genestack release-2025.4.1.2

What's Changed

REGRESSION WARNING: When using kube-ovn greater than 1.13.14, a restart of the ovn controllers will wipe ACL's from the northbound database. (reported here: #1342) (bug: #1342) (patch: kubeovn/kube-ovn#6001).
This pr pins kube-ovn to 1.13.14 until such time as the kube-ovn is patched upstream.

We also corrected the nova-ssh key generation to ensure live-migrations and resizes work as expected.

• fix: pin kube-ovn to 1.13.14 by @rackerchris in #1348
• fix: use correct nova-ssh keypair and do not strip newlines at creati] by @rackerchris in 152a7a6

Full Changelog: release-2025.4.1.1...release-2025.4.1.2

genestack release-2025.4.1.1

What's Changed

1. make the new kube_ovn inspection scripts executable
2. ensure we are pulling the correct container for kube-events-exporter
3. ensure genestack kube-ovn version is set to kube-ovn to 1.14.15

• Cherry picks by @rackerchris in #1343

Full Changelog: release-2025.4.1...release-2025.4.1.1

Genestack 2025-4.1 Release

Breaking Changes

• The loki service is being upgraded past version 6. This will require new helm overrides. Please review the templates in genestack/base-helm-configs/loki for suggested modifications

Notable Changes

• This release will advance OpenStack helm charts to the latest version while staying in the same release
• Longhorn upgrade to 1.9x
• Operator upgrade to latest helm charts while keeping to the same installed version
• Loki upgrade to version > 6.X
• Grafana upgrade to version 10.X
• Work has begun on standardized installation scripts. This is the first step in the automated deployment journey.
• Each service and infrastructure component will now have its own dedicated installation script. We have moved away
• from installing our exporters using the install-chart.sh script and moved them into the standardized template for service
• installation.
• Blazar Reservation service enters Tech Preview. NOTE: In Tech Preview not all features may be available and they may not be a skyline panel. API/CLI only.

What's Changed

• remove uneeded rabbit policy by @zhmarvi in #1218
• original-images.json typo fix by @zhmarvi in #1217
• Fix: Fix install script by @aedan in #1219
• fix(placement): Correct incorrect oslo_concurrency lock_path by @ycy1766 in #1220
• fix: Add freezer-keystone-service-password and v2 on non-public endpoints by @anande in #1222
• Fix: Updated envoy setup by @aedan in #1221
• hard set 1500 mtu for tenant networks in hyperconverged script by @busterswt in #1224
• fix: temp removing glance download/get image policy by @the2hill in #1225
• fix: Remove v2 on non-public endpoints by @anande in #1227
• feat: OSPC-1562: Using Openstack Blazar image from ghcr rackerlabs registry by @niti6869 in #1233
• fix(gnocchi): Quote Ceph admin key by @LukeRepko in #1235
• Fixing the postgres operator config dir by @vish6760 in #1238
• fix: move yamllint config from preconf to file by @rackerchris in #1240
• Adding LVM configuration management by @BjoernT in #1231
• Add instance introspection to the Masakari by @zhmarvi in #1232
• Remove max_queue for libvirt to autodetect by @BjoernT in #1229
• feat: Add queue for swift to post billing info to by @cblument in #1208
• fix: convert cinder backend config to an example by @rackerchris in #1243
• fix: Updating redis tag versions to v8.2.2 by @the2hill in #1246
• chore: OSPC-1581: fixing yamllint error: [brackets] forbidden flow sequence by @niti6869 in #1247
• feat: [OSPC-1571] Use images from ghcr rackerlabs registry for Freezer by @anande in #1245
• fix: placement doesnt use rabbit by @rackerchris in #1241
• Added support for Talos Linux by @aedan in #1249
• fix: Updating octavia_preconf with optional post_deploy tags by @the2hill in #1248
• feat: Add Zaqar helm overrides by @Gaurav-t in #1251
• Fix: Cleanup work on install scripts by @aedan in #1253
• Upgrade MariaDB Operator Helm Chart to 0.38.1 and Galera Kustomize Patch by @vish6760 in #1250
• fix: resolving markdown bugs by @cloudnull in #1254
• chore: document exclude-from-external-load-balancers by @cloudnull in #1260
• Update Ironic Helm Overrides and Conductor HPA Resource Configuration by @vish6760 in #1259
• chore: use kube-ovn from genestack-images by @cloudnull in #1258
• fix: adjust metadata ratelimit by @cloudnull in #1256
• chore: set the VPNaaS target openstack-network-node by @cloudnull in #1262
• Remove nginx by @cloudnull in #1261
• chore: Add zaqar doc by @Gaurav-t in #1265
• Update Freezer image tags to 2025.1-latest by @anande in #1271
• feat: move prometheus-snmp-exporter to install script by @rackerchris in #1267
• chore: Add gateway-api listener file for zaqar by @Gaurav-t in #1275
• OSPC-1482: Added the ttlSecondsAfterFinished as a patch for the completed jobs by @jitendramahari in #1272
• fix: doc format by @cloudnull in #1269
• fix: RPCOS-271: Using masakari image for masakari db_sync pod by @pram0596 in #1270
• fix: fix bin/install-prometheus-snmp-exporter.sh typos by @awfabian-rs in #1278
• feat: auto generate product matrix by @rackerchris in #1268
• OSPC-1482: Made cleanup-openstack-completed-jobs.sh executable by @jitendramahari in #1281
• fix install-fluentbit.sh script to install fluentbit from openstack-helm repo by @puni4220 in #1273
• feat(bootstrap): Add --no-wait-cloud-init flag by @LukeRepko in #1282
• chore: update Prometheus blackbox exporter install etc by @awfabian-rs in #1280
• chore: remove extraneous lines from prometheus blackbox exporter over… by @awfabian-rs in #1283
• Separate skyline secret creation and Update docs by @reet8598 in #1266
• fix: Redis service uri in zaqar conf by @Gaurav-t in #1288
• fix: Updating create-skyline-secrets for use with hyperconverged lab by @the2hill in #1286
• Updating nova-compute Ironic HPA, Octavia amphora image config.. by @vish6760 in #1289
• Tech Preview: Add Manila to Genestack by @dwith in #1284
• Fix: Manila install-manila.sh overrides_args by @dwith in #1291
• feat: convert services to new install script template by @rackerchris in #1276
• chore: Update lab installation and setup script by @Gaurav-t in #1294
• fix: use global variable over static path by @rackerchris in #1296
• fix: update the observabilitiy arch diagram by @rackerchris in #1293
• chore: Updates zaqar doc and add its reference by @Gaurav-t in #1295
• chore: Add missing freezer configurations/docs by @anande in #1300
• support local collection installation, file-server Helm install and includes nova-compute-ironic in kustomization by @vish6760 in #1298
• fix: remove secondary sql connection for cinder by @rackerchris in #1301
• feat: push kubespray to v2.29.0 by @rackerchris in #1302
• feat: update base k8s to 1.33.5 by @rackerchris in #1303
• fix: Update setup-infra script to remove label breaking metallb for lab by @the2hill in #1297
• fix: Reverting envoy resource removal by @the2hill in #1304
• fix: Add zaqar doc reference into deployment guide by @Gaurav-t in #1306
• chore: Add zaqar reference by @Gaurav-t in #1307
• feat (nova): allow for nested virtualization in the hyperconverged lab by @rackerchris in #1308
• fix: (docs) correct installation script documentation for some exporters by @rackerchris in #1311
• Fix: Update Masakari Chart version for Introspection Addition by @zhmarvi in #1309
• Fix: Update cinder-volume default release/branch in Ansible playbooks by @dwith in #1310
• Fix: Manila component specific images by @dwith in #1312
• OSPC-1636: Added changes to make ACME_EMAIL to default email by @jitendramahari in #1314
• chore: fix docs for new references by @cloudnull in #1315
  ...

Release 2025.3.1

What's Changed

• chore: up the native workers for glance by @cloudnull in #933
• fix: docs/build-test-envs.md typo by @awfabian-rs in #939
• fix: remove duplicate lines from scripts/kube-ovn-convert.sh by @awfabian-rs in #938
• chore: Update original images by @github-actions[bot] in #922
• fix: lab script needs to install git on Debian by @OpenStackKen in #936
• fix: correctly non-set value to pick up openstack default by @rackerchris in #940
• docs(mariadb): Add info to help repair replication by @LukeRepko in #943
• Update hyperconverged lab script to fix deployment issues by @busterswt in #942
• Remove rabbitmq_queuesTotal alerting by @sulochan in #944
• Adds alerting rules for each openstack service queue by @sulochan in #945
• feat: add kustomize to kube-ovn by @cloudnull in #932
• Fix: Include alerting rules from base genestack by @sulochan in #947
• fix: (pip-wheel) include require packages to build wheels by @rackerchris in #946
• Remove storageclassname from helm config by @sulochan in #949
• fix: (mysql) remove secondary connection string as mariadb is not a t… by @rackerchris in #951
• fix: (nova) empty list mysql_sql_mode to allow oslo.db to use databas… by @rackerchris in #952
• fix: doc typo by @awfabian-rs in #950
• first ironic push by @joew7456 in #955
• Feat! (Glance): Add sane default policy for image download restrictions by @dwith in #954
• fix: (prometheus) only override our overrides and pin version by @rackerchris in #953
• chore: Update original images by @VijayKovvuri in #956
• modify prometheus blackbox exporter doc to source genestack.rc by @puni4220 in #958
• FIX! (Glance): download policy manual reversion. by @dwith in #960
• Rpcos 244 by @joew7456 in #959
• Rpcos 244 by @joew7456 in #962
• OSPC-1087: compress OVN backups before uploading to swift container by @niti6869 in #964
• fix: Updating mysql exporter to better monitor slave status by @the2hill in #965
• fix: Reverting prometheus override pruning to resolve issues by @the2hill in #966
• chore: Adding initial mariadb alerts focused on replication status by @the2hill in #967
• docs: Add tip about creating the creator role by @LukeRepko in #963
• OSPC-1285: Disable local log storage for amphora by @niti6869 in #972
• chore: Adding pod state alerts to better track restart failures by @the2hill in #969
• chore: patch the heat liveness probes by @cloudnull in #973
• fix: add random mac to all physical interfaces created by @cloudnull in #971
• chore: Docs status page autorefresh by @the2hill in #974
• OSPC-1046: Prune OVNDB backups in Swift by @niti6869 in #968
• build(deps): bump the pip group across 1 directory with 2 updates by @dependabot[bot] in #948
• feat: add per-pr smoke tests by @cloudnull in #935
• modify characters '-' to '_' in ironic db and rabbitmq passwords by @puni4220 in #979
• FIX (ansible): cinder deployment playbooks need to use inventory_host… by @dwith in #977
• Added policies for rabbitmq by @aedan in #975
• OSPC-908 Standardize subdirectory structure for services in base-kustomize by @Gaurav-t in #970
• chore: (python-openstackclient) update minimium version by @rackerchris in #980
• feat: add new image for keystone that supports rbac by @cloudnull in #981
• Update .original-images.json by @aedan in #983
• feat: Enable hyperconverged lab to have external OpenStack CLI access by @OpenStackKen in #986
• fix: Pin helm version and update keystone image by @LukeRepko in #988
• chore: Add barbican-exporter to original images by @pratik705 in #990
• feat: add new keystone images to support federation by @cloudnull in #992
• Update release-glance.yml by @alexiscarbillet in #994
• Update release-nova-oslodb.yaml by @alexiscarbillet in #995
• Update release-octavia-ovn.yml by @alexiscarbillet in #999
• Update release-horizon-rxt.yml by @alexiscarbillet in #998
• Update release-cinder-netapp.yml by @alexiscarbillet in #997
• Update release-neutron-oslodb.yaml by @alexiscarbillet in #996
• feat: add SAML federation support by @cloudnull in #989
• feat: add ability to run adhoc builds by @cloudnull in #976
• feat: (hpa) convert to using cpu metrics over mem metrics by @rackerchris in #982
• feat: add new Skyline image with enhancements by @sowm9802 in #1000
• Limit memcached to control plane placement by @BjoernT in #1002
• Update network config example by @BjoernT in #1001
• Documentation updates to increase readability by @BjoernT in #1004
• Add Masakari to Genestack by @zhmarvi in #1007
• Consolidate metallb configuration by @BjoernT in #1006
• fix: cinder service mapping in skyline configuration by @sowm9802 in #1009
• add new skyline image by @sowm9802 in #1008
• Docs: Add Decommission Cinder Block Node Process doc to Op Guide by @dwith in #1013
• fix: (hpa) rework hpa values based on minReplicas=2 by @rackerchris in #1014
• Feat: Add predictable iscsi initiator name to Ansible playbooks by @dwith in #1016
• chore: update federation doc by @cloudnull in #1015
• chore: convert the reference architecture diagram to mermaid by @cloudnull in #1018
• fix: Updating openstack exporter docs with proper values by @the2hill in #1019
• fix: Update docs title and copyright by @OpenStackKen in #1025
• chore: update the storage doc flow by @cloudnull in #1024
• chore: add doc for running mariadb cron job backup by @cloudnull in #1020
• Fix: Remove monitor-setup role by @dwith in #1010
• chore: Upgrade Kube-OVN to 1.13.x by @cloudnull in #1005
• chore: update the diagram for the SDLC by @cloudnull in #1029
• chore: update the ironic doc to use a mermaid diagram by @cloudnull in #1030
• fix: add retry for rabbitmq-cluster create by @cloudnull in #1028
• feat: (hpa) add limits to keystone-shib container by @rackerchris in #1031
• OSPC-696:Added new default_domain config parameter for OSPC-696 by @jitendramahari in #1021
• chore: add timeout for setup-openstack by @cloudnull in #1035
• chore: Update diagrams by @OpenStackKen in #1038
• chore: add gatewayDomain prep to workflow_dispatch by @cloudnull in #1039
• chore: update the hyp workflow name for custom lab name by @cloudnull in #1040
• fix: remove lab prefix when building a...

release-2025.3.0

What's Changed

• chore: up the native workers for glance by @cloudnull in #933
• fix: docs/build-test-envs.md typo by @awfabian-rs in #939
• fix: remove duplicate lines from scripts/kube-ovn-convert.sh by @awfabian-rs in #938
• chore: Update original images by @github-actions[bot] in #922
• fix: lab script needs to install git on Debian by @OpenStackKen in #936
• fix: correctly non-set value to pick up openstack default by @rackerchris in #940
• docs(mariadb): Add info to help repair replication by @LukeRepko in #943
• Update hyperconverged lab script to fix deployment issues by @busterswt in #942
• Remove rabbitmq_queuesTotal alerting by @sulochan in #944
• Adds alerting rules for each openstack service queue by @sulochan in #945
• feat: add kustomize to kube-ovn by @cloudnull in #932
• Fix: Include alerting rules from base genestack by @sulochan in #947
• fix: (pip-wheel) include require packages to build wheels by @rackerchris in #946
• Remove storageclassname from helm config by @sulochan in #949
• fix: (mysql) remove secondary connection string as mariadb is not a t… by @rackerchris in #951
• fix: (nova) empty list mysql_sql_mode to allow oslo.db to use databas… by @rackerchris in #952
• fix: doc typo by @awfabian-rs in #950
• first ironic push by @joew7456 in #955
• Feat! (Glance): Add sane default policy for image download restrictions by @dwith in #954
• fix: (prometheus) only override our overrides and pin version by @rackerchris in #953
• chore: Update original images by @VijayKovvuri in #956
• modify prometheus blackbox exporter doc to source genestack.rc by @puni4220 in #958
• FIX! (Glance): download policy manual reversion. by @dwith in #960
• Rpcos 244 by @joew7456 in #959
• Rpcos 244 by @joew7456 in #962
• OSPC-1087: compress OVN backups before uploading to swift container by @niti6869 in #964
• fix: Updating mysql exporter to better monitor slave status by @the2hill in #965
• fix: Reverting prometheus override pruning to resolve issues by @the2hill in #966
• chore: Adding initial mariadb alerts focused on replication status by @the2hill in #967
• docs: Add tip about creating the creator role by @LukeRepko in #963
• OSPC-1285: Disable local log storage for amphora by @niti6869 in #972
• chore: Adding pod state alerts to better track restart failures by @the2hill in #969
• chore: patch the heat liveness probes by @cloudnull in #973
• fix: add random mac to all physical interfaces created by @cloudnull in #971
• chore: Docs status page autorefresh by @the2hill in #974
• OSPC-1046: Prune OVNDB backups in Swift by @niti6869 in #968
• build(deps): bump the pip group across 1 directory with 2 updates by @dependabot[bot] in #948
• feat: add per-pr smoke tests by @cloudnull in #935
• modify characters '-' to '_' in ironic db and rabbitmq passwords by @puni4220 in #979
• FIX (ansible): cinder deployment playbooks need to use inventory_host… by @dwith in #977
• Added policies for rabbitmq by @aedan in #975
• OSPC-908 Standardize subdirectory structure for services in base-kustomize by @Gaurav-t in #970
• chore: (python-openstackclient) update minimium version by @rackerchris in #980
• feat: add new image for keystone that supports rbac by @cloudnull in #981
• Update .original-images.json by @aedan in #983
• feat: Enable hyperconverged lab to have external OpenStack CLI access by @OpenStackKen in #986
• fix: Pin helm version and update keystone image by @LukeRepko in #988
• chore: Add barbican-exporter to original images by @pratik705 in #990
• feat: add new keystone images to support federation by @cloudnull in #992
• Update release-glance.yml by @alexiscarbillet in #994
• Update release-nova-oslodb.yaml by @alexiscarbillet in #995
• Update release-octavia-ovn.yml by @alexiscarbillet in #999
• Update release-horizon-rxt.yml by @alexiscarbillet in #998
• Update release-cinder-netapp.yml by @alexiscarbillet in #997
• Update release-neutron-oslodb.yaml by @alexiscarbillet in #996
• feat: add SAML federation support by @cloudnull in #989
• feat: add ability to run adhoc builds by @cloudnull in #976
• feat: (hpa) convert to using cpu metrics over mem metrics by @rackerchris in #982
• feat: add new Skyline image with enhancements by @sowm9802 in #1000
• Limit memcached to control plane placement by @BjoernT in #1002
• Update network config example by @BjoernT in #1001
• Documentation updates to increase readability by @BjoernT in #1004
• Add Masakari to Genestack by @zhmarvi in #1007
• Consolidate metallb configuration by @BjoernT in #1006
• fix: cinder service mapping in skyline configuration by @sowm9802 in #1009
• add new skyline image by @sowm9802 in #1008
• Docs: Add Decommission Cinder Block Node Process doc to Op Guide by @dwith in #1013
• fix: (hpa) rework hpa values based on minReplicas=2 by @rackerchris in #1014
• Feat: Add predictable iscsi initiator name to Ansible playbooks by @dwith in #1016
• chore: update federation doc by @cloudnull in #1015
• chore: convert the reference architecture diagram to mermaid by @cloudnull in #1018
• fix: Updating openstack exporter docs with proper values by @the2hill in #1019
• fix: Update docs title and copyright by @OpenStackKen in #1025
• chore: update the storage doc flow by @cloudnull in #1024
• chore: add doc for running mariadb cron job backup by @cloudnull in #1020
• Fix: Remove monitor-setup role by @dwith in #1010
• chore: Upgrade Kube-OVN to 1.13.x by @cloudnull in #1005
• chore: update the diagram for the SDLC by @cloudnull in #1029
• chore: update the ironic doc to use a mermaid diagram by @cloudnull in #1030
• fix: add retry for rabbitmq-cluster create by @cloudnull in #1028
• feat: (hpa) add limits to keystone-shib container by @rackerchris in #1031
• OSPC-696:Added new default_domain config parameter for OSPC-696 by @jitendramahari in #1021
• chore: add timeout for setup-openstack by @cloudnull in #1035
• chore: Update diagrams by @OpenStackKen in #1038
• chore: add gatewayDomain prep to workflow_dispatch by @cloudnull in #1039
• chore: update the hyp workflow name for custom lab name by @cloudnull in #1040
• fix: remove lab prefix when building a...

release-2025.2.6.1

What's Changed

• fix: update to use latest skyline image by @rackerchris in #1108
• fix: add static vendordata mount point to nova-compute pods (#1110) by @rackerchris in #1111

Full Changelog: release-2025.2.6...release-2025.2.6.1

release-2025.2.6

What's Changed

This release is a maintenance release that will include a new version of our UI along with lifecycle changes for deployments and daemonset for the OpenStack app. There are further enhancements to the default values for HPA across all open stack services and various bug fixes in regards to HPA.

Feature: A change was made to the cinder policies to allow for all users to read volume type properties. This was needed to allow for billing information to be configured at the flavor level with the following property: ":price=".

Another policy change was allowing for readers to read flavors in octavia as well.

Major skyline changes with the addition of a secrets panel that fully implments the barbician api spec.

release-2025.2.5

What's Changed

• Release 2025.2.3.5
• Adds IPAM alerts
• Fixes for prometheus install/deploy of alerts

Full Changelog: release-2025.2.4...release-2025.2.5

release-2025.2.4

What's Changed

• Release 2025.2.4
• Adds new keystone image that supports rbac
• Skyline bugfix add cinder service mapping configuration

release-2025.2.3

What's Changed

• Release 2025.2.3
• Standardize genestack openstack service workers to 2, threads to 1, process to 1 across all
• Tuned genestack HPA based on new workers/threads/processes values
• Enabled keystone-saml auth functionality
• Added masarki as a new service
• Various alerting enhancements
• Various monitoring exporter improvements
• Now compressing ovn/database backups and pruning old ones
• Rabbitmq queue replica policy addition to limit replicas to 3
• minReplicas for all openstack services set to 2
• Added pre-PR smoke test
• Updated various component versions, i.e. bumped openstack-client version
• Various node selector and liveness probe updates
• Add random mac to all physical interfaces created
• Various improvements to ansible cinder installation
• Various doc changes