zuul.d/jobs.yaml | 17 ++++++++--------- zuul.d/project.yaml | 7 ++++--- 35 files changed, 131 insertions(+), 92 deletions(-)

1 0

blazar-nova 8.0.0.0rc1 (flamingo)
by no-reply＠openstack.org 11 Sep '25

11 Sep '25

Hello everyone, A new release candidate for blazar-nova for the end of the Flamingo cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/blazar-nova/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Flamingo release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/flamingo release branch at: https://opendev.org/openstack/blazar-nova/src/branch/stable/flamingo Release notes for blazar-nova can be found at: https://docs.openstack.org/releasenotes/blazar-nova/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/blazar/+bugs and tag it *flamingo-rc-potential* to bring it to the blazar-nova release crew's attention.

1 0

ironic 32.0.0 (flamingo)
by no-reply＠openstack.org 11 Sep '25

11 Sep '25

We are chuffed to announce the release of: ironic 32.0.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://bugs.launchpad.net/ironic/+bugs For more details, please see below. 32.0.0 ^^^^^^ Prelude ******* The Ironic developers are proud to announce our release for the 2025.2 development cycle in the form of Ironic 32.0.0. This release brings substantial changes in Ironic which will improve the experience and performance of Ironic. Amongst these herculian efforts includes the removal of Eventlet, Database Object Indirection, Redfish inspection use of inspection rules and hooks. Along with numerous bug fixes to address operator feedback to ultimately improve the user experience. All of this work is on top of our previously released 31.0.0 and 30.0.0 releases which were performed as part of this development cycle. New Features ************ * Adds periodic cleanup of stale conductor entries from the database. A new periodic task automatically removes conductor records that have been offline for longer than the configured timeout period, helping prevent accumulation of stale conductor entries. Three new configuration options have been added to the "[conductor]" section: * "conductor_cleanup_interval" - The interval in seconds of how often to run the cleanup task (default: 86400 seconds - 1 day). For example: 86400 seconds = 1 day, 604800 seconds = 1 week, 2592000 seconds = 30 days (approx. 1 month). * "conductor_cleanup_timeout" - How long a conductor must be offline before it's considered stale and eligible for cleanup (default: 1209600 seconds - 2 weeks). This value is always required to be at least 3x larger than "[conductor]heartbeat_timeout" since if otherwise, active conductors might be mistakenly removed from the database. The cleanup task will skip execution and log a warning if this requirement is not met. * "conductor_cleanup_batch_size" - Maximum number of stale conductors to clean up in a single operation (default: 50). * A new "category" field has been added to the Port object. This field is meant to help distinguish between different types of Ports. Relevant to trait based port scheduling feature. * A new "vendor" field has been added to the Port object. This field is meant to help distinguish between different types of Ports. Relevant to trait based port scheduling feature. * The redfish inspection interface can now utilize inspection rules as well as inspection hooks. * Adds inspection hooks in the redfish inspect interface for processing data received during inspection. The three default configuration hooks *validate-interfaces*, *ports* and *architecture* are added. A new configuration option *inspection_hooks* is added in the *redfish* configuration section. * Adds the capability for the Ironic API services to operate without a direct connection to the Ironic database backend. Instead the RPC Object model through the concept of remotable objects. The "[default]use_rpc_for_database" setting can be utilized to leverage this mode of operation, however it is also implied when the "[default]rpc_transport" option is set to "none" or "local". * Ironic now utilizes native OS threads for all periodic and background activities. This change is not configurable, and should any issues be observed with Ironic's operation, please do not hesitate to report them to the developer community. Upgrade Notes ************* * The minimum version of the "futurist" library is now "3.2.0". This change is being made to support the removal of the Eventlet library from use in Ironic. * The "wsgi_scripts" entry point "ironic-api-wsgi" has been removed from "setup.cfg". WSGI servers should now use the module path "ironic.wsgi:application" directly instead of the generated script. This change aligns with the OpenStack goal to migrate from WSGI scripts to module paths and is compatible with modern Python packaging tools. For example, with gunicorn: gunicorn ironic.wsgi:application Or with uwsgi: [uwsgi] module = ironic.wsgi:application * The Apache mod_wsgi sample configuration has been removed. Operators should use modern WSGI servers like uWSGI or Gunicorn instead, which provide better performance and are simpler to configure. See the updated deployment documentation for examples. * The options in the "[local_rpc]" group introduced in Ironic 31.0 have been removed and no longer have any effect. * When using the redfish inspection method, the node property "cpus" will no longer be populated. No other inspection method populated this field. * The introduction of the capability to utilize remotable objects with the API has resulted in object versions internally being incremented without actual schema changes. This may result in an upgrade taking a little longer, depending on the size of the database, as object versions are updated during the upgrade sequence. * Support for Python 3.9 has been removed. Now Python 3.10 is the minimum version supported. Deprecation Notes ***************** * While the legacy "ironic.api.wsgi:initialize_wsgi_app()" function remains available for backward compatibility, new deployments should use "ironic.wsgi:application" instead. * Use of the API DBHook feature, i.e. the resulting "api.request.dbapi" pattern in API service code is deprecated and the DBHook will be removed in a future release of Ironic. Any downstream maintainers which utilize this pattern are encouraged to utilize an object to serve as an intermediary stepping stone between the API and the database. Critical Issues *************** * With the move to the use of native threading, the required memory footprint of Ironic has increased. This is a result of both threading being used combined with process model changes which were necessary to remove the "eventlet" library from Ironic. The new process model consists of a launcher process with a sub-process which represents the actual application workload. In the case of single-process Ironic, a single launcher process with two workers is what operators should expect. As for memory utilization, it is generally tracked by two measurements. A Virtual Memory Size (VSZ) which represents memory an application has allocated, but may not actively using. The more relevant masurement is the Resident Set Size (RSS), which is the amount of memory in actual use. Due to the process changes, Operators can expect a 2-3x increase in the amount overall system memory in use (RSS). The VSZ can be expected to be upwards of 10x larger, and will closely track with the current number of active threads being executed upon. The Ironic project is aware this may require some operator tuning of resource constraints applied to Ironic. However, the improved concurrency and performance should be an appropriate trade-off. Bug Fixes ********* * Performance of Basic HTTP authentication has been improved by keeping a memory cache of bcrypt password checks. This improves the performance of Ironic conductor with JSON-RPC, and API access when using Basic HTTP authentication. * Fixes an issue that when accelerator devices were removed from node, a re-introspection does not remove previous accelerator device information from the node. * [Bug 2069771 (https://bugs.launchpad.net/ironic/+bug/2069771) Fixes an issue where deleted or decommissioned conductors would remain in "openstack baremetal conductor list" indefinitely with "Alive = False" status. The new periodic cleanup task automatically removes these stale entries after the configured timeout period. * When power state synchronization confirms or restores the expected state, the "last_error" field may retain stale messages, giving a misleading impression of failure on an otherwise healthy node. If "[conductor]node_history" is enabled, the field is now cleared, ensuring status reflects current node health while preserving error history. * Fixes an issue with <range in> operator in root device hint. Now it's possible to use the range operator correctly, specifying a two values range that includes the size of the root device in GiB. * Fixes bug where reserved service steps (wait, hold) executed on nodes in "service failed" state would incorrectly transition the node directly to "active" state, bypassing the expected intermediate wait/hold states. Now nodes in "service failed" state properly transition to "service wait" or "service hold" when wait/hold steps are executed, maintaining the expected state machine flow. * Fixes servicing abort handling to respect the *abortable* flag of service steps. Previously, servicing steps could be aborted regardless of their *abortable* flag setting. Now, if a service step has *abortable* set to *False*, the abort will be deferred until the current step completes, similar to how cleaning steps work. This ensures service steps that cannot be safely interrupted are allowed to complete before the abort takes effect. * No longer uses JSON RPC with "[DEFAULT]rpc_transport" set to "none". It was required during the transition away from eventlet, and is no longer needed. RPC can still be enabled by setting "rpc_transport" to "json-rpc". * When using the redfish inspection method, the node property "cpu_arch" is now populated correctly with "i686" or "x86_64" for the processor. * Fixes the ability to invoke the "abort" API verb when a node is in "service fail" state, allowing the user to back out of a failure state. For more information see bug 2119989 (https://bugs.launchpad.net/ironic/+bug/2119989) * The "eventlet" library is no longer invoked by Ironic for the management of threads. Changes in ironic 31.0.0..32.0.0 -------------------------------- fed7c0416 api: Fix off-by-one error 5cbbf3fc9 Avoid the wsgi application to start with eventlet 7681e2216 Update release mappings for 32.0.x 92fac7505 Add a prelude for 2025.2 8d7be386d Replace unused oslo.service options 2ff035d42 Revert "Make ironic-tempest-uefi-redfish-vmedia-4k non-voting" b179ca369 Remove tenks reference in bug-deputy doc 4dd42796c Revert "Switch from local RPC to automated JSON RPC on localhost" 9803975d7 docs: trivial: clarify pull secrets for OCI image access faca47ae9 Add hacking check to ban eventlet imports 5cd688d42 Follow-up: Fix improper HTTP status code usage 4349e4156 Drop wsgi script, docs around mod_wsgi b87b970e3 ci: disable the novnc service on multinode 960afffda Trivial: remove meaningless logging 71dd34a7b Launch API in the same process as conductor for singleprocess Ironic c87d91359 Follow up to I9a5a2bfd9f4b538cc7217aefb7333df9ccdb9095 b4062590a Fix insufficient mocking in rpc_service tests bb369b624 redfish: process inspection rules during inspection 6140285b5 Reduce the number of RPC calls to traits API eeb7b3cd7 Raise default IRONIC_DEFAULT_THREAD_SIZE df7dba060 Fix improper HTTP status code usage (RFC 7231) 64ed78c81 inspection: fix None case for inventory data f29ae0a5c redfish: mechanical moves of inspection tests 9693518c3 Direct return of vmedia action during in power failure 88f970b01 Add request logging middleware for API requests e13142302 Update documentation to include servicing abort. 2a6271888 Memoize calls to bcrypt.checkpw d13d488fd Fix setting IRONIC_THREAD_STACK_SIZE 907df2c40 Make ironic-tempest-uefi-redfish-vmedia-4k non-voting 959f1762b JSON-RPC: disable server-side logging with rpc_transport=none fa8a8fbb4 Fix servicing abort to respect abortable flag fd8f83d28 Update the state machine diagram 1eda80766 Fix the ability to escape service fail 9a1580517 api: Add schema for bios API (responses) 67bf01701 api: Allow more types for updates 7e602d842 Add a new 'category' field to the Port object 0c70327a6 Clean-up misc eventlet references 9cb25d3e3 Revert "ci: temporary metal3 integration job disable" 67da8d8c3 Optional indirection API use 8fd1cc8c9 Remove direct mapping from API -> DB 2e3fdd828 Launch vnc proxy with no_fork bbf57b1c2 Set the backend to threading bedfd143e Replace GreenThreadPoolExecutor in conductor 56afcc273 ci: temporary metal3 integration job disable bcf4255ef api: Add schema for bios API (requests) 52786d4fa api: Add schema for bios API (versioning) 4678ed77a Always rebuild sphinx env on doc build 6135a00c3 Add periodic cleanup of stale conductors 92dec6f77 api: Add schema for allocations API (responses) f1943cead Fix service failed state transitions for wait/hold 8a2e33e80 Add a new 'vendor' field to the Port object ca65f2d3b Add RELEASE_MAPPING entry for 31.0 release 50199f76c Add RELEASE_MAPPING entry for 30.0 release d7cea2a8b Trivial: minor typo fix around network boot document 58bcdf1a4 ci: grenade: restart neutron services 0fc991a25 No admin-set maintenance override on power sync 5d4541e1e ci: move metal3 job to larger memory node 1a82ccfe7 Handle race conditions in power state changes c57922d5e [trivial] Fix rendering of 1.98 header aa0348678 Fix local RPC IPv6 detection to use socket binding instead of file checks a6f35d78a Initialize variable to prevent an error 49148f039 Fix logging for verification steps 4591b3a43 api: Add schema for inspection rules API (versioning) 747370333 allow running inspection hooks on redfish interface 5a8312fef fix redfish processor inspection 587dca197 Follow-up: Clear `last_error` on power match/sync ac371ce24 Populate switch_info with lldp system name 382a9f5c8 fix up redfish inspection mock ethernet interface data a8d2ed88a Orphaned accelerators after devices removed 322a10dcf Fix broken <range-in> in root device hints c99230060 Add a suggestive warning around power and sensor syncs ecf157192 Log how long power sync and sensor collections take 207fd08d3 doc: Fix installation of grub/shim EFI images in CentOS 34332802c Remove Python 3.9 support e22381bed api: Add schema for allocations API (requests) 53c58dfcc api: Add schema for allocations API (versioning) 8ce45e715 doc: Update contributor docs to include multiple doc sources and preview options f78a8ff09 Restore architecture.rst with redirect notice to overview Diffstat (except docs and test files) ------------------------------------- .../source/baremetal-api-v1-portgroups-ports.inc | 28 + api-ref/source/baremetal-api-v1-ports.inc | 24 + api-ref/source/parameters.yaml | 34 +- .../source/samples/node-port-detail-response.json | 2 + api-ref/source/samples/port-create-request.json | 2 + api-ref/source/samples/port-create-response.json | 2 + .../source/samples/port-list-detail-response.json | 2 + api-ref/source/samples/port-update-response.json | 2 + bindep.txt | 8 + devstack/upgrade/upgrade.sh | 13 + .../contributor/documentation-contributing.rst | 115 ++++ .../include/configure-ironic-api-mod_wsgi.inc | 94 --- .../install/include/configure-ironic-api-wsgi.inc | 116 ++++ .../include/configure-ironic-singleprocess.inc | 4 +- etc/apache2/ironic | 38 -- ironic/api/app.py | 4 + ironic/api/controllers/v1/__init__.py | 3 + ironic/api/controllers/v1/allocation.py | 86 ++- ironic/api/controllers/v1/bios.py | 17 +- ironic/api/controllers/v1/driver.py | 17 +- ironic/api/controllers/v1/inspection_rule.py | 50 +- ironic/api/controllers/v1/node.py | 21 +- ironic/api/controllers/v1/port.py | 26 +- ironic/api/controllers/v1/portgroup.py | 8 +- ironic/api/controllers/v1/shard.py | 3 +- ironic/api/controllers/v1/utils.py | 25 +- ironic/api/controllers/v1/versions.py | 6 +- ironic/api/controllers/v1/volume_connector.py | 16 +- ironic/api/controllers/v1/volume_target.py | 16 +- ironic/api/hooks.py | 12 +- ironic/api/middleware/request_log.py | 93 +++ ironic/api/schemas/common/request_types.py | 29 + ironic/api/schemas/common/response_types.py | 46 ++ ironic/api/schemas/v1/allocation.py | 242 +++++++ ironic/api/schemas/v1/bios.py | 144 +++++ ironic/api/wsgi.py | 6 + ironic/command/__init__.py | 14 +- ironic/command/api.py | 8 + ironic/command/conductor.py | 25 +- ironic/command/novncproxy.py | 10 +- ironic/command/pxe_filter.py | 8 + ironic/command/singleprocess.py | 33 +- ironic/command/utils.py | 60 ++ ironic/common/auth_basic.py | 20 +- ironic/common/driver_factory.py | 4 +- ironic/common/exception.py | 8 +- ironic/common/hash_ring.py | 11 +- ironic/common/json_rpc/client.py | 10 +- ironic/common/json_rpc/server.py | 13 +- ironic/common/release_mappings.py | 82 ++- ironic/common/rpc_service.py | 21 +- ironic/common/service.py | 4 +- ironic/common/states.py | 12 + ironic/common/tls_utils.py | 93 --- ironic/common/utils.py | 11 +- ironic/conductor/base_manager.py | 102 ++- ironic/conductor/local_rpc.py | 114 ---- ironic/conductor/manager.py | 229 ++++++- ironic/conductor/rpc_service.py | 76 ++- ironic/conductor/rpcapi.py | 65 +- ironic/conductor/servicing.py | 12 + ironic/conductor/task_manager.py | 8 +- ironic/conductor/utils.py | 8 + ironic/conf/__init__.py | 2 - ironic/conf/conductor.py | 30 +- ironic/conf/default.py | 6 + ironic/conf/local_rpc.py | 39 -- ironic/conf/opts.py | 2 - ironic/conf/redfish.py | 17 +- ironic/console/websocketproxy.py | 15 - ironic/db/api.py | 8 + ...05c9fb_add_category_attribute_to_port_object.py | 31 + ...7561979d_add_vendor_attribute_to_port_object.py | 31 + ironic/db/sqlalchemy/api.py | 35 ++ ironic/db/sqlalchemy/models.py | 2 + ironic/drivers/base.py | 2 +- ironic/drivers/modules/deploy_utils.py | 6 + ironic/drivers/modules/inspect_utils.py | 4 +- .../modules/inspector/hooks/accelerators.py | 2 + .../inspector/hooks/local_link_connection.py | 11 + ironic/drivers/modules/ipmitool.py | 6 +- ironic/drivers/modules/redfish/inspect.py | 102 ++- ironic/drivers/modules/redfish/power.py | 25 + ironic/hacking/checks.py | 11 + ironic/objects/allocation.py | 65 +- ironic/objects/base.py | 3 + ironic/objects/bios.py | 58 +- ironic/objects/chassis.py | 47 +- ironic/objects/conductor.py | 102 ++- ironic/objects/deploy_template.py | 57 +- ironic/objects/deployment.py | 36 +- ironic/objects/firmware.py | 12 +- ironic/objects/indirection.py | 3 + ironic/objects/inspection_rule.py | 26 +- ironic/objects/node.py | 79 +-- ironic/objects/node_history.py | 41 +- ironic/objects/node_inventory.py | 7 +- ironic/objects/port.py | 98 ++- ironic/objects/portgroup.py | 65 +- ironic/objects/runbook.py | 17 +- ironic/objects/trait.py | 48 +- ironic/objects/volume_connector.py | 53 +- ironic/objects/volume_target.py | 59 +- .../unit/api/controllers/v1/test_portgroup.py | 2 +- .../unit/drivers/modules/drac/test_management.py | 4 +- .../modules/inspector/hooks/test_accelerators.py | 24 + .../inspector/hooks/test_local_link_connection.py | 16 + .../unit/drivers/modules/redfish/test_inspect.py | 448 +++++++------ .../unit/drivers/modules/redfish/test_power.py | 70 ++- .../unit/drivers/modules/redfish/test_raid.py | 10 + .../unit/drivers/modules/test_deploy_utils.py | 16 + ironic/wsgi/__init__.py | 8 +- .../notes/2025.2-prelude-5ec90e737f0846f3.yaml | 11 + .../notes/bcrypt_cache-d78775ff02f2d970.yaml | 7 + ...lean-removed-accelerators-0c67ace5990c2ac3.yaml | 6 + .../cleanup-stale-conductors-654c2bcc4ffb4c43.yaml | 32 + ...-last-error-on-power-sync-689bdc3b317d5784.yaml | 9 + .../notes/fix-hint-range-in-1056204234c24661.yaml | 6 + ...led-wait-hold-transitions-c83ef2b376ae04fe.yaml | 9 + ...t-abortable-flag-handling-d8e7f9a2c4b5e7f1.yaml | 9 + .../notes/futurist-minimum-ec66ccfcc4271a5c.yaml | 6 + ...ate-wsgi-script-to-module-4113e87f202eecab.yaml | 27 + .../notes/no-localrpc-09e47b3a9229ad8e.yaml | 11 + .../notes/port-category-9935c6006d243bc3.yaml | 6 + .../notes/port-vendor-ad30b76dc23efc38.yaml | 6 + ...redfish-inspect-processor-2467118e869a2915.yaml | 9 + .../notes/redfish-inspection-f8b96425b8758857.yaml | 5 + .../redfish-inspection-hooks-8517bb86da49dafc.yaml | 8 + .../notes/remotable-api-92d7b9bc7e843cd4.yaml | 23 + .../notes/remove-py39-981b5971b304a588.yaml | 5 + .../notes/servicefail-abort-8ca7a7498321b67c.yaml | 7 + .../notes/threading-ironic-9873564daefcc1c2.yaml | 34 + requirements.txt | 7 +- setup.cfg | 6 +- tools/config/ironic-config-generator.conf | 2 +- tox.ini | 8 +- zuul.d/ironic-jobs.yaml | 3 + zuul.d/metal3-jobs.yaml | 2 +- 181 files changed, 4880 insertions(+), 2496 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 028e209a9..c4ad3e855 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +8,0 @@ automaton>=1.9.0 # Apache-2.0 -eventlet>=0.30.1 # MIT @@ -21 +20 @@ oslo.serialization>=2.25.0 # Apache-2.0 -oslo.service>=1.24.0 # Apache-2.0 +oslo.service>=4.2.1 # Apache-2.0 @@ -38 +37 @@ psutil>=3.2.2 # BSD -futurist>=1.2.0 # Apache-2.0 +futurist>=3.2.0 # Apache-2.0 @@ -51 +50 @@ cheroot>=10.0.1 # BSD -cryptography>=2.3 # BSD/Apache-2.0 +cotyledon>=2.0.0 # Apache-2.0

1 0

magnum 21.0.0.0rc1 (flamingo)
by no-reply＠openstack.org 11 Sep '25

11 Sep '25

Hello everyone, A new release candidate for magnum for the end of the Flamingo cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/magnum/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Flamingo release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/flamingo release branch at: https://opendev.org/openstack/magnum/src/branch/stable/flamingo Release notes for magnum can be found at: https://docs.openstack.org/releasenotes/magnum/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/magnum/+bugs and tag it *flamingo-rc-potential* to bring it to the magnum release crew's attention.

1 0

kolla 18.8.0 (caracal)
by no-reply＠openstack.org 11 Sep '25

11 Sep '25

We are ecstatic to announce the release of: kolla 18.8.0 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 18.8.0 ^^^^^^ Upgrade Notes ************* * Debian container image builds now use bookworm suite for RabbitMQ installation. * Switches Erlang RPMs on aarch64 to a versioned Erlang 26 or 27 repository, due to Fedora COPR not supporting multiple package versions in one repo. Bug Fixes ********* * Fixed missing metrics in Prometheus libvirt exporter. The Prometheus libvirt exporter has been bumped from "v1.6.0" to "v2.2.0". This restores some metrics that were lost when the exporter source was changed in a previous release. LP#2120639. * Fix using Cinder as Glance image store when Cinder uses a FC or iSCSI backend by adding the missing "lsscsi" package to glance-api. LP#2111828 Changes in kolla 18.7.0..18.8.0 ------------------------------- 07103ab0a debian: Use bookworkm suite for rabbitmq APT repo 37d68ab91 [stable] Use versioned Erlang 26 and 27 repo on aarch64 d0870105a docs: Update contributor guide 1fe136431 Bump libvirt exporter 519c7e860 Revert "mariadb: pin to 10.11.13" e10ef9880 CI: use opendevmirror for debian/ubuntu builds 9b1a12cdb mariadb: pin to 10.11.13 489989c58 send empty X-Registry-Auth for anonymous pushes 8345ef296 update debian release in support matrix 2a6a90129 change erlang arm64 repo to rhel based fd4a0e9d5 Add rsync package to the nova-ssh container 23a40140e Build RabbitMQ 4.1 in stable releases fa6431e21 [2024.1 only] Add conditionals for Ubuntu Jammy c03188b4d Fix glance-api: add missing lsscsi package 5f9055397 ovn: Fix log permissions 92c9782e8 Enable EPEL repo for Ceph deps in glance and gnocchi Diffstat (except docs and test files) ------------------------------------- ...mq-erlang.repo => copr-rabbitmq-erlang-26.repo} | 10 ++--- .../kolla-toolbox/apt_preferences_rabbitmq.debian | 2 +- .../kolla-toolbox/apt_preferences_rabbitmq.ubuntu | 2 +- .../rabbitmq-4-1/apt_preferences_rabbitmq.debian | 7 ++++ .../rabbitmq-4-1/apt_preferences_rabbitmq.ubuntu | 7 ++++ .../rabbitmq-4-1/rabbitmq_packages_rpm.centos | 4 ++ .../rabbitmq-4-1/rabbitmq_packages_rpm.rocky | 4 ++ .../{ => rabbitmq}/apt_preferences_rabbitmq.debian | 4 +- .../{ => rabbitmq}/apt_preferences_rabbitmq.ubuntu | 4 +- .../rabbitmq/{ => rabbitmq}/healthcheck_rabbitmq | 0 .../rabbitmq/rabbitmq/rabbitmq_packages_rpm.centos | 4 ++ .../rabbitmq/rabbitmq/rabbitmq_packages_rpm.rocky | 4 ++ kolla/common/sources.py | 6 +-- kolla/image/tasks.py | 10 +++++ kolla/template/repos-noble.yaml | 18 +++++++-- kolla/template/repos.yaml | 46 ++++++++++++++++------ .../notes/bug-2120639-74c180bd812ddcf7.yaml | 10 +++++ .../debian-rabbitmq-bookworm-34b2e5d9d43241da.yaml | 5 +++ ...rlang-aarch64-versioned-repos-9b1d2c8b8b7a.yaml | 5 +++ ...dd-missing-lsscsi-package-e6ae949eb8bdbe7b.yaml | 6 +++ 48 files changed, 224 insertions(+), 64 deletions(-)

1 0

kayobe 16.8.0 (caracal)
by no-reply＠openstack.org 11 Sep '25

11 Sep '25

We are ecstatic to announce the release of: kayobe 16.8.0 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://bugs.launchpad.net/kayobe/+bugs For more details, please see below. 16.8.0 ^^^^^^ New Features ************ * The "neutron-bgp-dragent" container will now be built by default when "kolla_enable_neutron_bgp_dragent" is true. Upgrade Notes ************* * Deployments using Juniper Junos OS switches are required to update their configuration according to Juniper Junos OS documentation (https://docs.openstack.org/kayobe/latest/configuration/reference /physical-network.html#juniper-junos-os). This is due to the "junos_config" module dropping support for the "provider" parameter. Bug Fixes ********* * Fixes physical network configuration for Juniper Junos OS switches. Note that users are required to update their configuration according to Juniper Junos OS documentation (https://docs.openstack.org/kayobe/latest/configuration/reference /physical-network.html#juniper-junos-os). LP#2111341 * Fixes duplicate "OS_CACERT" lines in "public-openrc.sh" when both admin and public cacert variables are set. LP#2116318 * Fixes configuration of backend TLS when network nodes are separate from controllers. LP#2117084 * Fixes wrong name of "gpgkey" used for EPEL repositories when "dnf_use_local_mirror" is enabled. LP#2119921 * Fixes an issue where incorrect network-data.json would be generated when interfaces without IP addresses are attached to infrastructure VMs. LP#2118403 * Fixes failure to activate SR-IOV on GPU devices by bumping the "stackhpc.linux" collection to v1.3.4. * Fixes support for empty strings in the "dev-tools" package lists. This allows using expressions such as "{{ 'foo' if os_distribution == 'rocky' else '' }}". LP#2115000 * Fixes network connectivity check when a subset of hosts have the "no_ip" property set via group or host variables. LP#2120918 Changes in kayobe 16.7.0..16.8.0 -------------------------------- b9d04d58 Fix kolla_docker_namespace comment ea15c83c Fix networking connectivity check with no_ip 1d8553b5 CI: Move failing job to experimental queue 27e5972f Fix version of EPEL GPG key 1c556680 public-openrc: avoid duplicate OS_CACERT 0b4f2a02 Bump jriguera.configdrive to latest master commit a7587a06 Add network group to tls-backend d3100aad Fix documentation of seed_containers usage 0251eda6 junos-switch: Fix junos_config call 2a67a98f Enable building of neutron-bgp-dragent container 263e14d9 Support empty strings in dev-tools package lists 1a166ab8 Bump stackhpc.linux to 1.3.4 Diffstat (except docs and test files) ------------------------------------- ansible/inventory/group_vars/all/kolla | 3 +++ ansible/inventory/group_vars/all/seed | 3 ++- ansible/inventory/group_vars/all/switches/junos | 19 ------------------- ansible/network-connectivity.yml | 13 ++++++++++--- ansible/physical-network.yml | 1 - ansible/roles/dev-tools/defaults/main.yml | 2 +- ansible/roles/dnf/templates/epel.repo.j2 | 6 +++--- ansible/roles/junos-switch/README.md | 19 ++++--------------- ansible/roles/junos-switch/defaults/main.yml | 3 --- ansible/roles/junos-switch/tasks/main.yml | 4 +--- .../kolla-ansible/templates/overcloud-components.j2 | 1 + .../roles/public-openrc/templates/public-openrc.sh.j2 | 2 ++ .../configuration/reference/physical-network.rst | 14 ++------------ .../reference/seed-custom-containers.rst | 3 ++- etc/kayobe/kolla.yml | 2 +- etc/kayobe/seed.yml | 3 ++- releasenotes/notes/bug-2111341-706fe5689414a9c1.yaml | 15 +++++++++++++++ releasenotes/notes/bug-2116318-44f0c022cde1e686.yaml | 6 ++++++ releasenotes/notes/bug-2117084-8d1eaa375df1d1f8.yaml | 6 ++++++ releasenotes/notes/bug-2119921-b23dc13147e6bda4.yaml | 6 ++++++ .../build-neutron-bgp-dragent-a6b28ce7e22d8145.yaml | 5 +++++ .../bump-jriguera-configdrive-e01c6f347507ee6f.yaml | 7 +++++++ .../bump-stackhpc-linux-1.3.4-0ae3e0ec9f4c25e2.yaml | 5 +++++ ...tools-packages-select-filter-17f432df42762625.yaml | 7 +++++++ ...ity-check-with-partial-no-ip-5efcc8ed6e76267e.yaml | 6 ++++++ requirements.yml | 4 ++-- zuul.d/project.yaml | 2 +- 27 files changed, 100 insertions(+), 67 deletions(-)

1 0

openstacksdk 4.7.1 (flamingo)
by no-reply＠openstack.org 11 Sep '25

11 Sep '25

We are stoked to announce the release of: openstacksdk 4.7.1 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/openstacksdk Download the package from: https://pypi.org/project/openstacksdk Please report issues through: https://bugs.launchpad.net/openstacksdk/+bugs For more details, please see below. Changes in openstacksdk 4.7.0..4.7.1 ------------------------------------ 33fea0e7b image: Provide default import method d02c5d6a5 Remove dib-nodepool-functional-openstack-ubuntu-noble-src 36dc50b52 Update TOX_CONSTRAINTS_FILE for stable/2025.2 030424c18 Update .gitreview for stable/2025.2 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + openstack/image/v2/_proxy.py | 3 +++ tox.ini | 8 ++++---- zuul.d/project.yaml | 2 -- 4 files changed, 8 insertions(+), 6 deletions(-)

1 0