openstack/sunbeam-charms — Stackers Network

openstack/sunbeam-charms — Week of 2026-07-04

Sat, 04 Jul 2026 00:00:00 +0000

Snap confinement safeguards. The largest body of work hardens how charms interact with snap confinement. New logic blocks unsafe snap confinement changes across three branches (~1,200 lines), and a companion set preserves devmode across snap refreshes so operator-installed development snaps aren't silently re-confined. Both changes landed on master and two stable branches in lockstep.

Charm and library updates. The tls_certificates interface library was refreshed to patchlib 30 across three branches. openstack-port-cni gained a re-bootstrap step on pod restart to recover from a previously fatal state. openstack-hypervisor now passes Southbound addresses as a comma-separated list rather than a single value (995027). Smaller charm-level tweaks include an octavia-k8s default-provider update and configurable health_manager threads, and barbican-k8s enabling the new secure-rbac policy.

Tooling and CI. Zuul jobs were restructured to build only the charms modified in a change, cutting unnecessary CI work. Linting issues were cleaned up across the tree with a few noisy linters disabled, and horizon-k8s on stable/2025.1 was rebuilt to pick up the SRU for LP#2156606.

Nearly every substantive change this week was backported to two stable branches alongside master.

openstack/sunbeam-charms — Week of 2026-06-20

Sat, 20 Jun 2026 00:00:00 +0000

New storage backends. The bulk of the week — roughly 2,200 new lines — landed two fresh cinder-volume subordinate charms for Dell Unity and Huawei arrays, broadening the block-storage driver matrix alongside the existing Ceph and NetApp options.

Identity and secrets. Keystone gained an "extra role requests" mechanism on the identity-service relation (landed on three branches), with a companion fix to preserve those extra roles across credential rotation. Barbican picked up a new service-decrypter role and a flip to ensure the new secure-rbac policy is enabled by default, both backported across three branches.

Networking and dashboards. designate-bind-k8s learned to advertise per-unit bind hosts, unblocking HA deployments where consumers need to reach every replica rather than a single VIP. Horizon got direct image upload mode wired through, and gnocchi-k8s was migrated onto the s3-integrator track 2 interface, trimming ~600 lines of older glue code.

Stability and tooling. The openstack-hypervisor metrics endpoint was repaired on two branches. On the build side, charmcraft state is now cleaned between binary builds, and several charms (nova, keystone, ironic, watcher-k8s) were rebuilt to pick up the latest rocks.

openstack/sunbeam-charms — Week of 2026-06-13

Sat, 13 Jun 2026 00:00:00 +0000

Workload rocks. The largest change of the week migrates the charms' workload rocks to ubuntu@24.04, touching roughly 1,600 lines across the tree (990926). This is the dominant piece of work landed in the window.

Observability and Horizon. The prometheus_scrape charm lib was refreshed to revision 59 on master and propagated through two backports. In parallel, horizon-k8s gained theming support, also landed on master plus two backport branches.

Hypervisor and Nova fixes. The openstack-hypervisor charm got two fixes: a correction to its metrics endpoint, and new logic to report nova-compute blocked status (the latter backported twice). On nova-k8s, a small change ensures the nova-api-metadata site is disabled when it should be.