all: children: cephs: hosts: instance: null computes: hosts: instance: null controllers: hosts: instance: null zuul_unreachable: hosts: {} hosts: instance: ansible_connection: ssh ansible_host: 162.253.55.102 ansible_port: 22 ansible_python_interpreter: auto ansible_user: zuul atmosphere_image_prefix: harbor.atmosphere.dev/ atmosphere_network_backend: openvswitch barbican_helm_values: pod: replicas: api: 1 ceph_conf_overrides: - option: mon allow pool size one section: global value: true - option: osd crush chooseleaf type section: global value: 0 - option: auth allow insecure global id reclaim section: mon value: false ceph_csi_rbd_helm_values: provisioner: replicaCount: 1 ceph_fsid: 4837cbf8-4f90-4300-b3f6-726c9b9f89b4 ceph_osd_devices: - /dev/ceph-{{ inventory_hostname_short }}-osd0/data - /dev/ceph-{{ inventory_hostname_short }}-osd1/data - /dev/ceph-{{ inventory_hostname_short }}-osd2/data cilium_helm_values: operator: replicas: 1 cinder_helm_values: conf: ceph: pools: backup: replication: 1 cinder.volumes: replication: 1 cinder: DEFAULT: osapi_volume_workers: 2 pod: replicas: api: 1 scheduler: 1 cluster_issuer_type: self-signed coredns_helm_values: replicaCount: 1 csi_driver: local-path-provisioner glance_helm_values: conf: glance: DEFAULT: workers: 2 glance_store: rbd_store_replication: 1 pod: replicas: api: 1 glance_images: - container_format: bare disk_format: raw is_public: true min_disk: 1 name: cirros url: http://download.cirros-cloud.net/0.6.2/cirros-0.6.2-x86_64-disk.img heat_helm_values: conf: heat: DEFAULT: num_engine_workers: 2 heat_api: workers: 2 heat_api_cfn: workers: 2 heat_api_cloudwatch: workers: 2 pod: replicas: api: 1 cfn: 1 cloudwatch: 1 engine: 1 horizon_helm_values: pod: replicas: server: 1 ingress_nginx_helm_values: controller: config: worker-processes: 2 keystone_helm_values: pod: replicas: api: 1 kube_vip_address: 172.17.0.100 kube_vip_interface: '{{ ansible_facts[''default_ipv4''].interface }}' kubernetes_hostname: '{{ ansible_facts[''default_ipv4''].address }}' kubernetes_keepalived_interface: br-mgmt magnum_helm_values: conf: magnum: api: workers: 2 conductor: workers: 2 pod: replicas: api: 1 conductor: 1 magnum_image_disk_format: qcow2 magnum_images: '[ {{ _magnum_images[-1] }} ]' manila_helm_values: conf: manila: DEFAULT: osapi_share_workers: 2 pod: replicas: api: 1 scheduler: 1 molecule_install_collection_siblings: true molecule_scenario: aio neutron_helm_values: conf: neutron: DEFAULT: api_workers: 2 metadata_workers: 2 rpc_workers: 2 pod: replicas: rpc_server: 1 server: 1 nodepool: az: yul2 cloud: public external_id: 292a88a9-c008-4a0a-81eb-97d2848eac7e host_id: a89317a4251e4b893721d69756ba374963c1949052f4d77e70dbd5e4 interface_ip: 162.253.55.102 label: ubuntu-jammy-16 node_properties: {} private_ipv4: 162.253.55.102 private_ipv6: null provider: yul1 public_ipv4: 162.253.55.102 public_ipv6: 2604:e100:1:0:f816:3eff:fe3e:f896 region: ca-ymq-1 slot: null nova_helm_values: conf: nova: DEFAULT: metadata_workers: 2 osapi_compute_workers: 2 conductor: workers: 2 scheduler: workers: 2 pod: replicas: api_metadata: 1 conductor: 1 novncproxy: 1 osapi: 1 scheduler: 1 spiceproxy: 1 octavia_helm_values: conf: octavia: controller_worker: workers: 2 octavia_api_uwsgi: uwsgi: processes: 2 pod: replicas: api: 1 housekeeping: 1 worker: 1 ovn_helm_values: conf: auto_bridge_add: br-ex: null pod: replicas: ovn_northd: 1 ovn_ovsdb_nb: 1 ovn_ovsdb_sb: 1 percona_xtradb_cluster_spec: allowUnsafeConfigurations: true haproxy: size: 1 pxc: size: 1 placement_helm_values: conf: placement_api_uwsgi: uwsgi: processes: 2 pod: replicas: api: 1 rook_ceph_cluster_radosgw_spec: dataPool: failureDomain: osd gateway: instances: 1 metadataPool: failureDomain: osd senlin_helm_values: pod: replicas: api: 1 conductor: 1 engine: 1 health_manager: 1 staffeln_helm_values: pod: replicas: api: 1 conductor: 1 valkey_helm_values: replica: replicaCount: 1 zuul_node: az: yul2 cloud: public external_id: 292a88a9-c008-4a0a-81eb-97d2848eac7e host_id: a89317a4251e4b893721d69756ba374963c1949052f4d77e70dbd5e4 interface_ip: 162.253.55.102 label: ubuntu-jammy-16 node_properties: {} private_ipv4: 162.253.55.102 private_ipv6: null provider: yul1 public_ipv4: 162.253.55.102 public_ipv6: 2604:e100:1:0:f816:3eff:fe3e:f896 region: ca-ymq-1 slot: null uuid: null vars: atmosphere_image_prefix: harbor.atmosphere.dev/ atmosphere_network_backend: openvswitch barbican_helm_values: pod: replicas: api: 1 ceph_conf_overrides: - option: mon allow pool size one section: global value: true - option: osd crush chooseleaf type section: global value: 0 - option: auth allow insecure global id reclaim section: mon value: false ceph_csi_rbd_helm_values: provisioner: replicaCount: 1 ceph_fsid: 4837cbf8-4f90-4300-b3f6-726c9b9f89b4 ceph_osd_devices: - /dev/ceph-{{ inventory_hostname_short }}-osd0/data - /dev/ceph-{{ inventory_hostname_short }}-osd1/data - /dev/ceph-{{ inventory_hostname_short }}-osd2/data cilium_helm_values: operator: replicas: 1 cinder_helm_values: conf: ceph: pools: backup: replication: 1 cinder.volumes: replication: 1 cinder: DEFAULT: osapi_volume_workers: 2 pod: replicas: api: 1 scheduler: 1 cluster_issuer_type: self-signed coredns_helm_values: replicaCount: 1 csi_driver: local-path-provisioner glance_helm_values: conf: glance: DEFAULT: workers: 2 glance_store: rbd_store_replication: 1 pod: replicas: api: 1 glance_images: - container_format: bare disk_format: raw is_public: true min_disk: 1 name: cirros url: http://download.cirros-cloud.net/0.6.2/cirros-0.6.2-x86_64-disk.img heat_helm_values: conf: heat: DEFAULT: num_engine_workers: 2 heat_api: workers: 2 heat_api_cfn: workers: 2 heat_api_cloudwatch: workers: 2 pod: replicas: api: 1 cfn: 1 cloudwatch: 1 engine: 1 horizon_helm_values: pod: replicas: server: 1 ingress_nginx_helm_values: controller: config: worker-processes: 2 keystone_helm_values: pod: replicas: api: 1 kube_vip_address: 172.17.0.100 kube_vip_interface: '{{ ansible_facts[''default_ipv4''].interface }}' kubernetes_hostname: '{{ ansible_facts[''default_ipv4''].address }}' kubernetes_keepalived_interface: br-mgmt magnum_helm_values: conf: magnum: api: workers: 2 conductor: workers: 2 pod: replicas: api: 1 conductor: 1 magnum_image_disk_format: qcow2 magnum_images: '[ {{ _magnum_images[-1] }} ]' manila_helm_values: conf: manila: DEFAULT: osapi_share_workers: 2 pod: replicas: api: 1 scheduler: 1 molecule_install_collection_siblings: true molecule_scenario: aio neutron_helm_values: conf: neutron: DEFAULT: api_workers: 2 metadata_workers: 2 rpc_workers: 2 pod: replicas: rpc_server: 1 server: 1 nova_helm_values: conf: nova: DEFAULT: metadata_workers: 2 osapi_compute_workers: 2 conductor: workers: 2 scheduler: workers: 2 pod: replicas: api_metadata: 1 conductor: 1 novncproxy: 1 osapi: 1 scheduler: 1 spiceproxy: 1 octavia_helm_values: conf: octavia: controller_worker: workers: 2 octavia_api_uwsgi: uwsgi: processes: 2 pod: replicas: api: 1 housekeeping: 1 worker: 1 ovn_helm_values: conf: auto_bridge_add: br-ex: null pod: replicas: ovn_northd: 1 ovn_ovsdb_nb: 1 ovn_ovsdb_sb: 1 percona_xtradb_cluster_spec: allowUnsafeConfigurations: true haproxy: size: 1 pxc: size: 1 placement_helm_values: conf: placement_api_uwsgi: uwsgi: processes: 2 pod: replicas: api: 1 rook_ceph_cluster_radosgw_spec: dataPool: failureDomain: osd gateway: instances: 1 metadataPool: failureDomain: osd senlin_helm_values: pod: replicas: api: 1 conductor: 1 engine: 1 health_manager: 1 staffeln_helm_values: pod: replicas: api: 1 conductor: 1 valkey_helm_values: replica: replicaCount: 1 zuul: _inheritance_path: - '' - '' - '' - '' - '' - '' ansible_version: '9' attempts: 1 branch: stable/2025.2 build: 3e3edfb1db8940a5a9318f0b996ca8f4 build_refs: - branch: stable/2025.2 change: '4390' change_message: 'fix(octavia): update image to the release with the tls_ciphers fix (stable/2025.2) Bumps the `ghcr.io/vexxhost/octavia:2025.2` image on `stable/2025.2` to the build of the `vexxhost/octavia` `stable/2025.2` release that contains the fix for OSSA-2026-039 / CVE-2026-94572 (Launchpad [#2162101](https://bugs.launchpad.net/bugs/2162101)). **Reason:** a HAProxy configuration injection. The `tls_ciphers` field on listeners and pools was not validated for control characters, so a member of the owning project could put text that is not an OpenSSL cipher string into it. Octavia interpolated that text unquoted after `ciphers` on the amphora HAProxy `server` line, so embedded whitespace, comments, or newlines were consumed as configuration. Validation now rejects cipher strings containing characters outside the OpenSSL set, and the combined-listener templater falls back to the configured default ciphers when an invalid value is already stored. | | | | --- | --- | | Service | octavia | | Branch | `stable/2025.2` | | Image tag | `2025.2` | | Old digest | `sha256:c805fffafe4f869687efe056e7ff9af420e0fd1ca64e408a382f5293b7ca6efe` | | New digest | `sha256:5699da55f95f3a6681104c7d3e4544ca5fc8b13df57df09ed84a02e4c9565a7c` | | Old source SHA | [`e28fd03a7b3e`](https://github.com/vexxhost/docker-octavia/commit/e28fd03a7b3eaf27544a36aace6eeb20d8c2c48b) | | New source SHA | [`295b5e37f2a8`](https://github.com/vexxhost/docker-octavia/commit/295b5e37f2a859098c904f4f2fcea66b816ef89d) | | Octavia release | `17.0.0+a8e.20.1` | **Validation** - Image labels: `org.opencontainers.image.version` is `2025.2` on both the old and the new image, matching the tag used in `roles/defaults/vars/main.yml`. - The new image''s `org.opencontainers.image.revision` (`295b5e37f2a8`) equals the current head of `vexxhost/docker-octavia` `stable/2025.2`, so the registry tag is not stale. - `17.0.0+a8e.20.1` is published on the Atmosphere package index, and `docker-octavia` `stable/2025.2` pins `OCTAVIA_VERSION=17.0.0+a8e.20.1`. - All five `octavia_*` entries referencing this image were updated together. `octavia_health_manager_init` points at the unrelated `heat` image and was left unchanged. ' change_url: https://github.com/vexxhost/atmosphere/pull/4390 commit_id: ffbbb64fff35567a565b8a4d4e1998afb8090163 patchset: ffbbb64fff35567a565b8a4d4e1998afb8090163 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere name: vexxhost/atmosphere short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere src_dir: src/github.com/vexxhost/atmosphere topic: null buildset: d4a248d16e704268b447ac3028f6f608 buildset_refs: - branch: stable/2025.2 change: '4390' change_message: 'fix(octavia): update image to the release with the tls_ciphers fix (stable/2025.2) Bumps the `ghcr.io/vexxhost/octavia:2025.2` image on `stable/2025.2` to the build of the `vexxhost/octavia` `stable/2025.2` release that contains the fix for OSSA-2026-039 / CVE-2026-94572 (Launchpad [#2162101](https://bugs.launchpad.net/bugs/2162101)). **Reason:** a HAProxy configuration injection. The `tls_ciphers` field on listeners and pools was not validated for control characters, so a member of the owning project could put text that is not an OpenSSL cipher string into it. Octavia interpolated that text unquoted after `ciphers` on the amphora HAProxy `server` line, so embedded whitespace, comments, or newlines were consumed as configuration. Validation now rejects cipher strings containing characters outside the OpenSSL set, and the combined-listener templater falls back to the configured default ciphers when an invalid value is already stored. | | | | --- | --- | | Service | octavia | | Branch | `stable/2025.2` | | Image tag | `2025.2` | | Old digest | `sha256:c805fffafe4f869687efe056e7ff9af420e0fd1ca64e408a382f5293b7ca6efe` | | New digest | `sha256:5699da55f95f3a6681104c7d3e4544ca5fc8b13df57df09ed84a02e4c9565a7c` | | Old source SHA | [`e28fd03a7b3e`](https://github.com/vexxhost/docker-octavia/commit/e28fd03a7b3eaf27544a36aace6eeb20d8c2c48b) | | New source SHA | [`295b5e37f2a8`](https://github.com/vexxhost/docker-octavia/commit/295b5e37f2a859098c904f4f2fcea66b816ef89d) | | Octavia release | `17.0.0+a8e.20.1` | **Validation** - Image labels: `org.opencontainers.image.version` is `2025.2` on both the old and the new image, matching the tag used in `roles/defaults/vars/main.yml`. - The new image''s `org.opencontainers.image.revision` (`295b5e37f2a8`) equals the current head of `vexxhost/docker-octavia` `stable/2025.2`, so the registry tag is not stale. - `17.0.0+a8e.20.1` is published on the Atmosphere package index, and `docker-octavia` `stable/2025.2` pins `OCTAVIA_VERSION=17.0.0+a8e.20.1`. - All five `octavia_*` entries referencing this image were updated together. `octavia_health_manager_init` points at the unrelated `heat` image and was left unchanged. ' change_url: https://github.com/vexxhost/atmosphere/pull/4390 commit_id: ffbbb64fff35567a565b8a4d4e1998afb8090163 patchset: ffbbb64fff35567a565b8a4d4e1998afb8090163 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere name: vexxhost/atmosphere short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere src_dir: src/github.com/vexxhost/atmosphere topic: null change: '4390' change_message: 'fix(octavia): update image to the release with the tls_ciphers fix (stable/2025.2) Bumps the `ghcr.io/vexxhost/octavia:2025.2` image on `stable/2025.2` to the build of the `vexxhost/octavia` `stable/2025.2` release that contains the fix for OSSA-2026-039 / CVE-2026-94572 (Launchpad [#2162101](https://bugs.launchpad.net/bugs/2162101)). **Reason:** a HAProxy configuration injection. The `tls_ciphers` field on listeners and pools was not validated for control characters, so a member of the owning project could put text that is not an OpenSSL cipher string into it. Octavia interpolated that text unquoted after `ciphers` on the amphora HAProxy `server` line, so embedded whitespace, comments, or newlines were consumed as configuration. Validation now rejects cipher strings containing characters outside the OpenSSL set, and the combined-listener templater falls back to the configured default ciphers when an invalid value is already stored. | | | | --- | --- | | Service | octavia | | Branch | `stable/2025.2` | | Image tag | `2025.2` | | Old digest | `sha256:c805fffafe4f869687efe056e7ff9af420e0fd1ca64e408a382f5293b7ca6efe` | | New digest | `sha256:5699da55f95f3a6681104c7d3e4544ca5fc8b13df57df09ed84a02e4c9565a7c` | | Old source SHA | [`e28fd03a7b3e`](https://github.com/vexxhost/docker-octavia/commit/e28fd03a7b3eaf27544a36aace6eeb20d8c2c48b) | | New source SHA | [`295b5e37f2a8`](https://github.com/vexxhost/docker-octavia/commit/295b5e37f2a859098c904f4f2fcea66b816ef89d) | | Octavia release | `17.0.0+a8e.20.1` | **Validation** - Image labels: `org.opencontainers.image.version` is `2025.2` on both the old and the new image, matching the tag used in `roles/defaults/vars/main.yml`. - The new image''s `org.opencontainers.image.revision` (`295b5e37f2a8`) equals the current head of `vexxhost/docker-octavia` `stable/2025.2`, so the registry tag is not stale. - `17.0.0+a8e.20.1` is published on the Atmosphere package index, and `docker-octavia` `stable/2025.2` pins `OCTAVIA_VERSION=17.0.0+a8e.20.1`. - All five `octavia_*` entries referencing this image were updated together. `octavia_health_manager_init` points at the unrelated `heat` image and was left unchanged. ' change_url: https://github.com/vexxhost/atmosphere/pull/4390 child_jobs: [] commit_id: ffbbb64fff35567a565b8a4d4e1998afb8090163 event_id: a8531b60-b625-11f1-99e0-da7f49780ec6 executor: hostname: 2d72f0692154 inventory_file: /var/lib/zuul/builds/3e3edfb1db8940a5a9318f0b996ca8f4/ansible/inventory.yaml log_root: /var/lib/zuul/builds/3e3edfb1db8940a5a9318f0b996ca8f4/work/logs result_data_file: /var/lib/zuul/builds/3e3edfb1db8940a5a9318f0b996ca8f4/work/results.json src_root: /var/lib/zuul/builds/3e3edfb1db8940a5a9318f0b996ca8f4/work/src work_root: /var/lib/zuul/builds/3e3edfb1db8940a5a9318f0b996ca8f4/work include_vars: [] items: - branch: stable/2025.2 change: '4390' change_message: 'fix(octavia): update image to the release with the tls_ciphers fix (stable/2025.2) Bumps the `ghcr.io/vexxhost/octavia:2025.2` image on `stable/2025.2` to the build of the `vexxhost/octavia` `stable/2025.2` release that contains the fix for OSSA-2026-039 / CVE-2026-94572 (Launchpad [#2162101](https://bugs.launchpad.net/bugs/2162101)). **Reason:** a HAProxy configuration injection. The `tls_ciphers` field on listeners and pools was not validated for control characters, so a member of the owning project could put text that is not an OpenSSL cipher string into it. Octavia interpolated that text unquoted after `ciphers` on the amphora HAProxy `server` line, so embedded whitespace, comments, or newlines were consumed as configuration. Validation now rejects cipher strings containing characters outside the OpenSSL set, and the combined-listener templater falls back to the configured default ciphers when an invalid value is already stored. | | | | --- | --- | | Service | octavia | | Branch | `stable/2025.2` | | Image tag | `2025.2` | | Old digest | `sha256:c805fffafe4f869687efe056e7ff9af420e0fd1ca64e408a382f5293b7ca6efe` | | New digest | `sha256:5699da55f95f3a6681104c7d3e4544ca5fc8b13df57df09ed84a02e4c9565a7c` | | Old source SHA | [`e28fd03a7b3e`](https://github.com/vexxhost/docker-octavia/commit/e28fd03a7b3eaf27544a36aace6eeb20d8c2c48b) | | New source SHA | [`295b5e37f2a8`](https://github.com/vexxhost/docker-octavia/commit/295b5e37f2a859098c904f4f2fcea66b816ef89d) | | Octavia release | `17.0.0+a8e.20.1` | **Validation** - Image labels: `org.opencontainers.image.version` is `2025.2` on both the old and the new image, matching the tag used in `roles/defaults/vars/main.yml`. - The new image''s `org.opencontainers.image.revision` (`295b5e37f2a8`) equals the current head of `vexxhost/docker-octavia` `stable/2025.2`, so the registry tag is not stale. - `17.0.0+a8e.20.1` is published on the Atmosphere package index, and `docker-octavia` `stable/2025.2` pins `OCTAVIA_VERSION=17.0.0+a8e.20.1`. - All five `octavia_*` entries referencing this image were updated together. `octavia_health_manager_init` points at the unrelated `heat` image and was left unchanged. ' change_url: https://github.com/vexxhost/atmosphere/pull/4390 commit_id: ffbbb64fff35567a565b8a4d4e1998afb8090163 patchset: ffbbb64fff35567a565b8a4d4e1998afb8090163 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere name: vexxhost/atmosphere short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere topic: null job: atmosphere-molecule-aio-openvswitch jobtags: [] max_attempts: 3 message: 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 patchset: ffbbb64fff35567a565b8a4d4e1998afb8090163 pipeline: check playbook_context: playbook_projects: trusted/project_0/github.com/vexxhost/zuul-config: canonical_name: github.com/vexxhost/zuul-config checkout: main commit: 298983cd1253e6833abdb49d87d912527e0e6597 trusted/project_1/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: 84e38666fab1ba8fda552ad6faff9404811352ca trusted/project_2/github.com/vexxhost/zuul-jobs: canonical_name: github.com/vexxhost/zuul-jobs checkout: main commit: c286bf94224b5660b8e49e9a058289e61062a9a0 untrusted/project_0/github.com/vexxhost/zuul-jobs: canonical_name: github.com/vexxhost/zuul-jobs checkout: main commit: c286bf94224b5660b8e49e9a058289e61062a9a0 untrusted/project_1/github.com/vexxhost/zuul-config: canonical_name: github.com/vexxhost/zuul-config checkout: main commit: 298983cd1253e6833abdb49d87d912527e0e6597 untrusted/project_2/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: 84e38666fab1ba8fda552ad6faff9404811352ca untrusted/project_3/github.com/vexxhost/atmosphere-zuul-jobs: canonical_name: github.com/vexxhost/atmosphere-zuul-jobs checkout: main commit: a05c8ee068edf95d57873f78e89ff5b01c9098ce untrusted/project_4/opendev.org/openstack/openstack-helm: canonical_name: opendev.org/openstack/openstack-helm checkout: master commit: 8847f4e5087affe10460c76b078bdd992d74f032 playbooks: - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/molecule/run.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/playbook_0/role_1/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/playbook_0/role_1/zuul-jobs/roles - checkout: main checkout_description: playbook branch link_name: ansible/playbook_0/role_2/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/playbook_0/role_2/zuul-jobs/roles post_playbooks: - path: untrusted/project_3/github.com/vexxhost/atmosphere-zuul-jobs/playbooks/molecule/post.yml roles: - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_0/role_1/openstack-helm link_target: untrusted/project_4/opendev.org/openstack/openstack-helm role_path: ansible/post_playbook_0/role_1/openstack-helm/roles - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_0/role_3/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_0/role_3/zuul-jobs/roles - checkout: main checkout_description: project default branch link_name: ansible/post_playbook_0/role_4/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_0/role_4/zuul-jobs/roles - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_1/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_1/role_1/zuul-jobs/roles - checkout: main checkout_description: project default branch link_name: ansible/post_playbook_1/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_1/role_2/zuul-jobs/roles - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post-logs.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_2/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_2/role_1/zuul-jobs/roles - checkout: main checkout_description: project default branch link_name: ansible/post_playbook_2/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_2/role_2/zuul-jobs/roles pre_playbooks: - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/pre.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_0/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_0/role_1/zuul-jobs/roles - checkout: main checkout_description: project default branch link_name: ansible/pre_playbook_0/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_0/role_2/zuul-jobs/roles - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/molecule/pre.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_1/role_1/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_1/role_1/zuul-jobs/roles - checkout: main checkout_description: playbook branch link_name: ansible/pre_playbook_1/role_2/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_1/role_2/zuul-jobs/roles - path: untrusted/project_3/github.com/vexxhost/atmosphere-zuul-jobs/playbooks/molecule/pre.yml roles: - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_2/role_1/openstack-helm link_target: untrusted/project_4/opendev.org/openstack/openstack-helm role_path: ansible/pre_playbook_2/role_1/openstack-helm/roles - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_2/role_3/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_2/role_3/zuul-jobs/roles - checkout: main checkout_description: project default branch link_name: ansible/pre_playbook_2/role_4/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_2/role_4/zuul-jobs/roles post_review: false post_timeout: null pre_timeout: null project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere name: vexxhost/atmosphere short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere projects: github.com/ansible-collections/ansible.netcommon: canonical_hostname: github.com canonical_name: github.com/ansible-collections/ansible.netcommon checkout: main checkout_description: project default branch commit: 7db8a0fd06ec8135f49122ed4590f358193792f2 name: ansible-collections/ansible.netcommon required: true short_name: ansible.netcommon src_dir: src/github.com/ansible-collections/ansible.netcommon github.com/ansible-collections/ansible.posix: canonical_hostname: github.com canonical_name: github.com/ansible-collections/ansible.posix checkout: main checkout_description: project default branch commit: d5699a3fcfca765b32f94b68a592139dc58d0301 name: ansible-collections/ansible.posix required: true short_name: ansible.posix src_dir: src/github.com/ansible-collections/ansible.posix github.com/ansible-collections/ansible.utils: canonical_hostname: github.com canonical_name: github.com/ansible-collections/ansible.utils checkout: main checkout_description: project default branch commit: 1f3e1bdfe2ba8904d397222dd6f90911d6f2402b name: ansible-collections/ansible.utils required: true short_name: ansible.utils src_dir: src/github.com/ansible-collections/ansible.utils github.com/ansible-collections/community.crypto: canonical_hostname: github.com canonical_name: github.com/ansible-collections/community.crypto checkout: main checkout_description: project default branch commit: f5e7cf34b47daea77edc92654189c4ef7c0be15b name: ansible-collections/community.crypto required: true short_name: community.crypto src_dir: src/github.com/ansible-collections/community.crypto github.com/ansible-collections/community.general: canonical_hostname: github.com canonical_name: github.com/ansible-collections/community.general checkout: main checkout_description: project default branch commit: df30240e438cdcea8f75f323fcbec2287f812a58 name: ansible-collections/community.general required: true short_name: community.general src_dir: src/github.com/ansible-collections/community.general github.com/ansible-collections/community.mysql: canonical_hostname: github.com canonical_name: github.com/ansible-collections/community.mysql checkout: main checkout_description: project default branch commit: 4cf7a3176fbd07be43459f1366e8066381df6d97 name: ansible-collections/community.mysql required: true short_name: community.mysql src_dir: src/github.com/ansible-collections/community.mysql github.com/ansible-collections/kubernetes.core: canonical_hostname: github.com canonical_name: github.com/ansible-collections/kubernetes.core checkout: main checkout_description: project default branch commit: 10584acdbb5415ce48bb3329416519094cf6ed40 name: ansible-collections/kubernetes.core required: true short_name: kubernetes.core src_dir: src/github.com/ansible-collections/kubernetes.core github.com/vexxhost/ansible-collection-ceph: canonical_hostname: github.com canonical_name: github.com/vexxhost/ansible-collection-ceph checkout: main checkout_description: project default branch commit: 44a694a80e3179c28d75180baa1a56426f987257 name: vexxhost/ansible-collection-ceph required: true short_name: ansible-collection-ceph src_dir: src/github.com/vexxhost/ansible-collection-ceph github.com/vexxhost/ansible-collection-containers: canonical_hostname: github.com canonical_name: github.com/vexxhost/ansible-collection-containers checkout: main checkout_description: project default branch commit: d22923ebd40c0fd5a345318c1db90d125fb5140f name: vexxhost/ansible-collection-containers required: true short_name: ansible-collection-containers src_dir: src/github.com/vexxhost/ansible-collection-containers github.com/vexxhost/ansible-collection-kubernetes: canonical_hostname: github.com canonical_name: github.com/vexxhost/ansible-collection-kubernetes checkout: main checkout_description: project default branch commit: bb3fd0fde58a5b158605523e708645eb2a763886 name: vexxhost/ansible-collection-kubernetes required: true short_name: ansible-collection-kubernetes src_dir: src/github.com/vexxhost/ansible-collection-kubernetes github.com/vexxhost/atmosphere: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere checkout: stable/2025.2 checkout_description: zuul branch commit: ffbbb64fff35567a565b8a4d4e1998afb8090163 name: vexxhost/atmosphere required: false short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere github.com/vexxhost/atmosphere.common: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere.common checkout: main checkout_description: project default branch commit: 0317937da7abc1979d331af8b8f7b640b80d7e75 name: vexxhost/atmosphere.common required: true short_name: atmosphere.common src_dir: src/github.com/vexxhost/atmosphere.common opendev.org/openstack/ansible-collections-openstack: canonical_hostname: opendev.org canonical_name: opendev.org/openstack/ansible-collections-openstack checkout: master checkout_description: project default branch commit: da4a211b2d1dd147dead0e3db63a373b43b3c09e name: openstack/ansible-collections-openstack required: true short_name: ansible-collections-openstack src_dir: src/opendev.org/openstack/ansible-collections-openstack ref: refs/pull/4390/head resources: {} tenant: oss timeout: 7200 topic: null voting: true