v7.2.0: Release 7.2.0

New Features

• The Keystone-Keycloak identity driver now uses service account authentication
  (client credentials) instead of username and password. The keystone
  Keycloak client now has service accounts enabled and the necessary
  realm-management roles to read users and groups.

Upgrade Notes

• The default Magnum Kubernetes images now use versions 1.32.10, 1.33.7, and
  1.34.3.

• The libvirt-tls-sidecar image moved from ghcr.io/vexxhost/atmosphere
  to ghcr.io/vexxhost/libvirt-tls-sidecar. This change uses an official
  image with a stable version tag.

• The pod-tls-sidecar image moved from registry.atmosphere.dev to
  ghcr.io/vexxhost/pod-tls-sidecar. This change centralizes the
  image location and uses a stable version tag.

Bug Fixes

• The Octavia health manager now preserves Kubernetes DNS configuration
  by preventing the Dynamic Host Configuration Protocol (DHCP) client
  from modifying /etc/resolv.conf.

• The Placement API now uses 4 uWSGI processes by default instead of 1,
  improving request handling capacity and aligning with other OpenStack
  services like Octavia.