all: children: controllers: hosts: controller: null zuul_unreachable: hosts: {} hosts: controller: ansible_connection: ssh ansible_host: 199.204.45.78 ansible_port: 22 ansible_python_interpreter: auto ansible_user: zuul cilium_helm_values: operator: replicas: 1 cilium_ipv4_cidr: 172.24.0.0/16 kube_vip_address: 172.17.0.100 kube_vip_interface: '{{ ansible_facts[''default_ipv4''].interface }}' kubernetes_hostname: '{{ ansible_facts[''default_ipv4''].address }}' kubernetes_version: 1.28.13 molecule_install_collection_siblings: true molecule_scenario: secretgen-controller nodepool: az: nova cloud: public external_id: df8a0770-df54-4934-b33c-a0a90957cb8b host_id: 7cb77d063530dedbf6983b78a36ec607482cf1d282610499e8bd9357 interface_ip: 199.204.45.78 label: ubuntu-noble node_properties: {} private_ipv4: 199.204.45.78 private_ipv6: null provider: yul1 public_ipv4: 199.204.45.78 public_ipv6: 2604:e100:1:0:f816:3eff:feb2:9833 region: ca-ymq-1 slot: null zuul_node: az: nova cloud: public external_id: df8a0770-df54-4934-b33c-a0a90957cb8b host_id: 7cb77d063530dedbf6983b78a36ec607482cf1d282610499e8bd9357 interface_ip: 199.204.45.78 label: ubuntu-noble node_properties: {} private_ipv4: 199.204.45.78 private_ipv6: null provider: yul1 public_ipv4: 199.204.45.78 public_ipv6: 2604:e100:1:0:f816:3eff:feb2:9833 region: ca-ymq-1 slot: null uuid: null vars: cilium_helm_values: operator: replicas: 1 kubernetes_version: 1.28.13 molecule_install_collection_siblings: true molecule_scenario: secretgen-controller zuul: _inheritance_path: - '' - '' - '' - '' - '' ansible_version: '9' attempts: 1 branch: main build: 2a28fbdb19d44565b865ef30828debdb build_refs: - branch: main change: '117' change_message: 'fix(secretgen): render release template explicitly ## Summary Render the `secretgen_controller` release template before passing it to `kubernetes.core.k8s`. ## Changes - replace `template: release.yml.tpl` with an explicit `definition` rendered by `lookup(''ansible.builtin.template'', ''release.yml.tpl'') | from_yaml_all | list` - keep the role compatible with newer Ansible and `kubernetes.core` behavior where the old template path can pass raw Jinja into Kubernetes manifests ## Validation - `git diff --check` - `pre-commit run --files roles/secretgen_controller/tasks/main.yml` - installed the collection into a temporary `ANSIBLE_COLLECTIONS_PATH` - `ANSIBLE_COLLECTIONS_PATH= uv run ansible-playbook --syntax-check playbooks/secretgen_controller.yaml` - `ANSIBLE_COLLECTIONS_PATH= uv run ansible-playbook --syntax-check extensions/molecule/secretgen-controller/converge.yml` - rendered `release.yml.tpl` through Ansible and confirmed the Deployment image resolves to `ghcr.io/carvel-dev/secretgen-controller@sha256:59ec05ce5847bfd70c8e04f08b5195e918c8f6fbb947ffc91b456494a2958fd5` Note: local `uv run ansible-lint roles/secretgen_controller/tasks/main.yml` could not run because the local entry point resolved to an old Python 3.8 global `ansible-lint` and failed importing `functools.cache` before linting. The GitHub `ansible/ansible-lint` job should provide the authoritative lint result. Related: https://github.com/vexxhost/atmosphere/pull/4009 ' change_url: https://github.com/vexxhost/atmosphere.common/pull/117 commit_id: 1d1e8861cb6685a5d245a8a8e7995498db41f247 patchset: 1d1e8861cb6685a5d245a8a8e7995498db41f247 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere.common name: vexxhost/atmosphere.common short_name: atmosphere.common src_dir: src/github.com/vexxhost/atmosphere.common src_dir: src/github.com/vexxhost/atmosphere.common topic: null buildset: 2e4babeb15ee48e19b05d34ecbbb95e5 buildset_refs: - branch: main change: '117' change_message: 'fix(secretgen): render release template explicitly ## Summary Render the `secretgen_controller` release template before passing it to `kubernetes.core.k8s`. ## Changes - replace `template: release.yml.tpl` with an explicit `definition` rendered by `lookup(''ansible.builtin.template'', ''release.yml.tpl'') | from_yaml_all | list` - keep the role compatible with newer Ansible and `kubernetes.core` behavior where the old template path can pass raw Jinja into Kubernetes manifests ## Validation - `git diff --check` - `pre-commit run --files roles/secretgen_controller/tasks/main.yml` - installed the collection into a temporary `ANSIBLE_COLLECTIONS_PATH` - `ANSIBLE_COLLECTIONS_PATH= uv run ansible-playbook --syntax-check playbooks/secretgen_controller.yaml` - `ANSIBLE_COLLECTIONS_PATH= uv run ansible-playbook --syntax-check extensions/molecule/secretgen-controller/converge.yml` - rendered `release.yml.tpl` through Ansible and confirmed the Deployment image resolves to `ghcr.io/carvel-dev/secretgen-controller@sha256:59ec05ce5847bfd70c8e04f08b5195e918c8f6fbb947ffc91b456494a2958fd5` Note: local `uv run ansible-lint roles/secretgen_controller/tasks/main.yml` could not run because the local entry point resolved to an old Python 3.8 global `ansible-lint` and failed importing `functools.cache` before linting. The GitHub `ansible/ansible-lint` job should provide the authoritative lint result. Related: https://github.com/vexxhost/atmosphere/pull/4009 ' change_url: https://github.com/vexxhost/atmosphere.common/pull/117 commit_id: 1d1e8861cb6685a5d245a8a8e7995498db41f247 patchset: 1d1e8861cb6685a5d245a8a8e7995498db41f247 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere.common name: vexxhost/atmosphere.common short_name: atmosphere.common src_dir: src/github.com/vexxhost/atmosphere.common src_dir: src/github.com/vexxhost/atmosphere.common topic: null change: '117' change_message: 'fix(secretgen): render release template explicitly ## Summary Render the `secretgen_controller` release template before passing it to `kubernetes.core.k8s`. ## Changes - replace `template: release.yml.tpl` with an explicit `definition` rendered by `lookup(''ansible.builtin.template'', ''release.yml.tpl'') | from_yaml_all | list` - keep the role compatible with newer Ansible and `kubernetes.core` behavior where the old template path can pass raw Jinja into Kubernetes manifests ## Validation - `git diff --check` - `pre-commit run --files roles/secretgen_controller/tasks/main.yml` - installed the collection into a temporary `ANSIBLE_COLLECTIONS_PATH` - `ANSIBLE_COLLECTIONS_PATH= uv run ansible-playbook --syntax-check playbooks/secretgen_controller.yaml` - `ANSIBLE_COLLECTIONS_PATH= uv run ansible-playbook --syntax-check extensions/molecule/secretgen-controller/converge.yml` - rendered `release.yml.tpl` through Ansible and confirmed the Deployment image resolves to `ghcr.io/carvel-dev/secretgen-controller@sha256:59ec05ce5847bfd70c8e04f08b5195e918c8f6fbb947ffc91b456494a2958fd5` Note: local `uv run ansible-lint roles/secretgen_controller/tasks/main.yml` could not run because the local entry point resolved to an old Python 3.8 global `ansible-lint` and failed importing `functools.cache` before linting. The GitHub `ansible/ansible-lint` job should provide the authoritative lint result. Related: https://github.com/vexxhost/atmosphere/pull/4009 ' change_url: https://github.com/vexxhost/atmosphere.common/pull/117 child_jobs: [] commit_id: 1d1e8861cb6685a5d245a8a8e7995498db41f247 event_id: 1380fe40-6935-11f1-915d-8642214fe4b7 executor: hostname: 2d72f0692154 inventory_file: /var/lib/zuul/builds/2a28fbdb19d44565b865ef30828debdb/ansible/inventory.yaml log_root: /var/lib/zuul/builds/2a28fbdb19d44565b865ef30828debdb/work/logs result_data_file: /var/lib/zuul/builds/2a28fbdb19d44565b865ef30828debdb/work/results.json src_root: /var/lib/zuul/builds/2a28fbdb19d44565b865ef30828debdb/work/src work_root: /var/lib/zuul/builds/2a28fbdb19d44565b865ef30828debdb/work include_vars: [] items: - branch: main change: '117' change_message: 'fix(secretgen): render release template explicitly ## Summary Render the `secretgen_controller` release template before passing it to `kubernetes.core.k8s`. ## Changes - replace `template: release.yml.tpl` with an explicit `definition` rendered by `lookup(''ansible.builtin.template'', ''release.yml.tpl'') | from_yaml_all | list` - keep the role compatible with newer Ansible and `kubernetes.core` behavior where the old template path can pass raw Jinja into Kubernetes manifests ## Validation - `git diff --check` - `pre-commit run --files roles/secretgen_controller/tasks/main.yml` - installed the collection into a temporary `ANSIBLE_COLLECTIONS_PATH` - `ANSIBLE_COLLECTIONS_PATH= uv run ansible-playbook --syntax-check playbooks/secretgen_controller.yaml` - `ANSIBLE_COLLECTIONS_PATH= uv run ansible-playbook --syntax-check extensions/molecule/secretgen-controller/converge.yml` - rendered `release.yml.tpl` through Ansible and confirmed the Deployment image resolves to `ghcr.io/carvel-dev/secretgen-controller@sha256:59ec05ce5847bfd70c8e04f08b5195e918c8f6fbb947ffc91b456494a2958fd5` Note: local `uv run ansible-lint roles/secretgen_controller/tasks/main.yml` could not run because the local entry point resolved to an old Python 3.8 global `ansible-lint` and failed importing `functools.cache` before linting. The GitHub `ansible/ansible-lint` job should provide the authoritative lint result. Related: https://github.com/vexxhost/atmosphere/pull/4009 ' change_url: https://github.com/vexxhost/atmosphere.common/pull/117 commit_id: 1d1e8861cb6685a5d245a8a8e7995498db41f247 patchset: 1d1e8861cb6685a5d245a8a8e7995498db41f247 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere.common name: vexxhost/atmosphere.common short_name: atmosphere.common src_dir: src/github.com/vexxhost/atmosphere.common topic: null job: atmosphere-common-molecule-secretgen-controller jobtags: [] max_attempts: 3 message: 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 patchset: 1d1e8861cb6685a5d245a8a8e7995498db41f247 pipeline: check playbook_context: playbook_projects: trusted/project_0/github.com/vexxhost/zuul-config: canonical_name: github.com/vexxhost/zuul-config checkout: main commit: 298983cd1253e6833abdb49d87d912527e0e6597 trusted/project_1/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: 82e3e8b1292a25e38235bb92b157992d326531d1 trusted/project_2/github.com/vexxhost/zuul-jobs: canonical_name: github.com/vexxhost/zuul-jobs checkout: main commit: 348c7ff425450b0356e1d84589143dce260be74a untrusted/project_0/github.com/vexxhost/zuul-jobs: canonical_name: github.com/vexxhost/zuul-jobs checkout: main commit: 348c7ff425450b0356e1d84589143dce260be74a untrusted/project_1/github.com/vexxhost/zuul-config: canonical_name: github.com/vexxhost/zuul-config checkout: main commit: 298983cd1253e6833abdb49d87d912527e0e6597 untrusted/project_2/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: 82e3e8b1292a25e38235bb92b157992d326531d1 untrusted/project_3/github.com/vexxhost/atmosphere.common: canonical_name: github.com/vexxhost/atmosphere.common checkout: main commit: 89969783e2edf2107b6ea262984a0a8ce86d1f75 untrusted/project_4/opendev.org/openstack/openstack-helm: canonical_name: opendev.org/openstack/openstack-helm checkout: master commit: 9d891d3e679b522832c216f23e30e64a9b400681 playbooks: - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/molecule/run.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/playbook_0/role_1/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/playbook_0/role_1/zuul-jobs/roles - checkout: main checkout_description: playbook branch link_name: ansible/playbook_0/role_2/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/playbook_0/role_2/zuul-jobs/roles post_playbooks: - path: untrusted/project_3/github.com/vexxhost/atmosphere.common/test-playbooks/molecule/post.yml roles: - checkout: main checkout_description: playbook branch link_name: ansible/post_playbook_0/role_0/atmosphere.common link_target: untrusted/project_3/github.com/vexxhost/atmosphere.common role_path: ansible/post_playbook_0/role_0/atmosphere.common/roles - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_0/role_1/openstack-helm link_target: untrusted/project_4/opendev.org/openstack/openstack-helm role_path: ansible/post_playbook_0/role_1/openstack-helm/roles - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_0/role_3/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_0/role_3/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_0/role_4/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_0/role_4/zuul-jobs/roles - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_1/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_1/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_1/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_1/role_2/zuul-jobs/roles - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post-logs.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_2/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_2/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_2/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_2/role_2/zuul-jobs/roles pre_playbooks: - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/pre.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_0/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_0/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/pre_playbook_0/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_0/role_2/zuul-jobs/roles - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/molecule/pre.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_1/role_1/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_1/role_1/zuul-jobs/roles - checkout: main checkout_description: playbook branch link_name: ansible/pre_playbook_1/role_2/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_1/role_2/zuul-jobs/roles - path: untrusted/project_3/github.com/vexxhost/atmosphere.common/test-playbooks/molecule/pre.yml roles: - checkout: main checkout_description: playbook branch link_name: ansible/pre_playbook_2/role_0/atmosphere.common link_target: untrusted/project_3/github.com/vexxhost/atmosphere.common role_path: ansible/pre_playbook_2/role_0/atmosphere.common/roles - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_2/role_1/openstack-helm link_target: untrusted/project_4/opendev.org/openstack/openstack-helm role_path: ansible/pre_playbook_2/role_1/openstack-helm/roles - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_2/role_3/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_2/role_3/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/pre_playbook_2/role_4/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_2/role_4/zuul-jobs/roles post_review: false post_timeout: null pre_timeout: null project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere.common name: vexxhost/atmosphere.common short_name: atmosphere.common src_dir: src/github.com/vexxhost/atmosphere.common projects: github.com/vexxhost/atmosphere.common: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere.common checkout: main checkout_description: zuul branch commit: 89969783e2edf2107b6ea262984a0a8ce86d1f75 name: vexxhost/atmosphere.common required: false short_name: atmosphere.common src_dir: src/github.com/vexxhost/atmosphere.common ref: refs/pull/117/head resources: {} tenant: oss timeout: 1800 topic: null voting: true