openstack/openstack-ansible — Week of 2026-10-17

Documentation. The largest change this week is a new ~460-line guide for building Windows Server images for OpenStack, landing under the deployment docs (1006014). A smaller docs pass refreshes stale references in the leftover setup-* playbook instructions.

Deployment features and cleanup. The RADOS Gateway role gains support for the hashi_vault PKI backend, giving operators a Vault-issued certificate path for rgw endpoints. HAProxy configuration was updated to track a renamed Ceph group. On the removal side, the step-ca AIO scenario was dropped (~250 lines gone) and the VMware NSX-specific bits were pruned from inventory, continuing the trim of unmaintained scenarios.

Stability and AIO tuning. Masakari WSGI processes and Octavia workers both got hard caps for AIO deployments to keep gate footprints predictable. The molecule base image was switched to a systemd-ready Rocky Linux variant, and molecule/ansible-lint pins were bumped. A lingering numpy version override was removed.

Release plumbing. SHAs were bumped for the 33.1.0 release, the Zun Tempest SHA was refreshed, and a round of Zanata translations was imported.