Current Series Release Notes

27.0.0-7

New Features

• The new cpu.delay meter has been added. This meter shows total CPU steal time observed per instance.

• The Prometheus exporter now supports mutual TLS (mTLS). Setting the new [polling] prometheus_tls_client_ca option (with prometheus_tls_enable on) makes the scrape endpoint require clients to present a certificate signed by that CA, so only authorized scrapers can read the metrics.

Upgrade Notes

• The [service_types] cinder option now defaults to block-storage, which is the official and authorized service type name for cinder.

Security Issues

• Previously the Prometheus exporter endpoint was unauthenticated: any client able to reach the port could scrape all metrics, even with TLS enabled. It can now be locked down with mutual TLS via [polling] prometheus_tls_client_ca.