openstack/sunbeam-charms — Week of 2026-06-20

New storage backends. The bulk of the week — roughly 2,200 new lines — landed two fresh cinder-volume subordinate charms for Dell Unity and Huawei arrays, broadening the block-storage driver matrix alongside the existing Ceph and NetApp options.

Identity and secrets. Keystone gained an "extra role requests" mechanism on the identity-service relation (landed on three branches), with a companion fix to preserve those extra roles across credential rotation. Barbican picked up a new service-decrypter role and a flip to ensure the new secure-rbac policy is enabled by default, both backported across three branches.

Networking and dashboards. designate-bind-k8s learned to advertise per-unit bind hosts, unblocking HA deployments where consumers need to reach every replica rather than a single VIP. Horizon got direct image upload mode wired through, and gnocchi-k8s was migrated onto the s3-integrator track 2 interface, trimming ~600 lines of older glue code.

Stability and tooling. The openstack-hypervisor metrics endpoint was repaired on two branches. On the build side, charmcraft state is now cleaned between binary builds, and several charms (nova, keystone, ironic, watcher-k8s) were rebuilt to pick up the latest rocks.