2026.2 Series Release Notes¶

9.0.0.0rc1-3¶

Adds IdP choosing panel to Skyline. Previously, to use SSO in Skyline, users would have to choose the protocol, then be redirected to the identity federation provider for Keystone, and then enter their credentials in the IdP. This change makes Skyline work just as Horizon does, rendering the different options of IdP in the front end for the users to select.

Add support for downloading clouds.yaml files from the user dropdown menu. Users can now choose between password and application credential authentication types, matching the existing OpenRC file download functionality. The clouds.yaml format is the standard configuration file supported by openstacksdk and most OpenStack client libraries.

Add support for creating subnets from a subnet pool. When creating a subnet, users can now select a subnet pool instead of manually entering a CIDR. If a subnet pool is selected, the CIDR field is hidden and a prefix length input is shown instead. This is particularly useful for public IPv6 deployments where subnet pools are commonly used to allocate prefixes from a shared address space.

Add TOTP (Time-based One-Time Password) two-factor authentication support. Users can now enable TOTP in their user center, scan a QR code to set up their authenticator app, and enter TOTP codes during login. Administrators can view and manage TOTP status for users in the admin panel.

The browser tab title now includes the current Skyline Console page, making it easier to identify open console tabs.

Support multi-region switching.
- Add region selector in the header for switching regions after login.
- Remove region selection from login page; login automatically uses the backend-configured default region.

Fixed hypervisor display crash for hosts with dedicated (pinned) CPUs (LP#2154443). The Skyline Console now correctly handles compute hosts that use PCPU (physical CPU) inventory instead of VCPU, which occurs when cpu_dedicated_set is configured in nova.conf. The UI now displays the correct CPU type (vCPU, pCPU, or pCPU+vCPU for mixed configurations) in both the hypervisor list and detail views.

Fixed port forwarding creation failing because external_port and internal_port were sent as strings instead of integers to the Neutron API (LP#2112167). Single port values from the create and edit forms are now converted to integers before submission. Port ranges are unaffected as they use the external_port_range and internal_port_range string fields.

Fix Windows instance password handling. Previously, adminPass was hashed with SHA-512-crypt before being sent to Nova, which is incorrect for QEMU Guest Agent and Config Drive delivery. The hashing belongs only in getUserData() for cloud-init’s chpasswd --encrypted.

Additionally, metadata.admin_pass is now set so that cloudbase-init can retrieve the password via the HTTP metadata service. Without this, Windows instances could not set the admin password unless a Config Drive was attached, since Nova only exposes adminPass via Config Drive.

Linux user_data generation (chpasswd) is now skipped for Windows images, as cloudbase-init cannot use chpasswd. Custom user_data (e.g. PowerShell scripts) is passed through as-is. LP #2164759