openstack/kolla-ansible — Week of 2026-09-26

TLS and service fixes. MariaDB backup now includes the CA certificate when connecting over TLS to the database, closing a gap for TLS-enabled deployments. The ETCD health check, previously hardcoded to HTTP, now honors the configured scheme. HAProxy timeout variables for the cloudkitty API return via a Revert^2, and Grafana gains support for proxy environment variables.

CI hardening. A coordinated set of four backports pushes jobs to prefer IPv4 over IPv6 and disables the Docker mirror, applied consistently across the active stable branches to unblock gate runs.

Maintenance. A stale kolla-toolbox.json.j2 template was removed from kolla-toolbox, and lint requirements picked up a routine ansible-lint/j2lint bump.