openstack/ironic — Week of 2026-08-01

Console containers. A new container-based console provider landed for the VNC subsystem, arriving as roughly 860 lines across the provider itself, [vnc]container_* config options, devstack support, and user documentation. This gives operators an alternative path for serving node consoles via managed containers rather than in-process processes.

Kernel command line handling. A multi-patch series reworked how Ironic constructs kernel arguments for deployed images. A new KernelParameterString config type and an UnsafeKernelCommandLine class now back parsing logic that was wired into both _prepare_iso_image and build_extra_pxe_options, giving a single validated representation of kernel parameters across the ISO and PXE paths.

Security and stability. A fix for poisoning of the allowed origin list shipped to master and was backported to three stable branches. TBN evaluation of collection-typed items was corrected on two branches, LLDP TLV value length and interface counts are now bounded, Redfish virtual media cleanup now powers the node off before ejection, and another attempt landed at fixing fast-track after inspection. An OCI-specific TLS settings option was also added for image pulls.

Branch and CI plumbing. The bugfix/38.0 branch was cut, with local upper-constraints pinning, a virtualbmc cap to dodge a Python conflict, .gitreview update, a switch to CentOS 10 IPA image builds, removal of a scope-enforcement disable, and enabling the oslo_versionedobjects.mypy plugin.