openstack/openstack-helm — Week of 2026-09-12

Deployment machinery. The biggest change replaces the openstack-helm plugin's wait logic with native Helm waits (1004688), trimming a chunk of custom orchestration. Keystone's permanent-secret handling was reworked, and Neutron gained wiring to connect periodic and maintenance workers. On the Masakari side, the kubernetes driver is now the default for the host monitor and masakari-host-monitor moves to a Deployment.

Ceph and secrets. Deploy tooling now keeps OpenStack CephX keys on the aes cipher, paired with a cephcsi bump to v3.17.1 for aes256k CephX key support.

Probes and config fixes. Liveness probes for Glance and Barbican were repointed at the uWSGI stats port, and the OVN agent's health probe under Neutron was corrected. A rabbit_quorum_queues → rabbit_quorum_queue typo fix should quietly restore intended behavior wherever the option was set.

CI and tooling. Octavia image and kubeadm-join flakes in the gate were addressed, and a redundant passenv was dropped from tox.