Add prelude for 2026.1

Change-Id: I0c8c139b35205996f0322abce9cd399ab97b4924
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>

1 files changed, 95 insertions, 0 deletions

diff --git a/releasenotes/notes/prelude-2026-1-8c2eb8f328c8dd14.yaml b/releasenotes/notes/prelude-2026-1-8c2eb8f328c8dd14.yaml
new file mode 100644
index 000000000..58131554a
--- /dev/null
+++ b/releasenotes/notes/prelude-2026-1-8c2eb8f328c8dd14.yaml
@@ -0,0 +1,95 @@
+---
+prelude: |
+  The Kolla Ansible ``22.0.0`` (Prelude) release continues the momentum of
+  the previous cycle with a strong focus on service modernisation, role
+  restructuring, and operator quality-of-life improvements. Highlights
+  include:
+
+  * **Service retirements and removals.**
+
+    - ``Zun`` and ``Kuryr`` dropped (``Zun`` is broken in 2026.1).
+    - ``InfluxDB`` (community EOL v1) and ``Telegraf`` removed.
+    - ``Venus`` removed due to the project being inactive.
+    - ``Neutron`` Linux Bridge mechanism driver support removed following
+      its upstream retirement.
+
+  * **Role restructuring.**
+
+    - The ``common`` role has been renamed to ``kolla_toolbox`` (inventory
+      group ``kolla-toolbox`` → ``kolla_toolbox``).
+    - Log-rotation tasks extracted into a dedicated ``cron`` role.
+    - Log collection tasks extracted into a dedicated ``kolla_logs`` role.
+    - Host bootstrap tasks moved into ``ansible-collection-kolla``.
+
+  * **Unified uWSGI for all API services.**
+
+    - All OpenStack API services now run under uWSGI using the shared
+      ``service-uwsgi-config`` role, dropping Apache WSGI support entirely.
+    - The remaining services (``Barbican``, ``Designate``, ``Glance``, and
+      ``Magnum``) have been migrated in this cycle.
+    - The now-unnecessary ``glance-tls-proxy`` container is removed during
+      upgrade.
+    - HTTP chunked input and configurable thread counts are available to all
+      uWSGI services.
+
+  * **RabbitMQ 4.2 support and upgrade paths.**
+
+    - Dynamic upgrade path validation via ``rabbitmq_allowed_upgrades`` and
+      seamless 4.2 upgrade paths are provided out of the box.
+    - Management interface TLS support via ``rabbitmq_enable_tls``.
+    - Stream retention policy configurable via
+      ``rabbitmq_stream_max_segment_size_bytes`` and
+      ``rabbitmq_stream_segment_max_age``.
+
+  * **Cinder deployment group changes.**
+
+    - ``cinder-volume`` and ``cinder-backup`` now default to the ``cinder``
+      (control) group instead of ``storage``.
+    - New inventory groups ``cinder-volume-lvm``, ``cinder-volume-multiple``,
+      ``cinder-backup-lvm``, and ``cinder-backup-multiple`` support advanced
+      LVM back-end topologies.
+
+  * **Neutron and OVN enhancements.**
+
+    - ``neutron-ovn-vpn-agent`` is now deployable to enable VPNaaS in OVN
+      environments.
+    - Neutron agent wrappers are enabled by default, allowing DHCP and L3
+      agents to restart without disturbing the main container processes and
+      reducing dataplane disruption.
+    - OVN metadata-agent HAProxy processes run in separate wrapper containers.
+    - ``ovn-northd`` command-line arguments and OVN DB environment variables
+      are configurable.
+
+  * **Observability additions.**
+
+    - New ``OpenStack Network Exporter`` for Prometheus gathers OVS/OVN
+      metrics.
+    - ``Valkey Exporter`` for Prometheus is now supported.
+    - Grafana gains an Alertmanager datasource and optional LDAP
+      authentication.
+    - ``OpenSearch Dashboards`` index patterns are created automatically.
+    - ``Fluentd`` ships logs directly to OpenSearch node IPs and
+      ``OpenSearch Dashboards`` connects directly to data nodes, removing
+      intermediate HAProxy hops.
+    - API health-check endpoints have been standardised across all services.
+
+  * **Ironic improvements.**
+
+    - Multiple Nova Compute Ironic instances on the same host are now
+      supported for large bare-metal deployments.
+    - The experimental ``ironic-pxe-filter`` service is available.
+    - Legacy (non-rolling) Ironic upgrade support has been dropped.
+    - DNS configuration can now be supplied through Ironic DHCP ranges for
+      IPA NTP and FQDN endpoint reachability.
+
+  * **Security hardening.**
+
+    - HAProxy TLS settings hardened to follow Mozilla SSL Modern
+      recommendations for HAProxy 2.8+ / OpenSSL 3.x.
+    - ``Skyline`` gains TLS 1.2/1.3 support for HTTPS upstream endpoints.
+    - Keystone ``mod_auth_openidc`` now supports templated OIDC metadata
+      files and customisable authentication error pages.
+
+  * **Ansible version bump.** The minimum supported version is now Ansible
+    ``12`` (ansible-core 2.19) and the maximum is Ansible ``13``
+    (ansible-core 2.20).