diff --git a/ansible-role-requirements.yml b/ansible-role-requirements.yml
index 452048418b..9bb1222815 100644
--- a/ansible-role-requirements.yml
+++ b/ansible-role-requirements.yml
@@ -1,315 +1,316 @@
 - name: ansible-hardening
   scm: git
   src: https://opendev.org/openstack/ansible-hardening
-  version: master
-  trackbranch: master
+  version: cda7343ac84c97d1db2c099671402407a0b903a8
+  trackbranch: stable/xena
 - name: apt_package_pinning
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-apt_package_pinning
-  version: master
-  trackbranch: master
+  version: fbb457f0183634be50e0f7d1f3a928084044e8f0
+  trackbranch: stable/xena
 - name: galera_server
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-galera_server
-  version: master
-  trackbranch: master
+  version: 76bdc362428d436e7dc3f5c3b15a5d815781dc9f
+  trackbranch: stable/xena
 - name: ceph_client
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-ceph_client
-  version: master
-  trackbranch: master
+  version: 9ebf7eddee15624f5e4e2c5f3cb9695fadc73a15
+  trackbranch: stable/xena
 - name: haproxy_server
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-haproxy_server
-  version: master
-  trackbranch: master
+  version: 3abcf462648c70a685ad5e0fefd2ea77ed2ab505
+  trackbranch: stable/xena
 - name: keepalived
   scm: git
   src: https://github.com/evrardjp/ansible-keepalived
-  version: master
+  version: 78fcf28f2c7be772d16740e8154c21a78a19e775
   trackbranch: master
 - name: lxc_container_create
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-lxc_container_create
-  version: master
-  trackbranch: master
+  version: 4d756978fe5e032e1fc1003a86258ce5e832b9e8
+  trackbranch: stable/xena
 - name: lxc_hosts
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-lxc_hosts
-  version: master
-  trackbranch: master
+  version: d65aa506d09275089950cf4e55b3836a9938046d
+  trackbranch: stable/xena
 - name: memcached_server
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-memcached_server
-  version: master
-  trackbranch: master
+  version: 58c403201d9a2ad7e0901a69ece9146b95fb8860
+  trackbranch: stable/xena
 - name: openstack_hosts
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-openstack_hosts
-  version: master
-  trackbranch: master
+  version: 2675479dd46b744d727c9a25b7fe7a928cc9be48
+  trackbranch: stable/xena
 - name: os_keystone
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_keystone
-  version: master
-  trackbranch: master
+  version: 8fab446dec67dfa75ac953ccaee8e2f011c401ae
+  trackbranch: stable/xena
 - name: openstack_openrc
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-openstack_openrc
-  version: master
-  trackbranch: master
+  version: fc780cb1a354217c43fab8482080194af4a210d6
+  trackbranch: stable/xena
 - name: os_adjutant
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_adjutant
-  version: master
-  trackbranch: master
+  version: 3b35767d43c326cc89bf912ce0dc844bec78cd3e
+  trackbranch: stable/xena
 - name: os_aodh
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_aodh
-  version: master
-  trackbranch: master
+  version: 609c4c0676fb231706a5b4090a4e250383422297
+  trackbranch: stable/xena
 - name: os_barbican
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_barbican
-  version: master
-  trackbranch: master
+  version: dcb7e1c74f52a5d7cd457d42536aa8fa361c1d30
+  trackbranch: stable/xena
 - name: os_blazar
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_blazar
-  version: master
-  trackbranch: master
+  version: 83e72d95cdc12368c90f5b6ab915cf595d50721a
+  trackbranch: stable/xena
 - name: os_ceilometer
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_ceilometer
-  version: master
-  trackbranch: master
+  version: 436228c585b0baf91be6cde6619faf4a5ae768d8
+  trackbranch: stable/xena
 - name: os_cinder
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_cinder
-  version: master
-  trackbranch: master
+  version: 9d525d4129b7953af133e82f2bd1c74f8b77c61e
+  trackbranch: stable/xena
 - name: os_cloudkitty
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_cloudkitty
-  version: master
-  trackbranch: master
+  version: 0682e7b294452aa93aeaedeb010a0a36e850e909
+  trackbranch: stable/xena
 - name: os_designate
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_designate
-  version: master
-  trackbranch: master
+  version: 0c3b61217ec347519b9306e4500f0dcb49557859
+  trackbranch: stable/xena
 - name: os_glance
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_glance
-  version: master
-  trackbranch: master
+  version: 445aab6d91b42c0489dd4a5bad41ee34f118c401
+  trackbranch: stable/xena
 - name: os_gnocchi
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_gnocchi
-  version: master
-  trackbranch: master
+  version: 886d812bf0165bb8191adf60ee4e065bfeedc861
+  trackbranch: stable/xena
 - name: os_heat
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_heat
-  version: master
-  trackbranch: master
+  version: ad31c50511ef894b48f8a16ebf46467dc3a2c63f
+  trackbranch: stable/xena
 - name: os_horizon
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_horizon
-  version: master
-  trackbranch: master
+  version: 639d8ae1cca47ed0ca32d11d74e08bed6d422cea
+  trackbranch: stable/xena
 - name: os_ironic
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_ironic
-  version: master
-  trackbranch: master
+  version: 2d93fc88a82a032ca03f6a061b9171cae867dde2
+  trackbranch: stable/xena
 - name: os_magnum
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_magnum
-  version: master
-  trackbranch: master
+  version: d113f0c0cb2204000768c5075ba2150554feb7d8
+  trackbranch: stable/xena
 - name: os_manila
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_manila
-  version: master
-  trackbranch: master
+  version: 2365fb40601bc577dcfcbd0875d7f550d569bc50
+  trackbranch: stable/xena
 - name: os_masakari
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_masakari
-  version: master
-  trackbranch: master
+  version: 492022022d01bff870e2dccfcadf781f25e1fee6
+  trackbranch: stable/xena
 - name: os_mistral
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_mistral
-  version: master
-  trackbranch: master
+  version: f3fbe6f52fe204a5cbd62ee64b7ada5ce2279d98
+  trackbranch: stable/xena
 - name: os_murano
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_murano
-  version: master
-  trackbranch: master
+  version: 74bc2d140cc1681911aee7ff810debb22b44fb6d
+  trackbranch: stable/xena
 - name: os_neutron
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_neutron
-  version: master
-  trackbranch: master
+  version: b1d7a6c6ed8eb2890ca927606c06171bd3894192
+  trackbranch: stable/xena
 - name: os_nova
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_nova
-  version: master
-  trackbranch: master
+  version: 2b74d92657f0983da7abfd6634c753ff3aaad1e2
+  trackbranch: stable/xena
 - name: os_octavia
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_octavia
-  version: master
-  trackbranch: master
+  version: b2a61da2e4786c3ec0b5cb3890e64edd74e496f8
+  trackbranch: stable/xena
 - name: os_placement
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_placement
-  version: master
-  trackbranch: master
+  version: 6244bfa1774ad914ef9ab1ea2345298ac83b18e9
+  trackbranch: stable/xena
 - name: os_rally
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_rally
-  version: master
-  trackbranch: master
+  version: 5cd6439985624ac1ef5faf4cbea25664c8224872
+  trackbranch: stable/xena
 - name: os_sahara
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_sahara
-  version: master
-  trackbranch: master
+  version: b49f69557e1e8e2d2626ff442ac696c354ea19dc
+  trackbranch: stable/xena
 - name: os_senlin
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_senlin
-  version: master
-  trackbranch: master
+  version: 631bd8c562382f05a1997911aec2151e14d14cda
+  trackbranch: stable/xena
 - name: os_swift
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_swift
-  version: master
-  trackbranch: master
+  version: a7b33376201de2b1bca5ffd0e27f22673bc12689
+  trackbranch: stable/xena
 - name: os_tacker
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_tacker
-  version: master
-  trackbranch: master
+  version: 570a0e861c54922630ccb8191a4d06dda5653c42
+  trackbranch: stable/xena
 - name: os_tempest
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_tempest
-  version: master
-  trackbranch: master
+  version: 40509100f3e8bd1858cf50726313cb3a935c183b
+  trackbranch: stable/xena
 - name: os_trove
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_trove
-  version: master
-  trackbranch: master
+  version: 024118851338597b5720fb9dc34e1576794e9a56
+  trackbranch: stable/xena
 - name: os_zun
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_zun
-  version: master
-  trackbranch: master
+  version: 1c9a9367506588b2a5fbe65068dea7e7c25c1573
+  trackbranch: stable/xena
 - name: plugins
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-plugins
-  version: master
-  trackbranch: master
+  version: 1bf80ebc96f984347459eb6833709850816169c6
+  trackbranch: stable/xena
 - name: qdrouterd
   scm: git
   src: https://opendev.org/openstack/ansible-role-qdrouterd
-  version: master
-  trackbranch: master
+  version: d7bc864c5596fe2249cf0c06caa0e05ab885ad4d
+  trackbranch: stable/xena
 - name: rabbitmq_server
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-rabbitmq_server
-  version: master
-  trackbranch: master
+  version: e225bdd9e12b8bceaabedd6de04142293261eaec
+  trackbranch: stable/xena
 - name: repo_server
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-repo_server
-  version: master
-  trackbranch: master
+  version: 6573c7f512aedbc0c3ced88e9bc8d25d24559dcc
+  trackbranch: stable/xena
 - name: rsyslog_client
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-rsyslog_client
-  version: master
-  trackbranch: master
+  version: a4ad2c6c3128adc320b24691dd9e356e1e209ae2
+  trackbranch: stable/xena
 - name: rsyslog_server
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-rsyslog_server
-  version: master
-  trackbranch: master
+  version: d13007540a12eaafa897e011a3945ddd84f92647
+  trackbranch: stable/xena
 - name: sshd
   scm: git
   src: https://github.com/willshersystems/ansible-sshd
-  version: master
+  version: 214df35c0bee77b5d69f49c2da269251d451b28f
   trackbranch: master
 - name: bird
   scm: git
   src: https://github.com/logan2211/ansible-bird
-  version: master
+  version: 904e55d56f82f36e3e9e9fbc5b3bd932a1151f7b
   trackbranch: master
 - name: etcd
   scm: git
   src: https://github.com/logan2211/ansible-etcd
-  version: master
+  version: ab9861e35c23342fa30c703d29e370da590ea582
   trackbranch: master
 - name: unbound
   scm: git
   src: https://github.com/logan2211/ansible-unbound
-  version: master
+  version: f8e2d8a89ddb9352d5748332a5f3a33ed33f66ab
   trackbranch: master
 - name: resolvconf
   scm: git
   src: https://github.com/logan2211/ansible-resolvconf
-  version: master
+  version: f7f694b3dd4361e364dccb4ce94e6510727fca2f
   trackbranch: master
 - name: ceph-ansible
   scm: git
   src: https://github.com/ceph/ceph-ansible
-  version: stable-6.0
+  version: 8a32576d209bc329b4159a781151a7d3a40c5b7d
   trackbranch: stable-6.0
+  shallow_since: '2021-12-08'
 - name: opendaylight
   scm: git
   src: https://github.com/opendaylight/integration-packaging-ansible-opendaylight
-  version: master
+  version: 4a9217ed0fe9078152435daaa2d3f45b81021b3a
   trackbranch: master
 - name: haproxy_endpoints
   scm: git
   src: https://github.com/logan2211/ansible-haproxy-endpoints
-  version: master
+  version: 8e3a24a35beb16d717072dc83895c5a1f92689fb
   trackbranch: master
 - name: pacemaker_corosync
   scm: git
   src: https://github.com/noonedeadpunk/ansible-pacemaker-corosync
-  version: master
+  version: 70d3c59efea4c3080fa66aeef75eadd0a032a83e
   trackbranch: master
 - name: systemd_service
   src: https://opendev.org/openstack/ansible-role-systemd_service
   scm: git
-  version: master
-  trackbranch: master
+  version: 4a5fb95608c2ca490073f7c253fc13c8b1134cd3
+  trackbranch: stable/xena
 - name: systemd_mount
   src: https://opendev.org/openstack/ansible-role-systemd_mount
   scm: git
-  version: master
-  trackbranch: master
+  version: eb52a1e6daca04e262a1a5aa3f96a5cf18d17cdb
+  trackbranch: stable/xena
 - name: systemd_networkd
   src: https://opendev.org/openstack/ansible-role-systemd_networkd
   scm: git
-  version: master
-  trackbranch: master
+  version: 3817a269c6d52882e6ba9e36254f6e37e4cc4cd0
+  trackbranch: stable/xena
 - name: python_venv_build
   src: https://opendev.org/openstack/ansible-role-python_venv_build
   scm: git
-  version: master
-  trackbranch: master
+  version: 568011364df031eab8547c553cac29985acac4f0
+  trackbranch: stable/xena
 - name: uwsgi
   src: https://opendev.org/openstack/ansible-role-uwsgi
   scm: git
-  version: master
-  trackbranch: master
+  version: 805b4675a25aaa79e8670f6228355ed982252c15
+  trackbranch: stable/xena
 - name: pki
   src: https://opendev.org/openstack/ansible-role-pki
   scm: git
-  trackbranch: master
-  version: master
+  version: 64a6bb421085c2f28fb6f306ae71712a67fa3558
+  trackbranch: stable/xena
diff --git a/doc/source/index.rst b/doc/source/index.rst
index e2a18db154..c52bd4a069 100644
--- a/doc/source/index.rst
+++ b/doc/source/index.rst
@@ -10,16 +10,17 @@ configuration of an OpenStack environment.
 Documentation for each of the following releases is available.
 
 
-Xena: Under Development
-~~~~~~~~~~~~~~~~~~~~~~~
+Xena: Maintained
+~~~~~~~~~~~~~~~~
 
-OpenStack-Ansible Xena is currently in development.
+OpenStack-Ansible Xena series was first released with the 24.0.0 tag on
+10 December 2021.
 
 .. toctree::
    :maxdepth: 1
 
-   Deployment guide <https://docs.openstack.org/project-deploy-guide/openstack-ansible/latest/>
-   Release notes <https://docs.openstack.org/releasenotes/openstack-ansible/unreleased.html>
+   Deployment guide <https://docs.openstack.org/project-deploy-guide/openstack-ansible/xena/>
+   Release notes <https://docs.openstack.org/releasenotes/openstack-ansible/xena.html>
    admin/index
    user/index
    contributor/contributing
diff --git a/playbooks/defaults/repo_packages/gnocchi.yml b/playbooks/defaults/repo_packages/gnocchi.yml
index 30f23a7d96..21dcff5898 100644
--- a/playbooks/defaults/repo_packages/gnocchi.yml
+++ b/playbooks/defaults/repo_packages/gnocchi.yml
@@ -33,5 +33,5 @@
 ## This service has a different stable branch strategy to the rest of OpenStack.
 ## The SHA is recorded here to make the SHA updating easier.
 gnocchi_git_repo: https://github.com/gnocchixyz/gnocchi
-gnocchi_git_install_branch: 92a7f5931c7c1a1b54bfead3bec9e80fddfb5490  # HEAD as of 27.10.2021
+gnocchi_git_install_branch: 92a7f5931c7c1a1b54bfead3bec9e80fddfb5490  # HEAD as of 10.12.2021
 gnocchi_git_track_branch: stable/4.4
diff --git a/playbooks/defaults/repo_packages/nova_consoles.yml b/playbooks/defaults/repo_packages/nova_consoles.yml
index 6d83c85dd7..09c6ce8330 100644
--- a/playbooks/defaults/repo_packages/nova_consoles.yml
+++ b/playbooks/defaults/repo_packages/nova_consoles.yml
@@ -27,11 +27,11 @@
 
 ## NOVNC from source
 novncproxy_git_repo: https://github.com/novnc/noVNC
-novncproxy_git_install_branch: a5499bbffeb74f03d2496f158e2edc2d036a87a6 # HEAD as of 27.10.2021
+novncproxy_git_install_branch: 78eda3c0403f82e10a6fe1bcc5f473a9af571474 # HEAD as of 10.12.2021
 novncproxy_git_track_branch: master
 
 
 ## spice-html5 from source
 spicehtml5_git_repo: https://github.com/freedesktop/spice-html5
-spicehtml5_git_install_branch: 56ddb3005e39a9e76670fec9676e667d44167bf3 # HEAD as of 27.10.2021
+spicehtml5_git_install_branch: 56ddb3005e39a9e76670fec9676e667d44167bf3 # HEAD as of 10.12.2021
 spicehtml5_git_track_branch: master
diff --git a/playbooks/defaults/repo_packages/openstack_services.yml b/playbooks/defaults/repo_packages/openstack_services.yml
index cd7b85f575..e19c76f43b 100644
--- a/playbooks/defaults/repo_packages/openstack_services.yml
+++ b/playbooks/defaults/repo_packages/openstack_services.yml
@@ -31,292 +31,292 @@
 
 ## Global Requirements
 requirements_git_repo: https://opendev.org/openstack/requirements
-requirements_git_install_branch: 0249aa5617b2a6f927ccb5d3c1be187930129564 # HEAD as of 27.10.2021
+requirements_git_install_branch: f5dcb1d64534feb5720400c81089bd2b0765e2c3 # HEAD as of 10.12.2021
 requirements_git_track_branch: stable/xena
 
 ## Adjutant service
 adjutant_git_repo: https://opendev.org/openstack/adjutant
-adjutant_git_install_branch: f8cd1d888fc2335dbc9edcd63e4aa5ff54fac8b7 # HEAD as of 27.10.2021
+adjutant_git_install_branch: f8cd1d888fc2335dbc9edcd63e4aa5ff54fac8b7 # HEAD as of 10.12.2021
 adjutant_git_track_branch: stable/xena
 
 ## Adjutant dashboard plugin
 adjutant_dashboard_git_repo: https://opendev.org/openstack/adjutant-ui
-adjutant_dashboard_git_install_branch: 104c474479e9a89d22b96777378ff59983c03393 # HEAD as of 27.10.2021
+adjutant_dashboard_git_install_branch: 104c474479e9a89d22b96777378ff59983c03393 # HEAD as of 10.12.2021
 adjutant_dashboard_git_track_branch: stable/xena
 
 ## Aodh service
 aodh_git_repo: https://opendev.org/openstack/aodh
-aodh_git_install_branch: 5ac3421cf49cc9ecb972ae856200fce934c54a42 # HEAD as of 27.10.2021
+aodh_git_install_branch: 5ac3421cf49cc9ecb972ae856200fce934c54a42 # HEAD as of 10.12.2021
 aodh_git_track_branch: stable/xena
 
 
 ## Barbican service
 barbican_git_repo: https://opendev.org/openstack/barbican
-barbican_git_install_branch: bbb87ea8d66be300093a66723aef5ed4cf8b6b78 # HEAD as of 27.10.2021
+barbican_git_install_branch: 382b5086a2723da8f8d0a07d263ee47a9c6df5e7 # HEAD as of 10.12.2021
 barbican_git_track_branch: stable/xena
 
 
 ## Barbican dashboard plugin
 barbican_dashboard_git_repo: https://opendev.org/openstack/barbican-ui
-barbican_dashboard_git_install_branch: 3a78a743426376250f43508d4281e86c75067271 # HEAD as of 27.10.2021
+barbican_dashboard_git_install_branch: 3a78a743426376250f43508d4281e86c75067271 # HEAD as of 10.12.2021
 barbican_dashboard_git_track_branch: master
 
 
 ## Ceilometer service
 ceilometer_git_repo: https://opendev.org/openstack/ceilometer
-ceilometer_git_install_branch: 3caca0791881b105731acb4c9c32e8e1221fdfd0 # HEAD as of 27.10.2021
+ceilometer_git_install_branch: 3caca0791881b105731acb4c9c32e8e1221fdfd0 # HEAD as of 10.12.2021
 ceilometer_git_track_branch: stable/xena
 
 
 ## Cinder service
 cinder_git_repo: https://opendev.org/openstack/cinder
-cinder_git_install_branch: 76c412ffa5cf7824a637cbf9d60f93e2cdaa777b # HEAD as of 27.10.2021
+cinder_git_install_branch: ecca522214dd850be3cb19af4602ab391f42fe95 # HEAD as of 10.12.2021
 cinder_git_track_branch: stable/xena
 
 
 ## Cloudkitty service
 cloudkitty_git_repo: https://opendev.org/openstack/cloudkitty
-cloudkitty_git_install_branch: c64c6412b00328ba84b2d6f652196af2056b6c1d # HEAD as of 27.10.2021
+cloudkitty_git_install_branch: c64c6412b00328ba84b2d6f652196af2056b6c1d # HEAD as of 10.12.2021
 cloudkitty_git_track_branch: stable/xena
 
 
 ## Cloudkitty dashboard plugin
 cloudkitty_dashboard_git_repo: https://opendev.org/openstack/cloudkitty-dashboard
-cloudkitty_dashboard_git_install_branch: 998e7bdc62c1797b730bf872abfff93668025ff9 # HEAD as of 27.10.2021
+cloudkitty_dashboard_git_install_branch: 998e7bdc62c1797b730bf872abfff93668025ff9 # HEAD as of 10.12.2021
 cloudkitty_dashboard_git_track_branch: stable/xena
 
 
 ## Designate service
 designate_git_repo: https://opendev.org/openstack/designate
-designate_git_install_branch: 86db7954fc122e0326156f9e6a205ea8453bf73a # HEAD as of 27.10.2021
+designate_git_install_branch: 1356945484b38ef2a0b8888cc6547a681247a907 # HEAD as of 10.12.2021
 designate_git_track_branch: stable/xena
 
 
 ## Horizon Designate dashboard plugin
 designate_dashboard_git_repo: https://opendev.org/openstack/designate-dashboard
-designate_dashboard_git_install_branch: 73dfc628a51a1469c9d312c3cbae758032a79d1b # HEAD as of 27.10.2021
+designate_dashboard_git_install_branch: 73dfc628a51a1469c9d312c3cbae758032a79d1b # HEAD as of 10.12.2021
 designate_dashboard_git_track_branch: stable/xena
 
 
 ## Glance service
 glance_git_repo: https://opendev.org/openstack/glance
-glance_git_install_branch: aa7c4acdade2071084a35e42b35c1ec5a8c9990f # HEAD as of 27.10.2021
+glance_git_install_branch: aa7c4acdade2071084a35e42b35c1ec5a8c9990f # HEAD as of 10.12.2021
 glance_git_track_branch: stable/xena
 
 
 ## Heat service
 heat_git_repo: https://opendev.org/openstack/heat
-heat_git_install_branch: 74164424016702bac6d52c6618360287ce7ea461 # HEAD as of 27.10.2021
+heat_git_install_branch: ef36cb30495f3b9bb0fc265f13aa4fad00733705 # HEAD as of 10.12.2021
 heat_git_track_branch: stable/xena
 
 ## Horizon Heat dashboard plugin
 heat_dashboard_git_repo: https://opendev.org/openstack/heat-dashboard
-heat_dashboard_git_install_branch: 1f52db08edf78f642c059d94b3abb32e014c4876 # HEAD as of 27.10.2021
+heat_dashboard_git_install_branch: 1f52db08edf78f642c059d94b3abb32e014c4876 # HEAD as of 10.12.2021
 heat_dashboard_git_track_branch: stable/xena
 
 ## Horizon service
 horizon_git_repo: https://opendev.org/openstack/horizon
-horizon_git_install_branch: d69b1d414760eba09b19e432d67f82e91620d543 # HEAD as of 27.10.2021
+horizon_git_install_branch: d69b1d414760eba09b19e432d67f82e91620d543 # HEAD as of 10.12.2021
 horizon_git_track_branch: stable/xena
 
 ## Horizon Ironic dashboard plugin
 ironic_dashboard_git_repo: https://opendev.org/openstack/ironic-ui
-ironic_dashboard_git_install_branch: 3cd772a7be210ab217b7ae147057aefb6af5cde5 # HEAD as of 27.10.2021
+ironic_dashboard_git_install_branch: 3cd772a7be210ab217b7ae147057aefb6af5cde5 # HEAD as of 10.12.2021
 ironic_dashboard_git_track_branch: stable/xena
 
 ## Horizon Magnum dashboard plugin
 magnum_dashboard_git_repo: https://opendev.org/openstack/magnum-ui
-magnum_dashboard_git_install_branch: c7cc455ff25770172325b11e92c41ff965b3810d # HEAD as of 27.10.2021
+magnum_dashboard_git_install_branch: c7cc455ff25770172325b11e92c41ff965b3810d # HEAD as of 10.12.2021
 magnum_dashboard_git_track_branch: stable/xena
 
 ## Horizon Masakari dashboard plugin
 masakari_dashboard_git_repo: https://opendev.org/openstack/masakari-dashboard
-masakari_dashboard_git_install_branch: fae46199bba14b9d0f746338803fffa898f6532c # HEAD as of 27.10.2021
+masakari_dashboard_git_install_branch: fae46199bba14b9d0f746338803fffa898f6532c # HEAD as of 10.12.2021
 masakari_dashboard_git_track_branch: stable/xena
 
 
 ## Horizon Sahara dashboard plugin
 sahara_dashboard_git_repo: https://opendev.org/openstack/sahara-dashboard
-sahara_dashboard_git_install_branch: b59c27efbfc09f669d462ce7a05a66f73011b268 # HEAD as of 27.10.2021
+sahara_dashboard_git_install_branch: b59c27efbfc09f669d462ce7a05a66f73011b268 # HEAD as of 10.12.2021
 sahara_dashboard_git_track_branch: stable/xena
 
 
 ## Keystone service
 keystone_git_repo: https://opendev.org/openstack/keystone
-keystone_git_install_branch: 20be021347664438520f420eb26168435f7b860b # HEAD as of 27.10.2021
+keystone_git_install_branch: 20be021347664438520f420eb26168435f7b860b # HEAD as of 10.12.2021
 keystone_git_track_branch: stable/xena
 
 
 ## Manila service
 manila_git_repo: https://opendev.org/openstack/manila
-manila_git_install_branch: 5f7d557b8cd8aa63fdbc45412e24150db63f8c49 # HEAD as of 27.10.2021
+manila_git_install_branch: 967a6deda4a8848d42b13ff9f0019900b144f590 # HEAD as of 10.12.2021
 manila_git_track_branch: stable/xena
 
 
 ## Neutron service
 neutron_git_repo: https://opendev.org/openstack/neutron
-neutron_git_install_branch: c8ffe20cf4beee8e27609ec8ba20093a8970c407 # HEAD as of 27.10.2021
+neutron_git_install_branch: e6953e217c731559724971a371e81d2b6f9837e0 # HEAD as of 10.12.2021
 neutron_git_track_branch: stable/xena
 
 neutron_vpnaas_git_repo: https://opendev.org/openstack/neutron-vpnaas
-neutron_vpnaas_git_install_branch: 8b7da9f4fa053d89cb925e3920bb530e213f1e02 # HEAD as of 27.10.2021
+neutron_vpnaas_git_install_branch: 8b7da9f4fa053d89cb925e3920bb530e213f1e02 # HEAD as of 10.12.2021
 neutron_vpnaas_git_track_branch: stable/xena
 
 
 neutron_dynamic_routing_git_repo: https://opendev.org/openstack/neutron-dynamic-routing
-neutron_dynamic_routing_git_install_branch: bec4c152c697abb487e59a0639278c1a098c8f60 # HEAD as of 27.10.2021
+neutron_dynamic_routing_git_install_branch: 3d5eddd70bccc6fad048afccb35099a1648f804c # HEAD as of 10.12.2021
 neutron_dynamic_routing_git_track_branch: stable/xena
 
 # Networking calico follows master
 networking_calico_git_repo: https://github.com/projectcalico/networking-calico
-networking_calico_git_install_branch: 69ada593823daaecb997114e694522449839f131 # HEAD as of 27.10.2021
+networking_calico_git_install_branch: 69ada593823daaecb997114e694522449839f131 # HEAD as of 10.12.2021
 networking_calico_git_track_branch: release-v3.21
 
 networking_odl_git_repo: https://opendev.org/openstack/networking-odl
-networking_odl_git_install_branch: d90a8f3aeac6d6a4477ffbf2ac86c167c2fb7304 # HEAD as of 27.10.2021
+networking_odl_git_install_branch: d90a8f3aeac6d6a4477ffbf2ac86c167c2fb7304 # HEAD as of 10.12.2021
 networking_odl_git_track_branch: stable/xena
 
 networking_bgpvpn_git_repo: https://opendev.org/openstack/networking-bgpvpn
-networking_bgpvpn_git_install_branch: cc346734ebade079f17b4b58305230ef97e6da4d # HEAD as of 27.10.2021
+networking_bgpvpn_git_install_branch: cc346734ebade079f17b4b58305230ef97e6da4d # HEAD as of 10.12.2021
 networking_bgpvpn_git_track_branch: stable/xena
 
 networking_sfc_git_repo: https://opendev.org/openstack/networking-sfc
-networking_sfc_git_install_branch: 881a48338d6d82f588a7bc22ac00c546873aa264 # HEAD as of 27.10.2021
+networking_sfc_git_install_branch: 881a48338d6d82f588a7bc22ac00c546873aa264 # HEAD as of 10.12.2021
 networking_sfc_git_track_branch: stable/xena
 
 networking_generic_switch_git_repo: https://opendev.org/openstack/networking-generic-switch
-networking_generic_switch_git_install_branch: b177c499e05e6c3c388c186ad557e9f3f67d1752 # HEAD as of 27.10.2021
+networking_generic_switch_git_install_branch: b177c499e05e6c3c388c186ad557e9f3f67d1752 # HEAD as of 10.12.2021
 networking_generic_switch_git_track_branch: stable/xena
 
 networking_nsx_git_repo: https://opendev.org/x/vmware-nsx
-networking_nsx_git_install_branch: b8dfb190f04cfe665ae8290ce9235d8e93cd21dc # HEAD as of 27.10.2021
+networking_nsx_git_install_branch: 0253265f75f63d5619b30f16a6b64459dec79d82 # HEAD as of 10.12.2021
 networking_nsx_git_track_branch: master
 
 networking_nsxlib_git_repo: https://opendev.org/x/vmware-nsxlib
-networking_nsxlib_git_install_branch: 3e1146a2754991fb5b08e07374a68ebb462d2a4a # HEAD as of 27.10.2021
+networking_nsxlib_git_install_branch: 31da96584f18ee02c5fb452e8e623a2a007f6d3e # HEAD as of 10.12.2021
 networking_nsxlib_git_track_branch: master
 
 ## Nova service
 nova_git_repo: https://opendev.org/openstack/nova
-nova_git_install_branch: 928d3feffd674a842d4bb4348d2f0e0d7e93a8a5 # HEAD as of 27.10.2021
+nova_git_install_branch: 7df9379d6661233174d49fb7be8eda0828a5e5ca # HEAD as of 10.12.2021
 nova_git_track_branch: stable/xena
 
 
 ## Sahara service
 sahara_git_repo: https://opendev.org/openstack/sahara
-sahara_git_install_branch: ee79fc7e8f9eb5f23a37e16e4a6483eee72eb818 # HEAD as of 27.10.2021
+sahara_git_install_branch: ee79fc7e8f9eb5f23a37e16e4a6483eee72eb818 # HEAD as of 10.12.2021
 sahara_git_track_branch: stable/xena
 
 
 ## Senlin service
 senlin_git_repo: https://opendev.org/openstack/senlin
-senlin_git_install_branch: bc135a0594160a132f0a1109d2e9efd5d6c6d67f # HEAD as of 27.10.2021
+senlin_git_install_branch: 28f8abc29a966d41f8b4502d1fc7432f86b14bea # HEAD as of 10.12.2021
 senlin_git_track_branch: stable/xena
 
 
 ## Swift service
 swift_git_repo: https://opendev.org/openstack/swift
-swift_git_install_branch: 7520aada3c042fe209e2e4eb9414c0c3f8dfd027 # HEAD as of 27.10.2021
+swift_git_install_branch: 8c41bf79b610ae21f4db15d9d118a54d570caf20 # HEAD as of 10.12.2021
 swift_git_track_branch: stable/xena
 
 
 ## Ironic service
 ironic_git_repo: https://opendev.org/openstack/ironic
-ironic_git_install_branch: dd8e6c6c765ebf8388fce27ba00a0c1f130c3e29 # HEAD as of 27.10.2021
+ironic_git_install_branch: 561630f8d32a0db6d63a8d9ffd327b6f57bf070e # HEAD as of 10.12.2021
 ironic_git_track_branch: stable/xena
 
 
 ## Ironic inspector service
 ironic_inspector_git_repo: https://opendev.org/openstack/ironic-inspector
-ironic_inspector_git_install_branch: d2328f0d80aee120d17151dc3b15accf512b46bb # HEAD as of 27.10.2021
+ironic_inspector_git_install_branch: d2328f0d80aee120d17151dc3b15accf512b46bb # HEAD as of 10.12.2021
 ironic_inspector_git_track_branch: stable/xena
 
 
 ## Magnum service
 magnum_git_repo: https://opendev.org/openstack/magnum
-magnum_git_install_branch: 1460b06deb4f03db06f4678f278b6fd5fbf5a0c9 # HEAD as of 27.10.2021
+magnum_git_install_branch: 072c5b7a5689dafd6070fe47d0a7366956d8b27e # HEAD as of 10.12.2021
 magnum_git_track_branch: stable/xena
 
 ## Masakari service
 masakari_git_repo: https://opendev.org/openstack/masakari
-masakari_git_install_branch: 84689df70d66ee13adb30cc6f1b8f795e58aa93b # HEAD as of 27.10.2021
+masakari_git_install_branch: 84689df70d66ee13adb30cc6f1b8f795e58aa93b # HEAD as of 10.12.2021
 masakari_git_track_branch: stable/xena
 
 ## Masakari monitors services
 masakari_monitors_git_repo: https://opendev.org/openstack/masakari-monitors
-masakari_monitors_git_install_branch: fb7e457c50c9dca6563a0d094026b8e904bebafd # HEAD as of 27.10.2021
+masakari_monitors_git_install_branch: fb7e457c50c9dca6563a0d094026b8e904bebafd # HEAD as of 10.12.2021
 masakari_monitors_git_track_branch: stable/xena
 
 ## Mistral service
 mistral_git_repo: https://opendev.org/openstack/mistral
-mistral_git_install_branch: fe11ac57adab77e459f6fb73689aa8b48395c5e6 # HEAD as of 27.10.2021
+mistral_git_install_branch: fe11ac57adab77e459f6fb73689aa8b48395c5e6 # HEAD as of 10.12.2021
 mistral_git_track_branch: stable/xena
 
 ## Murano service
 murano_git_repo: https://opendev.org/openstack/murano
-murano_git_install_branch: 7b63349ca05bcb279a79fca6d3878b8f7deade61 # HEAD as of 27.10.2021
+murano_git_install_branch: 7b63349ca05bcb279a79fca6d3878b8f7deade61 # HEAD as of 10.12.2021
 murano_git_track_branch: stable/xena
 
 murano_dashboard_git_repo: https://opendev.org/openstack/murano-dashboard
-murano_dashboard_git_install_branch: 2533ace8f817e1c971329cda398343adf6b30195 # HEAD as of 27.10.2021
+murano_dashboard_git_install_branch: 2533ace8f817e1c971329cda398343adf6b30195 # HEAD as of 10.12.2021
 murano_dashboard_git_track_branch: stable/xena
 
 ## Trove service
 trove_git_repo: https://opendev.org/openstack/trove
-trove_git_install_branch: f3864fc262121881bd676f832c363b9ae3ea9c2d # HEAD as of 27.10.2021
+trove_git_install_branch: f3864fc262121881bd676f832c363b9ae3ea9c2d # HEAD as of 10.12.2021
 trove_git_track_branch: stable/xena
 
 ## Horizon Trove dashboard plugin
 trove_dashboard_git_repo: https://opendev.org/openstack/trove-dashboard
-trove_dashboard_git_install_branch: f1c3e51bed9b26688cd7f357e65c3bd06e23e31a # HEAD as of 27.10.2021
+trove_dashboard_git_install_branch: f1c3e51bed9b26688cd7f357e65c3bd06e23e31a # HEAD as of 10.12.2021
 trove_dashboard_git_track_branch: stable/xena
 
 
 ## Octavia service
 octavia_git_repo: https://opendev.org/openstack/octavia
-octavia_git_install_branch: 8681637da0f99b4dda128bfd8ffd45be20de6112 # HEAD as of 27.10.2021
+octavia_git_install_branch: 4039d35ce221b58490d4aa5b3497e29dbf7664ac # HEAD as of 10.12.2021
 octavia_git_track_branch: stable/xena
 
 
 ## Placement service
 placement_git_repo: https://opendev.org/openstack/placement
-placement_git_install_branch: 1cf167fbadb058f5f8a07022bf4a53473b019221 # HEAD as of 27.10.2021
+placement_git_install_branch: 7422ed4d7adb26868602a3f4652119ff0392d298 # HEAD as of 10.12.2021
 placement_git_track_branch: stable/xena
 
 
 ## Tacker service
 tacker_git_repo: https://opendev.org/openstack/tacker
-tacker_git_install_branch: 43b19f63078a93b2b7ce717e313993cb51e34a3b # HEAD as of 27.10.2021
+tacker_git_install_branch: 43b19f63078a93b2b7ce717e313993cb51e34a3b # HEAD as of 10.12.2021
 tacker_git_track_branch: stable/xena
 
 
 ## Horizon Octavia dashboard plugin
 octavia_dashboard_git_repo: https://opendev.org/openstack/octavia-dashboard
-octavia_dashboard_git_install_branch: 1d594374241efea89c80c91c1b68d2a3fed8dde9 # HEAD as of 27.10.2021
+octavia_dashboard_git_install_branch: 1d594374241efea89c80c91c1b68d2a3fed8dde9 # HEAD as of 10.12.2021
 octavia_dashboard_git_track_branch: stable/xena
 
 
 ## Blazar service
 blazar_git_repo: https://opendev.org/openstack/blazar
-blazar_git_install_branch: 750a4a9cd6570529f83ef79844ca51686c42f72c # HEAD as of 27.10.2021
+blazar_git_install_branch: 750a4a9cd6570529f83ef79844ca51686c42f72c # HEAD as of 10.12.2021
 blazar_git_track_branch: stable/xena
 
 ## Blazar Nova Service
 blazar_nova_git_repo: https://opendev.org/openstack/blazar-nova
-blazar_nova_git_install_branch: 60148cd04b5234c57fa3aa20b38f9ab9e4a1fe60 # HEAD as of 27.10.2021
+blazar_nova_git_install_branch: 60148cd04b5234c57fa3aa20b38f9ab9e4a1fe60 # HEAD as of 10.12.2021
 blazar_nova_git_track_branch: stable/xena
 
 ## Zun service
 zun_git_repo: https://opendev.org/openstack/zun
-zun_git_install_branch: 3784d99f0cd27a7cf1fd674478b7254d0a35d9e2 # HEAD as of 27.10.2021
+zun_git_install_branch: 3784d99f0cd27a7cf1fd674478b7254d0a35d9e2 # HEAD as of 10.12.2021
 zun_git_track_branch: stable/xena
 
 ## Zun kuryr service
 zun_kuryr_git_repo: https://opendev.org/openstack/kuryr-libnetwork
-zun_kuryr_git_install_branch: 757b8c66512bf706892d3ec777cde9afdfed4967 # HEAD as of 27.10.2021
+zun_kuryr_git_install_branch: 757b8c66512bf706892d3ec777cde9afdfed4967 # HEAD as of 10.12.2021
 zun_kuryr_git_track_branch: stable/xena
 
 ## Zun kuryr library
 zun_kuryr_lib_git_repo: https://opendev.org/openstack/kuryr
-zun_kuryr_lib_git_install_branch: aa74f46f9af23d8b52055d3a8d2dc0cf9b38ce1e # HEAD as of 27.10.2021
+zun_kuryr_lib_git_install_branch: aa74f46f9af23d8b52055d3a8d2dc0cf9b38ce1e # HEAD as of 10.12.2021
 zun_kuryr_lib_git_track_branch: stable/xena
diff --git a/playbooks/defaults/repo_packages/openstack_testing.yml b/playbooks/defaults/repo_packages/openstack_testing.yml
deleted file mode 100644
index de3c1f8631..0000000000
--- a/playbooks/defaults/repo_packages/openstack_testing.yml
+++ /dev/null
@@ -1,22 +0,0 @@
----
-# Copyright 2018, Jean-Philippe Evrard <jean-philippe@evrard.me>
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-# TODO(evrardjp): Remove this file from stable branches to allow the latest tempest
-# release to be used instead, when a PyPI published version of tempest contains
-# https://github.com/openstack/tempest/commit/7d2b636a30057ed8db8cfd4fe2248f509b3570f1#diff-5c9acbc10dc9d27b47985cd74ab100f6
-tempest_git_repo: https://opendev.org/openstack/tempest
-tempest_git_install_branch: d458bf329739ae7b7652d329e6415ad6ba54e490  # HEAD as of 27.10.2021
-tempest_git_project_group: utility_all
-tempest_git_track_branch: master
diff --git a/playbooks/os-tempest-install.yml b/playbooks/os-tempest-install.yml
index c227a9b532..11a4bfc5f3 100644
--- a/playbooks/os-tempest-install.yml
+++ b/playbooks/os-tempest-install.yml
@@ -25,7 +25,6 @@
   user: root
   vars_files:
     - "defaults/repo_packages/openstack_services.yml"
-    - "defaults/repo_packages/openstack_testing.yml"
     - "defaults/{{ install_method }}_install.yml"
   pre_tasks:
     - name: End playbook
diff --git a/releasenotes/notes/VNC-proxy-security-520e6dac6bad0018.yaml b/releasenotes/notes/VNC-proxy-security-520e6dac6bad0018.yaml
new file mode 100644
index 0000000000..1f84254549
--- /dev/null
+++ b/releasenotes/notes/VNC-proxy-security-520e6dac6bad0018.yaml
@@ -0,0 +1,16 @@
+---
+features:
+  - |
+    Enable VeNCrypt authentication scheme from noVNC proxy to compute nodes.
+    When using HTTPS, the TLS encryption only applies to data between the
+    tenant user and proxy server. To provide protection from the noVNC proxy
+    to the Compute Nodes, it is necessary to enable the VeNCrypt
+    authentication scheme for VNC.
+
+    A pre-existing PKI (Public Key Infrastructure) setup is
+    required.
+
+    Initially to help with the transition from unencrypted VNC to
+    VeNCrypt, compute nodes auth scheme allows for both encrypted and
+    unencrypted sessions using the variable `nova_vencrypt_auth_scheme`,
+    this will be removed in future releases.
diff --git a/releasenotes/notes/db-pooling-14f33d291a246203.yaml b/releasenotes/notes/db-pooling-14f33d291a246203.yaml
new file mode 100644
index 0000000000..1539baeb37
--- /dev/null
+++ b/releasenotes/notes/db-pooling-14f33d291a246203.yaml
@@ -0,0 +1,2 @@
+other:
+  - Set a new default value for ``galera_wait_timeout`` which is inherited from global ``openstack_db_connection_recycle_time``.
diff --git a/releasenotes/notes/db-pooling-15b6222fedc2cb8c.yaml b/releasenotes/notes/db-pooling-15b6222fedc2cb8c.yaml
new file mode 100644
index 0000000000..36fe87918c
--- /dev/null
+++ b/releasenotes/notes/db-pooling-15b6222fedc2cb8c.yaml
@@ -0,0 +1,7 @@
+---
+deprecations:
+  - |
+    For consistency reasons, ``octavia_db_pool_size`` was deprecated in favor of
+    ``octavia_db_max_pool_size`` which is in a standardized format used in other
+    repositories.
+    ``octavia_db_pool_size`` support it will be removed in Yoga release.
diff --git a/releasenotes/notes/db-pooling-91ac966776313feb.yaml b/releasenotes/notes/db-pooling-91ac966776313feb.yaml
new file mode 100644
index 0000000000..7f1d2d683c
--- /dev/null
+++ b/releasenotes/notes/db-pooling-91ac966776313feb.yaml
@@ -0,0 +1,7 @@
+---
+deprecations:
+  - |
+    For consistency reasons, ``neutron_db_pool_size`` was deprecated in favor of
+    ``neutron_db_max_pool_size`` which is in a standardized format used in other
+    repositories.
+    However, it will be supported until Yoga release.
diff --git a/releasenotes/notes/db-pooling-cec321004b4a8a79.yaml b/releasenotes/notes/db-pooling-cec321004b4a8a79.yaml
new file mode 100644
index 0000000000..27b197d494
--- /dev/null
+++ b/releasenotes/notes/db-pooling-cec321004b4a8a79.yaml
@@ -0,0 +1,4 @@
+features:
+  - Implemented new variable ``connection_recycle_time`` responsible for SQLAlchemy's connection recycling
+other:
+  - Set new default values for db pooling variables which are inherited from the global ones.
diff --git a/releasenotes/notes/db-pooling-f078d5d7668377b2.yaml b/releasenotes/notes/db-pooling-f078d5d7668377b2.yaml
new file mode 100644
index 0000000000..5e652d97f4
--- /dev/null
+++ b/releasenotes/notes/db-pooling-f078d5d7668377b2.yaml
@@ -0,0 +1,11 @@
+---
+deprecations:
+  - |
+    For consistency reasons, the following variables were deprecated in favor of
+    the new ones in a standardized format used in other repositories.
+    ``keystone_database_pool_timeout`` -> ``keystone_db_pool_timeout``
+    ``keystone_database_max_pool_size`` -> ``keystone_db_max_pool_size``
+    ``keystone_database_idle_timeout`` -> ``keystone_db_connection_recycle_time``
+    However, they will be supported until next Yoga release.
+  - |
+    ``keystone_database_min_pool_size`` was deprecated as it's deprecated in oslo.db
diff --git a/releasenotes/notes/deprecate_systemd_lock_path-fba3aff8b1b4468d.yaml b/releasenotes/notes/deprecate_systemd_lock_path-fba3aff8b1b4468d.yaml
new file mode 100644
index 0000000000..0f72e59c61
--- /dev/null
+++ b/releasenotes/notes/deprecate_systemd_lock_path-fba3aff8b1b4468d.yaml
@@ -0,0 +1,9 @@
+---
+
+deprecations:
+  - |
+    Variable ``systemd_lock_path`` has been dropped and has no effect now.
+    In order to customize lock dir path please use ``systemd_lock_dir``.
+    Please keep in mind, that for ``systemd_lock_dir`` you don't need to
+    provide full path like it was with ``systemd_lock_path`` since service
+    name is added to the end of the path.
diff --git a/releasenotes/notes/galera_pki-2d6d77a86e8475cd.yaml b/releasenotes/notes/galera_pki-2d6d77a86e8475cd.yaml
new file mode 100644
index 0000000000..334c46d8fe
--- /dev/null
+++ b/releasenotes/notes/galera_pki-2d6d77a86e8475cd.yaml
@@ -0,0 +1,34 @@
+---
+features:
+  - |
+    Galera role now leverages PKI role for creation and distribution of the
+    certificates and certificate authorities.
+    This introduces bunch of new variables which controls CA and certificates
+    generation details.
+    If user SSL certificates are provided - they would be used instead of
+    the generated ones.
+
+    The following new variables were introduced:
+
+    - galera_ssl_verify
+    - galera_pki_dir
+    - galera_pki_create_ca
+    - galera_pki_regen_ca
+    - galera_pki_certificates
+    - galera_pki_regen_cert
+    - galera_pki_authorities
+    - galera_pki_install_ca
+    - galera_pki_keys_path
+    - galera_pki_certs_path
+    - galera_pki_intermediate_cert_name
+    - galera_pki_intermediate_cert_path
+    - galera_pki_install_certificates
+
+deprecations:
+  - |
+    Following variables were removed in favor of PKI ones
+    and have no effect anymore:
+
+    - galera_ssl_self_signed_regen
+    - galera_ssl_self_signed_subject
+    - galera_ssl_ca_self_signed_subject
diff --git a/releasenotes/notes/haproxy_frontend_raw-0811d5d445a66b41.yaml b/releasenotes/notes/haproxy_frontend_raw-0811d5d445a66b41.yaml
new file mode 100644
index 0000000000..496b8ecf6f
--- /dev/null
+++ b/releasenotes/notes/haproxy_frontend_raw-0811d5d445a66b41.yaml
@@ -0,0 +1,6 @@
+---
+fixes:
+  - |
+    Fixed inconsistency in ``haproxy_frontend_raw`` key naming between
+    documentation and service template. Previously, template generation
+    was expecting ``haproxy_raw`` instead of the ``haproxy_frontend_raw``.
diff --git a/releasenotes/notes/horizon_policy_overrides-ca84702ef993ea92.yaml b/releasenotes/notes/horizon_policy_overrides-ca84702ef993ea92.yaml
new file mode 100644
index 0000000000..7b172b37b2
--- /dev/null
+++ b/releasenotes/notes/horizon_policy_overrides-ca84702ef993ea92.yaml
@@ -0,0 +1,10 @@
+---
+features:
+  - |
+    Added variable `horizon_policy_overrides` which allows to customize horizon
+    specific policies. As we don't want to carry and maintain horizon policies
+    with OSA, they're retrieved from horizon hosts and adjusted in-place,
+    which means that they won't rollback in case you just remove override.
+    `horizon_policy_overrides` has also non-standart format, as it's nested
+    dictionary, where 1st level key represents service which policy needs to
+    be overriden, and it's value is normal policy override format.
diff --git a/releasenotes/notes/keystone_drop_nginx-5e7791d22f0be48a.yaml b/releasenotes/notes/keystone_drop_nginx-5e7791d22f0be48a.yaml
new file mode 100644
index 0000000000..e541348441
--- /dev/null
+++ b/releasenotes/notes/keystone_drop_nginx-5e7791d22f0be48a.yaml
@@ -0,0 +1,16 @@
+---
+deprecations:
+  - |
+    We removed multiple web server support for keystone and left only Apache
+    since nginx is missing features required for federation setup.
+    With this change following variables are deprecated and have no effect:
+
+      * keystone_web_server
+      * keystone_centos_nginx_mirror
+      * keystone_centos_nginx_key
+      * keystone_nginx_access_log_format_combined
+      * keystone_nginx_access_log_format_extras
+      * keystone_nginx_ports
+      * keystone_nginx_extra_conf
+
+    Nginx web server will be removed and replaced with Apache during upgrade.
diff --git a/releasenotes/notes/networking-baremetal-plugin-agent-support-cfb06fa4faf85bdc.yaml b/releasenotes/notes/networking-baremetal-plugin-agent-support-cfb06fa4faf85bdc.yaml
new file mode 100644
index 0000000000..4f93005e2c
--- /dev/null
+++ b/releasenotes/notes/networking-baremetal-plugin-agent-support-cfb06fa4faf85bdc.yaml
@@ -0,0 +1,8 @@
+---
+features:
+  - |
+    Support for the networking-baremetal mechanism driver and agent has been implemented.
+    The ironic-neutron-agent is a neutron agent that populates the host to physical network
+    mapping for baremetal nodes in neutron. Neutron uses this to calculate the segment to
+    host mapping information. This feature may be enabled by adding ``ml2.baremetal``
+    to the ``neutron_plugin_types`` list in ``/etc/openstack_deploy/user_variables.yml``.
diff --git a/releasenotes/notes/nova_mdev_types-df92fb3d1ce339ec.yaml b/releasenotes/notes/nova_mdev_types-df92fb3d1ce339ec.yaml
new file mode 100644
index 0000000000..9808075333
--- /dev/null
+++ b/releasenotes/notes/nova_mdev_types-df92fb3d1ce339ec.yaml
@@ -0,0 +1,5 @@
+---
+deprecations:
+  - |
+    Variable ``nova_enabled_vgpu_types`` has been deprecated and is replaced
+    with ``nova_enabled_mdev_types``.
diff --git a/releasenotes/notes/os-keystone-oidc-scope-spelling-fix-3051b95adeb37901.yaml b/releasenotes/notes/os-keystone-oidc-scope-spelling-fix-3051b95adeb37901.yaml
new file mode 100644
index 0000000000..398b56fc87
--- /dev/null
+++ b/releasenotes/notes/os-keystone-oidc-scope-spelling-fix-3051b95adeb37901.yaml
@@ -0,0 +1,7 @@
+---
+fixes:
+  - |
+    For deployers using Keystone as an OIDC-based Service Provider there has
+    been a spelling fix for the OIDCScope setting. Please use
+    ``keystone_sp.trusted_idp_list.0.oidc_scope`` instead of
+    ``keystone_sp.trusted_idp_list.0.idc_scope``.
diff --git a/releasenotes/notes/os-upgrade-requirements-fix-bcc81b049339e9b5.yaml b/releasenotes/notes/os-upgrade-requirements-fix-bcc81b049339e9b5.yaml
new file mode 100644
index 0000000000..cdb2783fbe
--- /dev/null
+++ b/releasenotes/notes/os-upgrade-requirements-fix-bcc81b049339e9b5.yaml
@@ -0,0 +1,7 @@
+---
+fixes:
+  - |
+    This release addresses an issue which could cause wheels to fail to be
+    built when upgrading from one operating system to another. Upgrading to
+    this release is recommended before attempting an operating system
+    upgrade.
diff --git a/releasenotes/notes/systemd_run_lock_dir-5b4b0cad9c860ce0.yaml b/releasenotes/notes/systemd_run_lock_dir-5b4b0cad9c860ce0.yaml
new file mode 100644
index 0000000000..0fbc49da7b
--- /dev/null
+++ b/releasenotes/notes/systemd_run_lock_dir-5b4b0cad9c860ce0.yaml
@@ -0,0 +1,12 @@
+---
+features:
+  - |
+    Added variables ``systemd_run_dir`` and ``systemd_lock_dir`` that allows
+    to control run and lock path for directories that will be used by systemd
+    services. Variables should not include service name since it will be added
+    by default at the end of the provided path.
+    These variables could be also defined as keys inside ``systemd_services``
+    and this will have prescedence over default behaviour.
+  - |
+    Default run path for systemd services has been changed to ``/run`` and
+    lock path to ``/run/lock``.
diff --git a/releasenotes/notes/tls-migration-3ed93cc04dab5eee.yaml b/releasenotes/notes/tls-migration-3ed93cc04dab5eee.yaml
new file mode 100644
index 0000000000..f0bfe601fe
--- /dev/null
+++ b/releasenotes/notes/tls-migration-3ed93cc04dab5eee.yaml
@@ -0,0 +1,13 @@
+---
+features:
+  - |
+    Nova now defaults to to using the "QEMU-native TLS" feature
+    for live migrations, rather than the deprecated SSH method.
+    A pre-existing PKI (Public Key Infrastructure) setup is
+    required.
+
+    QEMU-native TLS requires all compute hosts to accept TCP connections on
+    port 16514 and port range 49152 to 49261.
+
+    More information can be found here:
+    https://docs.openstack.org/nova/latest/admin/secure-live-migration-with-qemu-native-tls.html