openstack/neutron — Week of 2026-09-19

L3 and agent robustness. The largest single change tightened HA state file permissions for the keepalived monitor, a fix to L3 HA plumbing. On the OVS agent side, two backports each landed a guard preventing the source agent from processing ports mid-migration, alongside paired fixes to avoid stale flow deletion at ovs-agent startup. Distributed port bindings also gained a test exercising a stale-leak scenario and a companion fix to reap the stale binding on unbind.

OVN and BGP backends. OVN work skipped trunk management for external-type parent ports and healed segment bridge reconcile in matched master+backport pairs. The BGP dynamic routing work generalized the spine and leaf Ansible roles and simplified the topology to assume a single provider switch, plus added new BGP API and scenario tests.

API and services. Default security group creation now goes through the RBAC API policy path. QoS gained handling for a missing port binding when building the resource request, and dnsmasq's --dhcp-range was narrowed to local subnets only.

Maintenance. The 2027.1 (Indri) DB branch was opened, several unit-test teardown leaks (subprocess pipes, WatchedFileHandler, ProcessMonitor) were closed, and tox dropped a redundant passenv.