openstack/openstack-helm — Week of 2026-10-31

Operator-managed data services. The dominant work this week moves the remaining per-service databases and messaging accounts off bespoke jobs and onto Kubernetes custom resources, with roughly 5,600 lines converting services to MariaDB custom resources and another 3,600 provisioning the remaining RabbitMQ accounts the same way. Alongside this, the db-init, db-drop, and db-sync job dictionaries were reformatted one key per line to make these templates easier to diff and extend.

Ceph and platform features. The Ceph chart grew support for both aes and aes256k CephX auth keys (~2,500 lines). Octavia and Masakari pods gained tolerations knobs, Skyline picked up an explicit worker_processes setting instead of auto-detection, and Masakari monitors can now append a domain to the host name. RabbitMQ was bumped to 4.3.7.

Fixes. A batch of small corrections cleaned up chart rendering: compute-ironic StatefulSet tolerations, Masakari API pod mounts, Neutron ironic-agent toleration indentation, Ironic cleaning-subnet lookup by name, Horizon message compilation in subshells, a Grafana database URL charset drop, and a ks-domain-user fix that stops passing the password to user create. The deploy-env role also now matches the Calico MTU to the overlay.