September 2026 - Release-announce

oslo.messaging 17.3.1 (gazpacho)
by no-reply＠openstack.org 30 Sep '26

30 Sep '26

We are stoked to announce the release of: oslo.messaging 17.3.1 This release is part of the gazpacho release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. 17.3.1 ^^^^^^ Security Issues * Under TLS with "ssl_ca_file", oslo.messaging validated the broker certificate chain but did not verify the RabbitMQ broker hostname. A man-in-the-middle attacker with a certificate trusted by that CA could impersonate the broker. The RabbitMQ driver now verifies the broker hostname when "ssl_ca_file" is set and "[oslo_messaging_rabbit] ssl_enforce_hostname_verification" is enabled. Using "ssl=true" without "ssl_ca_file" still does not verify the broker hostname. The "ssl_enforce_hostname_verification" option defaults to "false" to preserve existing behavior until operators opt in. When enabled together with "ssl_ca_file", hostname verification is enforced for RabbitMQ TLS connections. For transport URLs with multiple brokers and hostname verification enabled, Kombu 5.2.0 or newer substitutes the active broker hostname for TLS. Older Kombu versions log a warning and use the first configured broker hostname as a best effort; operators should upgrade Kombu or use a certificate (SAN or wildcard) that covers all configured broker hostnames. Changes in oslo.messaging 17.3.0..17.3.1 ---------------------------------------- 399f96e8 Fix RabbitMQ TLS hostname verification b49b00f9 Update TOX_CONSTRAINTS_FILE for stable/2026.1 ae31b640 Update .gitreview for stable/2026.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + oslo_messaging/_drivers/impl_rabbit.py | 45 +++++ .../rabbit-ssl-hostname-verification-option.yaml | 24 +++ tox.ini | 6 +- 5 files changed, 252 insertions(+), 5 deletions(-)

1 0

oslo.messaging 17.1.1 (flamingo)
by no-reply＠openstack.org 30 Sep '26

30 Sep '26

We are happy to announce the release of: oslo.messaging 17.1.1 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. 17.1.1 ^^^^^^ Security Issues *************** * Under TLS with "ssl_ca_file", oslo.messaging validated the broker certificate chain but did not verify the RabbitMQ broker hostname. A man-in-the-middle attacker with a certificate trusted by that CA could impersonate the broker. The RabbitMQ driver now verifies the broker hostname when "ssl_ca_file" is set and "[oslo_messaging_rabbit] ssl_enforce_hostname_verification" is enabled. Using "ssl=true" without "ssl_ca_file" still does not verify the broker hostname. The "ssl_enforce_hostname_verification" option defaults to "false" to preserve existing behavior until operators opt in. When enabled together with "ssl_ca_file", hostname verification is enforced for RabbitMQ TLS connections. For transport URLs with multiple brokers and hostname verification enabled, Kombu 5.2.0 or newer substitutes the active broker hostname for TLS. Older Kombu versions log a warning and use the first configured broker hostname as a best effort; operators should upgrade Kombu or use a certificate (SAN or wildcard) that covers all configured broker hostnames. Bug Fixes ********* * Bug 2131652 (https://bugs.launchpad.net/oslo.messaging/+bug/2131652) Fixed ignorance of Precondition Failed error by rabbitmq driver so that the error is properly raised to clients. Changes in oslo.messaging 17.1.0..17.1.1 ---------------------------------------- 3a9ea484 Fix RabbitMQ TLS hostname verification d610ce64 rabbit: Fix ignored PreconditionFailed error 6d6a623a Update TOX_CONSTRAINTS_FILE for stable/2025.2 adccb14c Update .gitreview for stable/2025.2 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + oslo_messaging/_drivers/impl_rabbit.py | 125 +++++++---- .../notes/bug-2131652-70af38c59a65886e.yaml | 6 + .../rabbit-ssl-hostname-verification-option.yaml | 24 +++ tox.ini | 6 +- 6 files changed, 359 insertions(+), 43 deletions(-)

1 0

masakari-dashboard 15.0.0 (hibiscus)
by no-reply＠openstack.org 30 Sep '26

30 Sep '26

We are amped to announce the release of: masakari-dashboard 15.0.0 This release is part of the hibiscus release series. The source is available from: https://opendev.org/openstack/masakari-dashboard Download the package from: https://tarballs.openstack.org/masakari-dashboard/ Please report issues through: https://bugs.launchpad.net/masakari/+bugs For more details, please see below. Changes in masakari-dashboard 14.0.0..15.0.0 -------------------------------------------- 12d0b51 Replace usage of oslo.log ddb5d65 Update TOX_CONSTRAINTS_FILE for stable/2026.2 5f7858d Update .gitreview for stable/2026.2 65813f8 Update master for stable/2026.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + masakaridashboard/dashboard.py | 2 +- releasenotes/source/2026.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + tox.ini | 8 ++++---- 5 files changed, 13 insertions(+), 5 deletions(-)

1 0

cloudkitty 25.0.0 (hibiscus)
by no-reply＠openstack.org 30 Sep '26

30 Sep '26

We are jazzed to announce the release of: cloudkitty 25.0.0 This release is part of the hibiscus release series. The source is available from: https://opendev.org/openstack/cloudkitty Download the package from: https://pypi.org/project/cloudkitty Please report issues through: https://storyboard.openstack.org/#!/project/openstack/cloudkitty For more details, please see below. Changes in cloudkitty 24.0.0..25.0.0 ------------------------------------ 678e139 Fix CI tests 4720537 Fix for typo 1ed51c3 Revert "Fix v1 summary/total with ES/OS storage backend" 40323f7 doc: Warn that aggregation_method must match the archive policy 349cda2 Use period start as Loki entry timestamp 5bb59c0 Raise exception on Loki push failure to prevent data loss 4cb28f1 Fix 500 error when creating scope with active=False 89a8140 Skip tempest job for irrelevant files 2245e71 doc: Use dnf in CentOS/RHEL 5206e90 doc: Update Ubuntu package information 43ecd54 align image.size granularity 03bc6be Doc: use the code-block directive for code aac9254 Doc: define fetchers endpoints in to pyproject.toml f6bf20d Use pip to install from sources f213c4d Drop Python 3.10 13c0dcf Migrate setup configuration to pyproject.toml c7b9b74 zuul: Use ansible variable to configure tempest plugins 10ee031 Update loki to newer upstream release for testing 63ecb1e setup: Remove pbr's wsgi_scripts a45fbee Add Loki structured metadata support for improved query performance 1a54c8a Add Aetos collector with Keystone authentication 8de59c1 Fix missing oslo.policy options 302180b Drop unnecessary direct dependency on kombu 20bbf9d InfluxDB: Add timeout for HTTP requests 8f97464 Remove unnecessary direct dependency on Pygments 22807c7 Optimize the loading of rating rules 405a9cb Update master for stable/2026.1 68796c9 List missing auth related opts a6c77db devstack: Use common function to manage keystoneauth options 75ce640 devstack: Modernize authinfos options Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 48 ++++- cloudkitty/api/app.wsgi | 24 --- cloudkitty/api/v2/scope/state.py | 2 +- cloudkitty/collector/aetos.py | 83 ++++++++ cloudkitty/collector/gnocchi.py | 8 +- cloudkitty/collector/prometheus.py | 203 +----------------- cloudkitty/collector/prometheus_base.py | 229 +++++++++++++++++++++ cloudkitty/common/aetos_client.py | 75 +++++++ cloudkitty/common/config.py | 23 ++- cloudkitty/common/prometheus_client.py | 11 +- cloudkitty/common/prometheus_client_base.py | 54 +++++ cloudkitty/fetcher/prometheus.py | 2 +- cloudkitty/orchestrator.py | 5 +- cloudkitty/storage/v2/elasticsearch/client.py | 2 - cloudkitty/storage/v2/influx.py | 11 +- cloudkitty/storage/v2/loki/__init__.py | 10 +- cloudkitty/storage/v2/loki/client.py | 173 +++++++++++----- cloudkitty/storage/v2/loki/exceptions.py | 9 + cloudkitty/storage/v2/opensearch/client.py | 2 - devstack/plugin.sh | 17 +- etc/cloudkitty/metrics.yml | 1 + pyproject.toml | 81 ++++++++ .../add-aetos-collector-04879a096e774d1d.yaml | 5 + ...ructured-metadata-support-92f3b11c9c57803a.yaml | 12 ++ .../notes/drop-python-3-10-cb5bf993b025f6ea.yaml | 6 + ...-total-with-es-os-backend-9540741b80819672.yaml | 7 - .../notes/influxdb-timeout-57aba639d07b8c8b.yaml | 7 + .../notes/rm-wsgi-scripts-b944f2957bb7f480.yaml | 8 + releasenotes/source/2026.1.rst | 6 + releasenotes/source/index.rst | 1 + requirements.txt | 1 + setup.cfg | 74 ------- test-requirements.txt | 1 - tox.ini | 2 +- 56 files changed, 1432 insertions(+), 523 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 97b4aad..5f73306 100644 --- a/requirements.txt +++ b/requirements.txt @@ -38,0 +39 @@ requests>=2.14.2 # Apache-2.0 +python-observabilityclient>=1.1.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index c3f8dce..2af11ec 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -3 +2,0 @@ coverage>=5.3 # Apache-2.0 -kombu>=5.0.2 # BSD

1 0

watcher 17.0.0 (hibiscus)
by no-reply＠openstack.org 30 Sep '26

30 Sep '26

We are overjoyed to announce the release of: watcher 17.0.0 This release is part of the hibiscus release series. The source is available from: https://opendev.org/openstack/watcher Download the package from: https://tarballs.openstack.org/watcher/ Please report issues through: https://bugs.launchpad.net/watcher/+bugs For more details, please see below. 17.0.0 ^^^^^^ New Features * Added two new actions: "delete" and "shelve". The "delete" action permanently removes a server instance and all its associated resources via the Nova API. It is automatically skipped when the target instance does not exist. Deletion cannot be reverted. The "shelve" action shelves a server instance via the Nova API, freeing compute resources (vCPU and RAM) on the host while preserving the instance data. It is automatically skipped when the target instance does not exist or is already in "SHELVED" or "SHELVED_OFFLOADED" state. The action accepts both states as valid postconditions, since Nova may offload the instance immediately depending on the backend storage. Changes in watcher 16.0.0..17.0.0 --------------------------------- ff8c48bc Add new delete and shelve actions 85992612 Migrate package metadata to pyproject.toml ef99be64 Add metric query methods to BaseStrategy 58177ace Add policy enforcement to webhook trigger endpoint 2393a77e Add Nova/Placement emulators and host_maintenance functional tests 11437fa0 Fix allowed_nodes corruption in ComputeScope e8c70fc2 Add MetricDataCache and integrate it into DataSourceBase 0d5de4f2 Replace old operating system versions in install guide 63e8c58f devstack: Use common function to manage watcher_clients_auth options 16ad250b Add functional test framework for Watcher 6dbf544a Fix race condition in DefaultLoader._reload_config() d7c96b22 Remove unused osc parameter from scope and builder classes 1458f13d Use real objects in volume migration tests 2179e665 Add strategy as filter on /v1/audits/detail endpoint bb6a9766 Add allocation-based capacity checks to vm_workload_consolidation 3201a746 Add node resource allocation cache to ModelRoot 9f01ce84 Drop own check for LOG.warn ad9ecdd7 Make Watcher reproducible e5e0f412 Use built-in method to build RequestContext 65649f9d cinder: Fix wrong override of project_domain_id b5e7a25d Remove python-cinderclient dependency 534517fb Replace python-cinderclient with openstacksdk 105d7324 Add default_parameters support to Audit Templates b3d28b49 Add dataclass wrappers for CinderHelper API objects 022a7145 Fix flaky test_do_while_futures_modify_timeout unit test 2a07f2b4 Cache node utilization to fix vm_workload_consolidation at scale b9609c61 Remove Cinder API calls from zone_migration strategy 16ecaafa Add volume_type, created_at and host fields to volumes in model fccb7e7e Avoid logging messaging transport URLs 862b9f73 Move test fixtures to local_fixtures directory 075c421f Remove unused CinderHelper methods 642b193e Replace deprecated remotable_classmethod 3d2d3c3d [ci] Increase CI jobs timeouts 5a583f78 Remove redundant policy_file override 977c1408 Remove unused placement from OpenStackClients 5d4682dc Switch PlacementHelper to OpenStackSDK d0f2173c Add Inventory wrapper class for placement data 4abcf29a Fix LP bug link in releasenote for bug 2152645 5431c5af Use context manager for lock in collector base 0cc8aa52 Remove Nova API calls from zone_migration strategy e63fe149 Add host/hypervisor_hostname and created to instances in model 73563ec5 Remove unused PlacementHelper methods a77bc7ec Enable skipped actions tests on watcher-tempest-base-two-node job 51a27ae3 Replace global lockutils locks with per-instance RLock 0c88a379 Add regression test for map_instance reentrant deadlock 4073c4ba Fix notification updates lost during cluster data model synchronization dcc44fe7 Extract BaseConnectionMixin for SDK connection setup 91c66b13 doc: Drop reference to "keystone" CLI f9d2ba14 Add regression test for notification lost during synchronization 0de5833b Freeze data_model API response fields f8cf9061 Update configuring docs for keystone section cf1dec73 Update configuration and integrations docs 1fa46cbb Remove python-keystoneclient dependency 00faaed5 Replace keystoneclient with openstacksdk 0bba1ac1 Remove unused methods from KeystoneHelper 121f5631 Generate sample policy file in local directory de40fd78 Drop reference to legacy keystonemiddleware options 5461b361 Fix disk accounting for BFV instances 51a0b33e Update the How to contribute documentation 3f97cb3d Add debug logging for host rejection in workload_balance 9abc4b1f tox: Remove override of install_command f420c168 objects: Avoid aliasing o.vo fields 2b910a93 objects: Prepare for oslo.versionedobjects 3.10.0 84dbcd47 Add hook smoke-test script c7bbed02 Convert remote pre-commit hooks to local pip hooks f6bf570a run hacking via local hook 58a2fc9a Make native threading the default concurrency mode ad7b94d9 Update pre-commit hooks to latest versions and fix linting errors e19327e7 adopt ruff-format c66dceb7 enable ruff isort and additional checks e76bd28a Update master for stable/2026.1 55ee1477 Add watcher-grenade-skip-level-always job 6c3f9c01 reno: Update master for unmaintained/2024.1 Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 +- .pre-commit-config.yaml | 174 +- .zuul.yaml | 68 +- api-ref/source/conf.py | 18 +- api-ref/source/parameters.yaml | 14 +- .../samples/audittemplate-create-request-full.json | 3 +- .../samples/audittemplate-create-response.json | 9 +- .../audittemplate-list-detailed-response.json | 8 +- .../samples/audittemplate-show-response.json | 5 +- .../samples/audittemplate-update-response.json | 5 +- api-ref/source/watcher-api-v1-audits.inc | 7 + api-ref/source/watcher-api-v1-audittemplates.inc | 12 +- api-ref/source/watcher-api-v1-datamodel.inc | 5 + devstack/lib/watcher | 30 +- devstack/upgrade/from_rocky/upgrade-watcher | 13 - .../watcher-policy-generator.conf | 2 +- pyproject.toml | 163 +- ...actions-delete-and-shelve-383ab53d622cca49.yaml | 15 + ...dd-node-allocations-cache-18e463fec3f2203d.yaml | 9 + ...mplate-default-parameters-316212e7a0f08083.yaml | 19 + .../notes/avoid-transport-url-in-debug-logs.yaml | 8 + ...88981-fix-audit-scope-azs-76a7f9bd5065a841.yaml | 7 + ...-model-reentrant-deadlock-08bf366e5f575fb1.yaml | 11 + ...tion-lost-during-cdm-sync-d8c411727abc6b8a.yaml | 12 + ...ion-based-capacity-checks-vm-consolidation.yaml | 14 + ...y-enforcement-event-audit-596288dbff87bd0d.yaml | 12 + ...ategy-filter-audit-detail-b98e11d30285a618.yaml | 11 + ...nt-openstacksdk-migration-05ec7aaef6795584.yaml | 17 + .../deprecate_eventlet_mode-1f8ecbc2e09ba6f1.yaml | 13 + .../fix-bfv-disk-accounting-773a95ec368843d5.yaml | 12 + ...eze-data-model-api-fields-d811e6675c3d455f.yaml | 9 + ...nt-openstacksdk-migration-23fe0611b0052209.yaml | 15 + ...nt-openstacksdk-migration-538668b56ef90196.yaml | 17 + releasenotes/source/2024.1.rst | 2 +- releasenotes/source/2026.1.rst | 6 + releasenotes/source/conf.py | 29 +- releasenotes/source/index.rst | 1 + requirements.txt | 5 +- setup.cfg | 117 - setup.py | 5 +- test-requirements.txt | 3 + tools/test-pre-commit-hooks.sh | 172 ++ tox.ini | 133 +- watcher/_i18n.py | 2 + watcher/api/acl.py | 11 +- watcher/api/app.py | 8 +- watcher/api/app.wsgi | 2 +- watcher/api/config.py | 22 +- watcher/api/controllers/base.py | 23 +- watcher/api/controllers/link.py | 24 +- .../api/controllers/rest_api_version_history.rst | 6 + watcher/api/controllers/root.py | 21 +- watcher/api/controllers/v1/__init__.py | 196 +- watcher/api/controllers/v1/action.py | 293 ++- watcher/api/controllers/v1/action_plan.py | 373 ++- watcher/api/controllers/v1/audit.py | 535 ++-- watcher/api/controllers/v1/audit_template.py | 497 ++-- watcher/api/controllers/v1/collection.py | 7 +- watcher/api/controllers/v1/data_model.py | 82 +- watcher/api/controllers/v1/efficacy_indicator.py | 2 +- watcher/api/controllers/v1/goal.py | 123 +- watcher/api/controllers/v1/scoring_engine.py | 116 +- watcher/api/controllers/v1/service.py | 130 +- watcher/api/controllers/v1/strategy.py | 185 +- watcher/api/controllers/v1/types.py | 36 +- watcher/api/controllers/v1/utils.py | 77 +- watcher/api/controllers/v1/versions.py | 5 +- watcher/api/controllers/v1/webhooks.py | 27 +- watcher/api/hooks.py | 56 +- watcher/api/middleware/auth_token.py | 18 +- watcher/api/middleware/parsable_error.py | 41 +- watcher/api/wsgi.py | 11 +- watcher/applier/action_plan/default.py | 74 +- watcher/applier/actions/change_node_power_state.py | 34 +- .../applier/actions/change_nova_service_state.py | 59 +- watcher/applier/actions/delete.py | 145 ++ watcher/applier/actions/factory.py | 6 +- watcher/applier/actions/migration.py | 165 +- watcher/applier/actions/nop.py | 29 +- watcher/applier/actions/resize.py | 52 +- watcher/applier/actions/shelve.py | 151 ++ watcher/applier/actions/sleep.py | 13 +- watcher/applier/actions/stop.py | 72 +- watcher/applier/actions/volume_migration.py | 123 +- watcher/applier/default.py | 11 +- watcher/applier/loading/default.py | 6 +- watcher/applier/manager.py | 3 +- watcher/applier/messaging/trigger.py | 20 +- watcher/applier/rpcapi.py | 7 +- watcher/applier/service_monitor.py | 37 +- watcher/applier/sync.py | 56 +- watcher/applier/workflow_engine/base.py | 152 +- watcher/applier/workflow_engine/default.py | 104 +- watcher/cmd/dbmanage.py | 121 +- watcher/cmd/eventlet/__init__.py | 4 +- watcher/cmd/eventlet/api.py | 17 +- watcher/cmd/eventlet/applier.py | 3 +- watcher/cmd/eventlet/decisionengine.py | 6 +- watcher/cmd/status.py | 17 +- watcher/cmd/sync.py | 3 +- watcher/common/base_helper.py | 73 + watcher/common/cinder_helper.py | 687 +++-- watcher/common/clients.py | 165 +- watcher/common/config.py | 56 +- watcher/common/context.py | 46 +- watcher/common/exception.py | 120 +- watcher/common/executor.py | 39 +- watcher/common/ironic_helper.py | 2 +- watcher/common/keystone_helper.py | 90 +- watcher/common/loader/base.py | 1 - watcher/common/loader/default.py | 17 +- watcher/common/loader/loadable.py | 3 +- watcher/common/metal_helper/base.py | 5 +- watcher/common/metal_helper/factory.py | 1 + watcher/common/metal_helper/ironic.py | 12 +- watcher/common/metal_helper/maas.py | 52 +- watcher/common/nova_helper.py | 334 ++- watcher/common/oslo_service_helper.py | 10 +- watcher/common/placement_helper.py | 211 +- watcher/common/policies/__init__.py | 2 + watcher/common/policies/action.py | 31 +- watcher/common/policies/action_plan.py | 42 +- watcher/common/policies/audit.py | 45 +- watcher/common/policies/audit_template.py | 36 +- watcher/common/policies/base.py | 13 +- watcher/common/policies/data_model.py | 10 +- watcher/common/policies/goal.py | 24 +- watcher/common/policies/scoring_engine.py | 21 +- watcher/common/policies/service.py | 22 +- watcher/common/policies/strategy.py | 31 +- watcher/common/policies/webhooks.py | 32 + watcher/common/policy.py | 99 +- watcher/common/rpc.py | 33 +- watcher/common/scheduling.py | 16 +- watcher/common/service.py | 178 +- watcher/common/service_manager.py | 1 - watcher/common/utils.py | 22 +- watcher/conf/__init__.py | 7 + watcher/conf/aetos_client.py | 59 +- watcher/conf/api.py | 83 +- watcher/conf/applier.py | 74 +- watcher/conf/cinder.py | 48 + watcher/conf/cinder_client.py | 62 +- watcher/conf/clients_auth.py | 10 +- watcher/conf/collector.py | 65 +- watcher/conf/datasources.py | 54 +- watcher/conf/db.py | 13 +- watcher/conf/decision_engine.py | 143 +- watcher/conf/exception.py | 9 +- watcher/conf/gnocchi_client.py | 40 +- watcher/conf/grafana_client.py | 252 +- watcher/conf/grafana_translators.py | 34 +- watcher/conf/ironic_client.py | 41 +- watcher/conf/keystone.py | 56 + watcher/conf/keystone_client.py | 41 +- watcher/conf/maas_client.py | 19 +- watcher/conf/models.py | 16 +- watcher/conf/nova.py | 142 +- watcher/conf/nova_client.py | 81 +- watcher/conf/opts.py | 9 +- watcher/conf/paths.py | 34 +- watcher/conf/placement.py | 57 + watcher/conf/placement_client.py | 52 +- watcher/conf/planner.py | 17 +- watcher/conf/plugins.py | 15 +- watcher/conf/prometheus_client.py | 67 +- watcher/conf/service.py | 59 +- watcher/db/api.py | 163 +- watcher/db/migration.py | 6 +- watcher/db/purge.py | 187 +- watcher/db/sqlalchemy/alembic/env.py | 6 +- .../db/sqlalchemy/alembic/versions/001_ocata.py | 128 +- .../versions/0f6042416884_add_apscheduler_jobs.py | 11 +- ...375ca737_change_efficiacy_indicator_decimals.py | 17 +- .../versions/3cfc94cecf4e_add_name_for_audit.py | 8 +- .../versions/4b16194c56bc_add_start_end_time.py | 12 +- .../alembic/versions/52804f2498c4_add_hostname.py | 8 +- .../versions/609bec748f2a_add_force_field.py | 4 +- ...150a7d8f228_add_status_message_to_actionplan.py | 27 +- .../sqlalchemy/alembic/versions/a86240e89a29_.py | 37 +- .../d098df6021e2_cron_support_for_audit.py | 20 +- .../d09a5945e4a0_add_action_description_table.py | 16 +- ...b4_add_default_parameters_to_audit_templates.py | 26 + watcher/db/sqlalchemy/api.py | 652 +++-- watcher/db/sqlalchemy/job_store.py | 83 +- watcher/db/sqlalchemy/migration.py | 15 +- watcher/db/sqlalchemy/models.py | 80 +- watcher/decision_engine/audit/base.py | 42 +- watcher/decision_engine/audit/continuous.py | 137 +- watcher/decision_engine/audit/event.py | 6 +- watcher/decision_engine/audit/oneshot.py | 6 +- watcher/decision_engine/datasources/aetos.py | 9 +- watcher/decision_engine/datasources/base.py | 220 +- watcher/decision_engine/datasources/cache.py | 215 ++ watcher/decision_engine/datasources/gnocchi.py | 273 +- watcher/decision_engine/datasources/grafana.py | 287 ++- .../datasources/grafana_translator/base.py | 33 +- .../datasources/grafana_translator/influxdb.py | 51 +- watcher/decision_engine/datasources/manager.py | 62 +- watcher/decision_engine/datasources/prometheus.py | 33 +- .../decision_engine/datasources/prometheus_base.py | 269 +- watcher/decision_engine/goal/__init__.py | 15 +- watcher/decision_engine/goal/base.py | 1 - watcher/decision_engine/goal/efficacy/base.py | 12 +- .../decision_engine/goal/efficacy/indicators.py | 96 +- watcher/decision_engine/goal/efficacy/specs.py | 148 +- watcher/decision_engine/loading/default.py | 18 +- watcher/decision_engine/manager.py | 17 +- .../decision_engine/messaging/audit_endpoint.py | 12 +- .../messaging/data_model_endpoint.py | 22 +- watcher/decision_engine/model/base.py | 1 - watcher/decision_engine/model/collector/base.py | 53 +- watcher/decision_engine/model/collector/cinder.py | 157 +- watcher/decision_engine/model/collector/ironic.py | 21 +- watcher/decision_engine/model/collector/manager.py | 7 +- watcher/decision_engine/model/collector/nova.py | 268 +- watcher/decision_engine/model/element/__init__.py | 21 +- .../model/element/baremetal_resource.py | 7 +- watcher/decision_engine/model/element/base.py | 27 +- .../model/element/compute_resource.py | 7 +- watcher/decision_engine/model/element/instance.py | 25 +- watcher/decision_engine/model/element/node.py | 70 +- .../model/element/storage_resource.py | 7 +- watcher/decision_engine/model/element/volume.py | 16 +- watcher/decision_engine/model/model_root.py | 325 ++- watcher/decision_engine/model/notification/base.py | 23 +- .../decision_engine/model/notification/cinder.py | 206 +- .../model/notification/filtering.py | 8 +- watcher/decision_engine/model/notification/nova.py | 156 +- watcher/decision_engine/planner/base.py | 1 - watcher/decision_engine/planner/manager.py | 1 + .../planner/node_resource_consolidation.py | 36 +- watcher/decision_engine/planner/weight.py | 63 +- .../planner/workload_stabilization.py | 133 +- watcher/decision_engine/rpcapi.py | 17 +- watcher/decision_engine/scheduling.py | 52 +- watcher/decision_engine/scope/baremetal.py | 10 +- watcher/decision_engine/scope/compute.py | 121 +- watcher/decision_engine/scope/storage.py | 49 +- watcher/decision_engine/scoring/dummy_scorer.py | 22 +- .../scoring/dummy_scoring_container.py | 10 +- watcher/decision_engine/scoring/scoring_factory.py | 16 +- watcher/decision_engine/service.py | 2 +- watcher/decision_engine/service_monitor.py | 39 +- watcher/decision_engine/solution/default.py | 15 +- watcher/decision_engine/solution/efficacy.py | 23 +- watcher/decision_engine/strategy/context/base.py | 19 +- .../decision_engine/strategy/context/default.py | 19 +- watcher/decision_engine/strategy/selection/base.py | 1 - .../decision_engine/strategy/selection/default.py | 14 +- .../strategy/strategies/__init__.py | 42 +- .../strategy/strategies/actuation.py | 24 +- .../decision_engine/strategy/strategies/base.py | 156 +- .../strategy/strategies/basic_consolidation.py | 271 +- .../strategy/strategies/dummy_strategy.py | 26 +- .../strategy/strategies/dummy_with_resize.py | 35 +- .../strategy/strategies/dummy_with_scorer.py | 79 +- .../strategy/strategies/host_maintenance.py | 97 +- .../strategies/node_resource_consolidation.py | 89 +- .../strategy/strategies/noisy_neighbor.py | 185 +- .../strategy/strategies/outlet_temp_control.py | 93 +- .../strategy/strategies/saving_energy.py | 99 +- .../strategies/storage_capacity_balance.py | 201 +- .../strategy/strategies/uniform_airflow.py | 172 +- .../strategies/vm_workload_consolidation.py | 515 ++-- .../strategy/strategies/workload_balance.py | 285 ++- .../strategy/strategies/workload_stabilization.py | 380 +-- .../strategy/strategies/zone_migration.py | 457 ++-- watcher/decision_engine/sync.py | 247 +- watcher/decision_engine/threading.py | 27 +- watcher/eventlet.py | 10 +- watcher/hacking/checks.py | 117 +- watcher/notifications/action.py | 198 +- watcher/notifications/action_plan.py | 201 +- watcher/notifications/audit.py | 168 +- watcher/notifications/base.py | 30 +- watcher/notifications/exception.py | 18 +- watcher/notifications/goal.py | 14 +- watcher/notifications/service.py | 54 +- watcher/notifications/strategy.py | 14 +- watcher/objects/action.py | 84 +- watcher/objects/action_description.py | 55 +- watcher/objects/action_plan.py | 129 +- watcher/objects/audit.py | 130 +- watcher/objects/audit_template.py | 88 +- watcher/objects/base.py | 32 +- watcher/objects/efficacy_indicator.py | 63 +- watcher/objects/fields.py | 69 +- watcher/objects/goal.py | 47 +- watcher/objects/scoring_engine.py | 82 +- watcher/objects/service.py | 54 +- watcher/objects/strategy.py | 76 +- .../functional/gabbits/audit-lifecycle-failed.yaml | 117 + .../gabbits/audit-lifecycle-skip-action.yaml | 209 ++ .../functional/test_host_maintenance_scoped.py | 351 +++ .../{fixtures => local_fixtures}/conf_fixture.py | 0 .../{fixtures => local_fixtures}/fake_policy.py | 4 + .../{fixtures => local_fixtures}/policy_fixture.py | 13 +- .../action_plan/test_default_action_handler.py | 221 +- .../actions/test_change_node_power_state.py | 88 +- .../actions/test_change_nova_service_state.py | 98 +- .../unit/applier/actions/test_volume_migration.py | 271 +- .../messaging/test_trigger_action_plan_endpoint.py | 14 +- .../test_default_workflow_engine.py | 505 ++-- .../test_taskflow_action_container.py | 357 ++- .../unit/db/test_deadlock_decorator_validation.py | 43 +- .../decision_engine/audit/test_audit_handlers.py | 470 ++-- .../decision_engine/cluster/test_cinder_cdmc.py | 171 +- .../cluster/test_cluster_data_model_collector.py | 89 +- .../unit/decision_engine/cluster/test_nova_cdmc.py | 605 +++-- .../datasources/grafana_translators/test_base.py | 41 +- .../grafana_translators/test_influxdb.py | 63 +- .../datasources/test_aetos_helper.py | 21 +- .../unit/decision_engine/datasources/test_base.py | 144 +- .../unit/decision_engine/datasources/test_cache.py | 182 ++ .../datasources/test_gnocchi_helper.py | 93 +- .../datasources/test_grafana_helper.py | 225 +- .../decision_engine/datasources/test_manager.py | 50 +- .../datasources/test_prometheus_base.py | 712 ++++-- .../datasources/test_prometheus_helper.py | 37 +- .../unit/decision_engine/fake_metal_helper.py | 19 +- .../loading/test_collector_loader.py | 36 +- .../loading/test_default_strategy_loader.py | 42 +- .../decision_engine/loading/test_goal_loader.py | 29 +- .../messaging/test_audit_endpoint.py | 18 +- .../messaging/test_data_model_endpoint.py | 8 +- .../unit/decision_engine/model/data/scenario_1.xml | 70 +- .../model/data/scenario_2_with_metrics.xml | 20 +- .../model/data/scenario_3_with_metrics.xml | 12 +- .../model/data/storage_scenario_1.xml | 18 +- .../model/faker_cluster_and_metrics.py | 59 +- .../decision_engine/model/faker_cluster_state.py | 108 +- .../unit/decision_engine/model/gnocchi_metrics.py | 40 +- .../model/notification/data/instance-update.json | 3 +- .../data/scenario_1_bootable-volume-create.json | 4 +- .../data/scenario_1_error-volume-create.json | 4 +- .../data/scenario_1_volume-attach.json | 4 +- .../data/scenario_1_volume-create.json | 4 +- .../scenario_1_volume-create_pool_notfound.json | 4 +- .../data/scenario_1_volume-delete.json | 4 +- .../data/scenario_1_volume-detach.json | 4 +- .../data/scenario_1_volume-resize.json | 4 +- .../data/scenario_1_volume-update.json | 4 +- .../model/notification/fake_managers.py | 6 +- .../notification/test_cinder_notifications.py | 236 +- .../model/notification/test_notifications.py | 14 +- .../model/notification/test_nova_notifications.py | 381 ++- .../unit/decision_engine/model/test_element.py | 332 ++- .../planner/test_node_resource_consolidation.py | 220 +- .../planner/test_planner_manager.py | 5 +- .../decision_engine/planner/test_weight_planner.py | 1524 +++++++---- .../planner/test_workload_stabilization_planner.py | 304 ++- .../unit/decision_engine/scope/fake_scopes.py | 104 +- .../unit/decision_engine/scope/test_baremetal.py | 34 +- .../unit/decision_engine/scope/test_compute.py | 278 +- .../unit/decision_engine/scope/test_storage.py | 214 +- .../decision_engine/scoring/test_dummy_scorer.py | 6 +- .../scoring/test_dummy_scoring_container.py | 7 +- .../scoring/test_scoring_factory.py | 14 +- .../solution/test_default_solution.py | 48 +- .../strategy/context/test_strategy_context.py | 64 +- .../strategy/selector/test_strategy_selector.py | 20 +- .../strategy/strategies/test_actuator.py | 9 +- .../strategy/strategies/test_base.py | 58 +- .../strategies/test_basic_consolidation.py | 137 +- .../strategy/strategies/test_dummy_strategy.py | 6 +- .../strategy/strategies/test_dummy_with_scorer.py | 6 +- .../strategy/strategies/test_host_maintenance.py | 516 ++-- .../strategies/test_node_resource_consolidation.py | 372 +-- .../strategy/strategies/test_noisy_neighbor.py | 66 +- .../strategies/test_outlet_temp_control.py | 73 +- .../strategy/strategies/test_saving_energy.py | 55 +- .../strategies/test_storage_capacity_balance.py | 264 +- .../strategy/strategies/test_strategy_endpoint.py | 47 +- .../strategy/strategies/test_uniform_airflow.py | 97 +- .../strategies/test_vm_workload_consolidation.py | 602 ++++- .../strategy/strategies/test_workload_balance.py | 177 +- .../strategies/test_workload_stabilization.py | 381 ++- .../strategy/strategies/test_zone_migration.py | 2690 ++++++++++---------- .../unit/decision_engine/test_service_monitor.py | 361 +-- .../unit/notifications/test_action_notification.py | 296 ++- .../notifications/test_action_plan_notification.py | 284 ++- .../unit/notifications/test_audit_notification.py | 221 +- .../notifications/test_service_notifications.py | 53 +- watcher/version.py | 1 + watcher/wsgi/api.py | 4 + 525 files changed, 39489 insertions(+), 19505 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index cdf8c179..6ef2009e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -15 +14,0 @@ oslo.concurrency>=3.26.0 # Apache-2.0 -oslo.cache>=1.29.0 # Apache-2.0 @@ -29 +28 @@ oslo.utils>=7.0.0 # Apache-2.0 -oslo.versionedobjects>=1.32.0 # Apache-2.0 +oslo.versionedobjects>=3.10.0 # Apache-2.0 @@ -36,2 +34,0 @@ openstacksdk>=4.4.0 # Apache-2.0 -python-cinderclient>=3.5.0 # Apache-2.0 -python-keystoneclient>=3.15.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index f668bcc0..4425d73e 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -3,0 +4 @@ freezegun>=0.3.10 # Apache-2.0 +gabbi>=2.10.0 # Apache-2.0 @@ -8,0 +10,2 @@ WebTest>=2.0.27 # MIT +Werkzeug>=3.0.0 # BSD License +wsgi-intercept>=1.2.2 # MIT

1 0

tacker 16.0.0 (hibiscus)
by no-reply＠openstack.org 30 Sep '26

30 Sep '26

We are amped to announce the release of: tacker 16.0.0 This release is part of the hibiscus release series. The source is available from: https://opendev.org/openstack/tacker Download the package from: https://tarballs.openstack.org/tacker/ Please report issues through: https://bugs.launchpad.net/tacker/+bugs For more details, please see below. Changes in tacker 15.0.0..16.0.0 -------------------------------- a337c240 Add disk usage threshold check for CSAR package extraction 2818812b Validate VNF package artifact Source paths to prevent traversal 3e621d87 Delete eventlet URL from Tacker documents 6825bce1 Move the fake prometheus image off Debian bullseye 2315a0de Remove unused eventlet code 5c7f6552 Fix typo b3af78ed Save VNF instance before scale is marked as COMPLETED 9db0a067 Detect FAILED_TEMP/FAILED early 71ce55e5 Fix all-in-one Kubernetes VIM installation f86f86bb Fix certificates of the fake https server 9b74b878 Remove dead eventlet.Timeout testcase capture a1c63555 Fix pod naming rule match in Helm infra driver b074bf97 Replace eventlet green subprocess with stdlib 6e8722dd Use Zuul-provided upper-constraints in functional tests b9fca01c Wait for the lcm_op_occ of the requested operation 4159d903 Stop useless passing preexec_fn to Popen 99ff055b Updated unmaintained samples codes failed to run a0357538 Reuse the key manager API to get VIM credentials d7d54b00 tacker-conductor with oslo.service threading 628a2408 Replace eventlet with stdlib equivalents 4efa07e1 Make is_url() a check without network access 29c17351 Replace deprecated exception_to_unicode 30c48b86 Remove runtime eventlet.monkey_patch() calls 51d66579 Fix unittests depending on external network access 04d16910 Remove enforce_scope override in tests d58e2f00 Fix oslo_policy cross-references 93bc2784 Refactor access to hash object 1b51a552 Fix ResourceWarning by closing files b6666a8a Use context manager to handle zip file 997b2265 Remove many useless warnings 87f02331 Enable SRBAC by default 6621b086 Fix Kubernetes VIM auth and dict type handling for kubernetes-client v36 a01b7f02 Fix Errors in v1 Compliance Test and Pin setuptools version 9b510d65 sqlalchemy: Use built-in declarative 1ad8bb80 Documentation improvements 3ed09517 Upgrade K8s Version and Fix CI failures e82cd56c Add periodic job to validate Tacker documentation links 07a01041 Openstack VIM Registration Fix Diffstat (except docs and test files) ------------------------------------- devstack/lib/tacker | 29 ++++ devstack/local.conf.example | 7 + devstack/local.conf.kubernetes | 28 ++- .../user/etsi_containerized_vnf_usage_guide.rst | 1 + .../user/v2/cnf/deployment_using_helm/index.rst | 1 + .../conf/Definitions/sample_vnfd_types.yaml | 1 + .../conf/sample_request_for_userdata.json | 2 +- .../Definitions/v2_sample5_types.yaml | 1 + .../Definitions/v2_sample3_types.yaml | 1 + playbooks/devstack/pre.yaml | 15 ++ pyproject.toml | 3 + ...scale-status-update-order-b05a2063ae322819.yaml | 12 ++ .../notes/reuse-keymgr-api-3a65c6e38369cffa.yaml | 13 ++ requirements.txt | 2 +- roles/restart-kubelet-service/tasks/main.yaml | 8 +- roles/setup-fake-https-server/tasks/main.yaml | 15 +- .../Definitions/sample_vnfd_types.yaml | 1 + .../Definitions/free5gc_types.yaml | 1 + .../sample_free5gc_cnf_on_vm_types.yaml | 1 + .../Definitions/free5gc_types.yaml | 1 + .../Definitions/sample_free5gc_types.yaml | 1 + .../Definitions/sample_free5gc_types.yaml | 1 + .../Definitions/sample_free5gc_types.yaml | 1 + .../Definitions/sample_free5gc_types.yaml | 1 + .../Definitions/sample_free5gc_types.yaml | 1 + samples/mgmt_driver/ansible/ansible.py | 11 +- .../container_update/container_update_mgmt.py | 7 +- .../Definitions/sample_kubernetes_types.yaml | 1 + .../Definitions/helloworld3_types.yaml | 1 + .../Definitions/sample_kubernetes_types.yaml | 1 + .../Definitions/sample_kubernetes_types.yaml | 1 + .../UserData/Definitions/helloworld3_types.yaml | 1 + .../UserData/Definitions/helloworld3_types.yaml | 1 + .../TOSCA-Metadata/TOSCA.meta | 2 +- .../TOSCA-Metadata/TOSCA.meta | 2 +- .../Definitions/sample_vnfd_types.yaml | 1 + .../tacker-monitoring-test/Dockerfile | 2 +- .../Definitions/v2_sample3_types.yaml | 1 + setup.cfg | 2 +- tacker/agent/linux/utils.py | 99 ----------- tacker/api/views/vnf_lcm.py | 35 ++++ tacker/api/views/vnf_packages.py | 8 + tacker/api/vnflcm/v1/controller.py | 13 +- tacker/api/vnfpkgm/v1/controller.py | 5 +- tacker/cmd/{eventlet => }/conductor.py | 15 +- tacker/common/clients.py | 3 +- tacker/common/container/kubernetes_utils.py | 10 +- tacker/common/csar_utils.py | 122 +++++++++++-- tacker/common/rpc.py | 5 +- tacker/common/utils.py | 51 ++---- tacker/conductor/conductor_server.py | 14 +- tacker/conf/vnf_package.py | 19 ++ tacker/context.py | 1 + .../alembic_migrations/versions}/__init__.py | 0 tacker/db/model_base.py | 5 +- tacker/glance_store/store.py | 7 +- tacker/nfvo/drivers/vim/openstack_driver.py | 6 +- tacker/nfvo/nfvo_plugin.py | 2 - tacker/objects/vnf_instance.py | 31 +++- tacker/policy.py | 10 -- tacker/{agent/linux => releasenotes}/__init__.py | 0 .../unit/agent => releasenotes/notes}/__init__.py | 0 .../agent/linux => sol_refactored}/__init__.py | 0 tacker/sol_refactored/api/__init__.py | 0 tacker/sol_refactored/api/policies/__init__.py | 0 tacker/sol_refactored/common/__init__.py | 0 .../sol_refactored/common/common_script_utils.py | 2 +- tacker/sol_refactored/conductor/conductor_v2.py | 3 +- .../conductor/server_notification_driver.py | 3 +- tacker/sol_refactored/infra_drivers/__init__.py | 0 .../infra_drivers/kubernetes/__init__.py | 0 .../infra_drivers/kubernetes/helm.py | 2 +- .../infra_drivers/kubernetes/kubernetes_common.py | 2 +- .../infra_drivers/kubernetes/kubernetes_utils.py | 10 +- .../infra_drivers/openstack/__init__.py | 0 .../infra_drivers/openstack/openstack.py | 4 +- .../infra_drivers/openstack/userdata_standard.py | 36 ++-- .../infra_drivers/openstack/userdata_utils.py | 3 +- .../infra_drivers/terraform/__init__.py | 0 tacker/sol_refactored/mgmt_drivers/__init__.py | 0 tacker/sol_refactored/nfvo/__init__.py | 0 tacker/sol_refactored/objects/common/__init__.py | 0 tacker/sol_refactored/objects/v1/__init__.py | 0 tacker/sol_refactored/objects/v2/__init__.py | 0 .../objects/v2/pkgm_notification_filter.py | 4 +- .../unit/common/container/test_kubernetes_utils.py | 16 +- .../unit/nfvo/drivers/vim/test_openstack_driver.py | 23 ++- .../infra_drivers/kubernetes/test_helm.py | 36 ++++ .../mgmt_drivers/test_container_update_mgmt.py | 10 +- .../kubernetes/kubernetes_api_resource/__init__.py | 0 .../kubernetes/test_kubernetes_driver_helm.py | 20 +-- .../vnfm/infra_drivers/openstack/data/__init__.py | 0 .../openstack/data/etsi_nfv/__init__.py | 0 .../openstack/data/etsi_nfv/hot/__init__.py | 0 .../data/etsi_nfv/hot/scaling/__init__.py | 0 .../infra_drivers/openstack/fixture_data/client.py | 3 +- .../openstack/test_openstack_driver.py | 8 + tacker/vnflcm/vnflcm_driver.py | 50 +++--- .../infra_drivers/kubernetes/helm/helm_client.py | 21 ++- .../kubernetes/k8s/translate_outputs.py | 2 +- .../infra_drivers/kubernetes/kubernetes_driver.py | 5 +- tacker/vnfm/infra_drivers/openstack/openstack.py | 37 ++-- tacker/vnfm/vim_client.py | 24 ++- tools/link_validate.py | 193 +++++++++++++++++++++ tools/link_validate_config.conf | 10 ++ tox.ini | 17 ++ zuul.d/jobs/base.yaml | 18 +- zuul.d/jobs/doc_validator.yaml | 10 ++ zuul.d/project.yaml | 1 + 141 files changed, 1332 insertions(+), 696 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index bc3697cf..3d40d11c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -33 +33 @@ oslo.serialization!=2.19.1,>=2.18.0 # Apache-2.0 -oslo.service>=2.5.0 # Apache-2.0 +oslo.service[threading]>=4.6.0 # Apache-2.0

1 0

tap-as-a-service 18.0.0 (hibiscus)
by no-reply＠openstack.org 30 Sep '26

30 Sep '26

We exuberantly announce the release of: tap-as-a-service 18.0.0 This release is part of the hibiscus release series. The source is available from: https://opendev.org/openstack/tap-as-a-service Download the package from: https://pypi.org/project/tap-as-a-service Please report issues through: https://bugs.launchpad.net/tap-as-a-service/+bugs For more details, please see below. Changes in tap-as-a-service 17.0.0..18.0.0 ------------------------------------------ 9cb269a tox: Fix incomplete [flake8] enable-extensions b4ca31a Bump hacking c4af877 Enable hacking plugins from neutron-lib 8e26c10 Use policy check strings from neutron-lib afecf12 Periodic: remove py310 job 695d053 Reqs: Add dependent libs to requirements.txt 67569c7 Fix periodic_tasks signature in TaasAgentRpcCallback 2ad7edd Replace deprecated openstackdocstheme options f7b9935 Change the signature of ``lsp_detach_mirror`` 4dcea77 Update master for stable/2026.1 Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 10 ++-- .zuul.yaml | 2 +- neutron_taas/policies/tap_flow.py | 13 +++-- neutron_taas/policies/tap_mirror.py | 11 ++--- neutron_taas/policies/tap_service.py | 13 +++-- .../services/taas/agents/common/taas_agent.py | 22 ++++----- .../services/taas/service_drivers/ovn/helper.py | 15 ++++-- .../unit/services/taas/agents/test_taas_agent.py | 56 ++++++++++++++++++++++ releasenotes/source/2026.1.rst | 6 +++ releasenotes/source/index.rst | 1 + requirements.txt | 19 +++++++- test-requirements.txt | 2 +- tox.ini | 16 ++----- 15 files changed, 135 insertions(+), 57 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 082967b..e34f625 100644 --- a/requirements.txt +++ b/requirements.txt @@ -0,0 +1 @@ +alembic>=1.6.5 # MIT @@ -3 +4,17 @@ neutron>=16.0.0.0b1 # Apache-2.0 -neutron-lib>=2.11.0 # Apache-2.0 +neutron-lib>=4.0.0 # Apache-2.0 +oslo.config>=10.2.0 # Apache-2.0 +oslo.db>=4.44.0 # Apache-2.0 +oslo.i18n>=3.20.0 # Apache-2.0 +oslo.log>=5.3.0 # Apache-2.0 +oslo.messaging>=7.0.0 # Apache-2.0 +oslo.policy>=5.0.0 # Apache-2.0 +oslo.serialization>=5.5.0 # Apache-2.0 +oslo.service>=4.2.1 # Apache-2.0 +oslo.utils>=7.3.0 # Apache-2.0 +ovsdbapp>=2.17.0 # Apache-2.0 +ovs>3.3.0 # Apache-2.0 +SQLAlchemy>=1.4.23 # MIT +tenacity>=6.0.0 # Apache-2.0 + +# Due to transitive dependency handling issues on py313 +pyroute2>=0.7.3;sys_platform!='win32' # Apache-2.0 (+ dual licensed GPL2) diff --git a/test-requirements.txt b/test-requirements.txt index c0d5dc6..a393f45 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1 +1 @@ -hacking>=6.1.0,<6.2.0 # Apache-2.0 +hacking>=8.1.0,<8.2.0 # Apache-2.0

1 0

placement 16.0.0 (hibiscus)
by no-reply＠openstack.org 30 Sep '26

30 Sep '26

We are tickled pink to announce the release of: placement 16.0.0 This release is part of the hibiscus release series. The source is available from: https://opendev.org/openstack/placement Download the package from: https://pypi.org/project/placement Please report issues through: https://storyboard.openstack.org/#!/project/openstack/placement For more details, please see below. Changes in placement 15.0.0..16.0.0 ----------------------------------- 109ea4af tox: Use constraints option 01ac96d9 [pyproject] Update setuptools config 7d35f974 bump min version of os-traits 3457ecd6 Check overall capacity before generating candidates f97c829c Reproduce bug 2160721 10c4d910 tests: Support file-backed SQLite URL in placement fixtures a9635812 Drop reference to lower-constraints.txt 063aa002 Remove disabling the scope enforecment d1ad2c6e Update policy scope enforcement testing 1c59ef12 Update python versions 1e0f178f fix small typo d2727844 Ubuntu: Use systemctl to restart services e3db398f Update master for stable/2026.1 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 8 +- placement/deploy.py | 7 -- placement/objects/allocation_candidate.py | 125 ++++++++++++++++----- placement/objects/research_context.py | 3 + .../functional/gabbits/aggregate-legacy-rbac.yaml | 19 +++- .../gabbits/allocation-candidates-legacy-rbac.yaml | 4 +- .../gabbits/allocations-legacy-rbac.yaml | 48 ++++++-- .../functional/gabbits/inventory-legacy-rbac.yaml | 36 +++--- .../gabbits/resource-provider-legacy-rbac.yaml | 27 ++--- .../unit/objects/test_allocation_candidate.py | 67 +++++++++++ pyproject.toml | 12 +- ...ymmetric-tree-performance-1c34375ee02a111c.yaml | 9 ++ .../notes/drop-python-3-10-be063878f26fe3a7.yaml | 5 + ...ng-rbac-scope-enforcement-4827620a50299038.yaml | 10 ++ releasenotes/source/2026.1.rst | 6 + releasenotes/source/index.rst | 1 + requirements.txt | 5 +- tox.ini | 8 +- 24 files changed, 394 insertions(+), 128 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 5932e743..e702b159 100644 --- a/requirements.txt +++ b/requirements.txt @@ -19 +19 @@ oslo.db>=8.6.0 # Apache-2.0 -oslo.policy>=4.4.0 # Apache-2.0 +oslo.policy>=6.0.0 # Apache-2.0 @@ -22 +21,0 @@ oslo.upgradecheck>=1.3.0 # Apache-2.0 -# NOTE(efried): Sync lower-constraints.txt for os-traits & os-resource-classes. @@ -24 +23 @@ os-resource-classes>=1.1.0 # Apache-2.0 -os-traits>=3.3.0 # Apache-2.0 +os-traits>=3.9.0 # Apache-2.0

1 0

octavia 19.0.0 (hibiscus)
by no-reply＠openstack.org 30 Sep '26

30 Sep '26

We jubilantly announce the release of: octavia 19.0.0 This release is part of the hibiscus release series. The source is available from: https://opendev.org/openstack/octavia Download the package from: https://pypi.org/project/octavia Please report issues through: https://storyboard.openstack.org/#!/project/908 For more details, please see below. Changes in octavia 18.0.0..19.0.0 --------------------------------- d218de4fb Fix typo 57cb6f3aa Fix member port plugged on the wrong subnet ea4e23403 Remove DIB_PIP_RETRIES=0 when using CI mirror e3613a16d Avoid leaking neutron client sockets ae8013eed Fix typo 2d01e3f57 Remove legacy Upstart configuration 0ab901945 Replace deprecated ssl_version with ssl_minimum_version d691a2eee Fix cipher configuration for TLSv1.3 21d705ef0 Disable pypi when using local mirrors 78b619c1e Fix devstack unstack fail when Redis/Valkey not installed 8c0248ad0 Fix HAProxy config with cpu-map and external-check ab44d6195 Use CI mirrors for amphora image build jobs 6ff1a3fd5 Fix VRRP and HAProxy peer ports open to 0.0.0.0/0 63d0aa03f api-ref: Update docs on tag filters bad707462 Fix HAProxy config injection via L7 policy redirect URLs cad62902e Fix HAProxy config injection via tls_ciphers field a5be67953 Limit periodic FIPS job to traffic-ops tests 6e1b033e8 Use native architecture when building Amphora images 76bafcd33 Disable grenade skip level job for 2026.2 aef456859 Fix QoS policy validation to use request context 04d4817c2 Fix multiprocessing for Python 3.14 d6745a8bf Add ARM64 as an accepted architecture for amphora image builds 397ba5389 Fix VRRP split-brain on amphora failover in ACTIVE_STANDBY 60b2f51e4 Use issuer SKI for amphora certificate AKI 78d38afc1 Remove setting of oslo_policy[enforce_scope] flag ee5dc8f33 Fix ZooKeeper session churn in ZookeeperTaskFlowDriver e84556244 Mask sensitive keys in taskflow logging 05d3b16da Fix octavia-worker multiprocessing for Python 3.14 2a9a9530e Bump hacking and pyupgrade for Python 3.14 d3c5b615c Remove unused [DEFAULT] octavia_plugins 32cc97f9b devstack: Remove unused token 2fc2c0abe Remove py310 jobs 53005c93d Fix allocation of interfaces to netns on reboot a8a794275 Feature: allow denylist of network_ids 2865c1a44 Drop Python 3.10 7282b6735 Migrate setup configuration to pyproject.toml 54a267f7e Add check for Octavia Healthmonitor network before deleting 1ec112ce1 API data mapping performance enhancements c86b945c2 Add SKI and AKI extensions to amphora certificates 30534f3d8 Drop redundant direct dependency on Pygments 79cf1f787 Update master for stable/2026.1 8596af10b Rework unit test for get_subnet failure 9052b4e72 Catch SubnetNotFound from network driver cacd6b56a Test LB API giving HTTP 500 when get_subnet fails d17be7daa devstack: install/uninstall redis - remove code for SUSE 36cbca3b1 [Worker]: use retries from conf for tasflow persistence ac6e84302 Stop explicitly adding None as a choice a054a9155 Align signature of AbstractNetworkDriver.update_vip method Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 4 +- api-ref/source/parameters.yaml | 4 +- api-ref/source/v2/general.inc | 4 +- devstack/plugin.sh | 24 +- diskimage-create/README.rst | 4 +- diskimage-create/diskimage-create.sh | 14 +- diskimage-create/test-requirements.txt | 1 - .../root.d/10-allow-insecure-apt | 11 + .../amphora-agent.conf | 18 - .../amphora-agent.init | 67 -- .../prometheus-proxy.conf | 19 - .../prometheus-proxy.init | 65 -- .../backends/agent/api_server/loadbalancer.py | 2 +- .../api_server/templates/amphora-netns.systemd.j2 | 2 +- octavia/amphorae/drivers/driver_base.py | 11 + .../amphorae/drivers/haproxy/rest_api_driver.py | 2 +- .../drivers/keepalived/vrrp_rest_driver.py | 18 +- octavia/amphorae/drivers/noop_driver/driver.py | 3 + octavia/api/common/pagination.py | 4 +- octavia/api/common/types.py | 95 +-- octavia/api/v2/controllers/amphora.py | 78 ++- .../v2/controllers/availability_zone_profiles.py | 122 ++-- octavia/api/v2/controllers/availability_zones.py | 68 +- octavia/api/v2/controllers/base.py | 83 +-- octavia/api/v2/controllers/flavor_profiles.py | 102 +-- octavia/api/v2/controllers/flavors.py | 35 +- octavia/api/v2/controllers/health_monitor.py | 131 ++-- octavia/api/v2/controllers/l7policy.py | 140 ++-- octavia/api/v2/controllers/l7rule.py | 98 +-- octavia/api/v2/controllers/listener.py | 138 ++-- octavia/api/v2/controllers/load_balancer.py | 244 ++++--- octavia/api/v2/controllers/member.py | 143 ++-- octavia/api/v2/controllers/pool.py | 166 +++-- octavia/api/v2/controllers/quotas.py | 69 +- octavia/api/v2/types/amphora.py | 9 +- octavia/api/v2/types/availability_zone_profile.py | 8 +- octavia/api/v2/types/availability_zones.py | 8 +- octavia/api/v2/types/flavor_profile.py | 8 +- octavia/api/v2/types/flavors.py | 8 +- octavia/api/v2/types/health_monitor.py | 23 +- octavia/api/v2/types/l7policy.py | 34 +- octavia/api/v2/types/l7rule.py | 8 +- octavia/api/v2/types/listener.py | 93 ++- octavia/api/v2/types/load_balancer.py | 106 +-- octavia/api/v2/types/member.py | 21 +- octavia/api/v2/types/pool.py | 126 ++-- octavia/api/v2/types/quotas.py | 100 ++- octavia/certificates/generator/local.py | 23 + octavia/cmd/agent.py | 6 +- octavia/cmd/driver_agent.py | 15 +- octavia/cmd/health_manager.py | 18 +- octavia/cmd/octavia_worker.py | 8 +- octavia/common/base_taskflow.py | 10 +- octavia/common/clients.py | 4 +- octavia/common/config.py | 21 +- octavia/common/constants.py | 19 +- octavia/common/data_models.py | 10 +- .../jinja/haproxy/combined_listeners/jinja_cfg.py | 64 +- .../haproxy/combined_listeners/templates/base.j2 | 4 +- .../haproxy/combined_listeners/templates/macros.j2 | 28 +- octavia/common/validate.py | 38 +- octavia/controller/queue/v2/consumer.py | 7 +- octavia/controller/worker/v2/controller_worker.py | 14 +- .../worker/v2/taskflow_jobboard_driver.py | 61 +- .../worker/v2/tasks/amphora_driver_tasks.py | 17 + .../controller/worker/v2/tasks/network_tasks.py | 4 +- octavia/db/base_models.py | 43 +- octavia/db/models.py | 2 +- octavia/db/repositories.py | 178 +++-- octavia/network/base.py | 2 +- .../drivers/neutron/allowed_address_pairs.py | 111 +++- octavia/network/drivers/neutron/base.py | 16 +- octavia/network/drivers/noop_driver/driver.py | 6 +- .../backends/agent/api_server/test_loadbalancer.py | 2 +- .../drivers/haproxy/test_rest_api_driver.py | 25 + .../drivers/keepalived/test_vrrp_rest_driver.py | 15 +- .../unit/certificates/generator/test_local.py | 84 ++- .../haproxy/combined_listeners/test_jinja_cfg.py | 285 +++++++- .../unit/controller/queue/v2/test_consumer.py | 19 + .../unit/controller/queue/v2/test_endpoints.py | 5 - .../worker/v2/tasks/test_amphora_driver_tasks.py | 38 ++ .../worker/v2/tasks/test_network_tasks.py | 5 + .../worker/v2/tasks/test_notification_tasks.py | 3 - .../controller/worker/v2/test_controller_worker.py | 37 ++ .../worker/v2/test_taskflow_jobboard_driver.py | 155 ++++- .../drivers/neutron/test_allowed_address_pairs.py | 737 ++++++++++++++++++++- .../unit/network/drivers/neutron/test_base.py | 12 +- playbooks/image-build/run.yaml | 46 ++ pyproject.toml | 145 ++++ ...rm64-amphora-architecture-9f8b110b49e09853.yaml | 6 + ...apping-performance-optimization-9f3a2c7b8d.yaml | 8 + ...ubnet-validation-http-500-c1aa185dafef36bf.yaml | 6 + .../notes/drop-python-3-10-7cc1a2c06f340f62.yaml | 5 + ...mphora-cert-issuer-key-id-864bf46d8c4b9a45.yaml | 9 + ...t-missing-key-identifiers-a9980c63ce1d414c.yaml | 14 + .../fix-api-socket-leak-105e9f007eed797b.yaml | 6 + ...ix-cpu-map-external-check-newline-b2162906.yaml | 7 + ...ix-deprecated-ssl-version-5a336c85162f448c.yaml | 7 + ...e-names-on-amphora-reboot-6706e305044c5ebc.yaml | 6 + .../fix-member-port-subnet-9c0813ba16114533.yaml | 8 + ...sing-when-running-unstack-e47f50516fdfffc9.yaml | 5 + ...-peer-port-security-issue-a4654dbadb942225.yaml | 21 + ...ultiprocessing-forkserver-1e71ec5bdced78bf.yaml | 11 + ...essing-forkserver-daemons-9f3c1d2e5a6b7c8d.yaml | 11 + .../fix-qos-policy-context-baa964df88ba4645.yaml | 8 + ...-haproxy-config-injection-b2c3d4e5f6a7b8c9.yaml | 12 + ...abase-max_retries--option-2afc0a568353510a.yaml | 5 + ...-haproxy-config-injection-a1b2c3d4e5f6a7b8.yaml | 11 + ...x-tlsv1.3-cipher-handling-16dbc339e10d775c.yaml | 10 + ...p-split-brain-on-failover-8a95147ebc351de5.yaml | 9 + ...x-zookeeper-session-churn-51245a1f9a6c3702.yaml | 9 + ...ensitive-keys-in-taskflow-e9fac451506db8d4.yaml | 9 + .../notes/network-deny-list-1fae961662bfce67.yaml | 7 + .../remove-octavia_plugins-5ce6b0692c8e29bf.yaml | 5 + ...tive-amphora-architecture-baf2da83d2cc8cfe.yaml | 4 + releasenotes/source/2026.1.rst | 6 + releasenotes/source/index.rst | 1 + requirements.txt | 2 +- setup.cfg | 120 ---- test-requirements.txt | 3 +- zuul.d/jobs.yaml | 8 +- zuul.d/projects.yaml | 16 +- 134 files changed, 4335 insertions(+), 1921 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index f507994c8..d31ba0632 100644 --- a/requirements.txt +++ b/requirements.txt @@ -40 +40 @@ Jinja2>=2.10 # BSD License (3 clause) -taskflow!=6.0.0,>=5.9.0 # Apache-2.0 +taskflow>=6.2.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 33c251d8d..5c6f899b4 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1 +1,2 @@ -hacking>=6.1.0,<6.2.0 # Apache-2.0 +hacking>=8.1.0,<8.2.0 # Apache-2.0 +kazoo>=2.6 # Apache-2.0

1 0

heat-dashboard 16.0.0 (hibiscus)
by no-reply＠openstack.org 30 Sep '26

30 Sep '26

We are stoked to announce the release of: heat-dashboard 16.0.0 This release is part of the hibiscus release series. The source is available from: https://opendev.org/openstack/heat-dashboard Download the package from: https://tarballs.openstack.org/heat-dashboard/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/heat- dashboard For more details, please see below. 16.0.0 ^^^^^^ Bug Fixes * Fixed a bug where the Template Generator panel failed with an opaque "Cannot get openstack resources" HTTP 500 error, with no indication of the actual underlying cause shown to the user. Changes in heat-dashboard 15.0.0..16.0.0 ---------------------------------------- a6e9b71 Fix Python 3 AttributeError masking in Template Generator 72643c5 Update TOX_CONSTRAINTS_FILE for stable/2026.2 0d9fc0f Update .gitreview for stable/2026.2 7f05c4e Do not install code to build docs 3142af8 Imported Translations from Zanata c392231 Remove test data for neutronclient 7c2e0e2 Remove neutronclient leftovers 7910c24 Imported Translations from Zanata 597c9c0 pre-commit: Bump versions ff2b994 Remove Python 3.10 support 8f4f412 Drop workaround for old devstack 894763b Update Babel configuration 1799e9f Imported Translations from Zanata bef1931 tox: Use new constraints option 825ef02 Update master for stable/2026.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .pre-commit-config.yaml | 2 +- babel-django.cfg | 2 ++ babel-djangojs.cfg | 2 ++ devstack/plugin.sh | 8 ------ heat_dashboard/content/template_generator/api.py | 6 ++--- heat_dashboard/test/helpers.py | 7 ------ heat_dashboard/test/test_data/neutron_data.py | 26 ++++++------------- heat_dashboard/test/test_data/nova_data.py | 24 +++++++++--------- ...-generator-python3-errors-7a99f111f62fedb4.yaml | 6 +++++ .../notes/remove-py310-da55b61770d04013.yaml | 5 ++++ releasenotes/source/2026.1.rst | 6 +++++ releasenotes/source/index.rst | 1 + .../source/locale/cs/LC_MESSAGES/releasenotes.po | 18 -------------- .../locale/en_GB/LC_MESSAGES/releasenotes.po | 17 +++++++++++-- .../source/locale/es/LC_MESSAGES/releasenotes.po | 21 ---------------- .../source/locale/fr/LC_MESSAGES/releasenotes.po | 22 ---------------- .../source/locale/ru/LC_MESSAGES/releasenotes.po | 11 ++++++-- requirements.txt | 2 +- setup.cfg | 5 ++-- tox.ini | 29 ++++++++++++++-------- 22 files changed, 96 insertions(+), 130 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 5c3715d..a07a9c9 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10 +10 @@ python-heatclient>=1.10.0 # Apache-2.0 -horizon>=25.0.0 # Apache-2.0 +horizon>=27.0.0 # Apache-2.0

1 0