2025.2 Series Release Notes¶

25.0.0-3¶

The Keystone v3 ec2token end point requires authenticated access. The Heat ec2token filter now requires Keystone auth settings to be able to verify EC2 credentials. For single cloud mode the ec2token filter will look in the [ec2authtoken] section of the heat configuration for keystone authentication settings.

In multicloud mode keystone auth settings must be supplied in configuration file sections names [ec2authtoken.<name>] . The [ec2authtoken] clouds option should be also configured to define the list of names.

Note that ec2token request will be sent without authentication if the legacy settings (auth_uri and allowed_auth_uris) are still used.

All wsgi application implementations using eventlet for heat-api, heat-api-cfn and heat-all are removed as a precusror to dropping eventlet usage from heat.

Integration with monasca has been removed because the monasca project was retired. Because of the removal, the following resource types are no longer supported and now hidden.
- OS::Monasca::AlarmDefinition
- OS::Monasca::Notifications
Also, the options in [clients_monasca] section have been removed.

Support for Python 3.9 has been removed. Now Python 3.10 is the minimum version supported.

The heat-api console script and the heat-api-cfn console script, which are used to launch standalone api services, have been deprecated and will be removed in a future release. It is now highly recommended to Use the wsgi scripts (or wsgi applications directly) instead.

The legacy engine has been deprecated and convergence engine will be the only supported engine. Due to this deprecation, the following options have been deprecated.
- [DEFAULT] convergence_engine
- [DEFAULT] enable_stack_abandon
- [DEFAULT] enable_stack_adopt

The root_app_factory composite factory has been deprecated, because it is equivalent the urlmap factory from paste. Replace usage in api-paste.ini in case the file is modified to use customized pipelines.

Enable the creation of an OS::Neutron::VPNService resource, and an OS::Neutron::IPsecSiteConnection resource that depends on it, within the same stack.