openstack/octavia — Week of 2026-09-12

TLS configuration. The largest change of the week reworks cipher handling so that TLSv1.3 is configured correctly on listeners, a ~300-line fix across the amphora TLS path (review.opendev.org/c/openstack/octavia/+/919846). Complementing it, the deprecated ssl_version option is replaced with ssl_minimum_version, aligning Octavia with the modern SSL context API.

Bug fixes. Two data-path issues landed: neutron client sockets were being leaked and are now released explicitly, and members were being plugged onto the wrong subnet in certain topologies. Both are small, targeted patches against long-standing behavior.

Maintenance. The legacy Upstart init configuration was removed outright (-169 lines), retiring support for a boot system Octavia no longer needs to carry. A typo fix rounds out the cleanup.

Tooling and CI. Most of the remaining activity is CI plumbing: three patches repair mirror usage on stable branches, DIB_PIP_RETRIES=0 is dropped when the CI mirror is in use, and the grenade skip-level job is disabled for the 2026.2 cycle.