Stability. A pair of backports fixes nova-compute startup after a host is reprovisioned, addressing a failure mode where the service would not come back cleanly on rebuilt hypervisors.

Tooling and packaging. The project migrated its build metadata to pyproject.toml, and an AI contribution policy was adopted and backported across four branches. CI marks Debian Trixie jobs non-voting for now, and lint pins saw a routine bump.

Deployment and lifecycle fixes. A notable ordering change now deploys MariaDB before configuring the loadbalancer, and nova-compute startup after reprovisioning is fixed at 936785. The Podman worker's compare_config picked up a fix for a UnicodeDecodeError, MariaDB's healthcheck start_period was bumped to 120s, and the service-uwsgi-config role learned an env option. Keystone now allows multiple OIDCXForwardedHeaders options, and Glance's chunked-input-limit was increased (twice, via converging patches).

Monitoring and logging. Prometheus gained Alertmanager HAProxy health checks and a fix for the Grafana blackbox endpoint checks, while OpenSearch Dashboards picked up logrotate configuration.

Tooling. The reconfigure CI role was reworked to stop dumping everything to stdout, and two j2lint indentation errors were corrected across templates.

Deployer behavior. A kolla_toolbox fix corrects the HOME environment variable when the container runs, addressing tooling that misbehaved under the wrong home directory. Alongside that, the default behavior for user creation was adjusted — a deliberate change to how Kolla provisions accounts rather than a bug fix.

Stability fixes. The Podman backend gained a guard against UnicodeDecodeError in PodmanWorker.compare_config. A stray trailing quote in the barbican_api healthcheck was removed (landed twice across branches). The migrate-valkey playbook is now properly limited in scope, and Ironic conductor picked up an explicit tempdir setting plus a switch to running non-privileged.

CI and packaging. Gate setup was repaired around buildx installation, and openstacksdk was pinned to keep Ironic jobs green.

Container and clustering behavior. The kolla_container/podman path now creates bind-mounted host directories when they're missing, smoothing first-run deploys. RabbitMQ on single-node setups switches from drain to stop during upgrades, and the loadbalancer role no longer creates the MariaDB monitor user — that responsibility moves elsewhere. Obsolete Horizon settings were also pruned.

Bug fixes and backports. The OVN SB relay port calculation was broken for relay counts greater than nine; the fix landed on master and was backported to two stable branches. A trio of docs patches across the same branches warns about password resets in the Ceph RGW guide.

Tooling and CI. ProxySQL test coverage was reworked (~180 lines), the gate now installs docker-buildx-plugin (guarded to docker-only), the keepalived track-script workaround was reverted, and jobs moved back to the openstack-python3-jobs template.

Stability and fixes. Skyline's nginx service proxy paths were corrected and the fix carried across three branches. Container runtime handling got two fixes: the Docker cpuset dimension comparison was corrected (988957's sibling 987365), and kolla_toolbox now runs with the correct HOME environment instead of inheriting a misleading value. The kolla-action variable is now always set to avoid undefined-variable paths through plays.

Tooling and CI. The biggest single patch reworked deploy-tenks.sh into native Ansible, replacing a shell harness with task-based bare-metal test setup. The idempotence test now skips extra containers, and two small patches fixed the HAProxy template against new Jinja lint rules now enforced in CI.