Prelude¶

The Kolla project publishes images to quay.io. These are however only intended for demonstration and testing purposes. In particular, they do not undergo any security scrutiny. If you intend to deploy Kolla for production purposes, you are advised to create and curate your own set of images.

New Features¶

• Adds support for buildingCentOSStream10 andRockyLinux10container images. In order to build such images please pass--basecentos--base-tagstream10 or--baserocky--base-tag10tokolla-build.

Bug Fixes¶

• Fixed a memory leak in Gnocchi caused bynumpy==2.2.3.The dependency was pinned to a safe version to prevent excessivememory consumption (seeGnocchi issue #1463).LP#2122488

• As announced in July 2025,the RabbitMQ project has changed the location and signing key for their Debian andUbuntu packages. The repository configuration has been updated accordingly.LP#2131736

• Updates the InfluxDB repository GPG key from the expiredinfluxdata-archive_compat.key to the recommendedinfluxdata-archive.key as perhttps://repos.influxdata.com.

• Install syslinux-tftpboot in the ironic-pxe RPM image on all architecturesso TFTP boot files (pxelinux.0, chain.c32, ldlinux.c32) are present onaarch64.

Upgrade Notes¶

• Support for buildingneutron-linuxbridge-agent container image hasbeen dropped following removal in Neutron.

Upgrade Notes¶

• Debian container image builds now use Epoxy (2025.1) repositoriesof Debian OpenStack.

• Debian container image builds now use bookworm suitefor RabbitMQ installation.

• Switches Erlang RPMs on aarch64 to a versioned Erlang 26 or 27 repository,due to Fedora COPR not supporting multiple package versions in one repo.

Bug Fixes¶

• Ensures Kolla uses only configured APT mirror on Ubuntu for full source control.LP#2112140

• Fixes set_configs.py not detecting removed config filesduring –check, which prevented container restart whenneeded.LP#2114173

• Fixed missing metrics in Prometheus libvirt exporter.

  The Prometheus libvirt exporter has been bumped fromv1.6.0 tov2.2.0. This restores some metrics that were lost when the exportersource was changed in a previous release.

  LP#2120639.

• Fix using Cinder as Glance image store when Cinder uses a FC or iSCSIbackend by adding the missinglsscsi package to glance-api.LP#2111828

Upgrade Notes¶

• Backup files are now stored in timestamped directories and have new filenames.This does not affect restore, as Kolla Ansible does not support automated restore;users perform restores manually. A new full backup is recommended after upgradeto ensure incremental backups work correctly.

Bug Fixes¶

• Fixes incremental MariaDB backups by switching to directory-based base backups,following official Mariabackup recommendations.LP#2111620

• Fixneutron-l3-agent image builds on Rocky Linux by removingdibbler-client dependency. The package is no longer used in Neutron.LP#2112575

New Features¶

• Adds aarch64 iPXE support to the ironic-pxe image, by addingipxe-bootimgs-aarch64 RPM package to Rocky Linux ironic-pxeimages, and ensuring that an aarch64 iPXE binary is availablein Ubuntu ironic-pxe images. No support for aarch64 iPXE inDebian images is included, as the distro packages do notinstall an aarch64 binary.

• Adds a support for external account binding (EAB) in Let’s Encrypt.

• Extends the support of externally-managed projects provided by the--docker-dir option with an ability to useconfigure_userjinja2 macros like Kolla built-in projects.The operator should specify “non-default” user details with<custom_user_name>-user configuration section and include info foruid andgid at least.

• Updated the contents of Python package options in documentation to reflectlatest customisation methods.

• Added ESP image needed for UEFI virtual media boot. More context inIronic documentation.

• Improves logging format of kolla containers by addingtimestamps with milliseconds, log levels, and a customdate format.

• Add support for patching container images during build.See thebuild guidefor details.

• Upgrade Let’s Encrypt lego from version to version v4.20.4 for betterhandling of custom ACMEs and general improvements. Changelog:https://github.com/go-acme/lego/compare/v4.15.0…v4.20.4

• Updates Prometheus version to v3.2.1. Also, switches back totheprometheus-server generic image name by removing thev2 part.

Known Issues¶

• libnetfilter_log, which is required in neutron-l3-agent when fwaas_v2_logis enabled, is not available in official rpm repos and enabling thisfeature on rpm platforms will prevent neutron-l3-agent from running.

Upgrade Notes¶

• Kolla toolbox is now usingansible-core2.18

• The use ofUPPER_CONSTRAINTS_FILE environment variable was moved frombase_pip_conf block in base Dockerfile tokolla_toolbox_pip_confblock in kolla-toolbox Dockerfile as the environment variable now onlyaffects Kolla-toolbox build.Bifrost python upper-constraints now follows openstack-base’spython upper-constraints instead ofUPPER_CONSTRAINTS_FILE environmentvariable.

• Debian container image builds now use Dalmatian (2024.2) repositoriesof Debian OpenStack.

• Users who parse Docker container logs should take into accountthat for exampleINFO:__main__:Validating config file is nowYYYY-MM-DD HH:MM:SS.fff INFO Validating config file.

• RabbitMQ version has been upgraded to4.0.

• Update Prometheus services to latest releases:

  • prometheus-alertmanager: 0.28.0 -> 0.28.1

  • prometheus-blackbox-exporter: 0.24.0 -> 0.25.0

  • prometheus-cadvisor: 0.49.1 -> 0.49.2

  • prometheus-elasticsearch-exporter: 1.7.0 -> 1.8.0

  • prometheus-memcached-exporter: 0.14.2 -> 0.15.0

  • prometheus-mtail: 3.0.0-rc54 -> 3.0.8

  • prometheus-mysqld-exporter: 0.15.1 -> 0.16.0

  • prometheus-node-exporter: 1.7.0 -> 1.8.2

  • prometheus 2.50.1 -> 2.55.1

  This upgrade migrates to a new TSDB format which iscompatible with Prometheus v3.

• Prometheus will be upgraded from v2 to v3 - which introduces minor breakingchanges. Make sure there’s version 2.5.5 or later running before attemptingan upgrade. Read the official migration guide for more details:https://prometheus.io/docs/prometheus/3.0/migration/.

• uwsgi anduwsgi-plugin-python3 installation has been moved frombarbican-base image toopenstack-base.

Deprecation Notes¶

• Buildingbifrost-deploy container image has been deprecated, in favorof a new ironic standalone deployment usingironic container imagesthat will be implemented inkolla-ansible in the next cycles.

• swift images have been deprecated for removal in2025.2.

Bug Fixes¶

• Fixes the inconsistency issue between config.json andreal state in the container.LP#2060855

• Python3-pip installs the dependent package tzdata andblocks the mount of the /etc/localtime file in docker.LP#2091161

• Removes Git remote URLs after cloning to prevent credential exposure.LP#2098904

• Ensure that ipxe-snponly-aarch64.efi is available in/tftpboot in Centos and Rocky after bootstrappingironic-pxe.

• libnnetfilter_log has been added to deb platforms in order to supportthe fwaas_v2_log feature in neutron l3 agent.

• Fixes a bug with Thales Luna HSM deployments.The new client software version requires the use of a specific groupcalled “hsmusers”, and for consistency reasons, we are specifyingboth, the user id and the group id, and inserting the Barbican usernameinside of such a group.More information can be found atLP#Luna

• Remove the gnocchixyz-gnocchi-datasource plugin from grafana due to angularplugins being deprecated

• Fixes ironic-conductor missing mtools package.