▤ Stackers Network

November 01, 2025

Stackers Network Digest — November 01, 2025

23 threads · 51 messages · openstack-discuss

The Big Picture

This week straddled the 2026.1 Gazpacho PTG (Oct 27–31), so the lists were a mix of last-minute session logistics and the first ripples of decisions coming out of those rooms. The dominant threads were structural: Ironic floated ideas to make its core team more "data-driven" and to absorb the sushy library; the TC pressed forward on long-stalled retirements (Monasca, Vitrage, Venus) and on tidying up post-TripleO ownership of os-net-config; operators surfaced sharp bugs around Nova image rescue, Glance shelve corruption, and pip 25.3 breaking older stable branches. R-22 to 2026.1 Gazpacho.

Heads Up / Action Needed

pip 25.3 removed legacy editable installs — and quietly broke older stable branches. Stephen Finucane flagged that pip 25.3 (released on a Friday, naturally) dropped the legacy setup.py develop editable install path. Services that haven't migrated away from wsgi_scripts on older stable branches will fail to deploy — Keystone on stable/2024.2 is already broken, surfacing as "Could not find versioned identity endpoints" with a missing keystone-wsgi-public script. This is already biting cluster-api-provider-openstack. Patches constraining pip on stable/2025.1 and stable/2024.2 are up; individual services should consider backporting their $service.wsgi modules where possible. See pip 25.3 release notes.

Image corruption during shelve under flaky connections. Vladimir Prokofev reproduced — across Xena and 2024.2 production environments — a bug where a broken pipe or timeout mid-upload causes nova-compute to retry without resetting the byte-stream. Glance deletes the partial image on the backend, the retry uploads only the tail, and the shelved image ends up corrupted (with the original VM already offloaded). The trivial fix is image_data.seek(0) in glanceclient's upload, but ownership is unclear. Tracked as Launchpad bug 2130429. Operators on older branches should treat shelve as a risk in lossy network paths.

Watcher unmaintained/2023.1 is moving to EOL — Joan Gilabert notes the branch has had no patches in two years; objections welcomed before the Watcher IRC meeting.

OpenDev Opensearch upgrade Nov 13 at 12:00 UTC. opensearch.logs.openstack.org will be unavailable for the duration of the upgrade.

Development & Technical Decisions

Ironic: stop maintaining sushy as a separate project? Iury Gregory put a PTG idea on the list: folding sushy (the Redfish client library) into Ironic itself. Sushy was never intended as a public library, but third parties — including metal3 — consume it, and the release cadence has become a drag on fixing user-visible issues. The team is gathering feedback before moving forward, with sushy-tools and the non-client-library release docs cited as context.

Making core teams more accessible. Jay Faulkner floated a data-driven approach for the new two-tier Ironic review system: ironic-approvers (+2 / Workflow +1) continues on technical merit and trust; ironic-reviewers (+2 only) would be admitted on objective metrics (e.g. average reviews/week plus a merged feature or several bugfixes), with safeguards like a waiting period to prevent solo-perspective merges. Tagged [all] deliberately — Jay wants the broader community's read on the model.

Post-quantum cryptography for OpenStack. Maksim Malchuk opened a cross-project thread pointing at the Post quantum OpenStack wiki — a long-arc topic, but worth tracking now that NIST-standard algorithms are landing in cryptography libraries.

os-net-config attribution and OpenDev cleanup. Goutham Pacha Ravi (TC chair) pinged the os-net-config PyPI maintainers about ongoing releases that still list "OpenStack" as author/maintainer despite the project being retired with TripleO. Development has moved to a GitHub fork; references to OpenStack docs, TC badges, and bug trackers need to come out.

Skyline placement bug: double-slash in API request URL appeared after upgrading from 2024.2 to 2025.1 — bug 2129915. Horizon doesn't exhibit it; the trail leads through skyline-console's placement client.

PTG-Adjacent Activity

The PTG itself ran this week; full summaries will roll in over the next several days. Some notable session-pointers:

  • Image encryption (Glance/Cinder/Nova) — Markus Hentsch posted a thorough state-of-play ahead of the Thursday session: two image formats (raw LUKS and qcow2-wrapped LUKS), new Barbican key handling that distinguishes passphrase vs binary secrets, and Barbican's secret-consumer API used to prevent accidental key deletion. os-brick patches have landed; Glance and Cinder pieces are still pending review. Nova is excluded for now because ephemeral storage encryption isn't ready. See topic LUKS-image-encryption and the Glance planning etherpad.
  • Keystone PTG agenda — Artem Goncharov outlined Tue/Wed focus areas: federation, passkeys, service accounts, deprecation of features depending on abandoned upstreams (saml2), and Keystone's cryptography (etherpad). This sets up the post-PTG Rust-extension announcement.
  • Refactoring Ops-facing activities — Thierry Carrez convened a session to regroup the Ops meetup, Large Scale SIG, Public Cloud SIG, and Scientific SIG.
  • Swift Ops Feedback and Tacker vPTG planning ran on familiar tracks.

Bifrost in Kolla-Ansible — operator poll. William Szumski is gauging non-Kayobe Bifrost users ahead of choosing a replacement after Bifrost was deprecated in Kolla-Ansible. Discussion slot: Kayobe/Kolla PTG session, Wednesday November 19 at 13:00 UTC.

Governance & Community

The TC weekly summary ahead of PTG week (R-22) confirmed inactivity for Vitrage and Venus — both could be retired before the 2026.2 M-2 milestone if activity doesn't return. Monasca's retirement appears to be moving ahead too, with most TC members favoring closure; a one-cycle hold has been kept open in case the publicly-flagged outside interest in reviving it materializes. The Skyline core self-nomination was deferred for lack of review history. Patches reflecting Gazpacho runtime updates have largely merged; only Grenade is struggling with CI instability.

FOSDEM 2026 CFP. The Virtualization & Cloud Infrastructure devroom (Jan 31, 2026) — jointly organized by folks from OpenStack, Xen, KubeVirt, QEMU, KVM and Foreman — is open for submissions through December 5, with acceptances out December 10. Submit.

Operator Notes

Operators ran into a familiar pair of papercuts. A Kolla-Ansible deployment using the Ubuntu/master Horizon image produced a dashboard with no static assets — same symptom reported earlier in IRC. A server rescue on Caracal failed because the rescue path still tried to fetch the (since-deleted) base image — an interaction worth pinning down before relying on rescue in production. And a Kolla-Ansible nova group-config override pattern for multi-AZ deployments with per-AZ Ceph backends got a renewed write-up worth bookmarking.