openstack/openstack-helm — Week of 2026-09-05

RabbitMQ operator alignment. The largest change of the week reconciles the chart's RabbitMQ resources with the upstream operator, reshaping roughly 620 lines around how the cluster is declared and managed. Paired with it, uwsgi need-app is now enabled for the remaining charts so workers refuse to start without a loaded application, and Designate switches to its own wsgi module.

Ceph refresh. Ceph moves to Tentacle 20.2.4 with Rook 1.20.6, image references shift to Noble, and CephX authentication now generates aes256k keys — three coordinated updates totaling ~370 lines across the Ceph tooling. See the Tentacle/Rook bump for the base version move.

Probes and sidecars. Heat and Placement swap their liveness/readiness probes over to the OpenStack healthcheck middleware. OVN gains a liveness probe that verifies br-int OpenFlow connectivity, with a quick follow-up to run the check as the ovs user rather than root. Ironic's exporter is relocated to run via extraContainers instead of as part of the main pod spec.

Deploy stability. The deployment scripts now retry flaky external downloads and pin the kubeadm control-plane version to avoid drift between runs.