diff --git a/ansible-collection-requirements.yml b/ansible-collection-requirements.yml
index 174e428391..f2e9f102b7 100644
--- a/ansible-collection-requirements.yml
+++ b/ansible-collection-requirements.yml
@@ -3,15 +3,15 @@ collections:
 - name: openstack.cloud
   source: https://opendev.org/openstack/ansible-collections-openstack
   type: git
-  version: 2.1.0
+  version: 2.2.0
 - name: openstack.config_template
   source: https://opendev.org/openstack/ansible-config_template
   type: git
-  version: 2.0.0
+  version: 2.1.0
 - name: openstack.osa
   source: https://opendev.org/openstack/openstack-ansible-plugins
   type: git
-  version: 9f13a58e2b8596ae43b11dd1b112be8522868c90
+  version: dee122e2e972f98eac8dd5a717725db88c8f4f80
 - name: community.general
   source: https://github.com/ansible-collections/community.general
   type: git
diff --git a/ansible-role-requirements.yml b/ansible-role-requirements.yml
index 6cf1d22e49..e70d211f1f 100644
--- a/ansible-role-requirements.yml
+++ b/ansible-role-requirements.yml
@@ -2,33 +2,33 @@
 - name: ansible-hardening
   scm: git
   src: https://opendev.org/openstack/ansible-hardening
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: 7a4d7aa4de396a64f3f8284943fb65675846d9ab
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: apt_package_pinning
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-apt_package_pinning
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: a9f795ff46387a6ff81780760d9fad4834bb2066
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: galera_server
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-galera_server
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: a5ee577b6d7d46447e5a13321a6fc02f902edd2b
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: ceph_client
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-ceph_client
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: c773943086655f155f5fe2f5f95e5e5a27e3ae62
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: haproxy_server
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-haproxy_server
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-28'
+  version: 5d44d7fa3876abff2ee8f22bfc266b5d5f7b0660
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: keepalived
   scm: git
   src: https://github.com/evrardjp/ansible-keepalived
@@ -38,306 +38,306 @@
 - name: lxc_container_create
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-lxc_container_create
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: 5a59539f9a4320847fc8d30d3832fcb002dbd4d0
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: lxc_hosts
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-lxc_hosts
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: 58fe9567bca0d297c39e6911316cb9ba627c76bd
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: memcached_server
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-memcached_server
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: 4f5297a33d1648d9101679550a728aca9aeb2008
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: openstack_hosts
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-openstack_hosts
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: 6f607e85fd1252187384169f2b6629da1f0567a6
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: os_keystone
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_keystone
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: bf9a75dd4605c57974a2f77dec9faa5f2624ea4a
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: openstack_openrc
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-openstack_openrc
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: 237ab1789b4b66f5ee6e76e99ac190f0ccc0c1da
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: os_adjutant
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_adjutant
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: 5e6991a5993ce96d71c71a5295ed3028e6f797e5
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: os_aodh
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_aodh
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: 11111aeb9c3b3777ce0f2e417fbc16172e76dd7c
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: os_barbican
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_barbican
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: 3b0a52e69bfb8f9ab7dee05c8623ee9957212b0c
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: os_blazar
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_blazar
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: 0e9a24932c7aac9cb083521dcffbe31bd19a3501
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: os_ceilometer
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_ceilometer
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: 9447a802a7e40154dfa107953c71c504a4510860
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: os_cinder
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_cinder
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: 67957fbd383037e350549ee5550477ff1cd1537b
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: os_cloudkitty
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_cloudkitty
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: baea81ed4e571164d1c29b1ed650e91a0154ef25
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: os_designate
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_designate
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: 4ed23e4299b4b0bcb1a39d27012cf0d91e090718
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: os_glance
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_glance
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: ea1ca13c0fedcad6882078800e8a37b0653a4102
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: os_gnocchi
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_gnocchi
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: 5741575c4f49be9b71b7d42e2ad23ea8f470340b
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: os_heat
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_heat
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: 35d798351e174ed828eccf37bcebcdbe99782588
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: os_horizon
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_horizon
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: acc0c03a4ab3cc07b46d4291386972bce4ad31fa
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: os_ironic
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_ironic
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: 44ab2cafc8c6a0f829adbbb8f4896f10717f6ab4
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: os_magnum
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_magnum
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: 83be71e692e58a60277bcbf794abb16edcd91e68
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: os_manila
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_manila
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: 62d76125790a991193af60bb54be800e02928523
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: os_masakari
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_masakari
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: 534a50422589a47ab85f4df661ba1a0f39779799
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: os_mistral
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_mistral
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: 8019d354c8255da4b4a2003535e00e763ede3251
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: os_murano
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_murano
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: ec81b64073d19f7ce77377a02973899737df5f33
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: os_neutron
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_neutron
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: 356cdf8249f8d7af84a1e60c4441eb33d9c0a524
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: os_nova
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_nova
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-25'
+  version: 00f97ddd793ac7707eef6bdd6660e9749c48b4fb
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: os_octavia
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_octavia
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: b43f61534143a1e05afcddcfa5058e655f30d725
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: os_placement
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_placement
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: c37c7de4f1be826bed03f6f0c95eabf4e8092ef8
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: os_rally
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_rally
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: 90cc248ec1230a3bc0f234b56b63b9deffb02156
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: os_sahara
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_sahara
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: cd1c06978a4eb75b4f189d08862cd28f775c545c
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: os_senlin
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_senlin
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: 9629a060ba79b5ebc8379529199c5ce2a326467e
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: os_swift
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_swift
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: d9f4702f331f90174074f991b419d8f05095fd43
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: os_tacker
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_tacker
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: ce1cb9c84bf0e8dd4b0e74e543fc4746a28743bd
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: os_tempest
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_tempest
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: 2031a5a8694966470ad5b6cde5fc4e06e281c572
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: os_trove
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_trove
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: 8123136659bdbfb8ea0afdc345a18b110cc8fef9
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: os_zun
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-os_zun
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: 57b4b36e9c00c998a4c637f2616f21f15a05bf2f
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: qdrouterd
   scm: git
   src: https://opendev.org/openstack/ansible-role-qdrouterd
-  version: master
-  trackbranch: master
-  shallow_since: '2022-12-12'
+  version: d08d71d74a31e9c782e15091c7539aece9847a07
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: rabbitmq_server
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-rabbitmq_server
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-29'
+  version: 6f9f8dc35bc94a17501b9e91e5d2e30dd115251c
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: repo_server
   scm: git
   src: https://opendev.org/openstack/openstack-ansible-repo_server
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: 9c4256f8d8422451adcb815a20ff9b5648907464
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: etcd
   scm: git
   src: https://github.com/noonedeadpunk/ansible-etcd
-  version: master
+  version: de3b061e954d3259e0a48e2e55878f598ef3a9c1
   trackbranch: master
-  shallow_since: '2022-05-27'
+  shallow_since: '2023-04-11'
 - name: unbound
   scm: git
   src: https://github.com/noonedeadpunk/ansible-role-unbound
-  version: master
+  version: 26abb238925dec80707ef7e4b869b3c5e48d4f7b
   trackbranch: master
-  shallow_since: '2022-05-27'
+  shallow_since: '2023-02-09'
 - name: resolvconf
   scm: git
   src: https://github.com/logan2211/ansible-resolvconf
-  version: master
+  version: f7f694b3dd4361e364dccb4ce94e6510727fca2f
   trackbranch: master
   shallow_since: '2021-03-31'
 - name: ceph-ansible
   scm: git
   src: https://github.com/ceph/ceph-ansible
-  version: stable-7.0
+  version: b82a6ed1a7170c2445d477c567c181366d9ed944
   trackbranch: stable-7.0
   shallow_since: '2022-06-14'
 - name: pacemaker_corosync
   scm: git
   src: https://github.com/noonedeadpunk/ansible-pacemaker-corosync
-  version: master
+  version: 8218da4e0b0ea14aceae091782c83c588cc8139e
   trackbranch: master
-  shallow_since: '2022-06-14'
+  shallow_since: '2023-10-19'
 - name: systemd_service
   src: https://opendev.org/openstack/ansible-role-systemd_service
   scm: git
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: 962ae0cd7a740924d4ead47666e526e0c5729c2f
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: systemd_mount
   src: https://opendev.org/openstack/ansible-role-systemd_mount
   scm: git
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: 2403496c59d7fe7164c62b5d64f2fe355bf7d139
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: systemd_networkd
   src: https://opendev.org/openstack/ansible-role-systemd_networkd
   scm: git
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: 3b845622c2cc2de90b29b84cab6152f0e1118376
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: python_venv_build
   src: https://opendev.org/openstack/ansible-role-python_venv_build
   scm: git
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-24'
+  version: bc6f2cce21123ce24293be03d1ce419931e7c154
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: uwsgi
   src: https://opendev.org/openstack/ansible-role-uwsgi
   scm: git
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: 3ff77445d8d5e887e11206903068333abaaffc12
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: pki
   src: https://opendev.org/openstack/ansible-role-pki
   scm: git
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: 58c45aa0b15b23ccf17db426cbf734c2cac66954
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
 - name: zookeeper
   src: https://opendev.org/openstack/ansible-role-zookeeper
   scm: git
-  version: master
-  trackbranch: master
-  shallow_since: '2023-05-23'
+  version: fe9f681e6a11e415824d63c0a09c7f96a21440ed
+  trackbranch: stable/2023.2
+  shallow_since: '2023-12-06'
diff --git a/doc/source/index.rst b/doc/source/index.rst
index 29af301aa9..75389b9322 100644
--- a/doc/source/index.rst
+++ b/doc/source/index.rst
@@ -9,10 +9,11 @@ configuration of an OpenStack environment.
 
 Documentation for each of the following releases is available.
 
-2023.2 (Bobcat): Under Development
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+2023.2 (Bobcat): Maintained
+~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
-OpenStack-Ansible 2023.2 (Bobcat) is currently Under Development.
+OpenStack-Ansible 2023.2 (Bobcat) was first released with the 28.0.0 tag on
+7 December 2023.
 
 .. toctree::
    :maxdepth: 1
diff --git a/inventory/group_vars/all/source_git.yml b/inventory/group_vars/all/source_git.yml
index 9c4bbe89b2..371069f0a8 100644
--- a/inventory/group_vars/all/source_git.yml
+++ b/inventory/group_vars/all/source_git.yml
@@ -13,9 +13,9 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-### HEAD as of 05.10.2023 ###
+### HEAD as of 07.12.2023 ###
 
 ## Global Requirements
 requirements_git_repo: "{{ openstack_opendev_base_url }}/openstack/requirements"
-requirements_git_install_branch: 6dc2c66d8fc1d8e6c6ecbb1e0e0107e57d11b3b9
-requirements_git_track_branch: master
+requirements_git_install_branch: a5fa5f12dd3abd03c9dffe248ba0b4221872d31e
+requirements_git_track_branch: stable/2023.2
diff --git a/inventory/group_vars/aodh_all/source_git.yml b/inventory/group_vars/aodh_all/source_git.yml
index 68f369f86d..4897b2f5c2 100644
--- a/inventory/group_vars/aodh_all/source_git.yml
+++ b/inventory/group_vars/aodh_all/source_git.yml
@@ -13,9 +13,9 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-### HEAD as of 15.08.2023 ###
+### HEAD as of 07.12.2023 ###
 
 ## Aodh service
 aodh_git_repo: "{{ openstack_opendev_base_url }}/openstack/aodh"
-aodh_git_install_branch: 763bb401857e2501c92d7538a658df3aea38a07f
+aodh_git_install_branch: 1215c3fb4aaf8a9d7ab7ef91dacf40120c64f371
 aodh_git_track_branch: stable/2023.2
diff --git a/inventory/group_vars/ceilometer_all/source_git.yml b/inventory/group_vars/ceilometer_all/source_git.yml
index 91ceefe0de..03af3212b1 100644
--- a/inventory/group_vars/ceilometer_all/source_git.yml
+++ b/inventory/group_vars/ceilometer_all/source_git.yml
@@ -13,9 +13,9 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-### HEAD as of 05.10.2023 ###
+### HEAD as of 07.12.2023 ###
 
 ## Ceilometer service
 ceilometer_git_repo: "{{ openstack_opendev_base_url }}/openstack/ceilometer"
-ceilometer_git_install_branch: 8961c1d19a72421637bc1162101dd334fd328fe6
+ceilometer_git_install_branch: c02b67723973a349b525ecb053090dd602e57ea9
 ceilometer_git_track_branch: stable/2023.2
diff --git a/inventory/group_vars/cinder_all/source_git.yml b/inventory/group_vars/cinder_all/source_git.yml
index d395393ba5..35c11cfe05 100644
--- a/inventory/group_vars/cinder_all/source_git.yml
+++ b/inventory/group_vars/cinder_all/source_git.yml
@@ -13,9 +13,9 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-### HEAD as of 05.10.2023 ###
+### HEAD as of 07.12.2023 ###
 
 ## Cinder service
 cinder_git_repo: "{{ openstack_opendev_base_url }}/openstack/cinder"
-cinder_git_install_branch: 1f4d2b91c9e7bd3e9b6d9a382e8b3798d7af0fdf
+cinder_git_install_branch: 775827bdaec6f7267cc5d8afdecce0c45846fbd8
 cinder_git_track_branch: stable/2023.2
diff --git a/inventory/group_vars/cloudkitty_all/source_git.yml b/inventory/group_vars/cloudkitty_all/source_git.yml
index b1301eadab..b53643907e 100644
--- a/inventory/group_vars/cloudkitty_all/source_git.yml
+++ b/inventory/group_vars/cloudkitty_all/source_git.yml
@@ -13,9 +13,9 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-### HEAD as of 05.10.2023 ###
+### HEAD as of 07.12.2023 ###
 
 ## Cloudkitty service
 cloudkitty_git_repo: "{{ openstack_opendev_base_url }}/openstack/cloudkitty"
-cloudkitty_git_install_branch: c1a6106c6179698d0883c8c094f30614d7f5f387
+cloudkitty_git_install_branch: 74462f0ade79fa53338e611bc837d6ec6be40338
 cloudkitty_git_track_branch: stable/2023.2
diff --git a/inventory/group_vars/designate_all/source_git.yml b/inventory/group_vars/designate_all/source_git.yml
index 997db85c8c..d87d45e50c 100644
--- a/inventory/group_vars/designate_all/source_git.yml
+++ b/inventory/group_vars/designate_all/source_git.yml
@@ -13,9 +13,9 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-### HEAD as of 05.10.2023 ###
+### HEAD as of 07.12.2023 ###
 
 ## Designate service
 designate_git_repo: "{{ openstack_opendev_base_url }}/openstack/designate"
-designate_git_install_branch: c918e5cea2a11b16e6e9a22e3a6a4e9901856199
+designate_git_install_branch: 2c817b3d7f01de44023f195c6e8de8853683a54a
 designate_git_track_branch: stable/2023.2
diff --git a/inventory/group_vars/gnocchi_all/source_git.yml b/inventory/group_vars/gnocchi_all/source_git.yml
index 46b5461188..0e8a7f5391 100644
--- a/inventory/group_vars/gnocchi_all/source_git.yml
+++ b/inventory/group_vars/gnocchi_all/source_git.yml
@@ -13,7 +13,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-### HEAD as of 05.10.2023 ###
+### HEAD as of 07.12.2023 ###
 
 ## Gnocchi service
 ## This service has a different stable branch strategy to the rest of OpenStack.
@@ -23,5 +23,5 @@
 #       is merged and backported
 
 gnocchi_git_repo: "{{ openstack_github_base_url }}/gnocchixyz/gnocchi"
-gnocchi_git_install_branch: ee4eb56511af0936bbea181d03d461aefb9fc251
+gnocchi_git_install_branch: 05e8f412553de76f6a54b23cad1a1b31e484fd88
 gnocchi_git_track_branch: stable/4.5
diff --git a/inventory/group_vars/horizon_all/source_git.yml b/inventory/group_vars/horizon_all/source_git.yml
index a367d18e28..4328a2cbf4 100644
--- a/inventory/group_vars/horizon_all/source_git.yml
+++ b/inventory/group_vars/horizon_all/source_git.yml
@@ -13,7 +13,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-### HEAD as of 05.10.2023 ###
+### HEAD as of 07.12.2023 ###
 
 ## Horizon service
 horizon_git_repo: "{{ openstack_opendev_base_url }}/openstack/horizon"
@@ -72,7 +72,7 @@ sahara_dashboard_git_track_branch: stable/2023.2
 
 ## Horizon Trove dashboard plugin
 trove_dashboard_git_repo: "{{ openstack_opendev_base_url }}/openstack/trove-dashboard"
-trove_dashboard_git_install_branch: 60a3d985c79e24e280fa2d37c4b4365a64293919
+trove_dashboard_git_install_branch: 80cb50da9716b7d2cc74c0218aa25e95198c4266
 trove_dashboard_git_track_branch: stable/2023.2
 
 ## Horizon Octavia dashboard plugin
diff --git a/inventory/group_vars/ironic_all/source_git.yml b/inventory/group_vars/ironic_all/source_git.yml
index bcb78a87f9..99e6b89bf4 100644
--- a/inventory/group_vars/ironic_all/source_git.yml
+++ b/inventory/group_vars/ironic_all/source_git.yml
@@ -13,14 +13,14 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-### HEAD as of 05.10.2023 ###
+### HEAD as of 07.12.2023 ###
 
 ## Ironic service
 ironic_git_repo: "{{ openstack_opendev_base_url }}/openstack/ironic"
-ironic_git_install_branch: da4e1c98270c62e27faa11bd6b29d4e40012df1c
+ironic_git_install_branch: 5dc913ea7bfa422da63a5592f4d3a5b4fd02e3f6
 ironic_git_track_branch: stable/2023.2
 
 ## Ironic inspector service
 ironic_inspector_git_repo: "{{ openstack_opendev_base_url }}/openstack/ironic-inspector"
-ironic_inspector_git_install_branch: 59ae8d57fcc946ac5e20b7b70a1f9b2553a4bd01
+ironic_inspector_git_install_branch: 2bca56df3107370e724e8af73c12eabe0ce4e67a
 ironic_inspector_git_track_branch: stable/2023.2
diff --git a/inventory/group_vars/manila_all/source_git.yml b/inventory/group_vars/manila_all/source_git.yml
index 86de92bc67..11adf0fbed 100644
--- a/inventory/group_vars/manila_all/source_git.yml
+++ b/inventory/group_vars/manila_all/source_git.yml
@@ -13,9 +13,9 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-### HEAD as of 05.10.2023 ###
+### HEAD as of 07.12.2023 ###
 
 ## Manila service
 manila_git_repo: "{{ openstack_opendev_base_url }}/openstack/manila"
-manila_git_install_branch: 215389e01403e67617f995fd92e0019eabfb3705
+manila_git_install_branch: 98bc755673fe48a9c67203e4262315b048efe25d
 manila_git_track_branch: stable/2023.2
diff --git a/inventory/group_vars/neutron_all/source_git.yml b/inventory/group_vars/neutron_all/source_git.yml
index c961970b21..a129e60a48 100644
--- a/inventory/group_vars/neutron_all/source_git.yml
+++ b/inventory/group_vars/neutron_all/source_git.yml
@@ -13,11 +13,11 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-### HEAD as of 05.10.2023 ###
+### HEAD as of 07.12.2023 ###
 
 ## Neutron service
 neutron_git_repo: "{{ openstack_opendev_base_url }}/openstack/neutron"
-neutron_git_install_branch: 04e9b063ad526778ba80438fc851e03fa16e5085
+neutron_git_install_branch: 58f8d6797eb467fb2018de01f55f58055531ce41
 neutron_git_track_branch: stable/2023.2
 
 neutron_vpnaas_git_repo: "{{ openstack_opendev_base_url }}/openstack/neutron-vpnaas"
@@ -37,7 +37,7 @@ networking_sfc_git_install_branch: 19568366d59b7deef3db03c3f8a00885f030cd48
 networking_sfc_git_track_branch: stable/2023.2
 
 networking_generic_switch_git_repo: "{{ openstack_opendev_base_url}}/openstack/networking-generic-switch"
-networking_generic_switch_git_install_branch: c52e8a2a9d7f5714b3830fa804f9d7795424d4d6
+networking_generic_switch_git_install_branch: 210a16470e6d4776b8b19bb880b76160608e7dbe
 networking_generic_switch_git_track_branch: stable/2023.2
 
 networking_nsx_git_repo: "{{ openstack_opendev_base_url }}/x/vmware-nsx"
@@ -45,7 +45,7 @@ networking_nsx_git_install_branch: 715cb5fc1174b9226f043e49ffd389add44f070a
 networking_nsx_git_track_branch: master
 
 networking_nsxlib_git_repo: "{{ openstack_opendev_base_url }}/x/vmware-nsxlib"
-networking_nsxlib_git_install_branch: d73f0aeb76e1f5e052e5e161656aba6647d6b845
+networking_nsxlib_git_install_branch: d11fe387c75008229766fbbfeb21d516a025ec91
 networking_nsxlib_git_track_branch: master
 
 networking_baremetal_git_repo: "{{ openstack_opendev_base_url }}/openstack/networking-baremetal"
diff --git a/inventory/group_vars/nova_all/source_git.yml b/inventory/group_vars/nova_all/source_git.yml
index 5462359268..0d0a80d59d 100644
--- a/inventory/group_vars/nova_all/source_git.yml
+++ b/inventory/group_vars/nova_all/source_git.yml
@@ -23,11 +23,11 @@
 ##   * All items with this file should be separated by `name_` note that the name of the
 ##     package should be one long name with no additional `_` separating it.
 
-### HEAD as of 05.10.2023 ###
+### HEAD as of 07.12.2023 ###
 
 ## NOVNC from source
 novncproxy_git_repo: "{{ openstack_github_base_url }}/novnc/noVNC"
-novncproxy_git_install_branch: 85a465288b3144e9e42073dacf25dd60fd5665f9
+novncproxy_git_install_branch: 829725b30e3d3486991e34db0c86406e556ebf98
 novncproxy_git_track_branch: master
 
 ## spice-html5 from source
@@ -37,5 +37,5 @@ spicehtml5_git_track_branch: master
 
 ## Nova service
 nova_git_repo: "{{ openstack_opendev_base_url }}/openstack/nova"
-nova_git_install_branch: a5e26bf6cab336955c6d5a1c261f9ee25604884c
+nova_git_install_branch: 3962a98f81b0e1f546f346650480025dc35699a7
 nova_git_track_branch: stable/2023.2
diff --git a/inventory/group_vars/octavia_all/source_git.yml b/inventory/group_vars/octavia_all/source_git.yml
index c33fd85561..8e099fc93e 100644
--- a/inventory/group_vars/octavia_all/source_git.yml
+++ b/inventory/group_vars/octavia_all/source_git.yml
@@ -13,11 +13,11 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-### HEAD as of 05.10.2023 ###
+### HEAD as of 07.12.2023 ###
 
 ## Octavia service
 octavia_git_repo: "{{ openstack_opendev_base_url }}/openstack/octavia"
-octavia_git_install_branch: 853d0f69e43a16e675103b515a82ec90d83e222f
+octavia_git_install_branch: 88d7315a60314e44fcce88ad198ceb3c0c107fe6
 octavia_git_track_branch: stable/2023.2
 
 ## Octavia OVN provider
diff --git a/inventory/group_vars/utility_all/source_git.yml b/inventory/group_vars/utility_all/source_git.yml
index 7b786c899e..f4d18cf100 100644
--- a/inventory/group_vars/utility_all/source_git.yml
+++ b/inventory/group_vars/utility_all/source_git.yml
@@ -17,88 +17,88 @@
 
 tempest_git_repo: "{{ openstack_opendev_base_url }}/openstack/tempest"
 tempest_git_install_branch: 5c64e3913a1a5a061a6b04b212ce35aaa84f2184
-tempest_git_track_branch: master
+tempest_git_track_branch: None
 
 tempest_plugin_barbican_git_repo: "{{ openstack_opendev_base_url }}/openstack/barbican-tempest-plugin"
 tempest_plugin_barbican_git_install_branch: a34bd3b785a645b7879c7dd99625b7fa1546903b
-tempest_plugin_barbican_git_track_branch: master
+tempest_plugin_barbican_git_track_branch: None
 
 tempest_plugin_cinder_git_repo: "{{ openstack_opendev_base_url }}/openstack/cinder-tempest-plugin"
 tempest_plugin_cinder_git_install_branch: dfe2c229ed110b87a195457908c1538ff1c342b4
-tempest_plugin_cinder_git_track_branch: master
+tempest_plugin_cinder_git_track_branch: None
 
 tempest_plugin_cloudkitty_git_repo: "{{ openstack_opendev_base_url }}/openstack/cloudkitty-tempest-plugin"
 tempest_plugin_cloudkitty_git_install_branch: 599e5eea9c99015f000baf695b2a61a5b3bf21c3
-tempest_plugin_cloudkitty_git_track_branch: master
+tempest_plugin_cloudkitty_git_track_branch: None
 
 tempest_plugin_designate_git_repo: "{{ openstack_opendev_base_url }}/openstack/designate-tempest-plugin"
 tempest_plugin_designate_git_install_branch: 428987b56adad4dccec683274f85bd36064a83c3
-tempest_plugin_designate_git_track_branch: master
+tempest_plugin_designate_git_track_branch: None
 
 tempest_plugin_glance_git_repo: "{{ openstack_opendev_base_url }}/openstack/glance-tempest-plugin"
 tempest_plugin_glance_git_install_branch: d6f7287947731da139413899ddddddcfb95e1a50
-tempest_plugin_glance_git_track_branch: master
+tempest_plugin_glance_git_track_branch: None
 
 tempest_plugin_heat_git_repo: "{{ openstack_opendev_base_url }}/openstack/heat-tempest-plugin"
 tempest_plugin_heat_git_install_branch: c0005a3048106d619fa58e471576fd1d606b86f4
-tempest_plugin_heat_git_track_branch: master
+tempest_plugin_heat_git_track_branch: None
 
 tempest_plugin_ironic_git_repo: "{{ openstack_opendev_base_url }}/openstack/ironic-tempest-plugin"
 tempest_plugin_ironic_git_install_branch: 3c8235ed02c10940fc3889ae04d9ba7a6a8bbb34
-tempest_plugin_ironic_git_track_branch: master
+tempest_plugin_ironic_git_track_branch: None
 
 tempest_plugin_keystone_git_repo: "{{ openstack_opendev_base_url }}/openstack/keystone-tempest-plugin"
 tempest_plugin_keystone_git_install_branch: dbe56f0a07febd9e8babf54b88c63084b59f0b39
-tempest_plugin_keystone_git_track_branch: master
+tempest_plugin_keystone_git_track_branch: None
 
 tempest_plugin_magnum_git_repo: "{{ openstack_opendev_base_url }}/openstack/magnum-tempest-plugin"
 tempest_plugin_magnum_git_install_branch: ef903363153ef34abf79afb6ea7810ee6663525f
-tempest_plugin_magnum_git_track_branch: master
+tempest_plugin_magnum_git_track_branch: None
 
 tempest_plugin_manila_git_repo: "{{ openstack_opendev_base_url }}/openstack/manila-tempest-plugin"
 tempest_plugin_manila_git_install_branch: dae4d135da2c7c9cd223db5379e04ccce61f8037
-tempest_plugin_manila_git_track_branch: master
+tempest_plugin_manila_git_track_branch: None
 
 tempest_plugin_murano_git_repo: "{{ openstack_opendev_base_url }}/openstack/murano-tempest-plugin"
 tempest_plugin_murano_git_install_branch: d2b794cbf0f33c39db85d0a59e38851f579b1d5a
-tempest_plugin_murano_git_track_branch: master
+tempest_plugin_murano_git_track_branch: None
 
 tempest_plugin_neutron_git_repo: "{{ openstack_opendev_base_url }}/openstack/neutron-tempest-plugin"
 tempest_plugin_neutron_git_install_branch: 97409c6992f87f323e135933945ecf8bc03eece3
-tempest_plugin_neutron_git_track_branch: master
+tempest_plugin_neutron_git_track_branch: None
 
 tempest_plugin_novajoin_git_repo: "{{ openstack_opendev_base_url }}/x/novajoin-tempest-plugin"
 tempest_plugin_novajoin_git_install_branch: d4a39ceb0f636de6a5b07b99a5a04a7a272dd398
-tempest_plugin_novajoin_git_track_branch: master
+tempest_plugin_novajoin_git_track_branch: None
 
 tempest_plugin_octavia_git_repo: "{{ openstack_opendev_base_url }}/openstack/octavia-tempest-plugin"
 tempest_plugin_octavia_git_install_branch: d7ddf4d78515b576e88f635ff7c361f5b291f54b
-tempest_plugin_octavia_git_track_branch: master
+tempest_plugin_octavia_git_track_branch: None
 
 tempest_plugin_senlin_git_repo: "{{ openstack_opendev_base_url }}/openstack/senlin-tempest-plugin"
 tempest_plugin_senlin_git_install_branch: dadcdeb7ea767acf0bf65b5ef83d9889a1d19931
-tempest_plugin_senlin_git_track_branch: master
+tempest_plugin_senlin_git_track_branch: None
 
 tempest_plugin_sahara_git_repo: "{{ openstack_opendev_base_url }}/openstack/sahara-tests"
 tempest_plugin_sahara_git_install_branch: f67f18fbdef1e3f88276d1a421c75b2d80d7605a
-tempest_plugin_sahara_git_track_branch: master
+tempest_plugin_sahara_git_track_branch: None
 
 tempest_plugin_telemetry_git_repo: "{{ openstack_opendev_base_url }}/openstack/telemetry-tempest-plugin"
 tempest_plugin_telemetry_git_install_branch: 2064db7dc70b7167d3016d5eef092031733d6e94
-tempest_plugin_telemetry_git_track_branch: master
+tempest_plugin_telemetry_git_track_branch: None
 
 tempest_plugin_trove_git_repo: "{{ openstack_opendev_base_url }}/openstack/trove-tempest-plugin"
 tempest_plugin_trove_git_install_branch: d63e17a1c068a90168a463dd78e241a6b7f51a91
-tempest_plugin_trove_git_track_branch: master
+tempest_plugin_trove_git_track_branch: None
 
 tempest_plugin_zaqar_git_repo: "{{ openstack_opendev_base_url }}/openstack/zaqar-tempest-plugin"
 tempest_plugin_zaqar_git_install_branch: 3813c99e501a1f67a9cbde751cf71747a61f6786
-tempest_plugin_zaqar_git_track_branch: master
+tempest_plugin_zaqar_git_track_branch: None
 
 tempest_plugin_zun_git_repo: "{{ openstack_opendev_base_url }}/openstack/zun-tempest-plugin"
 tempest_plugin_zun_git_install_branch: 8a0b3cf100c00c5ddbe13bc97b42f16a2bff95c1
-tempest_plugin_zun_git_track_branch: master
+tempest_plugin_zun_git_track_branch: None
 
 rally_openstack_git_repo: "{{ openstack_opendev_base_url }}/openstack/rally-openstack"
 rally_openstack_git_install_branch: 9ff67887bf848c5966bb4a2f37018500d30dbe45
-rally_openstack_git_track_branch: master
+rally_openstack_git_track_branch: None
diff --git a/inventory/group_vars/zun_all/source_git.yml b/inventory/group_vars/zun_all/source_git.yml
index 9a5fbd33d7..1b4d874a4a 100644
--- a/inventory/group_vars/zun_all/source_git.yml
+++ b/inventory/group_vars/zun_all/source_git.yml
@@ -13,7 +13,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-### HEAD as of 05.10.2023 ###
+### HEAD as of 07.12.2023 ###
 
 ## Zun service
 zun_git_repo: "{{ openstack_opendev_base_url }}/openstack/zun"
@@ -22,7 +22,7 @@ zun_git_track_branch: stable/2023.2
 
 ## Zun kuryr service
 zun_kuryr_git_repo: "{{ openstack_opendev_base_url }}/openstack/kuryr-libnetwork"
-zun_kuryr_git_install_branch: 7b010b1e1f4bf25cb355cc8fb8f73c9f0838b78b
+zun_kuryr_git_install_branch: 806677a5e0f11da333d114377f61562457aeaa6b
 zun_kuryr_git_track_branch: stable/2023.2
 
 ## Zun kuryr library
diff --git a/releasenotes/notes/accounting_sandboxing_var_rename-95725d5a123c0dc5.yaml b/releasenotes/notes/accounting_sandboxing_var_rename-95725d5a123c0dc5.yaml
new file mode 100644
index 0000000000..e2016ec586
--- /dev/null
+++ b/releasenotes/notes/accounting_sandboxing_var_rename-95725d5a123c0dc5.yaml
@@ -0,0 +1,22 @@
+---
+
+deprecations:
+  - |
+    In order to follow ansible naming conventions for variables,
+    following variables were renamed:
+
+      * systemd_TimeoutSec -> systemd_service_timeout_sec
+      * systemd_Restart -> systemd_service_restart
+      * systemd_RestartSec -> systemd_service_restart_sec
+      * systemd_CPUAccounting -> systemd_service_cpu_accounting
+      * systemd_BlockIOAccounting -> systemd_service_block_io_accounting
+      * systemd_MemoryAccounting -> systemd_service_memory_accounting
+      * systemd_TasksAccounting -> systemd_service_tasks_accounting
+      * systemd_PrivateTmp -> systemd_service_private_tmp
+      * systemd_PrivateDevices -> systemd_service_private_devices
+      * systemd_PrivateNetwork -> systemd_service_private_network
+      * systemd_PrivateUsers -> systemd_service_private_users
+
+    Old variable names were kept for backwards compatibility but will be
+    removed in next releases. It is highly adviced to use new variable
+    names in your deployments.
diff --git a/releasenotes/notes/backend_config_per_host-14cec3ec5f708934.yaml b/releasenotes/notes/backend_config_per_host-14cec3ec5f708934.yaml
new file mode 100644
index 0000000000..af4ca5649f
--- /dev/null
+++ b/releasenotes/notes/backend_config_per_host-14cec3ec5f708934.yaml
@@ -0,0 +1,7 @@
+---
+features:
+  - HAProxy services that use backend nodes that are not
+    in the Ansible inventory can now have the ``backend_port``
+    specified in the list, along with ``name`` or ``ip_addr`` settings.
+    This allow to have the service bound to different port on different
+    backend servers.
diff --git a/releasenotes/notes/backups-systemd-override-e36d6bf010eb6b92.yaml b/releasenotes/notes/backups-systemd-override-e36d6bf010eb6b92.yaml
new file mode 100644
index 0000000000..7ea7b77fb7
--- /dev/null
+++ b/releasenotes/notes/backups-systemd-override-e36d6bf010eb6b92.yaml
@@ -0,0 +1,7 @@
+---
+features:
+  - |
+    Added variables ``galera_backups_full_init_overrides`` and
+    ``galera_backups_increment_init_overrides`` that can be leveraged to override
+    default set of systemd unit file for mariadb backups.
+    Similar to change I7b3b0f4da047f82a49266ef57fba2fbaa24cebdc .
diff --git a/releasenotes/notes/cache-89ff11c4e085126e.yaml b/releasenotes/notes/cache-89ff11c4e085126e.yaml
new file mode 100644
index 0000000000..f05adfc6a5
--- /dev/null
+++ b/releasenotes/notes/cache-89ff11c4e085126e.yaml
@@ -0,0 +1,4 @@
+---
+features:
+  - |
+    Enable Ceilometer resource cache, using Memcached.
diff --git a/releasenotes/notes/erlang_extra_args-bba75332abeabd3e.yaml b/releasenotes/notes/erlang_extra_args-bba75332abeabd3e.yaml
new file mode 100644
index 0000000000..3e83fe5d6b
--- /dev/null
+++ b/releasenotes/notes/erlang_extra_args-bba75332abeabd3e.yaml
@@ -0,0 +1,5 @@
+---
+features:
+  - |
+    Added variable ``rabbitmq_erlang_extra_args`` that allows to define
+    extra arguments for erlang.
diff --git a/releasenotes/notes/fix_lxc_cache_expiration-1656b5758c4ec24e.yaml b/releasenotes/notes/fix_lxc_cache_expiration-1656b5758c4ec24e.yaml
new file mode 100644
index 0000000000..3a580c753b
--- /dev/null
+++ b/releasenotes/notes/fix_lxc_cache_expiration-1656b5758c4ec24e.yaml
@@ -0,0 +1,10 @@
+---
+features:
+  - |
+    Implemented variable ``lxc_image_cache_expiration`` that controlls for how
+    long cached LXC image will be valid. Default value is `1year`. Variable
+    format should be compatible with community.general.to_time_unit filter.
+fixes:
+  - |
+    LXC image cache expiration mechanism has being fixed. Previously LXC images were
+    valid forever.
diff --git a/releasenotes/notes/gather-include-exclude-lists-91007886c06ebb74.yaml b/releasenotes/notes/gather-include-exclude-lists-91007886c06ebb74.yaml
new file mode 100644
index 0000000000..3edcdfbe33
--- /dev/null
+++ b/releasenotes/notes/gather-include-exclude-lists-91007886c06ebb74.yaml
@@ -0,0 +1,10 @@
+---
+features:
+  - |
+    It is now possible to use multiple variables with a specific prefix to
+    define the whole contents of the tempest test include/exclude lists.
+    Any variable from host/group or ansible extra-vars whose name is prefixed
+    with the value in the os_tempest role default `tempest_test_search_includelist_pattern`
+    or `tempest_test_search_excludelist_pattern` will be combined with the
+    existing `tempest_test_includelist` or `tempest_test_excludelist` variables
+    into a single include/exclude list.
diff --git a/releasenotes/notes/glance_available_stores_mapping-8e239dbedc625e73.yaml b/releasenotes/notes/glance_available_stores_mapping-8e239dbedc625e73.yaml
new file mode 100644
index 0000000000..050d53f917
--- /dev/null
+++ b/releasenotes/notes/glance_available_stores_mapping-8e239dbedc625e73.yaml
@@ -0,0 +1,11 @@
+---
+
+upgrade:
+  - |
+    Default value of ``glance_available_stores`` has changed. Now it is
+    always should be represented as a list of mappings, where each item
+    has following keys:
+
+      * name (required)
+      * type (required)
+      * config (optional)
diff --git a/releasenotes/notes/h2_initial_support-99a3277939942405.yaml b/releasenotes/notes/h2_initial_support-99a3277939942405.yaml
new file mode 100644
index 0000000000..c8e245da14
--- /dev/null
+++ b/releasenotes/notes/h2_initial_support-99a3277939942405.yaml
@@ -0,0 +1,22 @@
+---
+features:
+  - |
+    Added new keys ``haproxy_frontend_h2`` and ``haproxy_backend_h2``
+    per service definition to enable HTTP/2 for a specified service.
+
+    This also add new variables to control default behavoir for
+    frontends and backends:
+
+      * ``haproxy_frontend_h2: true``
+      * ``haproxy_backend_h2: false``
+
+    Please mention, that double stack of HTTP/1.1 and HTTP/2 is only available
+    for TLS protected frontends. In case frontend is just TCP
+    haproxy_frontend_h2 will be ignored.
+
+    At the same time ``haproxy_backend_h2`` will be respected regardless of
+    TLS/plain TCP configuration.
+upgrade:
+  - |
+    HTTP/2 is enabled by default for frontends that are covered with TLS.
+    You can disable this behaviour by setting ``haproxy_frontend_h2: false``
diff --git a/releasenotes/notes/haproxy_ssl_path-7130354314aee961.yaml b/releasenotes/notes/haproxy_ssl_path-7130354314aee961.yaml
new file mode 100644
index 0000000000..33292c4e10
--- /dev/null
+++ b/releasenotes/notes/haproxy_ssl_path-7130354314aee961.yaml
@@ -0,0 +1,4 @@
+---
+features:
+  -  HAProxy services can now override the path of the certificate with
+     ``haproxy_ssl_path`` if set under the service definition.
diff --git a/releasenotes/notes/journald_config-e3b0e5060dd5f6e7.yaml b/releasenotes/notes/journald_config-e3b0e5060dd5f6e7.yaml
new file mode 100644
index 0000000000..ab95a11673
--- /dev/null
+++ b/releasenotes/notes/journald_config-e3b0e5060dd5f6e7.yaml
@@ -0,0 +1,5 @@
+---
+features:
+  - |
+    Added variable ``openstack_host_journald_config`` that allows to supply
+    arbitrary configuration for systemd-journald as a mapping.
diff --git a/releasenotes/notes/keystone-oidc-forwarded-proto-92471121e3949428.yaml b/releasenotes/notes/keystone-oidc-forwarded-proto-92471121e3949428.yaml
new file mode 100644
index 0000000000..3135700e89
--- /dev/null
+++ b/releasenotes/notes/keystone-oidc-forwarded-proto-92471121e3949428.yaml
@@ -0,0 +1,5 @@
+---
+fixes:
+  - |
+    Fixes use of Apache mod_auth_openidc on Ubuntu Jammy where a new
+    OIDCXForwardedHeaders configuration option is required.
diff --git a/releasenotes/notes/mariabackup-compression-337b04c68f370c1d.yaml b/releasenotes/notes/mariabackup-compression-337b04c68f370c1d.yaml
new file mode 100644
index 0000000000..f51a834832
--- /dev/null
+++ b/releasenotes/notes/mariabackup-compression-337b04c68f370c1d.yaml
@@ -0,0 +1,28 @@
+---
+features:
+  - |
+    Adds optional compression for backups created with mariabackup. Adds two
+    new CLI parameters to the mariabackup script that are used to enable
+    compression and to choose a compression tool.
+
+    * ``--compress=True|False``
+    * ``--compressor=<compressor>``
+
+    Also introduces new Ansible variables that control the above mentioned
+    parameters.
+
+    * ``galera_mariadb_backups_compress``
+    * ``galera_mariadb_backups_compressor``
+
+    Each backup archive is stored in a dedicated directory, alongside the
+    backup metadata.
+upgrade:
+  - |
+    Backup compression is disabled by default, so no changes need to be made
+    for existing deployments. Should compression be desired, set
+    ``galera_mariadb_backups_compress`` to ``True``. Choose a compression tool
+    with ``galera_mariadb_backups_compressor``, default is ``gzip``.
+others:
+  - |
+    Compressed backups cannot be prepared in advance, this step must be
+    manually carried out by the user before importing it into MariaDB.
diff --git a/releasenotes/notes/no_sshd_in_lxc-b73334d0c82470b4.yaml b/releasenotes/notes/no_sshd_in_lxc-b73334d0c82470b4.yaml
new file mode 100644
index 0000000000..3f8e2e63b1
--- /dev/null
+++ b/releasenotes/notes/no_sshd_in_lxc-b73334d0c82470b4.yaml
@@ -0,0 +1,6 @@
+---
+deprecations:
+  - |
+    SSHD and rsync are no longer installed or configured for all containers.
+    This also deprecates usage of ``lxc_container_ssh_key`` and variable
+    has no effect any longer.
diff --git a/releasenotes/notes/no_zun_ssh_keypairs-4d2f4f6e92ee4ea4.yaml b/releasenotes/notes/no_zun_ssh_keypairs-4d2f4f6e92ee4ea4.yaml
new file mode 100644
index 0000000000..d37356b6c4
--- /dev/null
+++ b/releasenotes/notes/no_zun_ssh_keypairs-4d2f4f6e92ee4ea4.yaml
@@ -0,0 +1,7 @@
+---
+
+deprecations:
+  - |
+    Generation of SSH keypairs for Zun and Kuryr users has been deprecated
+    and removed.
+    A variable ``zun_recreate_keys`` has been removed and has no effect.
diff --git a/releasenotes/notes/nova_console_proxies-98f7705e3ecec051.yaml b/releasenotes/notes/nova_console_proxies-98f7705e3ecec051.yaml
new file mode 100644
index 0000000000..a30b3998d8
--- /dev/null
+++ b/releasenotes/notes/nova_console_proxies-98f7705e3ecec051.yaml
@@ -0,0 +1,5 @@
+---
+features:
+  - |
+    Added ``nova_console_proxy_types`` list variable for use when deployments
+    have a mix of nova console types for different compute nodes.
diff --git a/releasenotes/notes/nova_device_spec-0175a30b2295b768.yaml b/releasenotes/notes/nova_device_spec-0175a30b2295b768.yaml
new file mode 100644
index 0000000000..ffa93fabee
--- /dev/null
+++ b/releasenotes/notes/nova_device_spec-0175a30b2295b768.yaml
@@ -0,0 +1,4 @@
+---
+deprecations:
+  - |
+    `nova_pci_passthrough_whitelist` is now deprecated in favor of `nova_device_spec`.
diff --git a/releasenotes/notes/nova_ram_weight_multiplier_deprecation-1b152707b4737b3c.yaml b/releasenotes/notes/nova_ram_weight_multiplier_deprecation-1b152707b4737b3c.yaml
new file mode 100644
index 0000000000..7326fdddeb
--- /dev/null
+++ b/releasenotes/notes/nova_ram_weight_multiplier_deprecation-1b152707b4737b3c.yaml
@@ -0,0 +1,8 @@
+---
+deprecations:
+  - |
+    ``nova_ram_weight_multiplier`` was deprecated. Multipliers should be
+    defined using ``nova_nova_conf_overrides``.
+    Please note that default value for ``nova_ram_weight_multiplier`` was
+    previously set to 5, while nova default is 1. This deprecation will
+    slightly change weighing behavior in OSA.
diff --git a/releasenotes/notes/oidc-fix-redirect-uri-5909172a1db5457f.yaml b/releasenotes/notes/oidc-fix-redirect-uri-5909172a1db5457f.yaml
new file mode 100644
index 0000000000..b81fb03e3c
--- /dev/null
+++ b/releasenotes/notes/oidc-fix-redirect-uri-5909172a1db5457f.yaml
@@ -0,0 +1,13 @@
+---
+upgrade:
+  - |
+    Keystone OIDC parameter 'oidc_redirect_uri' is replaced with
+    'oidc_redirect_path'. This parameter no longer needs to be set explicitly
+    unless you run additional services which may collide with the default
+    on the same port as Keystone. Your OIDC provider may need to be updated
+    to reflect this change in redirect URI which defaults to the Keystone
+    public URL plus the path /oidc_redirect.
+fixes:
+  - |
+    Fixed OpenStack command line OIDC integration where Apache mod_auth_openidc
+    if >= v2.4.9 including on Ubuntu Jammy.
diff --git a/releasenotes/notes/opendaylight_deprecated-31aa11363c0ec736.yaml b/releasenotes/notes/opendaylight_deprecated-31aa11363c0ec736.yaml
new file mode 100644
index 0000000000..298cf25246
--- /dev/null
+++ b/releasenotes/notes/opendaylight_deprecated-31aa11363c0ec736.yaml
@@ -0,0 +1,7 @@
+---
+
+deprecations:
+  - |
+    Support for OpenDaylight driver has been deprecated by Neutron team during
+    2023.2 (Bobcat) development cycle and it's support has been removed from
+    OpenStack-Ansible.
diff --git a/releasenotes/notes/rabbitmq_additional_config-8d5c0c0b6fc6d750.yaml b/releasenotes/notes/rabbitmq_additional_config-8d5c0c0b6fc6d750.yaml
new file mode 100644
index 0000000000..bf2389a830
--- /dev/null
+++ b/releasenotes/notes/rabbitmq_additional_config-8d5c0c0b6fc6d750.yaml
@@ -0,0 +1,4 @@
+---
+features:
+  - Add ``rabbitmq_additional_config`` to be able to add additional
+    configuration e.g. to add configuration for plugins.
diff --git a/releasenotes/notes/rabbitmq_longnames_config-d20b703185074acd.yaml b/releasenotes/notes/rabbitmq_longnames_config-d20b703185074acd.yaml
new file mode 100644
index 0000000000..5dee6300e3
--- /dev/null
+++ b/releasenotes/notes/rabbitmq_longnames_config-d20b703185074acd.yaml
@@ -0,0 +1,7 @@
+---
+features:
+  - |
+    Add ability to set the environment variable ``RABBITMQ_USE_LONGNAMES``
+    via the ``rabbitmq-env.conf`` to be able to use the FQDN of a node.
+    By default this will be set to ``false``, the default value also set
+    by RabbitMQ.
diff --git a/releasenotes/notes/reduce-memory-consumption-b849f8cc386c1d19.yaml b/releasenotes/notes/reduce-memory-consumption-b849f8cc386c1d19.yaml
new file mode 100644
index 0000000000..b47d80c17a
--- /dev/null
+++ b/releasenotes/notes/reduce-memory-consumption-b849f8cc386c1d19.yaml
@@ -0,0 +1,5 @@
+---
+fixes:
+  - |
+    Fix high water mark memory usage on Cinder Volume and Backup services and
+    reduce peak memory usage.
diff --git a/releasenotes/notes/remove-cache-map-8552368f6d7c604c.yaml b/releasenotes/notes/remove-cache-map-8552368f6d7c604c.yaml
new file mode 100644
index 0000000000..93ed11195c
--- /dev/null
+++ b/releasenotes/notes/remove-cache-map-8552368f6d7c604c.yaml
@@ -0,0 +1,7 @@
+---
+upgrade:
+  - |
+    The variable lxc_cache_map is removed as the lxc_hosts ansible role
+    has only been able to create containers matching the host architecture
+    and OS for several releases, and lxc_cache_map simply carried copies
+    of data from ansible_facts.
diff --git a/releasenotes/notes/remove-whitelist-blacklist-b7ee801064de0bca.yaml b/releasenotes/notes/remove-whitelist-blacklist-b7ee801064de0bca.yaml
new file mode 100644
index 0000000000..288facbaaa
--- /dev/null
+++ b/releasenotes/notes/remove-whitelist-blacklist-b7ee801064de0bca.yaml
@@ -0,0 +1,6 @@
+---
+upgrade:
+  - |
+    The previously deprecated variables `tempest_test_whitelist` and
+    `tempest_test_blacklist` are removed. The replacement include/exclude
+    lists should be used instead to define tempest tests to run.
diff --git a/releasenotes/notes/rename-list-file-path-239294e5a57fef09.yaml b/releasenotes/notes/rename-list-file-path-239294e5a57fef09.yaml
new file mode 100644
index 0000000000..76ec906d5d
--- /dev/null
+++ b/releasenotes/notes/rename-list-file-path-239294e5a57fef09.yaml
@@ -0,0 +1,7 @@
+---
+upgrade:
+  - |
+    The variables `tempest_test_includelist_file_path` and `tempest_test_excludelist_file_path`
+    are renamed to `tempest_includelist_file_path` and `tempest_excludelist_file_path`.
+    Any overrides using these variables should be updated to account for the
+    new variable names.