openstack/kolla-ansible — Week of 2026-10-17

CI and baremetal testing. The headline work swapped in Tenks to emulate Redfish baremetal in the ironic CI job, landing on master and backporting roughly 70 lines of playbook and job plumbing. Supporting CI changes moved telemetry scenario jobs to 16GB nodesets, set tcp_retries2 to 6 in multinode jobs, stopped failures on Neutron wrapper–managed containers, added a missing httpd image to the multi-compute-ironic job, and forced image builds unconditionally.

TLS and ProxySQL. A stable-only change splits the CA used for ProxySQL internal TLS from the backend TLS CA, backported to two branches, with a follow-up fixing the proxysql-ca.pem location referenced in the 2026.1 release note.

Bug fixes. Container unhealthy checks were corrected across three branches. The ETCD health check, previously hardcoded to HTTP, now respects TLS (1010000). The Fluentd OpenSearch output address was corrected on master and stable. HAProxy timeout variables for the cloudkitty API returned via a Revert^2, and redis was dropped from the valid values for osprofiler_backend. A Grafana cleanup removes the "Disable Getting Started panel" tasks on two branches.

Maintenance. Master was bumped to use the 2026.2 release.