openstack/ironic — 2026-11-07

Operator tooling and inspection. A new inspection-rules check landed in ironic-manage (~600 lines) along with its documentation. On the inspection data path, compatibility between IPA and Redfish inspection improved, Redfish NIC discovery now populates PCI fields, and the pci_devices hook was taught to work with Redfish inspection — that fix was backported across five stable branches.

Networking and security. A substantial fix addressed cases where Neutron ports were not being tracked against the baremetal port (~680 lines touched). Two security hardenings landed as well: the OCI client now enforces stricter host trust across redirects and pagination, and the Ansible deploy interface writes its configdrive into a private temporary directory.

Hardware enablement. redfish-virtual-media was enabled on iDRAC10, and the Kubernetes console provider gained a configurable namespace.

Maintenance. SQLAlchemy usage moved off declarative_base, mypy was bumped with a preference for import-untyped ignores, and a small fix cleared mypy errors introduced by oslo.config 10.8.0. On the test side, UEFI assets are now built into the Debian partition image fixture, new unit tests cover TBN Enums, and an anaconda test's deploy interface setting was corrected.