all: children: cephs: hosts: instance: null computes: hosts: instance: null controllers: hosts: instance: null zuul_unreachable: hosts: {} hosts: instance: ansible_connection: ssh ansible_host: 162.253.55.242 ansible_port: 22 ansible_python_interpreter: auto ansible_user: zuul atmosphere_image_prefix: harbor.atmosphere.dev/ ceph_conf_overrides: - option: mon allow pool size one section: global value: true - option: osd crush chooseleaf type section: global value: 0 - option: auth allow insecure global id reclaim section: mon value: false ceph_csi_rbd_helm_values: provisioner: replicaCount: 1 ceph_fsid: 4837cbf8-4f90-4300-b3f6-726c9b9f89b4 ceph_osd_devices: - /dev/ceph-{{ inventory_hostname_short }}-osd0/data - /dev/ceph-{{ inventory_hostname_short }}-osd1/data - /dev/ceph-{{ inventory_hostname_short }}-osd2/data cilium_helm_values: operator: replicas: 1 csi_driver: local-path-provisioner kube_vip_address: 172.17.0.100 kube_vip_interface: '{{ ansible_facts[''default_ipv4''].interface }}' kubernetes_hostname: '{{ ansible_facts[''default_ipv4''].address }}' molecule_install_collection_siblings: true molecule_scenario: csi nodepool: az: yul2 cloud: public external_id: ebe54636-dd6b-4e03-b3d6-f7f22efd2330 host_id: 1338700d28abaf70516697563709cb5989e78902918a96f23cebed44 interface_ip: 162.253.55.242 label: ubuntu-jammy node_properties: {} private_ipv4: 162.253.55.242 private_ipv6: null provider: yul1 public_ipv4: 162.253.55.242 public_ipv6: 2604:e100:1:0:f816:3eff:fe07:2d46 region: ca-ymq-1 slot: null zuul_node: az: yul2 cloud: public external_id: ebe54636-dd6b-4e03-b3d6-f7f22efd2330 host_id: 1338700d28abaf70516697563709cb5989e78902918a96f23cebed44 interface_ip: 162.253.55.242 label: ubuntu-jammy node_properties: {} private_ipv4: 162.253.55.242 private_ipv6: null provider: yul1 public_ipv4: 162.253.55.242 public_ipv6: 2604:e100:1:0:f816:3eff:fe07:2d46 region: ca-ymq-1 slot: null uuid: null vars: atmosphere_image_prefix: harbor.atmosphere.dev/ ceph_conf_overrides: - option: mon allow pool size one section: global value: true - option: osd crush chooseleaf type section: global value: 0 - option: auth allow insecure global id reclaim section: mon value: false ceph_csi_rbd_helm_values: provisioner: replicaCount: 1 ceph_fsid: 4837cbf8-4f90-4300-b3f6-726c9b9f89b4 ceph_osd_devices: - /dev/ceph-{{ inventory_hostname_short }}-osd0/data - /dev/ceph-{{ inventory_hostname_short }}-osd1/data - /dev/ceph-{{ inventory_hostname_short }}-osd2/data cilium_helm_values: operator: replicas: 1 csi_driver: local-path-provisioner kube_vip_address: 172.17.0.100 kube_vip_interface: '{{ ansible_facts[''default_ipv4''].interface }}' kubernetes_hostname: '{{ ansible_facts[''default_ipv4''].address }}' molecule_install_collection_siblings: true molecule_scenario: csi zuul: _inheritance_path: - '' - '' - '' - '' - '' - '' ansible_version: '9' attempts: 1 branch: stable/2025.1 build: 7cd5012a3cf14b46965b9ce5597ee78f build_refs: - branch: stable/2025.1 change: '4391' change_message: 'fix(octavia): update image to the release with the tls_ciphers fix (stable/2025.1) Bumps the `ghcr.io/vexxhost/octavia:2025.1` image on `stable/2025.1` to the build of the `vexxhost/octavia` `stable/2025.1` release that contains the fix for OSSA-2026-039 / CVE-2026-94572 (Launchpad [#2162101](https://bugs.launchpad.net/bugs/2162101)). **Reason:** a HAProxy configuration injection. The `tls_ciphers` field on listeners and pools was not validated for control characters, so a member of the owning project could put text that is not an OpenSSL cipher string into it. Octavia interpolated that text unquoted after `ciphers` on the amphora HAProxy `server` line, so embedded whitespace, comments, or newlines were consumed as configuration. Validation now rejects cipher strings containing characters outside the OpenSSL set, and the combined-listener templater falls back to the configured default ciphers when an invalid value is already stored. | | | | --- | --- | | Service | octavia | | Branch | `stable/2025.1` | | Image tag | `2025.1` | | Old digest | `sha256:8080d550460b09e13cf7e0116b47a8bcb3667c58b659dd9e4d02e6ecf6eae294` | | New digest | `sha256:d6173d1ca631bcfc00270997bb00c70681c12f1dbb544acbdad53ed4432d23d8` | | Old source SHA | [`26bfd4d5a535`](https://github.com/vexxhost/docker-octavia/commit/26bfd4d5a53534e7a187b01a4533d2b5e3d686d8) | | New source SHA | [`57656322f7a3`](https://github.com/vexxhost/docker-octavia/commit/57656322f7a375177b32fc2da94aa95ca35d251c) | | Octavia release | `16.1.0+a8e.1.3` | **Validation** - Image labels: `org.opencontainers.image.version` is `2025.1` on both the old and the new image, matching the tag used in `roles/defaults/vars/main.yml`. - The new image''s `org.opencontainers.image.revision` (`57656322f7a3`) equals the current head of `vexxhost/docker-octavia` `stable/2025.1`, so the registry tag is not stale. - `16.1.0+a8e.1.3` is published on the Atmosphere package index, and `docker-octavia` `stable/2025.1` pins `OCTAVIA_VERSION=16.1.0+a8e.1.3`. - All five `octavia_*` entries referencing this image were updated together. `octavia_health_manager_init` points at the unrelated `heat` image and was left unchanged. ' change_url: https://github.com/vexxhost/atmosphere/pull/4391 commit_id: dc3cbfb22947a49ac9ee7197481d545cbaac85f6 patchset: dc3cbfb22947a49ac9ee7197481d545cbaac85f6 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere name: vexxhost/atmosphere short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere src_dir: src/github.com/vexxhost/atmosphere topic: null buildset: 0e519ca752314dd9a891803cd50cd2c7 buildset_refs: - branch: stable/2025.1 change: '4391' change_message: 'fix(octavia): update image to the release with the tls_ciphers fix (stable/2025.1) Bumps the `ghcr.io/vexxhost/octavia:2025.1` image on `stable/2025.1` to the build of the `vexxhost/octavia` `stable/2025.1` release that contains the fix for OSSA-2026-039 / CVE-2026-94572 (Launchpad [#2162101](https://bugs.launchpad.net/bugs/2162101)). **Reason:** a HAProxy configuration injection. The `tls_ciphers` field on listeners and pools was not validated for control characters, so a member of the owning project could put text that is not an OpenSSL cipher string into it. Octavia interpolated that text unquoted after `ciphers` on the amphora HAProxy `server` line, so embedded whitespace, comments, or newlines were consumed as configuration. Validation now rejects cipher strings containing characters outside the OpenSSL set, and the combined-listener templater falls back to the configured default ciphers when an invalid value is already stored. | | | | --- | --- | | Service | octavia | | Branch | `stable/2025.1` | | Image tag | `2025.1` | | Old digest | `sha256:8080d550460b09e13cf7e0116b47a8bcb3667c58b659dd9e4d02e6ecf6eae294` | | New digest | `sha256:d6173d1ca631bcfc00270997bb00c70681c12f1dbb544acbdad53ed4432d23d8` | | Old source SHA | [`26bfd4d5a535`](https://github.com/vexxhost/docker-octavia/commit/26bfd4d5a53534e7a187b01a4533d2b5e3d686d8) | | New source SHA | [`57656322f7a3`](https://github.com/vexxhost/docker-octavia/commit/57656322f7a375177b32fc2da94aa95ca35d251c) | | Octavia release | `16.1.0+a8e.1.3` | **Validation** - Image labels: `org.opencontainers.image.version` is `2025.1` on both the old and the new image, matching the tag used in `roles/defaults/vars/main.yml`. - The new image''s `org.opencontainers.image.revision` (`57656322f7a3`) equals the current head of `vexxhost/docker-octavia` `stable/2025.1`, so the registry tag is not stale. - `16.1.0+a8e.1.3` is published on the Atmosphere package index, and `docker-octavia` `stable/2025.1` pins `OCTAVIA_VERSION=16.1.0+a8e.1.3`. - All five `octavia_*` entries referencing this image were updated together. `octavia_health_manager_init` points at the unrelated `heat` image and was left unchanged. ' change_url: https://github.com/vexxhost/atmosphere/pull/4391 commit_id: dc3cbfb22947a49ac9ee7197481d545cbaac85f6 patchset: dc3cbfb22947a49ac9ee7197481d545cbaac85f6 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere name: vexxhost/atmosphere short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere src_dir: src/github.com/vexxhost/atmosphere topic: null change: '4391' change_message: 'fix(octavia): update image to the release with the tls_ciphers fix (stable/2025.1) Bumps the `ghcr.io/vexxhost/octavia:2025.1` image on `stable/2025.1` to the build of the `vexxhost/octavia` `stable/2025.1` release that contains the fix for OSSA-2026-039 / CVE-2026-94572 (Launchpad [#2162101](https://bugs.launchpad.net/bugs/2162101)). **Reason:** a HAProxy configuration injection. The `tls_ciphers` field on listeners and pools was not validated for control characters, so a member of the owning project could put text that is not an OpenSSL cipher string into it. Octavia interpolated that text unquoted after `ciphers` on the amphora HAProxy `server` line, so embedded whitespace, comments, or newlines were consumed as configuration. Validation now rejects cipher strings containing characters outside the OpenSSL set, and the combined-listener templater falls back to the configured default ciphers when an invalid value is already stored. | | | | --- | --- | | Service | octavia | | Branch | `stable/2025.1` | | Image tag | `2025.1` | | Old digest | `sha256:8080d550460b09e13cf7e0116b47a8bcb3667c58b659dd9e4d02e6ecf6eae294` | | New digest | `sha256:d6173d1ca631bcfc00270997bb00c70681c12f1dbb544acbdad53ed4432d23d8` | | Old source SHA | [`26bfd4d5a535`](https://github.com/vexxhost/docker-octavia/commit/26bfd4d5a53534e7a187b01a4533d2b5e3d686d8) | | New source SHA | [`57656322f7a3`](https://github.com/vexxhost/docker-octavia/commit/57656322f7a375177b32fc2da94aa95ca35d251c) | | Octavia release | `16.1.0+a8e.1.3` | **Validation** - Image labels: `org.opencontainers.image.version` is `2025.1` on both the old and the new image, matching the tag used in `roles/defaults/vars/main.yml`. - The new image''s `org.opencontainers.image.revision` (`57656322f7a3`) equals the current head of `vexxhost/docker-octavia` `stable/2025.1`, so the registry tag is not stale. - `16.1.0+a8e.1.3` is published on the Atmosphere package index, and `docker-octavia` `stable/2025.1` pins `OCTAVIA_VERSION=16.1.0+a8e.1.3`. - All five `octavia_*` entries referencing this image were updated together. `octavia_health_manager_init` points at the unrelated `heat` image and was left unchanged. ' change_url: https://github.com/vexxhost/atmosphere/pull/4391 child_jobs: [] commit_id: dc3cbfb22947a49ac9ee7197481d545cbaac85f6 event_id: a9b6a300-b625-11f1-89b4-ddda7b0d3782 executor: hostname: 2d72f0692154 inventory_file: /var/lib/zuul/builds/7cd5012a3cf14b46965b9ce5597ee78f/ansible/inventory.yaml log_root: /var/lib/zuul/builds/7cd5012a3cf14b46965b9ce5597ee78f/work/logs result_data_file: /var/lib/zuul/builds/7cd5012a3cf14b46965b9ce5597ee78f/work/results.json src_root: /var/lib/zuul/builds/7cd5012a3cf14b46965b9ce5597ee78f/work/src work_root: /var/lib/zuul/builds/7cd5012a3cf14b46965b9ce5597ee78f/work include_vars: [] items: - branch: stable/2025.1 change: '4391' change_message: 'fix(octavia): update image to the release with the tls_ciphers fix (stable/2025.1) Bumps the `ghcr.io/vexxhost/octavia:2025.1` image on `stable/2025.1` to the build of the `vexxhost/octavia` `stable/2025.1` release that contains the fix for OSSA-2026-039 / CVE-2026-94572 (Launchpad [#2162101](https://bugs.launchpad.net/bugs/2162101)). **Reason:** a HAProxy configuration injection. The `tls_ciphers` field on listeners and pools was not validated for control characters, so a member of the owning project could put text that is not an OpenSSL cipher string into it. Octavia interpolated that text unquoted after `ciphers` on the amphora HAProxy `server` line, so embedded whitespace, comments, or newlines were consumed as configuration. Validation now rejects cipher strings containing characters outside the OpenSSL set, and the combined-listener templater falls back to the configured default ciphers when an invalid value is already stored. | | | | --- | --- | | Service | octavia | | Branch | `stable/2025.1` | | Image tag | `2025.1` | | Old digest | `sha256:8080d550460b09e13cf7e0116b47a8bcb3667c58b659dd9e4d02e6ecf6eae294` | | New digest | `sha256:d6173d1ca631bcfc00270997bb00c70681c12f1dbb544acbdad53ed4432d23d8` | | Old source SHA | [`26bfd4d5a535`](https://github.com/vexxhost/docker-octavia/commit/26bfd4d5a53534e7a187b01a4533d2b5e3d686d8) | | New source SHA | [`57656322f7a3`](https://github.com/vexxhost/docker-octavia/commit/57656322f7a375177b32fc2da94aa95ca35d251c) | | Octavia release | `16.1.0+a8e.1.3` | **Validation** - Image labels: `org.opencontainers.image.version` is `2025.1` on both the old and the new image, matching the tag used in `roles/defaults/vars/main.yml`. - The new image''s `org.opencontainers.image.revision` (`57656322f7a3`) equals the current head of `vexxhost/docker-octavia` `stable/2025.1`, so the registry tag is not stale. - `16.1.0+a8e.1.3` is published on the Atmosphere package index, and `docker-octavia` `stable/2025.1` pins `OCTAVIA_VERSION=16.1.0+a8e.1.3`. - All five `octavia_*` entries referencing this image were updated together. `octavia_health_manager_init` points at the unrelated `heat` image and was left unchanged. ' change_url: https://github.com/vexxhost/atmosphere/pull/4391 commit_id: dc3cbfb22947a49ac9ee7197481d545cbaac85f6 patchset: dc3cbfb22947a49ac9ee7197481d545cbaac85f6 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere name: vexxhost/atmosphere short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere topic: null job: atmosphere-molecule-csi-local-path-provisioner jobtags: [] max_attempts: 3 message: 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 patchset: dc3cbfb22947a49ac9ee7197481d545cbaac85f6 pipeline: check playbook_context: playbook_projects: trusted/project_0/github.com/vexxhost/zuul-config: canonical_name: github.com/vexxhost/zuul-config checkout: main commit: 298983cd1253e6833abdb49d87d912527e0e6597 trusted/project_1/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: 84e38666fab1ba8fda552ad6faff9404811352ca trusted/project_2/github.com/vexxhost/zuul-jobs: canonical_name: github.com/vexxhost/zuul-jobs checkout: main commit: c286bf94224b5660b8e49e9a058289e61062a9a0 untrusted/project_0/github.com/vexxhost/zuul-jobs: canonical_name: github.com/vexxhost/zuul-jobs checkout: main commit: c286bf94224b5660b8e49e9a058289e61062a9a0 untrusted/project_1/github.com/vexxhost/zuul-config: canonical_name: github.com/vexxhost/zuul-config checkout: main commit: 298983cd1253e6833abdb49d87d912527e0e6597 untrusted/project_2/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: 84e38666fab1ba8fda552ad6faff9404811352ca untrusted/project_3/github.com/vexxhost/atmosphere-zuul-jobs: canonical_name: github.com/vexxhost/atmosphere-zuul-jobs checkout: main commit: a05c8ee068edf95d57873f78e89ff5b01c9098ce untrusted/project_4/opendev.org/openstack/openstack-helm: canonical_name: opendev.org/openstack/openstack-helm checkout: master commit: 8847f4e5087affe10460c76b078bdd992d74f032 playbooks: - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/molecule/run.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/playbook_0/role_1/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/playbook_0/role_1/zuul-jobs/roles - checkout: main checkout_description: playbook branch link_name: ansible/playbook_0/role_2/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/playbook_0/role_2/zuul-jobs/roles post_playbooks: - path: untrusted/project_3/github.com/vexxhost/atmosphere-zuul-jobs/playbooks/molecule/post.yml roles: - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_0/role_1/openstack-helm link_target: untrusted/project_4/opendev.org/openstack/openstack-helm role_path: ansible/post_playbook_0/role_1/openstack-helm/roles - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_0/role_3/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_0/role_3/zuul-jobs/roles - checkout: main checkout_description: project default branch link_name: ansible/post_playbook_0/role_4/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_0/role_4/zuul-jobs/roles - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_1/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_1/role_1/zuul-jobs/roles - checkout: main checkout_description: project default branch link_name: ansible/post_playbook_1/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_1/role_2/zuul-jobs/roles - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post-logs.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_2/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_2/role_1/zuul-jobs/roles - checkout: main checkout_description: project default branch link_name: ansible/post_playbook_2/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_2/role_2/zuul-jobs/roles pre_playbooks: - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/pre.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_0/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_0/role_1/zuul-jobs/roles - checkout: main checkout_description: project default branch link_name: ansible/pre_playbook_0/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_0/role_2/zuul-jobs/roles - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/molecule/pre.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_1/role_1/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_1/role_1/zuul-jobs/roles - checkout: main checkout_description: playbook branch link_name: ansible/pre_playbook_1/role_2/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_1/role_2/zuul-jobs/roles - path: untrusted/project_3/github.com/vexxhost/atmosphere-zuul-jobs/playbooks/molecule/pre.yml roles: - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_2/role_1/openstack-helm link_target: untrusted/project_4/opendev.org/openstack/openstack-helm role_path: ansible/pre_playbook_2/role_1/openstack-helm/roles - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_2/role_3/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_2/role_3/zuul-jobs/roles - checkout: main checkout_description: project default branch link_name: ansible/pre_playbook_2/role_4/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_2/role_4/zuul-jobs/roles post_review: false post_timeout: null pre_timeout: null project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere name: vexxhost/atmosphere short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere projects: github.com/ansible-collections/ansible.netcommon: canonical_hostname: github.com canonical_name: github.com/ansible-collections/ansible.netcommon checkout: main checkout_description: project default branch commit: 7db8a0fd06ec8135f49122ed4590f358193792f2 name: ansible-collections/ansible.netcommon required: true short_name: ansible.netcommon src_dir: src/github.com/ansible-collections/ansible.netcommon github.com/ansible-collections/ansible.posix: canonical_hostname: github.com canonical_name: github.com/ansible-collections/ansible.posix checkout: main checkout_description: project default branch commit: d5699a3fcfca765b32f94b68a592139dc58d0301 name: ansible-collections/ansible.posix required: true short_name: ansible.posix src_dir: src/github.com/ansible-collections/ansible.posix github.com/ansible-collections/ansible.utils: canonical_hostname: github.com canonical_name: github.com/ansible-collections/ansible.utils checkout: main checkout_description: project default branch commit: 1f3e1bdfe2ba8904d397222dd6f90911d6f2402b name: ansible-collections/ansible.utils required: true short_name: ansible.utils src_dir: src/github.com/ansible-collections/ansible.utils github.com/ansible-collections/community.crypto: canonical_hostname: github.com canonical_name: github.com/ansible-collections/community.crypto checkout: main checkout_description: project default branch commit: f5e7cf34b47daea77edc92654189c4ef7c0be15b name: ansible-collections/community.crypto required: true short_name: community.crypto src_dir: src/github.com/ansible-collections/community.crypto github.com/ansible-collections/community.general: canonical_hostname: github.com canonical_name: github.com/ansible-collections/community.general checkout: main checkout_description: project default branch commit: df30240e438cdcea8f75f323fcbec2287f812a58 name: ansible-collections/community.general required: true short_name: community.general src_dir: src/github.com/ansible-collections/community.general github.com/ansible-collections/community.mysql: canonical_hostname: github.com canonical_name: github.com/ansible-collections/community.mysql checkout: main checkout_description: project default branch commit: 4cf7a3176fbd07be43459f1366e8066381df6d97 name: ansible-collections/community.mysql required: true short_name: community.mysql src_dir: src/github.com/ansible-collections/community.mysql github.com/ansible-collections/kubernetes.core: canonical_hostname: github.com canonical_name: github.com/ansible-collections/kubernetes.core checkout: main checkout_description: project default branch commit: 10584acdbb5415ce48bb3329416519094cf6ed40 name: ansible-collections/kubernetes.core required: true short_name: kubernetes.core src_dir: src/github.com/ansible-collections/kubernetes.core github.com/vexxhost/ansible-collection-ceph: canonical_hostname: github.com canonical_name: github.com/vexxhost/ansible-collection-ceph checkout: main checkout_description: project default branch commit: 44a694a80e3179c28d75180baa1a56426f987257 name: vexxhost/ansible-collection-ceph required: true short_name: ansible-collection-ceph src_dir: src/github.com/vexxhost/ansible-collection-ceph github.com/vexxhost/ansible-collection-containers: canonical_hostname: github.com canonical_name: github.com/vexxhost/ansible-collection-containers checkout: main checkout_description: project default branch commit: d22923ebd40c0fd5a345318c1db90d125fb5140f name: vexxhost/ansible-collection-containers required: true short_name: ansible-collection-containers src_dir: src/github.com/vexxhost/ansible-collection-containers github.com/vexxhost/ansible-collection-kubernetes: canonical_hostname: github.com canonical_name: github.com/vexxhost/ansible-collection-kubernetes checkout: main checkout_description: project default branch commit: bb3fd0fde58a5b158605523e708645eb2a763886 name: vexxhost/ansible-collection-kubernetes required: true short_name: ansible-collection-kubernetes src_dir: src/github.com/vexxhost/ansible-collection-kubernetes github.com/vexxhost/atmosphere: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere checkout: stable/2025.1 checkout_description: zuul branch commit: dc3cbfb22947a49ac9ee7197481d545cbaac85f6 name: vexxhost/atmosphere required: false short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere github.com/vexxhost/atmosphere.common: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere.common checkout: main checkout_description: project default branch commit: 0317937da7abc1979d331af8b8f7b640b80d7e75 name: vexxhost/atmosphere.common required: true short_name: atmosphere.common src_dir: src/github.com/vexxhost/atmosphere.common opendev.org/openstack/ansible-collections-openstack: canonical_hostname: opendev.org canonical_name: opendev.org/openstack/ansible-collections-openstack checkout: master checkout_description: project default branch commit: da4a211b2d1dd147dead0e3db63a373b43b3c09e name: openstack/ansible-collections-openstack required: true short_name: ansible-collections-openstack src_dir: src/opendev.org/openstack/ansible-collections-openstack ref: refs/pull/4391/head resources: {} tenant: oss timeout: 1800 topic: null voting: true