January 2026 - Release-announce - lists.openstack.org

ironic-python-agent-builder 5.4.1 (dalmatian)
by no-reply＠openstack.org 28 Jan '26

28 Jan '26

We exuberantly announce the release of: ironic-python-agent-builder 5.4.1 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/ironic-python-agent-builder Download the package from: https://tarballs.openstack.org/ironic-python-agent-builder/ Please report issues through: https://bugs.launchpad.net/ironic-python-agent-builder/+bugs For more details, please see below. Changes in ironic-python-agent-builder 5.4.0..5.4.1 --------------------------------------------------- b23b629 Don't install biosdevname in arm64/aarch64 arches 2538e42 More reliable TinyIPA builds with network retries 4c30a46 Fix vmedia network config drive handling 2e71ef0 Update TOX_CONSTRAINTS_FILE for stable/2024.2 7ed5db4 Update .gitreview for stable/2024.2 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + dib/extra-hardware/package-installs.yaml | 2 +- .../bin/ironic-python-agent-resolve-configdrive.sh | 2 +- tinyipa/build-tinyipa.sh | 80 +++++++++++++++++++--- tox.ini | 2 +- 5 files changed, 75 insertions(+), 12 deletions(-)

1 0

ironic 26.1.5 (dalmatian)
by no-reply＠openstack.org 28 Jan '26

28 Jan '26

We are gleeful to announce the release of: ironic 26.1.5 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://bugs.launchpad.net/ironic/+bugs For more details, please see below. 26.1.5 ^^^^^^ Bug Fixes * Performance of Basic HTTP authentication has been improved by keeping a memory cache of bcrypt password checks. This improves the performance of Ironic conductor with JSON-RPC, and API access when using Basic HTTP authentication. * Ensure that the path to where we are copying the bootloader exists before attempting to copy the bootloader in. * Fixes a race condition where the Redfish power interface could fail with HTTP 400 (BadRequest) or HTTP 409 (Conflict) errors during power operations. These errors are now treated as success when the node is already in the target power state (either on or off), preventing deployment failures when power state changes complete after Ironic's state verification times out. Also refresh system state to get current power state from BMC instead of using potentially stale cached data. * Fixes an issue where "disable_ramdisk" could bypass API validation when supplied via a runbook because validation happened before runbook resolution. * Report a better error message than a KeyError when there are no interfaces in the inspection data when running the validate- interfaces inspection hook. Changes in ironic 26.1.4..26.1.5 -------------------------------- 40a4bec17 Fix order of `disable_ramdisk` validation 428cc528c fix: report a better error in validate-interfaces 45c3c241c fix: ensure that the bootloader path exists f2a4a741c Handle HTTP 400 and 409 race condition in Redfish power operations a54c628f7 More RAM for Anaconda job a9254f9e5 Memoize calls to bcrypt.checkpw Diffstat (except docs and test files) ------------------------------------- ironic/api/app.py | 2 +- ironic/api/controllers/v1/node.py | 3 +- ironic/common/auth_basic.py | 220 +++++++++++++++++++++ ironic/common/pxe_utils.py | 41 ++-- .../modules/inspector/hooks/validate_interfaces.py | 5 + ironic/drivers/modules/redfish/power.py | 41 ++++ .../unit/drivers/modules/redfish/test_power.py | 187 ++++++++++++++++++ .../notes/bcrypt_cache-d78775ff02f2d970.yaml | 7 + ...bootloader-paths-creation-b5097003f25a18ad.yaml | 5 + .../notes/catch-redfish-409-0819174174245ade.yaml | 11 ++ ...k-validation-for-runbooks-e32617f1e9227e65.yaml | 6 + .../validate-interfaces-hook-49d7d6c57929a8cd.yaml | 5 + zuul.d/ironic-jobs.yaml | 2 +- 16 files changed, 603 insertions(+), 62 deletions(-)

1 0

swift 2.37.0 (gazpacho)
by no-reply＠openstack.org 28 Jan '26

28 Jan '26

We eagerly announce the release of: swift 2.37.0 This release is part of the gazpacho release series. The source is available from: https://opendev.org/openstack/swift Download the package from: https://tarballs.openstack.org/swift/ Please report issues through: https://bugs.launchpad.net/swift/+bugs For more details, please see below. 2.37.0 ^^^^^^ New Features ************ * The s3token middleware now passes service auth tokens to Keystone if credentials are provided. This is required to enable S3 API access for Keystone users when using Keystone >25.0.0, !=26.0.0, !=26.0.1, !=27.0.0, !=28.0.0. See etc/proxy-server.conf-sample for configuration details. For more information, see OSSA-2025-002 and bug #2119646. * The s3token middleware now caches credential secrets for one minute by default, if credentials are provided. Secret-caching typically reduces the load on Keystone and is required for Keystone users to be able to use signed aws-chunked transfers. To return to prior behavior, explicitly set "secret_cache_duration = 0" in the "[filter:s3api]" section of your proxy-server.conf. * The KMS keymaster now supports selecting the endpoint returned in the Keystone catalog via the "barbican_region_name" configuration option. This may be useful in multi-region deployments which have multiple endpoints. * The request line-length limit is now configurable for all WSGI servers via the "max_request_line" option in the "[swift- constraints]" section of swift.conf. By default, continue to use eventlet's default of 8192 bytes. * The following new metrics were added when using labeled metrics: * The proxy-logging middleware may now emit real-time transfer metrics. See the "statsd_emit_buffer_xfer_bytes_seconds" option in etc/proxy-server.conf-sample for more information. * The proxy-logging middleware now includes an "api" label whose value may be "swift" or "S3" depending on whether the client request is serviced by the swift API or S3 API. * The s3api middleware now emits a counter recording the usage of various protocol-related headers. * The container-sharder now emits a timing metric for the length of time between shard range creation and cleaving. * "swift-manage-shard-ranges" now defaults to committing pending updates before looking for shard range boundaries. A new option, "-- skip-commits", may be used to restore previous behavior. * Added a "--clobber-hardlink-collisions" option to "swift-object- relinker". With this option enabled during the relink phase the relinker will quarantine the colliding file in the new target part dir and retry the relink. During the cleanup phase it will ignore the un-matched inode "collision" and allow the cleanup of the old file in the old part dir similar to tombstones. Upgrade Notes ************* * Removed fallback support using netifaces; "getifaddrs" is now always used to determine available IP addresses. Bug Fixes ********* * Improved checksum validation for S3 API DeleteObjects requests. * POST requests are more likely to receive a 503 response in the face of backend inconsistencies. * Writes to sharded containers are less likely to have their updates sent to the root container. This uses a new cooperative-token mechanism to limit the number of concurrent shard range queries to the root container; see the "[app:proxy-server]" section of etc /proxy-server.conf-sample for configuration options. * Fixed the "swift_dir" option for WSGI servers; the file "/etc/swift/swift.conf" no longer needs to exist when that option is set. * Fixed an object-server error when there is a part-power increase in progress and there was an issue marking the file in the new partition space as durable. * Device names are now included in sharded database IDs, similar to regular databases. This provides more context when examining incoming/outgoing sync tables or sharding CleaveContexts. * Database replicators now clean up temporary files older than "reclaim_age". * Various other minor bug fixes and improvements. Changes in swift 2.36.0..2.37.0 ------------------------------- 555026d20 AUTHORS/CHANGELOG for 2.37.0 fb6b7095a Add barbican_region_name support to Swift kms_keymaster middleware ef0d8591c CI: Make swift-upload-image non-voting again ee682f4c2 CI: Update dockerhub secret yet again 1b0c11b68 Updating the dockerhub secret (again^2) 9b5236339 CI: Update dockerhub secret (again) a572a08b3 Fix flakey proxy server test_node_timing ce829c45c CI: clean up old swift-*-image-py3 jobs 732fd859d Fix flakey db_replicator unit test 64bde7e05 proxy-logging: Add 'api' labels 0862c231a Recliam db_dir/*.tmp files 86d1dee2a Update dockerhub secret 1971983de test_backend.py: refactor TestUpdateNewItemFromExisting db13f7116 probe tests: fix timestamp handling 949f0fdac tests: assert that X-Timestamp headers are valid 8f82e4586 test_sync.py: fix timestamp handling 327401e18 docs: Clarify circumstances for using clobber_hardlink_collisions 15a1c0287 Update rolling-upgrade jobs f84486e96 versioned_writes: use new parse_date_header helper 50df63daa tests: relocate timestamp tests to test_timestamp.py 2e8d27607 Remove duplicate sample config option 9366678a9 legacy versioning: use Timestamp to create marker name 977b96b89 test_object_versioning.py: used mocked Timestamps 326fad040 cli/info.py: use Timestamp.zero as default timestamp c36e789cd proxy/test_server.py: test_policy_IO_override timestamp refactoring. 3fea9f474 Replace deprecated warn method 55eddb9c6 container/test_server: cleanup Timestamp usage 1698fc324 OldestAsyncPendingTracker accepts Timestamp.internal bf1e370b2 test_relinker.py: fix delta timestamp setup 0ceff0fd5 test_base.py: tighten up use of Timestamp 768815b4b max_request_line: add probe test assertions a6c3e7dd6 wsgi: Add url length limit config 01d7eef88 Add labeled metrics to s3api 9abd8ae71 sharder: use correct Timestamp formats 80bbcfeb9 test_utils: cleanup Timestamp usage 5df4e758f slo: use Timestamp.zero() as default in RespAttrs db578c107 Add a Timestamp.zero() method 3123422cd test_relinker: cleanup Timestamp usage 6dccca38c container tests: Use TS.normal for db_names b76c733be test: reconciler tests to use Timestamp class over time 259afd2a7 ssync: Refactor tests to use Timestamp and new assert df5131b8f Device in fresh db id suffix d228a7323 Adds labeled cleaving metrics to the sharder 9babfefad Enhances sharding_in_progress metrics in recon log 22605d21e cli/test_info.py: cleanup Timestamp usage ca9db701c account/test_reaper.py: cleanup Timestamp usage e6f1b06c9 test/unit/container: cleanup Timestamp usage a70e33e73 test_constraints.py: cleanup Timestamp usage 91dd65d36 test_symlink.py: cleanup Timestamp usage 0190d81e4 test_diskfile.py: fix Timestamp usage 254100ef1 tests: container/test_backend.py cleanup 5658355bf account/test_utils: cleanup Timestamp usage 18b861bd6 obj test_expirer.py and test_auditor.py: fix timestamp usage 800cf3211 test_reconstructor.py: make hashes assertions less brittle a07946329 test_diskfile.py: fix failing test if O_TMPFILE unsupported d31b201d6 test_db.py: clean up usage of Timestamps 760829a75 account: Use Timestamps better in test_backend unit tests 48937cd18 TombstoneReclaimer: quote string timestamp in sql query c8da8676f tests: clarify timestamp formats 02bc7e448 tests: pass Timestamps to date_header_format 98005fad9 Allow Timestamps in swob's date-header helpers 41376fca5 trivial: Use swob date-header helpers more 96e7db0b3 swob: add a date_header_format helper function affdbf71a trivial: tests: add failure context to flakey assertion cbc3b42d7 s3api: verify checksums on DeleteObjects POSTs 5f89d14eb s3token: Enable secret caching by default ee6f4c6a0 trivial: tests: clarify exception handling ef8b2a5f3 Return 503 for POST request with mixed 202/404 responses e7bb2a385 s3token: Pass service auth token to Keystone a785025b2 reno: Update master for unmaintained/2024.1 dcd5a265f proxy-logging: Add real-time transfer bytes counters e450b8c67 tests: belts and braces idiomatic patching 89e9ced9e tests: idiomatic ring patching f256bc7eb tests: remove some global patching 8cbe10552 Update resource type in labels.html 7744e4a43 Move Pete Zaitcev to Core Emeritus 9d7e7e27a Provide some s3 helper methods for other middlewares to use. fac55ced3 test-db-replicator (trivial): just one tmpdir c0fefe80b trivial test_[db_]replicator cleanup be62933d0 relinker: allow clobber-hardlink-collision 41bf72a5c common.db_replicator: log container, db paths consistently 5568dd09b Fix swift_dir setting in WSGI servers 97e00e208 trivial: reorder AccountBroker.path methods 3c6e967a5 test: fix AccountBroker.path tests a6bde729c Test each method in test_crossdomain_get_only 64bb04139 Assert metadata of SLO PUT from container sync 79feb12b2 docs: More proxy-server.conf-sample cleanup b55f13c75 test: move import to top of file 389747a8b doc: specify seconds in proxy-server.conf-sample ba1ab9d11 Adds --skip-commits to s-m-s-r d9883d083 proxy: use cooperative tokens to coalesce updating shard range requests into backend d353f15fa account-broker: add resilient path property with lazy cache 707a65ab3 common: add memcached based cooperative token mechanism. b035ed138 add Christian O to AUTHORS 7b05356bd test: do not create timestamp collision unnecessarily 815393dff test: fix module state pollution c26c7b8ed tests: simplify TestGlobalSetupObjectReconstructor setUp bd27fc6ba cleaning up and fixing some links 63eeb005b Update master for stable/2025.2 397f94c73 diskfile: Fix UnboundLocalError during part power increase b5e6964a2 s3api: fix test_service with pre-existing buckets 484672b7d Fully remove netifaces Diffstat (except docs and test files) ------------------------------------- .mailmap | 2 + .zuul.yaml | 43 +- AUTHORS | 5 +- CHANGELOG | 86 + CONTRIBUTING.rst | 29 +- etc/keymaster.conf-sample | 8 +- etc/object-server.conf-sample | 11 + etc/proxy-server.conf-sample | 103 +- etc/swift.conf-sample | 11 + .../notes/release-2.37.0-7a89cc30f85f03e0.yaml | 102 ++ releasenotes/source/2024.1.rst | 2 +- releasenotes/source/2025.2.rst | 6 + releasenotes/source/index.rst | 1 + roles/additional-keystone-users/tasks/main.yaml | 35 + roles/dsvm-additional-middlewares/tasks/main.yaml | 76 +- swift/account/backend.py | 23 +- swift/cli/info.py | 2 +- swift/cli/manage_shard_ranges.py | 31 +- swift/cli/relinker.py | 177 +- swift/common/constraints.py | 2 + swift/common/container_sync_realms.py | 2 +- swift/common/db.py | 38 +- swift/common/db_replicator.py | 176 +- swift/common/exceptions.py | 6 +- swift/common/middleware/crypto/kms_keymaster.py | 9 +- swift/common/middleware/proxy_logging.py | 177 +- .../middleware/s3api/controllers/multi_delete.py | 7 +- .../middleware/s3api/controllers/multi_upload.py | 23 +- swift/common/middleware/s3api/exception.py | 12 + swift/common/middleware/s3api/s3api.py | 118 +- swift/common/middleware/s3api/s3request.py | 107 +- swift/common/middleware/s3api/s3token.py | 65 +- swift/common/middleware/s3api/utils.py | 161 ++ swift/common/middleware/slo.py | 5 +- swift/common/middleware/tempurl.py | 10 +- swift/common/middleware/versioned_writes/legacy.py | 18 +- .../versioned_writes/object_versioning.py | 14 +- swift/common/swob.py | 51 +- swift/common/utils/__init__.py | 257 ++- swift/common/utils/config.py | 15 + swift/common/utils/ipaddrs.py | 210 +-- swift/common/utils/timestamp.py | 10 + swift/common/wsgi.py | 10 +- swift/container/backend.py | 23 +- swift/container/reconciler.py | 10 +- swift/container/replicator.py | 47 +- swift/container/server.py | 20 +- swift/container/sharder.py | 435 +++-- swift/container/sync.py | 6 +- swift/obj/diskfile.py | 17 +- swift/obj/server.py | 12 +- swift/obj/updater.py | 7 +- swift/proxy/controllers/base.py | 146 +- swift/proxy/controllers/container.py | 4 +- swift/proxy/controllers/obj.py | 210 ++- swift/proxy/server.py | 23 +- test/__init__.py | 13 + test/debug_logger.py | 8 + test/probe/brain.py | 18 + test/probe/common.py | 6 +- test/probe/test_container_failures.py | 3 +- test/probe/test_object_expirer.py | 7 +- test/probe/test_object_handoff.py | 72 + test/probe/test_sharder.py | 12 +- test/probe/test_signals.py | 79 +- test/s3api/__init__.py | 13 +- test/s3api/test_input_errors.py | 267 ++- test/s3api/test_service.py | 91 +- test/sample.conf | 4 +- test/unit/__init__.py | 70 + test/unit/account/test_backend.py | 119 +- test/unit/account/test_reaper.py | 21 +- test/unit/account/test_replicator.py | 7 +- test/unit/account/test_utils.py | 6 +- test/unit/cli/test_info.py | 81 +- test/unit/cli/test_manage_shard_ranges.py | 49 +- test/unit/cli/test_relinker.py | 328 +++- test/unit/common/middleware/helpers.py | 14 +- test/unit/common/middleware/s3api/__init__.py | 10 +- test/unit/common/middleware/s3api/test_bucket.py | 18 + .../common/middleware/s3api/test_multi_delete.py | 31 +- .../common/middleware/s3api/test_multi_upload.py | 11 +- test/unit/common/middleware/s3api/test_obj.py | 31 +- test/unit/common/middleware/s3api/test_s3api.py | 573 ++++++- .../unit/common/middleware/s3api/test_s3request.py | 112 ++ test/unit/common/middleware/s3api/test_s3token.py | 15 + test/unit/common/middleware/s3api/test_utils.py | 203 +++ test/unit/common/middleware/test_container_sync.py | 19 + test/unit/common/middleware/test_crossdomain.py | 4 +- .../common/middleware/test_object_versioning.py | 233 +-- test/unit/common/middleware/test_proxy_logging.py | 1750 +++++++++++++++++++- test/unit/common/middleware/test_slo.py | 34 +- test/unit/common/middleware/test_symlink.py | 6 +- .../common/middleware/test_versioned_writes.py | 65 +- test/unit/common/test_constraints.py | 5 +- test/unit/common/test_db.py | 179 +- test/unit/common/test_db_replicator.py | 521 ++++-- test/unit/common/test_swob.py | 17 + test/unit/common/test_utils.py | 1065 ++++++++++-- test/unit/common/test_wsgi.py | 98 +- test/unit/common/utils/test_config.py | 27 + test/unit/common/utils/test_ipaddrs.py | 38 - test/unit/common/utils/test_timestamp.py | 155 ++ test/unit/container/test_backend.py | 467 +++--- test/unit/container/test_reconciler.py | 234 +-- test/unit/container/test_replicator.py | 291 +++- test/unit/container/test_server.py | 224 ++- test/unit/container/test_sharder.py | 384 +++-- test/unit/container/test_sync.py | 28 +- test/unit/container/test_updater.py | 12 +- test/unit/obj/common.py | 8 + test/unit/obj/test_auditor.py | 25 +- test/unit/obj/test_diskfile.py | 303 +++- test/unit/obj/test_expirer.py | 8 +- test/unit/obj/test_reconstructor.py | 234 ++- test/unit/obj/test_server.py | 608 ++++--- test/unit/obj/test_ssync_sender.py | 464 +++--- test/unit/obj/test_updater.py | 68 +- test/unit/proxy/controllers/test_base.py | 76 +- test/unit/proxy/controllers/test_obj.py | 1076 +++++++++++- test/unit/proxy/test_server.py | 304 +++- 124 files changed, 11359 insertions(+), 3215 deletions(-)

1 0

octavia 15.1.0 (dalmatian)
by no-reply＠openstack.org 27 Jan '26

27 Jan '26

We are psyched to announce the release of: octavia 15.1.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/octavia Download the package from: https://pypi.org/project/octavia Please report issues through: https://storyboard.openstack.org/#!/project/908 For more details, please see below. 15.1.0 ^^^^^^ Upgrade Notes ************* * UDP load balancers will require a failover to fix the UDP rebalance issue once the control plane is updated. Bug Fixes ********* * Fixed a bug where the Amphora configuration update would only update the Amphora agent configuration, but the health sender would not be updated with the new controller IP list. * Fixed an issue where UDP listeners may not rebalance failed member servers in a timely fashion. It may have been up to five minutes for a failed member server to be removed from existing flows. * Reduce the value of tune.ssl.cachesize for HTTPS termination listeners to prevent OOM during haproxy reload (LP: #2119987). * Fixed a bug when using a L7Rule with FILE_TYPE and EQUAL_TO comparison, it never matched due to an issue with the generated HAProxy configuration. * Fixed missing *port_id* element when getting the *additional_vips* parameter of a load balancer. * Fix an issue that prevents the Octavia API service to be correctly initialized when it fails to load a provider driver. It will now fail gracefully and remove the driver from the enabled list. * Fix a potential race condition during the cascade deletion of load balancers. When deleting a load balancer with multiple listeners, the security groups of the VIP port may have been updated many times concurrently, creating a race condition. Other Notes *********** * Added a "octavia-wsgi" script for backward compatibility now that pbr's wsgi_scripts no longer functions with the latest setuptools. Changes in octavia 15.0.1..15.1.0 --------------------------------- f3ed2dc18 Don't fail if a provider driver cannot be loaded in Octavia API a2c29c49c Fixed missing port_id in additional_vips API 1f0be521f Fix L7Rules with FILE_TYPE and EQUAL_TO f5480de9d Fix Amphora controller IP list update 98d96037b Fix race condition in cascade delete 0019b6b4a Resolve a UDP rebalance issue on backend failure cd20adc2f Reduce tune.ssl.cachesize for HTTPS terminating listeners 8249ae9b8 Add an octavia-wsgi compatibility script Diffstat (except docs and test files) ------------------------------------- bin/octavia-wsgi | 52 +++++++++++++++++++++ .../amphorae/backends/agent/api_server/server.py | 5 +- .../api_server/templates/amphora-netns.systemd.j2 | 3 ++ octavia/api/app.py | 16 ++++++- octavia/api/drivers/driver_factory.py | 11 +++++ octavia/api/v2/controllers/provider.py | 4 +- octavia/api/v2/types/load_balancer.py | 1 + octavia/cmd/agent.py | 10 ++-- .../jinja/haproxy/combined_listeners/jinja_cfg.py | 12 ++--- .../haproxy/combined_listeners/templates/macros.j2 | 13 ++++-- .../controller/worker/v2/flows/listener_flows.py | 3 -- .../worker/v2/flows/load_balancer_flows.py | 13 ++++-- .../backend/agent/api_server/test_server.py | 8 ++-- .../haproxy/combined_listeners/test_jinja_cfg.py | 40 +++++++++++++++- ...wsgi-compatibility-script-42b8aca87b98c904.yaml | 5 ++ ...Fix-Amphora-Config-Update-06b649883c7a4f44.yaml | 6 +++ ...P-member-server-rebalance-74c67cb09c7c529a.yaml | 10 ++++ ...ix-haproxy-ssl-cache-size-5d5842100a87de54.yaml | 5 ++ ...l7rule-FILE_TYPE-EQUAL_TO-6e84773d6ab22c50.yaml | 5 ++ ...g-additional-vips-port_id-fd0708aa798744c9.yaml | 5 ++ ...x-octavia-api-driver-init-68b634549c12da6e.yaml | 6 +++ ...ditions-in-cascade-delete-1e100213445a17ec.yaml | 7 +++ setup.cfg | 2 + 25 files changed, 276 insertions(+), 30 deletions(-)

1 0

ironic 34.0.0 (gazpacho)
by no-reply＠openstack.org 26 Jan '26

26 Jan '26

We are overjoyed to announce the release of: ironic 34.0.0 This release is part of the gazpacho release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://bugs.launchpad.net/ironic/+bugs For more details, please see below. 34.0.0 ^^^^^^ New Features ************ * Adds a new configuration option "[conductor]clear_image_cache_on_deploy_failure" to control whether cached instance images are cleared during deployment failure state transitions, default=True. * Adds hardware health status monitoring and synchronization capability. A new "health" field has been added to the Node object and API (microversion 1.109) to expose hardware health status reported by the BMC. This feature introduces a new optional "get_node_health()" method in the management interface. Drivers can implement this method to retrieve health status from the BMC. During periodic power state synchronization, Ironic automatically calls this method for all nodes. Drivers that don't support health monitoring simply raise "UnsupportedDriverExtension" and are skipped. When health status changes, it is automatically saved to the node record and logged in the node history. The Redfish management interface (including "idrac-redfish") provides the first implementation, retrieving health status from the Redfish System resource ("Status.Health" field). Values include "OK", "Warning", and "Critical". Operators can monitor this field to detect hardware issues proactively. Other driver implementations (iLO, iRMC, etc.) can add support by implementing the "get_node_health()" method in their management interface. The feature is enabled by default but can be disabled using the "[conductor]/enable_health_monitoring" configuration option. When disabled, health status queries are not performed, and the node.health field will not be updated automatically. Drivers opt-in to health monitoring by implementing the "get_node_health()" interface method. * Adds Redfish LLDP data collection support to the Redfish inspection interface. This enables collecting Link Layer Discovery Protocol (LLDP) data from Redfish-compliant hardware during the inspection process. The collected data includes chassis ID, port ID, system name, system description, system capabilities, and management addresses, formatted as TLVs compatible with Ironic Python Agent inspection hooks and rules. * When deploying a container image with the direct deploy interface, the *instance_info.image_disk_format* will be set to *bootc* when the chosen manifest does not refer to an OCI artifact image. * A new "ironic.console.container" provider is added called "kubernetes" which allows Ironic conductor to manage console containers as Kubernetes pods. The kubernetes resources are defined in the template file configured by "[vnc]kubernetes_container_template" and the default template creates one secret to store the app info, and one pod to run the console container. It is expected that Ironic conductor is deployed inside the kubernetes cluster. The associated service account will need roles and bindings which allow it to manage the required resources (with the default template this will be secrets and pods). This provider holds the assumption that ironic-novnc will be deployed in the same kubernetes cluster, and so can connect to the VNC servers via the pod's "status.hostIP". * When using iDRAC Redfish, we now check the Dell-specific OEM locations for LLDP first, then fall back to the standards location if that data is unavailable. * Adds "[redfish]firmware_update_overall_timeout" (default 2 hours) to limit total firmware update duration as a safety net for stuck updates. * Adds support for accessing an OCI Registry Service utilizing Basic authentication with the "instance_info\image_pull_secret" parameter. The credentials should be set as colon delimited string in the format of "username:password". * Adds a capability to permit OCI URL support to be automatically able to fallback to using HTTP instead of the expected HTTPS for transport. By default, this option is disabled but can be enabled via the "[oci]permit_fallback_to_http_transport" configuration option. * The "/v1/portgroups" API endpoint now accepts filtering by shard. In API version 1.106, requests with the "shard" parameter will only return portgroups associated with nodes assigned to that shard. * Ironic API now returns the "X-OpenStack-Request-Id" header, which is the common response header to return request id in multiple OpenStack projects. The header mirrors the existing "OpenStack- Request-Id" header. If ironic API supports microversion 1.107, ironic returns the new header. * Adds support for using "disable_ramdisk" with manual servicing ("target=service") starting with Bare Metal API microversion "1.108". This enables running service steps that are explicitly marked as not requiring a ramdisk. * Adds a new Ubuntu based container file for VNC graphical client operation containers, which is above and beyond the stock Centos based VNC. Upgrade Notes ************* * The minimum required version of "openstacksdk" has been updated from ">=0.99.0" to ">=4.9.0". This version bump is required, amongst others, to enable secure hash validation for image downloads, which provides improved data integrity verification using SHA256, SHA512, and other secure hash algorithms instead of MD5-only validation. Deprecation Notes ***************** * The following options are now formally deprecated. These have been unused since the idrac wsman driver interfaces were removed in 26.0.0 release. * "[drac] config_job_max_retries" * "[drac] bios_factory_reset_timeout" * Ironic is deprecating and immediately removing the capability to pass OVN VTEP connection information across through to Neutron. Over the past year, multiple contributors have looked into this alpha level functionality which was merged into Ironic and it was realized that the functionality was geared for the OVN VTEP port service which is a separate service one must launch on a OVN networking node to make an attachment. Since the functionality which was merged into ironic is unsuitable for scaled and automated operations it must be removed. API field validation is being kept, and the API version has bee incremented to "1.104" to signify this change, however the passing on Neutron Port Binding has been removed. Ironic developers are actively working on a performant solution in the short term. We hope to have something else usable before the 2026.1 release. Security Issues *************** * Image downloads now support secure hash validation direct from the sdk library using SHA256, SHA512, and other secure hash algorithms via the "os_hash_algo" and "os_hash_value" metadata fields, instead of Ironic having to perform these checks outside of sdk code. [Bug 2130662 (https://bugs.launchpad.net/openstacksdk/+bug/2130662) Bug Fixes ********* * [Bug 2135265 (https://bugs.launchpad.net/ironic/+bug/2135265) Fixes an issue where an exception in one of the inspection hooks when using the agent inspector interface would result in the node not being cleaned up. * This fixes a minor off-by-one bug where, instead of removing OVN VTEP support from API microversion 1.105, we removed it from any microversion *after* 1.105. * "[pxe]loader_file_paths" allowed nested paths but this was never an intended function of the code. Other places in Ironic expect the file to just be a base path without a directory. Remove the ability provide nested paths to avoid user issues in the future. * Ensure that the path to where we are copying the bootloader exists before attempting to copy the bootloader in. * Each firmware component might have different reboot requirements depending on the hardware, this change adds two new configuration options to help operators configure the reboot behavior for firmware updates. "[redfish]firmware_update_reboot_delay": reboot delay for firmware updates of components. "[redfish]firmware_update_bmc_version_check_interval": delay in seconds after the firmware update fails before the node is rebooted. * Fixes an issue with BIOS firmware updates on certain BMCs where the firmware task completes very quickly after staging the firmware, before Ironic can trigger a reboot. Previously, this would result in the staged BIOS firmware not being applied because no reboot was triggered. Now, Ironic detects this condition and triggers the reboot when the task completes, ensuring the staged firmware is properly applied. * Fix retrieving BIOS settings via redfish based interfaces. The code used some references to an earlier version of the spec which was ultimately not adopted. Fixes bug 2137596 (https://bugs.launchpad.net/ironic/+bug/2137596) * Some BMCs maybe return they are not processing the firmware update when the task is still in RUNNING, STARTING, or PENDING state. Previously, Ironic will treat it as complete and stop polling for the update. Now, Ironic will continue polling for the update until it is complete. * Fixes an issue where service and clean steps with "requires_ramdisk=False" (such as Redfish firmware updates) would incorrectly fail due to heartbeat timeout. These steps operate independently of the ramdisk agent and should not be subject to heartbeat timeouts. Previously, such steps would fail after "service_callback_timeout" or "clean_callback_timeout" (default 30 minutes) with a misleading error about the ramdisk not running. The fix updates "provision_updated_at" during firmware update polling, preventing the heartbeat timeout mechanism from triggering while the out-of-band operation is still in progress. For more information, see bug 2136276 (https://bugs.launchpad.net/ironic/+bug/2136276) * Fixes an issue where baremetal nodes that experienced inspection errors, either through timeout or hard failure, were not having their inspection VIFs (Virtual Interfaces) removed from the node's ports. This resulted in network resource leaks that persisted after the node transitioned to the "inspect fail" state. The inspection error handling now properly cleans up inspection networks by calling "remove_inspection_network()" on all error paths, matching the behavior of cleaning, servicing, and deployment error handlers. This ensures that inspection VIFs are always removed from ports when inspection fails, preventing network resource leaks. * Fixes an issue where "disable_ramdisk" could bypass API validation when supplied via a runbook because validation happened before runbook resolution. * The port API endpoints were not returning the vendor and category fields when they should have been. A number of places the API docs were incorrect and missed adding information about the vendor and category fields but other fields were omitted as well. * Fixes an issue with the redfish firmware updates attached to the "management" interface where firmware updates performed as part of the SERVICE steps workflow could end up stuck in "service wait". This issue has been corrected and the nodes should now properly have their state checked. For more information, please consult bug 2136895 (https://bugs.launchpad.net/ironic/+bug/2136895) * Extremely large instance images, post eventlet removal, were causing CPU spikes and the conductor process to hang while the image was being fetched and validated. This optimizes the instance fetch and validation in two ways -- first, we now calculate the image checksum while the file is being fetched instead of as a separate step. Secondly, we were, in some cases, using the default chunk size of 128 bytes during downloads. Now, we use a more standard and reasonable value of 1 megabyte. * Fix the loading of built-in inspection rules which are supplied via a file on the conductor. See bug 2136776 (https://bugs.launchpad.net/ironic/+bug/2136776) * Fixes the "is-empty" inspection rule to properly handle missing fields in the inventory. Previously, when checking for empty values using fields that don't exist in the inventory, the rule would fail with a KeyError during variable interpolation. Now, missing fields are treated as empty for the "is-empty" operation, allowing the rule to pass when checking for non-existent inventory fields. * Moves the "check_image_size" to "deploy_utils" so it runs earlier in the deploy flow and only when it matters, reusing already-fetched image information. * Fixed iPXE boot interfaces ("ipxe" and "http-ipxe") not being recognized as PXE-capable by the neutron network interface. This resolves inconsistent neutron port creation and deletion during cleaning operations that could lead to orphaned neutron ports. * Fixes excessive logging when Redfish-managed servers do not have NetworkAdapters endpoints. Previously, servers without NetworkAdapters would generate warning-level log messages during firmware component caching. Now these messages are logged at debug level since having no NetworkAdapters is a valid hardware configuration. * Fixes a bug where virtual media was ejected before the graceful shutdown was issued during the inspection teardown phase. This caused filesystem corruption errors on nodes (particularly visible on iDRAC consoles) when the operating system lost access to its boot media during shutdown. The fix ensures that a soft power off is performed before ejecting virtual media, allowing the OS to shut down cleanly before the virtual media is ejected. * When using the redfish inspection driver, the system product name in the data was always the value 'System' due to the wrong field being read. See bug 2136233 (https://bugs.launchpad.net/ironic/+bug/2136233) * Adds retry logic for Redfish boot device changes when BMC rejects modifications during POST (Power-On Self-Test). This addresses issues with HPE iLO BMCs returning "UnableToModifyDuringSystemPOST" errors after firmware updates or reboots. See bug 2136275 (https://bugs.launchpad.net/ironic/+bug/2136275) * Fixes Redfish RAID volume creation failure when size_gb='MAX' is specified. Ironic now omits CapacityBytes from the Redfish payload for MAX size volumes, allowing the controller to calculate the optimal size accounting for metadata overhead. The actual volume size is queried and stored after creation. * Fixes handling of configuration drive ISO storage urls to respect the node "driver_info\external_http_url" override value when set. * Report a better error message than a KeyError when there are no interfaces in the inspection data when running the validate- interfaces inspection hook. Other Notes *********** * Remove the fallback to loading sushy-oem-idrac since Ironic now requires at a minimum a version of sushy that has sushy-oem-idrac integrated and will always load that first. Changes in ironic 33.0.0..34.0.0 -------------------------------- 85a8c72a4 Minimum version bump dd36d06a6 OciImageService detect bootc image b13db5750 Speed the slowest tests 9eb561222 [doc] Releasenote for iDRAC LLDP f61755d81 Add hardware health monitoring via management interface 07102b6c0 Refactor firmware update temp field handling c3418b15a Improve image download performance 86f9a94e9 Add LLDP collect for DRAC Redfish inspection e470f7fd5 docs: refactor the inspection docs a908fc25f Adapt bindep for debian-trixie 23948dabf Support `disable_ramdisk` during servicing 0b3fadd27 Add configuration options for Trait Based Networking 7ffa84c17 Rip out check for multiple physnets in vif_attach ff9308739 Fix introspection failure handling 7b4699f40 Add positive port api category/vendor field test 3f0f73389 Simplify ovn vtep microversion logic b26230292 fix: port endpoints did not return vendor and category and fix docs 2d253a04f Add retry logic for boot device changes during POST 54ca5a3b4 Fix heartbeat for steps with requires_ramdisk=False dce19076d Fix BMC resource validation to catch all sushy exceptions 2306d90f8 Fix BIOS firmware not flashing when task completes before first poll 326c4e9be Fix firmware update failure when task remains in RUNNING state d90824a39 Make post-firmware-update reboot conditional on component 922f56eb1 Fix order of `disable_ramdisk` validation a0968f841 Add release mapping alias for 2025.2 aa748ea91 fix: bios fields could not be fetched via the API 18bedb69f Silence loud logging when no NetworkAdapters d56a70e8a fix: report a better error in validate-interfaces 98cda8f2c Fix async periodic on redfish for servicewait 7b79d62a9 Soft power off before cleaning up inspection ramdisk 5f59aa0b2 Use common utility to wrap IPv6 address 8200f0f5d Adjust url to pull dnsmasq 9c5fb01f3 Use oslo.config to split [console] port_range b51930c0d Validate [molds] storage while loading config files 43c599750 Use common request_id middleware 4b58b8a82 Support filtering portgroups by shard 9e47609f0 fix: iPXE boot interface PXE capability detection 555c019bb fix loading of built-in inspection rules 2c118a4d4 fix: inspection rules docs to match the code c11e12a45 Omit `CapacityBytes` for Redfish RAID MAX size_gb ade41cae4 fix redfish inspect system product name 0255cc98a update inspection rules docs and code to the same order a6b3f1e33 Add generic switch driver support 006ca964b Introduce switch driver base class 4ce577d28 Add two phase driver factor initialization 52300e0a6 OCI Basic Auth/Tag access 595258da9 OCI: Add an option to fallback to HTTP 2570f7559 Use native override of RequestContext.from_environ 30113a4c2 fix: agent inspection hooks failure does not clean up e273bb958 Add Redfish LLDP data collection support to the Redfish inspection interface. dcc668fae Replace remaining usage of policy.json b47afbca3 remove sushy_oem_idrac usage 2622864b7 [api-ref] Fix api-ref to mention list port by cg 7e4ffe7c8 Include all relevant error messages in exception ca0ee56cc `is-empty` inspection rule to handle missing field 041f0a586 Move `check_image_size` to `deploy_utils` a382b21e6 fix: do not allow nested paths in loader_file_paths c69caf28e Separate states code from states constants 094337f14 Remove ovn vtep support 2756b8e81 Trivial: Fix `instance_name` policy name 33bfc1e28 Add PCIe function fields to redfish inspection d3d65ee2c Trait Based Networking Simulator 278cf5f96 Implement networking service RPC API methods 28168c416 Add a kubernetes provider for console container 856238c56 Switch graphical console image to ubuntu by default eccfb8bb5 Use per-node external_http_url for configdrive ISO 68277dd05 Generate network plan based on trait based networking config e4ac3dd76 Add documentation regarding the is_root_volume RAID config 05b9dc22c Add networking driver framework infrastructure 194b638c7 Add a conductor liveness check utility script 1b2504428 Trivial: Fix typo in documentation 91159a439 Drop xinetd/tftpd on CentOS 9 c789f480b Use new bifrost ci job name 2cb813c03 drac: Deprecate unused options b8f3318ca Add standalone networking service for ironic 1991a6de6 Remove ironic-inspector jobs and leftovers from zuul settings d12fc12a8 Drop remaining references to ironic-inspector 7a0a9ef78 fix: ensure that the bootloader path exists 694769f37 split error messages in image cache for more clarity 66ade9b9b doc: trivial: Quick revision of README 5cb4933df Clear image cache on deployment failure a4a5c9b3b docs: a little more clarity around the state of ipxe+uefi Diffstat (except docs and test files) ------------------------------------- .gitignore | 2 + README.rst | 18 +- api-ref/source/baremetal-api-v1-nodes-ports.inc | 28 + api-ref/source/baremetal-api-v1-portgroups.inc | 5 + api-ref/source/baremetal-api-v1-ports.inc | 25 +- api-ref/source/baremetal-api-versions.inc | 4 + api-ref/source/parameters.yaml | 20 +- bindep.txt | 10 +- devstack/files/bindep.txt | 2 +- devstack/lib/ironic | 66 +- devstack/tools/ironic/templates/tftp-server.conf | 14 + driver-requirements.txt | 3 + ironic/api/app.py | 16 + ironic/api/controllers/v1/node.py | 9 +- ironic/api/controllers/v1/port.py | 2 + ironic/api/controllers/v1/portgroup.py | 42 +- ironic/api/controllers/v1/utils.py | 57 +- ironic/api/controllers/v1/versions.py | 14 +- ironic/api/hooks.py | 19 +- ironic/command/networking.py | 64 ++ ironic/command/singleprocess.py | 1 + ironic/common/checksum_utils.py | 7 +- ironic/common/context.py | 12 +- ironic/common/driver_factory.py | 98 +- ironic/common/exception.py | 5 + ironic/common/glance_service/image_service.py | 73 +- ironic/common/health_states.py | 37 + ironic/common/image_service.py | 348 ++++-- ironic/common/images.py | 16 +- ironic/common/inspection_rules/actions.py | 6 +- ironic/common/inspection_rules/base.py | 26 +- ironic/common/inspection_rules/engine.py | 26 +- ironic/common/inspection_rules/validation.py | 7 +- ironic/common/json_rpc/client.py | 1 - ironic/common/keystone.py | 3 +- ironic/common/network.py | 9 + ironic/common/neutron.py | 35 +- ironic/common/oci_registry.py | 143 ++- ironic/common/pxe_utils.py | 46 +- ironic/common/release_mappings.py | 6 +- ironic/common/rpc.py | 1 + ironic/common/rpc_service.py | 9 +- ironic/common/state_machine.py | 370 ++++++ ironic/common/states.py | 391 +------ ironic/common/trait_based_networking/plan.py | 99 ++ ironic/common/utils.py | 11 - ironic/conductor/inspection.py | 19 +- ironic/conductor/manager.py | 7 +- ironic/conductor/task_manager.py | 5 +- ironic/conductor/utils.py | 184 +++ ironic/conf/__init__.py | 5 + ironic/conf/conductor.py | 50 +- ironic/conf/console.py | 19 +- ironic/conf/drac.py | 6 + ironic/conf/inspector.py | 5 +- ironic/conf/ironic_networking.py | 118 ++ ironic/conf/molds.py | 4 +- ironic/conf/oci.py | 12 + ironic/conf/opts.py | 3 + ironic/conf/redfish.py | 45 + ironic/conf/vnc.py | 23 +- .../container/ironic-console-pod.yaml.template | 45 + ironic/console/container/kubernetes.py | 307 +++++ ironic/db/api.py | 15 + .../9f8c7d6e5b4a_add_node_health_fields.py | 31 + ironic/db/sqlalchemy/api.py | 10 + ironic/db/sqlalchemy/models.py | 1 + ironic/drivers/base.py | 23 + ironic/drivers/modules/agent.py | 42 - ironic/drivers/modules/console_utils.py | 7 +- ironic/drivers/modules/deploy_utils.py | 60 +- ironic/drivers/modules/drac/inspect.py | 83 +- ironic/drivers/modules/drac/raid.py | 6 +- ironic/drivers/modules/image_cache.py | 57 +- ironic/drivers/modules/image_utils.py | 4 +- ironic/drivers/modules/inspector/agent.py | 13 +- .../modules/inspector/hooks/validate_interfaces.py | 5 + ironic/drivers/modules/inspector/interface.py | 24 +- ironic/drivers/modules/ipxe.py | 8 +- ironic/drivers/modules/network/common.py | 20 +- ironic/drivers/modules/redfish/boot.py | 17 +- ironic/drivers/modules/redfish/firmware.py | 921 +++++++++++++-- ironic/drivers/modules/redfish/inspect.py | 200 +++- ironic/drivers/modules/redfish/management.py | 105 +- ironic/drivers/modules/redfish/raid.py | 11 +- ironic/drivers/modules/redfish/utils.py | 32 +- ironic/drivers/modules/switch/__init__.py | 0 ironic/drivers/modules/switch/base.py | 356 ++++++ ironic/drivers/modules/switch/generic_switch.py | 421 +++++++ ironic/networking/__init__.py | 0 ironic/networking/api.py | 169 +++ ironic/networking/manager.py | 640 +++++++++++ ironic/networking/rpc_service.py | 78 ++ ironic/networking/rpcapi.py | 251 ++++ ironic/networking/switch_config.py | 140 +++ ironic/networking/switch_drivers/__init__.py | 0 ironic/networking/switch_drivers/driver_adapter.py | 305 +++++ ironic/networking/switch_drivers/driver_factory.py | 179 +++ ironic/networking/utils.py | 91 ++ ironic/objects/bios.py | 9 +- ironic/objects/node.py | 7 +- ironic/objects/portgroup.py | 21 + .../unit/api/controllers/v1/test_portgroup.py | 68 ++ .../common/trait_based_networking/test_plan.py | 317 ++++++ .../console/container/test_console_container.py | 764 ++++++++++++- .../unit/drivers/modules/drac/test_inspect.py | 188 +++ .../unit/drivers/modules/network/test_common.py | 57 +- .../unit/drivers/modules/redfish/test_boot.py | 74 +- .../unit/drivers/modules/redfish/test_firmware.py | 1119 ++++++++++++++++-- .../unit/drivers/modules/redfish/test_inspect.py | 328 +++++- .../drivers/modules/redfish/test_management.py | 323 ++++++ .../unit/drivers/modules/redfish/test_power.py | 34 +- .../unit/drivers/modules/redfish/test_raid.py | 185 +++ .../drivers/modules/switch/test_generic_switch.py | 925 +++++++++++++++ .../unit/drivers/modules/test_console_utils.py | 22 +- .../unit/drivers/modules/test_deploy_utils.py | 120 +- .../unit/drivers/third_party_driver_mock_specs.py | 26 +- pyproject.toml | 9 +- ...cleanup-on-deploy-failure-afd00a4fa3d97ea3.yaml | 6 + ...health-monitoring-support-a8f3c4d2e9b7f1a3.yaml | 32 + ...p-data-collection-support-4848abc537e4a434.yaml | 9 + ...spect-hooks-cleanup-error-c8901a7f8ad0dfd3.yaml | 7 + .../api-105-off-by-one-fix-d4732a7b33fa7a0f.yaml | 4 + .../notes/bootc-detect-0d9b305ba71e5bae.yaml | 6 + .../bootloader-file-path-f452a580f2d11e1b.yaml | 7 + ...bootloader-paths-creation-b5097003f25a18ad.yaml | 5 + .../conditional-reboot-fwup-6ca14573a2bebba0.yaml | 10 + .../notes/console-k8s-b4aee1bb1d3d0a65.yaml | 18 + ...eprecate-drac-unused-opts-a1ac2082a250a7c0.yaml | 8 + .../notes/drac-redfish-lldp-af725b889471cf83.yaml | 5 + .../notes/fix-bios-fw-flash-190220f3beccf2f3.yaml | 9 + .../notes/fix-bios-settings-d6f8daed2b17c0b5.yaml | 6 + ...when-task-remains-running-bbe30ab1059baf32.yaml | 7 + ...-timeout-no-ramdisk-steps-732f3da7faa28f94.yaml | 17 + ...ix-inspection-vif-cleanup-2e6dcbc248c8f7c8.yaml | 14 + ...k-validation-for-runbooks-e32617f1e9227e65.yaml | 6 + .../fix-port-vendor-category-28600ca30d98b368.yaml | 7 + ...async-updates-servicewait-e834ae30c5f72641.yaml | 9 + ...mage-download-performance-0bf1af5556c1adbf.yaml | 9 + ...ction-rules-built-in-load-00958e99e3ab7ecb.yaml | 5 + ...ection-rule-missing-field-3c489a9b71c47538.yaml | 9 + ...mage-size-to-deploy-utils-4022d17f0b8a88c7.yaml | 6 + .../notes/neutron-pxe-boot-cc850e1e7e1170c3.yaml | 7 + ...-network-adapters-logging-46b8908b319f0bdd.yaml | 8 + .../oci-support-basic-auth-f308a85f53436e85.yaml | 7 + ...mit_http_fallback_for_oci-877e2278407a2633.yaml | 7 + ...portgroup-filter-by-shard-941960e6e49fc638.yaml | 7 + ...before-virtualmedia-eject-280bf0559f7c4047.yaml | 10 + ...fish-inspect-product-name-bd537f417d35b254.yaml | 6 + .../redfish-post-boot-retry-8da100f84e6fcacf.yaml | 8 + ...redfish-raid-max-size-fix-2e4c84945936dbe2.yaml | 8 + .../remove-ovn-vtep-usage-c857f1ab22d8f6f1.yaml | 20 + .../remove-sushy-oem-idrac-1728961f55c49660.yaml | 6 + .../request-id-middleware-4db7aa2f5dc6121b.yaml | 7 + ...-http-url-for-configdrive-2c3598d95d2d316d.yaml | 5 + .../secure-hash-validation-a0bec74de64e2769.yaml | 15 + ...-ramdisk-during-servicing-582683e5f304efa3.yaml | 7 + .../ubuntu-vnc-containerfile-c4f0dba3c469a9c0.yaml | 6 + .../validate-interfaces-hook-49d7d6c57929a8cd.yaml | 5 + requirements.txt | 4 +- .../config/ironic-networking-config-generator.conf | 7 + tools/live_check_conductor | 57 + tools/states_to_dot.py | 4 +- .../network_objects.yaml.sample | 37 + tools/trait_based_networking/simulator.py | 115 ++ .../tbn_trait_config.yaml.sample | 23 + .../{Containerfile => Containerfile.centos} | 3 + tools/vnc-container/Containerfile.ubuntu | 37 + tools/vnc-container/README.rst | 2 +- tools/vnc-container/bin/start-firefox.sh | 14 +- tools/vnc-container/bin/start-x11vnc.sh | 10 +- tools/vnc-container/bin/stop-firefox.sh | 4 +- tox.ini | 1 + zuul.d/ironic-jobs.yaml | 65 -- zuul.d/project.yaml | 6 +- 230 files changed, 17571 insertions(+), 1814 deletions(-) Requirements updates -------------------- diff --git a/driver-requirements.txt b/driver-requirements.txt index 5da233890..7889e1edb 100644 --- a/driver-requirements.txt +++ b/driver-requirements.txt @@ -14,0 +15,3 @@ ansible>=2.7 + +# Standalone Networking Switch drivers +networking-generic-switch>=8.0.0 diff --git a/requirements.txt b/requirements.txt index e4753191f..431a22cd0 100644 --- a/requirements.txt +++ b/requirements.txt @@ -39,2 +39,2 @@ tooz>=2.7.0 # Apache-2.0 -openstacksdk>=0.99.0 # Apache-2.0 -sushy>=5.7.0 +openstacksdk>=4.9.0 # Apache-2.0 +sushy>=5.9.0

1 0

mistral 19.1.1 (dalmatian)
by no-reply＠openstack.org 26 Jan '26

26 Jan '26

We are ecstatic to announce the release of: mistral 19.1.1 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/mistral Download the package from: https://pypi.org/project/mistral Please report issues through: https://bugs.launchpad.net/mistral/+bugs For more details, please see below. Changes in mistral 19.1.0..19.1.1 --------------------------------- cc997d3b Stop logging/printing user token on failed validation Diffstat (except docs and test files) ------------------------------------- mistral/auth/keystone.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

ironic-python-agent 11.4.0 (gazpacho)
by no-reply＠openstack.org 26 Jan '26

26 Jan '26

We are chuffed to announce the release of: ironic-python-agent 11.4.0 This release is part of the gazpacho release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://bugs.launchpad.net/ironic-python-agent/+bugs For more details, please see below. 11.4.0 ^^^^^^ New Features ************ * Extend "ipa-enable-vlan-interfaces" kernel params field to support identifying an interface by its MAC address as an alternative to its name. Deprecation Notes ***************** * PReP (PowerPC Reference Platform) partition support is now deprecated and will be removed in a future release. This affects ppc64* (PowerPC 64-bit) hardware support. While POWER hardware remains an active platform, it represents a small, specialized share of typical ironic-python-agent deployment patterns. The feature was originally added to support booting partition images locally on PowerPC hardware, but usage in the ironic-python-agent ecosystem may be limited. Note that RAID support for PReP partitions was never implemented and will not be added before removal. Users with ppc64* hardware deployments should plan to migrate to alternative solutions or contact the Ironic community if they have specific requirements. Changes in ironic-python-agent 11.3.0..11.4.0 --------------------------------------------- f596fe47 enable_vlan_interfaces: support identifying interfaces by MAC ccb120a6 Add request logging for API requests e78d4af6 Fix slow test_find_routable_addr_no_reachable_urls 5cfff147 Trivial: report the slowest unit tests 1739fa38 Deprecate PReP partition support? 8b498025 Remove unicode literal from code Diffstat (except docs and test files) ------------------------------------- ironic_python_agent/agent.py | 5 + ironic_python_agent/api/app.py | 6 +- ironic_python_agent/api/request_log.py | 93 ++++++ ironic_python_agent/config.py | 4 +- ironic_python_agent/disk_utils.py | 3 + ironic_python_agent/extensions/image.py | 8 + ironic_python_agent/netutils.py | 13 +- ironic_python_agent/partition_utils.py | 3 + ironic_python_agent/raid_utils.py | 3 +- ...te-prep-partition-support-b80be860deb3c316.yaml | 19 ++ ...le-vlan-interfaces-by-mac-188524357fb46a2f.yaml | 5 + tox.ini | 2 +- 14 files changed, 560 insertions(+), 9 deletions(-)

1 0

neutron 25.2.2 (dalmatian)
by no-reply＠openstack.org 26 Jan '26

26 Jan '26

We joyfully announce the release of: neutron 25.2.2 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 25.2.2 ^^^^^^ Bug Fixes * The configuration parameters "ovn_dhcp4_global_options" and "ovn_dhcp6_global_options" allow multiple values per key, separated by a semi-colon character. E.g.: ntp_server:1.2.3.4,wpad:1.2.3.5;1.2.3.6 Changes in neutron 25.2.1..25.2.2 --------------------------------- fe9da5e7bc [OVN] Allow multiple values in DHCPv4/v6 options 5bc0e42acb Make sure OVN PG is present before adding a SG rule cbff2a645f [Docs] Add doc about Virtual IP addresses in Neutron ML2/OVN f3d32497ac Search for active port binding when updating LSP host info e81a569e6b Update OVN_AGENT_METADATA_SB_CFG_KEY when OVN metadata agent starts 0fdc282ad9 [FT] Wait for the manager to be created (2) 1fd2fcc5c3 Don't prevent setting CIDRs as allowed_address_pair for port 60c6c27e3a [OVN] Add 'qos-bw-minimum-ingress' ML2 extension e3894e4efb Replace response body in after hook for 404 error 0561b878e3 [SGL] Ignore port groups that don't come from SGs bf99656262 Remove false-positive ACLs in OVN DB sync 036f092820 [FT] Wait for the manager to be created 872a1c5709 [CI][9-stream][stable only] Use last python3.9 supported tempest tag cfd063807c Fix bug/2115776 where Neutron deletes A/AAAA records 928c1af678 [OVS] Avoid duplicate logging of network packets Diffstat (except docs and test files) ------------------------------------- neutron/agent/ovn/metadata/agent.py | 17 ++ neutron/common/ovn/acl.py | 12 +- neutron/common/ovn/extensions.py | 2 + neutron/conf/plugins/ml2/drivers/ovn/ovn_conf.py | 10 +- neutron/pecan_wsgi/hooks/policy_enforcement.py | 9 + .../agent/openflow/native/base_oskenapp.py | 5 +- .../ml2/drivers/ovn/mech_driver/mech_driver.py | 10 +- .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 31 +++- .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 27 +++ .../externaldns/drivers/designate/driver.py | 8 +- neutron/services/logapi/drivers/ovn/driver.py | 10 ++ .../agent/ovn/metadata/test_metadata_agent.py | 13 +- .../functional/agent/ovsdb/native/test_helpers.py | 38 +++- .../ovn/mech_driver/ovsdb/test_ovn_client.py | 13 ++ .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 34 +++- .../ovn/mech_driver/ovsdb/test_ovn_client.py | 49 ++++-- .../drivers/ovn/mech_driver/test_mech_driver.py | 23 ++- .../ml2/extensions/test_dns_domain_keywords.py | 8 +- .../plugins/ml2/extensions/test_dns_integration.py | 8 +- .../externaldns/drivers/designate/test_driver.py | 25 +++ ...p-options-multiple-values-a54671066a579e6a.yaml | 6 + zuul.d/tempest-singlenode.yaml | 2 + 25 files changed, 497 insertions(+), 63 deletions(-)

1 0

neutron-fwaas-dashboard 8.0.1 (dalmatian)
by no-reply＠openstack.org 26 Jan '26

26 Jan '26

We are stoked to announce the release of: neutron-fwaas-dashboard 8.0.1 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/neutron-fwaas-dashboard Download the package from: https://tarballs.openstack.org/neutron-fwaas-dashboard/ Please report issues through: https://bugs.launchpad.net/neutron-fwaas-dashboard/+bugs For more details, please see below. Changes in neutron-fwaas-dashboard 8.0.0..8.0.1 ----------------------------------------------- 3ee2f30 Fix remove port dialog for ha_router_replicated_interface bf2cf9b Fix initial population of dropdowns in rule edit view 94a00c5 Update TOX_CONSTRAINTS_FILE for stable/2024.2 b7f9767 Update .gitreview for stable/2024.2 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + neutron_fwaas_dashboard/api/fwaas_v2.py | 4 +- .../dashboards/project/firewalls_v2/views.py | 4 +- tox.ini | 2 +- 6 files changed, 67 insertions(+), 8 deletions(-)

1 0

ovn-bgp-agent 3.0.1 (dalmatian)
by no-reply＠openstack.org 26 Jan '26

26 Jan '26

We are ecstatic to announce the release of: ovn-bgp-agent 3.0.1 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/ovn-bgp-agent Download the package from: https://tarballs.openstack.org/ovn-bgp-agent/ Please report issues through: https://bugs.launchpad.net/ovn-bgp-agent/+bugs For more details, please see below. Changes in ovn-bgp-agent 3.0.0..3.0.1 ------------------------------------- ace144c Fix hacking checks from neutron-lib 3.21.1 d967ff6 Ensure that bridge exist and UP before adding tables 7047420 functional: Use shutil to find privsep-helper executable 5e282e0 Make in_port consistent type 9c78bbd Handle trimming of vlan interface namings 6b03567 Move devstack job to experimental 02b7a8e Support ovn-bgp agent with DVR disabled e169b7c nb driver: Don't expose FIP if the external_mac is not set 1d8d9b8 Expose FIP if external_mac was set 92d3ead functional: Introduce a base class for OVN func testing 23d396b Introduce LSP address column parsing functions 953ee2f Fix type for config option bgp_chassis_id 7339a9e Refactor ovn_bgp_agent.privileged.ovs_vsctl 9539485 Add retries to get_device_port_at_ovs a2cc136 Fix live migrations and possibly also VIP failovers 5973fc9 Update TOX_CONSTRAINTS_FILE for stable/2024.2 749d660 Update .gitreview for stable/2024.2 Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- bindep.txt | 10 + ovn_bgp_agent/config.py | 14 +- ovn_bgp_agent/constants.py | 5 + ovn_bgp_agent/drivers/openstack/nb_exceptions.py | 21 ++ .../drivers/openstack/nb_ovn_bgp_driver.py | 203 ++++++++++++++--- ovn_bgp_agent/drivers/openstack/ovn_bgp_driver.py | 4 +- ovn_bgp_agent/drivers/openstack/utils/evpn.py | 9 +- ovn_bgp_agent/drivers/openstack/utils/frr.py | 4 +- ovn_bgp_agent/drivers/openstack/utils/nat.py | 33 +++ ovn_bgp_agent/drivers/openstack/utils/ovn.py | 85 ++++++- ovn_bgp_agent/drivers/openstack/utils/ovs.py | 87 ++++--- ovn_bgp_agent/drivers/openstack/utils/port.py | 30 ++- ovn_bgp_agent/drivers/openstack/utils/wire.py | 5 +- .../drivers/openstack/watchers/base_watcher.py | 48 ++++ .../drivers/openstack/watchers/nb_bgp_watcher.py | 253 +++++++++++++++++++-- ovn_bgp_agent/exceptions.py | 9 + ovn_bgp_agent/privileged/linux_net.py | 14 +- ovn_bgp_agent/privileged/ovs_vsctl.py | 24 +- .../functional/drivers/openstack/utils/__init__.py | 0 .../functional/drivers/openstack/utils/test_ovn.py | 227 ++++++++++++++++++ .../drivers/openstack/watchers/__init__.py | 0 .../openstack/watchers/test_nb_bgp_watcher.py | 133 +++++++++++ .../drivers/openstack/test_nb_ovn_bgp_driver.py | 112 +++++++-- .../unit/drivers/openstack/test_ovn_bgp_driver.py | 12 +- .../drivers/openstack/utils/test_driver_utils.py | 3 +- .../unit/drivers/openstack/utils/test_evpn.py | 3 +- .../unit/drivers/openstack/utils/test_port.py | 69 ++++++ .../openstack/watchers/test_nb_bgp_watcher.py | 142 +++++++++++- ovn_bgp_agent/utils/linux_net.py | 24 +- tools/setup-ovs.sh | 18 ++ tox.ini | 13 +- zuul.d/project.yaml | 3 +- 43 files changed, 1839 insertions(+), 317 deletions(-)

1 0