openstack/openstack-helm — Stackers Network

openstack/openstack-helm — Week of 2026-09-19

Sat, 19 Sep 2026 00:00:00 +0000

Tree pruning. The dominant change this week is the retirement of the in-tree deployment scripts and associated dead tooling, a single patch that removes roughly 8,000 lines and reshapes the repo around Helm charts alone (1005132). Alongside it, the Designate bootstrap job was rewritten to render through the standard helm-toolkit macro, bringing it in line with the rest of the charts.

Probes and health checks. A coordinated pass moved the liveness probes for Cinder, Octavia, and CloudKitty onto their respective uwsgi stats ports, replacing whatever endpoints were being hit before with a consistent, uwsgi-native check. The Neutron chart also gained a readiness probe for the Ironic agent, closing a gap in that sidecar's lifecycle signalling.

Neutron and Octavia fixes. Beyond the new probe, the Ironic agent now has ovn.ini threaded into its configuration, and the Octavia driver agent's socket sharing between containers was corrected — a ~200-line net simplification of that arrangement.

CI. The Selenium-based Horizon dashboard tests were repaired and are no longer being ignored, and deploy-env was taught to fail on the task that actually broke rather than obscuring the root cause — a small but useful debuggability win for gate failures.

openstack/openstack-helm — Week of 2026-09-12

Sat, 12 Sep 2026 00:00:00 +0000

Deployment machinery. The biggest change replaces the openstack-helm plugin's wait logic with native Helm waits (1004688), trimming a chunk of custom orchestration. Keystone's permanent-secret handling was reworked, and Neutron gained wiring to connect periodic and maintenance workers. On the Masakari side, the kubernetes driver is now the default for the host monitor and masakari-host-monitor moves to a Deployment.

Ceph and secrets. Deploy tooling now keeps OpenStack CephX keys on the aes cipher, paired with a cephcsi bump to v3.17.1 for aes256k CephX key support.

Probes and config fixes. Liveness probes for Glance and Barbican were repointed at the uWSGI stats port, and the OVN agent's health probe under Neutron was corrected. A rabbit_quorum_queues → rabbit_quorum_queue typo fix should quietly restore intended behavior wherever the option was set.

CI and tooling. Octavia image and kubeadm-join flakes in the gate were addressed, and a redundant passenv was dropped from tox.

openstack/openstack-helm — Week of 2026-09-05

Sat, 05 Sep 2026 00:00:00 +0000

RabbitMQ operator alignment. The largest change of the week reconciles the chart's RabbitMQ resources with the upstream operator, reshaping roughly 620 lines around how the cluster is declared and managed. Paired with it, uwsgi need-app is now enabled for the remaining charts so workers refuse to start without a loaded application, and Designate switches to its own wsgi module.

Ceph refresh. Ceph moves to Tentacle 20.2.4 with Rook 1.20.6, image references shift to Noble, and CephX authentication now generates aes256k keys — three coordinated updates totaling ~370 lines across the Ceph tooling. See the Tentacle/Rook bump for the base version move.

Probes and sidecars. Heat and Placement swap their liveness/readiness probes over to the OpenStack healthcheck middleware. OVN gains a liveness probe that verifies br-int OpenFlow connectivity, with a quick follow-up to run the check as the ovs user rather than root. Ironic's exporter is relocated to run via extraContainers instead of as part of the main pod spec.

Deploy stability. The deployment scripts now retry flaky external downloads and pin the kubeadm control-plane version to avoid drift between runs.

openstack/openstack-helm — Week of 2026-08-01

Sat, 01 Aug 2026 00:00:00 +0000

Secret and endpoint cleanup. The bulk of the week's churn — roughly 700 lines — went into pruning unused metadata from chart plumbing. The endpoints TLS client-secret metadata was dropped across the tree, and non-admin oslo_db user secrets were removed where charts had been carrying them unnecessarily. A related Keystone fix ensures empty Secret data renders as {} rather than null, avoiding a subtle templating pitfall (999346).

Nova and Neutron behavior. Nova's db-sync job now sources cell mapping values directly from nova.conf instead of duplicating them, and terminationGracePeriodSeconds was raised to 180s to give pods room to shut down cleanly. On the Neutron side, nova_metadata_protocol is now auto-computed from the compute_metadata endpoint, and the OVS agent init grew an nf_tables fallback for modprobe on hosts without the legacy backend.

Horizon and Cinder knobs. Horizon gained configuration support for DEFAULT_SERVICE_REGIONS and SECONDARY_ENDPOINT_TYPE, and Cinder's bootstrap job now accepts custom script injection for site-specific setup steps.