The Big Picture

This was a transition week defined as much by governance plumbing as by code. The headline change has already landed: as of July 1, the Contributor License Agreement (CLA) era is over and OpenStack now requires Developer Certificate of Origin (DCO) sign-offs on every new or revised change. If you push to Gerrit and forget git commit -s, your change will be rejected. Alongside that, the 2025.2 "Flamingo" cycle hit Milestone-2 and the release countdown ticked to week R-12, putting teams firmly into the back half of the cycle. The rest of the week was a steady stream of operator pain points — CI breakage, storage quirks, and OVN edge cases — rather than any single dramatic announcement.

Releases & Announcements

Thierry Carrez posted the R-12 release countdown, and Goutham Pacha Ravi's TC weekly summary confirmed Milestone-2 fell this week — a bug-targeting checkpoint and the point at which the Release Management team lines up deliverables for the coordinated release. The number of deliverables is roughly unchanged from 2025.1, with no significant deprecations or removals so far.

The release team's consistency check (Thierry Carrez) flagged several deliverables defined in governance but never released, and is asking the affected teams to decide their fate: Cinder's rbd-iscsi-client (added 2021), Glance's os-test-images (possibly meant to be release-management: none), Barbican's barbican-ui (added 2019), and Telemetry's newer aetos and grian-ui — for which the team needs to confirm whether they ship as part of Flamingo and add deliverable files in openstack/releases if so.

Development & Technical Decisions

The DCO transition is the week's defining change. Jeremy Stanley confirmed the Gerrit cutover: existing changes don't need amending to merge, but any new push, revision, rebase, or backport now requires a Signed-off-by trailer. Use git commit -s, or git commit --amend -s on existing commits; for a patch series you may need an interactive rebase across all messages. The TC framed this as closing the lid on a license agreement adopted back in July 2010 that had long been seen as arcane and a barrier to contribution. Expect hiccups in tooling — report them on the list or in OFTC's #opendev.

On the CI front, Takashi Kajinami traced a broken oslo.utils/library gate to a known novnc packaging bug in Ubuntu that pulls older oslo libraries into system Python and shadows the virtualenv versions. Rather than patch every devstack job individually, he proposed switching to source installation of novnc globally, and asked whether anyone has a line to Canonical to fix the packaging properly. Separately, Michael Still reported nova-ovs-hybrid-plug CI jobs failing for Nova over the weekend, apparently tied to an unreachable image endpoint (200.225.47.11) producing a malformed server create with an empty --image argument.

Heat continued its eventlet exit: Takashi Kajinami noted that with no objections raised, he has proposed the backport and a 2025.1 release to announce deprecation of the standalone heat-api and heat-cfn-api services, which will be dropped this cycle. Operators must move to a WSGI server (uwsgi, apache+mod_wsgi) going forward.

Operator troubleshooting threads were plentiful. A Cinder/Ceph retype thread (Yuta Kambe) probed why changing volume types between RBD pools inflates usage — likely zero-fill during the copy — and asked whether Cinder could preserve size via rbd cp. A [neutron][octavia] OVN failover bug (Maximilian Stinsky-Damke) described VIP ports losing their virtual-parents during Octavia amphora failovers on Neutron 2025.1 with OVN 24.03, breaking ovn-bgp-agent FIP announcements until the allowed address pair is manually re-set. A Nova Epoxy upgrade report (Karl Kloppenborg) flagged Ubuntu cloud images failing cloud-init DHCP while cirros/Debian/Fedora work fine. And a NetApp multipath detach error ("map in use" on multipath -f) rounded out the storage complaints.

Heads Up / Action Needed

• Sign your commits. From July 1, unsigned changes are rejected by Gerrit. Configure git commit -s now.
• Telemetry, Cinder, Glance, Barbican: respond to the release team about your unreleased governance deliverables, especially whether aetos/grian-ui ship in Flamingo.
• Heat operators: the standalone heat-api/heat-cfn-api scripts are being removed this cycle; plan your move to a WSGI runtime.
• Neutron bug deputy Lajos Katona's week-26 report surfaced an open question on the ovn-octavia-provider behavior when no VIP IP is available (HTTP 500 vs 409), plus a fullstack-test migration effort and several OVN/BGP fixes in flight.

Community & Events

The community is leaning further into real-time chat: the Ops Radio Hour (recapped by Ildikó Vancsa from the June 27 session) covered OVS-to-OVN and LinuxBridge-to-OVN migration paths, RabbitMQ upgrades, QoS, and VMware migration, and the group agreed to try Matrix (#openstack-ops:opendev.org) for synchronous discussion. The next Ops Radio Hour is set for July 25 at 1300 UTC, with GPUs, Swift compliance, VMware migration, and vTPM live-migration behavior on the agenda. The Public Cloud SIG met July 2 at 0700 UTC. On the identity side, Greg Waines asked about the status of the approved keystone spec for external OAuth2 grant support, and Pierre Riteau opened a discussion on whether the Horizon OPENSTACK_KEYSTONE_DOMAIN_DROPDOWN option carries any real security risk when the exposed domains would be publicly documented anyway.