openstack/kolla-ansible — Week of 2026-05-30

Feature and configuration surface. A new option lets operators require secure channels with SPICE, tightening console transport for libvirt-backed compute. On the other side of the ledger, support for networking-infoblox was dropped (~130 lines retired from the Neutron plugin surface), and a stale kolla-toolbox.json.j2 template was cleaned out of the toolbox role.

Stability and fixes. Skyline's nginx service proxy paths were corrected and the fix carried across three branches. Container runtime handling got two fixes: the Docker cpuset dimension comparison was corrected (988957's sibling 987365), and kolla_toolbox now runs with the correct HOME environment instead of inheriting a misleading value. The kolla-action variable is now always set to avoid undefined-variable paths through plays.

Tooling and CI. The biggest single patch reworked deploy-tenks.sh into native Ansible, replacing a shell harness with task-based bare-metal test setup. The idempotence test now skips extra containers, and two small patches fixed the HAProxy template against new Jinja lint rules now enforced in CI.