openstack/openstacksdk — Week of 2026-10-24

Barbican key-manager. The largest body of work this week lands in the key-manager service, with proper microversion negotiation for Barbican and a new secret store migrate helper that together add roughly 700 lines of driver code. The migrate helper gives callers a programmatic path to move secrets between configured backends.

Config and retries. The session/adapter layer gained wiring to pass status-code retry options from clouds.yaml through to the underlying adapter, backported across three branches. A companion pair of changes adds a new connect_retry_delay knob and threads it through get_session_client.

Bug fixes. find_domain now falls back to resolving the domain from the token when the catalog lookup returns Forbidden, unblocking users without global domain-list rights. Separately, connect_as no longer lets ambient OS_* environment variables override an explicitly requested project — a long-standing footgun for multi-project scripts.

Maintenance. The Resource.has_body attribute was removed as part of ongoing resource-layer cleanup, and the post-review Zuul queue was re-enabled.