openstack/openstack-helm — Week of 2026-08-01

Secret and endpoint cleanup. The bulk of the week's churn — roughly 700 lines — went into pruning unused metadata from chart plumbing. The endpoints TLS client-secret metadata was dropped across the tree, and non-admin oslo_db user secrets were removed where charts had been carrying them unnecessarily. A related Keystone fix ensures empty Secret data renders as {} rather than null, avoiding a subtle templating pitfall (999346).

Nova and Neutron behavior. Nova's db-sync job now sources cell mapping values directly from nova.conf instead of duplicating them, and terminationGracePeriodSeconds was raised to 180s to give pods room to shut down cleanly. On the Neutron side, nova_metadata_protocol is now auto-computed from the compute_metadata endpoint, and the OVS agent init grew an nf_tables fallback for modprobe on hosts without the legacy backend.

Horizon and Cinder knobs. Horizon gained configuration support for DEFAULT_SERVICE_REGIONS and SECONDARY_ENDPOINT_TYPE, and Cinder's bootstrap job now accepts custom script injection for site-specific setup steps.