openstack/openstack-helm — Week of 2026-09-26

Feature direction. The headline is a ~800-line spec for declarative Keystone identity management, sketching a model for managing users, projects, and roles through chart values rather than imperative bootstrapping. Alongside it, the Barbican chart gained support for the RabbitMQ operator's CRDs, and the Neutron chart picked up a StatefulSet mode for the Ironic agent.

Neutron hardening. A cluster of Neutron fixes landed: correcting the image and security context used by the OVN agents, giving the DHCP and L3 agent init containers a security context, wiring up rpc-server resources and dependencies, and adding missing pod annotations to the OVN VPN agent. A noop chart rebuild was pushed to republish the artifact.

Stability. Nova's liveness probes were redirected at the uwsgi stats port, RabbitMQ's broker open-file limit was raised, and a fix keeps charts from being lost when post events are superseded. Helm test pods now retain their logs on failure, and the RabbitMQ helm test no longer demands a partitions key.

Tooling and CI. Jobs were restructured into fewer, larger CI jobs, MetalLB and chart-testing downloads gained retries, and Prometheus was moved to v3.13.3 LTS.