openstack/kolla-ansible — Week of 2026-07-25

Service log management. The headline change centralizes service log directory handling across the deployment, reworking roughly 2,100 net lines to give every service a consistent log path scheme (989850). Alongside it, the /etc/localtime bind mount was replaced with a TZ environment variable across containers, trimming ~90 lines of mount plumbing.

TLS and service configuration. ProxySQL now uses separate CAs for internal TLS and backend TLS, with a matching stable-only backport. Glance's uWSGI env picks up the OpenStack CA cert (also backported), and the default rabbit_qos_prefetch_count was bumped from 1 to 50 on master and a stable branch.

Bug fixes. Nova-compute startup after reprovisioning was repaired, Cinder skips the backup Ceph loops when backups are disabled, the Grafana blackbox endpoint checks in Prometheus were fixed and backported twice, and the valkey-sentinel image tag was corrected.

Tooling and CI. CI now fails jobs on uWSGI worker crashes such as segfaults, installs kernel-modules-extra on Rocky across four branches, fixes role path filters, renames a Tempest artifact, and replaces periodic-stable-jobs with a local job list on three stable branches. Entry points in pyproject.toml were sorted, and docs picked up a clarification on config override merge-vs-replace semantics.