diff --git a/fence-agents.spec b/fence-agents.spec
index 3226bed..f38aeec 100644
--- a/fence-agents.spec
+++ b/fence-agents.spec
@@ -8,13 +8,12 @@
 
 Name: fence-agents
 Summary: Set of unified programs capable of host isolation ("fencing")
-Version: 4.5.1
+Version: 4.5.2
 Release: 1%{?alphatag:.%{alphatag}}%{?dist}
 License: GPLv2+ and LGPLv2+
 URL: https://github.com/ClusterLabs/fence-agents
 Source0: https://fedorahosted.org/releases/f/e/fence-agents/%{name}-%{version}.tar.gz
 
-%if 0%{?fedora} || 0%{?rhel} > 7
 # skipped: pve, raritan, rcd-serial, virsh
 %global allfenceagents %(cat <<EOF
 fence-agents-alom \\
@@ -28,7 +27,6 @@ fence-agents-bladecenter \\
 fence-agents-brocade \\
 fence-agents-cisco-mds \\
 fence-agents-cisco-ucs \\
-fence-agents-compute \\
 fence-agents-docker \\
 fence-agents-drac \\
 fence-agents-drac5 \\
@@ -48,7 +46,6 @@ fence-agents-ilo2 \\
 fence-agents-intelmodular \\
 fence-agents-ipdu \\
 fence-agents-ipmilan \\
-fence-agents-ironic \\
 fence-agents-kdump \\
 fence-agents-ldom \\
 fence-agents-lpar \\
@@ -71,6 +68,15 @@ fence-agents-wti \\
 fence-agents-xenapi \\
 fence-agents-zvm \\
 
+EOF)
+
+%ifarch x86_64 ppc64le
+%global allfenceagents %(cat <<EOF
+%{allfenceagents} \\
+fence-agents-compute \\
+fence-agents-ironic \\
+fence-agents-openstack
+
 EOF)
 %endif
 
@@ -89,6 +95,9 @@ BuildRequires: python3-pexpect python3-pycurl python3-requests
 BuildRequires: python3-suds openwsman-python3 python3-boto3
 BuildRequires: python3-google-api-client
 
+# (-openstack)
+BuildRequires: python3-novaclient python3-keystoneclient
+
 # turn off the brp-python-bytecompile script
 # (for F28+ or equivalent, the latter is the preferred form)
 %global __os_install_post %(echo '%{__os_install_post}' | sed -e 's!/usr/lib[^[:space:]]*/brp-python-bytecompilespace:.*$!!g')
@@ -155,7 +164,6 @@ Summary: Set of unified programs capable of host isolation ("fencing")
 Requires: %{allfenceagents}
 Provides: fence-agents = %{version}-%{release}
 Obsoletes: fence-agents < 3.1.13
-BuildArch: noarch
 %description all
 A collection of executables to handle isolation ("fencing") of possibly
 misbehaving hosts by the means of remote power management, blocking
@@ -164,7 +172,6 @@ network, storage, or similar.
 This package serves as a catch-all for all supported fence agents.
 %files all
 
-%if 0%{?fedora} || 0%{?rhel} > 7
 %package alom
 License: GPLv2+ and LGPLv2+
 Summary: Fence agent for SUN ALOM
@@ -176,7 +183,6 @@ Fence agent for SUN ALOM.
 %files alom
 %{_sbindir}/fence_alom
 %{_mandir}/man8/fence_alom.8*
-%endif
 
 %package amt
 License: GPLv2+ and LGPLv2+
@@ -334,7 +340,6 @@ Fence agent for Docker images that are accessed over HTTP.
 %{_sbindir}/fence_docker
 %{_mandir}/man8/fence_docker.8*
 
-%if 0%{?fedora} || 0%{?rhel} > 7
 %package drac
 License: GPLv2+ and LGPLv2+
 Summary: Fence agent for Dell DRAC
@@ -347,7 +352,6 @@ via telnet.
 %files drac
 %{_sbindir}/fence_drac
 %{_mandir}/man8/fence_drac.8*
-%endif
 
 %package drac5
 License: GPLv2+ and LGPLv2+
@@ -399,7 +403,6 @@ via the HTTP(s) protocol.
 %{_sbindir}/fence_eps
 %{_mandir}/man8/fence_eps.8*
 
-%if 0%{?fedora} || 0%{?rhel} > 7
 %package gce
 License: GPLv2+ and LGPLv2+
 Summary: Fence agent for GCE (Google Cloud Engine)
@@ -412,9 +415,7 @@ Fence agent for GCE (Google Cloud Engine) instances.
 %files gce
 %{_sbindir}/fence_gce
 %{_mandir}/man8/fence_gce.8*
-%endif
 
-%if 0%{?fedora} || 0%{?rhel} > 7
 %package hds-cb
 License: GPLv2+ and LGPLv2+
 Summary: Fence agent for Hitachi Compute Blade systems
@@ -426,7 +427,6 @@ Fence agent for Hitachi Compute Blades that are accessed via telnet.
 %files hds-cb
 %{_sbindir}/fence_hds_cb
 %{_mandir}/man8/fence_hds_cb.8*
-%endif
 
 %package heuristics-ping
 License: GPLv2+ and LGPLv2+
@@ -586,11 +586,9 @@ Fence agents for devices with IPMI interface.
 %{_sbindir}/fence_imm
 %{_mandir}/man8/fence_imm.8*
 
-%if 0%{?fedora} || 0%{?rhel} > 7
 %package ironic
 License: GPLv2+ and LGPLv2+
 Summary: Fence agent for OpenStack's Ironic (Bare Metal as a service)
-Requires: /usr/bin/openstack
 Requires: fence-agents-common = %{version}-%{release}
 BuildArch: noarch
 %description ironic
@@ -598,7 +596,6 @@ Fence agent for OpenStack's Ironic (Bare Metal as a service) service.
 %files ironic
 %{_sbindir}/fence_ironic
 %{_mandir}/man8/fence_ironic.8*
-%endif
 
 %package kdump
 License: GPLv2+ and LGPLv2+
@@ -613,7 +610,6 @@ Fence agent for use with kdump crash recovery service.
 %{_mandir}/man8/fence_kdump.8*
 %{_mandir}/man8/fence_kdump_send.8*
 
-%if 0%{?fedora} || 0%{?rhel} > 7
 %package ldom
 License: GPLv2+ and LGPLv2+
 Summary: Fence agent for Sun LDom virtual machines
@@ -625,9 +621,7 @@ Fence agent for APC devices that are accessed via telnet or SSH.
 %files ldom
 %{_sbindir}/fence_ldom
 %{_mandir}/man8/fence_ldom.8*
-%endif
 
-%if 0%{?fedora} || 0%{?rhel} > 7
 %package lpar
 License: GPLv2+ and LGPLv2+
 Summary: Fence agent for IBM LPAR
@@ -639,7 +633,6 @@ Fence agent for IBM LPAR devices that are accessed via telnet or SSH.
 %files lpar
 %{_sbindir}/fence_lpar
 %{_mandir}/man8/fence_lpar.8*
-%endif
 
 %package mpath
 License: GPLv2+ and LGPLv2+
@@ -654,7 +647,6 @@ Device Mapper Multipath.
 %{_sbindir}/fence_mpath
 %{_mandir}/man8/fence_mpath.8*
 
-%if 0%{?fedora} || 0%{?rhel} > 7
 %package netio
 License: GPLv2+ and LGPLv2+
 Summary: Fence agent for Koukaam NETIO devices
@@ -667,9 +659,19 @@ via telnet or SSH.
 %files netio
 %{_sbindir}/fence_netio
 %{_mandir}/man8/fence_netio.8*
-%endif
 
-%if 0%{?fedora} || 0%{?rhel} > 7
+%package openstack
+License: GPLv2+ and LGPLv2+
+Summary: Fence agent for OpenStack's Nova service
+Requires: python3-requests
+Requires: fence-agents-common = %{version}-%{release}
+BuildArch: noarch
+%description openstack
+Fence agent for OpenStack's Nova service.
+%files openstack
+%{_sbindir}/fence_openstack
+%{_mandir}/man8/fence_openstack.8*
+
 %package ovh
 License: GPLv2+ and LGPLv2+
 Summary: Fence agent for OVH provider
@@ -681,10 +683,8 @@ Fence agent for OVH hosting provider.
 %files ovh
 %{_sbindir}/fence_ovh
 %{_mandir}/man8/fence_ovh.8*
-%endif
 
 # skipped from allfenceagents
-%if 0%{?fedora} || 0%{?rhel} > 7
 %package pve
 License: GPLv2+ and LGPLv2+
 Summary: Fence agent for PVE
@@ -696,7 +696,6 @@ Fence agent for PVE.
 %files pve
 %{_sbindir}/fence_pve
 %{_mandir}/man8/fence_pve.8*
-%endif
 
 # skipped from allfenceagents
 %package raritan
@@ -747,7 +746,6 @@ Fence agent for RHEV-M via REST API.
 %{_sbindir}/fence_rhevm
 %{_mandir}/man8/fence_rhevm.8*
 
-%if 0%{?fedora} || 0%{?rhel} > 7
 %package rsa
 License: GPLv2+ and LGPLv2+
 Summary: Fence agent for IBM RSA II
@@ -760,7 +758,6 @@ via telnet or SSH.
 %files rsa
 %{_sbindir}/fence_rsa
 %{_mandir}/man8/fence_rsa.8*
-%endif
 
 %package rsb
 License: GPLv2+ and LGPLv2+
@@ -775,7 +772,6 @@ via telnet or SSH.
 %{_sbindir}/fence_rsb
 %{_mandir}/man8/fence_rsb.8*
 
-%if 0%{?fedora} || 0%{?rhel} > 7
 %package sanbox2
 License: GPLv2+ and LGPLv2+
 Summary: Fence agent for QLogic SANBox2 FC switches
@@ -787,9 +783,7 @@ Fence agent for QLogic SANBox2 switches that are accessed via telnet.
 %files sanbox2
 %{_sbindir}/fence_sanbox2
 %{_mandir}/man8/fence_sanbox2.8*
-%endif
 
-%if 0%{?fedora} || 0%{?rhel} > 7
 %package sbd
 License: GPLv2+ and LGPLv2+
 Summary: Fence agent for SBD (storage-based death)
@@ -801,7 +795,6 @@ Fence agent for SBD (storage-based death).
 %files sbd
 %{_sbindir}/fence_sbd
 %{_mandir}/man8/fence_sbd.8*
-%endif
 
 %package scsi
 License: GPLv2+ and LGPLv2+
@@ -817,7 +810,6 @@ Fence agent for SCSI persistent reservations.
 %{_datadir}/cluster/fence_scsi_check_hardreboot
 %{_mandir}/man8/fence_scsi.8*
 
-%if 0%{?fedora} || 0%{?rhel} > 7
 %package vbox
 License: GPLv2+ and LGPLv2+
 Summary: Fence agent for VirtualBox
@@ -829,7 +821,6 @@ Fence agent for VirtualBox dom0 accessed via SSH.
 %files vbox
 %{_sbindir}/fence_vbox
 %{_mandir}/man8/fence_vbox.8*
-%endif
 
 # skipped from allfenceagents
 %package virsh
@@ -844,7 +835,6 @@ Fence agent for virtual machines that are accessed via SSH.
 %{_sbindir}/fence_virsh
 %{_mandir}/man8/fence_virsh.8*
 
-%if 0%{?fedora} || 0%{?rhel} > 7
 %package vmware
 License: GPLv2+ and LGPLv2+
 Summary: Fence agent for VMWare with VI Perl Toolkit or vmrun
@@ -856,7 +846,6 @@ Fence agent for VMWare accessed with VI Perl Toolkit or vmrun.
 %files vmware
 %{_sbindir}/fence_vmware
 %{_mandir}/man8/fence_vmware.8*
-%endif
 
 %package vmware-rest
 License: GPLv2+ and LGPLv2+
@@ -882,7 +871,6 @@ Fence agent for VMWare with SOAP API v4.1+.
 %{_sbindir}/fence_vmware_soap
 %{_mandir}/man8/fence_vmware_soap.8*
 
-%if 0%{?fedora} || 0%{?rhel} > 7
 %package vmware-vcloud
 License: GPLv2+ and LGPLv2+
 Summary: Fence agent for VMWare vCloud Director
@@ -894,7 +882,6 @@ Fence agent for VMWare vCloud Director.
 %files vmware-vcloud
 %{_sbindir}/fence_vmware_vcloud
 %{_mandir}/man8/fence_vmware_vcloud.8*
-%endif
 
 %package wti
 License: GPLv2+ and LGPLv2+
@@ -909,7 +896,6 @@ via telnet or SSH.
 %{_sbindir}/fence_wti
 %{_mandir}/man8/fence_wti.8*
 
-%if 0%{?fedora} || 0%{?rhel} > 7
 %package xenapi
 License: GPLv2+ and LGPLv2+
 Summary: Fence agent for Citrix XenServer over XenAPI
@@ -923,7 +909,6 @@ Fence agent for Citrix XenServer accessed over XenAPI.
 %{_datadir}/fence/XenAPI.py*
 %{_datadir}/fence/__pycache__/XenAPI.*
 %{_mandir}/man8/fence_xenapi.8*
-%endif
 
 %package zvm
 License: GPLv2+ and LGPLv2+
@@ -937,6 +922,11 @@ Fence agent for IBM z/VM over IP.
 %{_mandir}/man8/fence_zvmip.8*
 
 %changelog
+* Wed Oct 23 2019 Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.5.2-1
+- new upstream release
+- added openstack subpackage
+- spec improvements based on upstream spec-file
+
 * Tue Sep 24 2019 Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.5.1-1
 - new upstream release
 
diff --git a/sources b/sources
index 87635a3..d917956 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (fence-agents-4.5.1.tar.gz) = 503bae10ed1fec85d4552bf5268e43f47a916a22e88f1680cf34665f7314302a4a183690f3256a5ed7fe8b02e116453f88733ab771d62c8a3c3222933f53ea3f
+SHA512 (fence-agents-4.5.2.tar.gz) = 2496be44e2820a48e76cd8ce2a859fae6e88fad27dfbfbcf82e9c0f5ccbbf75259f3bc76ba0e9309fb8949edea31fd1a8cf8453ed910b40c2eb2e799320ad84b