all: children: controllers: hosts: controller: null zuul_unreachable: hosts: {} hosts: controller: ansible_connection: ssh ansible_host: 199.19.213.241 ansible_port: 22 ansible_python_interpreter: /usr/bin/python3 ansible_user: zuul cilium_helm_values: operator: replicas: 1 cilium_ipv4_cidr: 172.24.0.0/16 kube_vip_address: 172.17.0.100 kube_vip_interface: '{{ ansible_facts[''default_ipv4''].interface }}' kubernetes_hostname: '{{ ansible_facts[''default_ipv4''].address }}' kubernetes_remove_kube_proxy: true kubernetes_version: 1.34.0 molecule_install_collection_siblings: true molecule_scenario: aio nodepool: az: nova cloud: public external_id: 9131745f-55f9-4690-952d-160fbc95fcbf host_id: d953b2b79ff732b94d97ea6274a0c4d1174b1c52cbf038923e842d1b interface_ip: 199.19.213.241 label: rockylinux-9 node_properties: {} private_ipv4: 199.19.213.241 private_ipv6: null provider: yul1 public_ipv4: 199.19.213.241 public_ipv6: 2604:e100:1:0:f816:3eff:fef4:c0d3 region: ca-ymq-1 slot: null zuul_node: az: nova cloud: public external_id: 9131745f-55f9-4690-952d-160fbc95fcbf host_id: d953b2b79ff732b94d97ea6274a0c4d1174b1c52cbf038923e842d1b interface_ip: 199.19.213.241 label: rockylinux-9 node_properties: {} private_ipv4: 199.19.213.241 private_ipv6: null provider: yul1 public_ipv4: 199.19.213.241 public_ipv6: 2604:e100:1:0:f816:3eff:fef4:c0d3 region: ca-ymq-1 slot: null uuid: null vars: cilium_helm_values: operator: replicas: 1 kubernetes_version: 1.34.0 molecule_install_collection_siblings: true molecule_scenario: aio zuul: _inheritance_path: - '' - '' - '' - '' - '' - '' ansible_version: '9' attempts: 1 branch: main build: 2e766f739e974fc882dbd3027b436ff4 build_refs: - branch: main change: '288' change_message: 'ci: restrict privileged workflows to canonical repository ## Summary - add repository guards to the Kubernetes bump and release-please jobs - keep token-backed dependency bumping and Galaxy publishing limited to vexxhost/ansible-collection-kubernetes ## Testing - `nix-shell -p yamllint --run ''yamllint .github/workflows/bump.yaml .github/workflows/release-please.yaml''` (passes with existing `on:` truthy warnings) - `nix-shell -p actionlint --run ''actionlint .github/workflows/bump.yaml .github/workflows/release-please.yaml''`' change_url: https://github.com/vexxhost/ansible-collection-kubernetes/pull/288 commit_id: ac46a8a2ee459b596935ba98c928ca5e786b7c47 patchset: ac46a8a2ee459b596935ba98c928ca5e786b7c47 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/ansible-collection-kubernetes name: vexxhost/ansible-collection-kubernetes short_name: ansible-collection-kubernetes src_dir: src/github.com/vexxhost/ansible-collection-kubernetes src_dir: src/github.com/vexxhost/ansible-collection-kubernetes topic: null buildset: 99e69d63694e47918c7d95572e4e32dd buildset_refs: - branch: main change: '288' change_message: 'ci: restrict privileged workflows to canonical repository ## Summary - add repository guards to the Kubernetes bump and release-please jobs - keep token-backed dependency bumping and Galaxy publishing limited to vexxhost/ansible-collection-kubernetes ## Testing - `nix-shell -p yamllint --run ''yamllint .github/workflows/bump.yaml .github/workflows/release-please.yaml''` (passes with existing `on:` truthy warnings) - `nix-shell -p actionlint --run ''actionlint .github/workflows/bump.yaml .github/workflows/release-please.yaml''`' change_url: https://github.com/vexxhost/ansible-collection-kubernetes/pull/288 commit_id: ac46a8a2ee459b596935ba98c928ca5e786b7c47 patchset: ac46a8a2ee459b596935ba98c928ca5e786b7c47 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/ansible-collection-kubernetes name: vexxhost/ansible-collection-kubernetes short_name: ansible-collection-kubernetes src_dir: src/github.com/vexxhost/ansible-collection-kubernetes src_dir: src/github.com/vexxhost/ansible-collection-kubernetes topic: null change: '288' change_message: 'ci: restrict privileged workflows to canonical repository ## Summary - add repository guards to the Kubernetes bump and release-please jobs - keep token-backed dependency bumping and Galaxy publishing limited to vexxhost/ansible-collection-kubernetes ## Testing - `nix-shell -p yamllint --run ''yamllint .github/workflows/bump.yaml .github/workflows/release-please.yaml''` (passes with existing `on:` truthy warnings) - `nix-shell -p actionlint --run ''actionlint .github/workflows/bump.yaml .github/workflows/release-please.yaml''`' change_url: https://github.com/vexxhost/ansible-collection-kubernetes/pull/288 child_jobs: [] commit_id: ac46a8a2ee459b596935ba98c928ca5e786b7c47 event_id: d1bb6e00-7942-11f1-88cb-b67e381e99bd executor: hostname: 2d72f0692154 inventory_file: /var/lib/zuul/builds/2e766f739e974fc882dbd3027b436ff4/ansible/inventory.yaml log_root: /var/lib/zuul/builds/2e766f739e974fc882dbd3027b436ff4/work/logs result_data_file: /var/lib/zuul/builds/2e766f739e974fc882dbd3027b436ff4/work/results.json src_root: /var/lib/zuul/builds/2e766f739e974fc882dbd3027b436ff4/work/src work_root: /var/lib/zuul/builds/2e766f739e974fc882dbd3027b436ff4/work include_vars: [] items: - branch: main change: '288' change_message: 'ci: restrict privileged workflows to canonical repository ## Summary - add repository guards to the Kubernetes bump and release-please jobs - keep token-backed dependency bumping and Galaxy publishing limited to vexxhost/ansible-collection-kubernetes ## Testing - `nix-shell -p yamllint --run ''yamllint .github/workflows/bump.yaml .github/workflows/release-please.yaml''` (passes with existing `on:` truthy warnings) - `nix-shell -p actionlint --run ''actionlint .github/workflows/bump.yaml .github/workflows/release-please.yaml''`' change_url: https://github.com/vexxhost/ansible-collection-kubernetes/pull/288 commit_id: ac46a8a2ee459b596935ba98c928ca5e786b7c47 patchset: ac46a8a2ee459b596935ba98c928ca5e786b7c47 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/ansible-collection-kubernetes name: vexxhost/ansible-collection-kubernetes short_name: ansible-collection-kubernetes src_dir: src/github.com/vexxhost/ansible-collection-kubernetes topic: null job: ansible-collection-kubernetes-molecule-aio-rockylinux-9 jobtags: [] max_attempts: 3 message: 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 patchset: ac46a8a2ee459b596935ba98c928ca5e786b7c47 pipeline: check playbook_context: playbook_projects: trusted/project_0/github.com/vexxhost/zuul-config: canonical_name: github.com/vexxhost/zuul-config checkout: main commit: 298983cd1253e6833abdb49d87d912527e0e6597 trusted/project_1/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: 7b54a04e2a8fe9050a162363e4bfaeade6cc6d37 trusted/project_2/github.com/vexxhost/zuul-jobs: canonical_name: github.com/vexxhost/zuul-jobs checkout: main commit: c286bf94224b5660b8e49e9a058289e61062a9a0 untrusted/project_0/github.com/vexxhost/zuul-jobs: canonical_name: github.com/vexxhost/zuul-jobs checkout: main commit: c286bf94224b5660b8e49e9a058289e61062a9a0 untrusted/project_1/github.com/vexxhost/zuul-config: canonical_name: github.com/vexxhost/zuul-config checkout: main commit: 298983cd1253e6833abdb49d87d912527e0e6597 untrusted/project_2/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: 7b54a04e2a8fe9050a162363e4bfaeade6cc6d37 untrusted/project_3/github.com/vexxhost/ansible-collection-kubernetes: canonical_name: github.com/vexxhost/ansible-collection-kubernetes checkout: main commit: 811317abdf38faf5d10a1ad8575d34aa953a05c3 untrusted/project_4/opendev.org/openstack/openstack-helm: canonical_name: opendev.org/openstack/openstack-helm checkout: master commit: a659ab8a2f1f03f7bce4cca1819dfac59e0ae4a5 playbooks: - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/molecule/run.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/playbook_0/role_1/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/playbook_0/role_1/zuul-jobs/roles - checkout: main checkout_description: playbook branch link_name: ansible/playbook_0/role_2/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/playbook_0/role_2/zuul-jobs/roles post_playbooks: - path: untrusted/project_3/github.com/vexxhost/ansible-collection-kubernetes/test-playbooks/molecule/post.yml roles: - checkout: main checkout_description: playbook branch link_name: ansible/post_playbook_0/role_0/collection-kubernetes link_target: untrusted/project_3/github.com/vexxhost/ansible-collection-kubernetes role_path: ansible/post_playbook_0/role_0/collection-kubernetes/roles - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_0/role_1/openstack-helm link_target: untrusted/project_4/opendev.org/openstack/openstack-helm role_path: ansible/post_playbook_0/role_1/openstack-helm/roles - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_0/role_3/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_0/role_3/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_0/role_4/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_0/role_4/zuul-jobs/roles - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_1/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_1/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_1/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_1/role_2/zuul-jobs/roles - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post-logs.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_2/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_2/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_2/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_2/role_2/zuul-jobs/roles pre_playbooks: - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/pre.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_0/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_0/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/pre_playbook_0/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_0/role_2/zuul-jobs/roles - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/molecule/pre.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_1/role_1/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_1/role_1/zuul-jobs/roles - checkout: main checkout_description: playbook branch link_name: ansible/pre_playbook_1/role_2/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_1/role_2/zuul-jobs/roles - path: untrusted/project_3/github.com/vexxhost/ansible-collection-kubernetes/test-playbooks/molecule/pre.yml roles: - checkout: main checkout_description: playbook branch link_name: ansible/pre_playbook_2/role_0/collection-kubernetes link_target: untrusted/project_3/github.com/vexxhost/ansible-collection-kubernetes role_path: ansible/pre_playbook_2/role_0/collection-kubernetes/roles - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_2/role_1/openstack-helm link_target: untrusted/project_4/opendev.org/openstack/openstack-helm role_path: ansible/pre_playbook_2/role_1/openstack-helm/roles - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_2/role_3/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_2/role_3/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/pre_playbook_2/role_4/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_2/role_4/zuul-jobs/roles post_review: false post_timeout: null pre_timeout: null project: canonical_hostname: github.com canonical_name: github.com/vexxhost/ansible-collection-kubernetes name: vexxhost/ansible-collection-kubernetes short_name: ansible-collection-kubernetes src_dir: src/github.com/vexxhost/ansible-collection-kubernetes projects: github.com/vexxhost/ansible-collection-kubernetes: canonical_hostname: github.com canonical_name: github.com/vexxhost/ansible-collection-kubernetes checkout: main checkout_description: zuul branch commit: 811317abdf38faf5d10a1ad8575d34aa953a05c3 name: vexxhost/ansible-collection-kubernetes required: false short_name: ansible-collection-kubernetes src_dir: src/github.com/vexxhost/ansible-collection-kubernetes ref: refs/pull/288/head resources: {} tenant: oss timeout: 1800 topic: null voting: true