fix(neutron): run the neutron RPC server so the ironic agent registers

[cardoe]

What does this change do?

neutron-server runs under uWSGI, which serves the API only, so nothing starts
neutron's RPC listeners and rpc_workers is inert. neutron-rpc-server is what
receives from agents — the comment claiming it only sends requests to them is what
kept it off. With no consumer on q-reports-plugin, neutron-ironic-agent's
report_state casts are dropped silently and it never registers: dev's 25
Baremetal Node agents Alive = False since 2025-11-19, rax-prod-dfw3 and
rax-prod-iad3-rxdb-infra the same. That leaves the baremetal mechanism driver
inert too, since it won't bind to a dead agent. The same process hosts the ML2
callbacks (q-plugin) and service-plugin RPC (trunk, L3), and
neutron-periodic-workers is where the router driver's periodics will run.

• Enable deployment_rpc_server, with 2 replicas so state reports survive a rollout
  or node drain, and fix that comment.
• Add the missing pod.etcSources for neutron_rpc_server and
  neutron_periodic_worker: secret_ks_etc is false, so the chart mounts
  neutron-ks-etc only where it is listed, and both pods otherwise get an empty
  /etc/neutron/neutron.conf.d instead of the service user credentials. The
  periodic worker itself stays disabled.
• Pin networking-baremetal to stable/2026.1 in containers/neutron/Dockerfile.
  The base image installs it unpinned from PyPI and lands 8.1.0, the post-2026.1
  series, whose CI only ever ran against constraints/upper/master.
• Bump neutron's chartVersion to 2026.1.45+5b923efb7, which threads ovn.ini
  into the ironic agent so it takes ovn_nb_connection from the chart instead of
  falling back to tcp:127.0.0.1:6641 with OVN event-driven reconciliation disabled.

This also wakes the baremetal driver as a candidate binder ahead of undersync;
try_to_bind_segment_for_agent is the guard that keeps the hierarchical VXLAN→VLAN
binding with undersync, so the pin and the backports below belong here.

Do not merge yet

networking-baremetal backports to stable/2026.1, and bumps
NETWORKING_BAREMETAL_GIT_REF:

• 1005793 — Remove binding:host_id setting for L2VNI subports
• 1005795 — Remove invalid requested-chassis opt for localnet ports

openstack-helm. Both are merged upstream; the first is in the chart bump above, the
second is in 65f89744e and needs a chart release past 5b923efb7:

• 1005787 — thread ovn.ini into the ironic agent
• 1005789 — add a readiness probe to the ironic agent

Upgrade impact

• This change requires operator action to upgrade. If checked, add the
  upgrade-impact label and a release note: run scriv create from the
  repository root and describe the required action in the generated
  changelog.d/ file. See RELEASING.md.

Picked up by a normal resync, no operator action, matching how 9edf31f enabled the
OVN maintenance worker.

[mfencik]

Would be good to explain what is the current problem, what is it causing?

[cardoe]

neutron-server runs under uWSGI, which serves the API only, so nothing starts neutron's RPC listeners and rpc_workers is inert. neutron-rpc-server is what receives from agents, not what sends to them — the comment saying otherwise is what kept it off.

With no consumer on q-reports-plugin, neutron-ironic-agent's report_state casts are dropped silently and it never registers: dev's 25 Baremetal Node agents have been Alive = False since 2025-11-19, both prod clusters the same. That leaves the baremetal mechanism driver inert too, since it is agent-based and won't bind to a dead agent — four configured, three running. The same process hosts the ML2 callbacks (q-plugin) and service-plugin RPC (trunk, L3), and neutron-periodic-workers is where the router driver's periodics will run.

The etcSources half is a second bug: secret_ks_etc is false, so the chart mounts neutron-ks-etc only where it's listed and the rpc-server would have come up with no service credentials. The networking-baremetal pin carries the guard that stops the now-live baremetal driver taking the VLAN binding from undersync, which is why it's in the same PR.

---

Generated by Claude Code

[haseebsyed12]

need to change the image pr-2350

[nidzrai]

this change ?