January 2026 - Yaook - lists.alasca.cloud

Release v1.1.0 "solves" immutable must have randomly generated names" but will disconnect nova-compute from MQ

by Stefan Hoffmann

Hi, regarding the immutable must have randomly generated names issue: The issue is "solved" in the latest release v1.1.0 BUT if a new compute- node with same name got created, the change will interrupt connectivity to MQ of the nova-compute POD.[1] As the nova-operator recreates the nova-compute-node, a new MQ user with the same username (but different resource name) get's created and than we have 2 MQ users one old "failing" one new. With rolling out [2] the old one can get deleted, but as the username at MQ is the same, the new one don't work for the nova-compute node anymore, till infra-operator recreates the user. So [2]will lead to an interruption of nova-compute MQ connectivity. One "solution" would be to delete the finalizer for all MQ users stuck in immutable-State before rolling out the release. Or you hope, no actions are done to our OpenStack, till the MQ user got updated. Feel free to discuss possible solutions at [1] Regards Stefan [1] https://gitlab.com/yaook/operator/-/issues/630 [2] https://gitlab.com/yaook/operator/-/merge_requests/3331 -- Stefan Hoffmann DevOps-Engineer Cloud&Heat Cloud&Heat Technologies GmbH Königsbrücker Straße 96 (Halle 15) | 01099 Dresden +49 351 479 367 36 stefan.hoffmann(a)cloudandheat.com | www.cloudandheat.com Green, Open, Efficient. Ihr Cloud-Service- und Cloud-Technologie-Provider aus Dresden. [1] Commercial Register: District Court Dresden Register Number: HRB 30549 VAT ID No.: DE281093504 Managing Director: Nicolas Röhrs Authorized signatory: Dr. Marius Feldmann [1] Ihr Cloud-Service- und Cloud-Technologie-Provider aus Dresden. https://www.cloudandheat.com/

Jan. 29, 2026

OpenStack CVE-2026-22797 Privilege Escalation via Identity Headers in External OAuth2 Tokens

by Stefan Hoffmann

Hi yaook users, today OpenStack published a CVE for a keystone middleware external_oauth2_token. As you can't activate this middleware with yaook currently, we are not affected. https://yaook.cloud/security-advisories-cve-2026-22797/ Best regards, Stefan -- Stefan Hoffmann DevOps-Engineer Cloud&Heat Cloud&Heat Technologies GmbH Königsbrücker Straße 96 (Halle 15) | 01099 Dresden +49 351 479 367 36 stefan.hoffmann(a)cloudandheat.com | www.cloudandheat.com Green, Open, Efficient. Ihr Cloud-Service- und Cloud-Technologie-Provider aus Dresden. [1] Commercial Register: District Court Dresden Register Number: HRB 30549 VAT ID No.: DE281093504 Managing Director: Nicolas Röhrs Authorized signatory: Dr. Marius Feldmann [1] Ihr Cloud-Service- und Cloud-Technologie-Provider aus Dresden. https://www.cloudandheat.com/

Jan. 15, 2026

New Release Management - release-notes needed for all MRs

by Stefan Hoffmann

Hi yaook-developers, we will merge soon the new release management to yaook[1]. It requires to create release notes for each MR. Temporary link to the docs how to create release notes (when the MR is merged, there will be a static one): [2] Related Issue: [3] [1] https://gitlab.com/yaook/operator/-/merge_requests/2825 [2] https://yaook.gitlab.io/-/operator/-/jobs/12682421941/artifacts/public/deve… [3] https://gitlab.com/yaook/operator/-/issues/490 Best regards Stefan -- Stefan Hoffmann DevOps-Engineer Cloud&Heat Cloud&Heat Technologies GmbH Königsbrücker Straße 96 (Halle 15) | 01099 Dresden +49 351 479 367 36 stefan.hoffmann(a)cloudandheat.com | www.cloudandheat.com Green, Open, Efficient. Ihr Cloud-Service- und Cloud-Technologie-Provider aus Dresden. [1] Commercial Register: District Court Dresden Register Number: HRB 30549 VAT ID No.: DE281093504 Managing Director: Nicolas Röhrs Authorized signatory: Dr. Marius Feldmann [1] Ihr Cloud-Service- und Cloud-Technologie-Provider aus Dresden. https://www.cloudandheat.com/

Jan. 12, 2026

Yaook SCS Operator hackathon 2026-02-26, Hamburg - save the date!

by Friedrich Zahn

Hi, the ALASCA-FOCIS team, supported by Dataport, UhuruTec and other community members, is planning a one day hackathon to work on a Yaook SCS Operator that will make it easier to run SCS-IaaS compliant Yaook cloud offerings. Save the date: 2026-02-26 in Hamburg. More details will follow soon, stay tuned! Feel free to get back to me with any questions or suggestions. Best regards Friedrich

Jan. 8, 2026

Broken rolling release 0.20251212.0-rolling.T112342.g9c644a7aea39

by Stefan Hoffmann

Hi, the releases 0.20251212.0-rolling.T112342.g9c644a7aea39 and newer are broken with VM action fails due to service_token_roles_required=true at neutron (and other services). But neutron doesn't has the nova-compute role as allowed service-token-role in it's config[1]. So don't roll it out to your neutron and barbican operator. Currently there is no stable release with this bug. There is already a fix[2] in creation. Best regards Stefan [1] https://gitlab.com/yaook/operator/-/issues/643 [2] https://gitlab.com/yaook/operator/-/merge_requests/3318 -- Stefan Hoffmann DevOps-Engineer Cloud&Heat Cloud&Heat Technologies GmbH Königsbrücker Straße 96 (Halle 15) | 01099 Dresden +49 351 479 367 36 stefan.hoffmann(a)cloudandheat.com | www.cloudandheat.com Green, Open, Efficient. Ihr Cloud-Service- und Cloud-Technologie-Provider aus Dresden. [1] Commercial Register: District Court Dresden Register Number: HRB 30549 VAT ID No.: DE281093504 Managing Director: Nicolas Röhrs Authorized signatory: Dr. Marius Feldmann [1] Ihr Cloud-Service- und Cloud-Technologie-Provider aus Dresden. https://www.cloudandheat.com/

Jan. 8, 2026