openstack/manila — Week of 2026-11-14

Scheduler. Capacity and placement logic saw several refinements. The scheduler now consults replica_state when guarding snapshot-reserved capacity, so non-active replicas no longer skew reservations (983509-adjacent work aside, see the dedicated change). A pair of changes also propagate goodness_function and filter_function from configuration down to individual pools, giving operators per-pool weighing control without driver changes.

Security hardening. SSH command construction in share drivers was reworked to eliminate shell-injection surfaces, touching ~140 lines across the driver helpers. Separately, security service lookups are now scoped to the requesting project, closing a cross-project visibility gap in the API.

Driver and data fixes. The NetApp driver no longer places share servers into the Default IPspace during SVM Migrate. On the API side, filters and sort keys are honored again when listing snapshots for a share, the share schema was corrected, and a wrong-exception bug in share_instance_access_delete was fixed. A DB migration (805685098bd2) now looks up the share_servers foreign-key name dynamically rather than assuming it, unbreaking upgrades on backends that auto-name constraints.

Tooling. Grenade's resources.sh was migrated off the deprecated manila CLI to openstack client commands, and the api-ref got a small touch-up.