- Release-announce - lists.openstack.org

designate-dashboard 21.0.0.0rc1 (flamingo)
by no-reply＠openstack.org 11 Sep '25

11 Sep '25

Hello everyone, A new release candidate for designate-dashboard for the end of the Flamingo cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/designate-dashboard/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Flamingo release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/flamingo release branch at: https://opendev.org/openstack/designate-dashboard/src/branch/stable/flamingo Release notes for designate-dashboard can be found at: https://docs.openstack.org/releasenotes/designate-dashboard/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/designate-dashboard/+bugs and tag it *flamingo-rc-potential* to bring it to the designate-dashboard release crew's attention.

1 0

kolla 19.6.0 (dalmatian)
by no-reply＠openstack.org 11 Sep '25

11 Sep '25

We are gleeful to announce the release of: kolla 19.6.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 19.6.0 ^^^^^^ Upgrade Notes ************* * Debian container image builds now use bookworm suite for RabbitMQ installation. * Switches Erlang RPMs on aarch64 to a versioned Erlang 26 or 27 repository, due to Fedora COPR not supporting multiple package versions in one repo. Bug Fixes ********* * Ensures Kolla uses only configured APT mirror on Ubuntu for full source control. LP#2112140 * Fixed missing metrics in Prometheus libvirt exporter. The Prometheus libvirt exporter has been bumped from "v1.6.0" to "v2.2.0". This restores some metrics that were lost when the exporter source was changed in a previous release. LP#2120639. * Fix using Cinder as Glance image store when Cinder uses a FC or iSCSI backend by adding the missing "lsscsi" package to glance-api. LP#2111828 Changes in kolla 19.5.0..19.6.0 ------------------------------- e89e069ba debian: Use bookworkm suite for rabbitmq APT repo c91108a15 [stable] Use versioned Erlang 26 and 27 repo on aarch64 26ca75034 erlang: use proper distro for noble e6186aba0 docs: Update contributor guide ae74971a2 Enable Prometheus mtail build for ARM64 cb7389d98 Enable Barbican build on Ubuntu ARM64 ab3234bc2 Bump libvirt exporter 714ffc94d Revert "mariadb: pin to 10.11.13" 840a81219 CI: use opendevmirror for debian/ubuntu builds 1de59f3db change erlang arm64 repo to rhel based eb66bee24 mariadb: pin to 10.11.13 aa554d1e8 send empty X-Registry-Auth for anonymous pushes 1e7a12dc1 update debian release in support matrix 371aed3df Add rsync package to the nova-ssh container 68214645d Build RabbitMQ 4.1 in stable releases cae3cd619 [base] Ensure full control over APT sources for Ubuntu 2abe7b1d6 Fix glance-api: add missing lsscsi package 865314205 ovn: Fix log permissions 086376367 Enable EPEL repo for Ceph deps in glance and gnocchi Diffstat (except docs and test files) ------------------------------------- ...mq-erlang.repo => copr-rabbitmq-erlang-26.repo} | 10 ++--- .../kolla-toolbox/apt_preferences_rabbitmq.debian | 2 +- .../kolla-toolbox/apt_preferences_rabbitmq.ubuntu | 2 +- .../rabbitmq-4-1/apt_preferences_rabbitmq.debian | 7 ++++ .../rabbitmq-4-1/apt_preferences_rabbitmq.ubuntu | 7 ++++ .../rabbitmq-4-1/rabbitmq_packages_rpm.centos | 4 ++ .../rabbitmq-4-1/rabbitmq_packages_rpm.rocky | 4 ++ .../{ => rabbitmq}/apt_preferences_rabbitmq.debian | 4 +- .../{ => rabbitmq}/apt_preferences_rabbitmq.ubuntu | 4 +- .../rabbitmq/{ => rabbitmq}/healthcheck_rabbitmq | 0 .../rabbitmq/rabbitmq/rabbitmq_packages_rpm.centos | 4 ++ .../rabbitmq/rabbitmq/rabbitmq_packages_rpm.rocky | 4 ++ kolla/common/sources.py | 6 +-- kolla/image/tasks.py | 10 +++++ kolla/image/unbuildable.py | 2 - kolla/template/repos.yaml | 46 ++++++++++++++++------ .../notes/bug-2112140-41a1924c260e531c.yaml | 5 +++ .../notes/bug-2120639-74c180bd812ddcf7.yaml | 10 +++++ .../debian-rabbitmq-bookworm-34b2e5d9d43241da.yaml | 5 +++ ...rlang-aarch64-versioned-repos-9b1d2c8b8b7a.yaml | 5 +++ ...dd-missing-lsscsi-package-e6ae949eb8bdbe7b.yaml | 6 +++ 50 files changed, 208 insertions(+), 61 deletions(-)

1 0

kolla 20.2.0 (epoxy)
by no-reply＠openstack.org 11 Sep '25

11 Sep '25

We are psyched to announce the release of: kolla 20.2.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 20.2.0 ^^^^^^ Upgrade Notes ************* * Debian container image builds now use Epoxy (2025.1) repositories of Debian OpenStack. * Debian container image builds now use bookworm suite for RabbitMQ installation. * Switches Erlang RPMs on aarch64 to a versioned Erlang 26 or 27 repository, due to Fedora COPR not supporting multiple package versions in one repo. Bug Fixes ********* * Ensures Kolla uses only configured APT mirror on Ubuntu for full source control. LP#2112140 * Fixes set_configs.py not detecting removed config files during --check, which prevented container restart when needed. LP#2114173 * Fixed missing metrics in Prometheus libvirt exporter. The Prometheus libvirt exporter has been bumped from "v1.6.0" to "v2.2.0". This restores some metrics that were lost when the exporter source was changed in a previous release. LP#2120639. * Fix using Cinder as Glance image store when Cinder uses a FC or iSCSI backend by adding the missing "lsscsi" package to glance-api. LP#2111828 Changes in kolla 20.1.0..20.2.0 ------------------------------- a637db7b9 erlang: use proper distro for noble 688c3c7ed [stable] Use versioned Erlang 26 and 27 repo on aarch64 9db2666c3 Revert "mariadb: pin to 10.11.11" 45f08f577 docs: Update contributor guide 548addf09 Enable Prometheus mtail build for ARM64 eb723cd26 Influxdb: use stable RHEL repo 171f725a9 Enable Barbican build on Ubuntu ARM64 293ef73bd Bump libvirt exporter 08248b170 [stable-only] CI: Fix pep8 ansible-compat version 00ebf586e CI: use opendevmirror for debian/ubuntu builds b14d34b4b send empty X-Registry-Auth for anonymous pushes 02be21d47 debian: Use Epoxy extrepo ab955ac02 update debian release in support matrix c8f4ac4ec change erlang arm64 repo to rhel9 based 3488e01e3 [2025.1 only] switch rpm distros to Cloud SIG Epoxy repos 32201c261 CI: Bump ansible-lint to <26 a1ad96cb5 Fix kolla-set-configs --check to detect state mismatch 2ef5de4ca ovn: Fix log permissions a18d5dcd2 Enable EPEL repo for Ceph deps in glance and gnocchi 2bf7c1544 CI: add kolla-ansible zun job to tests 99b883769 zun: add wsgi script to use module paths f12fd3438 Fix glance-api: add missing lsscsi package af9f7cf13 Build RabbitMQ 4.1 in stable releases c44559759 debian: Use bookworkm suite for rabbitmq APT repo e19ff9ff9 [base] Ensure full control over APT sources for Ubuntu Diffstat (except docs and test files) ------------------------------------- .zuul.d/ubuntu.yaml | 2 + ...mq-erlang.repo => copr-rabbitmq-erlang-26.repo} | 10 ++-- .../kolla-toolbox/apt_preferences_rabbitmq.debian | 2 +- .../kolla-toolbox/apt_preferences_rabbitmq.ubuntu | 2 +- .../rabbitmq-4-1/apt_preferences_rabbitmq.debian | 7 +++ .../rabbitmq-4-1/apt_preferences_rabbitmq.ubuntu | 7 +++ .../rabbitmq-4-1/rabbitmq_packages_rpm.centos | 4 ++ .../rabbitmq-4-1/rabbitmq_packages_rpm.rocky | 4 ++ .../{ => rabbitmq}/apt_preferences_rabbitmq.debian | 4 +- .../{ => rabbitmq}/apt_preferences_rabbitmq.ubuntu | 4 +- .../rabbitmq/{ => rabbitmq}/healthcheck_rabbitmq | 0 .../rabbitmq/rabbitmq/rabbitmq_packages_rpm.centos | 4 ++ .../rabbitmq/rabbitmq/rabbitmq_packages_rpm.rocky | 4 ++ kolla/common/config.py | 6 +-- kolla/common/sources.py | 6 +-- kolla/image/tasks.py | 10 ++++ kolla/image/unbuildable.py | 3 -- kolla/template/repos.yaml | 54 +++++++++++++++------- .../notes/bug-2112140-41a1924c260e531c.yaml | 5 ++ .../notes/bug-2114173-70d0b815a42ae239.yaml | 6 +++ .../notes/bug-2120639-74c180bd812ddcf7.yaml | 10 ++++ .../notes/debian-epoxy-f68eb3e911f5fea3.yaml | 5 ++ .../debian-rabbitmq-bookworm-34b2e5d9d43241da.yaml | 5 ++ ...rlang-aarch64-versioned-repos-9b1d2c8b8b7a.yaml | 5 ++ ...dd-missing-lsscsi-package-e6ae949eb8bdbe7b.yaml | 6 +++ test-requirements.txt | 4 +- 65 files changed, 359 insertions(+), 96 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index e9fa093f7..25be6288e 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1 +1,3 @@ -ansible-lint<25 # MIT +ansible-core>=2.17,<2.19 ; python_version >= "3.10" # GPLv3 +ansible-compat<25.8 # MIT +ansible-lint<26 # MIT

1 0

neutron-fwaas 23.0.0.0rc1 (flamingo)
by no-reply＠openstack.org 11 Sep '25

11 Sep '25

Hello everyone, A new release candidate for neutron-fwaas for the end of the Flamingo cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/neutron-fwaas/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Flamingo release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/flamingo release branch at: https://opendev.org/openstack/neutron-fwaas/src/branch/stable/flamingo Release notes for neutron-fwaas can be found at: https://docs.openstack.org/releasenotes/neutron-fwaas/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/neutron/+bugs and tag it *flamingo-rc-potential* to bring it to the neutron-fwaas release crew's attention.

1 0

kolla-ansible 19.6.0 (dalmatian)
by no-reply＠openstack.org 11 Sep '25

11 Sep '25

We are tickled pink to announce the release of: kolla-ansible 19.6.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 19.6.0 ^^^^^^ Security Issues *************** * Deny access to /server-status via the single frontend. LP#2121626 Bug Fixes ********* * Fixes bug LP#2118452 which stopped the RabbitMQ upgrade from version 3.13 to 4.1 even though it is supported. * Fixes configuration of backend TLS when network nodes are separate from controllers. LP#2117084 * Fixes a bug where K-A can fail service deployment because it tries to copy backend TLS certificates of some hosts to containers when both hosts and containers are not part of backend TLS and do not have certificates to copy. LP#2105505 * Reduce the size of the fluentd buffers to avoid getting HTTP 413 errors when sending logs to opensearch/elasticsearch. The values chosen were based on what seemed a sensible size. These can be customised by editing the "fluentd_bulk_message_request_threshold" and "fluentd_buffer_chunk_limit_size" variables. LP#2079988 Changes in kolla-ansible 19.5.0..19.6.0 --------------------------------------- 9e35fc49a letsencrypt: add max_fail_percentage to site.yml 51de4f636 Deny access to `server-status` via `single frontend` 5e7315be4 Replace outdated core team list by Gerrit links f2e3b929e [CI] Use smaller flavor for CI 208310ee3 [CI] Create smaller flavor for CI 37c651547 [stable-only] neutron: Followup templating error 45640af80 mariabackup: Grant ALTER on mysql.mariadb_backup_history e5e9cd550 neutron: Template vpnaas config only when it is enabled d39efb7f4 CI: Use opendev docker registry mirror 1ba361e66 Tweak RabbitMQ version check to allow 3.13 to 4.1 e76872cba Add network group to tls-backend e94ad492d Fix unrestricted copying of backend TLS certs 87d386863 fluentd: Add ovn logs to input 30bdbe593 CI: Bump instance creation timeout to 5 minutes 91721234e Add size limits to Fluentd buffers f6e633246 Allow to override Cirros image URL for air-gapped environments 311338427 Add missing lock_path for ironic-inspector cd67fe089 Fix path to heat config-generator.conf c3e95fc97 Docs: update RabbitMQ HA instructions 853f7d661 Fix reference to generating a private CA Diffstat (except docs and test files) ------------------------------------- ansible/inventory/all-in-one | 1 + ansible/inventory/multinode | 1 + ansible/roles/common/defaults/main.yml | 12 ++++++ .../templates/conf/input/10-openvswitch.conf.j2 | 38 +++++++++++++++++ .../common/templates/conf/output/00-local.conf.j2 | 4 ++ .../common/templates/conf/output/01-es.conf.j2 | 2 + .../templates/conf/output/03-opensearch.conf.j2 | 2 + ansible/roles/heat/defaults/main.yml | 2 +- .../ironic/templates/ironic-inspector.conf.j2 | 5 +++ .../haproxy/haproxy_external_frontend.cfg.j2 | 1 + ansible/roles/mariadb/tasks/register.yml | 2 +- ansible/roles/neutron/tasks/config.yml | 1 + .../templates/neutron-l3-agent-wrapper.sh.j2 | 4 +- .../neutron/templates/neutron-l3-agent.json.j2 | 4 +- .../roles/neutron/templates/neutron-server.json.j2 | 4 +- .../roles/neutron/templates/neutron_vpnaas.conf.j2 | 2 - ansible/roles/rabbitmq/tasks/version-check.yml | 7 ++-- ansible/roles/service-cert-copy/tasks/main.yml | 2 + ansible/site.yml | 4 ++ ...llow-rabbitmq-3-13-to-4-1-8ae08d265c353301.yaml | 7 ++++ .../notes/bug-2117084-60fbff1b0616531d.yaml | 6 +++ ...tatus-via-single-frontend-33bbf3b9688a9ae4.yaml | 5 +++ ...ed-copying-of-backend-tls-2bade63581b84c80.yaml | 8 ++++ .../notes/fluentd-buffers-86acb335b1cf3126.yaml | 9 ++++ tools/init-runonce | 2 +- zuul.d/base.yaml | 2 + 35 files changed, 152 insertions(+), 73 deletions(-)

1 0

kolla-ansible 20.2.0 (epoxy)
by no-reply＠openstack.org 11 Sep '25

11 Sep '25

We jubilantly announce the release of: kolla-ansible 20.2.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 20.2.0 ^^^^^^ Upgrade Notes ************* * Deployments using a file-based external certificate and Let's Encrypt for the internal certificate (separate VIPs) default to managing the external certificate with Let's Encrypt. To retain a file-based external certificate, set "letsencrypt_external_cert_server: """. Security Issues *************** * Deny access to /server-status via the single frontend. LP#2121626 Bug Fixes ********* * Fixes bug LP#2118452 which stopped the RabbitMQ upgrade from version 3.13 to 4.1 even though it is supported. * In the kolla-toolbox configuration with external rabbitmq an unnecessary "comma" is generated, which is why the container does not want to start. LP#2111267 * Fixes configuration of backend TLS when network nodes are separate from controllers. LP#2117084 * Fixes a bug where Cinder endpoint that Nova uses does not get overridden because of the use of invalid option. LP#2115064 * Fixes the bug where Keystone become unable to start when the option "OIDCXForwardedHeaders" is set with empty string in "wsgi- keystone.conf". LP#2119344 * Fixes RabbitMQ version check which would always be skipped. LP#2102662 * Fixes a bug where K-A can fail service deployment because it tries to copy backend TLS certificates of some hosts to containers when both hosts and containers are not part of backend TLS and do not have certificates to copy. LP#2105505 * Prevents accidental "libvirt" downgrades in "nova_libvirt" container image during deploy and upgrade. Adds a "nova_libvirt" version check that resolves the target image digest once on the first compute host and runs only on hypervisors where the running container digest differs from the target. * Restore the default Let's Encrypt ACME server for external certificates so that enabling "enable_letsencrypt" works out of the box again without explicitly setting "letsencrypt_external_cert_server". The default is "https://acme-v02.api.letsencrypt.org/directory". Changes in kolla-ansible 20.1.0..20.2.0 --------------------------------------- a0e3fe617 letsencrypt: add max_fail_percentage to site.yml 33a9750bd Prevent accidental Libvirt downgrades 0cc30a2d1 CI: Rename nodesets to reflect 8GB/16GB split 290b68807 Deny access to `server-status` via `single frontend` faa8be9fe letsencrypt: pass EAB and Key Type flags in cron e8722c408 Replace outdated core team list by Gerrit links 819f011c9 CI: Use 16GB nodes for debian-bookworm nodes 6fff83384 update development docs after cli move to python 0612b0a15 [stable-only] neutron: Followup templating error 2dcf3f065 Set default external Let's Encrypt cert server 0571550a4 mariabackup: Grant ALTER on mysql.mariadb_backup_history 8c8c31ddb CI: Mark debian-upgrade as non-voting f44faa905 neutron: Template vpnaas config only when it is enabled b277a3892 Fix RabbitMQ version check always getting skipped b61d2eb4e Fix etcd config.json template 33e6f15bf CI: Use opendev docker registry mirror 0cbfa8ba8 Only add OIDCXForwardedHeaders when variable is set 5001cabe0 Re-add missing permission attribute d373507ae Update RabbitMQ documentation for Epoxy 4e9831dc9 Tweak RabbitMQ version check to allow 3.13 to 4.1 282fa1a16 Add network group to tls-backend b03cefe69 Fix unrestricted copying of backend TLS certs c69a76168 CI: Exclude hacluster logs in fluentd checks 241ef3c50 neutron: Do not run netns-cleanup when wrappers are enabled 62cedab46 fluentd: Add ovn logs to input db3a6510b ovn: Add sb_relay_group_id to environment c169e45d7 CI: Bump instance creation timeout to 5 minutes b60cca1ab Fix release note grammar 28d61586a CI: add zun to check-log exception list 18e568fc6 CI: Fix check-logs.sh routine for finding missing fluentd logs 6699acc7a Allow to override Cirros image URL for air-gapped environments d7cbd03ac CI: Test for log files missing in fluentd config a068920c1 [CI] Use smaller flavor for CI 589e5cb02 [CI] Create smaller flavor for CI 6b7d80149 Fix invalid Cinder endpoint option in nova.conf f4645115e Unnecessary comma in kolla-tolbox configuration - external rabbitmq da343c765 [CI] Enable virtualenv testing for Debian/Ubuntu 7be170cfd Fix path to heat config-generator.conf Diffstat (except docs and test files) ------------------------------------- ansible/group_vars/all.yml | 2 +- ansible/inventory/all-in-one | 1 + ansible/inventory/multinode | 1 + .../templates/conf/input/10-openvswitch.conf.j2 | 56 ++++++++++ .../roles/common/templates/kolla-toolbox.json.j2 | 2 +- ansible/roles/etcd/templates/etcd.json.j2 | 2 +- ansible/roles/heat/defaults/main.yml | 2 +- .../ironic/templates/ironic-inspector.json.j2 | 1 + .../roles/keystone/templates/wsgi-keystone.conf.j2 | 2 + ansible/roles/letsencrypt/templates/crontab.j2 | 4 +- .../haproxy/haproxy_external_frontend.cfg.j2 | 1 + ansible/roles/mariadb/tasks/register.yml | 2 +- ansible/roles/neutron/tasks/config.yml | 1 + .../templates/neutron-l3-agent-wrapper.sh.j2 | 6 +- .../neutron/templates/neutron-l3-agent.json.j2 | 4 +- .../roles/neutron/templates/neutron-server.json.j2 | 4 +- .../roles/neutron/templates/neutron_vpnaas.conf.j2 | 2 - ansible/roles/nova-cell/tasks/deploy.yml | 2 + ansible/roles/nova-cell/tasks/upgrade.yml | 2 + ansible/roles/nova-cell/tasks/version-check.yml | 88 +++++++++++++++ ansible/roles/nova-cell/templates/nova.conf.j2 | 2 +- ansible/roles/nova/templates/nova.conf.j2 | 2 +- ansible/roles/ovn-db/defaults/main.yml | 2 + ansible/roles/ovn-db/handlers/main.yml | 1 + ansible/roles/rabbitmq/tasks/version-check.yml | 9 +- ansible/roles/service-cert-copy/tasks/main.yml | 2 + ansible/roles/service-image-info/defaults/main.yml | 3 + ansible/roles/service-image-info/tasks/main.yml | 26 +++++ ansible/site.yml | 4 + ...llow-rabbitmq-3-13-to-4-1-8ae08d265c353301.yaml | 7 ++ .../notes/bug-2111267-5bff269cf10a4239.yaml | 7 ++ .../notes/bug-2117084-60fbff1b0616531d.yaml | 6 + ...tatus-via-single-frontend-33bbf3b9688a9ae4.yaml | 5 + ...point-option-in-nova-conf-417aae41d82cbdb2.yaml | 6 + ...-forwarded-headers-option-edb945bfcb98c691.yaml | 7 ++ ...q-version-check-condition-59528341299bab89.yaml | 5 + ...ed-copying-of-backend-tls-2bade63581b84c80.yaml | 8 ++ .../libvirt-catch-downgrade-d297347d745211f0.yaml | 8 ++ .../nova-metadata-split-d1c9ff2010390352.yaml | 2 +- ...rypt-external-cert-server-d34f9d783082d7d7.yaml | 13 +++ tools/init-runonce | 2 +- zuul.d/base.yaml | 1 + zuul.d/jobs.yaml | 82 +++++++------- zuul.d/nodesets.yaml | 74 +++++++++---- zuul.d/project.yaml | 5 +- 60 files changed, 610 insertions(+), 212 deletions(-)

1 0

kayobe 18.2.0 (epoxy)
by no-reply＠openstack.org 11 Sep '25

11 Sep '25

We are overjoyed to announce the release of: kayobe 18.2.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://bugs.launchpad.net/kayobe/+bugs For more details, please see below. 18.2.0 ^^^^^^ New Features ************ * The "neutron-bgp-dragent" container will now be built by default when "kolla_enable_neutron_bgp_dragent" is true. Upgrade Notes ************* * Deployments using Juniper Junos OS switches are required to update their configuration according to Juniper Junos OS documentation (https://docs.openstack.org/kayobe/latest/configuration/reference /physical-network.html#juniper-junos-os). This is due to the "junos_config" module dropping support for the "provider" parameter. Bug Fixes ********* * Fixes physical network configuration for Juniper Junos OS switches. Note that users are required to update their configuration according to Juniper Junos OS documentation (https://docs.openstack.org/kayobe/latest/configuration/reference /physical-network.html#juniper-junos-os). LP#2111341 * Fixes the user prompt for deprovisioning multiple overcloud hosts at once. Previously, the prompt would only confirm deprovisioning for one host. It will now correctly apply to all hosts that have been targeted. LP#2115037 * Fixes duplicate "OS_CACERT" lines in "public-openrc.sh" when both admin and public cacert variables are set. LP#2116318 * Fixes configuration of backend TLS when network nodes are separate from controllers. LP#2117084 * Fixes wrong name of "gpgkey" used for EPEL repositories when "dnf_use_local_mirror" is enabled. LP#2119921 * Fixes CentOS Stream 9 seed and infra VMs not booting by switching to an EFI-compatible image. LP#2121588 * Fixes an issue where incorrect network-data.json would be generated when interfaces without IP addresses are attached to infrastructure VMs. LP#2118403 * Fixes failure to activate SR-IOV on GPU devices by bumping the "stackhpc.linux" collection to v1.3.4. * Fixes support for empty strings in the "dev-tools" package lists. This allows using expressions such as "{{ 'foo' if os_distribution == 'rocky' else '' }}". LP#2115000 * Fixes network connectivity check when a subset of hosts have the "no_ip" property set via group or host variables. LP#2120918 Changes in kayobe 18.1.0..18.2.0 -------------------------------- d20d88c5 Fix kolla_docker_namespace comment 04d00ec3 CI: Add jobs for infra VM testing with cloud image c70c18e5 Switch infra VMs to EFI-compatible CentOS image c12519b3 CI: Test seed VM with distribution cloud images 9edaf72c CI: Rename seed-vm-efi jobs to seed-vm-q35 0db0f82b Switch to EFI-compatible CentOS Stream cloud image 5c48c7ea Fix networking connectivity check with no_ip 85ad72a5 Fix known_hosts module issue on centos/rocky 10 7ff2db48 Revert "CI: Make rocky9 VM jobs non-voting" 94caafce CI: Move failing job to experimental queue 82900e71 Fix version of EPEL GPG key 1de1ea69 CI: Switch from td-agent to fluent-package (LTS) 6f83a17e public-openrc: avoid duplicate OS_CACERT 5dd0f9b5 Bump jriguera.configdrive to latest master commit 6fa9991f Add network group to tls-backend b63678ad Fix documentation of seed_containers usage ba81b6fc junos-switch: Fix junos_config call c4fc2ac3 Enable building of neutron-bgp-dragent container d1de229e CI: Remove installation of catatonit 3b4fa3d9 [2025.1 only] Fix kayobe target venv backport add587c7 CI: Make rocky9 VM jobs non-voting a9136fef Support empty strings in dev-tools package lists fac4e78a Bump stackhpc.linux to 1.3.4 0b224606 Fix deprovisioning multiple overcloud hosts Diffstat (except docs and test files) ------------------------------------- ansible/inventory/group_vars/all/infra-vms | 4 +- ansible/inventory/group_vars/all/kolla | 3 ++ ansible/inventory/group_vars/all/seed | 3 +- ansible/inventory/group_vars/all/seed-vm | 4 +- ansible/inventory/group_vars/all/switches/junos | 19 ------- ansible/kayobe-target-venv.yml | 2 +- ansible/network-connectivity.yml | 13 +++-- ansible/overcloud-deprovision.yml | 4 ++ ansible/physical-network.yml | 1 - ansible/roles/bootstrap/tasks/main.yml | 4 +- ansible/roles/dev-tools/defaults/main.yml | 2 +- ansible/roles/dnf/templates/epel.repo.j2 | 6 +-- ansible/roles/junos-switch/README.md | 19 ++----- ansible/roles/junos-switch/defaults/main.yml | 3 -- ansible/roles/junos-switch/tasks/main.yml | 4 +- .../templates/overcloud-components.j2 | 1 + .../public-openrc/templates/public-openrc.sh.j2 | 2 + ansible/roles/ssh-known-host/tasks/main.yml | 4 +- .../configuration/reference/physical-network.rst | 14 +---- .../reference/seed-custom-containers.rst | 3 +- etc/kayobe/infra-vms.yml | 2 +- etc/kayobe/kolla.yml | 2 +- etc/kayobe/seed-vm.yml | 2 +- etc/kayobe/seed.yml | 3 +- playbooks/kayobe-infra-vm-base/overrides.yml.j2 | 4 +- .../overrides.yml.j2 | 6 +-- playbooks/kayobe-seed-base/overrides.yml.j2 | 7 --- playbooks/kayobe-seed-vm-base/overrides.yml.j2 | 4 +- .../notes/bug-2111341-706fe5689414a9c1.yaml | 15 ++++++ .../notes/bug-2115037-f2ed2a4994511832.yaml | 7 +++ .../notes/bug-2116318-44f0c022cde1e686.yaml | 6 +++ .../notes/bug-2117084-8d1eaa375df1d1f8.yaml | 6 +++ .../notes/bug-2119921-b23dc13147e6bda4.yaml | 6 +++ .../notes/bug-2121588-ad6d8b33e3fcaff9.yaml | 6 +++ ...build-neutron-bgp-dragent-a6b28ce7e22d8145.yaml | 5 ++ ...bump-jriguera-configdrive-e01c6f347507ee6f.yaml | 7 +++ ...bump-stackhpc-linux-1.3.4-0ae3e0ec9f4c25e2.yaml | 5 ++ ...ls-packages-select-filter-17f432df42762625.yaml | 7 +++ ...-check-with-partial-no-ip-5efcc8ed6e76267e.yaml | 6 +++ requirements.yml | 4 +- zuul.d/jobs.yaml | 63 ++++++++++++++++++---- zuul.d/project.yaml | 13 +++-- 43 files changed, 207 insertions(+), 104 deletions(-)

1 0

kolla-ansible 18.8.0 (caracal)
by no-reply＠openstack.org 11 Sep '25

11 Sep '25

We are pumped to announce the release of: kolla-ansible 18.8.0 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 18.8.0 ^^^^^^ Security Issues *************** * Deny access to /server-status via the single frontend. LP#2121626 Bug Fixes ********* * Fixes bug LP#2118452 which stopped the RabbitMQ upgrade from version 3.13 to 4.1 even though it is supported. * Fixes configuration of backend TLS when network nodes are separate from controllers. LP#2117084 * Reduce the size of the fluentd buffers to avoid getting HTTP 413 errors when sending logs to opensearch/elasticsearch. The values chosen were based on what seemed a sensible size. These can be customised by editing the "fluentd_bulk_message_request_threshold" and "fluentd_buffer_chunk_limit_size" variables. LP#2079988 Changes in kolla-ansible 18.7.0..18.8.0 --------------------------------------- 942f5bcfe letsencrypt: add max_fail_percentage to site.yml 9e1e090a9 Deny access to `server-status` via `single frontend` df276af02 Replace outdated core team list by Gerrit links 410d4148c mariabackup: Grant ALTER on mysql.mariadb_backup_history adb5edad2 CI: Use opendev docker registry mirror 52a3e4a61 Tweak RabbitMQ version check to allow 3.13 to 4.1 e49fd63db Add network group to tls-backend f18a8057f fluentd: Add ovn logs to input 6cbade51d CI: Bump instance creation timeout to 5 minutes 7a449e6a5 Add size limits to Fluentd buffers 92e0bea51 Allow to override Cirros image URL for air-gapped environments d4fc97947 Fix path to heat config-generator.conf 1c1e55141 Docs: update RabbitMQ HA instructions Diffstat (except docs and test files) ------------------------------------- ansible/inventory/all-in-one | 1 + ansible/inventory/multinode | 1 + ansible/roles/common/defaults/main.yml | 15 +++++++ .../templates/conf/input/10-openvswitch.conf.j2 | 38 +++++++++++++++++ .../common/templates/conf/output/00-local.conf.j2 | 4 ++ .../common/templates/conf/output/01-es.conf.j2 | 2 + .../templates/conf/output/03-opensearch.conf.j2 | 2 + ansible/roles/heat/defaults/main.yml | 2 +- .../haproxy/haproxy_external_frontend.cfg.j2 | 1 + ansible/roles/mariadb/tasks/register.yml | 2 +- ansible/roles/rabbitmq/tasks/version-check.yml | 7 ++-- ansible/site.yml | 4 ++ ...llow-rabbitmq-3-13-to-4-1-8ae08d265c353301.yaml | 7 ++++ .../notes/bug-2117084-60fbff1b0616531d.yaml | 6 +++ ...tatus-via-single-frontend-33bbf3b9688a9ae4.yaml | 5 +++ .../notes/fluentd-buffers-86acb335b1cf3126.yaml | 9 ++++ tools/init-runonce | 2 +- zuul.d/base.yaml | 2 + 22 files changed, 118 insertions(+), 55 deletions(-)

1 0

ansible-role-atos-hsm 10.0.0.0rc1 (flamingo)
by no-reply＠openstack.org 11 Sep '25

11 Sep '25

Hello everyone, A new release candidate for ansible-role-atos-hsm for the end of the Flamingo cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/ansible-role-atos-hsm/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Flamingo release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/flamingo release branch at: https://opendev.org/openstack/ansible-role-atos-hsm/src/branch/stable/flami… Release notes for ansible-role-atos-hsm can be found at: https://docs.openstack.org/releasenotes/ansible-role-atos-hsm/ If you find an issue that could be considered release-critical, please file it at: https://storyboard.openstack.org/#!/project/1183 and tag it *flamingo-rc-potential* to bring it to the ansible-role-atos-hsm release crew's attention.

1 0

neutron-vpnaas 27.0.0.0rc1 (flamingo)
by no-reply＠openstack.org 11 Sep '25

11 Sep '25

Hello everyone, A new release candidate for neutron-vpnaas for the end of the Flamingo cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/neutron-vpnaas/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Flamingo release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/flamingo release branch at: https://opendev.org/openstack/neutron-vpnaas/src/branch/stable/flamingo Release notes for neutron-vpnaas can be found at: https://docs.openstack.org/releasenotes/neutron-vpnaas/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/neutron/+bugs and tag it *flamingo-rc-potential* to bring it to the neutron-vpnaas release crew's attention.

1 0