ManageIQ Spassky GA and Radjabov-2 Announcement
ManageIQ Spassky-1
On behalf of the ManageIQ team, I’m happy to announce the release of ManageIQ Spassky! This release is named after the chess grandmaster Boris Spassky. You can download the Spassky-1 release on our downloads page.
Here are the highlights of the Spassky release:
Security Issues
-
CVE-2026-22598 - Denial of Service when creating malformed TimeProfiles
Thanks to Arpitha S for finding and reporting this issue.
New Providers
Providers
- [Ansible Automation Platform] Rename ‘Ansible Tower’ to ‘Ansible Automation Platform’ [#318]
- [Embedded Terraform] Support Terraform provisioning via Workflows [#23276]
- [Embedded Terraform] Support reconfigure action for ServiceTerraformTemplate [#94]
- [Embedded Terraform] Generate dialog fields based on terraform type constraints [#89]
- [IBM Cloud VPC] Add schedule tab with “Time until Retirement” during provisioning [#520]
- [Kubernetes] Add create, update, and delete of container projects [#554]
- [KubeVirt / OpenShift Virtualization] Add VM Reconfigure [#285]
- [KubeVirt / OpenShift Virtualization] Collect KubeVirt / OSV instance types [#288], [#284]
- [KubeVirt / OpenShift Virtualization] Parse VM sockets and threads [#287]
- [KubeVirt / OpenShift Virtualization] Parse Host memory and cpu [#283]
- [OpenStack] Fix missing OpenStack VM CPU Usage Metrics [#923]
- [OpenStack] Support nested JSON parsing for Oslo.messaging v2.0 notifications [#927]
- [VMware] Add v8.0.3 support [#924]
Core
- Upgrade to Rails 7.2 [#23201], [#23200]
- Upgrade ansible/ansible-core to latest and python to 3.12 [#573]
- Improve purging of numerous tables [#23394]
- Support /mnt/log_collection mount point on appliances for log collection scripts [#23644]
Embedded Workflows
- Add a manageiq://api builtin method for API calls to the ManageIQ API [#144]
- Add a manageiq://http builtin method for arbitrary REST API calls [#143], [#294]
- Check if a workflow payload is valid during sync [#59]
- [Amazon States Language] **BREAKING** Fix nested PayloadTemplate interpolation [#311]
- UPGRADE NOTE: Using
.$at the end of Hash keys is no longer required and will result in an error
- UPGRADE NOTE: Using
- [Amazon States Language] **BREAKING** Allow credentials to be referenced from parameters [#308]
- UPGRADE NOTE: Setting credentials via ResultPath now must use
$$.Credentialsinstead of$.Credentials
- UPGRADE NOTE: Setting credentials via ResultPath now must use
- [Amazon States Language] Add Choice rule payload validation [#189]
- [Amazon States Language] Add Map state ItemBatcher/ItemSelector support [#294]
UI
- Add columns for payload valid and error for workflows [#9632]
- Add embedded automate and workflow entry point UI components [#9404]
- Table conversions to React [#9704]
- Form conversions to React [#9495]
- Tabs conversions to React [#9490]
- **BREAKING** Remove Diagnostics > Collect Logs [#9704], [#23647]
- Remove Diagnostics > Orphaned Data [#9442]
API
- Add
/api/container_projectscreate, edit, and delete [#1291] - Expose attribute aliases in list of attributes [#1278]
Build
- [RPMs] Reduce the size of the azure gems [#737]
- [Appliances] Add bundler aware shell alias
appliance_console_cli[#394] - [Appliances] Check for pending migrations before starting server [#395]
- [Appliances] Fix installing RPMs overwriting the permissions of podman container filesystems by moving the containers storage to
/var/lib/manageiq/containers/storages, allowing/var/lib/manageiq/containersto live on another logical volume. [#23470]- UPGRADE NOTE: If you have container registries with authentication, you will need to login again.
- [Appliances / Containerized] Set OIDCCacheShmMax value to avoid using changed package defaults [#400], [#1320]
- [Containerized] Add health monitoring for liveness and readiness of httpd pod [#97], [#1310]
- [Operator] Upgrade to go 1.25.0 and operator-sdk v1.41.0 [#1279]
Developer
- Upgrade from Node v18 to v20 [#23425]
- Update Yarn to v4.10.3 [#9627]
- Improve cypress automated testing via cypress-on-rails [#9633]
**IMPORTANT**: The following are potentially **BREAKING** changes
- [Amazon States Language] Fix nested PayloadTemplate interpolation [#311]
- UPGRADE NOTE: Using
.$at the end of Hash keys is no longer required and will result in an error
- UPGRADE NOTE: Using
- [Amazon States Language] Allow credentials to be referenced from parameters [#308]
- UPGRADE NOTE: Setting credentials via ResultPath now must use
$$.Credentialsinstead of$.Credentials
- UPGRADE NOTE: Setting credentials via ResultPath now must use
- Remove Diagnostics > Collect Logs [#9704], [#23647]
- Log collection is no longer accessible from the UI as we continue to separate the application concerns from the appliance concerns, where those differences affect and/or do not work on the containerized deployments. The log collection scripts under
tools/collect_logshave been enhanced to support a mount point at/mnt/log_collection([#23644]) if you want to collect logs from the appliance in a scriptable or schedulable way.
- Log collection is no longer accessible from the UI as we continue to separate the application concerns from the appliance concerns, where those differences affect and/or do not work on the containerized deployments. The log collection scripts under
There are many more changes and bug fixes that would be impossible to detail in a single blog post, but you can read through them all in the full changelog. Many thanks goes to all of the community members for their contributions!
ManageIQ Radjabov-2
In addition to the Spassky release, we are also releasing Radjabov-2 which includes the following security fix:
Security Issues
-
CVE-2026-22598 - Denial of Service when creating malformed TimeProfiles
Thanks to Arpitha S for finding and reporting this issue.
You can see the rest of the Radjabov-2 changes in the full changelog.
We are already well underway on the next release of ManageIQ: Tal. If you’re interested in getting involved, check out our roadmap, check out our community page, ask questions in our discussions forum, and chat with us in Gitter. We look forward to hearing from you!