[
{
"branch": "main",
"index": "0",
"phase": "pre",
"playbook": "github.com/vexxhost/zuul-config/playbooks/base/pre.yaml",
"plays": [
{
"play": {
"duration": {
"end": "2026-07-09T00:44:34.156635Z",
"start": "2026-07-09T00:44:31.554050Z"
},
"id": "0242ac17-0010-fa48-92c2-000000000002",
"name": "localhost"
},
"tasks": [
{
"hosts": {
"localhost": {
"action": "gather_facts",
"ansible_facts": {
"ansible_apparmor": {
"status": "disabled"
},
"ansible_architecture": "x86_64",
"ansible_bios_date": "NA",
"ansible_bios_vendor": "NA",
"ansible_bios_version": "NA",
"ansible_board_asset_tag": "NA",
"ansible_board_name": "NA",
"ansible_board_serial": "NA",
"ansible_board_vendor": "NA",
"ansible_board_version": "NA",
"ansible_chassis_asset_tag": "NA",
"ansible_chassis_serial": "NA",
"ansible_chassis_vendor": "NA",
"ansible_chassis_version": "NA",
"ansible_cmdline": {
"BOOT_IMAGE": "/boot/vmlinuz-5.15.0-130-generic",
"console": "ttyS0",
"ro": true,
"root": "UUID=5a569d86-b935-46dd-ae79-7a72a25b6a4c"
},
"ansible_date_time": {
"date": "2026-07-09",
"day": "09",
"epoch": "1783557872",
"epoch_int": "1783557872",
"hour": "00",
"iso8601": "2026-07-09T00:44:32Z",
"iso8601_basic": "20260709T004432111542",
"iso8601_basic_short": "20260709T004432",
"iso8601_micro": "2026-07-09T00:44:32.111542Z",
"minute": "44",
"month": "07",
"second": "32",
"time": "00:44:32",
"tz": "UTC",
"tz_dst": "UTC",
"tz_offset": "+0000",
"weekday": "Thursday",
"weekday_number": "4",
"weeknumber": "27",
"year": "2026"
},
"ansible_devices": {},
"ansible_distribution": "Debian",
"ansible_distribution_major_version": "12",
"ansible_distribution_release": "bookworm",
"ansible_distribution_version": "12",
"ansible_dns": {
"nameservers": [
"127.0.0.11"
],
"options": {
"edns0": true,
"ndots": "0",
"trust-ad": true
},
"search": [
"openstacklocal"
]
},
"ansible_domain": "",
"ansible_effective_group_id": 0,
"ansible_effective_user_id": 0,
"ansible_env": {
"ANSIBLE_CONFIG": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/ansible/pre_playbook_0/ansible.cfg",
"DEBIAN_FRONTEND": "noninteractive",
"GPG_KEY": "A035C8C19219BA821ECEA86B64E628F8D684696D",
"HOME": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work",
"HOSTNAME": "2d72f0692154",
"KUBECONFIG": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/kube/config",
"LANG": "C.UTF-8",
"PATH": "/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
"PWD": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base",
"PYTHONPATH": "/var/lib/zuul/ansible/9",
"PYTHON_SHA256": "8d3ed8ec5c88c1c95f5e558612a725450d2452813ddad5e58fdb1a53b1209b78",
"PYTHON_VERSION": "3.11.14",
"SSH_AGENT_PID": "1529211",
"SSH_AUTH_SOCK": "/tmp/ssh-NfdMsweaQhdn/agent.1529210",
"TMP": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/tmp",
"ZUUL_ANSIBLE_SPLIT_STREAMS": "False",
"ZUUL_JOBDIR": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd",
"ZUUL_JOB_FAILURE_OUTPUT": "[]",
"ZUUL_JOB_LOG_CONFIG": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/ansible/logging.json",
"ZUUL_OUTPUT_MAX_BYTES": "1073741824"
},
"ansible_fibre_channel_wwn": [],
"ansible_fips": false,
"ansible_form_factor": "NA",
"ansible_fqdn": "2d72f0692154",
"ansible_hostname": "2d72f0692154",
"ansible_hostnqn": "",
"ansible_is_chroot": false,
"ansible_iscsi_iqn": "",
"ansible_kernel": "5.15.0-130-generic",
"ansible_kernel_version": "#140-Ubuntu SMP Wed Dec 18 17:59:53 UTC 2024",
"ansible_loadavg": {
"15m": 3.84619140625,
"1m": 3.75439453125,
"5m": 4.16552734375
},
"ansible_local": {},
"ansible_lsb": {},
"ansible_lvm": "N/A",
"ansible_machine": "x86_64",
"ansible_memfree_mb": 6577,
"ansible_memory_mb": {
"nocache": {
"free": 15758,
"used": 16332
},
"real": {
"free": 6577,
"total": 32090,
"used": 25513
},
"swap": {
"cached": 0,
"free": 0,
"total": 0,
"used": 0
}
},
"ansible_memtotal_mb": 32090,
"ansible_mounts": [
{
"block_available": 8526455,
"block_size": 4096,
"block_total": 40601580,
"block_used": 32075125,
"device": "/dev/vda1",
"fstype": "ext4",
"inode_available": 16574134,
"inode_total": 20643840,
"inode_used": 4069706,
"mount": "/etc/resolv.conf",
"options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind",
"size_available": 34924359680,
"size_total": 166304071680,
"uuid": "N/A"
},
{
"block_available": 8526455,
"block_size": 4096,
"block_total": 40601580,
"block_used": 32075125,
"device": "/dev/vda1",
"fstype": "ext4",
"inode_available": 16574134,
"inode_total": 20643840,
"inode_used": 4069706,
"mount": "/etc/hosts",
"options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind",
"size_available": 34924359680,
"size_total": 166304071680,
"uuid": "N/A"
},
{
"block_available": 8526455,
"block_size": 4096,
"block_total": 40601580,
"block_used": 32075125,
"device": "/dev/vda1",
"fstype": "ext4",
"inode_available": 16574134,
"inode_total": 20643840,
"inode_used": 4069706,
"mount": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work",
"options": "rw,nosuid,nodev,relatime,discard,errors=remount-ro,bind",
"size_available": 34924359680,
"size_total": 166304071680,
"uuid": "N/A"
},
{
"block_available": 8526455,
"block_size": 4096,
"block_total": 40601580,
"block_used": 32075125,
"device": "/dev/vda1",
"fstype": "ext4",
"inode_available": 16574134,
"inode_total": 20643840,
"inode_used": 4069706,
"mount": "/var/lib/zuul/ansible/9",
"options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind",
"size_available": 34924359680,
"size_total": 166304071680,
"uuid": "N/A"
},
{
"block_available": 8526455,
"block_size": 4096,
"block_total": 40601580,
"block_used": 32075125,
"device": "/dev/vda1",
"fstype": "ext4",
"inode_available": 16574134,
"inode_total": 20643840,
"inode_used": 4069706,
"mount": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/ansible",
"options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind",
"size_available": 34924359680,
"size_total": 166304071680,
"uuid": "N/A"
},
{
"block_available": 8526455,
"block_size": 4096,
"block_total": 40601580,
"block_used": 32075125,
"device": "/dev/vda1",
"fstype": "ext4",
"inode_available": 16574134,
"inode_total": 20643840,
"inode_used": 4069706,
"mount": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/kube",
"options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind",
"size_available": 34924359680,
"size_total": 166304071680,
"uuid": "N/A"
},
{
"block_available": 8526455,
"block_size": 4096,
"block_total": 40601580,
"block_used": 32075125,
"device": "/dev/vda1",
"fstype": "ext4",
"inode_available": 16574134,
"inode_total": 20643840,
"inode_used": 4069706,
"mount": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/trusted",
"options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind",
"size_available": 34924359680,
"size_total": 166304071680,
"uuid": "N/A"
},
{
"block_available": 8526455,
"block_size": 4096,
"block_total": 40601580,
"block_used": 32075125,
"device": "/dev/vda1",
"fstype": "ext4",
"inode_available": 16574134,
"inode_total": 20643840,
"inode_used": 4069706,
"mount": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/untrusted",
"options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind",
"size_available": 34924359680,
"size_total": 166304071680,
"uuid": "N/A"
},
{
"block_available": 8526454,
"block_size": 4096,
"block_total": 40601580,
"block_used": 32075126,
"device": "/dev/vda1",
"fstype": "ext4",
"inode_available": 16574134,
"inode_total": 20643840,
"inode_used": 4069706,
"mount": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/ansible/pre_playbook_0",
"options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind",
"size_available": 34924355584,
"size_total": 166304071680,
"uuid": "N/A"
},
{
"block_available": 8526454,
"block_size": 4096,
"block_total": 40601580,
"block_used": 32075126,
"device": "/dev/vda1",
"fstype": "ext4",
"inode_available": 16574134,
"inode_total": 20643840,
"inode_used": 4069706,
"mount": "/etc/zuul/site-variables.yaml",
"options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind",
"size_available": 34924355584,
"size_total": 166304071680,
"uuid": "N/A"
},
{
"block_available": 94755292,
"block_size": 4096,
"block_total": 263940717,
"block_used": 169185425,
"device": "/dev/vdb",
"fstype": "ext4",
"inode_available": 39418693,
"inode_total": 67108864,
"inode_used": 27690171,
"mount": "/srv/static/logs",
"options": "rw,nosuid,nodev,relatime,discard",
"size_available": 388117676032,
"size_total": 1081101176832,
"uuid": "N/A"
},
{
"block_available": 8526454,
"block_size": 4096,
"block_total": 40601580,
"block_used": 32075126,
"device": "/dev/vda1",
"fstype": "ext4",
"inode_available": 16574134,
"inode_total": 20643840,
"inode_used": 4069706,
"mount": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/.ansible",
"options": "rw,nosuid,nodev,relatime,discard,errors=remount-ro,bind",
"size_available": 34924355584,
"size_total": 166304071680,
"uuid": "N/A"
}
],
"ansible_nodename": "2d72f0692154",
"ansible_os_family": "Debian",
"ansible_pkg_mgr": "apt",
"ansible_proc_cmdline": {
"BOOT_IMAGE": "/boot/vmlinuz-5.15.0-130-generic",
"console": [
"tty1",
"ttyS0"
],
"ro": true,
"root": "UUID=5a569d86-b935-46dd-ae79-7a72a25b6a4c"
},
"ansible_processor": [
"0",
"AuthenticAMD",
"AMD EPYC-Rome Processor",
"1",
"AuthenticAMD",
"AMD EPYC-Rome Processor",
"2",
"AuthenticAMD",
"AMD EPYC-Rome Processor",
"3",
"AuthenticAMD",
"AMD EPYC-Rome Processor",
"4",
"AuthenticAMD",
"AMD EPYC-Rome Processor",
"5",
"AuthenticAMD",
"AMD EPYC-Rome Processor",
"6",
"AuthenticAMD",
"AMD EPYC-Rome Processor",
"7",
"AuthenticAMD",
"AMD EPYC-Rome Processor",
"8",
"AuthenticAMD",
"AMD EPYC-Rome Processor",
"9",
"AuthenticAMD",
"AMD EPYC-Rome Processor",
"10",
"AuthenticAMD",
"AMD EPYC-Rome Processor",
"11",
"AuthenticAMD",
"AMD EPYC-Rome Processor",
"12",
"AuthenticAMD",
"AMD EPYC-Rome Processor",
"13",
"AuthenticAMD",
"AMD EPYC-Rome Processor",
"14",
"AuthenticAMD",
"AMD EPYC-Rome Processor",
"15",
"AuthenticAMD",
"AMD EPYC-Rome Processor"
],
"ansible_processor_cores": 1,
"ansible_processor_count": 16,
"ansible_processor_nproc": 16,
"ansible_processor_threads_per_core": 1,
"ansible_processor_vcpus": 16,
"ansible_product_name": "NA",
"ansible_product_serial": "NA",
"ansible_product_uuid": "NA",
"ansible_product_version": "NA",
"ansible_python": {
"executable": "/usr/local/lib/zuul/ansible/9/bin/python",
"has_sslcontext": true,
"type": "cpython",
"version": {
"major": 3,
"micro": 14,
"minor": 11,
"releaselevel": "final",
"serial": 0
},
"version_info": [
3,
11,
14,
"final",
0
]
},
"ansible_python_version": "3.11.14",
"ansible_real_group_id": 0,
"ansible_real_user_id": 0,
"ansible_selinux": {
"status": "disabled"
},
"ansible_selinux_python_present": true,
"ansible_service_mgr": "bwrap",
"ansible_swapfree_mb": 0,
"ansible_swaptotal_mb": 0,
"ansible_system": "Linux",
"ansible_system_capabilities": "N/A",
"ansible_system_capabilities_enforced": "N/A",
"ansible_system_vendor": "NA",
"ansible_uptime_seconds": 47221601,
"ansible_user_dir": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work",
"ansible_user_gecos": "root",
"ansible_user_gid": 0,
"ansible_user_id": "root",
"ansible_user_shell": "/bin/bash",
"ansible_user_uid": 0,
"ansible_userspace_architecture": "x86_64",
"ansible_userspace_bits": "64",
"ansible_virtualization_role": "host",
"ansible_virtualization_tech_guest": [],
"ansible_virtualization_tech_host": [
"kvm"
],
"ansible_virtualization_type": "kvm",
"gather_subset": [
"all"
],
"module_setup": true
},
"changed": false,
"deprecations": [],
"warnings": []
}
},
"task": {
"duration": {
"end": "2026-07-09T00:44:32.727987Z",
"start": "2026-07-09T00:44:31.562807Z"
},
"id": "0242ac17-0010-fa48-92c2-00000000002a",
"name": "Gathering Facts"
}
},
{
"hosts": {
"localhost": {
"action": "include_role",
"changed": false,
"include_args": {
"name": "set-zuul-log-path-fact"
}
}
},
"role": {
"id": "0242ac17-0010-fa48-92c2-000000000006",
"name": "emit-job-header",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/emit-job-header"
},
"task": {
"duration": {
"end": "2026-07-09T00:44:32.755196Z",
"start": "2026-07-09T00:44:32.734528Z"
},
"id": "0242ac17-0010-fa48-92c2-000000000008",
"name": "Setup log path fact"
}
},
{
"hosts": {
"localhost": {
"action": "set_fact",
"ansible_facts": {
"zuul_log_path": "87a/oss/87af44eeea0646a68aee97da6965a1dd"
},
"changed": false
}
},
"role": {
"id": "0242ac17-0010-fa48-92c2-000000000054",
"name": "set-zuul-log-path-fact",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/set-zuul-log-path-fact"
},
"task": {
"duration": {
"end": "2026-07-09T00:44:32.800354Z",
"start": "2026-07-09T00:44:32.770167Z"
},
"id": "0242ac17-0010-fa48-92c2-000000000056",
"name": "Set log path for a build"
}
},
{
"hosts": {
"localhost": {
"action": "debug",
"changed": false,
"msg": "# Job Information\nAnsible Version: 2.16.18\nJob: atmosphere-common-molecule-secretgen-controller\nPipeline: check\nExecutor: 2d72f0692154\nTriggered by: https://github.com/vexxhost/atmosphere.common/pull/105\nEvent ID: 3587af00-7b2f-11f1-85ca-1612fc84f6b6\n"
}
},
"role": {
"id": "0242ac17-0010-fa48-92c2-000000000006",
"name": "emit-job-header",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/emit-job-header"
},
"task": {
"duration": {
"end": "2026-07-09T00:44:32.850251Z",
"start": "2026-07-09T00:44:32.808661Z"
},
"id": "0242ac17-0010-fa48-92c2-000000000009",
"name": "Print job information"
}
},
{
"hosts": {
"localhost": {
"action": "debug",
"changed": false,
"msg": "All items completed",
"results": [
{
"ansible_loop_var": "zj_item",
"changed": false,
"failed": false,
"msg": "# Node Information\nInventory Hostname: controller\nHostname: np0000184532\nUsername: zuul\nDistro: Ubuntu 24.04\nProvider: yul1\nRegion: ca-ymq-1\nLabel: ubuntu-noble\nProduct Name: OpenStack Nova\nInterface IP: 199.204.45.89\n",
"zj_item": "controller"
}
]
}
},
"role": {
"id": "0242ac17-0010-fa48-92c2-000000000006",
"name": "emit-job-header",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/emit-job-header"
},
"task": {
"duration": {
"end": "2026-07-09T00:44:32.951866Z",
"start": "2026-07-09T00:44:32.854154Z"
},
"id": "0242ac17-0010-fa48-92c2-00000000000a",
"name": "Print node information"
}
},
{
"hosts": {
"localhost": {
"action": "file",
"changed": true,
"diff": {
"after": {
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs/zuul-info",
"state": "directory"
},
"before": {
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs/zuul-info",
"state": "absent"
}
},
"gid": 0,
"group": "root",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": 493,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs/zuul-info",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0755",
"owner": "root",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs/zuul-info",
"size": 4096,
"state": "directory",
"uid": 0
}
},
"role": {
"id": "0242ac17-0010-fa48-92c2-00000000000d",
"name": "log-inventory",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/log-inventory"
},
"task": {
"duration": {
"end": "2026-07-09T00:44:33.341743Z",
"start": "2026-07-09T00:44:32.962440Z"
},
"id": "0242ac17-0010-fa48-92c2-00000000000f",
"name": "Ensure Zuul Ansible directory exists"
}
},
{
"hosts": {
"localhost": {
"action": "copy",
"changed": true,
"checksum": "304fed1ee873b0e657f6dfb73c1a110354d19468",
"dest": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs/zuul-info/inventory.yaml",
"diff": [],
"gid": 0,
"group": "root",
"invocation": {
"module_args": {
"_original_basename": "inventory.yaml",
"attributes": null,
"backup": false,
"checksum": "304fed1ee873b0e657f6dfb73c1a110354d19468",
"content": null,
"dest": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs/zuul-info",
"directory_mode": null,
"follow": false,
"force": true,
"group": null,
"local_follow": null,
"mode": 420,
"owner": null,
"remote_src": null,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/.ansible/tmp/ansible-tmp-1783557873.3780088-84-114159435306632/source",
"unsafe_writes": false,
"validate": null
}
},
"md5sum": "27f981be3ebfe44527b1b06e831de91a",
"mode": "0644",
"owner": "root",
"size": 254349,
"src": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/.ansible/tmp/ansible-tmp-1783557873.3780088-84-114159435306632/source",
"state": "file",
"uid": 0
}
},
"role": {
"id": "0242ac17-0010-fa48-92c2-00000000000d",
"name": "log-inventory",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/log-inventory"
},
"task": {
"duration": {
"end": "2026-07-09T00:44:34.156635Z",
"start": "2026-07-09T00:44:33.349648Z"
},
"id": "0242ac17-0010-fa48-92c2-000000000010",
"name": "Copy ansible inventory to logs dir"
}
}
]
},
{
"play": {
"duration": {
"end": "2026-07-09T00:44:41.301424Z",
"start": "2026-07-09T00:44:34.165157Z"
},
"id": "0242ac17-0010-fa48-92c2-000000000011",
"name": "all"
},
"tasks": [
{
"hosts": {
"controller": {
"action": "stat",
"changed": false,
"failed_when_result": false,
"invocation": {
"module_args": {
"checksum_algorithm": "sha1",
"follow": false,
"get_attributes": true,
"get_checksum": true,
"get_mime": true,
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/87af44eeea0646a68aee97da6965a1dd_id_rsa"
}
},
"stat": {
"exists": false
}
}
},
"role": {
"id": "0242ac17-0010-fa48-92c2-000000000016",
"name": "add-build-sshkey",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey"
},
"task": {
"duration": {
"end": "2026-07-09T00:44:34.391385Z",
"start": "2026-07-09T00:44:34.173874Z"
},
"id": "0242ac17-0010-fa48-92c2-000000000018",
"name": "Check to see if ssh key was already created for this build"
}
},
{
"hosts": {
"controller": {
"action": "include_tasks",
"changed": false,
"include": "create-key-and-replace.yaml",
"include_args": {}
}
},
"role": {
"id": "0242ac17-0010-fa48-92c2-000000000016",
"name": "add-build-sshkey",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey"
},
"task": {
"duration": {
"end": "2026-07-09T00:44:34.436056Z",
"start": "2026-07-09T00:44:34.401174Z"
},
"id": "0242ac17-0010-fa48-92c2-000000000019",
"name": "Create a new key in workspace based on build UUID"
}
},
{
"hosts": {
"controller": {
"action": "command",
"changed": true,
"cmd": [
"ssh-keygen",
"-t",
"rsa",
"-N",
"",
"-C",
"zuul-build-sshkey",
"-f",
"/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/87af44eeea0646a68aee97da6965a1dd_id_rsa",
"-b",
"3072"
],
"delta": "0:00:00.799597",
"end": "2026-07-09 00:44:35.602095",
"invocation": {
"module_args": {
"_raw_params": "ssh-keygen -t rsa -N '' -C 'zuul-build-sshkey' -f /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/87af44eeea0646a68aee97da6965a1dd_id_rsa -b 3072",
"_uses_shell": false,
"argv": null,
"chdir": null,
"creates": null,
"executable": null,
"expand_argument_vars": true,
"removes": null,
"stdin": null,
"stdin_add_newline": true,
"strip_empty_ends": true,
"zuul_ansible_split_streams": false,
"zuul_log_id": "0242ac17-0010-fa48-92c2-00000000009c-0-controller",
"zuul_no_log": false,
"zuul_output_max_bytes": 1073741824
}
},
"msg": "",
"rc": 0,
"start": "2026-07-09 00:44:34.802498",
"stderr": "",
"stderr_lines": [],
"stdout": "Generating public/private rsa key pair.\nYour identification has been saved in /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/87af44eeea0646a68aee97da6965a1dd_id_rsa\nYour public key has been saved in /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/87af44eeea0646a68aee97da6965a1dd_id_rsa.pub\nThe key fingerprint is:\nSHA256:Ai82FvTL/a2+ruYr+VE6aKSL2BDSZ2NpbKQQOkCRZHw zuul-build-sshkey\nThe key's randomart image is:\n+---[RSA 3072]----+\n|*=o . |\n|++ E . |\n|+ . + . |\n| + + * o |\n|o o # * S . |\n|.. O * o + . |\n|. . o.+ . . |\n| + . oo .o . |\n|. o . ====. |\n+----[SHA256]-----+",
"stdout_lines": [
"Generating public/private rsa key pair.",
"Your identification has been saved in /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/87af44eeea0646a68aee97da6965a1dd_id_rsa",
"Your public key has been saved in /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/87af44eeea0646a68aee97da6965a1dd_id_rsa.pub",
"The key fingerprint is:",
"SHA256:Ai82FvTL/a2+ruYr+VE6aKSL2BDSZ2NpbKQQOkCRZHw zuul-build-sshkey",
"The key's randomart image is:",
"+---[RSA 3072]----+",
"|*=o . |",
"|++ E . |",
"|+ . + . |",
"| + + * o |",
"|o o # * S . |",
"|.. O * o + . |",
"|. . o.+ . . |",
"| + . oo .o . |",
"|. o . ====. |",
"+----[SHA256]-----+"
],
"zuul_log_id": "0242ac17-0010-fa48-92c2-00000000009c-0-controller"
}
},
"role": {
"id": "0242ac17-0010-fa48-92c2-000000000016",
"name": "add-build-sshkey",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey"
},
"task": {
"duration": {
"end": "2026-07-09T00:44:35.658762Z",
"start": "2026-07-09T00:44:34.456268Z"
},
"id": "0242ac17-0010-fa48-92c2-00000000009c",
"name": "Create Temp SSH key"
}
},
{
"hosts": {
"controller": {
"action": "include_tasks",
"changed": false,
"include": "remote-linux.yaml",
"include_args": {}
}
},
"role": {
"id": "0242ac17-0010-fa48-92c2-000000000016",
"name": "add-build-sshkey",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey"
},
"task": {
"duration": {
"end": "2026-07-09T00:44:35.699492Z",
"start": "2026-07-09T00:44:35.664639Z"
},
"id": "0242ac17-0010-fa48-92c2-00000000009d",
"name": "Remote setup ssh keys (linux)"
}
},
{
"hosts": {
"controller": {
"action": "lineinfile",
"changed": false,
"false_condition": "zuul_build_sshkey_cleanup",
"skip_reason": "Conditional result was False",
"skipped": true
}
},
"role": {
"id": "0242ac17-0010-fa48-92c2-000000000016",
"name": "add-build-sshkey",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey"
},
"task": {
"duration": {
"end": "2026-07-09T00:44:35.741423Z",
"start": "2026-07-09T00:44:35.716014Z"
},
"id": "0242ac17-0010-fa48-92c2-0000000000bc",
"name": "Remove previously added zuul-build-sshkey"
}
},
{
"hosts": {
"controller": {
"action": "authorized_key",
"changed": true,
"comment": null,
"exclusive": false,
"follow": false,
"invocation": {
"module_args": {
"changed": true,
"comment": null,
"exclusive": false,
"follow": false,
"key": "ssh-rsa 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 zuul-build-sshkey",
"key_options": null,
"keyfile": "/home/zuul/.ssh/authorized_keys",
"manage_dir": true,
"path": null,
"state": "present",
"user": "zuul",
"validate_certs": true
}
},
"key": "ssh-rsa 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 zuul-build-sshkey",
"key_options": null,
"keyfile": "/home/zuul/.ssh/authorized_keys",
"manage_dir": true,
"path": null,
"state": "present",
"user": "zuul",
"validate_certs": true
}
},
"role": {
"id": "0242ac17-0010-fa48-92c2-000000000016",
"name": "add-build-sshkey",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey"
},
"task": {
"duration": {
"end": "2026-07-09T00:44:36.281603Z",
"start": "2026-07-09T00:44:35.751563Z"
},
"id": "0242ac17-0010-fa48-92c2-0000000000bd",
"name": "Enable access via build key on all nodes"
}
},
{
"hosts": {
"controller": {
"action": "file",
"changed": false,
"diff": {
"after": {
"path": "/home/zuul/.ssh"
},
"before": {
"path": "/home/zuul/.ssh"
}
},
"gid": 1000,
"group": "zuul",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": 448,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/home/zuul/.ssh",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0700",
"owner": "zuul",
"path": "/home/zuul/.ssh",
"size": 4096,
"state": "directory",
"uid": 1000
}
},
"role": {
"id": "0242ac17-0010-fa48-92c2-000000000016",
"name": "add-build-sshkey",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey"
},
"task": {
"duration": {
"end": "2026-07-09T00:44:36.514398Z",
"start": "2026-07-09T00:44:36.287282Z"
},
"id": "0242ac17-0010-fa48-92c2-0000000000be",
"name": "Make sure user has a .ssh"
}
},
{
"hosts": {
"controller": {
"action": "copy",
"changed": true,
"checksum": "6b558e7bf4026996906abbf992a3a1f8876bf386",
"dest": "/home/zuul/.ssh/id_rsa",
"diff": [],
"gid": 1000,
"group": "zuul",
"invocation": {
"module_args": {
"_original_basename": "87af44eeea0646a68aee97da6965a1dd_id_rsa",
"attributes": null,
"backup": false,
"checksum": "6b558e7bf4026996906abbf992a3a1f8876bf386",
"content": null,
"dest": "/home/zuul/.ssh/id_rsa",
"directory_mode": null,
"follow": false,
"force": false,
"group": null,
"local_follow": null,
"mode": 384,
"owner": null,
"remote_src": null,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": "/home/zuul/.ansible/tmp/ansible-tmp-1783557876.5647068-190-91010209428680/source",
"unsafe_writes": false,
"validate": null
}
},
"md5sum": "4529b8392138a9b9f7a5a1134d73a9d3",
"mode": "0600",
"owner": "zuul",
"size": 2602,
"src": "/home/zuul/.ansible/tmp/ansible-tmp-1783557876.5647068-190-91010209428680/source",
"state": "file",
"uid": 1000
}
},
"role": {
"id": "0242ac17-0010-fa48-92c2-000000000016",
"name": "add-build-sshkey",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey"
},
"task": {
"duration": {
"end": "2026-07-09T00:44:37.069455Z",
"start": "2026-07-09T00:44:36.521647Z"
},
"id": "0242ac17-0010-fa48-92c2-0000000000bf",
"name": "Install build private key as SSH key on all nodes"
}
},
{
"hosts": {
"controller": {
"action": "copy",
"changed": true,
"checksum": "76d778ea29d2c51424f1d83de1177e031762dfe7",
"dest": "/home/zuul/.ssh/id_rsa.pub",
"diff": [],
"gid": 1000,
"group": "zuul",
"invocation": {
"module_args": {
"_original_basename": "87af44eeea0646a68aee97da6965a1dd_id_rsa.pub",
"attributes": null,
"backup": false,
"checksum": "76d778ea29d2c51424f1d83de1177e031762dfe7",
"content": null,
"dest": "/home/zuul/.ssh/id_rsa.pub",
"directory_mode": null,
"follow": false,
"force": false,
"group": null,
"local_follow": null,
"mode": 420,
"owner": null,
"remote_src": null,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": "/home/zuul/.ansible/tmp/ansible-tmp-1783557877.1164885-200-13078342593786/source",
"unsafe_writes": false,
"validate": null
}
},
"md5sum": "fa277dd5b9e2cda6647ff5f429ab494b",
"mode": "0644",
"owner": "zuul",
"size": 571,
"src": "/home/zuul/.ansible/tmp/ansible-tmp-1783557877.1164885-200-13078342593786/source",
"state": "file",
"uid": 1000
}
},
"role": {
"id": "0242ac17-0010-fa48-92c2-000000000016",
"name": "add-build-sshkey",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey"
},
"task": {
"duration": {
"end": "2026-07-09T00:44:37.622280Z",
"start": "2026-07-09T00:44:37.074394Z"
},
"id": "0242ac17-0010-fa48-92c2-0000000000c0",
"name": "Install build public key as SSH key on all nodes"
}
},
{
"hosts": {
"controller": {
"action": "include_tasks",
"changed": false,
"false_condition": "ansible_os_family == \"Windows\"",
"skip_reason": "Conditional result was False",
"skipped": true
}
},
"role": {
"id": "0242ac17-0010-fa48-92c2-000000000016",
"name": "add-build-sshkey",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey"
},
"task": {
"duration": {
"end": "2026-07-09T00:44:37.652230Z",
"start": "2026-07-09T00:44:37.627664Z"
},
"id": "0242ac17-0010-fa48-92c2-00000000009e",
"name": "Remote setup ssh keys (windows)"
}
},
{
"hosts": {
"controller": {
"action": "sshagent_remove_keys",
"changed": true,
"invocation": {
"module_args": {
"remove": "^(?!\\(stdin\\)).*"
}
},
"removed": [
"/etc/zuul/id_rsa"
]
}
},
"role": {
"id": "0242ac17-0010-fa48-92c2-0000000000a3",
"name": "remove-zuul-sshkey",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/remove-zuul-sshkey"
},
"task": {
"duration": {
"end": "2026-07-09T00:44:38.018022Z",
"start": "2026-07-09T00:44:37.663191Z"
},
"id": "0242ac17-0010-fa48-92c2-0000000000a5",
"name": "Remove master key from local agent"
}
},
{
"hosts": {
"controller": {
"action": "command",
"changed": true,
"cmd": [
"ssh-add",
"/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/87af44eeea0646a68aee97da6965a1dd_id_rsa"
],
"delta": "0:00:00.013397",
"end": "2026-07-09 00:44:38.255737",
"invocation": {
"module_args": {
"_raw_params": "ssh-add /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/87af44eeea0646a68aee97da6965a1dd_id_rsa",
"_uses_shell": false,
"argv": null,
"chdir": null,
"creates": null,
"executable": null,
"expand_argument_vars": true,
"removes": null,
"stdin": null,
"stdin_add_newline": true,
"strip_empty_ends": true,
"zuul_ansible_split_streams": false,
"zuul_log_id": "0242ac17-0010-fa48-92c2-0000000000ab-0-controller",
"zuul_no_log": false,
"zuul_output_max_bytes": 1073741824
}
},
"msg": "",
"rc": 0,
"start": "2026-07-09 00:44:38.242340",
"stderr": "",
"stderr_lines": [],
"stdout": "Identity added: /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/87af44eeea0646a68aee97da6965a1dd_id_rsa (zuul-build-sshkey)",
"stdout_lines": [
"Identity added: /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/87af44eeea0646a68aee97da6965a1dd_id_rsa (zuul-build-sshkey)"
],
"zuul_log_id": "0242ac17-0010-fa48-92c2-0000000000ab-0-controller"
}
},
"role": {
"id": "0242ac17-0010-fa48-92c2-000000000016",
"name": "add-build-sshkey",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey"
},
"task": {
"duration": {
"end": "2026-07-09T00:44:38.305071Z",
"start": "2026-07-09T00:44:38.033127Z"
},
"id": "0242ac17-0010-fa48-92c2-0000000000ab",
"name": "Add back temp key"
}
},
{
"hosts": {
"controller": {
"action": "ping",
"changed": false,
"invocation": {
"module_args": {
"data": "pong"
}
},
"ping": "pong"
}
},
"role": {
"id": "0242ac17-0010-fa48-92c2-000000000016",
"name": "add-build-sshkey",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey"
},
"task": {
"duration": {
"end": "2026-07-09T00:44:38.674068Z",
"start": "2026-07-09T00:44:38.310061Z"
},
"id": "0242ac17-0010-fa48-92c2-0000000000ac",
"name": "Verify we can still SSH to all nodes"
}
},
{
"hosts": {
"controller": {
"action": "command",
"changed": false,
"false_condition": "ansible_os_family == \"Windows\"",
"skip_reason": "Conditional result was False",
"skipped": true
}
},
"role": {
"id": "0242ac17-0010-fa48-92c2-000000000016",
"name": "add-build-sshkey",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey"
},
"task": {
"duration": {
"end": "2026-07-09T00:44:38.703935Z",
"start": "2026-07-09T00:44:38.679149Z"
},
"id": "0242ac17-0010-fa48-92c2-0000000000ad",
"name": "Verify we can still SSH to all nodes (windows)"
}
},
{
"hosts": {
"controller": {
"action": "zuul_console",
"changed": false,
"invocation": {
"module_args": {
"path": "/tmp/console-{log_uuid}.log",
"port": 19885,
"state": "present"
}
}
}
},
"role": {
"id": "0242ac17-0010-fa48-92c2-00000000001b",
"name": "prepare-workspace",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/prepare-workspace"
},
"task": {
"duration": {
"end": "2026-07-09T00:44:39.129923Z",
"start": "2026-07-09T00:44:38.714740Z"
},
"id": "0242ac17-0010-fa48-92c2-00000000001d",
"name": "Start zuul_console daemon."
}
},
{
"hosts": {
"controller": {
"action": "synchronize",
"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result",
"changed": true
}
},
"role": {
"id": "0242ac17-0010-fa48-92c2-00000000001b",
"name": "prepare-workspace",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/prepare-workspace"
},
"task": {
"duration": {
"end": "2026-07-09T00:44:40.030508Z",
"start": "2026-07-09T00:44:39.135634Z"
},
"id": "0242ac17-0010-fa48-92c2-00000000001e",
"name": "Synchronize src repos to workspace directory."
}
},
{
"hosts": {
"controller": {
"action": "file",
"changed": false,
"msg": "All items completed",
"results": [
{
"ansible_loop_var": "zj_output_dir",
"changed": false,
"failed": false,
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": null,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/home/zuul/zuul-output/logs",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "absent",
"unsafe_writes": false
}
},
"path": "/home/zuul/zuul-output/logs",
"state": "absent",
"zj_output_dir": "logs"
},
{
"ansible_loop_var": "zj_output_dir",
"changed": false,
"failed": false,
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": null,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/home/zuul/zuul-output/artifacts",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "absent",
"unsafe_writes": false
}
},
"path": "/home/zuul/zuul-output/artifacts",
"state": "absent",
"zj_output_dir": "artifacts"
},
{
"ansible_loop_var": "zj_output_dir",
"changed": false,
"failed": false,
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": null,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/home/zuul/zuul-output/docs",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "absent",
"unsafe_writes": false
}
},
"path": "/home/zuul/zuul-output/docs",
"state": "absent",
"zj_output_dir": "docs"
}
]
}
},
"role": {
"id": "0242ac17-0010-fa48-92c2-000000000020",
"name": "ensure-output-dirs",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/ensure-output-dirs"
},
"task": {
"duration": {
"end": "2026-07-09T00:44:40.686091Z",
"start": "2026-07-09T00:44:40.040410Z"
},
"id": "0242ac17-0010-fa48-92c2-000000000022",
"name": "Empty Zuul Output directories by removing them"
}
},
{
"hosts": {
"controller": {
"action": "file",
"changed": true,
"msg": "All items completed",
"results": [
{
"ansible_loop_var": "zj_output_dir",
"changed": true,
"diff": {
"after": {
"mode": "0755",
"path": "/home/zuul/zuul-output/logs",
"state": "directory"
},
"before": {
"mode": "0775",
"path": "/home/zuul/zuul-output/logs",
"state": "absent"
}
},
"failed": false,
"gid": 1000,
"group": "zuul",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": 493,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/home/zuul/zuul-output/logs",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0755",
"owner": "zuul",
"path": "/home/zuul/zuul-output/logs",
"size": 4096,
"state": "directory",
"uid": 1000,
"zj_output_dir": "logs"
},
{
"ansible_loop_var": "zj_output_dir",
"changed": true,
"diff": {
"after": {
"mode": "0755",
"path": "/home/zuul/zuul-output/artifacts",
"state": "directory"
},
"before": {
"mode": "0775",
"path": "/home/zuul/zuul-output/artifacts",
"state": "absent"
}
},
"failed": false,
"gid": 1000,
"group": "zuul",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": 493,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/home/zuul/zuul-output/artifacts",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0755",
"owner": "zuul",
"path": "/home/zuul/zuul-output/artifacts",
"size": 4096,
"state": "directory",
"uid": 1000,
"zj_output_dir": "artifacts"
},
{
"ansible_loop_var": "zj_output_dir",
"changed": true,
"diff": {
"after": {
"mode": "0755",
"path": "/home/zuul/zuul-output/docs",
"state": "directory"
},
"before": {
"mode": "0775",
"path": "/home/zuul/zuul-output/docs",
"state": "absent"
}
},
"failed": false,
"gid": 1000,
"group": "zuul",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": 493,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/home/zuul/zuul-output/docs",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0755",
"owner": "zuul",
"path": "/home/zuul/zuul-output/docs",
"size": 4096,
"state": "directory",
"uid": 1000,
"zj_output_dir": "docs"
}
]
}
},
"role": {
"id": "0242ac17-0010-fa48-92c2-000000000020",
"name": "ensure-output-dirs",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/ensure-output-dirs"
},
"task": {
"duration": {
"end": "2026-07-09T00:44:41.301424Z",
"start": "2026-07-09T00:44:40.696476Z"
},
"id": "0242ac17-0010-fa48-92c2-000000000024",
"name": "Ensure Zuul Output directories exist"
}
}
]
}
],
"stats": {
"controller": {
"changed": 8,
"failures": 0,
"ignored": 0,
"ok": 15,
"rescued": 0,
"skipped": 3,
"unreachable": 0
},
"localhost": {
"changed": 2,
"failures": 0,
"ignored": 0,
"ok": 6,
"rescued": 0,
"skipped": 0,
"unreachable": 0
}
},
"trusted": true
},
{
"branch": "main",
"index": "1",
"phase": "pre",
"playbook": "github.com/vexxhost/zuul-jobs/playbooks/molecule/pre.yaml",
"plays": [
{
"play": {
"duration": {
"end": "2026-07-09T00:44:45.534437Z",
"start": "2026-07-09T00:44:42.023735Z"
},
"id": "0242ac17-0010-ba36-ec3e-000000000002",
"name": "all"
},
"tasks": [
{
"hosts": {
"controller": {
"action": "ansible.builtin.unarchive",
"changed": true,
"dest": "/usr/local/bin",
"extract_results": {
"cmd": [
"/usr/bin/tar",
"--extract",
"-C",
"/usr/local/bin",
"-z",
"--show-transformed-names",
"--strip-components=1",
"-f",
"/home/zuul/.ansible/tmp/ansible-tmp-1783557882.0777187-5-235583376491925/uv-x86_64-unknown-linux-gnup6ugsyav.tar.gz"
],
"err": "",
"out": "",
"rc": 0
},
"gid": 0,
"group": "root",
"handler": "TgzArchive",
"invocation": {
"module_args": {
"attributes": null,
"copy": true,
"creates": "/usr/local/bin/uv",
"decrypt": true,
"dest": "/usr/local/bin",
"exclude": [],
"extra_opts": [
"--strip-components=1"
],
"group": null,
"include": [],
"io_buffer_size": 65536,
"keep_newer": false,
"list_files": false,
"mode": null,
"owner": null,
"remote_src": true,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": "https://github.com/astral-sh/uv/releases/download/0.8.13/uv-x86_64-unknown-linux-gnu.tar.gz",
"unsafe_writes": false,
"validate_certs": true
}
},
"mode": "0755",
"owner": "root",
"size": 4096,
"src": "/home/zuul/.ansible/tmp/ansible-tmp-1783557882.0777187-5-235583376491925/uv-x86_64-unknown-linux-gnup6ugsyav.tar.gz",
"state": "directory",
"uid": 0
}
},
"role": {
"id": "0242ac17-0010-ba36-ec3e-000000000005",
"name": "setup-uv",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/untrusted/project_0/github.com/vexxhost/zuul-jobs/roles/setup-uv"
},
"task": {
"duration": {
"end": "2026-07-09T00:44:44.573198Z",
"start": "2026-07-09T00:44:42.035385Z"
},
"id": "0242ac17-0010-ba36-ec3e-000000000007",
"name": "Extract archive"
}
},
{
"hosts": {
"controller": {
"action": "ansible.builtin.command",
"changed": true,
"cmd": [
"/usr/local/bin/uv",
"--version"
],
"delta": "0:00:00.015134",
"end": "2026-07-09 00:44:43.809389",
"invocation": {
"module_args": {
"_raw_params": "/usr/local/bin/uv --version",
"_uses_shell": false,
"argv": null,
"chdir": null,
"creates": null,
"executable": null,
"expand_argument_vars": true,
"removes": null,
"stdin": null,
"stdin_add_newline": true,
"strip_empty_ends": true,
"zuul_ansible_split_streams": false,
"zuul_log_id": "0242ac17-0010-ba36-ec3e-000000000008-1-controller",
"zuul_no_log": false,
"zuul_output_max_bytes": 1073741824
}
},
"msg": "",
"rc": 0,
"start": "2026-07-09 00:44:43.794255",
"stderr": "",
"stderr_lines": [],
"stdout": "uv 0.8.13",
"stdout_lines": [
"uv 0.8.13"
],
"zuul_log_id": "0242ac17-0010-ba36-ec3e-000000000008-1-controller"
}
},
"role": {
"id": "0242ac17-0010-ba36-ec3e-000000000005",
"name": "setup-uv",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/untrusted/project_0/github.com/vexxhost/zuul-jobs/roles/setup-uv"
},
"task": {
"duration": {
"end": "2026-07-09T00:44:45.122086Z",
"start": "2026-07-09T00:44:44.602232Z"
},
"id": "0242ac17-0010-ba36-ec3e-000000000008",
"name": "Print version"
}
},
{
"hosts": {
"controller": {
"action": "molecule_install_galaxy_sibling_collections",
"changed": false,
"checkouts": [],
"installed": [],
"invocation": {
"module_args": {
"build_refs": [
{
"branch": "main",
"change": "105",
"change_message": "chore(deps): update helm release cert-manager to v1.21.0\n\nThis PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n| [cert-manager](https://cert-manager.io) ([source](https://redirect.github.com/cert-manager/cert-manager)) | minor | `1.18.2` \u2192 `1.21.0` |\n\n---\n\n### Release Notes\n\n\ncert-manager/cert-manager (cert-manager)
\n\n### [`v1.21.0`](https://redirect.github.com/cert-manager/cert-manager/compare/v1.20.3...v1.21.0)\n\n[Compare Source](https://redirect.github.com/cert-manager/cert-manager/compare/v1.20.3...v1.21.0-alpha.1)\n\n### [`v1.20.3`](https://redirect.github.com/cert-manager/cert-manager/releases/tag/v1.20.3)\n\n[Compare Source](https://redirect.github.com/cert-manager/cert-manager/compare/v1.20.2...v1.20.3)\n\ncert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\n\nThis patch release fixes a security issue ([`GHSA-8rvj-mm4h-c258`](https://redirect.github.com/cert-manager/cert-manager/security/advisories/GHSA-8rvj-mm4h-c258), HIGH) where the default `cert-manager-edit` aggregate ClusterRole granted namespace users permission to create ACME `Challenge` and `Order` resources directly. A user who could create a `Challenge` referencing a `ClusterIssuer` could supply attacker-controlled solver configuration while cert-manager loaded credentials from the `ClusterIssuer`'s namespace, bypassing Issuer solver selectors (`dnsZones`, `dnsNames`, `matchLabels`). With the acme-dns provider specifically, this could disclose DNS credentials to an attacker-controlled endpoint.\n\nThis release also removes the issuer owner reference from Challenges which was blocking Challenge garbage collection, and updates Go to fix reported CVEs.\n\nAll users should upgrade.\n\n> \\[!WARNING]\n> **Potentially breaking change:** The `cert-manager-edit` aggregate ClusterRole no longer grants `create` for `challenges.acme.cert-manager.io` or `create`, `patch`, `update` for `orders.acme.cert-manager.io`. These resources are internal to cert-manager's ACME workflow and are not intended to be created or modified directly by users. If you have tooling or workflows that create Challenge or Order resources directly (outside of the normal Certificate \u2192 CertificateRequest \u2192 Order \u2192 Challenge flow), you will need to grant those permissions explicitly.\n\n#### Changes by Kind\n\n##### Bug or Regression\n\n- Security (HIGH): Remove Challenge `create` and Order `create`, `patch`, `update` verbs from the `cert-manager-edit` aggregate ClusterRole ([`GHSA-8rvj-mm4h-c258`](https://redirect.github.com/cert-manager/cert-manager/security/advisories/GHSA-8rvj-mm4h-c258)). ([#8940](https://redirect.github.com/cert-manager/cert-manager/issues/8940), [@wallrj-cyberark](https://redirect.github.com/wallrj-cyberark))\n- Remove issuer owner reference from challenges blocking challenge garbage collection ([#8759](https://redirect.github.com/cert-manager/cert-manager/issues/8759), [@cert-manager-bot](https://redirect.github.com/cert-manager-bot))\n\n##### Other (Cleanup or Flake)\n\n- Bump go to 1.26.3, other deps to fix several govulncheck issues ([#8789](https://redirect.github.com/cert-manager/cert-manager/issues/8789), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n- Update Go to `v1.26.4` to fix CVE-2026-27145, CVE-2026-42504, and CVE-2026-42507 ([#8926](https://redirect.github.com/cert-manager/cert-manager/issues/8926), [@wallrj-cyberark](https://redirect.github.com/wallrj-cyberark))\n\n### [`v1.20.2`](https://redirect.github.com/cert-manager/cert-manager/releases/tag/v1.20.2)\n\n[Compare Source](https://redirect.github.com/cert-manager/cert-manager/compare/v1.20.1...v1.20.2)\n\ncert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\n\nv1.20.2 fixes invalid YAML generated in the Helm chart when both `webhook.config`\nand `webhook.volumes` are defined, and bumps Go to 1.26.2 along with dependencies\nto address reported vulnerabilities.\n\n##### Changes by Kind\n\n##### Bug or Regression\n\n- Helm: Fix invalid YAML generated when both `webhook.config` and `webhook.volumes` are defined. ([#8665](https://redirect.github.com/cert-manager/cert-manager/issues/8665), [@cert-manager-bot](https://redirect.github.com/cert-manager-bot))\n\n##### Other (Cleanup or Flake)\n\n- Bump go dependencies with reported vulnerabilities ([#8704](https://redirect.github.com/cert-manager/cert-manager/issues/8704), [@erikgb](https://redirect.github.com/erikgb))\n- Bump go to 1.26.2 ([#8703](https://redirect.github.com/cert-manager/cert-manager/issues/8703), [@erikgb](https://redirect.github.com/erikgb))\n\n### [`v1.20.1`](https://redirect.github.com/cert-manager/cert-manager/releases/tag/v1.20.1)\n\n[Compare Source](https://redirect.github.com/cert-manager/cert-manager/compare/v1.20.0...v1.20.1)\n\ncert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\n\nv1.20.1 fixes an issue for OpenShift users that has to do with the finalizer RBAC, bumps gRPC to address a reported non-affecting vulnerability, and fixes a duplicate `parentRef` bug when both issuer config and annotations are present (Gateway API).\n\n##### Bug or Regression\n\n- Fixed duplicate `parentRef` bug when both issuer config and annotations are present. ([#8658](https://redirect.github.com/cert-manager/cert-manager/issues/8658), [@hjoshi123](https://redirect.github.com/hjoshi123))\n- Add missing issuer finalizer RBAC to the order controller to support owner references. This was preventing OpenShift users from being able to upgrade to v1.20.0. ([#8655](https://redirect.github.com/cert-manager/cert-manager/issues/8655), [@erikgb](https://redirect.github.com/erikgb))\n- Bump google.golang.org/grpc to fix vulnerability reported by scanners. This isn't a vulnerability that affects cert-manager, but we are bumping it because it is reported by scanners. ([#8657](https://redirect.github.com/cert-manager/cert-manager/issues/8657), [@erikgb](https://redirect.github.com/erikgb))\n\n### [`v1.20.0`](https://redirect.github.com/cert-manager/cert-manager/releases/tag/v1.20.0)\n\n[Compare Source](https://redirect.github.com/cert-manager/cert-manager/compare/v1.19.6...v1.20.0)\n\ncert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\n\nv1.20.0 adds alpha support for the new ListenerSet resource, adds support for Azure Private DNS; parentRefs are no longer required when using ACME with Gateway API, and OtherNames was promoted to Beta.\n\n##### Changes by Kind\n\n##### Feature\n\n- Added a set of flags to permit setting NetworkPolicy across all deployed containers. Remove redundant global IP ranges from example policies. ([#8370](https://redirect.github.com/cert-manager/cert-manager/issues/8370), [@jcpunk](https://redirect.github.com/jcpunk))\n- Added selectable fields to custom resource definitions for .spec.issuerRef.{group, kind, name} ([#8256](https://redirect.github.com/cert-manager/cert-manager/issues/8256), [@tareksha](https://redirect.github.com/tareksha))\n- Added support for specifying `imagePullSecrets` in the `startupapicheck-job` Helm template to enable pulling images from private registries. ([#8186](https://redirect.github.com/cert-manager/cert-manager/issues/8186), [@mathieu-clnk](https://redirect.github.com/mathieu-clnk))\n- Added 'extraContainers' helm chart value, allowing the deployment of arbitrary sidecar containers within the cert-manager operator pod. This can be used to support, for e.g., AWS IAM Roles Anywhere for Route53 DNS01 verification. ([#8355](https://redirect.github.com/cert-manager/cert-manager/issues/8355), [@dancmeyers](https://redirect.github.com/dancmeyers))\n- Added `parentRef` override annotations on the Certificate resource. ([#8518](https://redirect.github.com/cert-manager/cert-manager/issues/8518), [@hjoshi123](https://redirect.github.com/hjoshi123))\n- Added support for azure private zones for dns01 issuer. ([#8494](https://redirect.github.com/cert-manager/cert-manager/issues/8494), [@hjoshi123](https://redirect.github.com/hjoshi123))\n- Added support for configuring PEM decoding size limits, allowing operators to handle larger certificates and keys. ([#7642](https://redirect.github.com/cert-manager/cert-manager/issues/7642), [@robertlestak](https://redirect.github.com/robertlestak))\n- Added support for unhealthyPodEvictionPolicy in PodDisruptionBudget ([#7728](https://redirect.github.com/cert-manager/cert-manager/issues/7728), [@jcpunk](https://redirect.github.com/jcpunk))\n- For Venafi provider, read `venafi.cert-manager.io/custom-fields` annotation on Issuer/ClusterIssuer and use it as base with override/append capabilities on Certificate level. ([#8301](https://redirect.github.com/cert-manager/cert-manager/issues/8301), [@k0da](https://redirect.github.com/k0da))\n- Improve error message when CA issuers are misconfigured to use a clashing secret name ([#8374](https://redirect.github.com/cert-manager/cert-manager/issues/8374), [@majiayu000](https://redirect.github.com/majiayu000))\n- Introduce a new Ingress annotation `acme.cert-manager.io/http01-ingress-ingressclassname` to override `http01.ingress.ingressClassName` field in HTTP-01 challenge solvers. ([#8244](https://redirect.github.com/cert-manager/cert-manager/issues/8244), [@lunarwhite](https://redirect.github.com/lunarwhite))\n- Update `global.nodeSelector` to helm chart to perform a `merge` and allow for a single `nodeSelector` to be set across all services. ([#8195](https://redirect.github.com/cert-manager/cert-manager/issues/8195), [@StingRayZA](https://redirect.github.com/StingRayZA))\n- Vault issuers will now include the Vault server address as one of the default audiences on generated service account tokens. ([#8228](https://redirect.github.com/cert-manager/cert-manager/issues/8228), [@terinjokes](https://redirect.github.com/terinjokes))\n- Added experimental `XListenerSets` feature gate ([#8394](https://redirect.github.com/cert-manager/cert-manager/issues/8394), [@hjoshi123](https://redirect.github.com/hjoshi123))\n\n##### Documentation\n\n- Add GWAPI documentation to NOTES.TXT in helm chart ([#8353](https://redirect.github.com/cert-manager/cert-manager/issues/8353), [@jaxels10](https://redirect.github.com/jaxels10))\n\n##### Bug or Regression\n\n- Adds logs for cases when acme server returns us a fatal error in the order controller ([#8199](https://redirect.github.com/cert-manager/cert-manager/issues/8199), [@Peac36](https://redirect.github.com/Peac36))\n- Fixed an issue where kind or group in the issuerRef of a Certificate was omitted, upgrading to 1.19.x incorrectly caused the certificate to be renewed ([#8160](https://redirect.github.com/cert-manager/cert-manager/issues/8160), [@inteon](https://redirect.github.com/inteon))\n- Changes to the Duration and RenewBefore annotations on ingress and gateway-api resources will now trigger certificate updates. ([#8232](https://redirect.github.com/cert-manager/cert-manager/issues/8232), [@eleanor-merry](https://redirect.github.com/eleanor-merry))\n- Fix an issue where ACME challenge TXT records are not cleaned up when there are many resource records in CloudDNS. ([#8456](https://redirect.github.com/cert-manager/cert-manager/issues/8456), [@tkna](https://redirect.github.com/tkna))\n- Fix unregulated retries with the DigitalOcean DNS-01 solver\n Add full detailed DNS-01 errors to the events attached to the Challenge, for easier debugging ([#8221](https://redirect.github.com/cert-manager/cert-manager/issues/8221), [@wallrj-cyberark](https://redirect.github.com/wallrj-cyberark))\n- Fixed an infinite re-issuance loop that could occur when an issuer returns a certificate with a public key that doesn't match the CSR. The issuing controller now validates the certificate before storing it and fails with backoff on mismatch. ([#8403](https://redirect.github.com/cert-manager/cert-manager/issues/8403), [@calm329](https://redirect.github.com/calm329))\n- Fixed an issue where HTTP-01 challenges failed when the Host header contains an IPv6 address. This means that users can now issue IP address certificates for IPv6 address subjects. ([#8424](https://redirect.github.com/cert-manager/cert-manager/issues/8424), [@SlashNephy](https://redirect.github.com/SlashNephy))\n- Fixed the HTTP-01 Gateway solver creating invalid HTTPRoutes by not setting spec.hostnames when the challenge DNSName is an IP address. ([#8443](https://redirect.github.com/cert-manager/cert-manager/issues/8443), [@alviss7](https://redirect.github.com/alviss7))\n- Revert API defaults for issuer reference kind and group introduced in 0.19.0 ([#8173](https://redirect.github.com/cert-manager/cert-manager/issues/8173), [@erikgb](https://redirect.github.com/erikgb))\n- Security (MODERATE): Fix a potential panic in the cert-manager controller when a DNS response in an unexpected order was cached. If an attacker was able to modify DNS responses (or if they controlled the DNS server) it was possible to cause denial of service for the cert-manager controller. ([#8469](https://redirect.github.com/cert-manager/cert-manager/issues/8469), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n- Update Go to `v1.25.5` to fix `CVE-2025-61727` and `CVE-2025-61729` ([#8290](https://redirect.github.com/cert-manager/cert-manager/issues/8290), [@octo-sts](https://redirect.github.com/octo-sts)\\[bot])\n- When Prometheus monitoring is enabled, the metrics label is now set to the intended value of `cert-manager`. Previously, it was set depending on various factors (namespace cert-manager is installed in and/or Helm release name). ([#8162](https://redirect.github.com/cert-manager/cert-manager/issues/8162), [@LiquidPL](https://redirect.github.com/LiquidPL))\n\n##### Other (Cleanup or Flake)\n\n- Promoted the OtherNames feature to Beta and enabled it by default ([#8288](https://redirect.github.com/cert-manager/cert-manager/issues/8288), [@wallrj-cyberark](https://redirect.github.com/wallrj-cyberark))\n- Promoting `XListenerSets` feature gate to `ListenerSets` ([#8501](https://redirect.github.com/cert-manager/cert-manager/issues/8501), [@hjoshi123](https://redirect.github.com/hjoshi123))\n- Rebranding of the Venafi Issuer to CyberArk ([#8215](https://redirect.github.com/cert-manager/cert-manager/issues/8215), [@iossifbenbassat123](https://redirect.github.com/iossifbenbassat123))\n- Switched to SSA for challenge finalizer updates ([#8519](https://redirect.github.com/cert-manager/cert-manager/issues/8519), [@inteon](https://redirect.github.com/inteon))\n- The default container user (UID) is now 65532 (previously 1000) and the default container group (GID) is now 65532 (previously 0) ([#8408](https://redirect.github.com/cert-manager/cert-manager/issues/8408), [@wallrj-cyberark](https://redirect.github.com/wallrj-cyberark))\n- The feature-gate DefaultPrivateKeyRotationPolicyAlways moved from Beta to GA and can no longer be disabled. ([#8287](https://redirect.github.com/cert-manager/cert-manager/issues/8287), [@wallrj-cyberark](https://redirect.github.com/wallrj-cyberark))\n- Update cert-manager's ACME client, forked from golang/x/crypto ([#8268](https://redirect.github.com/cert-manager/cert-manager/issues/8268), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n- Use the latest version of Kyverno (1.16.2) in the best-practice installation tests ([#8389](https://redirect.github.com/cert-manager/cert-manager/issues/8389), [@wallrj-cyberark](https://redirect.github.com/wallrj-cyberark))\n- We stopped testing with Coutour due to it not supporting the new XListenerSet resource, and moved to kgateway. ([#8426](https://redirect.github.com/cert-manager/cert-manager/issues/8426), [@hjoshi123](https://redirect.github.com/hjoshi123))\n\n### [`v1.19.6`](https://redirect.github.com/cert-manager/cert-manager/releases/tag/v1.19.6)\n\n[Compare Source](https://redirect.github.com/cert-manager/cert-manager/compare/v1.19.5...v1.19.6)\n\ncert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\n\nThis patch release fixes a security issue ([`GHSA-8rvj-mm4h-c258`](https://redirect.github.com/cert-manager/cert-manager/security/advisories/GHSA-8rvj-mm4h-c258), HIGH) where the default `cert-manager-edit` aggregate ClusterRole granted namespace users permission to create ACME `Challenge` and `Order` resources directly. A user who could create a `Challenge` referencing a `ClusterIssuer` could supply attacker-controlled solver configuration while cert-manager loaded credentials from the `ClusterIssuer`'s namespace, bypassing Issuer solver selectors (`dnsZones`, `dnsNames`, `matchLabels`). With the acme-dns provider specifically, this could disclose DNS credentials to an attacker-controlled endpoint.\n\nThis release also includes Go version bumps to address reported CVEs. All users should upgrade.\n\n> \\[!WARNING]\n> **Potentially breaking change:** The `cert-manager-edit` aggregate ClusterRole no longer grants `create` for `challenges.acme.cert-manager.io` or `create`, `patch`, `update` for `orders.acme.cert-manager.io`. These resources are internal to cert-manager's ACME workflow and are not intended to be created or modified directly by users. If you have tooling or workflows that create Challenge or Order resources directly (outside of the normal Certificate \u2192 CertificateRequest \u2192 Order \u2192 Challenge flow), you will need to grant those permissions explicitly.\n\n##### Changes by Kind\n\n##### Bug or Regression\n\n- Security (HIGH): Remove Challenge `create` and Order `create`, `patch`, `update` verbs from the `cert-manager-edit` aggregate ClusterRole ([`GHSA-8rvj-mm4h-c258`](https://redirect.github.com/cert-manager/cert-manager/security/advisories/GHSA-8rvj-mm4h-c258)). ([#8941](https://redirect.github.com/cert-manager/cert-manager/pull/8941), [@wallrj-cyberark](https://redirect.github.com/wallrj-cyberark))\n\n##### Other (Cleanup or Flake)\n\n- Update Go to `v1.25.11` to fix CVE-2026-27145, CVE-2026-42504, and CVE-2026-42507 ([#8925](https://redirect.github.com/cert-manager/cert-manager/pull/8925), [@wallrj-cyberark](https://redirect.github.com/wallrj-cyberark))\n- Upgrade Go to 1.25.10 to fix reported vulnerabilities, along with other dependency bumps ([#8788](https://redirect.github.com/cert-manager/cert-manager/pull/8788), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n\n### [`v1.19.5`](https://redirect.github.com/cert-manager/cert-manager/releases/tag/v1.19.5)\n\n[Compare Source](https://redirect.github.com/cert-manager/cert-manager/compare/v1.19.4...v1.19.5)\n\ncert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\n\nThis is a simple patch release to fix some reported vulnerabilities. All users are recommended to upgrade.\n\n##### Changes by Kind\n\n##### Other (Cleanup or Flake)\n\n- Bump go dependencies with reported vulnerabilities ([#8706](https://redirect.github.com/cert-manager/cert-manager/pull/8706), [@erikgb](https://redirect.github.com/erikgb))\n- Bump go to 1.25.8 to address several reported vulnerabilities ([#8628](https://redirect.github.com/cert-manager/cert-manager/pull/8628), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n- Bump go to 1.25.9 ([#8705](https://redirect.github.com/cert-manager/cert-manager/pull/8705), [@erikgb](https://redirect.github.com/erikgb))\n\n### [`v1.19.4`](https://redirect.github.com/cert-manager/cert-manager/releases/tag/v1.19.4)\n\n[Compare Source](https://redirect.github.com/cert-manager/cert-manager/compare/v1.19.3...v1.19.4)\n\ncert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\n\nv1.19.4 is a simple patch release to fix some reported vulnerabilities - notably CVE-2026-24051 and CVE-2025-68121. All users should upgrade.\n\n##### Changes by Kind\n\n##### Bug or Regression\n\n- Bump go to address CVE-2025-68121 ([#8526](https://redirect.github.com/cert-manager/cert-manager/issues/8526), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n- Bump otel SDK to address GO-2026-4394 ([#8531](https://redirect.github.com/cert-manager/cert-manager/issues/8531), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n\n### [`v1.19.3`](https://redirect.github.com/cert-manager/cert-manager/releases/tag/v1.19.3)\n\n[Compare Source](https://redirect.github.com/cert-manager/cert-manager/compare/v1.19.2...v1.19.3)\n\ncert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\n\nThis release contains three bug fixes, including a fix for the MODERATE severity DoS issue in GHSA-gx3x-vq4p-mhhv. All users should upgrade to the latest release.\n\n##### Changes by Kind\n\n##### Bug or Regression\n\n- Fixed an infinite re-issuance loop that could occur when an issuer returns a certificate with a public key that doesn't match the CSR. The issuing controller now validates the certificate before storing it and fails with backoff on mismatch. ([#8415](https://redirect.github.com/cert-manager/cert-manager/issues/8415), [@cert-manager-bot](https://redirect.github.com/cert-manager-bot))\n- Fixed an issue where HTTP-01 challenges failed when the Host header contained an IPv6 address. This means that users can now issue IP address certificates for IPv6 address subjects. ([#8436](https://redirect.github.com/cert-manager/cert-manager/issues/8436), [@cert-manager-bot](https://redirect.github.com/cert-manager-bot))\n- Security (MODERATE): Fix a potential panic in the cert-manager controller when a DNS response in an unexpected order was cached. If an attacker was able to modify DNS responses (or if they controlled the DNS server) it was possible to cause denial of service for the cert-manager controller. ([#8468](https://redirect.github.com/cert-manager/cert-manager/issues/8468), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n\n##### Other (Cleanup or Flake)\n\n- Bump go to 1.25.6 ([#8459](https://redirect.github.com/cert-manager/cert-manager/issues/8459), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n\n### [`v1.19.2`](https://redirect.github.com/cert-manager/cert-manager/releases/tag/v1.19.2)\n\n[Compare Source](https://redirect.github.com/cert-manager/cert-manager/compare/v1.19.1...v1.19.2)\n\ncert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\n\nWe updated Go to fix some vulnerabilities in the standard library.\n\n> \ud83d\udcd6 Read the [full 1.19 release notes](https://cert-manager.io/docs/releases/release-notes/release-notes-1.19) on the cert-manager.io website before upgrading.\n\n##### Changes since `v1.19.1`\n\n##### Bug or Regression\n\n- Address false positive vulnerabilities `CVE-2025-47914` and `CVE-2025-58181` which were reported by Trivy. ([#8283](https://redirect.github.com/cert-manager/cert-manager/issues/8283), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n- Update Go to `v1.25.5` to fix `CVE-2025-61727` and `CVE-2025-61729` ([#8294](https://redirect.github.com/cert-manager/cert-manager/issues/8294), [@wallrj-cyberark](https://redirect.github.com/wallrj-cyberark))\n- Update `global.nodeSelector` to helm chart to perform a `merge` and allow for a single `nodeSelector` to be set across all services. ([#8233](https://redirect.github.com/cert-manager/cert-manager/issues/8233), [@cert-manager-bot](https://redirect.github.com/cert-manager-bot))\n\n##### Other (Cleanup or Flake)\n\n- Update cert-manager's ACME client, forked from `golang/x/crypto` ([#8270](https://redirect.github.com/cert-manager/cert-manager/issues/8270), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n- Updated Debian 12 distroless base images ([#8326](https://redirect.github.com/cert-manager/cert-manager/issues/8326), [@wallrj-cyberark](https://redirect.github.com/wallrj-cyberark))\n\n### [`v1.19.1`](https://redirect.github.com/cert-manager/cert-manager/releases/tag/v1.19.1)\n\n[Compare Source](https://redirect.github.com/cert-manager/cert-manager/compare/v1.19.0...v1.19.1)\n\ncert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\n\nWe reverted the CRD-based API defaults for `Certificate.Spec.IssuerRef` and `CertificateRequest.Spec.IssuerRef` after they were found to cause unexpected certificate renewals after upgrading to 1.19.0. We will try re-introducing these API defaults in cert-manager `1.20`.\nWe fixed a bug that caused certificates to be re-issued unexpectedly if the `issuerRef` kind or group was changed to one of the \"runtime\" default values.\nWe upgraded Go to `1.25.3` to address the following security vulnerabilities: `CVE-2025-61724`, `CVE-2025-58187`, `CVE-2025-47912`, `CVE-2025-58183`, `CVE-2025-61723`, `CVE-2025-58186`, `CVE-2025-58185`, `CVE-2025-58188`, and `CVE-2025-61725`.\n\n> \ud83d\udcd6 Read the [full 1.19 release notes](https://cert-manager.io/docs/releases/release-notes/release-notes-1.19) on the cert-manager.io website before upgrading.\n\nChanges since `v1.19.0`:\n\n##### Bug or Regression\n\n- BUGFIX: in case kind or group in the `issuerRef` of a Certificate was omitted, upgrading to `1.19.x` incorrectly caused the certificate to be renewed ([#8175](https://redirect.github.com/cert-manager/cert-manager/issues/8175), [@cert-manager-bot](https://redirect.github.com/cert-manager-bot))\n- Bump Go to 1.25.3 to fix a backwards incompatible change to the validation of DNS names in X.509 SAN fields which prevented the use of DNS names with a trailing dot ([#8177](https://redirect.github.com/cert-manager/cert-manager/issues/8177), [@wallrj-cyberark](https://redirect.github.com/wallrj-cyberark))\n- Revert API defaults for issuer reference kind and group introduced in 0.19.0 ([#8178](https://redirect.github.com/cert-manager/cert-manager/issues/8178), [@cert-manager-bot](https://redirect.github.com/cert-manager-bot))\n\n### [`v1.19.0`](https://redirect.github.com/cert-manager/cert-manager/releases/tag/v1.19.0)\n\n[Compare Source](https://redirect.github.com/cert-manager/cert-manager/compare/v1.18.6...v1.19.0)\n\ncert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\n\n> \u26a0\ufe0f **Known issues**: The following known issues are fixed in [v1.19.1](https://redirect.github.com/cert-manager/cert-manager/releases/tag/v1.19.1):\n>\n> - [Unexpected certificate renewal after upgrading to 1.19.0](https://redirect.github.com/cert-manager/cert-manager/issues/8158)\n\nThis release focuses on expanding platform compatibility, improving deployment flexibility, enhancing observability, and addressing key reliability issues.\n\n> \ud83d\udcd6 Read the full release notes at cert-manager.io: \n\nChanges since `v1.18.0`:\n\n##### Feature\n\n- Add IPv6 rules to the default network policy ([#7726](https://redirect.github.com/cert-manager/cert-manager/issues/7726), [@jcpunk](https://redirect.github.com/jcpunk))\n- Add `global.nodeSelector` to helm chart to allow for a single `nodeSelector` to be set across all services. ([#7818](https://redirect.github.com/cert-manager/cert-manager/issues/7818), [@StingRayZA](https://redirect.github.com/StingRayZA))\n- Add a feature gate to default to Ingress `pathType` `Exact` in ACME HTTP01 Ingress challenge solvers. ([#7795](https://redirect.github.com/cert-manager/cert-manager/issues/7795), [@sspreitzer](https://redirect.github.com/sspreitzer))\n- Add generated `applyconfigurations` allowing clients to make type-safe server-side apply requests for cert-manager resources. ([#7866](https://redirect.github.com/cert-manager/cert-manager/issues/7866), [@erikgb](https://redirect.github.com/erikgb))\n- Added API defaults to issuer references group (cert-manager.io) and kind (Issuer). ([#7414](https://redirect.github.com/cert-manager/cert-manager/issues/7414), [@erikgb](https://redirect.github.com/erikgb))\n- Added `certmanager_certificate_challenge_status` Prometheus metric. ([#7736](https://redirect.github.com/cert-manager/cert-manager/issues/7736), [@hjoshi123](https://redirect.github.com/hjoshi123))\n- Added `protocol` field for `rfc2136` DNS01 provider ([#7881](https://redirect.github.com/cert-manager/cert-manager/issues/7881), [@hjoshi123](https://redirect.github.com/hjoshi123))\n- Added experimental field `hostUsers` flag to all pods. Not set by default. ([#7973](https://redirect.github.com/cert-manager/cert-manager/issues/7973), [@hjoshi123](https://redirect.github.com/hjoshi123))\n- Support configurable resource requests and limits for ACME HTTP01 solver pods through ClusterIssuer and Issuer specifications, allowing granular resource management that overrides global `--acme-http01-solver-resource-*` settings. ([#7972](https://redirect.github.com/cert-manager/cert-manager/issues/7972), [@lunarwhite](https://redirect.github.com/lunarwhite))\n- The `CAInjectorMerging` feature has been promoted to BETA and is now enabled by default ([#8017](https://redirect.github.com/cert-manager/cert-manager/issues/8017), [@ThatsMrTalbot](https://redirect.github.com/ThatsMrTalbot))\n- The controller, webhook and ca-injector now log their version and git commit on startup for easier debugging and support. ([#8072](https://redirect.github.com/cert-manager/cert-manager/issues/8072), [@prasad89](https://redirect.github.com/prasad89))\n- Updated `certificate` metrics to the collector approach. ([#7856](https://redirect.github.com/cert-manager/cert-manager/issues/7856), [@hjoshi123](https://redirect.github.com/hjoshi123))\n\n##### Bug or Regression\n\n- ACME: Increased challenge authorization timeout to 2 minutes to fix `error waiting for authorization` ([#7796](https://redirect.github.com/cert-manager/cert-manager/issues/7796), [@hjoshi123](https://redirect.github.com/hjoshi123))\n- BUGFIX: permitted URI domains were incorrectly used to set the excluded URI domains in the CSR's name constraints ([#7816](https://redirect.github.com/cert-manager/cert-manager/issues/7816), [@kinolaev](https://redirect.github.com/kinolaev))\n- Enforced ACME HTTP-01 solver validation to properly reject configurations when multiple ingress options (`class`, `ingressClassName`, `name`) are specified simultaneously ([#8021](https://redirect.github.com/cert-manager/cert-manager/issues/8021), [@lunarwhite](https://redirect.github.com/lunarwhite))\n- Increase maximum sizes of PEM certificates and chains which can be parsed in cert-manager, to handle leaf certificates with large numbers of DNS names or other identities ([#7961](https://redirect.github.com/cert-manager/cert-manager/issues/7961), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n- Reverted adding the `global.rbac.disableHTTPChallengesRole` Helm option. ([#7836](https://redirect.github.com/cert-manager/cert-manager/issues/7836), [@inteon](https://redirect.github.com/inteon))\n- This change removes the `path` label of core ACME client metrics and will require users to update their monitoring dashboards and alerting rules if using those metrics. ([#8109](https://redirect.github.com/cert-manager/cert-manager/issues/8109), [@mladen-rusev-cyberark](https://redirect.github.com/mladen-rusev-cyberark))\n- Use the latest version of `ingress-nginx` in E2E tests to ensure compatibility ([#7792](https://redirect.github.com/cert-manager/cert-manager/issues/7792), [@wallrj](https://redirect.github.com/wallrj))\n\n##### Other (Cleanup or Flake)\n\n- Helm: Fix naming template of `tokenrequest` RoleBinding resource to improve consistency ([#7761](https://redirect.github.com/cert-manager/cert-manager/issues/7761), [@lunarwhite](https://redirect.github.com/lunarwhite))\n- Improve error messages when certificates, CRLs or private keys fail admission due to malformed or missing PEM data ([#7928](https://redirect.github.com/cert-manager/cert-manager/issues/7928), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n- Major upgrade of Akamai SDK. NOTE: The new version has not been fully tested end-to-end due to the lack of cloud infrastructure. ([#8003](https://redirect.github.com/cert-manager/cert-manager/issues/8003), [@hjoshi123](https://redirect.github.com/hjoshi123))\n- Update kind images to include the Kubernetes 1.33 node image ([#7786](https://redirect.github.com/cert-manager/cert-manager/issues/7786), [@wallrj](https://redirect.github.com/wallrj))\n- Use `maps.Copy` for cleaner map handling ([#8092](https://redirect.github.com/cert-manager/cert-manager/issues/8092), [@quantpoet](https://redirect.github.com/quantpoet))\n- Vault: Migrate Vault E2E add-on tests from deprecated `vault-client-go` to the new `vault/api` client. ([#8059](https://redirect.github.com/cert-manager/cert-manager/issues/8059), [@armagankaratosun](https://redirect.github.com/armagankaratosun))\n\n### [`v1.18.6`](https://redirect.github.com/cert-manager/cert-manager/releases/tag/v1.18.6)\n\n[Compare Source](https://redirect.github.com/cert-manager/cert-manager/compare/v1.18.5...v1.18.6)\n\ncert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\n\nv1.18.6 is a simple patch release to fix some reported vulnerabilities, most notably [CVE-2025-68121](https://nvd.nist.gov/vuln/detail/CVE-2025-68121).\n\nNB: We didn't attempt to patch [CVE-2026-24051](https://nvd.nist.gov/vuln/detail/CVE-2026-24051) but that vulnerability affects macOS only, so cert-manager will be unaffected.\n\n##### Changes by Kind\n\n##### Bug or Regression\n\n- Bump Go to address CVE-2025-68121 ([#8525](https://redirect.github.com/cert-manager/cert-manager/issues/8525), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n\n### [`v1.18.5`](https://redirect.github.com/cert-manager/cert-manager/releases/tag/v1.18.5)\n\n[Compare Source](https://redirect.github.com/cert-manager/cert-manager/compare/v1.18.4...v1.18.5)\n\ncert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\n\nThis release contains three bug fixes, including a fix for the MODERATE severity DoS issue in GHSA-gx3x-vq4p-mhhv. All users should upgrade to the latest release.\n\n##### Changes by Kind\n\n##### Bug or Regression\n\n- Fixed an infinite re-issuance loop that could occur when an issuer returns a certificate with a public key that doesn't match the CSR. The issuing controller now validates the certificate before storing it and fails with backoff on mismatch. ([#8414](https://redirect.github.com/cert-manager/cert-manager/issues/8414), [@cert-manager-bot](https://redirect.github.com/cert-manager-bot))\n- Fixed an issue where HTTP-01 challenges failed when the Host header contains an IPv6 address. This means that users can now issue IP address certificates for IPv6 address subjects. ([#8437](https://redirect.github.com/cert-manager/cert-manager/issues/8437), [@cert-manager-bot](https://redirect.github.com/cert-manager-bot))\n- Security (MODERATE): Fix a potential panic in the cert-manager controller when a DNS response in an unexpected order was cached. If an attacker was able to modify DNS responses (or if they controlled the DNS server) it was possible to cause denial of service for the cert-manager controller. ([#8467](https://redirect.github.com/cert-manager/cert-manager/issues/8467), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n\n##### Other (Cleanup or Flake)\n\n- Bump go to 1.24.12 ([#8460](https://redirect.github.com/cert-manager/cert-manager/issues/8460), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n\n### [`v1.18.4`](https://redirect.github.com/cert-manager/cert-manager/releases/tag/v1.18.4)\n\n[Compare Source](https://redirect.github.com/cert-manager/cert-manager/compare/v1.18.3...v1.18.4)\n\ncert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\n\nWe updated Go to fix some vulnerabilities in the standard library.\n\n> \ud83d\udcd6 Read the [full 1.18 release notes](https://cert-manager.io/docs/releases/release-notes/release-notes-1.18) on the cert-manager.io website before upgrading.\n\n##### Changes since `v1.18.3`\n\n##### Bug or Regression\n\n- Address false positive vulnerabilities `CVE-2025-47914` and `CVE-2025-58181` which were reported by Trivy. ([#8282](https://redirect.github.com/cert-manager/cert-manager/issues/8282), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n- Update Go to `v1.24.11` to fix `CVE-2025-61727` and `CVE-2025-61729` ([#8295](https://redirect.github.com/cert-manager/cert-manager/issues/8295), [@wallrj-cyberark](https://redirect.github.com/wallrj-cyberark))\n\n##### Other (Cleanup or Flake)\n\n- Update cert-manager's ACME client, forked from `golang/x/crypto` ([#8271](https://redirect.github.com/cert-manager/cert-manager/issues/8271), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n- Updated Debian 12 distroless base images ([#8328](https://redirect.github.com/cert-manager/cert-manager/issues/8328), [@wallrj-cyberark](https://redirect.github.com/wallrj-cyberark))\n\n### [`v1.18.3`](https://redirect.github.com/cert-manager/cert-manager/releases/tag/v1.18.3)\n\n[Compare Source](https://redirect.github.com/cert-manager/cert-manager/compare/v1.18.2...v1.18.3)\n\ncert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\n\nWe fixed a bug which caused certificates to be re-issued unexpectedly, if the issuerRef kind or group was changed to one of the \"runtime\" default values. We increased the size limit when parsing PEM certificate chains to handle leaf certificates with large numbers of DNS named or other identities. We upgraded Go to 1.24.9 to fix various non-critical security vulnerabilities.\n\n> \ud83d\udcd6 Read the [full 1.18 release notes](https://cert-manager.io/docs/releases/release-notes/release-notes-1.18) on the cert-manager.io website before upgrading.\n\nChanges since `v1.18.2`:\n\n##### Bug or Regression\n\n- BUGFIX: in case kind or group in the issuerRef of a Certificate was omitted, upgrading to 1.19.x incorrectly caused the certificate to be renewed ([#8174](https://redirect.github.com/cert-manager/cert-manager/issues/8174), [@cert-manager-bot](https://redirect.github.com/cert-manager-bot))\n- Bump Go to 1.24.9. Fixes the following vulnerabilities: CVE-2025-61724, CVE-2025-58187, CVE-2025-47912, CVE-2025-58183, CVE-2025-61723, CVE-2025-58186, CVE-2025-58185, CVE-2025-58188, CVE-2025-61725 ([#8176](https://redirect.github.com/cert-manager/cert-manager/issues/8176), [@wallrj-cyberark](https://redirect.github.com/wallrj-cyberark))\n- Increase maximum sizes of PEM certificates and chains which can be parsed in cert-manager, to handle leaf certificates with large numbers of DNS names or other identities ([#7966](https://redirect.github.com/cert-manager/cert-manager/issues/7966), [@cert-manager-bot](https://redirect.github.com/cert-manager-bot))\n\n##### Other (Cleanup or Flake)\n\n- Improve error messages when certificates, CRLs or private keys fail admission due to malformed or missing PEM data ([#7964](https://redirect.github.com/cert-manager/cert-manager/issues/7964), [@cert-manager-bot](https://redirect.github.com/cert-manager-bot))\n- Upgrades Go to v1.24.6 ([#7974](https://redirect.github.com/cert-manager/cert-manager/issues/7974), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n\n \n\n---\n\n### Configuration\n\n\ud83d\udcc5 **Schedule**: (UTC)\n\n- Branch creation\n - At any time (no schedule defined)\n- Automerge\n - At any time (no schedule defined)\n\n\ud83d\udea6 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.\n\n\u267b **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.\n\n\ud83d\udd15 **Ignore**: Close this PR and you won't be reminded about this update again.\n\n---\n\n - [ ] If you want to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/vexxhost/atmosphere.common).\n\n",
"change_url": "https://github.com/vexxhost/atmosphere.common/pull/105",
"commit_id": "092a2b1e53b1dc25d7c0e9ba5c315767b2f8b6b6",
"patchset": "092a2b1e53b1dc25d7c0e9ba5c315767b2f8b6b6",
"project": {
"canonical_hostname": "github.com",
"canonical_name": "github.com/vexxhost/atmosphere.common",
"name": "vexxhost/atmosphere.common",
"short_name": "atmosphere.common",
"src_dir": "src/github.com/vexxhost/atmosphere.common"
},
"src_dir": "src/github.com/vexxhost/atmosphere.common",
"topic": null
},
{
"branch": "main",
"change": "105",
"change_message": "chore(deps): update helm release cert-manager to v1.21.0\n\nThis PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n| [cert-manager](https://cert-manager.io) ([source](https://redirect.github.com/cert-manager/cert-manager)) | minor | `1.18.2` \u2192 `1.21.0` |\n\n---\n\n### Release Notes\n\n\ncert-manager/cert-manager (cert-manager)
\n\n### [`v1.21.0`](https://redirect.github.com/cert-manager/cert-manager/compare/v1.20.3...v1.21.0)\n\n[Compare Source](https://redirect.github.com/cert-manager/cert-manager/compare/v1.20.3...v1.21.0-alpha.1)\n\n### [`v1.20.3`](https://redirect.github.com/cert-manager/cert-manager/releases/tag/v1.20.3)\n\n[Compare Source](https://redirect.github.com/cert-manager/cert-manager/compare/v1.20.2...v1.20.3)\n\ncert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\n\nThis patch release fixes a security issue ([`GHSA-8rvj-mm4h-c258`](https://redirect.github.com/cert-manager/cert-manager/security/advisories/GHSA-8rvj-mm4h-c258), HIGH) where the default `cert-manager-edit` aggregate ClusterRole granted namespace users permission to create ACME `Challenge` and `Order` resources directly. A user who could create a `Challenge` referencing a `ClusterIssuer` could supply attacker-controlled solver configuration while cert-manager loaded credentials from the `ClusterIssuer`'s namespace, bypassing Issuer solver selectors (`dnsZones`, `dnsNames`, `matchLabels`). With the acme-dns provider specifically, this could disclose DNS credentials to an attacker-controlled endpoint.\n\nThis release also removes the issuer owner reference from Challenges which was blocking Challenge garbage collection, and updates Go to fix reported CVEs.\n\nAll users should upgrade.\n\n> \\[!WARNING]\n> **Potentially breaking change:** The `cert-manager-edit` aggregate ClusterRole no longer grants `create` for `challenges.acme.cert-manager.io` or `create`, `patch`, `update` for `orders.acme.cert-manager.io`. These resources are internal to cert-manager's ACME workflow and are not intended to be created or modified directly by users. If you have tooling or workflows that create Challenge or Order resources directly (outside of the normal Certificate \u2192 CertificateRequest \u2192 Order \u2192 Challenge flow), you will need to grant those permissions explicitly.\n\n#### Changes by Kind\n\n##### Bug or Regression\n\n- Security (HIGH): Remove Challenge `create` and Order `create`, `patch`, `update` verbs from the `cert-manager-edit` aggregate ClusterRole ([`GHSA-8rvj-mm4h-c258`](https://redirect.github.com/cert-manager/cert-manager/security/advisories/GHSA-8rvj-mm4h-c258)). ([#8940](https://redirect.github.com/cert-manager/cert-manager/issues/8940), [@wallrj-cyberark](https://redirect.github.com/wallrj-cyberark))\n- Remove issuer owner reference from challenges blocking challenge garbage collection ([#8759](https://redirect.github.com/cert-manager/cert-manager/issues/8759), [@cert-manager-bot](https://redirect.github.com/cert-manager-bot))\n\n##### Other (Cleanup or Flake)\n\n- Bump go to 1.26.3, other deps to fix several govulncheck issues ([#8789](https://redirect.github.com/cert-manager/cert-manager/issues/8789), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n- Update Go to `v1.26.4` to fix CVE-2026-27145, CVE-2026-42504, and CVE-2026-42507 ([#8926](https://redirect.github.com/cert-manager/cert-manager/issues/8926), [@wallrj-cyberark](https://redirect.github.com/wallrj-cyberark))\n\n### [`v1.20.2`](https://redirect.github.com/cert-manager/cert-manager/releases/tag/v1.20.2)\n\n[Compare Source](https://redirect.github.com/cert-manager/cert-manager/compare/v1.20.1...v1.20.2)\n\ncert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\n\nv1.20.2 fixes invalid YAML generated in the Helm chart when both `webhook.config`\nand `webhook.volumes` are defined, and bumps Go to 1.26.2 along with dependencies\nto address reported vulnerabilities.\n\n##### Changes by Kind\n\n##### Bug or Regression\n\n- Helm: Fix invalid YAML generated when both `webhook.config` and `webhook.volumes` are defined. ([#8665](https://redirect.github.com/cert-manager/cert-manager/issues/8665), [@cert-manager-bot](https://redirect.github.com/cert-manager-bot))\n\n##### Other (Cleanup or Flake)\n\n- Bump go dependencies with reported vulnerabilities ([#8704](https://redirect.github.com/cert-manager/cert-manager/issues/8704), [@erikgb](https://redirect.github.com/erikgb))\n- Bump go to 1.26.2 ([#8703](https://redirect.github.com/cert-manager/cert-manager/issues/8703), [@erikgb](https://redirect.github.com/erikgb))\n\n### [`v1.20.1`](https://redirect.github.com/cert-manager/cert-manager/releases/tag/v1.20.1)\n\n[Compare Source](https://redirect.github.com/cert-manager/cert-manager/compare/v1.20.0...v1.20.1)\n\ncert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\n\nv1.20.1 fixes an issue for OpenShift users that has to do with the finalizer RBAC, bumps gRPC to address a reported non-affecting vulnerability, and fixes a duplicate `parentRef` bug when both issuer config and annotations are present (Gateway API).\n\n##### Bug or Regression\n\n- Fixed duplicate `parentRef` bug when both issuer config and annotations are present. ([#8658](https://redirect.github.com/cert-manager/cert-manager/issues/8658), [@hjoshi123](https://redirect.github.com/hjoshi123))\n- Add missing issuer finalizer RBAC to the order controller to support owner references. This was preventing OpenShift users from being able to upgrade to v1.20.0. ([#8655](https://redirect.github.com/cert-manager/cert-manager/issues/8655), [@erikgb](https://redirect.github.com/erikgb))\n- Bump google.golang.org/grpc to fix vulnerability reported by scanners. This isn't a vulnerability that affects cert-manager, but we are bumping it because it is reported by scanners. ([#8657](https://redirect.github.com/cert-manager/cert-manager/issues/8657), [@erikgb](https://redirect.github.com/erikgb))\n\n### [`v1.20.0`](https://redirect.github.com/cert-manager/cert-manager/releases/tag/v1.20.0)\n\n[Compare Source](https://redirect.github.com/cert-manager/cert-manager/compare/v1.19.6...v1.20.0)\n\ncert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\n\nv1.20.0 adds alpha support for the new ListenerSet resource, adds support for Azure Private DNS; parentRefs are no longer required when using ACME with Gateway API, and OtherNames was promoted to Beta.\n\n##### Changes by Kind\n\n##### Feature\n\n- Added a set of flags to permit setting NetworkPolicy across all deployed containers. Remove redundant global IP ranges from example policies. ([#8370](https://redirect.github.com/cert-manager/cert-manager/issues/8370), [@jcpunk](https://redirect.github.com/jcpunk))\n- Added selectable fields to custom resource definitions for .spec.issuerRef.{group, kind, name} ([#8256](https://redirect.github.com/cert-manager/cert-manager/issues/8256), [@tareksha](https://redirect.github.com/tareksha))\n- Added support for specifying `imagePullSecrets` in the `startupapicheck-job` Helm template to enable pulling images from private registries. ([#8186](https://redirect.github.com/cert-manager/cert-manager/issues/8186), [@mathieu-clnk](https://redirect.github.com/mathieu-clnk))\n- Added 'extraContainers' helm chart value, allowing the deployment of arbitrary sidecar containers within the cert-manager operator pod. This can be used to support, for e.g., AWS IAM Roles Anywhere for Route53 DNS01 verification. ([#8355](https://redirect.github.com/cert-manager/cert-manager/issues/8355), [@dancmeyers](https://redirect.github.com/dancmeyers))\n- Added `parentRef` override annotations on the Certificate resource. ([#8518](https://redirect.github.com/cert-manager/cert-manager/issues/8518), [@hjoshi123](https://redirect.github.com/hjoshi123))\n- Added support for azure private zones for dns01 issuer. ([#8494](https://redirect.github.com/cert-manager/cert-manager/issues/8494), [@hjoshi123](https://redirect.github.com/hjoshi123))\n- Added support for configuring PEM decoding size limits, allowing operators to handle larger certificates and keys. ([#7642](https://redirect.github.com/cert-manager/cert-manager/issues/7642), [@robertlestak](https://redirect.github.com/robertlestak))\n- Added support for unhealthyPodEvictionPolicy in PodDisruptionBudget ([#7728](https://redirect.github.com/cert-manager/cert-manager/issues/7728), [@jcpunk](https://redirect.github.com/jcpunk))\n- For Venafi provider, read `venafi.cert-manager.io/custom-fields` annotation on Issuer/ClusterIssuer and use it as base with override/append capabilities on Certificate level. ([#8301](https://redirect.github.com/cert-manager/cert-manager/issues/8301), [@k0da](https://redirect.github.com/k0da))\n- Improve error message when CA issuers are misconfigured to use a clashing secret name ([#8374](https://redirect.github.com/cert-manager/cert-manager/issues/8374), [@majiayu000](https://redirect.github.com/majiayu000))\n- Introduce a new Ingress annotation `acme.cert-manager.io/http01-ingress-ingressclassname` to override `http01.ingress.ingressClassName` field in HTTP-01 challenge solvers. ([#8244](https://redirect.github.com/cert-manager/cert-manager/issues/8244), [@lunarwhite](https://redirect.github.com/lunarwhite))\n- Update `global.nodeSelector` to helm chart to perform a `merge` and allow for a single `nodeSelector` to be set across all services. ([#8195](https://redirect.github.com/cert-manager/cert-manager/issues/8195), [@StingRayZA](https://redirect.github.com/StingRayZA))\n- Vault issuers will now include the Vault server address as one of the default audiences on generated service account tokens. ([#8228](https://redirect.github.com/cert-manager/cert-manager/issues/8228), [@terinjokes](https://redirect.github.com/terinjokes))\n- Added experimental `XListenerSets` feature gate ([#8394](https://redirect.github.com/cert-manager/cert-manager/issues/8394), [@hjoshi123](https://redirect.github.com/hjoshi123))\n\n##### Documentation\n\n- Add GWAPI documentation to NOTES.TXT in helm chart ([#8353](https://redirect.github.com/cert-manager/cert-manager/issues/8353), [@jaxels10](https://redirect.github.com/jaxels10))\n\n##### Bug or Regression\n\n- Adds logs for cases when acme server returns us a fatal error in the order controller ([#8199](https://redirect.github.com/cert-manager/cert-manager/issues/8199), [@Peac36](https://redirect.github.com/Peac36))\n- Fixed an issue where kind or group in the issuerRef of a Certificate was omitted, upgrading to 1.19.x incorrectly caused the certificate to be renewed ([#8160](https://redirect.github.com/cert-manager/cert-manager/issues/8160), [@inteon](https://redirect.github.com/inteon))\n- Changes to the Duration and RenewBefore annotations on ingress and gateway-api resources will now trigger certificate updates. ([#8232](https://redirect.github.com/cert-manager/cert-manager/issues/8232), [@eleanor-merry](https://redirect.github.com/eleanor-merry))\n- Fix an issue where ACME challenge TXT records are not cleaned up when there are many resource records in CloudDNS. ([#8456](https://redirect.github.com/cert-manager/cert-manager/issues/8456), [@tkna](https://redirect.github.com/tkna))\n- Fix unregulated retries with the DigitalOcean DNS-01 solver\n Add full detailed DNS-01 errors to the events attached to the Challenge, for easier debugging ([#8221](https://redirect.github.com/cert-manager/cert-manager/issues/8221), [@wallrj-cyberark](https://redirect.github.com/wallrj-cyberark))\n- Fixed an infinite re-issuance loop that could occur when an issuer returns a certificate with a public key that doesn't match the CSR. The issuing controller now validates the certificate before storing it and fails with backoff on mismatch. ([#8403](https://redirect.github.com/cert-manager/cert-manager/issues/8403), [@calm329](https://redirect.github.com/calm329))\n- Fixed an issue where HTTP-01 challenges failed when the Host header contains an IPv6 address. This means that users can now issue IP address certificates for IPv6 address subjects. ([#8424](https://redirect.github.com/cert-manager/cert-manager/issues/8424), [@SlashNephy](https://redirect.github.com/SlashNephy))\n- Fixed the HTTP-01 Gateway solver creating invalid HTTPRoutes by not setting spec.hostnames when the challenge DNSName is an IP address. ([#8443](https://redirect.github.com/cert-manager/cert-manager/issues/8443), [@alviss7](https://redirect.github.com/alviss7))\n- Revert API defaults for issuer reference kind and group introduced in 0.19.0 ([#8173](https://redirect.github.com/cert-manager/cert-manager/issues/8173), [@erikgb](https://redirect.github.com/erikgb))\n- Security (MODERATE): Fix a potential panic in the cert-manager controller when a DNS response in an unexpected order was cached. If an attacker was able to modify DNS responses (or if they controlled the DNS server) it was possible to cause denial of service for the cert-manager controller. ([#8469](https://redirect.github.com/cert-manager/cert-manager/issues/8469), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n- Update Go to `v1.25.5` to fix `CVE-2025-61727` and `CVE-2025-61729` ([#8290](https://redirect.github.com/cert-manager/cert-manager/issues/8290), [@octo-sts](https://redirect.github.com/octo-sts)\\[bot])\n- When Prometheus monitoring is enabled, the metrics label is now set to the intended value of `cert-manager`. Previously, it was set depending on various factors (namespace cert-manager is installed in and/or Helm release name). ([#8162](https://redirect.github.com/cert-manager/cert-manager/issues/8162), [@LiquidPL](https://redirect.github.com/LiquidPL))\n\n##### Other (Cleanup or Flake)\n\n- Promoted the OtherNames feature to Beta and enabled it by default ([#8288](https://redirect.github.com/cert-manager/cert-manager/issues/8288), [@wallrj-cyberark](https://redirect.github.com/wallrj-cyberark))\n- Promoting `XListenerSets` feature gate to `ListenerSets` ([#8501](https://redirect.github.com/cert-manager/cert-manager/issues/8501), [@hjoshi123](https://redirect.github.com/hjoshi123))\n- Rebranding of the Venafi Issuer to CyberArk ([#8215](https://redirect.github.com/cert-manager/cert-manager/issues/8215), [@iossifbenbassat123](https://redirect.github.com/iossifbenbassat123))\n- Switched to SSA for challenge finalizer updates ([#8519](https://redirect.github.com/cert-manager/cert-manager/issues/8519), [@inteon](https://redirect.github.com/inteon))\n- The default container user (UID) is now 65532 (previously 1000) and the default container group (GID) is now 65532 (previously 0) ([#8408](https://redirect.github.com/cert-manager/cert-manager/issues/8408), [@wallrj-cyberark](https://redirect.github.com/wallrj-cyberark))\n- The feature-gate DefaultPrivateKeyRotationPolicyAlways moved from Beta to GA and can no longer be disabled. ([#8287](https://redirect.github.com/cert-manager/cert-manager/issues/8287), [@wallrj-cyberark](https://redirect.github.com/wallrj-cyberark))\n- Update cert-manager's ACME client, forked from golang/x/crypto ([#8268](https://redirect.github.com/cert-manager/cert-manager/issues/8268), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n- Use the latest version of Kyverno (1.16.2) in the best-practice installation tests ([#8389](https://redirect.github.com/cert-manager/cert-manager/issues/8389), [@wallrj-cyberark](https://redirect.github.com/wallrj-cyberark))\n- We stopped testing with Coutour due to it not supporting the new XListenerSet resource, and moved to kgateway. ([#8426](https://redirect.github.com/cert-manager/cert-manager/issues/8426), [@hjoshi123](https://redirect.github.com/hjoshi123))\n\n### [`v1.19.6`](https://redirect.github.com/cert-manager/cert-manager/releases/tag/v1.19.6)\n\n[Compare Source](https://redirect.github.com/cert-manager/cert-manager/compare/v1.19.5...v1.19.6)\n\ncert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\n\nThis patch release fixes a security issue ([`GHSA-8rvj-mm4h-c258`](https://redirect.github.com/cert-manager/cert-manager/security/advisories/GHSA-8rvj-mm4h-c258), HIGH) where the default `cert-manager-edit` aggregate ClusterRole granted namespace users permission to create ACME `Challenge` and `Order` resources directly. A user who could create a `Challenge` referencing a `ClusterIssuer` could supply attacker-controlled solver configuration while cert-manager loaded credentials from the `ClusterIssuer`'s namespace, bypassing Issuer solver selectors (`dnsZones`, `dnsNames`, `matchLabels`). With the acme-dns provider specifically, this could disclose DNS credentials to an attacker-controlled endpoint.\n\nThis release also includes Go version bumps to address reported CVEs. All users should upgrade.\n\n> \\[!WARNING]\n> **Potentially breaking change:** The `cert-manager-edit` aggregate ClusterRole no longer grants `create` for `challenges.acme.cert-manager.io` or `create`, `patch`, `update` for `orders.acme.cert-manager.io`. These resources are internal to cert-manager's ACME workflow and are not intended to be created or modified directly by users. If you have tooling or workflows that create Challenge or Order resources directly (outside of the normal Certificate \u2192 CertificateRequest \u2192 Order \u2192 Challenge flow), you will need to grant those permissions explicitly.\n\n##### Changes by Kind\n\n##### Bug or Regression\n\n- Security (HIGH): Remove Challenge `create` and Order `create`, `patch`, `update` verbs from the `cert-manager-edit` aggregate ClusterRole ([`GHSA-8rvj-mm4h-c258`](https://redirect.github.com/cert-manager/cert-manager/security/advisories/GHSA-8rvj-mm4h-c258)). ([#8941](https://redirect.github.com/cert-manager/cert-manager/pull/8941), [@wallrj-cyberark](https://redirect.github.com/wallrj-cyberark))\n\n##### Other (Cleanup or Flake)\n\n- Update Go to `v1.25.11` to fix CVE-2026-27145, CVE-2026-42504, and CVE-2026-42507 ([#8925](https://redirect.github.com/cert-manager/cert-manager/pull/8925), [@wallrj-cyberark](https://redirect.github.com/wallrj-cyberark))\n- Upgrade Go to 1.25.10 to fix reported vulnerabilities, along with other dependency bumps ([#8788](https://redirect.github.com/cert-manager/cert-manager/pull/8788), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n\n### [`v1.19.5`](https://redirect.github.com/cert-manager/cert-manager/releases/tag/v1.19.5)\n\n[Compare Source](https://redirect.github.com/cert-manager/cert-manager/compare/v1.19.4...v1.19.5)\n\ncert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\n\nThis is a simple patch release to fix some reported vulnerabilities. All users are recommended to upgrade.\n\n##### Changes by Kind\n\n##### Other (Cleanup or Flake)\n\n- Bump go dependencies with reported vulnerabilities ([#8706](https://redirect.github.com/cert-manager/cert-manager/pull/8706), [@erikgb](https://redirect.github.com/erikgb))\n- Bump go to 1.25.8 to address several reported vulnerabilities ([#8628](https://redirect.github.com/cert-manager/cert-manager/pull/8628), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n- Bump go to 1.25.9 ([#8705](https://redirect.github.com/cert-manager/cert-manager/pull/8705), [@erikgb](https://redirect.github.com/erikgb))\n\n### [`v1.19.4`](https://redirect.github.com/cert-manager/cert-manager/releases/tag/v1.19.4)\n\n[Compare Source](https://redirect.github.com/cert-manager/cert-manager/compare/v1.19.3...v1.19.4)\n\ncert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\n\nv1.19.4 is a simple patch release to fix some reported vulnerabilities - notably CVE-2026-24051 and CVE-2025-68121. All users should upgrade.\n\n##### Changes by Kind\n\n##### Bug or Regression\n\n- Bump go to address CVE-2025-68121 ([#8526](https://redirect.github.com/cert-manager/cert-manager/issues/8526), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n- Bump otel SDK to address GO-2026-4394 ([#8531](https://redirect.github.com/cert-manager/cert-manager/issues/8531), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n\n### [`v1.19.3`](https://redirect.github.com/cert-manager/cert-manager/releases/tag/v1.19.3)\n\n[Compare Source](https://redirect.github.com/cert-manager/cert-manager/compare/v1.19.2...v1.19.3)\n\ncert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\n\nThis release contains three bug fixes, including a fix for the MODERATE severity DoS issue in GHSA-gx3x-vq4p-mhhv. All users should upgrade to the latest release.\n\n##### Changes by Kind\n\n##### Bug or Regression\n\n- Fixed an infinite re-issuance loop that could occur when an issuer returns a certificate with a public key that doesn't match the CSR. The issuing controller now validates the certificate before storing it and fails with backoff on mismatch. ([#8415](https://redirect.github.com/cert-manager/cert-manager/issues/8415), [@cert-manager-bot](https://redirect.github.com/cert-manager-bot))\n- Fixed an issue where HTTP-01 challenges failed when the Host header contained an IPv6 address. This means that users can now issue IP address certificates for IPv6 address subjects. ([#8436](https://redirect.github.com/cert-manager/cert-manager/issues/8436), [@cert-manager-bot](https://redirect.github.com/cert-manager-bot))\n- Security (MODERATE): Fix a potential panic in the cert-manager controller when a DNS response in an unexpected order was cached. If an attacker was able to modify DNS responses (or if they controlled the DNS server) it was possible to cause denial of service for the cert-manager controller. ([#8468](https://redirect.github.com/cert-manager/cert-manager/issues/8468), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n\n##### Other (Cleanup or Flake)\n\n- Bump go to 1.25.6 ([#8459](https://redirect.github.com/cert-manager/cert-manager/issues/8459), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n\n### [`v1.19.2`](https://redirect.github.com/cert-manager/cert-manager/releases/tag/v1.19.2)\n\n[Compare Source](https://redirect.github.com/cert-manager/cert-manager/compare/v1.19.1...v1.19.2)\n\ncert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\n\nWe updated Go to fix some vulnerabilities in the standard library.\n\n> \ud83d\udcd6 Read the [full 1.19 release notes](https://cert-manager.io/docs/releases/release-notes/release-notes-1.19) on the cert-manager.io website before upgrading.\n\n##### Changes since `v1.19.1`\n\n##### Bug or Regression\n\n- Address false positive vulnerabilities `CVE-2025-47914` and `CVE-2025-58181` which were reported by Trivy. ([#8283](https://redirect.github.com/cert-manager/cert-manager/issues/8283), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n- Update Go to `v1.25.5` to fix `CVE-2025-61727` and `CVE-2025-61729` ([#8294](https://redirect.github.com/cert-manager/cert-manager/issues/8294), [@wallrj-cyberark](https://redirect.github.com/wallrj-cyberark))\n- Update `global.nodeSelector` to helm chart to perform a `merge` and allow for a single `nodeSelector` to be set across all services. ([#8233](https://redirect.github.com/cert-manager/cert-manager/issues/8233), [@cert-manager-bot](https://redirect.github.com/cert-manager-bot))\n\n##### Other (Cleanup or Flake)\n\n- Update cert-manager's ACME client, forked from `golang/x/crypto` ([#8270](https://redirect.github.com/cert-manager/cert-manager/issues/8270), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n- Updated Debian 12 distroless base images ([#8326](https://redirect.github.com/cert-manager/cert-manager/issues/8326), [@wallrj-cyberark](https://redirect.github.com/wallrj-cyberark))\n\n### [`v1.19.1`](https://redirect.github.com/cert-manager/cert-manager/releases/tag/v1.19.1)\n\n[Compare Source](https://redirect.github.com/cert-manager/cert-manager/compare/v1.19.0...v1.19.1)\n\ncert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\n\nWe reverted the CRD-based API defaults for `Certificate.Spec.IssuerRef` and `CertificateRequest.Spec.IssuerRef` after they were found to cause unexpected certificate renewals after upgrading to 1.19.0. We will try re-introducing these API defaults in cert-manager `1.20`.\nWe fixed a bug that caused certificates to be re-issued unexpectedly if the `issuerRef` kind or group was changed to one of the \"runtime\" default values.\nWe upgraded Go to `1.25.3` to address the following security vulnerabilities: `CVE-2025-61724`, `CVE-2025-58187`, `CVE-2025-47912`, `CVE-2025-58183`, `CVE-2025-61723`, `CVE-2025-58186`, `CVE-2025-58185`, `CVE-2025-58188`, and `CVE-2025-61725`.\n\n> \ud83d\udcd6 Read the [full 1.19 release notes](https://cert-manager.io/docs/releases/release-notes/release-notes-1.19) on the cert-manager.io website before upgrading.\n\nChanges since `v1.19.0`:\n\n##### Bug or Regression\n\n- BUGFIX: in case kind or group in the `issuerRef` of a Certificate was omitted, upgrading to `1.19.x` incorrectly caused the certificate to be renewed ([#8175](https://redirect.github.com/cert-manager/cert-manager/issues/8175), [@cert-manager-bot](https://redirect.github.com/cert-manager-bot))\n- Bump Go to 1.25.3 to fix a backwards incompatible change to the validation of DNS names in X.509 SAN fields which prevented the use of DNS names with a trailing dot ([#8177](https://redirect.github.com/cert-manager/cert-manager/issues/8177), [@wallrj-cyberark](https://redirect.github.com/wallrj-cyberark))\n- Revert API defaults for issuer reference kind and group introduced in 0.19.0 ([#8178](https://redirect.github.com/cert-manager/cert-manager/issues/8178), [@cert-manager-bot](https://redirect.github.com/cert-manager-bot))\n\n### [`v1.19.0`](https://redirect.github.com/cert-manager/cert-manager/releases/tag/v1.19.0)\n\n[Compare Source](https://redirect.github.com/cert-manager/cert-manager/compare/v1.18.6...v1.19.0)\n\ncert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\n\n> \u26a0\ufe0f **Known issues**: The following known issues are fixed in [v1.19.1](https://redirect.github.com/cert-manager/cert-manager/releases/tag/v1.19.1):\n>\n> - [Unexpected certificate renewal after upgrading to 1.19.0](https://redirect.github.com/cert-manager/cert-manager/issues/8158)\n\nThis release focuses on expanding platform compatibility, improving deployment flexibility, enhancing observability, and addressing key reliability issues.\n\n> \ud83d\udcd6 Read the full release notes at cert-manager.io: \n\nChanges since `v1.18.0`:\n\n##### Feature\n\n- Add IPv6 rules to the default network policy ([#7726](https://redirect.github.com/cert-manager/cert-manager/issues/7726), [@jcpunk](https://redirect.github.com/jcpunk))\n- Add `global.nodeSelector` to helm chart to allow for a single `nodeSelector` to be set across all services. ([#7818](https://redirect.github.com/cert-manager/cert-manager/issues/7818), [@StingRayZA](https://redirect.github.com/StingRayZA))\n- Add a feature gate to default to Ingress `pathType` `Exact` in ACME HTTP01 Ingress challenge solvers. ([#7795](https://redirect.github.com/cert-manager/cert-manager/issues/7795), [@sspreitzer](https://redirect.github.com/sspreitzer))\n- Add generated `applyconfigurations` allowing clients to make type-safe server-side apply requests for cert-manager resources. ([#7866](https://redirect.github.com/cert-manager/cert-manager/issues/7866), [@erikgb](https://redirect.github.com/erikgb))\n- Added API defaults to issuer references group (cert-manager.io) and kind (Issuer). ([#7414](https://redirect.github.com/cert-manager/cert-manager/issues/7414), [@erikgb](https://redirect.github.com/erikgb))\n- Added `certmanager_certificate_challenge_status` Prometheus metric. ([#7736](https://redirect.github.com/cert-manager/cert-manager/issues/7736), [@hjoshi123](https://redirect.github.com/hjoshi123))\n- Added `protocol` field for `rfc2136` DNS01 provider ([#7881](https://redirect.github.com/cert-manager/cert-manager/issues/7881), [@hjoshi123](https://redirect.github.com/hjoshi123))\n- Added experimental field `hostUsers` flag to all pods. Not set by default. ([#7973](https://redirect.github.com/cert-manager/cert-manager/issues/7973), [@hjoshi123](https://redirect.github.com/hjoshi123))\n- Support configurable resource requests and limits for ACME HTTP01 solver pods through ClusterIssuer and Issuer specifications, allowing granular resource management that overrides global `--acme-http01-solver-resource-*` settings. ([#7972](https://redirect.github.com/cert-manager/cert-manager/issues/7972), [@lunarwhite](https://redirect.github.com/lunarwhite))\n- The `CAInjectorMerging` feature has been promoted to BETA and is now enabled by default ([#8017](https://redirect.github.com/cert-manager/cert-manager/issues/8017), [@ThatsMrTalbot](https://redirect.github.com/ThatsMrTalbot))\n- The controller, webhook and ca-injector now log their version and git commit on startup for easier debugging and support. ([#8072](https://redirect.github.com/cert-manager/cert-manager/issues/8072), [@prasad89](https://redirect.github.com/prasad89))\n- Updated `certificate` metrics to the collector approach. ([#7856](https://redirect.github.com/cert-manager/cert-manager/issues/7856), [@hjoshi123](https://redirect.github.com/hjoshi123))\n\n##### Bug or Regression\n\n- ACME: Increased challenge authorization timeout to 2 minutes to fix `error waiting for authorization` ([#7796](https://redirect.github.com/cert-manager/cert-manager/issues/7796), [@hjoshi123](https://redirect.github.com/hjoshi123))\n- BUGFIX: permitted URI domains were incorrectly used to set the excluded URI domains in the CSR's name constraints ([#7816](https://redirect.github.com/cert-manager/cert-manager/issues/7816), [@kinolaev](https://redirect.github.com/kinolaev))\n- Enforced ACME HTTP-01 solver validation to properly reject configurations when multiple ingress options (`class`, `ingressClassName`, `name`) are specified simultaneously ([#8021](https://redirect.github.com/cert-manager/cert-manager/issues/8021), [@lunarwhite](https://redirect.github.com/lunarwhite))\n- Increase maximum sizes of PEM certificates and chains which can be parsed in cert-manager, to handle leaf certificates with large numbers of DNS names or other identities ([#7961](https://redirect.github.com/cert-manager/cert-manager/issues/7961), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n- Reverted adding the `global.rbac.disableHTTPChallengesRole` Helm option. ([#7836](https://redirect.github.com/cert-manager/cert-manager/issues/7836), [@inteon](https://redirect.github.com/inteon))\n- This change removes the `path` label of core ACME client metrics and will require users to update their monitoring dashboards and alerting rules if using those metrics. ([#8109](https://redirect.github.com/cert-manager/cert-manager/issues/8109), [@mladen-rusev-cyberark](https://redirect.github.com/mladen-rusev-cyberark))\n- Use the latest version of `ingress-nginx` in E2E tests to ensure compatibility ([#7792](https://redirect.github.com/cert-manager/cert-manager/issues/7792), [@wallrj](https://redirect.github.com/wallrj))\n\n##### Other (Cleanup or Flake)\n\n- Helm: Fix naming template of `tokenrequest` RoleBinding resource to improve consistency ([#7761](https://redirect.github.com/cert-manager/cert-manager/issues/7761), [@lunarwhite](https://redirect.github.com/lunarwhite))\n- Improve error messages when certificates, CRLs or private keys fail admission due to malformed or missing PEM data ([#7928](https://redirect.github.com/cert-manager/cert-manager/issues/7928), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n- Major upgrade of Akamai SDK. NOTE: The new version has not been fully tested end-to-end due to the lack of cloud infrastructure. ([#8003](https://redirect.github.com/cert-manager/cert-manager/issues/8003), [@hjoshi123](https://redirect.github.com/hjoshi123))\n- Update kind images to include the Kubernetes 1.33 node image ([#7786](https://redirect.github.com/cert-manager/cert-manager/issues/7786), [@wallrj](https://redirect.github.com/wallrj))\n- Use `maps.Copy` for cleaner map handling ([#8092](https://redirect.github.com/cert-manager/cert-manager/issues/8092), [@quantpoet](https://redirect.github.com/quantpoet))\n- Vault: Migrate Vault E2E add-on tests from deprecated `vault-client-go` to the new `vault/api` client. ([#8059](https://redirect.github.com/cert-manager/cert-manager/issues/8059), [@armagankaratosun](https://redirect.github.com/armagankaratosun))\n\n### [`v1.18.6`](https://redirect.github.com/cert-manager/cert-manager/releases/tag/v1.18.6)\n\n[Compare Source](https://redirect.github.com/cert-manager/cert-manager/compare/v1.18.5...v1.18.6)\n\ncert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\n\nv1.18.6 is a simple patch release to fix some reported vulnerabilities, most notably [CVE-2025-68121](https://nvd.nist.gov/vuln/detail/CVE-2025-68121).\n\nNB: We didn't attempt to patch [CVE-2026-24051](https://nvd.nist.gov/vuln/detail/CVE-2026-24051) but that vulnerability affects macOS only, so cert-manager will be unaffected.\n\n##### Changes by Kind\n\n##### Bug or Regression\n\n- Bump Go to address CVE-2025-68121 ([#8525](https://redirect.github.com/cert-manager/cert-manager/issues/8525), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n\n### [`v1.18.5`](https://redirect.github.com/cert-manager/cert-manager/releases/tag/v1.18.5)\n\n[Compare Source](https://redirect.github.com/cert-manager/cert-manager/compare/v1.18.4...v1.18.5)\n\ncert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\n\nThis release contains three bug fixes, including a fix for the MODERATE severity DoS issue in GHSA-gx3x-vq4p-mhhv. All users should upgrade to the latest release.\n\n##### Changes by Kind\n\n##### Bug or Regression\n\n- Fixed an infinite re-issuance loop that could occur when an issuer returns a certificate with a public key that doesn't match the CSR. The issuing controller now validates the certificate before storing it and fails with backoff on mismatch. ([#8414](https://redirect.github.com/cert-manager/cert-manager/issues/8414), [@cert-manager-bot](https://redirect.github.com/cert-manager-bot))\n- Fixed an issue where HTTP-01 challenges failed when the Host header contains an IPv6 address. This means that users can now issue IP address certificates for IPv6 address subjects. ([#8437](https://redirect.github.com/cert-manager/cert-manager/issues/8437), [@cert-manager-bot](https://redirect.github.com/cert-manager-bot))\n- Security (MODERATE): Fix a potential panic in the cert-manager controller when a DNS response in an unexpected order was cached. If an attacker was able to modify DNS responses (or if they controlled the DNS server) it was possible to cause denial of service for the cert-manager controller. ([#8467](https://redirect.github.com/cert-manager/cert-manager/issues/8467), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n\n##### Other (Cleanup or Flake)\n\n- Bump go to 1.24.12 ([#8460](https://redirect.github.com/cert-manager/cert-manager/issues/8460), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n\n### [`v1.18.4`](https://redirect.github.com/cert-manager/cert-manager/releases/tag/v1.18.4)\n\n[Compare Source](https://redirect.github.com/cert-manager/cert-manager/compare/v1.18.3...v1.18.4)\n\ncert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\n\nWe updated Go to fix some vulnerabilities in the standard library.\n\n> \ud83d\udcd6 Read the [full 1.18 release notes](https://cert-manager.io/docs/releases/release-notes/release-notes-1.18) on the cert-manager.io website before upgrading.\n\n##### Changes since `v1.18.3`\n\n##### Bug or Regression\n\n- Address false positive vulnerabilities `CVE-2025-47914` and `CVE-2025-58181` which were reported by Trivy. ([#8282](https://redirect.github.com/cert-manager/cert-manager/issues/8282), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n- Update Go to `v1.24.11` to fix `CVE-2025-61727` and `CVE-2025-61729` ([#8295](https://redirect.github.com/cert-manager/cert-manager/issues/8295), [@wallrj-cyberark](https://redirect.github.com/wallrj-cyberark))\n\n##### Other (Cleanup or Flake)\n\n- Update cert-manager's ACME client, forked from `golang/x/crypto` ([#8271](https://redirect.github.com/cert-manager/cert-manager/issues/8271), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n- Updated Debian 12 distroless base images ([#8328](https://redirect.github.com/cert-manager/cert-manager/issues/8328), [@wallrj-cyberark](https://redirect.github.com/wallrj-cyberark))\n\n### [`v1.18.3`](https://redirect.github.com/cert-manager/cert-manager/releases/tag/v1.18.3)\n\n[Compare Source](https://redirect.github.com/cert-manager/cert-manager/compare/v1.18.2...v1.18.3)\n\ncert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.\n\nWe fixed a bug which caused certificates to be re-issued unexpectedly, if the issuerRef kind or group was changed to one of the \"runtime\" default values. We increased the size limit when parsing PEM certificate chains to handle leaf certificates with large numbers of DNS named or other identities. We upgraded Go to 1.24.9 to fix various non-critical security vulnerabilities.\n\n> \ud83d\udcd6 Read the [full 1.18 release notes](https://cert-manager.io/docs/releases/release-notes/release-notes-1.18) on the cert-manager.io website before upgrading.\n\nChanges since `v1.18.2`:\n\n##### Bug or Regression\n\n- BUGFIX: in case kind or group in the issuerRef of a Certificate was omitted, upgrading to 1.19.x incorrectly caused the certificate to be renewed ([#8174](https://redirect.github.com/cert-manager/cert-manager/issues/8174), [@cert-manager-bot](https://redirect.github.com/cert-manager-bot))\n- Bump Go to 1.24.9. Fixes the following vulnerabilities: CVE-2025-61724, CVE-2025-58187, CVE-2025-47912, CVE-2025-58183, CVE-2025-61723, CVE-2025-58186, CVE-2025-58185, CVE-2025-58188, CVE-2025-61725 ([#8176](https://redirect.github.com/cert-manager/cert-manager/issues/8176), [@wallrj-cyberark](https://redirect.github.com/wallrj-cyberark))\n- Increase maximum sizes of PEM certificates and chains which can be parsed in cert-manager, to handle leaf certificates with large numbers of DNS names or other identities ([#7966](https://redirect.github.com/cert-manager/cert-manager/issues/7966), [@cert-manager-bot](https://redirect.github.com/cert-manager-bot))\n\n##### Other (Cleanup or Flake)\n\n- Improve error messages when certificates, CRLs or private keys fail admission due to malformed or missing PEM data ([#7964](https://redirect.github.com/cert-manager/cert-manager/issues/7964), [@cert-manager-bot](https://redirect.github.com/cert-manager-bot))\n- Upgrades Go to v1.24.6 ([#7974](https://redirect.github.com/cert-manager/cert-manager/issues/7974), [@SgtCoDFish](https://redirect.github.com/SgtCoDFish))\n\n \n\n---\n\n### Configuration\n\n\ud83d\udcc5 **Schedule**: (UTC)\n\n- Branch creation\n - At any time (no schedule defined)\n- Automerge\n - At any time (no schedule defined)\n\n\ud83d\udea6 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.\n\n\u267b **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.\n\n\ud83d\udd15 **Ignore**: Close this PR and you won't be reminded about this update again.\n\n---\n\n - [ ] If you want to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/vexxhost/atmosphere.common).\n\n",
"change_url": "https://github.com/vexxhost/atmosphere.common/pull/105",
"commit_id": "092a2b1e53b1dc25d7c0e9ba5c315767b2f8b6b6",
"patchset": "092a2b1e53b1dc25d7c0e9ba5c315767b2f8b6b6",
"project": {
"canonical_hostname": "github.com",
"canonical_name": "github.com/vexxhost/atmosphere.common",
"name": "vexxhost/atmosphere.common",
"short_name": "atmosphere.common",
"src_dir": "src/github.com/vexxhost/atmosphere.common"
},
"topic": null
}
],
"collections_path": "/home/zuul/.ansible/collections",
"executable": "uv",
"project_dir": "src/github.com/vexxhost/atmosphere.common",
"projects": [
{
"canonical_hostname": "github.com",
"canonical_name": "github.com/vexxhost/atmosphere.common",
"checkout": "main",
"checkout_description": "zuul branch",
"commit": "9a72815ed670e822102f9481abc33c280726b6f1",
"name": "vexxhost/atmosphere.common",
"required": false,
"short_name": "atmosphere.common",
"src_dir": "src/github.com/vexxhost/atmosphere.common"
}
],
"workspace_dir": "/home/zuul"
}
},
"log": [
"Skipping kubernetes.core: no checked-out sibling",
"Skipping openstack.cloud: no checked-out sibling",
"Skipping vexxhost.kubernetes: no checked-out sibling"
],
"msg": "Skipping kubernetes.core: no checked-out sibling\nSkipping openstack.cloud: no checked-out sibling\nSkipping vexxhost.kubernetes: no checked-out sibling"
}
},
"task": {
"duration": {
"end": "2026-07-09T00:44:45.534437Z",
"start": "2026-07-09T00:44:45.131472Z"
},
"id": "0242ac17-0010-ba36-ec3e-00000000000a",
"name": "Install Ansible collection siblings"
}
}
]
}
],
"stats": {
"controller": {
"changed": 2,
"failures": 0,
"ignored": 0,
"ok": 3,
"rescued": 0,
"skipped": 0,
"unreachable": 0
}
},
"trusted": false
},
{
"branch": "main",
"index": "2",
"phase": "pre",
"playbook": "github.com/vexxhost/atmosphere.common/test-playbooks/molecule/pre.yml",
"plays": [
{
"play": {
"duration": {
"end": "2026-07-09T00:44:57.315030Z",
"start": "2026-07-09T00:44:46.267208Z"
},
"id": "0242ac17-0010-345a-20d3-000000000002",
"name": "Prepare Molecule log collection"
},
"tasks": [
{
"hosts": {
"controller": {
"action": "ansible.builtin.apt",
"cache_update_time": 1783557892,
"cache_updated": true,
"changed": true,
"diff": {},
"invocation": {
"module_args": {
"allow_change_held_packages": false,
"allow_downgrade": false,
"allow_unauthenticated": false,
"autoclean": false,
"autoremove": false,
"cache_valid_time": 0,
"clean": false,
"deb": null,
"default_release": null,
"dpkg_options": "force-confdef,force-confold",
"fail_on_autoremove": false,
"force": false,
"force_apt_get": false,
"install_recommends": null,
"lock_timeout": 60,
"name": "jq",
"only_upgrade": false,
"package": [
"jq"
],
"policy_rc_d": null,
"purge": false,
"state": "present",
"update_cache": true,
"update_cache_retries": 5,
"update_cache_retry_max_delay": 12,
"upgrade": null
}
},
"stderr": "debconf: delaying package configuration, since apt-utils is not installed\n",
"stderr_lines": [
"debconf: delaying package configuration, since apt-utils is not installed"
],
"stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libjq1 libonig5\nThe following NEW packages will be installed:\n jq libjq1 libonig5\n0 upgraded, 3 newly installed, 0 to remove and 12 not upgraded.\nNeed to get 380 kB of archives.\nAfter this operation, 1127 kB of additional disk space will be used.\nGet:1 http://nova.clouds.archive.ubuntu.com/ubuntu noble/main amd64 libonig5 amd64 6.9.9-1build1 [172 kB]\nGet:2 http://nova.clouds.archive.ubuntu.com/ubuntu noble-updates/main amd64 libjq1 amd64 1.7.1-3ubuntu0.24.04.2 [142 kB]\nGet:3 http://nova.clouds.archive.ubuntu.com/ubuntu noble-updates/main amd64 jq amd64 1.7.1-3ubuntu0.24.04.2 [65.7 kB]\nFetched 380 kB in 1s (575 kB/s)\nSelecting previously unselected package libonig5:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 31293 files and directories currently installed.)\r\nPreparing to unpack .../libonig5_6.9.9-1build1_amd64.deb ...\r\nUnpacking libonig5:amd64 (6.9.9-1build1) ...\r\nSelecting previously unselected package libjq1:amd64.\r\nPreparing to unpack .../libjq1_1.7.1-3ubuntu0.24.04.2_amd64.deb ...\r\nUnpacking libjq1:amd64 (1.7.1-3ubuntu0.24.04.2) ...\r\nSelecting previously unselected package jq.\r\nPreparing to unpack .../jq_1.7.1-3ubuntu0.24.04.2_amd64.deb ...\r\nUnpacking jq (1.7.1-3ubuntu0.24.04.2) ...\r\nSetting up libonig5:amd64 (6.9.9-1build1) ...\r\nSetting up libjq1:amd64 (1.7.1-3ubuntu0.24.04.2) ...\r\nSetting up jq (1.7.1-3ubuntu0.24.04.2) ...\r\nProcessing triggers for libc-bin (2.39-0ubuntu8.7) ...\r\n",
"stdout_lines": [
"Reading package lists...",
"Building dependency tree...",
"Reading state information...",
"The following additional packages will be installed:",
" libjq1 libonig5",
"The following NEW packages will be installed:",
" jq libjq1 libonig5",
"0 upgraded, 3 newly installed, 0 to remove and 12 not upgraded.",
"Need to get 380 kB of archives.",
"After this operation, 1127 kB of additional disk space will be used.",
"Get:1 http://nova.clouds.archive.ubuntu.com/ubuntu noble/main amd64 libonig5 amd64 6.9.9-1build1 [172 kB]",
"Get:2 http://nova.clouds.archive.ubuntu.com/ubuntu noble-updates/main amd64 libjq1 amd64 1.7.1-3ubuntu0.24.04.2 [142 kB]",
"Get:3 http://nova.clouds.archive.ubuntu.com/ubuntu noble-updates/main amd64 jq amd64 1.7.1-3ubuntu0.24.04.2 [65.7 kB]",
"Fetched 380 kB in 1s (575 kB/s)",
"Selecting previously unselected package libonig5:amd64.",
"(Reading database ... ",
"(Reading database ... 5%",
"(Reading database ... 10%",
"(Reading database ... 15%",
"(Reading database ... 20%",
"(Reading database ... 25%",
"(Reading database ... 30%",
"(Reading database ... 35%",
"(Reading database ... 40%",
"(Reading database ... 45%",
"(Reading database ... 50%",
"(Reading database ... 55%",
"(Reading database ... 60%",
"(Reading database ... 65%",
"(Reading database ... 70%",
"(Reading database ... 75%",
"(Reading database ... 80%",
"(Reading database ... 85%",
"(Reading database ... 90%",
"(Reading database ... 95%",
"(Reading database ... 100%",
"(Reading database ... 31293 files and directories currently installed.)",
"Preparing to unpack .../libonig5_6.9.9-1build1_amd64.deb ...",
"Unpacking libonig5:amd64 (6.9.9-1build1) ...",
"Selecting previously unselected package libjq1:amd64.",
"Preparing to unpack .../libjq1_1.7.1-3ubuntu0.24.04.2_amd64.deb ...",
"Unpacking libjq1:amd64 (1.7.1-3ubuntu0.24.04.2) ...",
"Selecting previously unselected package jq.",
"Preparing to unpack .../jq_1.7.1-3ubuntu0.24.04.2_amd64.deb ...",
"Unpacking jq (1.7.1-3ubuntu0.24.04.2) ...",
"Setting up libonig5:amd64 (6.9.9-1build1) ...",
"Setting up libjq1:amd64 (1.7.1-3ubuntu0.24.04.2) ...",
"Setting up jq (1.7.1-3ubuntu0.24.04.2) ...",
"Processing triggers for libc-bin (2.39-0ubuntu8.7) ..."
]
}
},
"task": {
"duration": {
"end": "2026-07-09T00:44:57.315030Z",
"start": "2026-07-09T00:44:46.280008Z"
},
"id": "0242ac17-0010-345a-20d3-000000000004",
"name": "Install jq for log collection"
}
}
]
}
],
"stats": {
"controller": {
"changed": 1,
"failures": 0,
"ignored": 0,
"ok": 1,
"rescued": 0,
"skipped": 0,
"unreachable": 0
}
},
"trusted": false
},
{
"branch": "main",
"index": "0",
"phase": "run",
"playbook": "github.com/vexxhost/zuul-jobs/playbooks/molecule/run.yaml",
"plays": [
{
"play": {
"duration": {
"end": "2026-07-09T00:48:39.856447Z",
"start": "2026-07-09T00:44:58.009149Z"
},
"id": "0242ac17-0010-5adc-e765-000000000002",
"name": "all"
},
"tasks": [
{
"hosts": {
"controller": {
"action": "ansible.builtin.stat",
"changed": false,
"msg": "All items completed",
"results": [
{
"ansible_loop_var": "item",
"changed": false,
"failed": false,
"invocation": {
"module_args": {
"checksum_algorithm": "sha1",
"follow": true,
"get_attributes": true,
"get_checksum": true,
"get_mime": true,
"path": "src/github.com/vexxhost/atmosphere.common"
}
},
"item": "src/github.com/vexxhost/atmosphere.common",
"stat": {
"atime": 1783557878.726,
"attr_flags": "e",
"attributes": [
"extents"
],
"block_size": 4096,
"blocks": 8,
"charset": "unknown",
"ctime": 1783557878.748,
"dev": 64769,
"device_type": 0,
"executable": true,
"exists": true,
"gid": 1000,
"gr_name": "zuul",
"inode": 1023012,
"isblk": false,
"ischr": false,
"isdir": true,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": false,
"issock": false,
"isuid": false,
"mimetype": "unknown",
"mode": "0755",
"mtime": 1783557865.2671313,
"nlink": 10,
"path": "src/github.com/vexxhost/atmosphere.common",
"pw_name": "zuul",
"readable": true,
"rgrp": true,
"roth": true,
"rusr": true,
"size": 4096,
"uid": 1000,
"version": "637619829",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": true,
"xoth": true,
"xusr": true
}
},
{
"ansible_loop_var": "item",
"changed": false,
"failed": false,
"invocation": {
"module_args": {
"checksum_algorithm": "sha1",
"follow": true,
"get_attributes": true,
"get_checksum": true,
"get_mime": true,
"path": "src/github.com/vexxhost/atmosphere.common/molecule/secretgen-controller/inventory"
}
},
"item": "src/github.com/vexxhost/atmosphere.common/molecule/secretgen-controller/inventory",
"stat": {
"exists": false
}
},
{
"ansible_loop_var": "item",
"changed": false,
"failed": false,
"invocation": {
"module_args": {
"checksum_algorithm": "sha1",
"follow": true,
"get_attributes": true,
"get_checksum": true,
"get_mime": true,
"path": "src/github.com/vexxhost/atmosphere.common/extensions/molecule/secretgen-controller/inventory"
}
},
"item": "src/github.com/vexxhost/atmosphere.common/extensions/molecule/secretgen-controller/inventory",
"stat": {
"exists": false
}
}
]
}
},
"task": {
"duration": {
"end": "2026-07-09T00:44:58.791586Z",
"start": "2026-07-09T00:44:58.020254Z"
},
"id": "0242ac17-0010-5adc-e765-000000000004",
"name": "Check inventory directories"
}
},
{
"hosts": {
"controller": {
"action": "ansible.builtin.copy",
"changed": true,
"msg": "All items completed",
"results": [
{
"ansible_loop_var": "item",
"changed": true,
"checksum": "304fed1ee873b0e657f6dfb73c1a110354d19468",
"dest": "src/github.com/vexxhost/atmosphere.common/inventory.yaml",
"diff": [],
"failed": false,
"gid": 1000,
"group": "zuul",
"invocation": {
"module_args": {
"_original_basename": "inventory.yaml",
"attributes": null,
"backup": false,
"checksum": "304fed1ee873b0e657f6dfb73c1a110354d19468",
"content": null,
"dest": "src/github.com/vexxhost/atmosphere.common",
"directory_mode": null,
"follow": false,
"force": true,
"group": null,
"local_follow": null,
"mode": "0644",
"owner": null,
"remote_src": null,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": "/home/zuul/.ansible/tmp/ansible-tmp-1783557898.8644204-9-267146715000029/source",
"unsafe_writes": false,
"validate": null
}
},
"item": {
"ansible_loop_var": "item",
"changed": false,
"failed": false,
"invocation": {
"module_args": {
"checksum_algorithm": "sha1",
"follow": true,
"get_attributes": true,
"get_checksum": true,
"get_mime": true,
"path": "src/github.com/vexxhost/atmosphere.common"
}
},
"item": "src/github.com/vexxhost/atmosphere.common",
"stat": {
"atime": 1783557878.726,
"attr_flags": "e",
"attributes": [
"extents"
],
"block_size": 4096,
"blocks": 8,
"charset": "unknown",
"ctime": 1783557878.748,
"dev": 64769,
"device_type": 0,
"executable": true,
"exists": true,
"gid": 1000,
"gr_name": "zuul",
"inode": 1023012,
"isblk": false,
"ischr": false,
"isdir": true,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": false,
"issock": false,
"isuid": false,
"mimetype": "unknown",
"mode": "0755",
"mtime": 1783557865.2671313,
"nlink": 10,
"path": "src/github.com/vexxhost/atmosphere.common",
"pw_name": "zuul",
"readable": true,
"rgrp": true,
"roth": true,
"rusr": true,
"size": 4096,
"uid": 1000,
"version": "637619829",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": true,
"xoth": true,
"xusr": true
}
},
"md5sum": "27f981be3ebfe44527b1b06e831de91a",
"mode": "0644",
"owner": "zuul",
"size": 254349,
"src": "/home/zuul/.ansible/tmp/ansible-tmp-1783557898.8644204-9-267146715000029/source",
"state": "file",
"uid": 1000
},
{
"ansible_loop_var": "item",
"changed": false,
"false_condition": "item.stat.isdir | default(false)",
"item": {
"ansible_loop_var": "item",
"changed": false,
"failed": false,
"invocation": {
"module_args": {
"checksum_algorithm": "sha1",
"follow": true,
"get_attributes": true,
"get_checksum": true,
"get_mime": true,
"path": "src/github.com/vexxhost/atmosphere.common/molecule/secretgen-controller/inventory"
}
},
"item": "src/github.com/vexxhost/atmosphere.common/molecule/secretgen-controller/inventory",
"stat": {
"exists": false
}
},
"skip_reason": "Conditional result was False",
"skipped": true
},
{
"ansible_loop_var": "item",
"changed": false,
"false_condition": "item.stat.isdir | default(false)",
"item": {
"ansible_loop_var": "item",
"changed": false,
"failed": false,
"invocation": {
"module_args": {
"checksum_algorithm": "sha1",
"follow": true,
"get_attributes": true,
"get_checksum": true,
"get_mime": true,
"path": "src/github.com/vexxhost/atmosphere.common/extensions/molecule/secretgen-controller/inventory"
}
},
"item": "src/github.com/vexxhost/atmosphere.common/extensions/molecule/secretgen-controller/inventory",
"stat": {
"exists": false
}
},
"skip_reason": "Conditional result was False",
"skipped": true
}
]
}
},
"task": {
"duration": {
"end": "2026-07-09T00:44:59.735758Z",
"start": "2026-07-09T00:44:58.801729Z"
},
"id": "0242ac17-0010-5adc-e765-000000000005",
"name": "Copy inventory file for Zuul"
}
},
{
"hosts": {
"controller": {
"action": "ansible.builtin.replace",
"changed": true,
"msg": "All items completed",
"results": [
{
"ansible_loop_var": "item",
"changed": true,
"failed": false,
"invocation": {
"module_args": {
"after": null,
"attributes": null,
"backup": false,
"before": null,
"encoding": "utf-8",
"group": null,
"mode": null,
"owner": null,
"path": "src/github.com/vexxhost/atmosphere.common/inventory.yaml",
"regexp": "(^\\s*ansible_host:\\s*).*$",
"replace": "\\1\"{{ nodepool.private_ipv4 }}\"",
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"unsafe_writes": false,
"validate": null
}
},
"item": {
"ansible_loop_var": "item",
"changed": false,
"failed": false,
"invocation": {
"module_args": {
"checksum_algorithm": "sha1",
"follow": true,
"get_attributes": true,
"get_checksum": true,
"get_mime": true,
"path": "src/github.com/vexxhost/atmosphere.common"
}
},
"item": "src/github.com/vexxhost/atmosphere.common",
"stat": {
"atime": 1783557878.726,
"attr_flags": "e",
"attributes": [
"extents"
],
"block_size": 4096,
"blocks": 8,
"charset": "unknown",
"ctime": 1783557878.748,
"dev": 64769,
"device_type": 0,
"executable": true,
"exists": true,
"gid": 1000,
"gr_name": "zuul",
"inode": 1023012,
"isblk": false,
"ischr": false,
"isdir": true,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": false,
"issock": false,
"isuid": false,
"mimetype": "unknown",
"mode": "0755",
"mtime": 1783557865.2671313,
"nlink": 10,
"path": "src/github.com/vexxhost/atmosphere.common",
"pw_name": "zuul",
"readable": true,
"rgrp": true,
"roth": true,
"rusr": true,
"size": 4096,
"uid": 1000,
"version": "637619829",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": true,
"xoth": true,
"xusr": true
}
},
"msg": "1 replacements made",
"rc": 0
},
{
"ansible_loop_var": "item",
"changed": false,
"false_condition": "item.stat.isdir | default(false)",
"item": {
"ansible_loop_var": "item",
"changed": false,
"failed": false,
"invocation": {
"module_args": {
"checksum_algorithm": "sha1",
"follow": true,
"get_attributes": true,
"get_checksum": true,
"get_mime": true,
"path": "src/github.com/vexxhost/atmosphere.common/molecule/secretgen-controller/inventory"
}
},
"item": "src/github.com/vexxhost/atmosphere.common/molecule/secretgen-controller/inventory",
"stat": {
"exists": false
}
},
"skip_reason": "Conditional result was False",
"skipped": true
},
{
"ansible_loop_var": "item",
"changed": false,
"false_condition": "item.stat.isdir | default(false)",
"item": {
"ansible_loop_var": "item",
"changed": false,
"failed": false,
"invocation": {
"module_args": {
"checksum_algorithm": "sha1",
"follow": true,
"get_attributes": true,
"get_checksum": true,
"get_mime": true,
"path": "src/github.com/vexxhost/atmosphere.common/extensions/molecule/secretgen-controller/inventory"
}
},
"item": "src/github.com/vexxhost/atmosphere.common/extensions/molecule/secretgen-controller/inventory",
"stat": {
"exists": false
}
},
"skip_reason": "Conditional result was False",
"skipped": true
}
]
}
},
"task": {
"duration": {
"end": "2026-07-09T00:45:00.136513Z",
"start": "2026-07-09T00:44:59.744661Z"
},
"id": "0242ac17-0010-5adc-e765-000000000006",
"name": "Switch \"ansible_host\" to private IP"
}
},
{
"hosts": {
"controller": {
"action": "ansible.builtin.command",
"changed": true,
"cmd": [
"uv",
"run",
"molecule",
"test",
"--destroy",
"never",
"-s",
"secretgen-controller"
],
"delta": "0:03:38.980058",
"end": "2026-07-09 00:48:39.481871",
"invocation": {
"module_args": {
"_raw_params": "uv run molecule test --destroy never -s secretgen-controller",
"_uses_shell": false,
"argv": null,
"chdir": "src/github.com/vexxhost/atmosphere.common",
"creates": null,
"executable": null,
"expand_argument_vars": true,
"removes": null,
"stdin": null,
"stdin_add_newline": true,
"strip_empty_ends": true,
"zuul_ansible_split_streams": false,
"zuul_log_id": "0242ac17-0010-5adc-e765-000000000007-1-controller",
"zuul_no_log": false,
"zuul_output_max_bytes": 1073741824
}
},
"msg": "",
"rc": 0,
"start": "2026-07-09 00:45:00.501813",
"stderr": "",
"stderr_lines": [],
"stdout": "Using CPython 3.12.3 interpreter at: /usr/bin/python3\nCreating virtual environment at: .venv\nwarning: No `requires-python` value found in the workspace. Defaulting to `>=3.12`.\nDownloading kubernetes (1.9MiB)\nDownloading pygments (1.2MiB)\nDownloading cryptography (4.3MiB)\nDownloading pydantic-core (2.0MiB)\nDownloading ansible-core (2.1MiB)\n Downloading pydantic-core\n Downloading cryptography\n Downloading pygments\n Downloading kubernetes\n Downloading ansible-core\nInstalled 52 packages in 51ms\nINFO Collection 'atmosphere.common' detected.\nINFO Scenarios will be used from 'extensions/molecule'\nINFO [secretgen-controller > discovery] scenario test matrix: dependency, cleanup, destroy, syntax, create, prepare, converge, idempotence, side_effect, verify, cleanup, destroy\nINFO [secretgen-controller > prerun] Performing prerun with role_name_check=0...\nINFO [secretgen-controller > dependency] Executing\nWARNING [secretgen-controller > dependency] Missing roles requirements file: requirements.yml\nWARNING [secretgen-controller > dependency] Missing collections requirements file: collections.yml\nWARNING [secretgen-controller > dependency] Executed: 2 missing (Remove from test_sequence to suppress)\nINFO [secretgen-controller > cleanup] Executing\nWARNING [secretgen-controller > cleanup] Executed: Missing playbook (Remove from test_sequence to suppress)\nINFO [secretgen-controller > destroy] Executing\nWARNING [secretgen-controller > destroy] Skipping, '--destroy=never' requested.\nINFO [secretgen-controller > destroy] Executed: Successful\nINFO [secretgen-controller > syntax] Executing\n\nplaybook: /home/zuul/src/github.com/vexxhost/atmosphere.common/extensions/molecule/secretgen-controller/converge.yml\nINFO [secretgen-controller > syntax] Executed: Successful\nINFO [secretgen-controller > create] Executing\nWARNING [secretgen-controller > create] Executed: Missing playbook (Remove from test_sequence to suppress)\nINFO [secretgen-controller > prepare] Executing\n\nPLAY [Prepare] *****************************************************************\n\nTASK [Gathering Facts] *********************************************************\nThursday 09 July 2026 00:45:42 +0000 (0:00:00.032) 0:00:00.032 *********\n[WARNING]: Platform linux on host controller is using the discovered Python\ninterpreter at /usr/bin/python3.12, but future installation of another Python\ninterpreter could change the meaning of that path. See\nhttps://docs.ansible.com/ansible-\ncore/2.18/reference_appendices/interpreter_discovery.html for more information.\nok: [controller]\n\nTASK [Install Debian packages] *************************************************\nThursday 09 July 2026 00:45:43 +0000 (0:00:01.342) 0:00:01.375 *********\nok: [controller]\n\nPLAY [Configure Kubernetes VIP] ************************************************\n\nTASK [Gathering Facts] *********************************************************\nThursday 09 July 2026 00:45:46 +0000 (0:00:02.193) 0:00:03.568 *********\nok: [controller]\n\nTASK [vexxhost.containers.directory : Create directory (/etc/kubernetes/manifests)] ***\nThursday 09 July 2026 00:45:46 +0000 (0:00:00.794) 0:00:04.363 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kube_vip : Uninstall legacy HA stack] ****************\nThursday 09 July 2026 00:45:47 +0000 (0:00:00.394) 0:00:04.757 *********\nok: [controller] => (item=/etc/keepalived/keepalived.conf)\nok: [controller] => (item=/etc/keepalived/check_apiserver.sh)\nok: [controller] => (item=/etc/kubernetes/manifests/keepalived.yaml)\nok: [controller] => (item=/etc/haproxy/haproxy.cfg)\nok: [controller] => (item=/etc/kubernetes/manifests/haproxy.yaml)\n\nTASK [vexxhost.kubernetes.kube_vip : Switch API server to run on port 6443] ****\nThursday 09 July 2026 00:45:48 +0000 (0:00:01.112) 0:00:05.870 *********\nfailed: [controller] (item=/etc/kubernetes/manifests/kube-apiserver.yaml) => {\"ansible_loop_var\": \"item\", \"changed\": false, \"item\": \"/etc/kubernetes/manifests/kube-apiserver.yaml\", \"msg\": \"Path /etc/kubernetes/manifests/kube-apiserver.yaml does not exist !\", \"rc\": 257}\nfailed: [controller] (item=/etc/kubernetes/controller-manager.conf) => {\"ansible_loop_var\": \"item\", \"changed\": false, \"item\": \"/etc/kubernetes/controller-manager.conf\", \"msg\": \"Path /etc/kubernetes/controller-manager.conf does not exist !\", \"rc\": 257}\nfailed: [controller] (item=/etc/kubernetes/scheduler.conf) => {\"ansible_loop_var\": \"item\", \"changed\": false, \"item\": \"/etc/kubernetes/scheduler.conf\", \"msg\": \"Path /etc/kubernetes/scheduler.conf does not exist !\", \"rc\": 257}\n...ignoring\n\nTASK [vexxhost.kubernetes.kube_vip : Check if super-admin.conf exists] *********\nThursday 09 July 2026 00:45:49 +0000 (0:00:00.728) 0:00:06.599 *********\nok: [controller]\n\nTASK [vexxhost.kubernetes.kube_vip : Check if kubeadm has already run] *********\nThursday 09 July 2026 00:45:49 +0000 (0:00:00.308) 0:00:06.907 *********\nok: [controller]\n\nTASK [vexxhost.kubernetes.kube_vip : Set fact with KUBECONFIG path] ************\nThursday 09 July 2026 00:45:49 +0000 (0:00:00.238) 0:00:07.146 *********\nok: [controller]\n\nTASK [vexxhost.kubernetes.kube_vip : Set fact with KUBECONFIG path (with super-admin.conf)] ***\nThursday 09 July 2026 00:45:49 +0000 (0:00:00.032) 0:00:07.179 *********\nok: [controller]\n\nTASK [vexxhost.kubernetes.kube_vip : Upload Kubernetes manifest] ***************\nThursday 09 July 2026 00:45:49 +0000 (0:00:00.042) 0:00:07.221 *********\nok: [controller]\n\nTASK [vexxhost.kubernetes.kube_vip : Ensure kube-vip configuration file] *******\nThursday 09 July 2026 00:45:50 +0000 (0:00:00.805) 0:00:08.027 *********\nok: [controller]\n\nTASK [vexxhost.kubernetes.kube_vip : Flush handlers] ***************************\nThursday 09 July 2026 00:45:50 +0000 (0:00:00.239) 0:00:08.267 *********\n\nPLAY [Install Kubernetes] ******************************************************\n\nTASK [Gathering Facts] *********************************************************\nThursday 09 July 2026 00:45:50 +0000 (0:00:00.048) 0:00:08.315 *********\nok: [controller]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nThursday 09 July 2026 00:45:51 +0000 (0:00:00.808) 0:00:09.123 *********\nok: [controller]\n\nTASK [vexxhost.containers.package : Update state for tar] **********************\nThursday 09 July 2026 00:45:51 +0000 (0:00:00.262) 0:00:09.386 *********\nskipping: [controller]\n\nTASK [vexxhost.containers.directory : Create directory (/var/lib/downloads)] ***\nThursday 09 July 2026 00:45:51 +0000 (0:00:00.034) 0:00:09.420 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nThursday 09 July 2026 00:45:52 +0000 (0:00:00.258) 0:00:09.679 *********\nok: [controller] => {\n \"msg\": \"https://github.com/opencontainers/runc/releases/download/v1.4.2/runc.amd64\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nThursday 09 July 2026 00:45:52 +0000 (0:00:00.096) 0:00:09.775 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nThursday 09 July 2026 00:45:53 +0000 (0:00:00.841) 0:00:10.616 *********\nskipping: [controller]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nThursday 09 July 2026 00:45:53 +0000 (0:00:00.037) 0:00:10.654 *********\nok: [controller]\n\nTASK [vexxhost.containers.package : Update state for tar] **********************\nThursday 09 July 2026 00:45:53 +0000 (0:00:00.240) 0:00:10.895 *********\nok: [controller]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nThursday 09 July 2026 00:45:54 +0000 (0:00:00.871) 0:00:11.766 *********\nok: [controller] => {\n \"msg\": \"https://github.com/containerd/containerd/releases/download/v2.3.1/containerd-2.3.1-linux-amd64.tar.gz\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nThursday 09 July 2026 00:45:54 +0000 (0:00:00.068) 0:00:11.835 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nThursday 09 July 2026 00:45:55 +0000 (0:00:01.019) 0:00:12.854 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.containerd : Install SELinux packages] ***************\nThursday 09 July 2026 00:45:58 +0000 (0:00:03.023) 0:00:15.877 *********\nskipping: [controller]\n\nTASK [vexxhost.containers.containerd : Set SELinux to permissive at runtime] ***\nThursday 09 July 2026 00:45:58 +0000 (0:00:00.034) 0:00:15.912 *********\nskipping: [controller]\n\nTASK [vexxhost.containers.containerd : Persist SELinux permissive mode] ********\nThursday 09 July 2026 00:45:58 +0000 (0:00:00.037) 0:00:15.949 *********\nskipping: [controller]\n\nTASK [vexxhost.containers.containerd : Install AppArmor packages] **************\nThursday 09 July 2026 00:45:58 +0000 (0:00:00.029) 0:00:15.978 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.containerd : Create systemd service file for containerd] ***\nThursday 09 July 2026 00:46:07 +0000 (0:00:08.802) 0:00:24.781 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.containerd : Create folders for configuration] *******\nThursday 09 July 2026 00:46:07 +0000 (0:00:00.565) 0:00:25.346 *********\nchanged: [controller] => (item={'path': '/etc/containerd'})\nchanged: [controller] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})\nchanged: [controller] => (item={'path': '/run/containerd', 'mode': '0o711'})\nchanged: [controller] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})\nchanged: [controller] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})\n\nTASK [vexxhost.containers.containerd : Create containerd config file] **********\nThursday 09 July 2026 00:46:08 +0000 (0:00:01.168) 0:00:26.514 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.containerd : Force any restarts if necessary] ********\nThursday 09 July 2026 00:46:09 +0000 (0:00:00.735) 0:00:27.249 *********\n\nRUNNING HANDLER [vexxhost.containers.containerd : Restart containerd] **********\nThursday 09 July 2026 00:46:09 +0000 (0:00:00.006) 0:00:27.256 *********\nchanged: [controller]\n\nRUNNING HANDLER [vexxhost.kubernetes.kubelet : Reload systemd] *****************\nThursday 09 July 2026 00:46:10 +0000 (0:00:00.757) 0:00:28.013 *********\nok: [controller]\n\nTASK [vexxhost.containers.containerd : Enable and start service] ***************\nThursday 09 July 2026 00:46:11 +0000 (0:00:00.870) 0:00:28.884 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes_upgrade_check : Retrieve the \"kubeadm-config\" ConfigMap] ***\nThursday 09 July 2026 00:46:11 +0000 (0:00:00.675) 0:00:29.560 *********\nfatal: [controller]: FAILED! => {\"changed\": false, \"msg\": \"Failed to import the required Python library (kubernetes) on np0000184532's Python /usr/bin/python3.12. Please read the module documentation and install it in the appropriate location. If the required library is installed, but Ansible is using the wrong Python interpreter, please consult the documentation on ansible_python_interpreter\"}\n...ignoring\n\nTASK [vexxhost.kubernetes.kubernetes_upgrade_check : Parse the ClusterConfiguration] ***\nThursday 09 July 2026 00:46:12 +0000 (0:00:00.595) 0:00:30.155 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes_upgrade_check : Retrieve the current Kubernetes version] ***\nThursday 09 July 2026 00:46:12 +0000 (0:00:00.037) 0:00:30.193 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes_upgrade_check : Extract major, minor, and patch versions] ***\nThursday 09 July 2026 00:46:12 +0000 (0:00:00.035) 0:00:30.228 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes_upgrade_check : Fail if we're jumping more than one minor version] ***\nThursday 09 July 2026 00:46:12 +0000 (0:00:00.038) 0:00:30.267 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes_upgrade_check : Set fact if we need to upgrade] ***\nThursday 09 July 2026 00:46:12 +0000 (0:00:00.031) 0:00:30.298 *********\nskipping: [controller]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nThursday 09 July 2026 00:46:12 +0000 (0:00:00.032) 0:00:30.331 *********\nok: [controller]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nThursday 09 July 2026 00:46:13 +0000 (0:00:00.257) 0:00:30.588 *********\nok: [controller] => {\n \"msg\": \"https://dl.k8s.io/release/v1.28.13/bin/linux/amd64/kubeadm\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nThursday 09 July 2026 00:46:13 +0000 (0:00:00.040) 0:00:30.628 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nThursday 09 July 2026 00:46:14 +0000 (0:00:00.971) 0:00:31.599 *********\nskipping: [controller]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nThursday 09 July 2026 00:46:14 +0000 (0:00:00.038) 0:00:31.638 *********\nok: [controller]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nThursday 09 July 2026 00:46:14 +0000 (0:00:00.244) 0:00:31.882 *********\nok: [controller] => {\n \"msg\": \"https://dl.k8s.io/release/v1.28.13/bin/linux/amd64/kubectl\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nThursday 09 July 2026 00:46:14 +0000 (0:00:00.046) 0:00:31.928 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nThursday 09 July 2026 00:46:15 +0000 (0:00:01.032) 0:00:32.960 *********\nskipping: [controller]\n\nTASK [vexxhost.containers.containerd : Install SELinux packages] ***************\nThursday 09 July 2026 00:46:15 +0000 (0:00:00.045) 0:00:33.005 *********\nskipping: [controller]\n\nTASK [vexxhost.containers.containerd : Set SELinux to permissive at runtime] ***\nThursday 09 July 2026 00:46:15 +0000 (0:00:00.036) 0:00:33.042 *********\nskipping: [controller]\n\nTASK [vexxhost.containers.containerd : Persist SELinux permissive mode] ********\nThursday 09 July 2026 00:46:15 +0000 (0:00:00.035) 0:00:33.077 *********\nskipping: [controller]\n\nTASK [vexxhost.containers.containerd : Install AppArmor packages] **************\nThursday 09 July 2026 00:46:15 +0000 (0:00:00.033) 0:00:33.111 *********\nok: [controller]\n\nTASK [vexxhost.containers.containerd : Create systemd service file for containerd] ***\nThursday 09 July 2026 00:46:16 +0000 (0:00:01.086) 0:00:34.197 *********\nok: [controller]\n\nTASK [vexxhost.containers.containerd : Create folders for configuration] *******\nThursday 09 July 2026 00:46:17 +0000 (0:00:00.541) 0:00:34.739 *********\nok: [controller] => (item={'path': '/etc/containerd'})\nok: [controller] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})\nok: [controller] => (item={'path': '/run/containerd', 'mode': '0o711'})\nok: [controller] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})\nok: [controller] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})\n\nTASK [vexxhost.containers.containerd : Create containerd config file] **********\nThursday 09 July 2026 00:46:18 +0000 (0:00:01.123) 0:00:35.863 *********\nok: [controller]\n\nTASK [vexxhost.containers.containerd : Force any restarts if necessary] ********\nThursday 09 July 2026 00:46:18 +0000 (0:00:00.679) 0:00:36.542 *********\n\nTASK [vexxhost.containers.containerd : Enable and start service] ***************\nThursday 09 July 2026 00:46:18 +0000 (0:00:00.005) 0:00:36.547 *********\nok: [controller]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nThursday 09 July 2026 00:46:19 +0000 (0:00:00.439) 0:00:36.987 *********\nok: [controller]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nThursday 09 July 2026 00:46:19 +0000 (0:00:00.241) 0:00:37.229 *********\nok: [controller] => {\n \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.35.0/crictl-v1.35.0-linux-amd64.tar.gz\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nThursday 09 July 2026 00:46:19 +0000 (0:00:00.063) 0:00:37.293 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nThursday 09 July 2026 00:46:20 +0000 (0:00:00.780) 0:00:38.073 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nThursday 09 July 2026 00:46:22 +0000 (0:00:01.576) 0:00:39.650 *********\nok: [controller] => {\n \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.35.0/critest-v1.35.0-linux-amd64.tar.gz\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nThursday 09 July 2026 00:46:22 +0000 (0:00:00.058) 0:00:39.708 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nThursday 09 July 2026 00:46:23 +0000 (0:00:01.166) 0:00:40.874 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.cri_tools : Create crictl config] ********************\nThursday 09 July 2026 00:46:24 +0000 (0:00:01.533) 0:00:42.408 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.directory : Create directory (/opt/cni/bin)] *********\nThursday 09 July 2026 00:46:25 +0000 (0:00:00.574) 0:00:42.982 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nThursday 09 July 2026 00:46:25 +0000 (0:00:00.245) 0:00:43.228 *********\nok: [controller]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nThursday 09 July 2026 00:46:25 +0000 (0:00:00.235) 0:00:43.463 *********\nok: [controller] => {\n \"msg\": \"https://github.com/containernetworking/plugins/releases/download/v1.9.1/cni-plugins-linux-amd64-v1.9.1.tgz\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nThursday 09 July 2026 00:46:25 +0000 (0:00:00.071) 0:00:43.535 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nThursday 09 July 2026 00:46:27 +0000 (0:00:01.173) 0:00:44.708 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.cni_plugins : Gather variables for each operating system] ***\nThursday 09 July 2026 00:46:29 +0000 (0:00:02.840) 0:00:47.549 *********\nok: [controller] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/containers/roles/cni_plugins/vars/debian.yml)\n\nTASK [vexxhost.containers.cni_plugins : Install additional packages] ***********\nThursday 09 July 2026 00:46:30 +0000 (0:00:00.053) 0:00:47.602 *********\nok: [controller]\n\nTASK [vexxhost.containers.cni_plugins : Ensure IPv6 is enabled] ****************\nThursday 09 July 2026 00:46:31 +0000 (0:00:01.071) 0:00:48.674 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.cni_plugins : Enable kernel modules on-boot] *********\nThursday 09 July 2026 00:46:31 +0000 (0:00:00.330) 0:00:49.005 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.cni_plugins : Enable kernel modules in runtime] ******\nThursday 09 July 2026 00:46:31 +0000 (0:00:00.546) 0:00:49.551 *********\nchanged: [controller] => (item=br_netfilter)\nok: [controller] => (item=ip_tables)\nchanged: [controller] => (item=ip6_tables)\nchanged: [controller] => (item=nf_conntrack)\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nThursday 09 July 2026 00:46:33 +0000 (0:00:01.025) 0:00:50.576 *********\nok: [controller]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nThursday 09 July 2026 00:46:33 +0000 (0:00:00.239) 0:00:50.816 *********\nok: [controller] => {\n \"msg\": \"https://dl.k8s.io/release/v1.28.13/bin/linux/amd64/kubelet\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nThursday 09 July 2026 00:46:33 +0000 (0:00:00.039) 0:00:50.855 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nThursday 09 July 2026 00:46:35 +0000 (0:00:02.013) 0:00:52.869 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubelet : Gather variables for each operating system] ***\nThursday 09 July 2026 00:46:35 +0000 (0:00:00.033) 0:00:52.902 *********\nok: [controller] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/vars/debian.yml)\n\nTASK [vexxhost.kubernetes.kubelet : Install coreutils] *************************\nThursday 09 July 2026 00:46:35 +0000 (0:00:00.055) 0:00:52.957 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubelet : Install additional packages] ***************\nThursday 09 July 2026 00:46:35 +0000 (0:00:00.028) 0:00:52.986 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kubelet : Configure sysctl values] *******************\nThursday 09 July 2026 00:46:38 +0000 (0:00:03.342) 0:00:56.328 *********\nchanged: [controller] => (item={'name': 'net.ipv4.ip_forward', 'value': 1})\nchanged: [controller] => (item={'name': 'net.bridge.bridge-nf-call-iptables', 'value': 1})\nchanged: [controller] => (item={'name': 'net.bridge.bridge-nf-call-ip6tables', 'value': 1})\nchanged: [controller] => (item={'name': 'net.ipv4.conf.all.rp_filter', 'value': 0})\nchanged: [controller] => (item={'name': 'fs.inotify.max_queued_events', 'value': 1048576})\nchanged: [controller] => (item={'name': 'fs.inotify.max_user_instances', 'value': 8192})\nchanged: [controller] => (item={'name': 'fs.inotify.max_user_watches', 'value': 1048576})\n\nTASK [vexxhost.kubernetes.kubelet : Create folders for kubernetes configuration] ***\nThursday 09 July 2026 00:46:41 +0000 (0:00:02.569) 0:00:58.897 *********\nchanged: [controller] => (item=/etc/systemd/system/kubelet.service.d)\nok: [controller] => (item=/etc/kubernetes)\nok: [controller] => (item=/etc/kubernetes/manifests)\n\nTASK [vexxhost.kubernetes.kubelet : Add kubelet systemd service config] ********\nThursday 09 July 2026 00:46:41 +0000 (0:00:00.659) 0:00:59.557 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kubelet : Add kubeadm dropin for kubelet systemd service config] ***\nThursday 09 July 2026 00:46:42 +0000 (0:00:00.541) 0:01:00.098 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kubelet : Check swap status] *************************\nThursday 09 July 2026 00:46:43 +0000 (0:00:00.535) 0:01:00.634 *********\nok: [controller]\n\nTASK [vexxhost.kubernetes.kubelet : Disable swap] ******************************\nThursday 09 July 2026 00:46:43 +0000 (0:00:00.322) 0:01:00.956 *********\n[DEPRECATION WARNING]: Conditional result at location /home/zuul/.ansible/colle\nctions/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml\n91:11 was of type 'AnsibleUnsafeText'. Conditional results should only be True\nor False. The result was interpreted as False. This feature will be removed in\nversion 2.19. Deprecation warnings can be disabled by setting\ndeprecation_warnings=False in ansible.cfg.\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubelet : Remove swapfile from /etc/fstab] ***********\nThursday 09 July 2026 00:46:43 +0000 (0:00:00.032) 0:01:00.989 *********\nok: [controller] => (item=swap)\nok: [controller] => (item=none)\n\nTASK [vexxhost.kubernetes.kubelet : Create noswap systemd service config file] ***\nThursday 09 July 2026 00:46:43 +0000 (0:00:00.517) 0:01:01.506 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kubelet : Enable noswap service] *********************\nThursday 09 July 2026 00:46:44 +0000 (0:00:00.548) 0:01:02.055 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kubelet : Force any restarts if necessary] ***********\nThursday 09 July 2026 00:46:45 +0000 (0:00:00.669) 0:01:02.724 *********\n\nRUNNING HANDLER [vexxhost.kubernetes.kubelet : Reload systemd] *****************\nThursday 09 July 2026 00:46:45 +0000 (0:00:00.004) 0:01:02.728 *********\nok: [controller]\n\nTASK [vexxhost.kubernetes.kubelet : Enable and start kubelet service] **********\nThursday 09 July 2026 00:46:46 +0000 (0:00:00.842) 0:01:03.570 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kubelet : Ensure availability of dbus on Debian] *****\nThursday 09 July 2026 00:46:46 +0000 (0:00:00.704) 0:01:04.275 *********\nok: [controller]\n\nTASK [vexxhost.kubernetes.kubelet : Configure short hostname] ******************\nThursday 09 July 2026 00:46:47 +0000 (0:00:00.916) 0:01:05.192 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kubelet : Ensure hostname inside hosts file] *********\nThursday 09 July 2026 00:46:48 +0000 (0:00:00.787) 0:01:05.979 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Remove kubernetes repository] ***********\nThursday 09 July 2026 00:46:48 +0000 (0:00:00.327) 0:01:06.307 *********\nok: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Setup control plane] ********************\nThursday 09 July 2026 00:46:49 +0000 (0:00:00.477) 0:01:06.784 *********\nincluded: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubernetes/tasks/control-plane.yml for controller\n\nTASK [vexxhost.kubernetes.kubernetes : Bootstrap cluster] **********************\nThursday 09 July 2026 00:46:49 +0000 (0:00:00.073) 0:01:06.858 *********\nincluded: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubernetes/tasks/bootstrap-cluster.yml for controller\n\nTASK [vexxhost.kubernetes.kubernetes : Check if any control plane is bootstrapped] ***\nThursday 09 July 2026 00:46:49 +0000 (0:00:00.060) 0:01:06.919 *********\nok: [controller] => (item=controller)\n\nTASK [vexxhost.kubernetes.kubernetes : Pick node from pre-existing cluster] ****\nThursday 09 July 2026 00:46:49 +0000 (0:00:00.237) 0:01:07.157 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Select first node to initialize cluster] ***\nThursday 09 July 2026 00:46:49 +0000 (0:00:00.038) 0:01:07.196 *********\nok: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Print selected bootstrap node] **********\nThursday 09 July 2026 00:46:49 +0000 (0:00:00.045) 0:01:07.241 *********\nok: [controller] => {\n \"msg\": \"controller\"\n}\n\nTASK [vexxhost.kubernetes.kubernetes : Upload cluster configuration for bootstrap node] ***\nThursday 09 July 2026 00:46:49 +0000 (0:00:00.034) 0:01:07.275 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Create pki folder] **********************\nThursday 09 July 2026 00:46:50 +0000 (0:00:00.574) 0:01:07.849 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Create kubernetes ca key] ***************\nThursday 09 July 2026 00:46:50 +0000 (0:00:00.022) 0:01:07.872 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Create kubernetes ca cert] **************\nThursday 09 July 2026 00:46:50 +0000 (0:00:00.022) 0:01:07.894 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Create etcd-ca key] *********************\nThursday 09 July 2026 00:46:50 +0000 (0:00:00.026) 0:01:07.921 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Create etcd-ca cert] ********************\nThursday 09 July 2026 00:46:50 +0000 (0:00:00.030) 0:01:07.951 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Create front-proxy-ca key] **************\nThursday 09 July 2026 00:46:50 +0000 (0:00:00.025) 0:01:07.977 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Create front-proxy-ca cert] *************\nThursday 09 July 2026 00:46:50 +0000 (0:00:00.028) 0:01:08.005 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Initialize cluster] *********************\nThursday 09 July 2026 00:46:50 +0000 (0:00:00.031) 0:01:08.037 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Check if the node is already part of the cluster] ***\nThursday 09 July 2026 00:47:24 +0000 (0:00:34.021) 0:01:42.059 *********\nok: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Join cluster] ***************************\nThursday 09 July 2026 00:47:24 +0000 (0:00:00.263) 0:01:42.323 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Create folder for admin configuration] ***\nThursday 09 July 2026 00:47:24 +0000 (0:00:00.030) 0:01:42.353 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Creating a symlink for admin configuration file] ***\nThursday 09 July 2026 00:47:25 +0000 (0:00:00.238) 0:01:42.591 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Add bash autocomplete for kubectl] ******\nThursday 09 July 2026 00:47:25 +0000 (0:00:00.245) 0:01:42.837 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Install PIP] ****************************\nThursday 09 July 2026 00:47:25 +0000 (0:00:00.230) 0:01:43.068 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Install Kubernetes Python package using pip on supported systems] ***\nThursday 09 July 2026 00:47:25 +0000 (0:00:00.040) 0:01:43.108 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Enable EPEL repository] *****************\nThursday 09 July 2026 00:47:25 +0000 (0:00:00.040) 0:01:43.149 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Install Kubernetes Python package using package manager on supported systems] ***\nThursday 09 July 2026 00:47:25 +0000 (0:00:00.041) 0:01:43.190 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Allow workload on control plane node] ***\nThursday 09 July 2026 00:47:39 +0000 (0:00:14.319) 0:01:57.510 *********\n[WARNING]: kubernetes<24.2.0 is not supported or tested. Some features may not\nwork.\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Remove kube-proxy resources] ************\nThursday 09 July 2026 00:47:40 +0000 (0:00:00.727) 0:01:58.237 *********\nskipping: [controller] => (item=DaemonSet)\nskipping: [controller] => (item=ConfigMap)\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Start an upgrade] ***********************\nThursday 09 July 2026 00:47:40 +0000 (0:00:00.039) 0:01:58.277 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Check if the Kubernetes API services is up to date] ***\nThursday 09 July 2026 00:47:40 +0000 (0:00:00.039) 0:01:58.316 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Trigger an upgrade of the Kubernetes API services] ***\nThursday 09 July 2026 00:47:40 +0000 (0:00:00.037) 0:01:58.353 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Setup nodes] ****************************\nThursday 09 July 2026 00:47:40 +0000 (0:00:00.036) 0:01:58.390 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Upgrade & restart Kubelet node for upgrade (if needed)] ***\nThursday 09 July 2026 00:47:40 +0000 (0:00:00.085) 0:01:58.475 *********\nok: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Set node selector for CoreDNS components] ***\nThursday 09 July 2026 00:47:41 +0000 (0:00:00.445) 0:01:58.920 *********\nchanged: [controller]\n\nPLAY [Install control-plane components] ****************************************\n\nTASK [Gathering Facts] *********************************************************\nThursday 09 July 2026 00:47:42 +0000 (0:00:00.894) 0:01:59.815 *********\nok: [controller]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nThursday 09 July 2026 00:47:43 +0000 (0:00:00.792) 0:02:00.608 *********\nok: [controller]\n\nTASK [vexxhost.containers.package : Update state for tar] **********************\nThursday 09 July 2026 00:47:43 +0000 (0:00:00.231) 0:02:00.839 *********\nok: [controller]\n\nTASK [vexxhost.containers.directory : Create directory (/var/lib/downloads)] ***\nThursday 09 July 2026 00:47:44 +0000 (0:00:00.827) 0:02:01.666 *********\nok: [controller]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nThursday 09 July 2026 00:47:44 +0000 (0:00:00.238) 0:02:01.905 *********\nok: [controller] => {\n \"msg\": \"https://get.helm.sh/helm-v3.11.2-linux-amd64.tar.gz\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nThursday 09 July 2026 00:47:44 +0000 (0:00:00.033) 0:02:01.939 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nThursday 09 July 2026 00:47:45 +0000 (0:00:00.748) 0:02:02.688 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.helm : Remove Helm repository] ***********************\nThursday 09 July 2026 00:47:46 +0000 (0:00:01.644) 0:02:04.333 *********\nok: [controller]\n\nTASK [vexxhost.kubernetes.helm : Add bash autocomplete for helm] ***************\nThursday 09 July 2026 00:47:47 +0000 (0:00:00.381) 0:02:04.714 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.helm : Get Helm plugins dir] *************************\nThursday 09 July 2026 00:47:47 +0000 (0:00:00.242) 0:02:04.957 *********\nok: [controller]\n\nTASK [vexxhost.kubernetes.helm : Create Helm plugins directory if it does not exist] ***\nThursday 09 July 2026 00:47:47 +0000 (0:00:00.277) 0:02:05.235 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.helm : Remove Helm diff plugin installed by kubernetes.core.helm_plugin] ***\nThursday 09 July 2026 00:47:47 +0000 (0:00:00.242) 0:02:05.477 *********\nok: [controller]\n\nTASK [Install plugin] **********************************************************\nThursday 09 July 2026 00:47:48 +0000 (0:00:00.239) 0:02:05.717 *********\nincluded: vexxhost.containers.download_artifact for controller\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nThursday 09 July 2026 00:47:48 +0000 (0:00:00.040) 0:02:05.757 *********\nok: [controller] => {\n \"msg\": \"https://github.com/databus23/helm-diff/releases/download/v3.8.1/helm-diff-linux-amd64.tgz\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nThursday 09 July 2026 00:47:48 +0000 (0:00:00.035) 0:02:05.792 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nThursday 09 July 2026 00:47:49 +0000 (0:00:00.815) 0:02:06.607 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.upload_helm_chart : Include help chart upload method tasks] ***\nThursday 09 July 2026 00:47:50 +0000 (0:00:01.920) 0:02:08.528 *********\nincluded: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/upload_helm_chart/tasks/synchronize.yml for controller\n\nTASK [vexxhost.kubernetes.upload_helm_chart : Upload Helm chart] ***************\nThursday 09 July 2026 00:47:50 +0000 (0:00:00.031) 0:02:08.559 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.cilium : Get current Kubernetes version] *************\nThursday 09 July 2026 00:47:51 +0000 (0:00:00.632) 0:02:09.191 *********\nok: [controller]\n\nTASK [vexxhost.kubernetes.cilium : Deploy Helm chart] **************************\nThursday 09 July 2026 00:47:52 +0000 (0:00:00.830) 0:02:10.021 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.upload_helm_chart : Include help chart upload method tasks] ***\nThursday 09 July 2026 00:47:54 +0000 (0:00:02.081) 0:02:12.103 *********\nincluded: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/upload_helm_chart/tasks/synchronize.yml for controller\n\nTASK [vexxhost.kubernetes.upload_helm_chart : Upload Helm chart] ***************\nThursday 09 July 2026 00:47:54 +0000 (0:00:00.033) 0:02:12.137 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.envoy_gateway : Deploy Helm chart] *******************\nThursday 09 July 2026 00:47:55 +0000 (0:00:00.538) 0:02:12.675 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.envoy_gateway : Create GatewayClass] *****************\nThursday 09 July 2026 00:48:29 +0000 (0:00:34.290) 0:02:46.965 *********\nchanged: [controller]\n\nPLAY RECAP *********************************************************************\ncontroller : ok=117 changed=54 unreachable=0 failed=0 skipped=35 rescued=0 ignored=2\n\n\nTASKS RECAP ********************************************************************\nThursday 09 July 2026 00:48:30 +0000 (0:00:00.752) 0:02:47.717 *********\n===============================================================================\nvexxhost.kubernetes.envoy_gateway : Deploy Helm chart ------------------ 34.29s\nvexxhost.kubernetes.kubernetes : Initialize cluster -------------------- 34.02s\nvexxhost.kubernetes.kubernetes : Install Kubernetes Python package using package manager on supported systems -- 14.32s\nvexxhost.containers.containerd : Install AppArmor packages -------------- 8.80s\nvexxhost.kubernetes.kubelet : Install additional packages --------------- 3.34s\nvexxhost.containers.download_artifact : Extract archive ----------------- 3.02s\nvexxhost.containers.download_artifact : Extract archive ----------------- 2.84s\nvexxhost.kubernetes.kubelet : Configure sysctl values ------------------- 2.57s\nInstall Debian packages ------------------------------------------------- 2.19s\nvexxhost.kubernetes.cilium : Deploy Helm chart -------------------------- 2.08s\nvexxhost.containers.download_artifact : Download item ------------------- 2.01s\nvexxhost.containers.download_artifact : Extract archive ----------------- 1.92s\nvexxhost.kubernetes.kubelet : Reload systemd ---------------------------- 1.71s\nvexxhost.containers.download_artifact : Extract archive ----------------- 1.64s\nvexxhost.containers.download_artifact : Extract archive ----------------- 1.58s\nvexxhost.containers.download_artifact : Extract archive ----------------- 1.53s\nGathering Facts --------------------------------------------------------- 1.34s\nvexxhost.containers.download_artifact : Download item ------------------- 1.17s\nvexxhost.containers.containerd : Create folders for configuration ------- 1.17s\nvexxhost.containers.download_artifact : Download item ------------------- 1.17s\nINFO [secretgen-controller > prepare] Executed: Successful\nINFO [secretgen-controller > converge] Executing\n\nPLAY [Deploy \"secretgen-controller\"] *******************************************\n\nTASK [atmosphere.common.secretgen_controller : Deploy secretgen-controller] ****\nThursday 09 July 2026 00:48:31 +0000 (0:00:00.055) 0:00:00.055 *********\n[WARNING]: kubernetes<24.2.0 is not supported or tested. Some features may not\nwork.\n[WARNING]: Platform linux on host controller is using the discovered Python\ninterpreter at /usr/bin/python3.12, but future installation of another Python\ninterpreter could change the meaning of that path. See\nhttps://docs.ansible.com/ansible-\ncore/2.18/reference_appendices/interpreter_discovery.html for more information.\nchanged: [controller]\n\nPLAY RECAP *********************************************************************\ncontroller : ok=1 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0\n\n\nTASKS RECAP ********************************************************************\nThursday 09 July 2026 00:48:32 +0000 (0:00:01.381) 0:00:01.437 *********\n===============================================================================\natmosphere.common.secretgen_controller : Deploy secretgen-controller ---- 1.38s\nINFO [secretgen-controller > converge] Executed: Successful\nINFO [secretgen-controller > idempotence] Executing\n\nPLAY [Deploy \"secretgen-controller\"] *******************************************\n\nTASK [atmosphere.common.secretgen_controller : Deploy secretgen-controller] ****\nThursday 09 July 2026 00:48:33 +0000 (0:00:00.055) 0:00:00.055 *********\n[WARNING]: kubernetes<24.2.0 is not supported or tested. Some features may not\nwork.\n[WARNING]: Platform linux on host controller is using the discovered Python\ninterpreter at /usr/bin/python3.12, but future installation of another Python\ninterpreter could change the meaning of that path. See\nhttps://docs.ansible.com/ansible-\ncore/2.18/reference_appendices/interpreter_discovery.html for more information.\nok: [controller]\n\nPLAY RECAP *********************************************************************\ncontroller : ok=1 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0\n\n\nTASKS RECAP ********************************************************************\nThursday 09 July 2026 00:48:34 +0000 (0:00:01.391) 0:00:01.446 *********\n===============================================================================\natmosphere.common.secretgen_controller : Deploy secretgen-controller ---- 1.39s\nINFO [secretgen-controller > idempotence] Executed: Successful\nINFO [secretgen-controller > side_effect] Executing\nWARNING [secretgen-controller > side_effect] Executed: Missing playbook (Remove from test_sequence to suppress)\nINFO [secretgen-controller > verify] Executing\n\nPLAY [Verify] ******************************************************************\n\nTASK [Gathering Facts] *********************************************************\nThursday 09 July 2026 00:48:35 +0000 (0:00:00.049) 0:00:00.049 *********\n[WARNING]: Platform linux on host controller is using the discovered Python\ninterpreter at /usr/bin/python3.12, but future installation of another Python\ninterpreter could change the meaning of that path. See\nhttps://docs.ansible.com/ansible-\ncore/2.18/reference_appendices/interpreter_discovery.html for more information.\nok: [controller]\n\nTASK [Wait for secretgen-controller deployment to be available] ****************\nThursday 09 July 2026 00:48:36 +0000 (0:00:01.285) 0:00:01.335 *********\n[WARNING]: kubernetes<24.2.0 is not supported or tested. Some features may not\nwork.\nok: [controller]\n\nTASK [Create a test Password resource] *****************************************\nThursday 09 July 2026 00:48:37 +0000 (0:00:00.868) 0:00:02.203 *********\nchanged: [controller]\n\nTASK [Wait for test-password secret to be generated] ***************************\nThursday 09 July 2026 00:48:38 +0000 (0:00:00.892) 0:00:03.096 *********\nok: [controller]\n\nPLAY RECAP *********************************************************************\ncontroller : ok=4 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0\n\n\nTASKS RECAP ********************************************************************\nThursday 09 July 2026 00:48:39 +0000 (0:00:00.727) 0:00:03.823 *********\n===============================================================================\nGathering Facts --------------------------------------------------------- 1.29s\nCreate a test Password resource ----------------------------------------- 0.89s\nWait for secretgen-controller deployment to be available ---------------- 0.87s\nWait for test-password secret to be generated --------------------------- 0.73s\nINFO [secretgen-controller > verify] Executed: Successful\nINFO [secretgen-controller > cleanup] Executing\nWARNING [secretgen-controller > cleanup] Executed: Missing playbook (Remove from test_sequence to suppress)\nINFO [secretgen-controller > destroy] Executing\nWARNING [secretgen-controller > destroy] Skipping, '--destroy=never' requested.\nINFO [secretgen-controller > destroy] Executed: Successful\nWARNING Molecule executed 1 scenario (1 missing files)",
"stdout_lines": [
"Using CPython 3.12.3 interpreter at: /usr/bin/python3",
"Creating virtual environment at: .venv",
"warning: No `requires-python` value found in the workspace. Defaulting to `>=3.12`.",
"Downloading kubernetes (1.9MiB)",
"Downloading pygments (1.2MiB)",
"Downloading cryptography (4.3MiB)",
"Downloading pydantic-core (2.0MiB)",
"Downloading ansible-core (2.1MiB)",
" Downloading pydantic-core",
" Downloading cryptography",
" Downloading pygments",
" Downloading kubernetes",
" Downloading ansible-core",
"Installed 52 packages in 51ms",
"INFO Collection 'atmosphere.common' detected.",
"INFO Scenarios will be used from 'extensions/molecule'",
"INFO [secretgen-controller > discovery] scenario test matrix: dependency, cleanup, destroy, syntax, create, prepare, converge, idempotence, side_effect, verify, cleanup, destroy",
"INFO [secretgen-controller > prerun] Performing prerun with role_name_check=0...",
"INFO [secretgen-controller > dependency] Executing",
"WARNING [secretgen-controller > dependency] Missing roles requirements file: requirements.yml",
"WARNING [secretgen-controller > dependency] Missing collections requirements file: collections.yml",
"WARNING [secretgen-controller > dependency] Executed: 2 missing (Remove from test_sequence to suppress)",
"INFO [secretgen-controller > cleanup] Executing",
"WARNING [secretgen-controller > cleanup] Executed: Missing playbook (Remove from test_sequence to suppress)",
"INFO [secretgen-controller > destroy] Executing",
"WARNING [secretgen-controller > destroy] Skipping, '--destroy=never' requested.",
"INFO [secretgen-controller > destroy] Executed: Successful",
"INFO [secretgen-controller > syntax] Executing",
"",
"playbook: /home/zuul/src/github.com/vexxhost/atmosphere.common/extensions/molecule/secretgen-controller/converge.yml",
"INFO [secretgen-controller > syntax] Executed: Successful",
"INFO [secretgen-controller > create] Executing",
"WARNING [secretgen-controller > create] Executed: Missing playbook (Remove from test_sequence to suppress)",
"INFO [secretgen-controller > prepare] Executing",
"",
"PLAY [Prepare] *****************************************************************",
"",
"TASK [Gathering Facts] *********************************************************",
"Thursday 09 July 2026 00:45:42 +0000 (0:00:00.032) 0:00:00.032 *********",
"[WARNING]: Platform linux on host controller is using the discovered Python",
"interpreter at /usr/bin/python3.12, but future installation of another Python",
"interpreter could change the meaning of that path. See",
"https://docs.ansible.com/ansible-",
"core/2.18/reference_appendices/interpreter_discovery.html for more information.",
"ok: [controller]",
"",
"TASK [Install Debian packages] *************************************************",
"Thursday 09 July 2026 00:45:43 +0000 (0:00:01.342) 0:00:01.375 *********",
"ok: [controller]",
"",
"PLAY [Configure Kubernetes VIP] ************************************************",
"",
"TASK [Gathering Facts] *********************************************************",
"Thursday 09 July 2026 00:45:46 +0000 (0:00:02.193) 0:00:03.568 *********",
"ok: [controller]",
"",
"TASK [vexxhost.containers.directory : Create directory (/etc/kubernetes/manifests)] ***",
"Thursday 09 July 2026 00:45:46 +0000 (0:00:00.794) 0:00:04.363 *********",
"changed: [controller]",
"",
"TASK [vexxhost.kubernetes.kube_vip : Uninstall legacy HA stack] ****************",
"Thursday 09 July 2026 00:45:47 +0000 (0:00:00.394) 0:00:04.757 *********",
"ok: [controller] => (item=/etc/keepalived/keepalived.conf)",
"ok: [controller] => (item=/etc/keepalived/check_apiserver.sh)",
"ok: [controller] => (item=/etc/kubernetes/manifests/keepalived.yaml)",
"ok: [controller] => (item=/etc/haproxy/haproxy.cfg)",
"ok: [controller] => (item=/etc/kubernetes/manifests/haproxy.yaml)",
"",
"TASK [vexxhost.kubernetes.kube_vip : Switch API server to run on port 6443] ****",
"Thursday 09 July 2026 00:45:48 +0000 (0:00:01.112) 0:00:05.870 *********",
"failed: [controller] (item=/etc/kubernetes/manifests/kube-apiserver.yaml) => {\"ansible_loop_var\": \"item\", \"changed\": false, \"item\": \"/etc/kubernetes/manifests/kube-apiserver.yaml\", \"msg\": \"Path /etc/kubernetes/manifests/kube-apiserver.yaml does not exist !\", \"rc\": 257}",
"failed: [controller] (item=/etc/kubernetes/controller-manager.conf) => {\"ansible_loop_var\": \"item\", \"changed\": false, \"item\": \"/etc/kubernetes/controller-manager.conf\", \"msg\": \"Path /etc/kubernetes/controller-manager.conf does not exist !\", \"rc\": 257}",
"failed: [controller] (item=/etc/kubernetes/scheduler.conf) => {\"ansible_loop_var\": \"item\", \"changed\": false, \"item\": \"/etc/kubernetes/scheduler.conf\", \"msg\": \"Path /etc/kubernetes/scheduler.conf does not exist !\", \"rc\": 257}",
"...ignoring",
"",
"TASK [vexxhost.kubernetes.kube_vip : Check if super-admin.conf exists] *********",
"Thursday 09 July 2026 00:45:49 +0000 (0:00:00.728) 0:00:06.599 *********",
"ok: [controller]",
"",
"TASK [vexxhost.kubernetes.kube_vip : Check if kubeadm has already run] *********",
"Thursday 09 July 2026 00:45:49 +0000 (0:00:00.308) 0:00:06.907 *********",
"ok: [controller]",
"",
"TASK [vexxhost.kubernetes.kube_vip : Set fact with KUBECONFIG path] ************",
"Thursday 09 July 2026 00:45:49 +0000 (0:00:00.238) 0:00:07.146 *********",
"ok: [controller]",
"",
"TASK [vexxhost.kubernetes.kube_vip : Set fact with KUBECONFIG path (with super-admin.conf)] ***",
"Thursday 09 July 2026 00:45:49 +0000 (0:00:00.032) 0:00:07.179 *********",
"ok: [controller]",
"",
"TASK [vexxhost.kubernetes.kube_vip : Upload Kubernetes manifest] ***************",
"Thursday 09 July 2026 00:45:49 +0000 (0:00:00.042) 0:00:07.221 *********",
"ok: [controller]",
"",
"TASK [vexxhost.kubernetes.kube_vip : Ensure kube-vip configuration file] *******",
"Thursday 09 July 2026 00:45:50 +0000 (0:00:00.805) 0:00:08.027 *********",
"ok: [controller]",
"",
"TASK [vexxhost.kubernetes.kube_vip : Flush handlers] ***************************",
"Thursday 09 July 2026 00:45:50 +0000 (0:00:00.239) 0:00:08.267 *********",
"",
"PLAY [Install Kubernetes] ******************************************************",
"",
"TASK [Gathering Facts] *********************************************************",
"Thursday 09 July 2026 00:45:50 +0000 (0:00:00.048) 0:00:08.315 *********",
"ok: [controller]",
"",
"TASK [vexxhost.containers.forget_package : Forget package] *********************",
"Thursday 09 July 2026 00:45:51 +0000 (0:00:00.808) 0:00:09.123 *********",
"ok: [controller]",
"",
"TASK [vexxhost.containers.package : Update state for tar] **********************",
"Thursday 09 July 2026 00:45:51 +0000 (0:00:00.262) 0:00:09.386 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.containers.directory : Create directory (/var/lib/downloads)] ***",
"Thursday 09 July 2026 00:45:51 +0000 (0:00:00.034) 0:00:09.420 *********",
"changed: [controller]",
"",
"TASK [vexxhost.containers.download_artifact : Starting download of file] *******",
"Thursday 09 July 2026 00:45:52 +0000 (0:00:00.258) 0:00:09.679 *********",
"ok: [controller] => {",
" \"msg\": \"https://github.com/opencontainers/runc/releases/download/v1.4.2/runc.amd64\"",
"}",
"",
"TASK [vexxhost.containers.download_artifact : Download item] *******************",
"Thursday 09 July 2026 00:45:52 +0000 (0:00:00.096) 0:00:09.775 *********",
"changed: [controller]",
"",
"TASK [vexxhost.containers.download_artifact : Extract archive] *****************",
"Thursday 09 July 2026 00:45:53 +0000 (0:00:00.841) 0:00:10.616 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.containers.forget_package : Forget package] *********************",
"Thursday 09 July 2026 00:45:53 +0000 (0:00:00.037) 0:00:10.654 *********",
"ok: [controller]",
"",
"TASK [vexxhost.containers.package : Update state for tar] **********************",
"Thursday 09 July 2026 00:45:53 +0000 (0:00:00.240) 0:00:10.895 *********",
"ok: [controller]",
"",
"TASK [vexxhost.containers.download_artifact : Starting download of file] *******",
"Thursday 09 July 2026 00:45:54 +0000 (0:00:00.871) 0:00:11.766 *********",
"ok: [controller] => {",
" \"msg\": \"https://github.com/containerd/containerd/releases/download/v2.3.1/containerd-2.3.1-linux-amd64.tar.gz\"",
"}",
"",
"TASK [vexxhost.containers.download_artifact : Download item] *******************",
"Thursday 09 July 2026 00:45:54 +0000 (0:00:00.068) 0:00:11.835 *********",
"changed: [controller]",
"",
"TASK [vexxhost.containers.download_artifact : Extract archive] *****************",
"Thursday 09 July 2026 00:45:55 +0000 (0:00:01.019) 0:00:12.854 *********",
"changed: [controller]",
"",
"TASK [vexxhost.containers.containerd : Install SELinux packages] ***************",
"Thursday 09 July 2026 00:45:58 +0000 (0:00:03.023) 0:00:15.877 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.containers.containerd : Set SELinux to permissive at runtime] ***",
"Thursday 09 July 2026 00:45:58 +0000 (0:00:00.034) 0:00:15.912 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.containers.containerd : Persist SELinux permissive mode] ********",
"Thursday 09 July 2026 00:45:58 +0000 (0:00:00.037) 0:00:15.949 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.containers.containerd : Install AppArmor packages] **************",
"Thursday 09 July 2026 00:45:58 +0000 (0:00:00.029) 0:00:15.978 *********",
"changed: [controller]",
"",
"TASK [vexxhost.containers.containerd : Create systemd service file for containerd] ***",
"Thursday 09 July 2026 00:46:07 +0000 (0:00:08.802) 0:00:24.781 *********",
"changed: [controller]",
"",
"TASK [vexxhost.containers.containerd : Create folders for configuration] *******",
"Thursday 09 July 2026 00:46:07 +0000 (0:00:00.565) 0:00:25.346 *********",
"changed: [controller] => (item={'path': '/etc/containerd'})",
"changed: [controller] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})",
"changed: [controller] => (item={'path': '/run/containerd', 'mode': '0o711'})",
"changed: [controller] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})",
"changed: [controller] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})",
"",
"TASK [vexxhost.containers.containerd : Create containerd config file] **********",
"Thursday 09 July 2026 00:46:08 +0000 (0:00:01.168) 0:00:26.514 *********",
"changed: [controller]",
"",
"TASK [vexxhost.containers.containerd : Force any restarts if necessary] ********",
"Thursday 09 July 2026 00:46:09 +0000 (0:00:00.735) 0:00:27.249 *********",
"",
"RUNNING HANDLER [vexxhost.containers.containerd : Restart containerd] **********",
"Thursday 09 July 2026 00:46:09 +0000 (0:00:00.006) 0:00:27.256 *********",
"changed: [controller]",
"",
"RUNNING HANDLER [vexxhost.kubernetes.kubelet : Reload systemd] *****************",
"Thursday 09 July 2026 00:46:10 +0000 (0:00:00.757) 0:00:28.013 *********",
"ok: [controller]",
"",
"TASK [vexxhost.containers.containerd : Enable and start service] ***************",
"Thursday 09 July 2026 00:46:11 +0000 (0:00:00.870) 0:00:28.884 *********",
"changed: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes_upgrade_check : Retrieve the \"kubeadm-config\" ConfigMap] ***",
"Thursday 09 July 2026 00:46:11 +0000 (0:00:00.675) 0:00:29.560 *********",
"fatal: [controller]: FAILED! => {\"changed\": false, \"msg\": \"Failed to import the required Python library (kubernetes) on np0000184532's Python /usr/bin/python3.12. Please read the module documentation and install it in the appropriate location. If the required library is installed, but Ansible is using the wrong Python interpreter, please consult the documentation on ansible_python_interpreter\"}",
"...ignoring",
"",
"TASK [vexxhost.kubernetes.kubernetes_upgrade_check : Parse the ClusterConfiguration] ***",
"Thursday 09 July 2026 00:46:12 +0000 (0:00:00.595) 0:00:30.155 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes_upgrade_check : Retrieve the current Kubernetes version] ***",
"Thursday 09 July 2026 00:46:12 +0000 (0:00:00.037) 0:00:30.193 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes_upgrade_check : Extract major, minor, and patch versions] ***",
"Thursday 09 July 2026 00:46:12 +0000 (0:00:00.035) 0:00:30.228 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes_upgrade_check : Fail if we're jumping more than one minor version] ***",
"Thursday 09 July 2026 00:46:12 +0000 (0:00:00.038) 0:00:30.267 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes_upgrade_check : Set fact if we need to upgrade] ***",
"Thursday 09 July 2026 00:46:12 +0000 (0:00:00.031) 0:00:30.298 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.containers.forget_package : Forget package] *********************",
"Thursday 09 July 2026 00:46:12 +0000 (0:00:00.032) 0:00:30.331 *********",
"ok: [controller]",
"",
"TASK [vexxhost.containers.download_artifact : Starting download of file] *******",
"Thursday 09 July 2026 00:46:13 +0000 (0:00:00.257) 0:00:30.588 *********",
"ok: [controller] => {",
" \"msg\": \"https://dl.k8s.io/release/v1.28.13/bin/linux/amd64/kubeadm\"",
"}",
"",
"TASK [vexxhost.containers.download_artifact : Download item] *******************",
"Thursday 09 July 2026 00:46:13 +0000 (0:00:00.040) 0:00:30.628 *********",
"changed: [controller]",
"",
"TASK [vexxhost.containers.download_artifact : Extract archive] *****************",
"Thursday 09 July 2026 00:46:14 +0000 (0:00:00.971) 0:00:31.599 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.containers.forget_package : Forget package] *********************",
"Thursday 09 July 2026 00:46:14 +0000 (0:00:00.038) 0:00:31.638 *********",
"ok: [controller]",
"",
"TASK [vexxhost.containers.download_artifact : Starting download of file] *******",
"Thursday 09 July 2026 00:46:14 +0000 (0:00:00.244) 0:00:31.882 *********",
"ok: [controller] => {",
" \"msg\": \"https://dl.k8s.io/release/v1.28.13/bin/linux/amd64/kubectl\"",
"}",
"",
"TASK [vexxhost.containers.download_artifact : Download item] *******************",
"Thursday 09 July 2026 00:46:14 +0000 (0:00:00.046) 0:00:31.928 *********",
"changed: [controller]",
"",
"TASK [vexxhost.containers.download_artifact : Extract archive] *****************",
"Thursday 09 July 2026 00:46:15 +0000 (0:00:01.032) 0:00:32.960 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.containers.containerd : Install SELinux packages] ***************",
"Thursday 09 July 2026 00:46:15 +0000 (0:00:00.045) 0:00:33.005 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.containers.containerd : Set SELinux to permissive at runtime] ***",
"Thursday 09 July 2026 00:46:15 +0000 (0:00:00.036) 0:00:33.042 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.containers.containerd : Persist SELinux permissive mode] ********",
"Thursday 09 July 2026 00:46:15 +0000 (0:00:00.035) 0:00:33.077 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.containers.containerd : Install AppArmor packages] **************",
"Thursday 09 July 2026 00:46:15 +0000 (0:00:00.033) 0:00:33.111 *********",
"ok: [controller]",
"",
"TASK [vexxhost.containers.containerd : Create systemd service file for containerd] ***",
"Thursday 09 July 2026 00:46:16 +0000 (0:00:01.086) 0:00:34.197 *********",
"ok: [controller]",
"",
"TASK [vexxhost.containers.containerd : Create folders for configuration] *******",
"Thursday 09 July 2026 00:46:17 +0000 (0:00:00.541) 0:00:34.739 *********",
"ok: [controller] => (item={'path': '/etc/containerd'})",
"ok: [controller] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})",
"ok: [controller] => (item={'path': '/run/containerd', 'mode': '0o711'})",
"ok: [controller] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})",
"ok: [controller] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})",
"",
"TASK [vexxhost.containers.containerd : Create containerd config file] **********",
"Thursday 09 July 2026 00:46:18 +0000 (0:00:01.123) 0:00:35.863 *********",
"ok: [controller]",
"",
"TASK [vexxhost.containers.containerd : Force any restarts if necessary] ********",
"Thursday 09 July 2026 00:46:18 +0000 (0:00:00.679) 0:00:36.542 *********",
"",
"TASK [vexxhost.containers.containerd : Enable and start service] ***************",
"Thursday 09 July 2026 00:46:18 +0000 (0:00:00.005) 0:00:36.547 *********",
"ok: [controller]",
"",
"TASK [vexxhost.containers.forget_package : Forget package] *********************",
"Thursday 09 July 2026 00:46:19 +0000 (0:00:00.439) 0:00:36.987 *********",
"ok: [controller]",
"",
"TASK [vexxhost.containers.download_artifact : Starting download of file] *******",
"Thursday 09 July 2026 00:46:19 +0000 (0:00:00.241) 0:00:37.229 *********",
"ok: [controller] => {",
" \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.35.0/crictl-v1.35.0-linux-amd64.tar.gz\"",
"}",
"",
"TASK [vexxhost.containers.download_artifact : Download item] *******************",
"Thursday 09 July 2026 00:46:19 +0000 (0:00:00.063) 0:00:37.293 *********",
"changed: [controller]",
"",
"TASK [vexxhost.containers.download_artifact : Extract archive] *****************",
"Thursday 09 July 2026 00:46:20 +0000 (0:00:00.780) 0:00:38.073 *********",
"changed: [controller]",
"",
"TASK [vexxhost.containers.download_artifact : Starting download of file] *******",
"Thursday 09 July 2026 00:46:22 +0000 (0:00:01.576) 0:00:39.650 *********",
"ok: [controller] => {",
" \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.35.0/critest-v1.35.0-linux-amd64.tar.gz\"",
"}",
"",
"TASK [vexxhost.containers.download_artifact : Download item] *******************",
"Thursday 09 July 2026 00:46:22 +0000 (0:00:00.058) 0:00:39.708 *********",
"changed: [controller]",
"",
"TASK [vexxhost.containers.download_artifact : Extract archive] *****************",
"Thursday 09 July 2026 00:46:23 +0000 (0:00:01.166) 0:00:40.874 *********",
"changed: [controller]",
"",
"TASK [vexxhost.containers.cri_tools : Create crictl config] ********************",
"Thursday 09 July 2026 00:46:24 +0000 (0:00:01.533) 0:00:42.408 *********",
"changed: [controller]",
"",
"TASK [vexxhost.containers.directory : Create directory (/opt/cni/bin)] *********",
"Thursday 09 July 2026 00:46:25 +0000 (0:00:00.574) 0:00:42.982 *********",
"changed: [controller]",
"",
"TASK [vexxhost.containers.forget_package : Forget package] *********************",
"Thursday 09 July 2026 00:46:25 +0000 (0:00:00.245) 0:00:43.228 *********",
"ok: [controller]",
"",
"TASK [vexxhost.containers.download_artifact : Starting download of file] *******",
"Thursday 09 July 2026 00:46:25 +0000 (0:00:00.235) 0:00:43.463 *********",
"ok: [controller] => {",
" \"msg\": \"https://github.com/containernetworking/plugins/releases/download/v1.9.1/cni-plugins-linux-amd64-v1.9.1.tgz\"",
"}",
"",
"TASK [vexxhost.containers.download_artifact : Download item] *******************",
"Thursday 09 July 2026 00:46:25 +0000 (0:00:00.071) 0:00:43.535 *********",
"changed: [controller]",
"",
"TASK [vexxhost.containers.download_artifact : Extract archive] *****************",
"Thursday 09 July 2026 00:46:27 +0000 (0:00:01.173) 0:00:44.708 *********",
"changed: [controller]",
"",
"TASK [vexxhost.containers.cni_plugins : Gather variables for each operating system] ***",
"Thursday 09 July 2026 00:46:29 +0000 (0:00:02.840) 0:00:47.549 *********",
"ok: [controller] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/containers/roles/cni_plugins/vars/debian.yml)",
"",
"TASK [vexxhost.containers.cni_plugins : Install additional packages] ***********",
"Thursday 09 July 2026 00:46:30 +0000 (0:00:00.053) 0:00:47.602 *********",
"ok: [controller]",
"",
"TASK [vexxhost.containers.cni_plugins : Ensure IPv6 is enabled] ****************",
"Thursday 09 July 2026 00:46:31 +0000 (0:00:01.071) 0:00:48.674 *********",
"changed: [controller]",
"",
"TASK [vexxhost.containers.cni_plugins : Enable kernel modules on-boot] *********",
"Thursday 09 July 2026 00:46:31 +0000 (0:00:00.330) 0:00:49.005 *********",
"changed: [controller]",
"",
"TASK [vexxhost.containers.cni_plugins : Enable kernel modules in runtime] ******",
"Thursday 09 July 2026 00:46:31 +0000 (0:00:00.546) 0:00:49.551 *********",
"changed: [controller] => (item=br_netfilter)",
"ok: [controller] => (item=ip_tables)",
"changed: [controller] => (item=ip6_tables)",
"changed: [controller] => (item=nf_conntrack)",
"",
"TASK [vexxhost.containers.forget_package : Forget package] *********************",
"Thursday 09 July 2026 00:46:33 +0000 (0:00:01.025) 0:00:50.576 *********",
"ok: [controller]",
"",
"TASK [vexxhost.containers.download_artifact : Starting download of file] *******",
"Thursday 09 July 2026 00:46:33 +0000 (0:00:00.239) 0:00:50.816 *********",
"ok: [controller] => {",
" \"msg\": \"https://dl.k8s.io/release/v1.28.13/bin/linux/amd64/kubelet\"",
"}",
"",
"TASK [vexxhost.containers.download_artifact : Download item] *******************",
"Thursday 09 July 2026 00:46:33 +0000 (0:00:00.039) 0:00:50.855 *********",
"changed: [controller]",
"",
"TASK [vexxhost.containers.download_artifact : Extract archive] *****************",
"Thursday 09 July 2026 00:46:35 +0000 (0:00:02.013) 0:00:52.869 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.kubernetes.kubelet : Gather variables for each operating system] ***",
"Thursday 09 July 2026 00:46:35 +0000 (0:00:00.033) 0:00:52.902 *********",
"ok: [controller] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/vars/debian.yml)",
"",
"TASK [vexxhost.kubernetes.kubelet : Install coreutils] *************************",
"Thursday 09 July 2026 00:46:35 +0000 (0:00:00.055) 0:00:52.957 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.kubernetes.kubelet : Install additional packages] ***************",
"Thursday 09 July 2026 00:46:35 +0000 (0:00:00.028) 0:00:52.986 *********",
"changed: [controller]",
"",
"TASK [vexxhost.kubernetes.kubelet : Configure sysctl values] *******************",
"Thursday 09 July 2026 00:46:38 +0000 (0:00:03.342) 0:00:56.328 *********",
"changed: [controller] => (item={'name': 'net.ipv4.ip_forward', 'value': 1})",
"changed: [controller] => (item={'name': 'net.bridge.bridge-nf-call-iptables', 'value': 1})",
"changed: [controller] => (item={'name': 'net.bridge.bridge-nf-call-ip6tables', 'value': 1})",
"changed: [controller] => (item={'name': 'net.ipv4.conf.all.rp_filter', 'value': 0})",
"changed: [controller] => (item={'name': 'fs.inotify.max_queued_events', 'value': 1048576})",
"changed: [controller] => (item={'name': 'fs.inotify.max_user_instances', 'value': 8192})",
"changed: [controller] => (item={'name': 'fs.inotify.max_user_watches', 'value': 1048576})",
"",
"TASK [vexxhost.kubernetes.kubelet : Create folders for kubernetes configuration] ***",
"Thursday 09 July 2026 00:46:41 +0000 (0:00:02.569) 0:00:58.897 *********",
"changed: [controller] => (item=/etc/systemd/system/kubelet.service.d)",
"ok: [controller] => (item=/etc/kubernetes)",
"ok: [controller] => (item=/etc/kubernetes/manifests)",
"",
"TASK [vexxhost.kubernetes.kubelet : Add kubelet systemd service config] ********",
"Thursday 09 July 2026 00:46:41 +0000 (0:00:00.659) 0:00:59.557 *********",
"changed: [controller]",
"",
"TASK [vexxhost.kubernetes.kubelet : Add kubeadm dropin for kubelet systemd service config] ***",
"Thursday 09 July 2026 00:46:42 +0000 (0:00:00.541) 0:01:00.098 *********",
"changed: [controller]",
"",
"TASK [vexxhost.kubernetes.kubelet : Check swap status] *************************",
"Thursday 09 July 2026 00:46:43 +0000 (0:00:00.535) 0:01:00.634 *********",
"ok: [controller]",
"",
"TASK [vexxhost.kubernetes.kubelet : Disable swap] ******************************",
"Thursday 09 July 2026 00:46:43 +0000 (0:00:00.322) 0:01:00.956 *********",
"[DEPRECATION WARNING]: Conditional result at location /home/zuul/.ansible/colle",
"ctions/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml",
"91:11 was of type 'AnsibleUnsafeText'. Conditional results should only be True",
"or False. The result was interpreted as False. This feature will be removed in",
"version 2.19. Deprecation warnings can be disabled by setting",
"deprecation_warnings=False in ansible.cfg.",
"skipping: [controller]",
"",
"TASK [vexxhost.kubernetes.kubelet : Remove swapfile from /etc/fstab] ***********",
"Thursday 09 July 2026 00:46:43 +0000 (0:00:00.032) 0:01:00.989 *********",
"ok: [controller] => (item=swap)",
"ok: [controller] => (item=none)",
"",
"TASK [vexxhost.kubernetes.kubelet : Create noswap systemd service config file] ***",
"Thursday 09 July 2026 00:46:43 +0000 (0:00:00.517) 0:01:01.506 *********",
"changed: [controller]",
"",
"TASK [vexxhost.kubernetes.kubelet : Enable noswap service] *********************",
"Thursday 09 July 2026 00:46:44 +0000 (0:00:00.548) 0:01:02.055 *********",
"changed: [controller]",
"",
"TASK [vexxhost.kubernetes.kubelet : Force any restarts if necessary] ***********",
"Thursday 09 July 2026 00:46:45 +0000 (0:00:00.669) 0:01:02.724 *********",
"",
"RUNNING HANDLER [vexxhost.kubernetes.kubelet : Reload systemd] *****************",
"Thursday 09 July 2026 00:46:45 +0000 (0:00:00.004) 0:01:02.728 *********",
"ok: [controller]",
"",
"TASK [vexxhost.kubernetes.kubelet : Enable and start kubelet service] **********",
"Thursday 09 July 2026 00:46:46 +0000 (0:00:00.842) 0:01:03.570 *********",
"changed: [controller]",
"",
"TASK [vexxhost.kubernetes.kubelet : Ensure availability of dbus on Debian] *****",
"Thursday 09 July 2026 00:46:46 +0000 (0:00:00.704) 0:01:04.275 *********",
"ok: [controller]",
"",
"TASK [vexxhost.kubernetes.kubelet : Configure short hostname] ******************",
"Thursday 09 July 2026 00:46:47 +0000 (0:00:00.916) 0:01:05.192 *********",
"changed: [controller]",
"",
"TASK [vexxhost.kubernetes.kubelet : Ensure hostname inside hosts file] *********",
"Thursday 09 July 2026 00:46:48 +0000 (0:00:00.787) 0:01:05.979 *********",
"changed: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes : Remove kubernetes repository] ***********",
"Thursday 09 July 2026 00:46:48 +0000 (0:00:00.327) 0:01:06.307 *********",
"ok: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes : Setup control plane] ********************",
"Thursday 09 July 2026 00:46:49 +0000 (0:00:00.477) 0:01:06.784 *********",
"included: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubernetes/tasks/control-plane.yml for controller",
"",
"TASK [vexxhost.kubernetes.kubernetes : Bootstrap cluster] **********************",
"Thursday 09 July 2026 00:46:49 +0000 (0:00:00.073) 0:01:06.858 *********",
"included: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubernetes/tasks/bootstrap-cluster.yml for controller",
"",
"TASK [vexxhost.kubernetes.kubernetes : Check if any control plane is bootstrapped] ***",
"Thursday 09 July 2026 00:46:49 +0000 (0:00:00.060) 0:01:06.919 *********",
"ok: [controller] => (item=controller)",
"",
"TASK [vexxhost.kubernetes.kubernetes : Pick node from pre-existing cluster] ****",
"Thursday 09 July 2026 00:46:49 +0000 (0:00:00.237) 0:01:07.157 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes : Select first node to initialize cluster] ***",
"Thursday 09 July 2026 00:46:49 +0000 (0:00:00.038) 0:01:07.196 *********",
"ok: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes : Print selected bootstrap node] **********",
"Thursday 09 July 2026 00:46:49 +0000 (0:00:00.045) 0:01:07.241 *********",
"ok: [controller] => {",
" \"msg\": \"controller\"",
"}",
"",
"TASK [vexxhost.kubernetes.kubernetes : Upload cluster configuration for bootstrap node] ***",
"Thursday 09 July 2026 00:46:49 +0000 (0:00:00.034) 0:01:07.275 *********",
"changed: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes : Create pki folder] **********************",
"Thursday 09 July 2026 00:46:50 +0000 (0:00:00.574) 0:01:07.849 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes : Create kubernetes ca key] ***************",
"Thursday 09 July 2026 00:46:50 +0000 (0:00:00.022) 0:01:07.872 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes : Create kubernetes ca cert] **************",
"Thursday 09 July 2026 00:46:50 +0000 (0:00:00.022) 0:01:07.894 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes : Create etcd-ca key] *********************",
"Thursday 09 July 2026 00:46:50 +0000 (0:00:00.026) 0:01:07.921 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes : Create etcd-ca cert] ********************",
"Thursday 09 July 2026 00:46:50 +0000 (0:00:00.030) 0:01:07.951 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes : Create front-proxy-ca key] **************",
"Thursday 09 July 2026 00:46:50 +0000 (0:00:00.025) 0:01:07.977 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes : Create front-proxy-ca cert] *************",
"Thursday 09 July 2026 00:46:50 +0000 (0:00:00.028) 0:01:08.005 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes : Initialize cluster] *********************",
"Thursday 09 July 2026 00:46:50 +0000 (0:00:00.031) 0:01:08.037 *********",
"changed: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes : Check if the node is already part of the cluster] ***",
"Thursday 09 July 2026 00:47:24 +0000 (0:00:34.021) 0:01:42.059 *********",
"ok: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes : Join cluster] ***************************",
"Thursday 09 July 2026 00:47:24 +0000 (0:00:00.263) 0:01:42.323 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes : Create folder for admin configuration] ***",
"Thursday 09 July 2026 00:47:24 +0000 (0:00:00.030) 0:01:42.353 *********",
"changed: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes : Creating a symlink for admin configuration file] ***",
"Thursday 09 July 2026 00:47:25 +0000 (0:00:00.238) 0:01:42.591 *********",
"changed: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes : Add bash autocomplete for kubectl] ******",
"Thursday 09 July 2026 00:47:25 +0000 (0:00:00.245) 0:01:42.837 *********",
"changed: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes : Install PIP] ****************************",
"Thursday 09 July 2026 00:47:25 +0000 (0:00:00.230) 0:01:43.068 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes : Install Kubernetes Python package using pip on supported systems] ***",
"Thursday 09 July 2026 00:47:25 +0000 (0:00:00.040) 0:01:43.108 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes : Enable EPEL repository] *****************",
"Thursday 09 July 2026 00:47:25 +0000 (0:00:00.040) 0:01:43.149 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes : Install Kubernetes Python package using package manager on supported systems] ***",
"Thursday 09 July 2026 00:47:25 +0000 (0:00:00.041) 0:01:43.190 *********",
"changed: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes : Allow workload on control plane node] ***",
"Thursday 09 July 2026 00:47:39 +0000 (0:00:14.319) 0:01:57.510 *********",
"[WARNING]: kubernetes<24.2.0 is not supported or tested. Some features may not",
"work.",
"changed: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes : Remove kube-proxy resources] ************",
"Thursday 09 July 2026 00:47:40 +0000 (0:00:00.727) 0:01:58.237 *********",
"skipping: [controller] => (item=DaemonSet)",
"skipping: [controller] => (item=ConfigMap)",
"skipping: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes : Start an upgrade] ***********************",
"Thursday 09 July 2026 00:47:40 +0000 (0:00:00.039) 0:01:58.277 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes : Check if the Kubernetes API services is up to date] ***",
"Thursday 09 July 2026 00:47:40 +0000 (0:00:00.039) 0:01:58.316 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes : Trigger an upgrade of the Kubernetes API services] ***",
"Thursday 09 July 2026 00:47:40 +0000 (0:00:00.037) 0:01:58.353 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes : Setup nodes] ****************************",
"Thursday 09 July 2026 00:47:40 +0000 (0:00:00.036) 0:01:58.390 *********",
"skipping: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes : Upgrade & restart Kubelet node for upgrade (if needed)] ***",
"Thursday 09 July 2026 00:47:40 +0000 (0:00:00.085) 0:01:58.475 *********",
"ok: [controller]",
"",
"TASK [vexxhost.kubernetes.kubernetes : Set node selector for CoreDNS components] ***",
"Thursday 09 July 2026 00:47:41 +0000 (0:00:00.445) 0:01:58.920 *********",
"changed: [controller]",
"",
"PLAY [Install control-plane components] ****************************************",
"",
"TASK [Gathering Facts] *********************************************************",
"Thursday 09 July 2026 00:47:42 +0000 (0:00:00.894) 0:01:59.815 *********",
"ok: [controller]",
"",
"TASK [vexxhost.containers.forget_package : Forget package] *********************",
"Thursday 09 July 2026 00:47:43 +0000 (0:00:00.792) 0:02:00.608 *********",
"ok: [controller]",
"",
"TASK [vexxhost.containers.package : Update state for tar] **********************",
"Thursday 09 July 2026 00:47:43 +0000 (0:00:00.231) 0:02:00.839 *********",
"ok: [controller]",
"",
"TASK [vexxhost.containers.directory : Create directory (/var/lib/downloads)] ***",
"Thursday 09 July 2026 00:47:44 +0000 (0:00:00.827) 0:02:01.666 *********",
"ok: [controller]",
"",
"TASK [vexxhost.containers.download_artifact : Starting download of file] *******",
"Thursday 09 July 2026 00:47:44 +0000 (0:00:00.238) 0:02:01.905 *********",
"ok: [controller] => {",
" \"msg\": \"https://get.helm.sh/helm-v3.11.2-linux-amd64.tar.gz\"",
"}",
"",
"TASK [vexxhost.containers.download_artifact : Download item] *******************",
"Thursday 09 July 2026 00:47:44 +0000 (0:00:00.033) 0:02:01.939 *********",
"changed: [controller]",
"",
"TASK [vexxhost.containers.download_artifact : Extract archive] *****************",
"Thursday 09 July 2026 00:47:45 +0000 (0:00:00.748) 0:02:02.688 *********",
"changed: [controller]",
"",
"TASK [vexxhost.kubernetes.helm : Remove Helm repository] ***********************",
"Thursday 09 July 2026 00:47:46 +0000 (0:00:01.644) 0:02:04.333 *********",
"ok: [controller]",
"",
"TASK [vexxhost.kubernetes.helm : Add bash autocomplete for helm] ***************",
"Thursday 09 July 2026 00:47:47 +0000 (0:00:00.381) 0:02:04.714 *********",
"changed: [controller]",
"",
"TASK [vexxhost.kubernetes.helm : Get Helm plugins dir] *************************",
"Thursday 09 July 2026 00:47:47 +0000 (0:00:00.242) 0:02:04.957 *********",
"ok: [controller]",
"",
"TASK [vexxhost.kubernetes.helm : Create Helm plugins directory if it does not exist] ***",
"Thursday 09 July 2026 00:47:47 +0000 (0:00:00.277) 0:02:05.235 *********",
"changed: [controller]",
"",
"TASK [vexxhost.kubernetes.helm : Remove Helm diff plugin installed by kubernetes.core.helm_plugin] ***",
"Thursday 09 July 2026 00:47:47 +0000 (0:00:00.242) 0:02:05.477 *********",
"ok: [controller]",
"",
"TASK [Install plugin] **********************************************************",
"Thursday 09 July 2026 00:47:48 +0000 (0:00:00.239) 0:02:05.717 *********",
"included: vexxhost.containers.download_artifact for controller",
"",
"TASK [vexxhost.containers.download_artifact : Starting download of file] *******",
"Thursday 09 July 2026 00:47:48 +0000 (0:00:00.040) 0:02:05.757 *********",
"ok: [controller] => {",
" \"msg\": \"https://github.com/databus23/helm-diff/releases/download/v3.8.1/helm-diff-linux-amd64.tgz\"",
"}",
"",
"TASK [vexxhost.containers.download_artifact : Download item] *******************",
"Thursday 09 July 2026 00:47:48 +0000 (0:00:00.035) 0:02:05.792 *********",
"changed: [controller]",
"",
"TASK [vexxhost.containers.download_artifact : Extract archive] *****************",
"Thursday 09 July 2026 00:47:49 +0000 (0:00:00.815) 0:02:06.607 *********",
"changed: [controller]",
"",
"TASK [vexxhost.kubernetes.upload_helm_chart : Include help chart upload method tasks] ***",
"Thursday 09 July 2026 00:47:50 +0000 (0:00:01.920) 0:02:08.528 *********",
"included: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/upload_helm_chart/tasks/synchronize.yml for controller",
"",
"TASK [vexxhost.kubernetes.upload_helm_chart : Upload Helm chart] ***************",
"Thursday 09 July 2026 00:47:50 +0000 (0:00:00.031) 0:02:08.559 *********",
"changed: [controller]",
"",
"TASK [vexxhost.kubernetes.cilium : Get current Kubernetes version] *************",
"Thursday 09 July 2026 00:47:51 +0000 (0:00:00.632) 0:02:09.191 *********",
"ok: [controller]",
"",
"TASK [vexxhost.kubernetes.cilium : Deploy Helm chart] **************************",
"Thursday 09 July 2026 00:47:52 +0000 (0:00:00.830) 0:02:10.021 *********",
"changed: [controller]",
"",
"TASK [vexxhost.kubernetes.upload_helm_chart : Include help chart upload method tasks] ***",
"Thursday 09 July 2026 00:47:54 +0000 (0:00:02.081) 0:02:12.103 *********",
"included: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/upload_helm_chart/tasks/synchronize.yml for controller",
"",
"TASK [vexxhost.kubernetes.upload_helm_chart : Upload Helm chart] ***************",
"Thursday 09 July 2026 00:47:54 +0000 (0:00:00.033) 0:02:12.137 *********",
"changed: [controller]",
"",
"TASK [vexxhost.kubernetes.envoy_gateway : Deploy Helm chart] *******************",
"Thursday 09 July 2026 00:47:55 +0000 (0:00:00.538) 0:02:12.675 *********",
"changed: [controller]",
"",
"TASK [vexxhost.kubernetes.envoy_gateway : Create GatewayClass] *****************",
"Thursday 09 July 2026 00:48:29 +0000 (0:00:34.290) 0:02:46.965 *********",
"changed: [controller]",
"",
"PLAY RECAP *********************************************************************",
"controller : ok=117 changed=54 unreachable=0 failed=0 skipped=35 rescued=0 ignored=2",
"",
"",
"TASKS RECAP ********************************************************************",
"Thursday 09 July 2026 00:48:30 +0000 (0:00:00.752) 0:02:47.717 *********",
"===============================================================================",
"vexxhost.kubernetes.envoy_gateway : Deploy Helm chart ------------------ 34.29s",
"vexxhost.kubernetes.kubernetes : Initialize cluster -------------------- 34.02s",
"vexxhost.kubernetes.kubernetes : Install Kubernetes Python package using package manager on supported systems -- 14.32s",
"vexxhost.containers.containerd : Install AppArmor packages -------------- 8.80s",
"vexxhost.kubernetes.kubelet : Install additional packages --------------- 3.34s",
"vexxhost.containers.download_artifact : Extract archive ----------------- 3.02s",
"vexxhost.containers.download_artifact : Extract archive ----------------- 2.84s",
"vexxhost.kubernetes.kubelet : Configure sysctl values ------------------- 2.57s",
"Install Debian packages ------------------------------------------------- 2.19s",
"vexxhost.kubernetes.cilium : Deploy Helm chart -------------------------- 2.08s",
"vexxhost.containers.download_artifact : Download item ------------------- 2.01s",
"vexxhost.containers.download_artifact : Extract archive ----------------- 1.92s",
"vexxhost.kubernetes.kubelet : Reload systemd ---------------------------- 1.71s",
"vexxhost.containers.download_artifact : Extract archive ----------------- 1.64s",
"vexxhost.containers.download_artifact : Extract archive ----------------- 1.58s",
"vexxhost.containers.download_artifact : Extract archive ----------------- 1.53s",
"Gathering Facts --------------------------------------------------------- 1.34s",
"vexxhost.containers.download_artifact : Download item ------------------- 1.17s",
"vexxhost.containers.containerd : Create folders for configuration ------- 1.17s",
"vexxhost.containers.download_artifact : Download item ------------------- 1.17s",
"INFO [secretgen-controller > prepare] Executed: Successful",
"INFO [secretgen-controller > converge] Executing",
"",
"PLAY [Deploy \"secretgen-controller\"] *******************************************",
"",
"TASK [atmosphere.common.secretgen_controller : Deploy secretgen-controller] ****",
"Thursday 09 July 2026 00:48:31 +0000 (0:00:00.055) 0:00:00.055 *********",
"[WARNING]: kubernetes<24.2.0 is not supported or tested. Some features may not",
"work.",
"[WARNING]: Platform linux on host controller is using the discovered Python",
"interpreter at /usr/bin/python3.12, but future installation of another Python",
"interpreter could change the meaning of that path. See",
"https://docs.ansible.com/ansible-",
"core/2.18/reference_appendices/interpreter_discovery.html for more information.",
"changed: [controller]",
"",
"PLAY RECAP *********************************************************************",
"controller : ok=1 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0",
"",
"",
"TASKS RECAP ********************************************************************",
"Thursday 09 July 2026 00:48:32 +0000 (0:00:01.381) 0:00:01.437 *********",
"===============================================================================",
"atmosphere.common.secretgen_controller : Deploy secretgen-controller ---- 1.38s",
"INFO [secretgen-controller > converge] Executed: Successful",
"INFO [secretgen-controller > idempotence] Executing",
"",
"PLAY [Deploy \"secretgen-controller\"] *******************************************",
"",
"TASK [atmosphere.common.secretgen_controller : Deploy secretgen-controller] ****",
"Thursday 09 July 2026 00:48:33 +0000 (0:00:00.055) 0:00:00.055 *********",
"[WARNING]: kubernetes<24.2.0 is not supported or tested. Some features may not",
"work.",
"[WARNING]: Platform linux on host controller is using the discovered Python",
"interpreter at /usr/bin/python3.12, but future installation of another Python",
"interpreter could change the meaning of that path. See",
"https://docs.ansible.com/ansible-",
"core/2.18/reference_appendices/interpreter_discovery.html for more information.",
"ok: [controller]",
"",
"PLAY RECAP *********************************************************************",
"controller : ok=1 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0",
"",
"",
"TASKS RECAP ********************************************************************",
"Thursday 09 July 2026 00:48:34 +0000 (0:00:01.391) 0:00:01.446 *********",
"===============================================================================",
"atmosphere.common.secretgen_controller : Deploy secretgen-controller ---- 1.39s",
"INFO [secretgen-controller > idempotence] Executed: Successful",
"INFO [secretgen-controller > side_effect] Executing",
"WARNING [secretgen-controller > side_effect] Executed: Missing playbook (Remove from test_sequence to suppress)",
"INFO [secretgen-controller > verify] Executing",
"",
"PLAY [Verify] ******************************************************************",
"",
"TASK [Gathering Facts] *********************************************************",
"Thursday 09 July 2026 00:48:35 +0000 (0:00:00.049) 0:00:00.049 *********",
"[WARNING]: Platform linux on host controller is using the discovered Python",
"interpreter at /usr/bin/python3.12, but future installation of another Python",
"interpreter could change the meaning of that path. See",
"https://docs.ansible.com/ansible-",
"core/2.18/reference_appendices/interpreter_discovery.html for more information.",
"ok: [controller]",
"",
"TASK [Wait for secretgen-controller deployment to be available] ****************",
"Thursday 09 July 2026 00:48:36 +0000 (0:00:01.285) 0:00:01.335 *********",
"[WARNING]: kubernetes<24.2.0 is not supported or tested. Some features may not",
"work.",
"ok: [controller]",
"",
"TASK [Create a test Password resource] *****************************************",
"Thursday 09 July 2026 00:48:37 +0000 (0:00:00.868) 0:00:02.203 *********",
"changed: [controller]",
"",
"TASK [Wait for test-password secret to be generated] ***************************",
"Thursday 09 July 2026 00:48:38 +0000 (0:00:00.892) 0:00:03.096 *********",
"ok: [controller]",
"",
"PLAY RECAP *********************************************************************",
"controller : ok=4 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0",
"",
"",
"TASKS RECAP ********************************************************************",
"Thursday 09 July 2026 00:48:39 +0000 (0:00:00.727) 0:00:03.823 *********",
"===============================================================================",
"Gathering Facts --------------------------------------------------------- 1.29s",
"Create a test Password resource ----------------------------------------- 0.89s",
"Wait for secretgen-controller deployment to be available ---------------- 0.87s",
"Wait for test-password secret to be generated --------------------------- 0.73s",
"INFO [secretgen-controller > verify] Executed: Successful",
"INFO [secretgen-controller > cleanup] Executing",
"WARNING [secretgen-controller > cleanup] Executed: Missing playbook (Remove from test_sequence to suppress)",
"INFO [secretgen-controller > destroy] Executing",
"WARNING [secretgen-controller > destroy] Skipping, '--destroy=never' requested.",
"INFO [secretgen-controller > destroy] Executed: Successful",
"WARNING Molecule executed 1 scenario (1 missing files)"
],
"zuul_log_id": "0242ac17-0010-5adc-e765-000000000007-1-controller"
}
},
"task": {
"duration": {
"end": "2026-07-09T00:48:39.856447Z",
"start": "2026-07-09T00:45:00.165976Z"
},
"id": "0242ac17-0010-5adc-e765-000000000007",
"name": "Run Molecule scenario"
}
}
]
}
],
"stats": {
"controller": {
"changed": 3,
"failures": 0,
"ignored": 0,
"ok": 4,
"rescued": 0,
"skipped": 0,
"unreachable": 0
}
},
"trusted": false
},
{
"branch": "main",
"index": "0",
"phase": "post",
"playbook": "github.com/vexxhost/atmosphere.common/test-playbooks/molecule/post.yml",
"plays": [
{
"play": {
"duration": {
"end": "2026-07-09T00:49:25.569339Z",
"start": "2026-07-09T00:48:40.666003Z"
},
"id": "0242ac17-0010-dbf8-9562-000000000002",
"name": "Collect Molecule logs"
},
"tasks": [
{
"hosts": {
"controller": {
"action": "file",
"changed": true,
"diff": {
"after": {
"path": "/tmp/logs/system",
"state": "directory"
},
"before": {
"path": "/tmp/logs/system",
"state": "absent"
}
},
"gid": 0,
"group": "root",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": null,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/tmp/logs/system",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0755",
"owner": "root",
"path": "/tmp/logs/system",
"size": 4096,
"state": "directory",
"uid": 0
}
},
"role": {
"id": "0242ac17-0010-dbf8-9562-00000000000a",
"name": "gather-host-logs",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/gather-host-logs"
},
"task": {
"duration": {
"end": "2026-07-09T00:48:41.081930Z",
"start": "2026-07-09T00:48:40.680551Z"
},
"id": "0242ac17-0010-dbf8-9562-00000000000c",
"name": "creating directory for system status"
}
},
{
"hosts": {
"controller": {
"action": "shell",
"changed": true,
"cmd": "set -x\nsystemd-cgls --full --all --no-pager > /tmp/logs/system/systemd-cgls.txt\nip addr > /tmp/logs/system/ip-addr.txt\nip route > /tmp/logs/system/ip-route.txt\nlsblk > /tmp/logs/system/lsblk.txt\nmount > /tmp/logs/system/mount.txt\ndocker images > /tmp/logs/system/docker-images.txt\nbrctl show > /tmp/logs/system/brctl-show.txt\nps aux --sort=-%mem > /tmp/logs/system/ps.txt\ndpkg -l > /tmp/logs/system/packages.txt\nCONTAINERS=($(docker ps -a --format '{{ .Names }}' --filter label=zuul))\nif [ ! -z \"$CONTAINERS\" ]; then\n mkdir -p \"/tmp/logs/system/containers\"\n for CONTAINER in ${CONTAINERS}; do\n docker logs \"${CONTAINER}\" > \"/tmp/logs/system/containers/${CONTAINER}.txt\"\n done\nfi",
"delta": "0:00:00.088094",
"end": "2026-07-09 00:48:41.552311",
"invocation": {
"module_args": {
"_raw_params": "set -x\nsystemd-cgls --full --all --no-pager > /tmp/logs/system/systemd-cgls.txt\nip addr > /tmp/logs/system/ip-addr.txt\nip route > /tmp/logs/system/ip-route.txt\nlsblk > /tmp/logs/system/lsblk.txt\nmount > /tmp/logs/system/mount.txt\ndocker images > /tmp/logs/system/docker-images.txt\nbrctl show > /tmp/logs/system/brctl-show.txt\nps aux --sort=-%mem > /tmp/logs/system/ps.txt\ndpkg -l > /tmp/logs/system/packages.txt\nCONTAINERS=($(docker ps -a --format '{{ .Names }}' --filter label=zuul))\nif [ ! -z \"$CONTAINERS\" ]; then\n mkdir -p \"/tmp/logs/system/containers\"\n for CONTAINER in ${CONTAINERS}; do\n docker logs \"${CONTAINER}\" > \"/tmp/logs/system/containers/${CONTAINER}.txt\"\n done\nfi",
"_uses_shell": true,
"argv": null,
"chdir": null,
"creates": null,
"executable": "/bin/bash",
"expand_argument_vars": true,
"removes": null,
"stdin": null,
"stdin_add_newline": true,
"strip_empty_ends": true,
"zuul_ansible_split_streams": false,
"zuul_log_id": "0242ac17-0010-dbf8-9562-00000000000d-1-controller",
"zuul_no_log": false,
"zuul_output_max_bytes": 1073741824
}
},
"msg": "",
"rc": 0,
"start": "2026-07-09 00:48:41.464217",
"stderr": "",
"stderr_lines": [],
"stdout": "+ systemd-cgls --full --all --no-pager\n+ ip addr\n+ ip route\n+ lsblk\n+ mount\n+ docker images\n/bin/bash: line 7: docker: command not found\n+ brctl show\n/bin/bash: line 8: brctl: command not found\n+ ps aux --sort=-%mem\n+ dpkg -l\n+ CONTAINERS=($(docker ps -a --format '{{ .Names }}' --filter label=zuul))\n++ docker ps -a --format '{{ .Names }}' --filter label=zuul\n/bin/bash: line 11: docker: command not found\n+ '[' '!' -z '' ']'",
"stdout_lines": [
"+ systemd-cgls --full --all --no-pager",
"+ ip addr",
"+ ip route",
"+ lsblk",
"+ mount",
"+ docker images",
"/bin/bash: line 7: docker: command not found",
"+ brctl show",
"/bin/bash: line 8: brctl: command not found",
"+ ps aux --sort=-%mem",
"+ dpkg -l",
"+ CONTAINERS=($(docker ps -a --format '{{ .Names }}' --filter label=zuul))",
"++ docker ps -a --format '{{ .Names }}' --filter label=zuul",
"/bin/bash: line 11: docker: command not found",
"+ '[' '!' -z '' ']'"
],
"zuul_log_id": "0242ac17-0010-dbf8-9562-00000000000d-1-controller"
}
},
"role": {
"id": "0242ac17-0010-dbf8-9562-00000000000a",
"name": "gather-host-logs",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/gather-host-logs"
},
"task": {
"duration": {
"end": "2026-07-09T00:48:41.625549Z",
"start": "2026-07-09T00:48:41.107775Z"
},
"id": "0242ac17-0010-dbf8-9562-00000000000d",
"name": "Get logs for each host"
}
},
{
"hosts": {
"controller": {
"action": "synchronize",
"changed": true,
"cmd": "/usr/bin/rsync --delay-updates -F --compress --archive --rsh='/usr/bin/ssh -S none -o Port=22 -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null' --rsync-path='sudo -u root rsync' --out-format='<>%i %n%L' zuul@199.204.45.89:/tmp/logs/system /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs/controller",
"invocation": {
"module_args": {
"_local_rsync_password": null,
"_local_rsync_path": "rsync",
"_ssh_args": null,
"_substitute_controller": false,
"archive": true,
"checksum": false,
"compress": true,
"copy_links": false,
"delay_updates": true,
"delete": false,
"dest": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs/controller",
"dest_port": 22,
"dirs": false,
"existing_only": false,
"group": null,
"link_dest": null,
"links": null,
"mode": "pull",
"owner": null,
"partial": false,
"perms": null,
"private_key": null,
"recursive": null,
"rsync_opts": [],
"rsync_path": "sudo -u root rsync",
"rsync_timeout": 0,
"set_remote_user": true,
"src": "zuul@199.204.45.89:/tmp/logs/system",
"ssh_connection_multiplexing": false,
"times": null,
"use_ssh_args": false,
"verify_host": false
}
},
"msg": "created directory /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs/controller\ncd+++++++++ system/\n>f+++++++++ system/brctl-show.txt\n>f+++++++++ system/docker-images.txt\n>f+++++++++ system/ip-addr.txt\n>f+++++++++ system/ip-route.txt\n>f+++++++++ system/lsblk.txt\n>f+++++++++ system/mount.txt\n>f+++++++++ system/packages.txt\n>f+++++++++ system/ps.txt\n>f+++++++++ system/systemd-cgls.txt\n",
"rc": 0,
"stdout_lines": [
"created directory /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs/controller",
"cd+++++++++ system/",
">f+++++++++ system/brctl-show.txt",
">f+++++++++ system/docker-images.txt",
">f+++++++++ system/ip-addr.txt",
">f+++++++++ system/ip-route.txt",
">f+++++++++ system/lsblk.txt",
">f+++++++++ system/mount.txt",
">f+++++++++ system/packages.txt",
">f+++++++++ system/ps.txt",
">f+++++++++ system/systemd-cgls.txt"
]
}
},
"role": {
"id": "0242ac17-0010-dbf8-9562-00000000000a",
"name": "gather-host-logs",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/gather-host-logs"
},
"task": {
"duration": {
"end": "2026-07-09T00:48:42.297198Z",
"start": "2026-07-09T00:48:41.633879Z"
},
"id": "0242ac17-0010-dbf8-9562-00000000000e",
"name": "Downloads logs to executor"
}
},
{
"hosts": {
"controller": {
"action": "file",
"changed": true,
"msg": "All items completed",
"results": [
{
"ansible_loop_var": "directory",
"changed": true,
"diff": {
"after": {
"path": "/tmp/logs/helm/values",
"state": "directory"
},
"before": {
"path": "/tmp/logs/helm/values",
"state": "absent"
}
},
"directory": "values",
"failed": false,
"gid": 0,
"group": "root",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": null,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/tmp/logs/helm/values",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0755",
"owner": "root",
"path": "/tmp/logs/helm/values",
"size": 4096,
"state": "directory",
"uid": 0
},
{
"ansible_loop_var": "directory",
"changed": true,
"diff": {
"after": {
"path": "/tmp/logs/helm/releases",
"state": "directory"
},
"before": {
"path": "/tmp/logs/helm/releases",
"state": "absent"
}
},
"directory": "releases",
"failed": false,
"gid": 0,
"group": "root",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": null,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/tmp/logs/helm/releases",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0755",
"owner": "root",
"path": "/tmp/logs/helm/releases",
"size": 4096,
"state": "directory",
"uid": 0
}
]
}
},
"role": {
"id": "0242ac17-0010-dbf8-9562-000000000010",
"name": "helm-release-status",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/helm-release-status"
},
"task": {
"duration": {
"end": "2026-07-09T00:48:42.774370Z",
"start": "2026-07-09T00:48:42.308350Z"
},
"id": "0242ac17-0010-dbf8-9562-000000000012",
"name": "creating directory for helm release status"
}
},
{
"hosts": {
"controller": {
"action": "shell",
"changed": true,
"cmd": "set -e\n\nfor namespace in $(kubectl get namespaces --no-headers --output custom-columns=\":metadata.name\"); do\n # get all Helm releases including pending and failed releases\n for release in $(helm list --all --short --namespace $namespace); do\n # Make respective directories only when a Helm release actually exists in the namespace\n # to prevent uploading a bunch of empty directories for namespaces without a Helm release.\n mkdir -p /tmp/logs/helm/releases/$namespace\n mkdir -p /tmp/logs/helm/values/$namespace\n\n helm status $release --namespace $namespace >> /tmp/logs/helm/releases/$namespace/$release.txt\n helm get values $release --namespace $namespace --all >> /tmp/logs/helm/values/$namespace/$release.yaml\n done\ndone",
"delta": "0:00:01.335414",
"end": "2026-07-09 00:48:44.361371",
"invocation": {
"module_args": {
"_raw_params": "set -e\n\nfor namespace in $(kubectl get namespaces --no-headers --output custom-columns=\":metadata.name\"); do\n # get all Helm releases including pending and failed releases\n for release in $(helm list --all --short --namespace $namespace); do\n # Make respective directories only when a Helm release actually exists in the namespace\n # to prevent uploading a bunch of empty directories for namespaces without a Helm release.\n mkdir -p /tmp/logs/helm/releases/$namespace\n mkdir -p /tmp/logs/helm/values/$namespace\n\n helm status $release --namespace $namespace >> /tmp/logs/helm/releases/$namespace/$release.txt\n helm get values $release --namespace $namespace --all >> /tmp/logs/helm/values/$namespace/$release.yaml\n done\ndone",
"_uses_shell": true,
"argv": null,
"chdir": null,
"creates": null,
"executable": "/bin/bash",
"expand_argument_vars": true,
"removes": null,
"stdin": null,
"stdin_add_newline": true,
"strip_empty_ends": true,
"zuul_ansible_split_streams": false,
"zuul_log_id": "0242ac17-0010-dbf8-9562-000000000014-1-controller",
"zuul_no_log": false,
"zuul_output_max_bytes": 1073741824
}
},
"msg": "",
"rc": 0,
"start": "2026-07-09 00:48:43.025957",
"stderr": "",
"stderr_lines": [],
"stdout": "",
"stdout_lines": [],
"zuul_log_id": "0242ac17-0010-dbf8-9562-000000000014-1-controller"
}
},
"role": {
"id": "0242ac17-0010-dbf8-9562-000000000010",
"name": "helm-release-status",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/helm-release-status"
},
"task": {
"duration": {
"end": "2026-07-09T00:48:44.825884Z",
"start": "2026-07-09T00:48:42.806001Z"
},
"id": "0242ac17-0010-dbf8-9562-000000000014",
"name": "Gather get release status for helm charts"
}
},
{
"hosts": {
"controller": {
"action": "synchronize",
"changed": true,
"cmd": "/usr/bin/rsync --delay-updates -F --compress --archive --rsh='/usr/bin/ssh -S none -o Port=22 -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null' --rsync-path='sudo -u root rsync' --out-format='<>%i %n%L' zuul@199.204.45.89:/tmp/logs/helm /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs/controller",
"invocation": {
"module_args": {
"_local_rsync_password": null,
"_local_rsync_path": "rsync",
"_ssh_args": null,
"_substitute_controller": false,
"archive": true,
"checksum": false,
"compress": true,
"copy_links": false,
"delay_updates": true,
"delete": false,
"dest": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs/controller",
"dest_port": 22,
"dirs": false,
"existing_only": false,
"group": null,
"link_dest": null,
"links": null,
"mode": "pull",
"owner": null,
"partial": false,
"perms": null,
"private_key": null,
"recursive": null,
"rsync_opts": [],
"rsync_path": "sudo -u root rsync",
"rsync_timeout": 0,
"set_remote_user": true,
"src": "zuul@199.204.45.89:/tmp/logs/helm",
"ssh_connection_multiplexing": false,
"times": null,
"use_ssh_args": false,
"verify_host": false
}
},
"msg": "cd+++++++++ helm/\ncd+++++++++ helm/releases/\ncd+++++++++ helm/releases/envoy-gateway-system/\n>f+++++++++ helm/releases/envoy-gateway-system/envoy-gateway.txt\ncd+++++++++ helm/releases/kube-system/\n>f+++++++++ helm/releases/kube-system/cilium.txt\ncd+++++++++ helm/values/\ncd+++++++++ helm/values/envoy-gateway-system/\n>f+++++++++ helm/values/envoy-gateway-system/envoy-gateway.yaml\ncd+++++++++ helm/values/kube-system/\n>f+++++++++ helm/values/kube-system/cilium.yaml\n",
"rc": 0,
"stdout_lines": [
"cd+++++++++ helm/",
"cd+++++++++ helm/releases/",
"cd+++++++++ helm/releases/envoy-gateway-system/",
">f+++++++++ helm/releases/envoy-gateway-system/envoy-gateway.txt",
"cd+++++++++ helm/releases/kube-system/",
">f+++++++++ helm/releases/kube-system/cilium.txt",
"cd+++++++++ helm/values/",
"cd+++++++++ helm/values/envoy-gateway-system/",
">f+++++++++ helm/values/envoy-gateway-system/envoy-gateway.yaml",
"cd+++++++++ helm/values/kube-system/",
">f+++++++++ helm/values/kube-system/cilium.yaml"
]
}
},
"role": {
"id": "0242ac17-0010-dbf8-9562-000000000010",
"name": "helm-release-status",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/helm-release-status"
},
"task": {
"duration": {
"end": "2026-07-09T00:48:45.334742Z",
"start": "2026-07-09T00:48:44.833035Z"
},
"id": "0242ac17-0010-dbf8-9562-000000000015",
"name": "Downloads logs to executor"
}
},
{
"hosts": {
"controller": {
"action": "file",
"changed": true,
"diff": {
"after": {
"path": "/tmp/logs/objects/cluster",
"state": "directory"
},
"before": {
"path": "/tmp/logs/objects/cluster",
"state": "absent"
}
},
"gid": 0,
"group": "root",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": null,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/tmp/logs/objects/cluster",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0755",
"owner": "root",
"path": "/tmp/logs/objects/cluster",
"size": 4096,
"state": "directory",
"uid": 0
}
},
"role": {
"id": "0242ac17-0010-dbf8-9562-000000000017",
"name": "describe-kubernetes-objects",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/describe-kubernetes-objects"
},
"task": {
"duration": {
"end": "2026-07-09T00:48:45.595314Z",
"start": "2026-07-09T00:48:45.347327Z"
},
"id": "0242ac17-0010-dbf8-9562-000000000019",
"name": "creating directory for cluster scoped objects"
}
},
{
"hosts": {
"controller": {
"action": "shell",
"changed": true,
"cmd": "set -e\nexport OBJECT_TYPE=node,clusterrole,clusterrolebinding,storageclass,namespace\nexport PARALLELISM_FACTOR=2\n\nfunction list_objects () {\n printf ${OBJECT_TYPE} | xargs -d ',' -I {} -P1 -n1 bash -c 'echo \"$@\"' _ {}\n}\nexport -f list_objects\n\nfunction name_objects () {\n export OBJECT=$1\n kubectl get ${OBJECT} -o name | xargs -L1 -I {} -P1 -n1 bash -c 'echo \"${OBJECT} ${1#*/}\"' _ {}\n}\nexport -f name_objects\n\nfunction get_objects () {\n input=($1)\n export OBJECT=${input[0]}\n export NAME=${input[1]#*/}\n echo \"${OBJECT}/${NAME}\"\n DIR=\"/tmp/logs/objects/cluster/${OBJECT}\"\n mkdir -p ${DIR}\n kubectl get ${OBJECT} ${NAME} -o yaml > \"${DIR}/${NAME}.yaml\"\n kubectl describe ${OBJECT} ${NAME} > \"${DIR}/${NAME}.txt\"\n}\nexport -f get_objects\n\nlist_objects | xargs -r -n 1 -P ${PARALLELISM_FACTOR} -I {} bash -c 'name_objects \"$@\"' _ {} | xargs -r -n 1 -P ${PARALLELISM_FACTOR} -I {} bash -c 'get_objects \"$@\"' _ {}",
"delta": "0:00:11.450612",
"end": "2026-07-09 00:48:57.343141",
"invocation": {
"module_args": {
"_raw_params": "set -e\nexport OBJECT_TYPE=node,clusterrole,clusterrolebinding,storageclass,namespace\nexport PARALLELISM_FACTOR=2\n\nfunction list_objects () {\n printf ${OBJECT_TYPE} | xargs -d ',' -I {} -P1 -n1 bash -c 'echo \"$@\"' _ {}\n}\nexport -f list_objects\n\nfunction name_objects () {\n export OBJECT=$1\n kubectl get ${OBJECT} -o name | xargs -L1 -I {} -P1 -n1 bash -c 'echo \"${OBJECT} ${1#*/}\"' _ {}\n}\nexport -f name_objects\n\nfunction get_objects () {\n input=($1)\n export OBJECT=${input[0]}\n export NAME=${input[1]#*/}\n echo \"${OBJECT}/${NAME}\"\n DIR=\"/tmp/logs/objects/cluster/${OBJECT}\"\n mkdir -p ${DIR}\n kubectl get ${OBJECT} ${NAME} -o yaml > \"${DIR}/${NAME}.yaml\"\n kubectl describe ${OBJECT} ${NAME} > \"${DIR}/${NAME}.txt\"\n}\nexport -f get_objects\n\nlist_objects | xargs -r -n 1 -P ${PARALLELISM_FACTOR} -I {} bash -c 'name_objects \"$@\"' _ {} | xargs -r -n 1 -P ${PARALLELISM_FACTOR} -I {} bash -c 'get_objects \"$@\"' _ {}",
"_uses_shell": true,
"argv": null,
"chdir": null,
"creates": null,
"executable": "/bin/bash",
"expand_argument_vars": true,
"removes": null,
"stdin": null,
"stdin_add_newline": true,
"strip_empty_ends": true,
"zuul_ansible_split_streams": false,
"zuul_log_id": "0242ac17-0010-dbf8-9562-00000000001a-1-controller",
"zuul_no_log": false,
"zuul_output_max_bytes": 1073741824
}
},
"msg": "",
"rc": 0,
"start": "2026-07-09 00:48:45.892529",
"stderr": "",
"stderr_lines": [],
"stdout": "xargs: warning: options --max-args and --replace/-I/-i are mutually exclusive, ignoring previous --max-args valuexargs: \nwarning: options --max-args and --replace/-I/-i are mutually exclusive, ignoring previous --max-args value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nnode/controller\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nclusterrole/admin\nclusterrole/cilium\nclusterrole/cilium-operator\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nclusterrole/cluster-admin\nclusterrole/edit\nclusterrole/envoy-gateway-gateway-helm-certgen:envoy-gateway-system\nclusterrole/envoy-gateway-gateway-helm-envoy-gateway-role\nclusterrole/kubeadm:get-nodes\nclusterrole/secretgen-controller-cluster-role\nclusterrole/system:aggregate-to-admin\nclusterrole/system:aggregate-to-edit\nclusterrole/system:aggregate-to-view\nclusterrole/system:auth-delegator\nclusterrole/system:basic-user\nclusterrole/system:certificates.k8s.io:certificatesigningrequests:nodeclient\nclusterrole/system:certificates.k8s.io:certificatesigningrequests:selfnodeclient\nclusterrole/system:certificates.k8s.io:kube-apiserver-client-approver\nclusterrole/system:certificates.k8s.io:kube-apiserver-client-kubelet-approver\nclusterrole/system:certificates.k8s.io:kubelet-serving-approver\nclusterrole/system:certificates.k8s.io:legacy-unknown-approver\nclusterrole/system:controller:attachdetach-controller\nclusterrole/system:controller:certificate-controller\nclusterrole/system:controller:clusterrole-aggregation-controller\nclusterrole/system:controller:cronjob-controller\nclusterrole/system:controller:daemon-set-controller\nclusterrole/system:controller:deployment-controller\nclusterrole/system:controller:disruption-controller\nclusterrole/system:controller:endpoint-controller\nclusterrole/system:controller:endpointslice-controller\nclusterrole/system:controller:endpointslicemirroring-controller\nclusterrole/system:controller:ephemeral-volume-controller\nclusterrolebinding/cilium\nclusterrole/system:controller:expand-controller\nclusterrolebinding/cilium-operator\nclusterrole/system:controller:generic-garbage-collector\nclusterrolebinding/cluster-admin\nclusterrole/system:controller:horizontal-pod-autoscaler\nclusterrolebinding/envoy-gateway-gateway-helm-certgen:envoy-gateway-system\nclusterrole/system:controller:job-controller\nclusterrolebinding/envoy-gateway-gateway-helm-envoy-gateway-rolebinding\nclusterrole/system:controller:namespace-controller\nclusterrolebinding/kubeadm:get-nodes\nclusterrole/system:controller:node-controller\nclusterrolebinding/kubeadm:kubelet-bootstrap\nclusterrole/system:controller:persistent-volume-binder\nclusterrolebinding/kubeadm:node-autoapprove-bootstrap\nclusterrole/system:controller:pod-garbage-collector\nclusterrolebinding/kubeadm:node-autoapprove-certificate-rotation\nclusterrole/system:controller:pv-protection-controller\nclusterrolebinding/kubeadm:node-proxier\nclusterrolebinding/secretgen-controller-cluster-role-binding\nclusterrole/system:controller:pvc-protection-controller\nclusterrolebinding/system:basic-user\nclusterrole/system:controller:replicaset-controller\nclusterrolebinding/system:controller:attachdetach-controller\nclusterrole/system:controller:replication-controller\nclusterrolebinding/system:controller:certificate-controller\nclusterrole/system:controller:resourcequota-controller\nclusterrolebinding/system:controller:clusterrole-aggregation-controller\nclusterrole/system:controller:root-ca-cert-publisher\nclusterrolebinding/system:controller:cronjob-controller\nclusterrolebinding/system:controller:daemon-set-controller\nclusterrole/system:controller:route-controller\nclusterrolebinding/system:controller:deployment-controller\nclusterrole/system:controller:service-account-controller\nclusterrolebinding/system:controller:disruption-controller\nclusterrole/system:controller:service-controller\nclusterrolebinding/system:controller:endpoint-controller\nclusterrole/system:controller:statefulset-controller\nclusterrolebinding/system:controller:endpointslice-controller\nclusterrole/system:controller:ttl-after-finished-controller\nclusterrole/system:controller:ttl-controller\nclusterrolebinding/system:controller:endpointslicemirroring-controller\nclusterrolebinding/system:controller:ephemeral-volume-controller\nclusterrole/system:coredns\nclusterrole/system:discovery\nclusterrolebinding/system:controller:expand-controller\nclusterrole/system:heapster\nclusterrolebinding/system:controller:generic-garbage-collector\nclusterrole/system:kube-aggregator\nclusterrolebinding/system:controller:horizontal-pod-autoscaler\nclusterrole/system:kube-controller-manager\nclusterrolebinding/system:controller:job-controller\nclusterrole/system:kube-dns\nclusterrolebinding/system:controller:namespace-controller\nclusterrole/system:kube-scheduler\nclusterrolebinding/system:controller:node-controller\nclusterrole/system:kubelet-api-admin\nclusterrolebinding/system:controller:persistent-volume-binder\nclusterrole/system:monitoring\nclusterrolebinding/system:controller:pod-garbage-collector\nclusterrole/system:node\nclusterrolebinding/system:controller:pv-protection-controller\nclusterrole/system:node-bootstrapper\nclusterrolebinding/system:controller:pvc-protection-controller\nclusterrole/system:node-problem-detector\nclusterrolebinding/system:controller:replicaset-controller\nclusterrole/system:node-proxier\nclusterrolebinding/system:controller:replication-controller\nclusterrolebinding/system:controller:resourcequota-controller\nclusterrole/system:persistent-volume-provisioner\nclusterrolebinding/system:controller:root-ca-cert-publisher\nclusterrole/system:public-info-viewer\nclusterrolebinding/system:controller:route-controller\nclusterrole/system:service-account-issuer-discovery\nclusterrole/system:volume-scheduler\nclusterrolebinding/system:controller:service-account-controller\nclusterrolebinding/system:controller:service-controller\nclusterrole/view\nclusterrolebinding/system:controller:statefulset-controller\nclusterrolebinding/system:controller:ttl-after-finished-controller\nclusterrolebinding/system:controller:ttl-controller\nclusterrolebinding/system:coredns\nclusterrolebinding/system:discovery\nclusterrolebinding/system:kube-controller-manager\nclusterrolebinding/system:kube-dns\nclusterrolebinding/system:kube-scheduler\nclusterrolebinding/system:monitoring\nclusterrolebinding/system:node\nclusterrolebinding/system:node-proxier\nclusterrolebinding/system:public-info-viewer\nclusterrolebinding/system:service-account-issuer-discovery\nclusterrolebinding/system:volume-scheduler\nnamespace/default\nnamespace/envoy-gateway-system\nnamespace/kube-node-lease\nnamespace/kube-public\nnamespace/kube-system\nnamespace/secretgen-controller",
"stdout_lines": [
"xargs: warning: options --max-args and --replace/-I/-i are mutually exclusive, ignoring previous --max-args valuexargs: ",
"warning: options --max-args and --replace/-I/-i are mutually exclusive, ignoring previous --max-args value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"node/controller",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"clusterrole/admin",
"clusterrole/cilium",
"clusterrole/cilium-operator",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"clusterrole/cluster-admin",
"clusterrole/edit",
"clusterrole/envoy-gateway-gateway-helm-certgen:envoy-gateway-system",
"clusterrole/envoy-gateway-gateway-helm-envoy-gateway-role",
"clusterrole/kubeadm:get-nodes",
"clusterrole/secretgen-controller-cluster-role",
"clusterrole/system:aggregate-to-admin",
"clusterrole/system:aggregate-to-edit",
"clusterrole/system:aggregate-to-view",
"clusterrole/system:auth-delegator",
"clusterrole/system:basic-user",
"clusterrole/system:certificates.k8s.io:certificatesigningrequests:nodeclient",
"clusterrole/system:certificates.k8s.io:certificatesigningrequests:selfnodeclient",
"clusterrole/system:certificates.k8s.io:kube-apiserver-client-approver",
"clusterrole/system:certificates.k8s.io:kube-apiserver-client-kubelet-approver",
"clusterrole/system:certificates.k8s.io:kubelet-serving-approver",
"clusterrole/system:certificates.k8s.io:legacy-unknown-approver",
"clusterrole/system:controller:attachdetach-controller",
"clusterrole/system:controller:certificate-controller",
"clusterrole/system:controller:clusterrole-aggregation-controller",
"clusterrole/system:controller:cronjob-controller",
"clusterrole/system:controller:daemon-set-controller",
"clusterrole/system:controller:deployment-controller",
"clusterrole/system:controller:disruption-controller",
"clusterrole/system:controller:endpoint-controller",
"clusterrole/system:controller:endpointslice-controller",
"clusterrole/system:controller:endpointslicemirroring-controller",
"clusterrole/system:controller:ephemeral-volume-controller",
"clusterrolebinding/cilium",
"clusterrole/system:controller:expand-controller",
"clusterrolebinding/cilium-operator",
"clusterrole/system:controller:generic-garbage-collector",
"clusterrolebinding/cluster-admin",
"clusterrole/system:controller:horizontal-pod-autoscaler",
"clusterrolebinding/envoy-gateway-gateway-helm-certgen:envoy-gateway-system",
"clusterrole/system:controller:job-controller",
"clusterrolebinding/envoy-gateway-gateway-helm-envoy-gateway-rolebinding",
"clusterrole/system:controller:namespace-controller",
"clusterrolebinding/kubeadm:get-nodes",
"clusterrole/system:controller:node-controller",
"clusterrolebinding/kubeadm:kubelet-bootstrap",
"clusterrole/system:controller:persistent-volume-binder",
"clusterrolebinding/kubeadm:node-autoapprove-bootstrap",
"clusterrole/system:controller:pod-garbage-collector",
"clusterrolebinding/kubeadm:node-autoapprove-certificate-rotation",
"clusterrole/system:controller:pv-protection-controller",
"clusterrolebinding/kubeadm:node-proxier",
"clusterrolebinding/secretgen-controller-cluster-role-binding",
"clusterrole/system:controller:pvc-protection-controller",
"clusterrolebinding/system:basic-user",
"clusterrole/system:controller:replicaset-controller",
"clusterrolebinding/system:controller:attachdetach-controller",
"clusterrole/system:controller:replication-controller",
"clusterrolebinding/system:controller:certificate-controller",
"clusterrole/system:controller:resourcequota-controller",
"clusterrolebinding/system:controller:clusterrole-aggregation-controller",
"clusterrole/system:controller:root-ca-cert-publisher",
"clusterrolebinding/system:controller:cronjob-controller",
"clusterrolebinding/system:controller:daemon-set-controller",
"clusterrole/system:controller:route-controller",
"clusterrolebinding/system:controller:deployment-controller",
"clusterrole/system:controller:service-account-controller",
"clusterrolebinding/system:controller:disruption-controller",
"clusterrole/system:controller:service-controller",
"clusterrolebinding/system:controller:endpoint-controller",
"clusterrole/system:controller:statefulset-controller",
"clusterrolebinding/system:controller:endpointslice-controller",
"clusterrole/system:controller:ttl-after-finished-controller",
"clusterrole/system:controller:ttl-controller",
"clusterrolebinding/system:controller:endpointslicemirroring-controller",
"clusterrolebinding/system:controller:ephemeral-volume-controller",
"clusterrole/system:coredns",
"clusterrole/system:discovery",
"clusterrolebinding/system:controller:expand-controller",
"clusterrole/system:heapster",
"clusterrolebinding/system:controller:generic-garbage-collector",
"clusterrole/system:kube-aggregator",
"clusterrolebinding/system:controller:horizontal-pod-autoscaler",
"clusterrole/system:kube-controller-manager",
"clusterrolebinding/system:controller:job-controller",
"clusterrole/system:kube-dns",
"clusterrolebinding/system:controller:namespace-controller",
"clusterrole/system:kube-scheduler",
"clusterrolebinding/system:controller:node-controller",
"clusterrole/system:kubelet-api-admin",
"clusterrolebinding/system:controller:persistent-volume-binder",
"clusterrole/system:monitoring",
"clusterrolebinding/system:controller:pod-garbage-collector",
"clusterrole/system:node",
"clusterrolebinding/system:controller:pv-protection-controller",
"clusterrole/system:node-bootstrapper",
"clusterrolebinding/system:controller:pvc-protection-controller",
"clusterrole/system:node-problem-detector",
"clusterrolebinding/system:controller:replicaset-controller",
"clusterrole/system:node-proxier",
"clusterrolebinding/system:controller:replication-controller",
"clusterrolebinding/system:controller:resourcequota-controller",
"clusterrole/system:persistent-volume-provisioner",
"clusterrolebinding/system:controller:root-ca-cert-publisher",
"clusterrole/system:public-info-viewer",
"clusterrolebinding/system:controller:route-controller",
"clusterrole/system:service-account-issuer-discovery",
"clusterrole/system:volume-scheduler",
"clusterrolebinding/system:controller:service-account-controller",
"clusterrolebinding/system:controller:service-controller",
"clusterrole/view",
"clusterrolebinding/system:controller:statefulset-controller",
"clusterrolebinding/system:controller:ttl-after-finished-controller",
"clusterrolebinding/system:controller:ttl-controller",
"clusterrolebinding/system:coredns",
"clusterrolebinding/system:discovery",
"clusterrolebinding/system:kube-controller-manager",
"clusterrolebinding/system:kube-dns",
"clusterrolebinding/system:kube-scheduler",
"clusterrolebinding/system:monitoring",
"clusterrolebinding/system:node",
"clusterrolebinding/system:node-proxier",
"clusterrolebinding/system:public-info-viewer",
"clusterrolebinding/system:service-account-issuer-discovery",
"clusterrolebinding/system:volume-scheduler",
"namespace/default",
"namespace/envoy-gateway-system",
"namespace/kube-node-lease",
"namespace/kube-public",
"namespace/kube-system",
"namespace/secretgen-controller"
],
"zuul_log_id": "0242ac17-0010-dbf8-9562-00000000001a-1-controller"
}
},
"role": {
"id": "0242ac17-0010-dbf8-9562-000000000017",
"name": "describe-kubernetes-objects",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/describe-kubernetes-objects"
},
"task": {
"duration": {
"end": "2026-07-09T00:48:57.689625Z",
"start": "2026-07-09T00:48:45.661823Z"
},
"id": "0242ac17-0010-dbf8-9562-00000000001a",
"name": "Gathering descriptions for cluster scoped objects"
}
},
{
"hosts": {
"controller": {
"action": "file",
"changed": true,
"diff": {
"after": {
"path": "/tmp/logs/objects/namespaced",
"state": "directory"
},
"before": {
"path": "/tmp/logs/objects/namespaced",
"state": "absent"
}
},
"gid": 0,
"group": "root",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": null,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/tmp/logs/objects/namespaced",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0755",
"owner": "root",
"path": "/tmp/logs/objects/namespaced",
"size": 4096,
"state": "directory",
"uid": 0
}
},
"role": {
"id": "0242ac17-0010-dbf8-9562-000000000017",
"name": "describe-kubernetes-objects",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/describe-kubernetes-objects"
},
"task": {
"duration": {
"end": "2026-07-09T00:48:57.933161Z",
"start": "2026-07-09T00:48:57.694950Z"
},
"id": "0242ac17-0010-dbf8-9562-00000000001b",
"name": "creating directory for namespace scoped objects"
}
},
{
"hosts": {
"controller": {
"action": "shell",
"changed": true,
"cmd": "set -e\nexport OBJECT_TYPE=configmaps,cronjobs,daemonsets,deployment,endpoints,ingresses,jobs,networkpolicies,pods,podsecuritypolicies,persistentvolumeclaims,rolebindings,roles,secrets,serviceaccounts,services,statefulsets\nexport PARALLELISM_FACTOR=2\nfunction get_namespaces () {\n kubectl get namespaces -o name | awk -F '/' '{ print $NF }'\n}\n\nfunction list_namespaced_objects () {\n export NAMESPACE=$1\n printf ${OBJECT_TYPE} | xargs -d ',' -I {} -P1 -n1 bash -c 'echo \"${NAMESPACE} $@\"' _ {}\n}\nexport -f list_namespaced_objects\n\nfunction name_objects () {\n input=($1)\n export NAMESPACE=${input[0]}\n export OBJECT=${input[1]}\n kubectl get -n ${NAMESPACE} ${OBJECT} -o name | xargs -L1 -I {} -P1 -n1 bash -c 'echo \"${NAMESPACE} ${OBJECT} $@\"' _ {}\n}\nexport -f name_objects\n\nfunction get_objects () {\n input=($1)\n export NAMESPACE=${input[0]}\n export OBJECT=${input[1]}\n export NAME=${input[2]#*/}\n echo \"${NAMESPACE}/${OBJECT}/${NAME}\"\n DIR=\"/tmp/logs/objects/namespaced/${NAMESPACE}/${OBJECT}\"\n mkdir -p ${DIR}\n kubectl get -n ${NAMESPACE} ${OBJECT} ${NAME} -o yaml > \"${DIR}/${NAME}.yaml\"\n kubectl describe -n ${NAMESPACE} ${OBJECT} ${NAME} > \"${DIR}/${NAME}.txt\"\n}\nexport -f get_objects\n\nget_namespaces | xargs -r -n 1 -P ${PARALLELISM_FACTOR} -I {} bash -c 'list_namespaced_objects \"$@\"' _ {} | xargs -r -n 1 -P ${PARALLELISM_FACTOR} -I {} bash -c 'name_objects \"$@\"' _ {} | xargs -r -n 1 -P ${PARALLELISM_FACTOR} -I {} bash -c 'get_objects \"$@\"' _ {}",
"delta": "0:00:13.313662",
"end": "2026-07-09 00:49:11.488384",
"invocation": {
"module_args": {
"_raw_params": "set -e\nexport OBJECT_TYPE=configmaps,cronjobs,daemonsets,deployment,endpoints,ingresses,jobs,networkpolicies,pods,podsecuritypolicies,persistentvolumeclaims,rolebindings,roles,secrets,serviceaccounts,services,statefulsets\nexport PARALLELISM_FACTOR=2\nfunction get_namespaces () {\n kubectl get namespaces -o name | awk -F '/' '{ print $NF }'\n}\n\nfunction list_namespaced_objects () {\n export NAMESPACE=$1\n printf ${OBJECT_TYPE} | xargs -d ',' -I {} -P1 -n1 bash -c 'echo \"${NAMESPACE} $@\"' _ {}\n}\nexport -f list_namespaced_objects\n\nfunction name_objects () {\n input=($1)\n export NAMESPACE=${input[0]}\n export OBJECT=${input[1]}\n kubectl get -n ${NAMESPACE} ${OBJECT} -o name | xargs -L1 -I {} -P1 -n1 bash -c 'echo \"${NAMESPACE} ${OBJECT} $@\"' _ {}\n}\nexport -f name_objects\n\nfunction get_objects () {\n input=($1)\n export NAMESPACE=${input[0]}\n export OBJECT=${input[1]}\n export NAME=${input[2]#*/}\n echo \"${NAMESPACE}/${OBJECT}/${NAME}\"\n DIR=\"/tmp/logs/objects/namespaced/${NAMESPACE}/${OBJECT}\"\n mkdir -p ${DIR}\n kubectl get -n ${NAMESPACE} ${OBJECT} ${NAME} -o yaml > \"${DIR}/${NAME}.yaml\"\n kubectl describe -n ${NAMESPACE} ${OBJECT} ${NAME} > \"${DIR}/${NAME}.txt\"\n}\nexport -f get_objects\n\nget_namespaces | xargs -r -n 1 -P ${PARALLELISM_FACTOR} -I {} bash -c 'list_namespaced_objects \"$@\"' _ {} | xargs -r -n 1 -P ${PARALLELISM_FACTOR} -I {} bash -c 'name_objects \"$@\"' _ {} | xargs -r -n 1 -P ${PARALLELISM_FACTOR} -I {} bash -c 'get_objects \"$@\"' _ {}",
"_uses_shell": true,
"argv": null,
"chdir": null,
"creates": null,
"executable": "/bin/bash",
"expand_argument_vars": true,
"removes": null,
"stdin": null,
"stdin_add_newline": true,
"strip_empty_ends": true,
"zuul_ansible_split_streams": false,
"zuul_log_id": "0242ac17-0010-dbf8-9562-00000000001c-1-controller",
"zuul_no_log": false,
"zuul_output_max_bytes": 1073741824
}
},
"msg": "",
"rc": 0,
"start": "2026-07-09 00:48:58.174722",
"stderr": "",
"stderr_lines": [],
"stdout": "xargs: warning: options --max-args and --replace/-I/-i are mutually exclusive, ignoring previous --max-args value\nxargs: warning: options --max-args and --replace/-I/-i are mutually exclusive, ignoring previous --max-args value\nxargs: warning: options --max-args and --replace/-I/-i are mutually exclusive, ignoring previous --max-args value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nenvoy-gateway-system/configmaps/envoy-gateway-config\nenvoy-gateway-system/configmaps/kube-root-ca.crt\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\ndefault/configmaps/kube-root-ca.crt\nenvoy-gateway-system/deployment/envoy-gateway\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nenvoy-gateway-system/endpoints/envoy-gateway\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\ndefault/endpoints/kubernetes\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nenvoy-gateway-system/pods/envoy-gateway-78446f96c9-qv2qv\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nerror: the server doesn't have a resource type \"podsecuritypolicies\"\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nerror: the server doesn't have a resource type \"podsecuritypolicies\"\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nenvoy-gateway-system/rolebindings/envoy-gateway-gateway-helm-certgen\nenvoy-gateway-system/rolebindings/envoy-gateway-gateway-helm-infra-manager\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nenvoy-gateway-system/rolebindings/envoy-gateway-gateway-helm-leader-election-rolebinding\nenvoy-gateway-system/roles/envoy-gateway-gateway-helm-certgen\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nenvoy-gateway-system/roles/envoy-gateway-gateway-helm-infra-manager\nenvoy-gateway-system/roles/envoy-gateway-gateway-helm-leader-election-role\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\ndefault/secrets/test-password\ndefault/serviceaccounts/default\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\ndefault/services/kubernetes\nenvoy-gateway-system/serviceaccounts/default\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nenvoy-gateway-system/serviceaccounts/envoy-gateway\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nenvoy-gateway-system/serviceaccounts/envoy-gateway-gateway-helm-certgen\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nenvoy-gateway-system/secrets/envoy\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nenvoy-gateway-system/secrets/envoy-gateway\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nenvoy-gateway-system/secrets/envoy-oidc-hmac\nerror: the server doesn't have a resource type \"podsecuritypolicies\"\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nenvoy-gateway-system/secrets/envoy-rate-limit\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nenvoy-gateway-system/secrets/sh.helm.release.v1.envoy-gateway.v1\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nenvoy-gateway-system/services/envoy-gateway\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nerror: the server doesn't have a resource type \"podsecuritypolicies\"\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nkube-node-lease/configmaps/kube-root-ca.crt\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nkube-public/configmaps/cluster-info\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nkube-public/configmaps/kube-root-ca.crt\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nkube-public/rolebindings/kubeadm:bootstrap-signer-clusterinfo\nkube-public/rolebindings/system:controller:bootstrap-signer\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nkube-public/roles/kubeadm:bootstrap-signer-clusterinfo\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nkube-public/roles/system:controller:bootstrap-signer\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nkube-public/serviceaccounts/default\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nkube-node-lease/serviceaccounts/default\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nkube-system/configmaps/cilium-config\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nkube-system/configmaps/coredns\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nkube-system/configmaps/extension-apiserver-authentication\nkube-system/configmaps/kube-apiserver-legacy-service-account-token-tracking\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nerror: the server doesn't have a resource type \"podsecuritypolicies\"\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nkube-system/configmaps/kube-proxy\nkube-system/configmaps/kube-root-ca.crt\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nerror: the server doesn't have a resource type \"podsecuritypolicies\"\nkube-system/configmaps/kubeadm-config\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nkube-system/configmaps/kubelet-config\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nkube-system/daemonsets/cilium\nkube-system/daemonsets/kube-proxy\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nsecretgen-controller/configmaps/kube-root-ca.crt\nkube-system/deployment/cilium-operator\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nkube-system/deployment/coredns\nkube-system/endpoints/kube-dns\nsecretgen-controller/deployment/secretgen-controller\nkube-system/pods/cilium-operator-7fcd8d6ffd-z9l7s\nkube-system/pods/cilium-x7gd9\nkube-system/pods/coredns-5dd5756b68-ft99h\nkube-system/pods/coredns-77cccfdc44-grz7v\nkube-system/pods/coredns-77cccfdc44-s6lnp\nkube-system/pods/etcd-controller\nkube-system/pods/kube-apiserver-controller\nkube-system/pods/kube-controller-manager-controller\nkube-system/pods/kube-proxy-nr529\nkube-system/pods/kube-scheduler-controller\nkube-system/pods/kube-vip-controller\nsecretgen-controller/pods/secretgen-controller-ffb97c6dc-q8brg\nkube-system/rolebindings/cilium-config-agent\nkube-system/rolebindings/kube-proxy\nkube-system/rolebindings/kubeadm:kubeadm-certs\nkube-system/rolebindings/kubeadm:kubelet-config\nkube-system/rolebindings/kubeadm:nodes-kubeadm-config\nkube-system/rolebindings/system::extension-apiserver-authentication-reader\nkube-system/rolebindings/system::leader-locking-kube-controller-manager\nkube-system/rolebindings/system::leader-locking-kube-scheduler\nkube-system/rolebindings/system:controller:bootstrap-signer\nkube-system/rolebindings/system:controller:cloud-provider\nkube-system/rolebindings/system:controller:token-cleaner\nkube-system/roles/cilium-config-agent\nkube-system/roles/extension-apiserver-authentication-reader\nkube-system/roles/kube-proxy\nkube-system/roles/kubeadm:kubeadm-certs\nkube-system/roles/kubeadm:kubelet-config\nkube-system/roles/kubeadm:nodes-kubeadm-config\nkube-system/roles/system::leader-locking-kube-controller-manager\nkube-system/roles/system::leader-locking-kube-scheduler\nkube-system/roles/system:controller:bootstrap-signer\nkube-system/roles/system:controller:cloud-provider\nkube-system/roles/system:controller:token-cleaner\nkube-system/secrets/bootstrap-token-69b9fm\nkube-system/secrets/bootstrap-token-iqwlp8\nkube-system/secrets/kubeadm-certs\nkube-system/secrets/sh.helm.release.v1.cilium.v1\nkube-system/serviceaccounts/attachdetach-controller\nkube-system/serviceaccounts/bootstrap-signer\nkube-system/serviceaccounts/certificate-controller\nkube-system/serviceaccounts/cilium\nkube-system/serviceaccounts/cilium-operator\nkube-system/serviceaccounts/clusterrole-aggregation-controller\nkube-system/serviceaccounts/coredns\nkube-system/serviceaccounts/cronjob-controller\nkube-system/serviceaccounts/daemon-set-controller\nkube-system/serviceaccounts/default\nkube-system/serviceaccounts/deployment-controller\nkube-system/serviceaccounts/disruption-controller\nkube-system/serviceaccounts/endpoint-controller\nkube-system/serviceaccounts/endpointslice-controller\nkube-system/serviceaccounts/endpointslicemirroring-controller\nkube-system/serviceaccounts/ephemeral-volume-controller\nkube-system/serviceaccounts/expand-controller\nkube-system/serviceaccounts/generic-garbage-collector\nkube-system/serviceaccounts/horizontal-pod-autoscaler\nkube-system/serviceaccounts/job-controller\nkube-system/serviceaccounts/kube-proxy\nkube-system/serviceaccounts/namespace-controller\nkube-system/serviceaccounts/node-controller\nkube-system/serviceaccounts/persistent-volume-binder\nkube-system/serviceaccounts/pod-garbage-collector\nkube-system/serviceaccounts/pv-protection-controller\nkube-system/serviceaccounts/pvc-protection-controller\nkube-system/serviceaccounts/replicaset-controller\nkube-system/serviceaccounts/replication-controller\nkube-system/serviceaccounts/resourcequota-controller\nkube-system/serviceaccounts/root-ca-cert-publisher\nkube-system/serviceaccounts/service-account-controller\nkube-system/serviceaccounts/service-controller\nkube-system/serviceaccounts/statefulset-controller\nkube-system/serviceaccounts/token-cleaner\nkube-system/serviceaccounts/ttl-after-finished-controller\nkube-system/serviceaccounts/ttl-controller\nkube-system/services/kube-dns\nsecretgen-controller/serviceaccounts/default\nsecretgen-controller/serviceaccounts/secretgen-controller-sa",
"stdout_lines": [
"xargs: warning: options --max-args and --replace/-I/-i are mutually exclusive, ignoring previous --max-args value",
"xargs: warning: options --max-args and --replace/-I/-i are mutually exclusive, ignoring previous --max-args value",
"xargs: warning: options --max-args and --replace/-I/-i are mutually exclusive, ignoring previous --max-args value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"envoy-gateway-system/configmaps/envoy-gateway-config",
"envoy-gateway-system/configmaps/kube-root-ca.crt",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"default/configmaps/kube-root-ca.crt",
"envoy-gateway-system/deployment/envoy-gateway",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"envoy-gateway-system/endpoints/envoy-gateway",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"default/endpoints/kubernetes",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"envoy-gateway-system/pods/envoy-gateway-78446f96c9-qv2qv",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"error: the server doesn't have a resource type \"podsecuritypolicies\"",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"error: the server doesn't have a resource type \"podsecuritypolicies\"",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"envoy-gateway-system/rolebindings/envoy-gateway-gateway-helm-certgen",
"envoy-gateway-system/rolebindings/envoy-gateway-gateway-helm-infra-manager",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"envoy-gateway-system/rolebindings/envoy-gateway-gateway-helm-leader-election-rolebinding",
"envoy-gateway-system/roles/envoy-gateway-gateway-helm-certgen",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"envoy-gateway-system/roles/envoy-gateway-gateway-helm-infra-manager",
"envoy-gateway-system/roles/envoy-gateway-gateway-helm-leader-election-role",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"default/secrets/test-password",
"default/serviceaccounts/default",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"default/services/kubernetes",
"envoy-gateway-system/serviceaccounts/default",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"envoy-gateway-system/serviceaccounts/envoy-gateway",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"envoy-gateway-system/serviceaccounts/envoy-gateway-gateway-helm-certgen",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"envoy-gateway-system/secrets/envoy",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"envoy-gateway-system/secrets/envoy-gateway",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"envoy-gateway-system/secrets/envoy-oidc-hmac",
"error: the server doesn't have a resource type \"podsecuritypolicies\"",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"envoy-gateway-system/secrets/envoy-rate-limit",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"envoy-gateway-system/secrets/sh.helm.release.v1.envoy-gateway.v1",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"envoy-gateway-system/services/envoy-gateway",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"error: the server doesn't have a resource type \"podsecuritypolicies\"",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"kube-node-lease/configmaps/kube-root-ca.crt",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"kube-public/configmaps/cluster-info",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"kube-public/configmaps/kube-root-ca.crt",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"kube-public/rolebindings/kubeadm:bootstrap-signer-clusterinfo",
"kube-public/rolebindings/system:controller:bootstrap-signer",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"kube-public/roles/kubeadm:bootstrap-signer-clusterinfo",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"kube-public/roles/system:controller:bootstrap-signer",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"kube-public/serviceaccounts/default",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"kube-node-lease/serviceaccounts/default",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"kube-system/configmaps/cilium-config",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"kube-system/configmaps/coredns",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"kube-system/configmaps/extension-apiserver-authentication",
"kube-system/configmaps/kube-apiserver-legacy-service-account-token-tracking",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"error: the server doesn't have a resource type \"podsecuritypolicies\"",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"kube-system/configmaps/kube-proxy",
"kube-system/configmaps/kube-root-ca.crt",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"error: the server doesn't have a resource type \"podsecuritypolicies\"",
"kube-system/configmaps/kubeadm-config",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"kube-system/configmaps/kubelet-config",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"kube-system/daemonsets/cilium",
"kube-system/daemonsets/kube-proxy",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"secretgen-controller/configmaps/kube-root-ca.crt",
"kube-system/deployment/cilium-operator",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"kube-system/deployment/coredns",
"kube-system/endpoints/kube-dns",
"secretgen-controller/deployment/secretgen-controller",
"kube-system/pods/cilium-operator-7fcd8d6ffd-z9l7s",
"kube-system/pods/cilium-x7gd9",
"kube-system/pods/coredns-5dd5756b68-ft99h",
"kube-system/pods/coredns-77cccfdc44-grz7v",
"kube-system/pods/coredns-77cccfdc44-s6lnp",
"kube-system/pods/etcd-controller",
"kube-system/pods/kube-apiserver-controller",
"kube-system/pods/kube-controller-manager-controller",
"kube-system/pods/kube-proxy-nr529",
"kube-system/pods/kube-scheduler-controller",
"kube-system/pods/kube-vip-controller",
"secretgen-controller/pods/secretgen-controller-ffb97c6dc-q8brg",
"kube-system/rolebindings/cilium-config-agent",
"kube-system/rolebindings/kube-proxy",
"kube-system/rolebindings/kubeadm:kubeadm-certs",
"kube-system/rolebindings/kubeadm:kubelet-config",
"kube-system/rolebindings/kubeadm:nodes-kubeadm-config",
"kube-system/rolebindings/system::extension-apiserver-authentication-reader",
"kube-system/rolebindings/system::leader-locking-kube-controller-manager",
"kube-system/rolebindings/system::leader-locking-kube-scheduler",
"kube-system/rolebindings/system:controller:bootstrap-signer",
"kube-system/rolebindings/system:controller:cloud-provider",
"kube-system/rolebindings/system:controller:token-cleaner",
"kube-system/roles/cilium-config-agent",
"kube-system/roles/extension-apiserver-authentication-reader",
"kube-system/roles/kube-proxy",
"kube-system/roles/kubeadm:kubeadm-certs",
"kube-system/roles/kubeadm:kubelet-config",
"kube-system/roles/kubeadm:nodes-kubeadm-config",
"kube-system/roles/system::leader-locking-kube-controller-manager",
"kube-system/roles/system::leader-locking-kube-scheduler",
"kube-system/roles/system:controller:bootstrap-signer",
"kube-system/roles/system:controller:cloud-provider",
"kube-system/roles/system:controller:token-cleaner",
"kube-system/secrets/bootstrap-token-69b9fm",
"kube-system/secrets/bootstrap-token-iqwlp8",
"kube-system/secrets/kubeadm-certs",
"kube-system/secrets/sh.helm.release.v1.cilium.v1",
"kube-system/serviceaccounts/attachdetach-controller",
"kube-system/serviceaccounts/bootstrap-signer",
"kube-system/serviceaccounts/certificate-controller",
"kube-system/serviceaccounts/cilium",
"kube-system/serviceaccounts/cilium-operator",
"kube-system/serviceaccounts/clusterrole-aggregation-controller",
"kube-system/serviceaccounts/coredns",
"kube-system/serviceaccounts/cronjob-controller",
"kube-system/serviceaccounts/daemon-set-controller",
"kube-system/serviceaccounts/default",
"kube-system/serviceaccounts/deployment-controller",
"kube-system/serviceaccounts/disruption-controller",
"kube-system/serviceaccounts/endpoint-controller",
"kube-system/serviceaccounts/endpointslice-controller",
"kube-system/serviceaccounts/endpointslicemirroring-controller",
"kube-system/serviceaccounts/ephemeral-volume-controller",
"kube-system/serviceaccounts/expand-controller",
"kube-system/serviceaccounts/generic-garbage-collector",
"kube-system/serviceaccounts/horizontal-pod-autoscaler",
"kube-system/serviceaccounts/job-controller",
"kube-system/serviceaccounts/kube-proxy",
"kube-system/serviceaccounts/namespace-controller",
"kube-system/serviceaccounts/node-controller",
"kube-system/serviceaccounts/persistent-volume-binder",
"kube-system/serviceaccounts/pod-garbage-collector",
"kube-system/serviceaccounts/pv-protection-controller",
"kube-system/serviceaccounts/pvc-protection-controller",
"kube-system/serviceaccounts/replicaset-controller",
"kube-system/serviceaccounts/replication-controller",
"kube-system/serviceaccounts/resourcequota-controller",
"kube-system/serviceaccounts/root-ca-cert-publisher",
"kube-system/serviceaccounts/service-account-controller",
"kube-system/serviceaccounts/service-controller",
"kube-system/serviceaccounts/statefulset-controller",
"kube-system/serviceaccounts/token-cleaner",
"kube-system/serviceaccounts/ttl-after-finished-controller",
"kube-system/serviceaccounts/ttl-controller",
"kube-system/services/kube-dns",
"secretgen-controller/serviceaccounts/default",
"secretgen-controller/serviceaccounts/secretgen-controller-sa"
],
"zuul_log_id": "0242ac17-0010-dbf8-9562-00000000001c-1-controller"
}
},
"role": {
"id": "0242ac17-0010-dbf8-9562-000000000017",
"name": "describe-kubernetes-objects",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/describe-kubernetes-objects"
},
"task": {
"duration": {
"end": "2026-07-09T00:49:12.061586Z",
"start": "2026-07-09T00:48:57.959888Z"
},
"id": "0242ac17-0010-dbf8-9562-00000000001c",
"name": "Gathering descriptions for namespace scoped objects"
}
},
{
"hosts": {
"controller": {
"action": "synchronize",
"changed": true,
"cmd": "/usr/bin/rsync --delay-updates -F --compress --archive --rsh='/usr/bin/ssh -S none -o Port=22 -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null' --rsync-path='sudo -u root rsync' --out-format='<>%i %n%L' zuul@199.204.45.89:/tmp/logs/objects /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs/controller",
"invocation": {
"module_args": {
"_local_rsync_password": null,
"_local_rsync_path": "rsync",
"_ssh_args": null,
"_substitute_controller": false,
"archive": true,
"checksum": false,
"compress": true,
"copy_links": false,
"delay_updates": true,
"delete": false,
"dest": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs/controller",
"dest_port": 22,
"dirs": false,
"existing_only": false,
"group": null,
"link_dest": null,
"links": null,
"mode": "pull",
"owner": null,
"partial": false,
"perms": null,
"private_key": null,
"recursive": null,
"rsync_opts": [],
"rsync_path": "sudo -u root rsync",
"rsync_timeout": 0,
"set_remote_user": true,
"src": "zuul@199.204.45.89:/tmp/logs/objects",
"ssh_connection_multiplexing": false,
"times": null,
"use_ssh_args": false,
"verify_host": false
}
},
"msg": "cd+++++++++ objects/\ncd+++++++++ objects/cluster/\ncd+++++++++ objects/cluster/clusterrole/\n>f+++++++++ objects/cluster/clusterrole/admin.txt\n>f+++++++++ objects/cluster/clusterrole/admin.yaml\n>f+++++++++ objects/cluster/clusterrole/cilium-operator.txt\n>f+++++++++ objects/cluster/clusterrole/cilium-operator.yaml\n>f+++++++++ objects/cluster/clusterrole/cilium.txt\n>f+++++++++ objects/cluster/clusterrole/cilium.yaml\n>f+++++++++ objects/cluster/clusterrole/cluster-admin.txt\n>f+++++++++ objects/cluster/clusterrole/cluster-admin.yaml\n>f+++++++++ objects/cluster/clusterrole/edit.txt\n>f+++++++++ objects/cluster/clusterrole/edit.yaml\n>f+++++++++ objects/cluster/clusterrole/envoy-gateway-gateway-helm-certgen:envoy-gateway-system.txt\n>f+++++++++ objects/cluster/clusterrole/envoy-gateway-gateway-helm-certgen:envoy-gateway-system.yaml\n>f+++++++++ objects/cluster/clusterrole/envoy-gateway-gateway-helm-envoy-gateway-role.txt\n>f+++++++++ objects/cluster/clusterrole/envoy-gateway-gateway-helm-envoy-gateway-role.yaml\n>f+++++++++ objects/cluster/clusterrole/kubeadm:get-nodes.txt\n>f+++++++++ objects/cluster/clusterrole/kubeadm:get-nodes.yaml\n>f+++++++++ objects/cluster/clusterrole/secretgen-controller-cluster-role.txt\n>f+++++++++ objects/cluster/clusterrole/secretgen-controller-cluster-role.yaml\n>f+++++++++ objects/cluster/clusterrole/system:aggregate-to-admin.txt\n>f+++++++++ objects/cluster/clusterrole/system:aggregate-to-admin.yaml\n>f+++++++++ objects/cluster/clusterrole/system:aggregate-to-edit.txt\n>f+++++++++ objects/cluster/clusterrole/system:aggregate-to-edit.yaml\n>f+++++++++ objects/cluster/clusterrole/system:aggregate-to-view.txt\n>f+++++++++ objects/cluster/clusterrole/system:aggregate-to-view.yaml\n>f+++++++++ objects/cluster/clusterrole/system:auth-delegator.txt\n>f+++++++++ objects/cluster/clusterrole/system:auth-delegator.yaml\n>f+++++++++ objects/cluster/clusterrole/system:basic-user.txt\n>f+++++++++ objects/cluster/clusterrole/system:basic-user.yaml\n>f+++++++++ objects/cluster/clusterrole/system:certificates.k8s.io:certificatesigningrequests:nodeclient.txt\n>f+++++++++ objects/cluster/clusterrole/system:certificates.k8s.io:certificatesigningrequests:nodeclient.yaml\n>f+++++++++ objects/cluster/clusterrole/system:certificates.k8s.io:certificatesigningrequests:selfnodeclient.txt\n>f+++++++++ objects/cluster/clusterrole/system:certificates.k8s.io:certificatesigningrequests:selfnodeclient.yaml\n>f+++++++++ objects/cluster/clusterrole/system:certificates.k8s.io:kube-apiserver-client-approver.txt\n>f+++++++++ objects/cluster/clusterrole/system:certificates.k8s.io:kube-apiserver-client-approver.yaml\n>f+++++++++ objects/cluster/clusterrole/system:certificates.k8s.io:kube-apiserver-client-kubelet-approver.txt\n>f+++++++++ objects/cluster/clusterrole/system:certificates.k8s.io:kube-apiserver-client-kubelet-approver.yaml\n>f+++++++++ objects/cluster/clusterrole/system:certificates.k8s.io:kubelet-serving-approver.txt\n>f+++++++++ objects/cluster/clusterrole/system:certificates.k8s.io:kubelet-serving-approver.yaml\n>f+++++++++ objects/cluster/clusterrole/system:certificates.k8s.io:legacy-unknown-approver.txt\n>f+++++++++ objects/cluster/clusterrole/system:certificates.k8s.io:legacy-unknown-approver.yaml\n>f+++++++++ objects/cluster/clusterrole/system:controller:attachdetach-controller.txt\n>f+++++++++ objects/cluster/clusterrole/system:controller:attachdetach-controller.yaml\n>f+++++++++ objects/cluster/clusterrole/system:controller:certificate-controller.txt\n>f+++++++++ objects/cluster/clusterrole/system:controller:certificate-controller.yaml\n>f+++++++++ objects/cluster/clusterrole/system:controller:clusterrole-aggregation-controller.txt\n>f+++++++++ objects/cluster/clusterrole/system:controller:clusterrole-aggregation-controller.yaml\n>f+++++++++ objects/cluster/clusterrole/system:controller:cronjob-controller.txt\n>f+++++++++ objects/cluster/clusterrole/system:controller:cronjob-controller.yaml\n>f+++++++++ objects/cluster/clusterrole/system:controller:daemon-set-controller.txt\n>f+++++++++ objects/cluster/clusterrole/system:controller:daemon-set-controller.yaml\n>f+++++++++ objects/cluster/clusterrole/system:controller:deployment-controller.txt\n>f+++++++++ objects/cluster/clusterrole/system:controller:deployment-controller.yaml\n>f+++++++++ objects/cluster/clusterrole/system:controller:disruption-controller.txt\n>f+++++++++ objects/cluster/clusterrole/system:controller:disruption-controller.yaml\n>f+++++++++ objects/cluster/clusterrole/system:controller:endpoint-controller.txt\n>f+++++++++ objects/cluster/clusterrole/system:controller:endpoint-controller.yaml\n>f+++++++++ objects/cluster/clusterrole/system:controller:endpointslice-controller.txt\n>f+++++++++ objects/cluster/clusterrole/system:controller:endpointslice-controller.yaml\n>f+++++++++ objects/cluster/clusterrole/system:controller:endpointslicemirroring-controller.txt\n>f+++++++++ objects/cluster/clusterrole/system:controller:endpointslicemirroring-controller.yaml\n>f+++++++++ objects/cluster/clusterrole/system:controller:ephemeral-volume-controller.txt\n>f+++++++++ objects/cluster/clusterrole/system:controller:ephemeral-volume-controller.yaml\n>f+++++++++ objects/cluster/clusterrole/system:controller:expand-controller.txt\n>f+++++++++ objects/cluster/clusterrole/system:controller:expand-controller.yaml\n>f+++++++++ objects/cluster/clusterrole/system:controller:generic-garbage-collector.txt\n>f+++++++++ objects/cluster/clusterrole/system:controller:generic-garbage-collector.yaml\n>f+++++++++ objects/cluster/clusterrole/system:controller:horizontal-pod-autoscaler.txt\n>f+++++++++ objects/cluster/clusterrole/system:controller:horizontal-pod-autoscaler.yaml\n>f+++++++++ objects/cluster/clusterrole/system:controller:job-controller.txt\n>f+++++++++ objects/cluster/clusterrole/system:controller:job-controller.yaml\n>f+++++++++ objects/cluster/clusterrole/system:controller:namespace-controller.txt\n>f+++++++++ objects/cluster/clusterrole/system:controller:namespace-controller.yaml\n>f+++++++++ objects/cluster/clusterrole/system:controller:node-controller.txt\n>f+++++++++ objects/cluster/clusterrole/system:controller:node-controller.yaml\n>f+++++++++ objects/cluster/clusterrole/system:controller:persistent-volume-binder.txt\n>f+++++++++ objects/cluster/clusterrole/system:controller:persistent-volume-binder.yaml\n>f+++++++++ objects/cluster/clusterrole/system:controller:pod-garbage-collector.txt\n>f+++++++++ objects/cluster/clusterrole/system:controller:pod-garbage-collector.yaml\n>f+++++++++ objects/cluster/clusterrole/system:controller:pv-protection-controller.txt\n>f+++++++++ objects/cluster/clusterrole/system:controller:pv-protection-controller.yaml\n>f+++++++++ objects/cluster/clusterrole/system:controller:pvc-protection-controller.txt\n>f+++++++++ objects/cluster/clusterrole/system:controller:pvc-protection-controller.yaml\n>f+++++++++ objects/cluster/clusterrole/system:controller:replicaset-controller.txt\n>f+++++++++ objects/cluster/clusterrole/system:controller:replicaset-controller.yaml\n>f+++++++++ objects/cluster/clusterrole/system:controller:replication-controller.txt\n>f+++++++++ objects/cluster/clusterrole/system:controller:replication-controller.yaml\n>f+++++++++ objects/cluster/clusterrole/system:controller:resourcequota-controller.txt\n>f+++++++++ objects/cluster/clusterrole/system:controller:resourcequota-controller.yaml\n>f+++++++++ objects/cluster/clusterrole/system:controller:root-ca-cert-publisher.txt\n>f+++++++++ objects/cluster/clusterrole/system:controller:root-ca-cert-publisher.yaml\n>f+++++++++ objects/cluster/clusterrole/system:controller:route-controller.txt\n>f+++++++++ objects/cluster/clusterrole/system:controller:route-controller.yaml\n>f+++++++++ objects/cluster/clusterrole/system:controller:service-account-controller.txt\n>f+++++++++ objects/cluster/clusterrole/system:controller:service-account-controller.yaml\n>f+++++++++ objects/cluster/clusterrole/system:controller:service-controller.txt\n>f+++++++++ objects/cluster/clusterrole/system:controller:service-controller.yaml\n>f+++++++++ objects/cluster/clusterrole/system:controller:statefulset-controller.txt\n>f+++++++++ objects/cluster/clusterrole/system:controller:statefulset-controller.yaml\n>f+++++++++ objects/cluster/clusterrole/system:controller:ttl-after-finished-controller.txt\n>f+++++++++ objects/cluster/clusterrole/system:controller:ttl-after-finished-controller.yaml\n>f+++++++++ objects/cluster/clusterrole/system:controller:ttl-controller.txt\n>f+++++++++ objects/cluster/clusterrole/system:controller:ttl-controller.yaml\n>f+++++++++ objects/cluster/clusterrole/system:coredns.txt\n>f+++++++++ objects/cluster/clusterrole/system:coredns.yaml\n>f+++++++++ objects/cluster/clusterrole/system:discovery.txt\n>f+++++++++ objects/cluster/clusterrole/system:discovery.yaml\n>f+++++++++ objects/cluster/clusterrole/system:heapster.txt\n>f+++++++++ objects/cluster/clusterrole/system:heapster.yaml\n>f+++++++++ objects/cluster/clusterrole/system:kube-aggregator.txt\n>f+++++++++ objects/cluster/clusterrole/system:kube-aggregator.yaml\n>f+++++++++ objects/cluster/clusterrole/system:kube-controller-manager.txt\n>f+++++++++ objects/cluster/clusterrole/system:kube-controller-manager.yaml\n>f+++++++++ objects/cluster/clusterrole/system:kube-dns.txt\n>f+++++++++ objects/cluster/clusterrole/system:kube-dns.yaml\n>f+++++++++ objects/cluster/clusterrole/system:kube-scheduler.txt\n>f+++++++++ objects/cluster/clusterrole/system:kube-scheduler.yaml\n>f+++++++++ objects/cluster/clusterrole/system:kubelet-api-admin.txt\n>f+++++++++ objects/cluster/clusterrole/system:kubelet-api-admin.yaml\n>f+++++++++ objects/cluster/clusterrole/system:monitoring.txt\n>f+++++++++ objects/cluster/clusterrole/system:monitoring.yaml\n>f+++++++++ objects/cluster/clusterrole/system:node-bootstrapper.txt\n>f+++++++++ objects/cluster/clusterrole/system:node-bootstrapper.yaml\n>f+++++++++ objects/cluster/clusterrole/system:node-problem-detector.txt\n>f+++++++++ objects/cluster/clusterrole/system:node-problem-detector.yaml\n>f+++++++++ objects/cluster/clusterrole/system:node-proxier.txt\n>f+++++++++ objects/cluster/clusterrole/system:node-proxier.yaml\n>f+++++++++ objects/cluster/clusterrole/system:node.txt\n>f+++++++++ objects/cluster/clusterrole/system:node.yaml\n>f+++++++++ objects/cluster/clusterrole/system:persistent-volume-provisioner.txt\n>f+++++++++ objects/cluster/clusterrole/system:persistent-volume-provisioner.yaml\n>f+++++++++ objects/cluster/clusterrole/system:public-info-viewer.txt\n>f+++++++++ objects/cluster/clusterrole/system:public-info-viewer.yaml\n>f+++++++++ objects/cluster/clusterrole/system:service-account-issuer-discovery.txt\n>f+++++++++ objects/cluster/clusterrole/system:service-account-issuer-discovery.yaml\n>f+++++++++ objects/cluster/clusterrole/system:volume-scheduler.txt\n>f+++++++++ objects/cluster/clusterrole/system:volume-scheduler.yaml\n>f+++++++++ objects/cluster/clusterrole/view.txt\n>f+++++++++ objects/cluster/clusterrole/view.yaml\ncd+++++++++ objects/cluster/clusterrolebinding/\n>f+++++++++ objects/cluster/clusterrolebinding/cilium-operator.txt\n>f+++++++++ objects/cluster/clusterrolebinding/cilium-operator.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/cilium.txt\n>f+++++++++ objects/cluster/clusterrolebinding/cilium.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/cluster-admin.txt\n>f+++++++++ objects/cluster/clusterrolebinding/cluster-admin.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/envoy-gateway-gateway-helm-certgen:envoy-gateway-system.txt\n>f+++++++++ objects/cluster/clusterrolebinding/envoy-gateway-gateway-helm-certgen:envoy-gateway-system.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/envoy-gateway-gateway-helm-envoy-gateway-rolebinding.txt\n>f+++++++++ objects/cluster/clusterrolebinding/envoy-gateway-gateway-helm-envoy-gateway-rolebinding.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/kubeadm:get-nodes.txt\n>f+++++++++ objects/cluster/clusterrolebinding/kubeadm:get-nodes.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/kubeadm:kubelet-bootstrap.txt\n>f+++++++++ objects/cluster/clusterrolebinding/kubeadm:kubelet-bootstrap.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/kubeadm:node-autoapprove-bootstrap.txt\n>f+++++++++ objects/cluster/clusterrolebinding/kubeadm:node-autoapprove-bootstrap.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/kubeadm:node-autoapprove-certificate-rotation.txt\n>f+++++++++ objects/cluster/clusterrolebinding/kubeadm:node-autoapprove-certificate-rotation.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/kubeadm:node-proxier.txt\n>f+++++++++ objects/cluster/clusterrolebinding/kubeadm:node-proxier.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/secretgen-controller-cluster-role-binding.txt\n>f+++++++++ objects/cluster/clusterrolebinding/secretgen-controller-cluster-role-binding.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:basic-user.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:basic-user.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:attachdetach-controller.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:attachdetach-controller.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:certificate-controller.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:certificate-controller.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:clusterrole-aggregation-controller.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:clusterrole-aggregation-controller.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:cronjob-controller.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:cronjob-controller.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:daemon-set-controller.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:daemon-set-controller.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:deployment-controller.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:deployment-controller.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:disruption-controller.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:disruption-controller.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:endpoint-controller.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:endpoint-controller.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:endpointslice-controller.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:endpointslice-controller.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:endpointslicemirroring-controller.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:endpointslicemirroring-controller.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:ephemeral-volume-controller.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:ephemeral-volume-controller.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:expand-controller.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:expand-controller.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:generic-garbage-collector.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:generic-garbage-collector.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:horizontal-pod-autoscaler.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:horizontal-pod-autoscaler.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:job-controller.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:job-controller.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:namespace-controller.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:namespace-controller.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:node-controller.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:node-controller.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:persistent-volume-binder.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:persistent-volume-binder.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:pod-garbage-collector.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:pod-garbage-collector.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:pv-protection-controller.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:pv-protection-controller.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:pvc-protection-controller.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:pvc-protection-controller.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:replicaset-controller.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:replicaset-controller.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:replication-controller.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:replication-controller.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:resourcequota-controller.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:resourcequota-controller.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:root-ca-cert-publisher.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:root-ca-cert-publisher.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:route-controller.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:route-controller.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:service-account-controller.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:service-account-controller.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:service-controller.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:service-controller.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:statefulset-controller.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:statefulset-controller.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:ttl-after-finished-controller.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:ttl-after-finished-controller.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:ttl-controller.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:controller:ttl-controller.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:coredns.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:coredns.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:discovery.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:discovery.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:kube-controller-manager.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:kube-controller-manager.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:kube-dns.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:kube-dns.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:kube-scheduler.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:kube-scheduler.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:monitoring.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:monitoring.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:node-proxier.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:node-proxier.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:node.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:node.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:public-info-viewer.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:public-info-viewer.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:service-account-issuer-discovery.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:service-account-issuer-discovery.yaml\n>f+++++++++ objects/cluster/clusterrolebinding/system:volume-scheduler.txt\n>f+++++++++ objects/cluster/clusterrolebinding/system:volume-scheduler.yaml\ncd+++++++++ objects/cluster/namespace/\n>f+++++++++ objects/cluster/namespace/default.txt\n>f+++++++++ objects/cluster/namespace/default.yaml\n>f+++++++++ objects/cluster/namespace/envoy-gateway-system.txt\n>f+++++++++ objects/cluster/namespace/envoy-gateway-system.yaml\n>f+++++++++ objects/cluster/namespace/kube-node-lease.txt\n>f+++++++++ objects/cluster/namespace/kube-node-lease.yaml\n>f+++++++++ objects/cluster/namespace/kube-public.txt\n>f+++++++++ objects/cluster/namespace/kube-public.yaml\n>f+++++++++ objects/cluster/namespace/kube-system.txt\n>f+++++++++ objects/cluster/namespace/kube-system.yaml\n>f+++++++++ objects/cluster/namespace/secretgen-controller.txt\n>f+++++++++ objects/cluster/namespace/secretgen-controller.yaml\ncd+++++++++ objects/cluster/node/\n>f+++++++++ objects/cluster/node/controller.txt\n>f+++++++++ objects/cluster/node/controller.yaml\ncd+++++++++ objects/namespaced/\ncd+++++++++ objects/namespaced/default/\ncd+++++++++ objects/namespaced/default/configmaps/\n>f+++++++++ objects/namespaced/default/configmaps/kube-root-ca.crt.txt\n>f+++++++++ objects/namespaced/default/configmaps/kube-root-ca.crt.yaml\ncd+++++++++ objects/namespaced/default/endpoints/\n>f+++++++++ objects/namespaced/default/endpoints/kubernetes.txt\n>f+++++++++ objects/namespaced/default/endpoints/kubernetes.yaml\ncd+++++++++ objects/namespaced/default/secrets/\n>f+++++++++ objects/namespaced/default/secrets/test-password.txt\n>f+++++++++ objects/namespaced/default/secrets/test-password.yaml\ncd+++++++++ objects/namespaced/default/serviceaccounts/\n>f+++++++++ objects/namespaced/default/serviceaccounts/default.txt\n>f+++++++++ objects/namespaced/default/serviceaccounts/default.yaml\ncd+++++++++ objects/namespaced/default/services/\n>f+++++++++ objects/namespaced/default/services/kubernetes.txt\n>f+++++++++ objects/namespaced/default/services/kubernetes.yaml\ncd+++++++++ objects/namespaced/envoy-gateway-system/\ncd+++++++++ objects/namespaced/envoy-gateway-system/configmaps/\n>f+++++++++ objects/namespaced/envoy-gateway-system/configmaps/envoy-gateway-config.txt\n>f+++++++++ objects/namespaced/envoy-gateway-system/configmaps/envoy-gateway-config.yaml\n>f+++++++++ objects/namespaced/envoy-gateway-system/configmaps/kube-root-ca.crt.txt\n>f+++++++++ objects/namespaced/envoy-gateway-system/configmaps/kube-root-ca.crt.yaml\ncd+++++++++ objects/namespaced/envoy-gateway-system/deployment/\n>f+++++++++ objects/namespaced/envoy-gateway-system/deployment/envoy-gateway.txt\n>f+++++++++ objects/namespaced/envoy-gateway-system/deployment/envoy-gateway.yaml\ncd+++++++++ objects/namespaced/envoy-gateway-system/endpoints/\n>f+++++++++ objects/namespaced/envoy-gateway-system/endpoints/envoy-gateway.txt\n>f+++++++++ objects/namespaced/envoy-gateway-system/endpoints/envoy-gateway.yaml\ncd+++++++++ objects/namespaced/envoy-gateway-system/pods/\n>f+++++++++ objects/namespaced/envoy-gateway-system/pods/envoy-gateway-78446f96c9-qv2qv.txt\n>f+++++++++ objects/namespaced/envoy-gateway-system/pods/envoy-gateway-78446f96c9-qv2qv.yaml\ncd+++++++++ objects/namespaced/envoy-gateway-system/rolebindings/\n>f+++++++++ objects/namespaced/envoy-gateway-system/rolebindings/envoy-gateway-gateway-helm-certgen.txt\n>f+++++++++ objects/namespaced/envoy-gateway-system/rolebindings/envoy-gateway-gateway-helm-certgen.yaml\n>f+++++++++ objects/namespaced/envoy-gateway-system/rolebindings/envoy-gateway-gateway-helm-infra-manager.txt\n>f+++++++++ objects/namespaced/envoy-gateway-system/rolebindings/envoy-gateway-gateway-helm-infra-manager.yaml\n>f+++++++++ objects/namespaced/envoy-gateway-system/rolebindings/envoy-gateway-gateway-helm-leader-election-rolebinding.txt\n>f+++++++++ objects/namespaced/envoy-gateway-system/rolebindings/envoy-gateway-gateway-helm-leader-election-rolebinding.yaml\ncd+++++++++ objects/namespaced/envoy-gateway-system/roles/\n>f+++++++++ objects/namespaced/envoy-gateway-system/roles/envoy-gateway-gateway-helm-certgen.txt\n>f+++++++++ objects/namespaced/envoy-gateway-system/roles/envoy-gateway-gateway-helm-certgen.yaml\n>f+++++++++ objects/namespaced/envoy-gateway-system/roles/envoy-gateway-gateway-helm-infra-manager.txt\n>f+++++++++ objects/namespaced/envoy-gateway-system/roles/envoy-gateway-gateway-helm-infra-manager.yaml\n>f+++++++++ objects/namespaced/envoy-gateway-system/roles/envoy-gateway-gateway-helm-leader-election-role.txt\n>f+++++++++ objects/namespaced/envoy-gateway-system/roles/envoy-gateway-gateway-helm-leader-election-role.yaml\ncd+++++++++ objects/namespaced/envoy-gateway-system/secrets/\n>f+++++++++ objects/namespaced/envoy-gateway-system/secrets/envoy-gateway.txt\n>f+++++++++ objects/namespaced/envoy-gateway-system/secrets/envoy-gateway.yaml\n>f+++++++++ objects/namespaced/envoy-gateway-system/secrets/envoy-oidc-hmac.txt\n>f+++++++++ objects/namespaced/envoy-gateway-system/secrets/envoy-oidc-hmac.yaml\n>f+++++++++ objects/namespaced/envoy-gateway-system/secrets/envoy-rate-limit.txt\n>f+++++++++ objects/namespaced/envoy-gateway-system/secrets/envoy-rate-limit.yaml\n>f+++++++++ objects/namespaced/envoy-gateway-system/secrets/envoy.txt\n>f+++++++++ objects/namespaced/envoy-gateway-system/secrets/envoy.yaml\n>f+++++++++ objects/namespaced/envoy-gateway-system/secrets/sh.helm.release.v1.envoy-gateway.v1.txt\n>f+++++++++ objects/namespaced/envoy-gateway-system/secrets/sh.helm.release.v1.envoy-gateway.v1.yaml\ncd+++++++++ objects/namespaced/envoy-gateway-system/serviceaccounts/\n>f+++++++++ objects/namespaced/envoy-gateway-system/serviceaccounts/default.txt\n>f+++++++++ objects/namespaced/envoy-gateway-system/serviceaccounts/default.yaml\n>f+++++++++ objects/namespaced/envoy-gateway-system/serviceaccounts/envoy-gateway-gateway-helm-certgen.txt\n>f+++++++++ objects/namespaced/envoy-gateway-system/serviceaccounts/envoy-gateway-gateway-helm-certgen.yaml\n>f+++++++++ objects/namespaced/envoy-gateway-system/serviceaccounts/envoy-gateway.txt\n>f+++++++++ objects/namespaced/envoy-gateway-system/serviceaccounts/envoy-gateway.yaml\ncd+++++++++ objects/namespaced/envoy-gateway-system/services/\n>f+++++++++ objects/namespaced/envoy-gateway-system/services/envoy-gateway.txt\n>f+++++++++ objects/namespaced/envoy-gateway-system/services/envoy-gateway.yaml\ncd+++++++++ objects/namespaced/kube-node-lease/\ncd+++++++++ objects/namespaced/kube-node-lease/configmaps/\n>f+++++++++ objects/namespaced/kube-node-lease/configmaps/kube-root-ca.crt.txt\n>f+++++++++ objects/namespaced/kube-node-lease/configmaps/kube-root-ca.crt.yaml\ncd+++++++++ objects/namespaced/kube-node-lease/serviceaccounts/\n>f+++++++++ objects/namespaced/kube-node-lease/serviceaccounts/default.txt\n>f+++++++++ objects/namespaced/kube-node-lease/serviceaccounts/default.yaml\ncd+++++++++ objects/namespaced/kube-public/\ncd+++++++++ objects/namespaced/kube-public/configmaps/\n>f+++++++++ objects/namespaced/kube-public/configmaps/cluster-info.txt\n>f+++++++++ objects/namespaced/kube-public/configmaps/cluster-info.yaml\n>f+++++++++ objects/namespaced/kube-public/configmaps/kube-root-ca.crt.txt\n>f+++++++++ objects/namespaced/kube-public/configmaps/kube-root-ca.crt.yaml\ncd+++++++++ objects/namespaced/kube-public/rolebindings/\n>f+++++++++ objects/namespaced/kube-public/rolebindings/kubeadm:bootstrap-signer-clusterinfo.txt\n>f+++++++++ objects/namespaced/kube-public/rolebindings/kubeadm:bootstrap-signer-clusterinfo.yaml\n>f+++++++++ objects/namespaced/kube-public/rolebindings/system:controller:bootstrap-signer.txt\n>f+++++++++ objects/namespaced/kube-public/rolebindings/system:controller:bootstrap-signer.yaml\ncd+++++++++ objects/namespaced/kube-public/roles/\n>f+++++++++ objects/namespaced/kube-public/roles/kubeadm:bootstrap-signer-clusterinfo.txt\n>f+++++++++ objects/namespaced/kube-public/roles/kubeadm:bootstrap-signer-clusterinfo.yaml\n>f+++++++++ objects/namespaced/kube-public/roles/system:controller:bootstrap-signer.txt\n>f+++++++++ objects/namespaced/kube-public/roles/system:controller:bootstrap-signer.yaml\ncd+++++++++ objects/namespaced/kube-public/serviceaccounts/\n>f+++++++++ objects/namespaced/kube-public/serviceaccounts/default.txt\n>f+++++++++ objects/namespaced/kube-public/serviceaccounts/default.yaml\ncd+++++++++ objects/namespaced/kube-system/\ncd+++++++++ objects/namespaced/kube-system/configmaps/\n>f+++++++++ objects/namespaced/kube-system/configmaps/cilium-config.txt\n>f+++++++++ objects/namespaced/kube-system/configmaps/cilium-config.yaml\n>f+++++++++ objects/namespaced/kube-system/configmaps/coredns.txt\n>f+++++++++ objects/namespaced/kube-system/configmaps/coredns.yaml\n>f+++++++++ objects/namespaced/kube-system/configmaps/extension-apiserver-authentication.txt\n>f+++++++++ objects/namespaced/kube-system/configmaps/extension-apiserver-authentication.yaml\n>f+++++++++ objects/namespaced/kube-system/configmaps/kube-apiserver-legacy-service-account-token-tracking.txt\n>f+++++++++ objects/namespaced/kube-system/configmaps/kube-apiserver-legacy-service-account-token-tracking.yaml\n>f+++++++++ objects/namespaced/kube-system/configmaps/kube-proxy.txt\n>f+++++++++ objects/namespaced/kube-system/configmaps/kube-proxy.yaml\n>f+++++++++ objects/namespaced/kube-system/configmaps/kube-root-ca.crt.txt\n>f+++++++++ objects/namespaced/kube-system/configmaps/kube-root-ca.crt.yaml\n>f+++++++++ objects/namespaced/kube-system/configmaps/kubeadm-config.txt\n>f+++++++++ objects/namespaced/kube-system/configmaps/kubeadm-config.yaml\n>f+++++++++ objects/namespaced/kube-system/configmaps/kubelet-config.txt\n>f+++++++++ objects/namespaced/kube-system/configmaps/kubelet-config.yaml\ncd+++++++++ objects/namespaced/kube-system/daemonsets/\n>f+++++++++ objects/namespaced/kube-system/daemonsets/cilium.txt\n>f+++++++++ objects/namespaced/kube-system/daemonsets/cilium.yaml\n>f+++++++++ objects/namespaced/kube-system/daemonsets/kube-proxy.txt\n>f+++++++++ objects/namespaced/kube-system/daemonsets/kube-proxy.yaml\ncd+++++++++ objects/namespaced/kube-system/deployment/\n>f+++++++++ objects/namespaced/kube-system/deployment/cilium-operator.txt\n>f+++++++++ objects/namespaced/kube-system/deployment/cilium-operator.yaml\n>f+++++++++ objects/namespaced/kube-system/deployment/coredns.txt\n>f+++++++++ objects/namespaced/kube-system/deployment/coredns.yaml\ncd+++++++++ objects/namespaced/kube-system/endpoints/\n>f+++++++++ objects/namespaced/kube-system/endpoints/kube-dns.txt\n>f+++++++++ objects/namespaced/kube-system/endpoints/kube-dns.yaml\ncd+++++++++ objects/namespaced/kube-system/pods/\n>f+++++++++ objects/namespaced/kube-system/pods/cilium-operator-7fcd8d6ffd-z9l7s.txt\n>f+++++++++ objects/namespaced/kube-system/pods/cilium-operator-7fcd8d6ffd-z9l7s.yaml\n>f+++++++++ objects/namespaced/kube-system/pods/cilium-x7gd9.txt\n>f+++++++++ objects/namespaced/kube-system/pods/cilium-x7gd9.yaml\n>f+++++++++ objects/namespaced/kube-system/pods/coredns-5dd5756b68-ft99h.txt\n>f+++++++++ objects/namespaced/kube-system/pods/coredns-5dd5756b68-ft99h.yaml\n>f+++++++++ objects/namespaced/kube-system/pods/coredns-77cccfdc44-grz7v.txt\n>f+++++++++ objects/namespaced/kube-system/pods/coredns-77cccfdc44-grz7v.yaml\n>f+++++++++ objects/namespaced/kube-system/pods/coredns-77cccfdc44-s6lnp.txt\n>f+++++++++ objects/namespaced/kube-system/pods/coredns-77cccfdc44-s6lnp.yaml\n>f+++++++++ objects/namespaced/kube-system/pods/etcd-controller.txt\n>f+++++++++ objects/namespaced/kube-system/pods/etcd-controller.yaml\n>f+++++++++ objects/namespaced/kube-system/pods/kube-apiserver-controller.txt\n>f+++++++++ objects/namespaced/kube-system/pods/kube-apiserver-controller.yaml\n>f+++++++++ objects/namespaced/kube-system/pods/kube-controller-manager-controller.txt\n>f+++++++++ objects/namespaced/kube-system/pods/kube-controller-manager-controller.yaml\n>f+++++++++ objects/namespaced/kube-system/pods/kube-proxy-nr529.txt\n>f+++++++++ objects/namespaced/kube-system/pods/kube-proxy-nr529.yaml\n>f+++++++++ objects/namespaced/kube-system/pods/kube-scheduler-controller.txt\n>f+++++++++ objects/namespaced/kube-system/pods/kube-scheduler-controller.yaml\n>f+++++++++ objects/namespaced/kube-system/pods/kube-vip-controller.txt\n>f+++++++++ objects/namespaced/kube-system/pods/kube-vip-controller.yaml\ncd+++++++++ objects/namespaced/kube-system/rolebindings/\n>f+++++++++ objects/namespaced/kube-system/rolebindings/cilium-config-agent.txt\n>f+++++++++ objects/namespaced/kube-system/rolebindings/cilium-config-agent.yaml\n>f+++++++++ objects/namespaced/kube-system/rolebindings/kube-proxy.txt\n>f+++++++++ objects/namespaced/kube-system/rolebindings/kube-proxy.yaml\n>f+++++++++ objects/namespaced/kube-system/rolebindings/kubeadm:kubeadm-certs.txt\n>f+++++++++ objects/namespaced/kube-system/rolebindings/kubeadm:kubeadm-certs.yaml\n>f+++++++++ objects/namespaced/kube-system/rolebindings/kubeadm:kubelet-config.txt\n>f+++++++++ objects/namespaced/kube-system/rolebindings/kubeadm:kubelet-config.yaml\n>f+++++++++ objects/namespaced/kube-system/rolebindings/kubeadm:nodes-kubeadm-config.txt\n>f+++++++++ objects/namespaced/kube-system/rolebindings/kubeadm:nodes-kubeadm-config.yaml\n>f+++++++++ objects/namespaced/kube-system/rolebindings/system::extension-apiserver-authentication-reader.txt\n>f+++++++++ objects/namespaced/kube-system/rolebindings/system::extension-apiserver-authentication-reader.yaml\n>f+++++++++ objects/namespaced/kube-system/rolebindings/system::leader-locking-kube-controller-manager.txt\n>f+++++++++ objects/namespaced/kube-system/rolebindings/system::leader-locking-kube-controller-manager.yaml\n>f+++++++++ objects/namespaced/kube-system/rolebindings/system::leader-locking-kube-scheduler.txt\n>f+++++++++ objects/namespaced/kube-system/rolebindings/system::leader-locking-kube-scheduler.yaml\n>f+++++++++ objects/namespaced/kube-system/rolebindings/system:controller:bootstrap-signer.txt\n>f+++++++++ objects/namespaced/kube-system/rolebindings/system:controller:bootstrap-signer.yaml\n>f+++++++++ objects/namespaced/kube-system/rolebindings/system:controller:cloud-provider.txt\n>f+++++++++ objects/namespaced/kube-system/rolebindings/system:controller:cloud-provider.yaml\n>f+++++++++ objects/namespaced/kube-system/rolebindings/system:controller:token-cleaner.txt\n>f+++++++++ objects/namespaced/kube-system/rolebindings/system:controller:token-cleaner.yaml\ncd+++++++++ objects/namespaced/kube-system/roles/\n>f+++++++++ objects/namespaced/kube-system/roles/cilium-config-agent.txt\n>f+++++++++ objects/namespaced/kube-system/roles/cilium-config-agent.yaml\n>f+++++++++ objects/namespaced/kube-system/roles/extension-apiserver-authentication-reader.txt\n>f+++++++++ objects/namespaced/kube-system/roles/extension-apiserver-authentication-reader.yaml\n>f+++++++++ objects/namespaced/kube-system/roles/kube-proxy.txt\n>f+++++++++ objects/namespaced/kube-system/roles/kube-proxy.yaml\n>f+++++++++ objects/namespaced/kube-system/roles/kubeadm:kubeadm-certs.txt\n>f+++++++++ objects/namespaced/kube-system/roles/kubeadm:kubeadm-certs.yaml\n>f+++++++++ objects/namespaced/kube-system/roles/kubeadm:kubelet-config.txt\n>f+++++++++ objects/namespaced/kube-system/roles/kubeadm:kubelet-config.yaml\n>f+++++++++ objects/namespaced/kube-system/roles/kubeadm:nodes-kubeadm-config.txt\n>f+++++++++ objects/namespaced/kube-system/roles/kubeadm:nodes-kubeadm-config.yaml\n>f+++++++++ objects/namespaced/kube-system/roles/system::leader-locking-kube-controller-manager.txt\n>f+++++++++ objects/namespaced/kube-system/roles/system::leader-locking-kube-controller-manager.yaml\n>f+++++++++ objects/namespaced/kube-system/roles/system::leader-locking-kube-scheduler.txt\n>f+++++++++ objects/namespaced/kube-system/roles/system::leader-locking-kube-scheduler.yaml\n>f+++++++++ objects/namespaced/kube-system/roles/system:controller:bootstrap-signer.txt\n>f+++++++++ objects/namespaced/kube-system/roles/system:controller:bootstrap-signer.yaml\n>f+++++++++ objects/namespaced/kube-system/roles/system:controller:cloud-provider.txt\n>f+++++++++ objects/namespaced/kube-system/roles/system:controller:cloud-provider.yaml\n>f+++++++++ objects/namespaced/kube-system/roles/system:controller:token-cleaner.txt\n>f+++++++++ objects/namespaced/kube-system/roles/system:controller:token-cleaner.yaml\ncd+++++++++ objects/namespaced/kube-system/secrets/\n>f+++++++++ objects/namespaced/kube-system/secrets/bootstrap-token-69b9fm.txt\n>f+++++++++ objects/namespaced/kube-system/secrets/bootstrap-token-69b9fm.yaml\n>f+++++++++ objects/namespaced/kube-system/secrets/bootstrap-token-iqwlp8.txt\n>f+++++++++ objects/namespaced/kube-system/secrets/bootstrap-token-iqwlp8.yaml\n>f+++++++++ objects/namespaced/kube-system/secrets/kubeadm-certs.txt\n>f+++++++++ objects/namespaced/kube-system/secrets/kubeadm-certs.yaml\n>f+++++++++ objects/namespaced/kube-system/secrets/sh.helm.release.v1.cilium.v1.txt\n>f+++++++++ objects/namespaced/kube-system/secrets/sh.helm.release.v1.cilium.v1.yaml\ncd+++++++++ objects/namespaced/kube-system/serviceaccounts/\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/attachdetach-controller.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/attachdetach-controller.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/bootstrap-signer.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/bootstrap-signer.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/certificate-controller.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/certificate-controller.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/cilium-operator.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/cilium-operator.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/cilium.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/cilium.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/clusterrole-aggregation-controller.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/clusterrole-aggregation-controller.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/coredns.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/coredns.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/cronjob-controller.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/cronjob-controller.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/daemon-set-controller.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/daemon-set-controller.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/default.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/default.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/deployment-controller.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/deployment-controller.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/disruption-controller.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/disruption-controller.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/endpoint-controller.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/endpoint-controller.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/endpointslice-controller.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/endpointslice-controller.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/endpointslicemirroring-controller.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/endpointslicemirroring-controller.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/ephemeral-volume-controller.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/ephemeral-volume-controller.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/expand-controller.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/expand-controller.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/generic-garbage-collector.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/generic-garbage-collector.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/horizontal-pod-autoscaler.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/horizontal-pod-autoscaler.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/job-controller.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/job-controller.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/kube-proxy.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/kube-proxy.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/namespace-controller.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/namespace-controller.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/node-controller.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/node-controller.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/persistent-volume-binder.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/persistent-volume-binder.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/pod-garbage-collector.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/pod-garbage-collector.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/pv-protection-controller.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/pv-protection-controller.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/pvc-protection-controller.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/pvc-protection-controller.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/replicaset-controller.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/replicaset-controller.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/replication-controller.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/replication-controller.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/resourcequota-controller.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/resourcequota-controller.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/root-ca-cert-publisher.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/root-ca-cert-publisher.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/service-account-controller.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/service-account-controller.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/service-controller.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/service-controller.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/statefulset-controller.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/statefulset-controller.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/token-cleaner.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/token-cleaner.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/ttl-after-finished-controller.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/ttl-after-finished-controller.yaml\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/ttl-controller.txt\n>f+++++++++ objects/namespaced/kube-system/serviceaccounts/ttl-controller.yaml\ncd+++++++++ objects/namespaced/kube-system/services/\n>f+++++++++ objects/namespaced/kube-system/services/kube-dns.txt\n>f+++++++++ objects/namespaced/kube-system/services/kube-dns.yaml\ncd+++++++++ objects/namespaced/secretgen-controller/\ncd+++++++++ objects/namespaced/secretgen-controller/configmaps/\n>f+++++++++ objects/namespaced/secretgen-controller/configmaps/kube-root-ca.crt.txt\n>f+++++++++ objects/namespaced/secretgen-controller/configmaps/kube-root-ca.crt.yaml\ncd+++++++++ objects/namespaced/secretgen-controller/deployment/\n>f+++++++++ objects/namespaced/secretgen-controller/deployment/secretgen-controller.txt\n>f+++++++++ objects/namespaced/secretgen-controller/deployment/secretgen-controller.yaml\ncd+++++++++ objects/namespaced/secretgen-controller/pods/\n>f+++++++++ objects/namespaced/secretgen-controller/pods/secretgen-controller-ffb97c6dc-q8brg.txt\n>f+++++++++ objects/namespaced/secretgen-controller/pods/secretgen-controller-ffb97c6dc-q8brg.yaml\ncd+++++++++ objects/namespaced/secretgen-controller/serviceaccounts/\n>f+++++++++ objects/namespaced/secretgen-controller/serviceaccounts/default.txt\n>f+++++++++ objects/namespaced/secretgen-controller/serviceaccounts/default.yaml\n>f+++++++++ objects/namespaced/secretgen-controller/serviceaccounts/secretgen-controller-sa.txt\n>f+++++++++ objects/namespaced/secretgen-controller/serviceaccounts/secretgen-controller-sa.yaml\n",
"rc": 0,
"stdout_lines": [
"cd+++++++++ objects/",
"cd+++++++++ objects/cluster/",
"cd+++++++++ objects/cluster/clusterrole/",
">f+++++++++ objects/cluster/clusterrole/admin.txt",
">f+++++++++ objects/cluster/clusterrole/admin.yaml",
">f+++++++++ objects/cluster/clusterrole/cilium-operator.txt",
">f+++++++++ objects/cluster/clusterrole/cilium-operator.yaml",
">f+++++++++ objects/cluster/clusterrole/cilium.txt",
">f+++++++++ objects/cluster/clusterrole/cilium.yaml",
">f+++++++++ objects/cluster/clusterrole/cluster-admin.txt",
">f+++++++++ objects/cluster/clusterrole/cluster-admin.yaml",
">f+++++++++ objects/cluster/clusterrole/edit.txt",
">f+++++++++ objects/cluster/clusterrole/edit.yaml",
">f+++++++++ objects/cluster/clusterrole/envoy-gateway-gateway-helm-certgen:envoy-gateway-system.txt",
">f+++++++++ objects/cluster/clusterrole/envoy-gateway-gateway-helm-certgen:envoy-gateway-system.yaml",
">f+++++++++ objects/cluster/clusterrole/envoy-gateway-gateway-helm-envoy-gateway-role.txt",
">f+++++++++ objects/cluster/clusterrole/envoy-gateway-gateway-helm-envoy-gateway-role.yaml",
">f+++++++++ objects/cluster/clusterrole/kubeadm:get-nodes.txt",
">f+++++++++ objects/cluster/clusterrole/kubeadm:get-nodes.yaml",
">f+++++++++ objects/cluster/clusterrole/secretgen-controller-cluster-role.txt",
">f+++++++++ objects/cluster/clusterrole/secretgen-controller-cluster-role.yaml",
">f+++++++++ objects/cluster/clusterrole/system:aggregate-to-admin.txt",
">f+++++++++ objects/cluster/clusterrole/system:aggregate-to-admin.yaml",
">f+++++++++ objects/cluster/clusterrole/system:aggregate-to-edit.txt",
">f+++++++++ objects/cluster/clusterrole/system:aggregate-to-edit.yaml",
">f+++++++++ objects/cluster/clusterrole/system:aggregate-to-view.txt",
">f+++++++++ objects/cluster/clusterrole/system:aggregate-to-view.yaml",
">f+++++++++ objects/cluster/clusterrole/system:auth-delegator.txt",
">f+++++++++ objects/cluster/clusterrole/system:auth-delegator.yaml",
">f+++++++++ objects/cluster/clusterrole/system:basic-user.txt",
">f+++++++++ objects/cluster/clusterrole/system:basic-user.yaml",
">f+++++++++ objects/cluster/clusterrole/system:certificates.k8s.io:certificatesigningrequests:nodeclient.txt",
">f+++++++++ objects/cluster/clusterrole/system:certificates.k8s.io:certificatesigningrequests:nodeclient.yaml",
">f+++++++++ objects/cluster/clusterrole/system:certificates.k8s.io:certificatesigningrequests:selfnodeclient.txt",
">f+++++++++ objects/cluster/clusterrole/system:certificates.k8s.io:certificatesigningrequests:selfnodeclient.yaml",
">f+++++++++ objects/cluster/clusterrole/system:certificates.k8s.io:kube-apiserver-client-approver.txt",
">f+++++++++ objects/cluster/clusterrole/system:certificates.k8s.io:kube-apiserver-client-approver.yaml",
">f+++++++++ objects/cluster/clusterrole/system:certificates.k8s.io:kube-apiserver-client-kubelet-approver.txt",
">f+++++++++ objects/cluster/clusterrole/system:certificates.k8s.io:kube-apiserver-client-kubelet-approver.yaml",
">f+++++++++ objects/cluster/clusterrole/system:certificates.k8s.io:kubelet-serving-approver.txt",
">f+++++++++ objects/cluster/clusterrole/system:certificates.k8s.io:kubelet-serving-approver.yaml",
">f+++++++++ objects/cluster/clusterrole/system:certificates.k8s.io:legacy-unknown-approver.txt",
">f+++++++++ objects/cluster/clusterrole/system:certificates.k8s.io:legacy-unknown-approver.yaml",
">f+++++++++ objects/cluster/clusterrole/system:controller:attachdetach-controller.txt",
">f+++++++++ objects/cluster/clusterrole/system:controller:attachdetach-controller.yaml",
">f+++++++++ objects/cluster/clusterrole/system:controller:certificate-controller.txt",
">f+++++++++ objects/cluster/clusterrole/system:controller:certificate-controller.yaml",
">f+++++++++ objects/cluster/clusterrole/system:controller:clusterrole-aggregation-controller.txt",
">f+++++++++ objects/cluster/clusterrole/system:controller:clusterrole-aggregation-controller.yaml",
">f+++++++++ objects/cluster/clusterrole/system:controller:cronjob-controller.txt",
">f+++++++++ objects/cluster/clusterrole/system:controller:cronjob-controller.yaml",
">f+++++++++ objects/cluster/clusterrole/system:controller:daemon-set-controller.txt",
">f+++++++++ objects/cluster/clusterrole/system:controller:daemon-set-controller.yaml",
">f+++++++++ objects/cluster/clusterrole/system:controller:deployment-controller.txt",
">f+++++++++ objects/cluster/clusterrole/system:controller:deployment-controller.yaml",
">f+++++++++ objects/cluster/clusterrole/system:controller:disruption-controller.txt",
">f+++++++++ objects/cluster/clusterrole/system:controller:disruption-controller.yaml",
">f+++++++++ objects/cluster/clusterrole/system:controller:endpoint-controller.txt",
">f+++++++++ objects/cluster/clusterrole/system:controller:endpoint-controller.yaml",
">f+++++++++ objects/cluster/clusterrole/system:controller:endpointslice-controller.txt",
">f+++++++++ objects/cluster/clusterrole/system:controller:endpointslice-controller.yaml",
">f+++++++++ objects/cluster/clusterrole/system:controller:endpointslicemirroring-controller.txt",
">f+++++++++ objects/cluster/clusterrole/system:controller:endpointslicemirroring-controller.yaml",
">f+++++++++ objects/cluster/clusterrole/system:controller:ephemeral-volume-controller.txt",
">f+++++++++ objects/cluster/clusterrole/system:controller:ephemeral-volume-controller.yaml",
">f+++++++++ objects/cluster/clusterrole/system:controller:expand-controller.txt",
">f+++++++++ objects/cluster/clusterrole/system:controller:expand-controller.yaml",
">f+++++++++ objects/cluster/clusterrole/system:controller:generic-garbage-collector.txt",
">f+++++++++ objects/cluster/clusterrole/system:controller:generic-garbage-collector.yaml",
">f+++++++++ objects/cluster/clusterrole/system:controller:horizontal-pod-autoscaler.txt",
">f+++++++++ objects/cluster/clusterrole/system:controller:horizontal-pod-autoscaler.yaml",
">f+++++++++ objects/cluster/clusterrole/system:controller:job-controller.txt",
">f+++++++++ objects/cluster/clusterrole/system:controller:job-controller.yaml",
">f+++++++++ objects/cluster/clusterrole/system:controller:namespace-controller.txt",
">f+++++++++ objects/cluster/clusterrole/system:controller:namespace-controller.yaml",
">f+++++++++ objects/cluster/clusterrole/system:controller:node-controller.txt",
">f+++++++++ objects/cluster/clusterrole/system:controller:node-controller.yaml",
">f+++++++++ objects/cluster/clusterrole/system:controller:persistent-volume-binder.txt",
">f+++++++++ objects/cluster/clusterrole/system:controller:persistent-volume-binder.yaml",
">f+++++++++ objects/cluster/clusterrole/system:controller:pod-garbage-collector.txt",
">f+++++++++ objects/cluster/clusterrole/system:controller:pod-garbage-collector.yaml",
">f+++++++++ objects/cluster/clusterrole/system:controller:pv-protection-controller.txt",
">f+++++++++ objects/cluster/clusterrole/system:controller:pv-protection-controller.yaml",
">f+++++++++ objects/cluster/clusterrole/system:controller:pvc-protection-controller.txt",
">f+++++++++ objects/cluster/clusterrole/system:controller:pvc-protection-controller.yaml",
">f+++++++++ objects/cluster/clusterrole/system:controller:replicaset-controller.txt",
">f+++++++++ objects/cluster/clusterrole/system:controller:replicaset-controller.yaml",
">f+++++++++ objects/cluster/clusterrole/system:controller:replication-controller.txt",
">f+++++++++ objects/cluster/clusterrole/system:controller:replication-controller.yaml",
">f+++++++++ objects/cluster/clusterrole/system:controller:resourcequota-controller.txt",
">f+++++++++ objects/cluster/clusterrole/system:controller:resourcequota-controller.yaml",
">f+++++++++ objects/cluster/clusterrole/system:controller:root-ca-cert-publisher.txt",
">f+++++++++ objects/cluster/clusterrole/system:controller:root-ca-cert-publisher.yaml",
">f+++++++++ objects/cluster/clusterrole/system:controller:route-controller.txt",
">f+++++++++ objects/cluster/clusterrole/system:controller:route-controller.yaml",
">f+++++++++ objects/cluster/clusterrole/system:controller:service-account-controller.txt",
">f+++++++++ objects/cluster/clusterrole/system:controller:service-account-controller.yaml",
">f+++++++++ objects/cluster/clusterrole/system:controller:service-controller.txt",
">f+++++++++ objects/cluster/clusterrole/system:controller:service-controller.yaml",
">f+++++++++ objects/cluster/clusterrole/system:controller:statefulset-controller.txt",
">f+++++++++ objects/cluster/clusterrole/system:controller:statefulset-controller.yaml",
">f+++++++++ objects/cluster/clusterrole/system:controller:ttl-after-finished-controller.txt",
">f+++++++++ objects/cluster/clusterrole/system:controller:ttl-after-finished-controller.yaml",
">f+++++++++ objects/cluster/clusterrole/system:controller:ttl-controller.txt",
">f+++++++++ objects/cluster/clusterrole/system:controller:ttl-controller.yaml",
">f+++++++++ objects/cluster/clusterrole/system:coredns.txt",
">f+++++++++ objects/cluster/clusterrole/system:coredns.yaml",
">f+++++++++ objects/cluster/clusterrole/system:discovery.txt",
">f+++++++++ objects/cluster/clusterrole/system:discovery.yaml",
">f+++++++++ objects/cluster/clusterrole/system:heapster.txt",
">f+++++++++ objects/cluster/clusterrole/system:heapster.yaml",
">f+++++++++ objects/cluster/clusterrole/system:kube-aggregator.txt",
">f+++++++++ objects/cluster/clusterrole/system:kube-aggregator.yaml",
">f+++++++++ objects/cluster/clusterrole/system:kube-controller-manager.txt",
">f+++++++++ objects/cluster/clusterrole/system:kube-controller-manager.yaml",
">f+++++++++ objects/cluster/clusterrole/system:kube-dns.txt",
">f+++++++++ objects/cluster/clusterrole/system:kube-dns.yaml",
">f+++++++++ objects/cluster/clusterrole/system:kube-scheduler.txt",
">f+++++++++ objects/cluster/clusterrole/system:kube-scheduler.yaml",
">f+++++++++ objects/cluster/clusterrole/system:kubelet-api-admin.txt",
">f+++++++++ objects/cluster/clusterrole/system:kubelet-api-admin.yaml",
">f+++++++++ objects/cluster/clusterrole/system:monitoring.txt",
">f+++++++++ objects/cluster/clusterrole/system:monitoring.yaml",
">f+++++++++ objects/cluster/clusterrole/system:node-bootstrapper.txt",
">f+++++++++ objects/cluster/clusterrole/system:node-bootstrapper.yaml",
">f+++++++++ objects/cluster/clusterrole/system:node-problem-detector.txt",
">f+++++++++ objects/cluster/clusterrole/system:node-problem-detector.yaml",
">f+++++++++ objects/cluster/clusterrole/system:node-proxier.txt",
">f+++++++++ objects/cluster/clusterrole/system:node-proxier.yaml",
">f+++++++++ objects/cluster/clusterrole/system:node.txt",
">f+++++++++ objects/cluster/clusterrole/system:node.yaml",
">f+++++++++ objects/cluster/clusterrole/system:persistent-volume-provisioner.txt",
">f+++++++++ objects/cluster/clusterrole/system:persistent-volume-provisioner.yaml",
">f+++++++++ objects/cluster/clusterrole/system:public-info-viewer.txt",
">f+++++++++ objects/cluster/clusterrole/system:public-info-viewer.yaml",
">f+++++++++ objects/cluster/clusterrole/system:service-account-issuer-discovery.txt",
">f+++++++++ objects/cluster/clusterrole/system:service-account-issuer-discovery.yaml",
">f+++++++++ objects/cluster/clusterrole/system:volume-scheduler.txt",
">f+++++++++ objects/cluster/clusterrole/system:volume-scheduler.yaml",
">f+++++++++ objects/cluster/clusterrole/view.txt",
">f+++++++++ objects/cluster/clusterrole/view.yaml",
"cd+++++++++ objects/cluster/clusterrolebinding/",
">f+++++++++ objects/cluster/clusterrolebinding/cilium-operator.txt",
">f+++++++++ objects/cluster/clusterrolebinding/cilium-operator.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/cilium.txt",
">f+++++++++ objects/cluster/clusterrolebinding/cilium.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/cluster-admin.txt",
">f+++++++++ objects/cluster/clusterrolebinding/cluster-admin.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/envoy-gateway-gateway-helm-certgen:envoy-gateway-system.txt",
">f+++++++++ objects/cluster/clusterrolebinding/envoy-gateway-gateway-helm-certgen:envoy-gateway-system.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/envoy-gateway-gateway-helm-envoy-gateway-rolebinding.txt",
">f+++++++++ objects/cluster/clusterrolebinding/envoy-gateway-gateway-helm-envoy-gateway-rolebinding.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/kubeadm:get-nodes.txt",
">f+++++++++ objects/cluster/clusterrolebinding/kubeadm:get-nodes.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/kubeadm:kubelet-bootstrap.txt",
">f+++++++++ objects/cluster/clusterrolebinding/kubeadm:kubelet-bootstrap.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/kubeadm:node-autoapprove-bootstrap.txt",
">f+++++++++ objects/cluster/clusterrolebinding/kubeadm:node-autoapprove-bootstrap.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/kubeadm:node-autoapprove-certificate-rotation.txt",
">f+++++++++ objects/cluster/clusterrolebinding/kubeadm:node-autoapprove-certificate-rotation.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/kubeadm:node-proxier.txt",
">f+++++++++ objects/cluster/clusterrolebinding/kubeadm:node-proxier.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/secretgen-controller-cluster-role-binding.txt",
">f+++++++++ objects/cluster/clusterrolebinding/secretgen-controller-cluster-role-binding.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:basic-user.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:basic-user.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:attachdetach-controller.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:attachdetach-controller.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:certificate-controller.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:certificate-controller.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:clusterrole-aggregation-controller.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:clusterrole-aggregation-controller.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:cronjob-controller.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:cronjob-controller.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:daemon-set-controller.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:daemon-set-controller.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:deployment-controller.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:deployment-controller.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:disruption-controller.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:disruption-controller.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:endpoint-controller.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:endpoint-controller.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:endpointslice-controller.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:endpointslice-controller.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:endpointslicemirroring-controller.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:endpointslicemirroring-controller.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:ephemeral-volume-controller.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:ephemeral-volume-controller.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:expand-controller.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:expand-controller.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:generic-garbage-collector.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:generic-garbage-collector.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:horizontal-pod-autoscaler.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:horizontal-pod-autoscaler.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:job-controller.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:job-controller.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:namespace-controller.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:namespace-controller.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:node-controller.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:node-controller.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:persistent-volume-binder.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:persistent-volume-binder.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:pod-garbage-collector.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:pod-garbage-collector.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:pv-protection-controller.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:pv-protection-controller.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:pvc-protection-controller.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:pvc-protection-controller.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:replicaset-controller.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:replicaset-controller.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:replication-controller.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:replication-controller.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:resourcequota-controller.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:resourcequota-controller.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:root-ca-cert-publisher.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:root-ca-cert-publisher.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:route-controller.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:route-controller.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:service-account-controller.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:service-account-controller.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:service-controller.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:service-controller.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:statefulset-controller.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:statefulset-controller.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:ttl-after-finished-controller.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:ttl-after-finished-controller.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:ttl-controller.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:controller:ttl-controller.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:coredns.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:coredns.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:discovery.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:discovery.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:kube-controller-manager.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:kube-controller-manager.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:kube-dns.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:kube-dns.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:kube-scheduler.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:kube-scheduler.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:monitoring.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:monitoring.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:node-proxier.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:node-proxier.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:node.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:node.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:public-info-viewer.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:public-info-viewer.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:service-account-issuer-discovery.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:service-account-issuer-discovery.yaml",
">f+++++++++ objects/cluster/clusterrolebinding/system:volume-scheduler.txt",
">f+++++++++ objects/cluster/clusterrolebinding/system:volume-scheduler.yaml",
"cd+++++++++ objects/cluster/namespace/",
">f+++++++++ objects/cluster/namespace/default.txt",
">f+++++++++ objects/cluster/namespace/default.yaml",
">f+++++++++ objects/cluster/namespace/envoy-gateway-system.txt",
">f+++++++++ objects/cluster/namespace/envoy-gateway-system.yaml",
">f+++++++++ objects/cluster/namespace/kube-node-lease.txt",
">f+++++++++ objects/cluster/namespace/kube-node-lease.yaml",
">f+++++++++ objects/cluster/namespace/kube-public.txt",
">f+++++++++ objects/cluster/namespace/kube-public.yaml",
">f+++++++++ objects/cluster/namespace/kube-system.txt",
">f+++++++++ objects/cluster/namespace/kube-system.yaml",
">f+++++++++ objects/cluster/namespace/secretgen-controller.txt",
">f+++++++++ objects/cluster/namespace/secretgen-controller.yaml",
"cd+++++++++ objects/cluster/node/",
">f+++++++++ objects/cluster/node/controller.txt",
">f+++++++++ objects/cluster/node/controller.yaml",
"cd+++++++++ objects/namespaced/",
"cd+++++++++ objects/namespaced/default/",
"cd+++++++++ objects/namespaced/default/configmaps/",
">f+++++++++ objects/namespaced/default/configmaps/kube-root-ca.crt.txt",
">f+++++++++ objects/namespaced/default/configmaps/kube-root-ca.crt.yaml",
"cd+++++++++ objects/namespaced/default/endpoints/",
">f+++++++++ objects/namespaced/default/endpoints/kubernetes.txt",
">f+++++++++ objects/namespaced/default/endpoints/kubernetes.yaml",
"cd+++++++++ objects/namespaced/default/secrets/",
">f+++++++++ objects/namespaced/default/secrets/test-password.txt",
">f+++++++++ objects/namespaced/default/secrets/test-password.yaml",
"cd+++++++++ objects/namespaced/default/serviceaccounts/",
">f+++++++++ objects/namespaced/default/serviceaccounts/default.txt",
">f+++++++++ objects/namespaced/default/serviceaccounts/default.yaml",
"cd+++++++++ objects/namespaced/default/services/",
">f+++++++++ objects/namespaced/default/services/kubernetes.txt",
">f+++++++++ objects/namespaced/default/services/kubernetes.yaml",
"cd+++++++++ objects/namespaced/envoy-gateway-system/",
"cd+++++++++ objects/namespaced/envoy-gateway-system/configmaps/",
">f+++++++++ objects/namespaced/envoy-gateway-system/configmaps/envoy-gateway-config.txt",
">f+++++++++ objects/namespaced/envoy-gateway-system/configmaps/envoy-gateway-config.yaml",
">f+++++++++ objects/namespaced/envoy-gateway-system/configmaps/kube-root-ca.crt.txt",
">f+++++++++ objects/namespaced/envoy-gateway-system/configmaps/kube-root-ca.crt.yaml",
"cd+++++++++ objects/namespaced/envoy-gateway-system/deployment/",
">f+++++++++ objects/namespaced/envoy-gateway-system/deployment/envoy-gateway.txt",
">f+++++++++ objects/namespaced/envoy-gateway-system/deployment/envoy-gateway.yaml",
"cd+++++++++ objects/namespaced/envoy-gateway-system/endpoints/",
">f+++++++++ objects/namespaced/envoy-gateway-system/endpoints/envoy-gateway.txt",
">f+++++++++ objects/namespaced/envoy-gateway-system/endpoints/envoy-gateway.yaml",
"cd+++++++++ objects/namespaced/envoy-gateway-system/pods/",
">f+++++++++ objects/namespaced/envoy-gateway-system/pods/envoy-gateway-78446f96c9-qv2qv.txt",
">f+++++++++ objects/namespaced/envoy-gateway-system/pods/envoy-gateway-78446f96c9-qv2qv.yaml",
"cd+++++++++ objects/namespaced/envoy-gateway-system/rolebindings/",
">f+++++++++ objects/namespaced/envoy-gateway-system/rolebindings/envoy-gateway-gateway-helm-certgen.txt",
">f+++++++++ objects/namespaced/envoy-gateway-system/rolebindings/envoy-gateway-gateway-helm-certgen.yaml",
">f+++++++++ objects/namespaced/envoy-gateway-system/rolebindings/envoy-gateway-gateway-helm-infra-manager.txt",
">f+++++++++ objects/namespaced/envoy-gateway-system/rolebindings/envoy-gateway-gateway-helm-infra-manager.yaml",
">f+++++++++ objects/namespaced/envoy-gateway-system/rolebindings/envoy-gateway-gateway-helm-leader-election-rolebinding.txt",
">f+++++++++ objects/namespaced/envoy-gateway-system/rolebindings/envoy-gateway-gateway-helm-leader-election-rolebinding.yaml",
"cd+++++++++ objects/namespaced/envoy-gateway-system/roles/",
">f+++++++++ objects/namespaced/envoy-gateway-system/roles/envoy-gateway-gateway-helm-certgen.txt",
">f+++++++++ objects/namespaced/envoy-gateway-system/roles/envoy-gateway-gateway-helm-certgen.yaml",
">f+++++++++ objects/namespaced/envoy-gateway-system/roles/envoy-gateway-gateway-helm-infra-manager.txt",
">f+++++++++ objects/namespaced/envoy-gateway-system/roles/envoy-gateway-gateway-helm-infra-manager.yaml",
">f+++++++++ objects/namespaced/envoy-gateway-system/roles/envoy-gateway-gateway-helm-leader-election-role.txt",
">f+++++++++ objects/namespaced/envoy-gateway-system/roles/envoy-gateway-gateway-helm-leader-election-role.yaml",
"cd+++++++++ objects/namespaced/envoy-gateway-system/secrets/",
">f+++++++++ objects/namespaced/envoy-gateway-system/secrets/envoy-gateway.txt",
">f+++++++++ objects/namespaced/envoy-gateway-system/secrets/envoy-gateway.yaml",
">f+++++++++ objects/namespaced/envoy-gateway-system/secrets/envoy-oidc-hmac.txt",
">f+++++++++ objects/namespaced/envoy-gateway-system/secrets/envoy-oidc-hmac.yaml",
">f+++++++++ objects/namespaced/envoy-gateway-system/secrets/envoy-rate-limit.txt",
">f+++++++++ objects/namespaced/envoy-gateway-system/secrets/envoy-rate-limit.yaml",
">f+++++++++ objects/namespaced/envoy-gateway-system/secrets/envoy.txt",
">f+++++++++ objects/namespaced/envoy-gateway-system/secrets/envoy.yaml",
">f+++++++++ objects/namespaced/envoy-gateway-system/secrets/sh.helm.release.v1.envoy-gateway.v1.txt",
">f+++++++++ objects/namespaced/envoy-gateway-system/secrets/sh.helm.release.v1.envoy-gateway.v1.yaml",
"cd+++++++++ objects/namespaced/envoy-gateway-system/serviceaccounts/",
">f+++++++++ objects/namespaced/envoy-gateway-system/serviceaccounts/default.txt",
">f+++++++++ objects/namespaced/envoy-gateway-system/serviceaccounts/default.yaml",
">f+++++++++ objects/namespaced/envoy-gateway-system/serviceaccounts/envoy-gateway-gateway-helm-certgen.txt",
">f+++++++++ objects/namespaced/envoy-gateway-system/serviceaccounts/envoy-gateway-gateway-helm-certgen.yaml",
">f+++++++++ objects/namespaced/envoy-gateway-system/serviceaccounts/envoy-gateway.txt",
">f+++++++++ objects/namespaced/envoy-gateway-system/serviceaccounts/envoy-gateway.yaml",
"cd+++++++++ objects/namespaced/envoy-gateway-system/services/",
">f+++++++++ objects/namespaced/envoy-gateway-system/services/envoy-gateway.txt",
">f+++++++++ objects/namespaced/envoy-gateway-system/services/envoy-gateway.yaml",
"cd+++++++++ objects/namespaced/kube-node-lease/",
"cd+++++++++ objects/namespaced/kube-node-lease/configmaps/",
">f+++++++++ objects/namespaced/kube-node-lease/configmaps/kube-root-ca.crt.txt",
">f+++++++++ objects/namespaced/kube-node-lease/configmaps/kube-root-ca.crt.yaml",
"cd+++++++++ objects/namespaced/kube-node-lease/serviceaccounts/",
">f+++++++++ objects/namespaced/kube-node-lease/serviceaccounts/default.txt",
">f+++++++++ objects/namespaced/kube-node-lease/serviceaccounts/default.yaml",
"cd+++++++++ objects/namespaced/kube-public/",
"cd+++++++++ objects/namespaced/kube-public/configmaps/",
">f+++++++++ objects/namespaced/kube-public/configmaps/cluster-info.txt",
">f+++++++++ objects/namespaced/kube-public/configmaps/cluster-info.yaml",
">f+++++++++ objects/namespaced/kube-public/configmaps/kube-root-ca.crt.txt",
">f+++++++++ objects/namespaced/kube-public/configmaps/kube-root-ca.crt.yaml",
"cd+++++++++ objects/namespaced/kube-public/rolebindings/",
">f+++++++++ objects/namespaced/kube-public/rolebindings/kubeadm:bootstrap-signer-clusterinfo.txt",
">f+++++++++ objects/namespaced/kube-public/rolebindings/kubeadm:bootstrap-signer-clusterinfo.yaml",
">f+++++++++ objects/namespaced/kube-public/rolebindings/system:controller:bootstrap-signer.txt",
">f+++++++++ objects/namespaced/kube-public/rolebindings/system:controller:bootstrap-signer.yaml",
"cd+++++++++ objects/namespaced/kube-public/roles/",
">f+++++++++ objects/namespaced/kube-public/roles/kubeadm:bootstrap-signer-clusterinfo.txt",
">f+++++++++ objects/namespaced/kube-public/roles/kubeadm:bootstrap-signer-clusterinfo.yaml",
">f+++++++++ objects/namespaced/kube-public/roles/system:controller:bootstrap-signer.txt",
">f+++++++++ objects/namespaced/kube-public/roles/system:controller:bootstrap-signer.yaml",
"cd+++++++++ objects/namespaced/kube-public/serviceaccounts/",
">f+++++++++ objects/namespaced/kube-public/serviceaccounts/default.txt",
">f+++++++++ objects/namespaced/kube-public/serviceaccounts/default.yaml",
"cd+++++++++ objects/namespaced/kube-system/",
"cd+++++++++ objects/namespaced/kube-system/configmaps/",
">f+++++++++ objects/namespaced/kube-system/configmaps/cilium-config.txt",
">f+++++++++ objects/namespaced/kube-system/configmaps/cilium-config.yaml",
">f+++++++++ objects/namespaced/kube-system/configmaps/coredns.txt",
">f+++++++++ objects/namespaced/kube-system/configmaps/coredns.yaml",
">f+++++++++ objects/namespaced/kube-system/configmaps/extension-apiserver-authentication.txt",
">f+++++++++ objects/namespaced/kube-system/configmaps/extension-apiserver-authentication.yaml",
">f+++++++++ objects/namespaced/kube-system/configmaps/kube-apiserver-legacy-service-account-token-tracking.txt",
">f+++++++++ objects/namespaced/kube-system/configmaps/kube-apiserver-legacy-service-account-token-tracking.yaml",
">f+++++++++ objects/namespaced/kube-system/configmaps/kube-proxy.txt",
">f+++++++++ objects/namespaced/kube-system/configmaps/kube-proxy.yaml",
">f+++++++++ objects/namespaced/kube-system/configmaps/kube-root-ca.crt.txt",
">f+++++++++ objects/namespaced/kube-system/configmaps/kube-root-ca.crt.yaml",
">f+++++++++ objects/namespaced/kube-system/configmaps/kubeadm-config.txt",
">f+++++++++ objects/namespaced/kube-system/configmaps/kubeadm-config.yaml",
">f+++++++++ objects/namespaced/kube-system/configmaps/kubelet-config.txt",
">f+++++++++ objects/namespaced/kube-system/configmaps/kubelet-config.yaml",
"cd+++++++++ objects/namespaced/kube-system/daemonsets/",
">f+++++++++ objects/namespaced/kube-system/daemonsets/cilium.txt",
">f+++++++++ objects/namespaced/kube-system/daemonsets/cilium.yaml",
">f+++++++++ objects/namespaced/kube-system/daemonsets/kube-proxy.txt",
">f+++++++++ objects/namespaced/kube-system/daemonsets/kube-proxy.yaml",
"cd+++++++++ objects/namespaced/kube-system/deployment/",
">f+++++++++ objects/namespaced/kube-system/deployment/cilium-operator.txt",
">f+++++++++ objects/namespaced/kube-system/deployment/cilium-operator.yaml",
">f+++++++++ objects/namespaced/kube-system/deployment/coredns.txt",
">f+++++++++ objects/namespaced/kube-system/deployment/coredns.yaml",
"cd+++++++++ objects/namespaced/kube-system/endpoints/",
">f+++++++++ objects/namespaced/kube-system/endpoints/kube-dns.txt",
">f+++++++++ objects/namespaced/kube-system/endpoints/kube-dns.yaml",
"cd+++++++++ objects/namespaced/kube-system/pods/",
">f+++++++++ objects/namespaced/kube-system/pods/cilium-operator-7fcd8d6ffd-z9l7s.txt",
">f+++++++++ objects/namespaced/kube-system/pods/cilium-operator-7fcd8d6ffd-z9l7s.yaml",
">f+++++++++ objects/namespaced/kube-system/pods/cilium-x7gd9.txt",
">f+++++++++ objects/namespaced/kube-system/pods/cilium-x7gd9.yaml",
">f+++++++++ objects/namespaced/kube-system/pods/coredns-5dd5756b68-ft99h.txt",
">f+++++++++ objects/namespaced/kube-system/pods/coredns-5dd5756b68-ft99h.yaml",
">f+++++++++ objects/namespaced/kube-system/pods/coredns-77cccfdc44-grz7v.txt",
">f+++++++++ objects/namespaced/kube-system/pods/coredns-77cccfdc44-grz7v.yaml",
">f+++++++++ objects/namespaced/kube-system/pods/coredns-77cccfdc44-s6lnp.txt",
">f+++++++++ objects/namespaced/kube-system/pods/coredns-77cccfdc44-s6lnp.yaml",
">f+++++++++ objects/namespaced/kube-system/pods/etcd-controller.txt",
">f+++++++++ objects/namespaced/kube-system/pods/etcd-controller.yaml",
">f+++++++++ objects/namespaced/kube-system/pods/kube-apiserver-controller.txt",
">f+++++++++ objects/namespaced/kube-system/pods/kube-apiserver-controller.yaml",
">f+++++++++ objects/namespaced/kube-system/pods/kube-controller-manager-controller.txt",
">f+++++++++ objects/namespaced/kube-system/pods/kube-controller-manager-controller.yaml",
">f+++++++++ objects/namespaced/kube-system/pods/kube-proxy-nr529.txt",
">f+++++++++ objects/namespaced/kube-system/pods/kube-proxy-nr529.yaml",
">f+++++++++ objects/namespaced/kube-system/pods/kube-scheduler-controller.txt",
">f+++++++++ objects/namespaced/kube-system/pods/kube-scheduler-controller.yaml",
">f+++++++++ objects/namespaced/kube-system/pods/kube-vip-controller.txt",
">f+++++++++ objects/namespaced/kube-system/pods/kube-vip-controller.yaml",
"cd+++++++++ objects/namespaced/kube-system/rolebindings/",
">f+++++++++ objects/namespaced/kube-system/rolebindings/cilium-config-agent.txt",
">f+++++++++ objects/namespaced/kube-system/rolebindings/cilium-config-agent.yaml",
">f+++++++++ objects/namespaced/kube-system/rolebindings/kube-proxy.txt",
">f+++++++++ objects/namespaced/kube-system/rolebindings/kube-proxy.yaml",
">f+++++++++ objects/namespaced/kube-system/rolebindings/kubeadm:kubeadm-certs.txt",
">f+++++++++ objects/namespaced/kube-system/rolebindings/kubeadm:kubeadm-certs.yaml",
">f+++++++++ objects/namespaced/kube-system/rolebindings/kubeadm:kubelet-config.txt",
">f+++++++++ objects/namespaced/kube-system/rolebindings/kubeadm:kubelet-config.yaml",
">f+++++++++ objects/namespaced/kube-system/rolebindings/kubeadm:nodes-kubeadm-config.txt",
">f+++++++++ objects/namespaced/kube-system/rolebindings/kubeadm:nodes-kubeadm-config.yaml",
">f+++++++++ objects/namespaced/kube-system/rolebindings/system::extension-apiserver-authentication-reader.txt",
">f+++++++++ objects/namespaced/kube-system/rolebindings/system::extension-apiserver-authentication-reader.yaml",
">f+++++++++ objects/namespaced/kube-system/rolebindings/system::leader-locking-kube-controller-manager.txt",
">f+++++++++ objects/namespaced/kube-system/rolebindings/system::leader-locking-kube-controller-manager.yaml",
">f+++++++++ objects/namespaced/kube-system/rolebindings/system::leader-locking-kube-scheduler.txt",
">f+++++++++ objects/namespaced/kube-system/rolebindings/system::leader-locking-kube-scheduler.yaml",
">f+++++++++ objects/namespaced/kube-system/rolebindings/system:controller:bootstrap-signer.txt",
">f+++++++++ objects/namespaced/kube-system/rolebindings/system:controller:bootstrap-signer.yaml",
">f+++++++++ objects/namespaced/kube-system/rolebindings/system:controller:cloud-provider.txt",
">f+++++++++ objects/namespaced/kube-system/rolebindings/system:controller:cloud-provider.yaml",
">f+++++++++ objects/namespaced/kube-system/rolebindings/system:controller:token-cleaner.txt",
">f+++++++++ objects/namespaced/kube-system/rolebindings/system:controller:token-cleaner.yaml",
"cd+++++++++ objects/namespaced/kube-system/roles/",
">f+++++++++ objects/namespaced/kube-system/roles/cilium-config-agent.txt",
">f+++++++++ objects/namespaced/kube-system/roles/cilium-config-agent.yaml",
">f+++++++++ objects/namespaced/kube-system/roles/extension-apiserver-authentication-reader.txt",
">f+++++++++ objects/namespaced/kube-system/roles/extension-apiserver-authentication-reader.yaml",
">f+++++++++ objects/namespaced/kube-system/roles/kube-proxy.txt",
">f+++++++++ objects/namespaced/kube-system/roles/kube-proxy.yaml",
">f+++++++++ objects/namespaced/kube-system/roles/kubeadm:kubeadm-certs.txt",
">f+++++++++ objects/namespaced/kube-system/roles/kubeadm:kubeadm-certs.yaml",
">f+++++++++ objects/namespaced/kube-system/roles/kubeadm:kubelet-config.txt",
">f+++++++++ objects/namespaced/kube-system/roles/kubeadm:kubelet-config.yaml",
">f+++++++++ objects/namespaced/kube-system/roles/kubeadm:nodes-kubeadm-config.txt",
">f+++++++++ objects/namespaced/kube-system/roles/kubeadm:nodes-kubeadm-config.yaml",
">f+++++++++ objects/namespaced/kube-system/roles/system::leader-locking-kube-controller-manager.txt",
">f+++++++++ objects/namespaced/kube-system/roles/system::leader-locking-kube-controller-manager.yaml",
">f+++++++++ objects/namespaced/kube-system/roles/system::leader-locking-kube-scheduler.txt",
">f+++++++++ objects/namespaced/kube-system/roles/system::leader-locking-kube-scheduler.yaml",
">f+++++++++ objects/namespaced/kube-system/roles/system:controller:bootstrap-signer.txt",
">f+++++++++ objects/namespaced/kube-system/roles/system:controller:bootstrap-signer.yaml",
">f+++++++++ objects/namespaced/kube-system/roles/system:controller:cloud-provider.txt",
">f+++++++++ objects/namespaced/kube-system/roles/system:controller:cloud-provider.yaml",
">f+++++++++ objects/namespaced/kube-system/roles/system:controller:token-cleaner.txt",
">f+++++++++ objects/namespaced/kube-system/roles/system:controller:token-cleaner.yaml",
"cd+++++++++ objects/namespaced/kube-system/secrets/",
">f+++++++++ objects/namespaced/kube-system/secrets/bootstrap-token-69b9fm.txt",
">f+++++++++ objects/namespaced/kube-system/secrets/bootstrap-token-69b9fm.yaml",
">f+++++++++ objects/namespaced/kube-system/secrets/bootstrap-token-iqwlp8.txt",
">f+++++++++ objects/namespaced/kube-system/secrets/bootstrap-token-iqwlp8.yaml",
">f+++++++++ objects/namespaced/kube-system/secrets/kubeadm-certs.txt",
">f+++++++++ objects/namespaced/kube-system/secrets/kubeadm-certs.yaml",
">f+++++++++ objects/namespaced/kube-system/secrets/sh.helm.release.v1.cilium.v1.txt",
">f+++++++++ objects/namespaced/kube-system/secrets/sh.helm.release.v1.cilium.v1.yaml",
"cd+++++++++ objects/namespaced/kube-system/serviceaccounts/",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/attachdetach-controller.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/attachdetach-controller.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/bootstrap-signer.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/bootstrap-signer.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/certificate-controller.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/certificate-controller.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/cilium-operator.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/cilium-operator.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/cilium.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/cilium.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/clusterrole-aggregation-controller.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/clusterrole-aggregation-controller.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/coredns.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/coredns.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/cronjob-controller.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/cronjob-controller.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/daemon-set-controller.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/daemon-set-controller.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/default.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/default.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/deployment-controller.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/deployment-controller.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/disruption-controller.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/disruption-controller.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/endpoint-controller.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/endpoint-controller.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/endpointslice-controller.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/endpointslice-controller.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/endpointslicemirroring-controller.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/endpointslicemirroring-controller.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/ephemeral-volume-controller.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/ephemeral-volume-controller.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/expand-controller.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/expand-controller.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/generic-garbage-collector.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/generic-garbage-collector.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/horizontal-pod-autoscaler.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/horizontal-pod-autoscaler.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/job-controller.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/job-controller.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/kube-proxy.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/kube-proxy.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/namespace-controller.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/namespace-controller.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/node-controller.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/node-controller.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/persistent-volume-binder.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/persistent-volume-binder.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/pod-garbage-collector.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/pod-garbage-collector.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/pv-protection-controller.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/pv-protection-controller.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/pvc-protection-controller.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/pvc-protection-controller.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/replicaset-controller.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/replicaset-controller.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/replication-controller.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/replication-controller.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/resourcequota-controller.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/resourcequota-controller.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/root-ca-cert-publisher.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/root-ca-cert-publisher.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/service-account-controller.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/service-account-controller.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/service-controller.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/service-controller.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/statefulset-controller.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/statefulset-controller.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/token-cleaner.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/token-cleaner.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/ttl-after-finished-controller.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/ttl-after-finished-controller.yaml",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/ttl-controller.txt",
">f+++++++++ objects/namespaced/kube-system/serviceaccounts/ttl-controller.yaml",
"cd+++++++++ objects/namespaced/kube-system/services/",
">f+++++++++ objects/namespaced/kube-system/services/kube-dns.txt",
">f+++++++++ objects/namespaced/kube-system/services/kube-dns.yaml",
"cd+++++++++ objects/namespaced/secretgen-controller/",
"cd+++++++++ objects/namespaced/secretgen-controller/configmaps/",
">f+++++++++ objects/namespaced/secretgen-controller/configmaps/kube-root-ca.crt.txt",
">f+++++++++ objects/namespaced/secretgen-controller/configmaps/kube-root-ca.crt.yaml",
"cd+++++++++ objects/namespaced/secretgen-controller/deployment/",
">f+++++++++ objects/namespaced/secretgen-controller/deployment/secretgen-controller.txt",
">f+++++++++ objects/namespaced/secretgen-controller/deployment/secretgen-controller.yaml",
"cd+++++++++ objects/namespaced/secretgen-controller/pods/",
">f+++++++++ objects/namespaced/secretgen-controller/pods/secretgen-controller-ffb97c6dc-q8brg.txt",
">f+++++++++ objects/namespaced/secretgen-controller/pods/secretgen-controller-ffb97c6dc-q8brg.yaml",
"cd+++++++++ objects/namespaced/secretgen-controller/serviceaccounts/",
">f+++++++++ objects/namespaced/secretgen-controller/serviceaccounts/default.txt",
">f+++++++++ objects/namespaced/secretgen-controller/serviceaccounts/default.yaml",
">f+++++++++ objects/namespaced/secretgen-controller/serviceaccounts/secretgen-controller-sa.txt",
">f+++++++++ objects/namespaced/secretgen-controller/serviceaccounts/secretgen-controller-sa.yaml"
]
}
},
"role": {
"id": "0242ac17-0010-dbf8-9562-000000000017",
"name": "describe-kubernetes-objects",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/describe-kubernetes-objects"
},
"task": {
"duration": {
"end": "2026-07-09T00:49:12.663473Z",
"start": "2026-07-09T00:49:12.072222Z"
},
"id": "0242ac17-0010-dbf8-9562-00000000001d",
"name": "Downloads logs to executor"
}
},
{
"hosts": {
"controller": {
"action": "file",
"changed": true,
"diff": {
"after": {
"path": "/tmp/logs/pod-logs",
"state": "directory"
},
"before": {
"path": "/tmp/logs/pod-logs",
"state": "absent"
}
},
"gid": 0,
"group": "root",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": null,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/tmp/logs/pod-logs",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0755",
"owner": "root",
"path": "/tmp/logs/pod-logs",
"size": 4096,
"state": "directory",
"uid": 0
}
},
"role": {
"id": "0242ac17-0010-dbf8-9562-00000000001f",
"name": "gather-pod-logs",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/gather-pod-logs"
},
"task": {
"duration": {
"end": "2026-07-09T00:49:12.910701Z",
"start": "2026-07-09T00:49:12.674215Z"
},
"id": "0242ac17-0010-dbf8-9562-000000000021",
"name": "creating directory for pod logs"
}
},
{
"hosts": {
"controller": {
"action": "file",
"changed": true,
"diff": {
"after": {
"path": "/tmp/logs/pod-logs/failed-pods",
"state": "directory"
},
"before": {
"path": "/tmp/logs/pod-logs/failed-pods",
"state": "absent"
}
},
"gid": 0,
"group": "root",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": null,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/tmp/logs/pod-logs/failed-pods",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0755",
"owner": "root",
"path": "/tmp/logs/pod-logs/failed-pods",
"size": 4096,
"state": "directory",
"uid": 0
}
},
"role": {
"id": "0242ac17-0010-dbf8-9562-00000000001f",
"name": "gather-pod-logs",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/gather-pod-logs"
},
"task": {
"duration": {
"end": "2026-07-09T00:49:13.176178Z",
"start": "2026-07-09T00:49:12.916294Z"
},
"id": "0242ac17-0010-dbf8-9562-000000000022",
"name": "creating directory for failed pod logs"
}
},
{
"hosts": {
"controller": {
"action": "shell",
"changed": true,
"cmd": "set -e\nfunction get_namespaces () {\n kubectl get namespaces -o name | awk -F '/' '{ print $NF }'\n}\nfunction get_pods () {\n NAMESPACE=$1\n kubectl get pods -n ${NAMESPACE} -o name | awk -F '/' '{ print $NF }' | xargs -I {} echo ${NAMESPACE} {}\n}\nexport -f get_pods\nfunction get_pod_logs () {\n NAMESPACE=${1% *}\n POD=${1#* }\n INIT_CONTAINERS=$(kubectl get pod $POD -n ${NAMESPACE} -o json | jq -r '.spec.initContainers[]?.name')\n CONTAINERS=$(kubectl get pod $POD -n ${NAMESPACE} -o json | jq -r '.spec.containers[].name')\n for CONTAINER in ${INIT_CONTAINERS} ${CONTAINERS}; do\n echo \"${NAMESPACE}/${POD}/${CONTAINER}\"\n mkdir -p \"/tmp/logs/pod-logs/${NAMESPACE}/${POD}\"\n mkdir -p \"/tmp/logs/pod-logs/failed-pods/${NAMESPACE}/${POD}\"\n kubectl logs ${POD} -n ${NAMESPACE} -c ${CONTAINER} > \"/tmp/logs/pod-logs/${NAMESPACE}/${POD}/${CONTAINER}.txt\"\n kubectl logs --previous ${POD} -n ${NAMESPACE} -c ${CONTAINER} > \"/tmp/logs/pod-logs/failed-pods/${NAMESPACE}/${POD}/${CONTAINER}.txt\"\n done\n}\nexport -f get_pod_logs\nget_namespaces | xargs -r -I {} bash -c 'get_pods \"$@\"' _ {} | xargs -r -I {} bash -c 'get_pod_logs \"$@\"' _ {}",
"delta": "0:00:06.645950",
"end": "2026-07-09 00:49:20.057150",
"failed": true,
"invocation": {
"module_args": {
"_raw_params": "set -e\nfunction get_namespaces () {\n kubectl get namespaces -o name | awk -F '/' '{ print $NF }'\n}\nfunction get_pods () {\n NAMESPACE=$1\n kubectl get pods -n ${NAMESPACE} -o name | awk -F '/' '{ print $NF }' | xargs -I {} echo ${NAMESPACE} {}\n}\nexport -f get_pods\nfunction get_pod_logs () {\n NAMESPACE=${1% *}\n POD=${1#* }\n INIT_CONTAINERS=$(kubectl get pod $POD -n ${NAMESPACE} -o json | jq -r '.spec.initContainers[]?.name')\n CONTAINERS=$(kubectl get pod $POD -n ${NAMESPACE} -o json | jq -r '.spec.containers[].name')\n for CONTAINER in ${INIT_CONTAINERS} ${CONTAINERS}; do\n echo \"${NAMESPACE}/${POD}/${CONTAINER}\"\n mkdir -p \"/tmp/logs/pod-logs/${NAMESPACE}/${POD}\"\n mkdir -p \"/tmp/logs/pod-logs/failed-pods/${NAMESPACE}/${POD}\"\n kubectl logs ${POD} -n ${NAMESPACE} -c ${CONTAINER} > \"/tmp/logs/pod-logs/${NAMESPACE}/${POD}/${CONTAINER}.txt\"\n kubectl logs --previous ${POD} -n ${NAMESPACE} -c ${CONTAINER} > \"/tmp/logs/pod-logs/failed-pods/${NAMESPACE}/${POD}/${CONTAINER}.txt\"\n done\n}\nexport -f get_pod_logs\nget_namespaces | xargs -r -I {} bash -c 'get_pods \"$@\"' _ {} | xargs -r -I {} bash -c 'get_pod_logs \"$@\"' _ {}",
"_uses_shell": true,
"argv": null,
"chdir": null,
"creates": null,
"executable": "/bin/bash",
"expand_argument_vars": true,
"removes": null,
"stdin": null,
"stdin_add_newline": true,
"strip_empty_ends": true,
"zuul_ansible_split_streams": false,
"zuul_log_id": "0242ac17-0010-dbf8-9562-000000000023-1-controller",
"zuul_no_log": false,
"zuul_output_max_bytes": 1073741824
}
},
"msg": "non-zero return code",
"rc": 123,
"start": "2026-07-09 00:49:13.411200",
"stderr": "",
"stderr_lines": [],
"stdout": "envoy-gateway-system/envoy-gateway-78446f96c9-qv2qv/envoy-gateway\nError from server (BadRequest): previous terminated container \"envoy-gateway\" in pod \"envoy-gateway-78446f96c9-qv2qv\" not found\nkube-system/cilium-operator-7fcd8d6ffd-z9l7s/cilium-operator\nError from server (BadRequest): previous terminated container \"cilium-operator\" in pod \"cilium-operator-7fcd8d6ffd-z9l7s\" not found\nkube-system/cilium-x7gd9/config\nError from server (BadRequest): previous terminated container \"config\" in pod \"cilium-x7gd9\" not found\nkube-system/cilium-x7gd9/mount-cgroup\nError from server (BadRequest): previous terminated container \"mount-cgroup\" in pod \"cilium-x7gd9\" not found\nkube-system/cilium-x7gd9/apply-sysctl-overwrites\nError from server (BadRequest): previous terminated container \"apply-sysctl-overwrites\" in pod \"cilium-x7gd9\" not found\nkube-system/cilium-x7gd9/mount-bpf-fs\nError from server (BadRequest): previous terminated container \"mount-bpf-fs\" in pod \"cilium-x7gd9\" not found\nkube-system/cilium-x7gd9/clean-cilium-state\nError from server (BadRequest): previous terminated container \"clean-cilium-state\" in pod \"cilium-x7gd9\" not found\nkube-system/cilium-x7gd9/install-cni-binaries\nError from server (BadRequest): previous terminated container \"install-cni-binaries\" in pod \"cilium-x7gd9\" not found\nkube-system/cilium-x7gd9/cilium-agent\nError from server (BadRequest): previous terminated container \"cilium-agent\" in pod \"cilium-x7gd9\" not found\nkube-system/coredns-5dd5756b68-ft99h/coredns\nError from server (BadRequest): previous terminated container \"coredns\" in pod \"coredns-5dd5756b68-ft99h\" not found\nkube-system/coredns-77cccfdc44-grz7v/coredns\nkube-system/coredns-77cccfdc44-s6lnp/coredns\nkube-system/etcd-controller/etcd\nError from server (BadRequest): previous terminated container \"etcd\" in pod \"etcd-controller\" not found\nkube-system/kube-apiserver-controller/kube-apiserver\nError from server (BadRequest): previous terminated container \"kube-apiserver\" in pod \"kube-apiserver-controller\" not found\nkube-system/kube-controller-manager-controller/kube-controller-manager\nError from server (BadRequest): previous terminated container \"kube-controller-manager\" in pod \"kube-controller-manager-controller\" not found\nkube-system/kube-proxy-nr529/kube-proxy\nError from server (BadRequest): previous terminated container \"kube-proxy\" in pod \"kube-proxy-nr529\" not found\nkube-system/kube-scheduler-controller/kube-scheduler\nError from server (BadRequest): previous terminated container \"kube-scheduler\" in pod \"kube-scheduler-controller\" not found\nkube-system/kube-vip-controller/kube-vip\nError from server (BadRequest): previous terminated container \"kube-vip\" in pod \"kube-vip-controller\" not found\nsecretgen-controller/secretgen-controller-ffb97c6dc-q8brg/secretgen-controller\nError from server (BadRequest): previous terminated container \"secretgen-controller\" in pod \"secretgen-controller-ffb97c6dc-q8brg\" not found",
"stdout_lines": [
"envoy-gateway-system/envoy-gateway-78446f96c9-qv2qv/envoy-gateway",
"Error from server (BadRequest): previous terminated container \"envoy-gateway\" in pod \"envoy-gateway-78446f96c9-qv2qv\" not found",
"kube-system/cilium-operator-7fcd8d6ffd-z9l7s/cilium-operator",
"Error from server (BadRequest): previous terminated container \"cilium-operator\" in pod \"cilium-operator-7fcd8d6ffd-z9l7s\" not found",
"kube-system/cilium-x7gd9/config",
"Error from server (BadRequest): previous terminated container \"config\" in pod \"cilium-x7gd9\" not found",
"kube-system/cilium-x7gd9/mount-cgroup",
"Error from server (BadRequest): previous terminated container \"mount-cgroup\" in pod \"cilium-x7gd9\" not found",
"kube-system/cilium-x7gd9/apply-sysctl-overwrites",
"Error from server (BadRequest): previous terminated container \"apply-sysctl-overwrites\" in pod \"cilium-x7gd9\" not found",
"kube-system/cilium-x7gd9/mount-bpf-fs",
"Error from server (BadRequest): previous terminated container \"mount-bpf-fs\" in pod \"cilium-x7gd9\" not found",
"kube-system/cilium-x7gd9/clean-cilium-state",
"Error from server (BadRequest): previous terminated container \"clean-cilium-state\" in pod \"cilium-x7gd9\" not found",
"kube-system/cilium-x7gd9/install-cni-binaries",
"Error from server (BadRequest): previous terminated container \"install-cni-binaries\" in pod \"cilium-x7gd9\" not found",
"kube-system/cilium-x7gd9/cilium-agent",
"Error from server (BadRequest): previous terminated container \"cilium-agent\" in pod \"cilium-x7gd9\" not found",
"kube-system/coredns-5dd5756b68-ft99h/coredns",
"Error from server (BadRequest): previous terminated container \"coredns\" in pod \"coredns-5dd5756b68-ft99h\" not found",
"kube-system/coredns-77cccfdc44-grz7v/coredns",
"kube-system/coredns-77cccfdc44-s6lnp/coredns",
"kube-system/etcd-controller/etcd",
"Error from server (BadRequest): previous terminated container \"etcd\" in pod \"etcd-controller\" not found",
"kube-system/kube-apiserver-controller/kube-apiserver",
"Error from server (BadRequest): previous terminated container \"kube-apiserver\" in pod \"kube-apiserver-controller\" not found",
"kube-system/kube-controller-manager-controller/kube-controller-manager",
"Error from server (BadRequest): previous terminated container \"kube-controller-manager\" in pod \"kube-controller-manager-controller\" not found",
"kube-system/kube-proxy-nr529/kube-proxy",
"Error from server (BadRequest): previous terminated container \"kube-proxy\" in pod \"kube-proxy-nr529\" not found",
"kube-system/kube-scheduler-controller/kube-scheduler",
"Error from server (BadRequest): previous terminated container \"kube-scheduler\" in pod \"kube-scheduler-controller\" not found",
"kube-system/kube-vip-controller/kube-vip",
"Error from server (BadRequest): previous terminated container \"kube-vip\" in pod \"kube-vip-controller\" not found",
"secretgen-controller/secretgen-controller-ffb97c6dc-q8brg/secretgen-controller",
"Error from server (BadRequest): previous terminated container \"secretgen-controller\" in pod \"secretgen-controller-ffb97c6dc-q8brg\" not found"
],
"zuul_log_id": "0242ac17-0010-dbf8-9562-000000000023-1-controller"
}
},
"role": {
"id": "0242ac17-0010-dbf8-9562-00000000001f",
"name": "gather-pod-logs",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/gather-pod-logs"
},
"task": {
"duration": {
"end": "2026-07-09T00:49:20.223722Z",
"start": "2026-07-09T00:49:13.201828Z"
},
"id": "0242ac17-0010-dbf8-9562-000000000023",
"name": "retrieve all kubernetes logs, current and previous (if they exist)"
}
},
{
"hosts": {
"controller": {
"action": "synchronize",
"changed": true,
"cmd": "/usr/bin/rsync --delay-updates -F --compress --archive --rsh='/usr/bin/ssh -S none -o Port=22 -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null' --rsync-path='sudo -u root rsync' --out-format='<>%i %n%L' zuul@199.204.45.89:/tmp/logs/pod-logs /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs/controller",
"invocation": {
"module_args": {
"_local_rsync_password": null,
"_local_rsync_path": "rsync",
"_ssh_args": null,
"_substitute_controller": false,
"archive": true,
"checksum": false,
"compress": true,
"copy_links": false,
"delay_updates": true,
"delete": false,
"dest": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs/controller",
"dest_port": 22,
"dirs": false,
"existing_only": false,
"group": null,
"link_dest": null,
"links": null,
"mode": "pull",
"owner": null,
"partial": false,
"perms": null,
"private_key": null,
"recursive": null,
"rsync_opts": [],
"rsync_path": "sudo -u root rsync",
"rsync_timeout": 0,
"set_remote_user": true,
"src": "zuul@199.204.45.89:/tmp/logs/pod-logs",
"ssh_connection_multiplexing": false,
"times": null,
"use_ssh_args": false,
"verify_host": false
}
},
"msg": "cd+++++++++ pod-logs/\ncd+++++++++ pod-logs/envoy-gateway-system/\ncd+++++++++ pod-logs/envoy-gateway-system/envoy-gateway-78446f96c9-qv2qv/\n>f+++++++++ pod-logs/envoy-gateway-system/envoy-gateway-78446f96c9-qv2qv/envoy-gateway.txt\ncd+++++++++ pod-logs/failed-pods/\ncd+++++++++ pod-logs/failed-pods/envoy-gateway-system/\ncd+++++++++ pod-logs/failed-pods/envoy-gateway-system/envoy-gateway-78446f96c9-qv2qv/\n>f+++++++++ pod-logs/failed-pods/envoy-gateway-system/envoy-gateway-78446f96c9-qv2qv/envoy-gateway.txt\ncd+++++++++ pod-logs/failed-pods/kube-system/\ncd+++++++++ pod-logs/failed-pods/kube-system/cilium-operator-7fcd8d6ffd-z9l7s/\n>f+++++++++ pod-logs/failed-pods/kube-system/cilium-operator-7fcd8d6ffd-z9l7s/cilium-operator.txt\ncd+++++++++ pod-logs/failed-pods/kube-system/cilium-x7gd9/\n>f+++++++++ pod-logs/failed-pods/kube-system/cilium-x7gd9/apply-sysctl-overwrites.txt\n>f+++++++++ pod-logs/failed-pods/kube-system/cilium-x7gd9/cilium-agent.txt\n>f+++++++++ pod-logs/failed-pods/kube-system/cilium-x7gd9/clean-cilium-state.txt\n>f+++++++++ pod-logs/failed-pods/kube-system/cilium-x7gd9/config.txt\n>f+++++++++ pod-logs/failed-pods/kube-system/cilium-x7gd9/install-cni-binaries.txt\n>f+++++++++ pod-logs/failed-pods/kube-system/cilium-x7gd9/mount-bpf-fs.txt\n>f+++++++++ pod-logs/failed-pods/kube-system/cilium-x7gd9/mount-cgroup.txt\ncd+++++++++ pod-logs/failed-pods/kube-system/coredns-5dd5756b68-ft99h/\n>f+++++++++ pod-logs/failed-pods/kube-system/coredns-5dd5756b68-ft99h/coredns.txt\ncd+++++++++ pod-logs/failed-pods/kube-system/coredns-77cccfdc44-grz7v/\n>f+++++++++ pod-logs/failed-pods/kube-system/coredns-77cccfdc44-grz7v/coredns.txt\ncd+++++++++ pod-logs/failed-pods/kube-system/coredns-77cccfdc44-s6lnp/\n>f+++++++++ pod-logs/failed-pods/kube-system/coredns-77cccfdc44-s6lnp/coredns.txt\ncd+++++++++ pod-logs/failed-pods/kube-system/etcd-controller/\n>f+++++++++ pod-logs/failed-pods/kube-system/etcd-controller/etcd.txt\ncd+++++++++ pod-logs/failed-pods/kube-system/kube-apiserver-controller/\n>f+++++++++ pod-logs/failed-pods/kube-system/kube-apiserver-controller/kube-apiserver.txt\ncd+++++++++ pod-logs/failed-pods/kube-system/kube-controller-manager-controller/\n>f+++++++++ pod-logs/failed-pods/kube-system/kube-controller-manager-controller/kube-controller-manager.txt\ncd+++++++++ pod-logs/failed-pods/kube-system/kube-proxy-nr529/\n>f+++++++++ pod-logs/failed-pods/kube-system/kube-proxy-nr529/kube-proxy.txt\ncd+++++++++ pod-logs/failed-pods/kube-system/kube-scheduler-controller/\n>f+++++++++ pod-logs/failed-pods/kube-system/kube-scheduler-controller/kube-scheduler.txt\ncd+++++++++ pod-logs/failed-pods/kube-system/kube-vip-controller/\n>f+++++++++ pod-logs/failed-pods/kube-system/kube-vip-controller/kube-vip.txt\ncd+++++++++ pod-logs/failed-pods/secretgen-controller/\ncd+++++++++ pod-logs/failed-pods/secretgen-controller/secretgen-controller-ffb97c6dc-q8brg/\n>f+++++++++ pod-logs/failed-pods/secretgen-controller/secretgen-controller-ffb97c6dc-q8brg/secretgen-controller.txt\ncd+++++++++ pod-logs/kube-system/\ncd+++++++++ pod-logs/kube-system/cilium-operator-7fcd8d6ffd-z9l7s/\n>f+++++++++ pod-logs/kube-system/cilium-operator-7fcd8d6ffd-z9l7s/cilium-operator.txt\ncd+++++++++ pod-logs/kube-system/cilium-x7gd9/\n>f+++++++++ pod-logs/kube-system/cilium-x7gd9/apply-sysctl-overwrites.txt\n>f+++++++++ pod-logs/kube-system/cilium-x7gd9/cilium-agent.txt\n>f+++++++++ pod-logs/kube-system/cilium-x7gd9/clean-cilium-state.txt\n>f+++++++++ pod-logs/kube-system/cilium-x7gd9/config.txt\n>f+++++++++ pod-logs/kube-system/cilium-x7gd9/install-cni-binaries.txt\n>f+++++++++ pod-logs/kube-system/cilium-x7gd9/mount-bpf-fs.txt\n>f+++++++++ pod-logs/kube-system/cilium-x7gd9/mount-cgroup.txt\ncd+++++++++ pod-logs/kube-system/coredns-5dd5756b68-ft99h/\n>f+++++++++ pod-logs/kube-system/coredns-5dd5756b68-ft99h/coredns.txt\ncd+++++++++ pod-logs/kube-system/coredns-77cccfdc44-grz7v/\n>f+++++++++ pod-logs/kube-system/coredns-77cccfdc44-grz7v/coredns.txt\ncd+++++++++ pod-logs/kube-system/coredns-77cccfdc44-s6lnp/\n>f+++++++++ pod-logs/kube-system/coredns-77cccfdc44-s6lnp/coredns.txt\ncd+++++++++ pod-logs/kube-system/etcd-controller/\n>f+++++++++ pod-logs/kube-system/etcd-controller/etcd.txt\ncd+++++++++ pod-logs/kube-system/kube-apiserver-controller/\n>f+++++++++ pod-logs/kube-system/kube-apiserver-controller/kube-apiserver.txt\ncd+++++++++ pod-logs/kube-system/kube-controller-manager-controller/\n>f+++++++++ pod-logs/kube-system/kube-controller-manager-controller/kube-controller-manager.txt\ncd+++++++++ pod-logs/kube-system/kube-proxy-nr529/\n>f+++++++++ pod-logs/kube-system/kube-proxy-nr529/kube-proxy.txt\ncd+++++++++ pod-logs/kube-system/kube-scheduler-controller/\n>f+++++++++ pod-logs/kube-system/kube-scheduler-controller/kube-scheduler.txt\ncd+++++++++ pod-logs/kube-system/kube-vip-controller/\n>f+++++++++ pod-logs/kube-system/kube-vip-controller/kube-vip.txt\ncd+++++++++ pod-logs/secretgen-controller/\ncd+++++++++ pod-logs/secretgen-controller/secretgen-controller-ffb97c6dc-q8brg/\n>f+++++++++ pod-logs/secretgen-controller/secretgen-controller-ffb97c6dc-q8brg/secretgen-controller.txt\n",
"rc": 0,
"stdout_lines": [
"cd+++++++++ pod-logs/",
"cd+++++++++ pod-logs/envoy-gateway-system/",
"cd+++++++++ pod-logs/envoy-gateway-system/envoy-gateway-78446f96c9-qv2qv/",
">f+++++++++ pod-logs/envoy-gateway-system/envoy-gateway-78446f96c9-qv2qv/envoy-gateway.txt",
"cd+++++++++ pod-logs/failed-pods/",
"cd+++++++++ pod-logs/failed-pods/envoy-gateway-system/",
"cd+++++++++ pod-logs/failed-pods/envoy-gateway-system/envoy-gateway-78446f96c9-qv2qv/",
">f+++++++++ pod-logs/failed-pods/envoy-gateway-system/envoy-gateway-78446f96c9-qv2qv/envoy-gateway.txt",
"cd+++++++++ pod-logs/failed-pods/kube-system/",
"cd+++++++++ pod-logs/failed-pods/kube-system/cilium-operator-7fcd8d6ffd-z9l7s/",
">f+++++++++ pod-logs/failed-pods/kube-system/cilium-operator-7fcd8d6ffd-z9l7s/cilium-operator.txt",
"cd+++++++++ pod-logs/failed-pods/kube-system/cilium-x7gd9/",
">f+++++++++ pod-logs/failed-pods/kube-system/cilium-x7gd9/apply-sysctl-overwrites.txt",
">f+++++++++ pod-logs/failed-pods/kube-system/cilium-x7gd9/cilium-agent.txt",
">f+++++++++ pod-logs/failed-pods/kube-system/cilium-x7gd9/clean-cilium-state.txt",
">f+++++++++ pod-logs/failed-pods/kube-system/cilium-x7gd9/config.txt",
">f+++++++++ pod-logs/failed-pods/kube-system/cilium-x7gd9/install-cni-binaries.txt",
">f+++++++++ pod-logs/failed-pods/kube-system/cilium-x7gd9/mount-bpf-fs.txt",
">f+++++++++ pod-logs/failed-pods/kube-system/cilium-x7gd9/mount-cgroup.txt",
"cd+++++++++ pod-logs/failed-pods/kube-system/coredns-5dd5756b68-ft99h/",
">f+++++++++ pod-logs/failed-pods/kube-system/coredns-5dd5756b68-ft99h/coredns.txt",
"cd+++++++++ pod-logs/failed-pods/kube-system/coredns-77cccfdc44-grz7v/",
">f+++++++++ pod-logs/failed-pods/kube-system/coredns-77cccfdc44-grz7v/coredns.txt",
"cd+++++++++ pod-logs/failed-pods/kube-system/coredns-77cccfdc44-s6lnp/",
">f+++++++++ pod-logs/failed-pods/kube-system/coredns-77cccfdc44-s6lnp/coredns.txt",
"cd+++++++++ pod-logs/failed-pods/kube-system/etcd-controller/",
">f+++++++++ pod-logs/failed-pods/kube-system/etcd-controller/etcd.txt",
"cd+++++++++ pod-logs/failed-pods/kube-system/kube-apiserver-controller/",
">f+++++++++ pod-logs/failed-pods/kube-system/kube-apiserver-controller/kube-apiserver.txt",
"cd+++++++++ pod-logs/failed-pods/kube-system/kube-controller-manager-controller/",
">f+++++++++ pod-logs/failed-pods/kube-system/kube-controller-manager-controller/kube-controller-manager.txt",
"cd+++++++++ pod-logs/failed-pods/kube-system/kube-proxy-nr529/",
">f+++++++++ pod-logs/failed-pods/kube-system/kube-proxy-nr529/kube-proxy.txt",
"cd+++++++++ pod-logs/failed-pods/kube-system/kube-scheduler-controller/",
">f+++++++++ pod-logs/failed-pods/kube-system/kube-scheduler-controller/kube-scheduler.txt",
"cd+++++++++ pod-logs/failed-pods/kube-system/kube-vip-controller/",
">f+++++++++ pod-logs/failed-pods/kube-system/kube-vip-controller/kube-vip.txt",
"cd+++++++++ pod-logs/failed-pods/secretgen-controller/",
"cd+++++++++ pod-logs/failed-pods/secretgen-controller/secretgen-controller-ffb97c6dc-q8brg/",
">f+++++++++ pod-logs/failed-pods/secretgen-controller/secretgen-controller-ffb97c6dc-q8brg/secretgen-controller.txt",
"cd+++++++++ pod-logs/kube-system/",
"cd+++++++++ pod-logs/kube-system/cilium-operator-7fcd8d6ffd-z9l7s/",
">f+++++++++ pod-logs/kube-system/cilium-operator-7fcd8d6ffd-z9l7s/cilium-operator.txt",
"cd+++++++++ pod-logs/kube-system/cilium-x7gd9/",
">f+++++++++ pod-logs/kube-system/cilium-x7gd9/apply-sysctl-overwrites.txt",
">f+++++++++ pod-logs/kube-system/cilium-x7gd9/cilium-agent.txt",
">f+++++++++ pod-logs/kube-system/cilium-x7gd9/clean-cilium-state.txt",
">f+++++++++ pod-logs/kube-system/cilium-x7gd9/config.txt",
">f+++++++++ pod-logs/kube-system/cilium-x7gd9/install-cni-binaries.txt",
">f+++++++++ pod-logs/kube-system/cilium-x7gd9/mount-bpf-fs.txt",
">f+++++++++ pod-logs/kube-system/cilium-x7gd9/mount-cgroup.txt",
"cd+++++++++ pod-logs/kube-system/coredns-5dd5756b68-ft99h/",
">f+++++++++ pod-logs/kube-system/coredns-5dd5756b68-ft99h/coredns.txt",
"cd+++++++++ pod-logs/kube-system/coredns-77cccfdc44-grz7v/",
">f+++++++++ pod-logs/kube-system/coredns-77cccfdc44-grz7v/coredns.txt",
"cd+++++++++ pod-logs/kube-system/coredns-77cccfdc44-s6lnp/",
">f+++++++++ pod-logs/kube-system/coredns-77cccfdc44-s6lnp/coredns.txt",
"cd+++++++++ pod-logs/kube-system/etcd-controller/",
">f+++++++++ pod-logs/kube-system/etcd-controller/etcd.txt",
"cd+++++++++ pod-logs/kube-system/kube-apiserver-controller/",
">f+++++++++ pod-logs/kube-system/kube-apiserver-controller/kube-apiserver.txt",
"cd+++++++++ pod-logs/kube-system/kube-controller-manager-controller/",
">f+++++++++ pod-logs/kube-system/kube-controller-manager-controller/kube-controller-manager.txt",
"cd+++++++++ pod-logs/kube-system/kube-proxy-nr529/",
">f+++++++++ pod-logs/kube-system/kube-proxy-nr529/kube-proxy.txt",
"cd+++++++++ pod-logs/kube-system/kube-scheduler-controller/",
">f+++++++++ pod-logs/kube-system/kube-scheduler-controller/kube-scheduler.txt",
"cd+++++++++ pod-logs/kube-system/kube-vip-controller/",
">f+++++++++ pod-logs/kube-system/kube-vip-controller/kube-vip.txt",
"cd+++++++++ pod-logs/secretgen-controller/",
"cd+++++++++ pod-logs/secretgen-controller/secretgen-controller-ffb97c6dc-q8brg/",
">f+++++++++ pod-logs/secretgen-controller/secretgen-controller-ffb97c6dc-q8brg/secretgen-controller.txt"
]
}
},
"role": {
"id": "0242ac17-0010-dbf8-9562-00000000001f",
"name": "gather-pod-logs",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/gather-pod-logs"
},
"task": {
"duration": {
"end": "2026-07-09T00:49:20.752858Z",
"start": "2026-07-09T00:49:20.229662Z"
},
"id": "0242ac17-0010-dbf8-9562-000000000024",
"name": "Downloads pod logs to executor"
}
},
{
"hosts": {
"controller": {
"action": "file",
"changed": true,
"diff": {
"after": {
"path": "/tmp/logs/prometheus",
"state": "directory"
},
"before": {
"path": "/tmp/logs/prometheus",
"state": "absent"
}
},
"gid": 0,
"group": "root",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": null,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/tmp/logs/prometheus",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0755",
"owner": "root",
"path": "/tmp/logs/prometheus",
"size": 4096,
"state": "directory",
"uid": 0
}
},
"role": {
"id": "0242ac17-0010-dbf8-9562-000000000026",
"name": "gather-prom-metrics",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/gather-prom-metrics"
},
"task": {
"duration": {
"end": "2026-07-09T00:49:21.011680Z",
"start": "2026-07-09T00:49:20.764347Z"
},
"id": "0242ac17-0010-dbf8-9562-000000000028",
"name": "creating directory for helm release descriptions"
}
},
{
"hosts": {
"controller": {
"action": "shell",
"changed": true,
"cmd": "set -e\nNAMESPACES=$(kubectl get namespaces -o json | jq -r '.items[].metadata.name')\nfor NS in $NAMESPACES; do\n SERVICES=$(kubectl get svc -n $NS -o json | jq -r '.items[] | select(.spec.ports[].name==\"metrics\") | .metadata.name')\n for SVC in $SERVICES; do\n PORT=$(kubectl get svc $SVC -n $NS -o json | jq -r '.spec.ports[] | select(.name==\"metrics\") | .port')\n echo \"Scraping $SVC.$NS:$PORT/metrics:\"\n curl \"$SVC.$NS:$PORT/metrics\" >> \"/tmp/logs\"/prometheus/$NS-$SVC.txt || true\n done\ndone",
"delta": "0:00:00.860393",
"end": "2026-07-09 00:49:22.122881",
"invocation": {
"module_args": {
"_raw_params": "set -e\nNAMESPACES=$(kubectl get namespaces -o json | jq -r '.items[].metadata.name')\nfor NS in $NAMESPACES; do\n SERVICES=$(kubectl get svc -n $NS -o json | jq -r '.items[] | select(.spec.ports[].name==\"metrics\") | .metadata.name')\n for SVC in $SERVICES; do\n PORT=$(kubectl get svc $SVC -n $NS -o json | jq -r '.spec.ports[] | select(.name==\"metrics\") | .port')\n echo \"Scraping $SVC.$NS:$PORT/metrics:\"\n curl \"$SVC.$NS:$PORT/metrics\" >> \"/tmp/logs\"/prometheus/$NS-$SVC.txt || true\n done\ndone",
"_uses_shell": true,
"argv": null,
"chdir": null,
"creates": null,
"executable": "/bin/bash",
"expand_argument_vars": true,
"removes": null,
"stdin": null,
"stdin_add_newline": true,
"strip_empty_ends": true,
"zuul_ansible_split_streams": false,
"zuul_log_id": "0242ac17-0010-dbf8-9562-000000000029-1-controller",
"zuul_no_log": false,
"zuul_output_max_bytes": 1073741824
}
},
"msg": "",
"rc": 0,
"start": "2026-07-09 00:49:21.262488",
"stderr": "",
"stderr_lines": [],
"stdout": "Scraping envoy-gateway.envoy-gateway-system:19001/metrics:\n % Total % Received % Xferd Average Speed Time Time Time Current\n Dload Upload Total Spent Left Speed\n\r 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0curl: (6) Could not resolve host: envoy-gateway.envoy-gateway-system\nScraping kube-dns.kube-system:9153/metrics:\n % Total % Received % Xferd Average Speed Time Time Time Current\n Dload Upload Total Spent Left Speed\n\r 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0curl: (6) Could not resolve host: kube-dns.kube-system",
"stdout_lines": [
"Scraping envoy-gateway.envoy-gateway-system:19001/metrics:",
" % Total % Received % Xferd Average Speed Time Time Time Current",
" Dload Upload Total Spent Left Speed",
"",
" 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0curl: (6) Could not resolve host: envoy-gateway.envoy-gateway-system",
"Scraping kube-dns.kube-system:9153/metrics:",
" % Total % Received % Xferd Average Speed Time Time Time Current",
" Dload Upload Total Spent Left Speed",
"",
" 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0curl: (6) Could not resolve host: kube-dns.kube-system"
],
"zuul_log_id": "0242ac17-0010-dbf8-9562-000000000029-1-controller"
}
},
"role": {
"id": "0242ac17-0010-dbf8-9562-000000000026",
"name": "gather-prom-metrics",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/gather-prom-metrics"
},
"task": {
"duration": {
"end": "2026-07-09T00:49:22.560492Z",
"start": "2026-07-09T00:49:21.039688Z"
},
"id": "0242ac17-0010-dbf8-9562-000000000029",
"name": "Get metrics from exporter services in all namespaces"
}
},
{
"hosts": {
"controller": {
"action": "shell",
"changed": true,
"cmd": "set -e\nmgr_endpoints=$(kubectl get endpoints -n ceph -l component=manager -o json | jq -r '.items[].subsets[].addresses[].ip')\necho \"ceph-mgr endpoints: $mgr_endpoints\"\nfor endpoint in $mgr_endpoints; do\n echo \"checking ceph-mgr at $endpoint\"\n metrics_curl=\"curl $endpoint:9283/metrics\"\n op=$(eval \"$metrics_curl\")\n if [[ -n $op ]]; then\n curl $endpoint:9283/metrics >> \"/tmp/logs\"/prometheus/ceph-ceph-mgr.txt\n break\n else\n echo \"$endpoint is a standby ceph-mgr. Trying next endpoint\"\n fi\ndone",
"delta": "0:00:00.088667",
"end": "2026-07-09 00:49:22.893468",
"invocation": {
"module_args": {
"_raw_params": "set -e\nmgr_endpoints=$(kubectl get endpoints -n ceph -l component=manager -o json | jq -r '.items[].subsets[].addresses[].ip')\necho \"ceph-mgr endpoints: $mgr_endpoints\"\nfor endpoint in $mgr_endpoints; do\n echo \"checking ceph-mgr at $endpoint\"\n metrics_curl=\"curl $endpoint:9283/metrics\"\n op=$(eval \"$metrics_curl\")\n if [[ -n $op ]]; then\n curl $endpoint:9283/metrics >> \"/tmp/logs\"/prometheus/ceph-ceph-mgr.txt\n break\n else\n echo \"$endpoint is a standby ceph-mgr. Trying next endpoint\"\n fi\ndone",
"_uses_shell": true,
"argv": null,
"chdir": null,
"creates": null,
"executable": "/bin/bash",
"expand_argument_vars": true,
"removes": null,
"stdin": null,
"stdin_add_newline": true,
"strip_empty_ends": true,
"zuul_ansible_split_streams": false,
"zuul_log_id": "0242ac17-0010-dbf8-9562-00000000002a-1-controller",
"zuul_no_log": false,
"zuul_output_max_bytes": 1073741824
}
},
"msg": "",
"rc": 0,
"start": "2026-07-09 00:49:22.804801",
"stderr": "",
"stderr_lines": [],
"stdout": "ceph-mgr endpoints: ",
"stdout_lines": [
"ceph-mgr endpoints: "
],
"zuul_log_id": "0242ac17-0010-dbf8-9562-00000000002a-1-controller"
}
},
"role": {
"id": "0242ac17-0010-dbf8-9562-000000000026",
"name": "gather-prom-metrics",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/gather-prom-metrics"
},
"task": {
"duration": {
"end": "2026-07-09T00:49:23.109672Z",
"start": "2026-07-09T00:49:22.590636Z"
},
"id": "0242ac17-0010-dbf8-9562-00000000002a",
"name": "Get ceph metrics from ceph-mgr"
}
},
{
"hosts": {
"controller": {
"action": "shell",
"changed": true,
"cmd": "set -e\nNAMESPACE=\"osh-infra\"\nAPP_LABEL=\"fluentd\"\nPODS=$(kubectl get pods -n $NAMESPACE -l application=$APP_LABEL -o json | jq -r '.items[].metadata.name')\nfor POD in $PODS; do\n IP=$(kubectl get pod -n $NAMESPACE $POD -o json | jq -r '.status.podIP')\n PORT=$(kubectl get pod -n $NAMESPACE $POD -o json | jq -r '.spec.containers[0].ports[] | select(.name==\"metrics\") | .containerPort')\n echo \"Scraping $POD at $IP:$PORT/metrics\"\n curl \"$IP:$PORT/metrics\" >> \"/tmp/logs\"/prometheus/$POD.txt || true\ndone",
"delta": "0:00:00.094142",
"end": "2026-07-09 00:49:23.451408",
"invocation": {
"module_args": {
"_raw_params": "set -e\nNAMESPACE=\"osh-infra\"\nAPP_LABEL=\"fluentd\"\nPODS=$(kubectl get pods -n $NAMESPACE -l application=$APP_LABEL -o json | jq -r '.items[].metadata.name')\nfor POD in $PODS; do\n IP=$(kubectl get pod -n $NAMESPACE $POD -o json | jq -r '.status.podIP')\n PORT=$(kubectl get pod -n $NAMESPACE $POD -o json | jq -r '.spec.containers[0].ports[] | select(.name==\"metrics\") | .containerPort')\n echo \"Scraping $POD at $IP:$PORT/metrics\"\n curl \"$IP:$PORT/metrics\" >> \"/tmp/logs\"/prometheus/$POD.txt || true\ndone",
"_uses_shell": true,
"argv": null,
"chdir": null,
"creates": null,
"executable": "/bin/bash",
"expand_argument_vars": true,
"removes": null,
"stdin": null,
"stdin_add_newline": true,
"strip_empty_ends": true,
"zuul_ansible_split_streams": false,
"zuul_log_id": "0242ac17-0010-dbf8-9562-00000000002b-1-controller",
"zuul_no_log": false,
"zuul_output_max_bytes": 1073741824
}
},
"msg": "",
"rc": 0,
"start": "2026-07-09 00:49:23.357266",
"stderr": "",
"stderr_lines": [],
"stdout": "",
"stdout_lines": [],
"zuul_log_id": "0242ac17-0010-dbf8-9562-00000000002b-1-controller"
}
},
"role": {
"id": "0242ac17-0010-dbf8-9562-000000000026",
"name": "gather-prom-metrics",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/gather-prom-metrics"
},
"task": {
"duration": {
"end": "2026-07-09T00:49:23.654641Z",
"start": "2026-07-09T00:49:23.138732Z"
},
"id": "0242ac17-0010-dbf8-9562-00000000002b",
"name": "Get metrics from fluentd pods"
}
},
{
"hosts": {
"controller": {
"action": "synchronize",
"changed": true,
"cmd": "/usr/bin/rsync --delay-updates -F --compress --archive --rsh='/usr/bin/ssh -S none -o Port=22 -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null' --rsync-path='sudo -u root rsync' --out-format='<>%i %n%L' zuul@199.204.45.89:/tmp/logs/prometheus /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs/controller",
"invocation": {
"module_args": {
"_local_rsync_password": null,
"_local_rsync_path": "rsync",
"_ssh_args": null,
"_substitute_controller": false,
"archive": true,
"checksum": false,
"compress": true,
"copy_links": false,
"delay_updates": true,
"delete": false,
"dest": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs/controller",
"dest_port": 22,
"dirs": false,
"existing_only": false,
"group": null,
"link_dest": null,
"links": null,
"mode": "pull",
"owner": null,
"partial": false,
"perms": null,
"private_key": null,
"recursive": null,
"rsync_opts": [],
"rsync_path": "sudo -u root rsync",
"rsync_timeout": 0,
"set_remote_user": true,
"src": "zuul@199.204.45.89:/tmp/logs/prometheus",
"ssh_connection_multiplexing": false,
"times": null,
"use_ssh_args": false,
"verify_host": false
}
},
"msg": "cd+++++++++ prometheus/\n>f+++++++++ prometheus/envoy-gateway-system-envoy-gateway.txt\n>f+++++++++ prometheus/kube-system-kube-dns.txt\n",
"rc": 0,
"stdout_lines": [
"cd+++++++++ prometheus/",
">f+++++++++ prometheus/envoy-gateway-system-envoy-gateway.txt",
">f+++++++++ prometheus/kube-system-kube-dns.txt"
]
}
},
"role": {
"id": "0242ac17-0010-dbf8-9562-000000000026",
"name": "gather-prom-metrics",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/gather-prom-metrics"
},
"task": {
"duration": {
"end": "2026-07-09T00:49:24.234600Z",
"start": "2026-07-09T00:49:23.662500Z"
},
"id": "0242ac17-0010-dbf8-9562-00000000002c",
"name": "Downloads logs to executor"
}
},
{
"hosts": {
"controller": {
"action": "file",
"changed": true,
"diff": {
"after": {
"path": "/tmp/logs/selenium",
"state": "directory"
},
"before": {
"path": "/tmp/logs/selenium",
"state": "absent"
}
},
"gid": 0,
"group": "root",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": null,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/tmp/logs/selenium",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0755",
"owner": "root",
"path": "/tmp/logs/selenium",
"size": 4096,
"state": "directory",
"uid": 0
}
},
"role": {
"id": "0242ac17-0010-dbf8-9562-00000000002e",
"name": "gather-selenium-data",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/gather-selenium-data"
},
"task": {
"duration": {
"end": "2026-07-09T00:49:24.521881Z",
"start": "2026-07-09T00:49:24.243778Z"
},
"id": "0242ac17-0010-dbf8-9562-000000000030",
"name": "creating directory for helm release descriptions"
}
},
{
"hosts": {
"controller": {
"action": "shell",
"changed": true,
"cmd": "set -x\ncp /tmp/artifacts/* /tmp/logs/selenium/.",
"delta": "0:00:00.012561",
"end": "2026-07-09 00:49:24.783968",
"failed": true,
"invocation": {
"module_args": {
"_raw_params": "set -x\ncp /tmp/artifacts/* /tmp/logs/selenium/.",
"_uses_shell": true,
"argv": null,
"chdir": null,
"creates": null,
"executable": "/bin/bash",
"expand_argument_vars": true,
"removes": null,
"stdin": null,
"stdin_add_newline": true,
"strip_empty_ends": true,
"zuul_ansible_split_streams": false,
"zuul_log_id": "0242ac17-0010-dbf8-9562-000000000031-1-controller",
"zuul_no_log": false,
"zuul_output_max_bytes": 1073741824
}
},
"msg": "non-zero return code",
"rc": 1,
"start": "2026-07-09 00:49:24.771407",
"stderr": "",
"stderr_lines": [],
"stdout": "+ cp '/tmp/artifacts/*' /tmp/logs/selenium/.\ncp: cannot stat '/tmp/artifacts/*': No such file or directory",
"stdout_lines": [
"+ cp '/tmp/artifacts/*' /tmp/logs/selenium/.",
"cp: cannot stat '/tmp/artifacts/*': No such file or directory"
],
"zuul_log_id": "0242ac17-0010-dbf8-9562-000000000031-1-controller"
}
},
"role": {
"id": "0242ac17-0010-dbf8-9562-00000000002e",
"name": "gather-selenium-data",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/gather-selenium-data"
},
"task": {
"duration": {
"end": "2026-07-09T00:49:25.069569Z",
"start": "2026-07-09T00:49:24.548772Z"
},
"id": "0242ac17-0010-dbf8-9562-000000000031",
"name": "Get selenium data"
}
},
{
"hosts": {
"controller": {
"action": "synchronize",
"changed": true,
"cmd": "/usr/bin/rsync --delay-updates -F --compress --archive --rsh='/usr/bin/ssh -S none -o Port=22 -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null' --rsync-path='sudo -u root rsync' --out-format='<>%i %n%L' zuul@199.204.45.89:/tmp/logs/selenium /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs/controller",
"invocation": {
"module_args": {
"_local_rsync_password": null,
"_local_rsync_path": "rsync",
"_ssh_args": null,
"_substitute_controller": false,
"archive": true,
"checksum": false,
"compress": true,
"copy_links": false,
"delay_updates": true,
"delete": false,
"dest": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs/controller",
"dest_port": 22,
"dirs": false,
"existing_only": false,
"group": null,
"link_dest": null,
"links": null,
"mode": "pull",
"owner": null,
"partial": false,
"perms": null,
"private_key": null,
"recursive": null,
"rsync_opts": [],
"rsync_path": "sudo -u root rsync",
"rsync_timeout": 0,
"set_remote_user": true,
"src": "zuul@199.204.45.89:/tmp/logs/selenium",
"ssh_connection_multiplexing": false,
"times": null,
"use_ssh_args": false,
"verify_host": false
}
},
"msg": "cd+++++++++ selenium/\n",
"rc": 0,
"stdout_lines": [
"cd+++++++++ selenium/"
]
}
},
"role": {
"id": "0242ac17-0010-dbf8-9562-00000000002e",
"name": "gather-selenium-data",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/gather-selenium-data"
},
"task": {
"duration": {
"end": "2026-07-09T00:49:25.569339Z",
"start": "2026-07-09T00:49:25.074793Z"
},
"id": "0242ac17-0010-dbf8-9562-000000000032",
"name": "Downloads logs to executor"
}
}
]
}
],
"stats": {
"controller": {
"changed": 23,
"failures": 0,
"ignored": 2,
"ok": 23,
"rescued": 0,
"skipped": 0,
"unreachable": 0
}
},
"trusted": false
},
{
"branch": "main",
"index": "1",
"phase": "post",
"playbook": "github.com/vexxhost/zuul-config/playbooks/base/post.yaml",
"plays": [
{
"play": {
"duration": {
"end": "2026-07-09T00:49:29.519607Z",
"start": "2026-07-09T00:49:26.299534Z"
},
"id": "0242ac17-0010-a348-5988-000000000002",
"name": "all"
},
"tasks": [
{
"hosts": {
"controller": {
"action": "set_fact",
"changed": false,
"false_condition": "groups['all'] | length > 1",
"skip_reason": "Conditional result was False",
"skipped": true
}
},
"role": {
"id": "0242ac17-0010-a348-5988-000000000006",
"name": "fetch-output",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/fetch-output"
},
"task": {
"duration": {
"end": "2026-07-09T00:49:26.356117Z",
"start": "2026-07-09T00:49:26.310925Z"
},
"id": "0242ac17-0010-a348-5988-000000000008",
"name": "Set log path for multiple nodes"
}
},
{
"hosts": {
"controller": {
"action": "set_fact",
"ansible_facts": {
"log_path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs"
},
"changed": false
}
},
"role": {
"id": "0242ac17-0010-a348-5988-000000000006",
"name": "fetch-output",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/fetch-output"
},
"task": {
"duration": {
"end": "2026-07-09T00:49:26.412569Z",
"start": "2026-07-09T00:49:26.366274Z"
},
"id": "0242ac17-0010-a348-5988-000000000009",
"name": "Set log path for single node"
}
},
{
"hosts": {
"controller": {
"action": "file",
"changed": true,
"msg": "All items completed",
"results": [
{
"ansible_loop_var": "zj_output_dir",
"changed": false,
"diff": {
"after": {
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs"
},
"before": {
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs"
}
},
"failed": false,
"gid": 0,
"group": "root",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": 493,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0755",
"owner": "root",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs",
"size": 4096,
"state": "directory",
"uid": 0,
"zj_output_dir": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs"
},
{
"ansible_loop_var": "zj_output_dir",
"changed": true,
"diff": {
"after": {
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/artifacts",
"state": "directory"
},
"before": {
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/artifacts",
"state": "absent"
}
},
"failed": false,
"gid": 0,
"group": "root",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": 493,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/artifacts",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0755",
"owner": "root",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/artifacts",
"size": 4096,
"state": "directory",
"uid": 0,
"zj_output_dir": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/artifacts"
},
{
"ansible_loop_var": "zj_output_dir",
"changed": true,
"diff": {
"after": {
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/docs",
"state": "directory"
},
"before": {
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/docs",
"state": "absent"
}
},
"failed": false,
"gid": 0,
"group": "root",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": 493,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/docs",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0755",
"owner": "root",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/docs",
"size": 4096,
"state": "directory",
"uid": 0,
"zj_output_dir": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/docs"
}
]
}
},
"role": {
"id": "0242ac17-0010-a348-5988-000000000006",
"name": "fetch-output",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/fetch-output"
},
"task": {
"duration": {
"end": "2026-07-09T00:49:27.238235Z",
"start": "2026-07-09T00:49:26.421613Z"
},
"id": "0242ac17-0010-a348-5988-00000000000a",
"name": "Ensure local output dirs"
}
},
{
"hosts": {
"controller": {
"action": "synchronize",
"changed": true,
"msg": "All items completed",
"results": [
{
"ansible_loop_var": "zj_output",
"changed": true,
"cmd": "/usr/bin/rsync --delay-updates -F --compress --archive --no-owner --no-group --rsh='/usr/bin/ssh -S none -o Port=22' --out-format='<>%i %n%L' zuul@199.204.45.89:/home/zuul/zuul-output/logs/ /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs/",
"failed": false,
"invocation": {
"module_args": {
"_local_rsync_password": null,
"_local_rsync_path": "rsync",
"_ssh_args": null,
"_substitute_controller": false,
"archive": true,
"checksum": false,
"compress": true,
"copy_links": false,
"delay_updates": true,
"delete": false,
"dest": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs/",
"dest_port": 22,
"dirs": false,
"existing_only": false,
"group": false,
"link_dest": null,
"links": null,
"mode": "pull",
"owner": false,
"partial": false,
"perms": null,
"private_key": null,
"recursive": null,
"rsync_opts": [],
"rsync_path": null,
"rsync_timeout": 0,
"set_remote_user": true,
"src": "zuul@199.204.45.89:/home/zuul/zuul-output/logs/",
"ssh_connection_multiplexing": false,
"times": null,
"use_ssh_args": false,
"verify_host": true
}
},
"msg": ".d..t...... ./\n",
"rc": 0,
"stdout_lines": [
".d..t...... ./"
],
"zj_output": {
"dest": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs",
"src": "logs"
}
},
{
"ansible_loop_var": "zj_output",
"changed": true,
"cmd": "/usr/bin/rsync --delay-updates -F --compress --archive --no-owner --no-group --rsh='/usr/bin/ssh -S none -o Port=22' --out-format='<>%i %n%L' zuul@199.204.45.89:/home/zuul/zuul-output/artifacts/ /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/artifacts/",
"failed": false,
"invocation": {
"module_args": {
"_local_rsync_password": null,
"_local_rsync_path": "rsync",
"_ssh_args": null,
"_substitute_controller": false,
"archive": true,
"checksum": false,
"compress": true,
"copy_links": false,
"delay_updates": true,
"delete": false,
"dest": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/artifacts/",
"dest_port": 22,
"dirs": false,
"existing_only": false,
"group": false,
"link_dest": null,
"links": null,
"mode": "pull",
"owner": false,
"partial": false,
"perms": null,
"private_key": null,
"recursive": null,
"rsync_opts": [],
"rsync_path": null,
"rsync_timeout": 0,
"set_remote_user": true,
"src": "zuul@199.204.45.89:/home/zuul/zuul-output/artifacts/",
"ssh_connection_multiplexing": false,
"times": null,
"use_ssh_args": false,
"verify_host": true
}
},
"msg": ".d..t...... ./\n",
"rc": 0,
"stdout_lines": [
".d..t...... ./"
],
"zj_output": {
"dest": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/artifacts",
"src": "artifacts"
}
},
{
"ansible_loop_var": "zj_output",
"changed": true,
"cmd": "/usr/bin/rsync --delay-updates -F --compress --archive --no-owner --no-group --rsh='/usr/bin/ssh -S none -o Port=22' --out-format='<>%i %n%L' zuul@199.204.45.89:/home/zuul/zuul-output/docs/ /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/docs/",
"failed": false,
"invocation": {
"module_args": {
"_local_rsync_password": null,
"_local_rsync_path": "rsync",
"_ssh_args": null,
"_substitute_controller": false,
"archive": true,
"checksum": false,
"compress": true,
"copy_links": false,
"delay_updates": true,
"delete": false,
"dest": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/docs/",
"dest_port": 22,
"dirs": false,
"existing_only": false,
"group": false,
"link_dest": null,
"links": null,
"mode": "pull",
"owner": false,
"partial": false,
"perms": null,
"private_key": null,
"recursive": null,
"rsync_opts": [],
"rsync_path": null,
"rsync_timeout": 0,
"set_remote_user": true,
"src": "zuul@199.204.45.89:/home/zuul/zuul-output/docs/",
"ssh_connection_multiplexing": false,
"times": null,
"use_ssh_args": false,
"verify_host": true
}
},
"msg": ".d..t...... ./\n",
"rc": 0,
"stdout_lines": [
".d..t...... ./"
],
"zj_output": {
"dest": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/docs",
"src": "docs"
}
}
]
}
},
"role": {
"id": "0242ac17-0010-a348-5988-000000000006",
"name": "fetch-output",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/fetch-output"
},
"task": {
"duration": {
"end": "2026-07-09T00:49:28.867029Z",
"start": "2026-07-09T00:49:27.248870Z"
},
"id": "0242ac17-0010-a348-5988-00000000000c",
"name": "Collect logs, artifacts and docs"
}
},
{
"hosts": {
"controller": {
"action": "shell",
"changed": true,
"msg": "All items completed",
"results": [
{
"ansible_loop_var": "zj_item",
"changed": true,
"cmd": "if [ -n \"$(find /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/artifacts -mindepth 1)\" ] ; then\n # Only create target directory if it is needed.\n # Do not fail if it is already there.\n mkdir -p /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs/artifacts\n # Leave the original directory behind so that other roles\n # operating on the interface directories can simply no-op.\n mv -f /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/artifacts/* /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs/artifacts\nfi\n",
"delta": "0:00:00.007588",
"end": "2026-07-09 00:49:29.251982",
"failed": false,
"invocation": {
"module_args": {
"_raw_params": "if [ -n \"$(find /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/artifacts -mindepth 1)\" ] ; then\n # Only create target directory if it is needed.\n # Do not fail if it is already there.\n mkdir -p /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs/artifacts\n # Leave the original directory behind so that other roles\n # operating on the interface directories can simply no-op.\n mv -f /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/artifacts/* /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs/artifacts\nfi\n",
"_uses_shell": true,
"argv": null,
"chdir": null,
"creates": null,
"executable": null,
"expand_argument_vars": true,
"removes": null,
"stdin": null,
"stdin_add_newline": true,
"strip_empty_ends": true,
"zuul_ansible_split_streams": false,
"zuul_log_id": "in-loop-ignore",
"zuul_no_log": false,
"zuul_output_max_bytes": 1073741824
}
},
"msg": "",
"rc": 0,
"start": "2026-07-09 00:49:29.244394",
"stderr": "",
"stderr_lines": [],
"stdout": "",
"stdout_lines": [],
"zj_item": "artifacts",
"zuul_log_id": "in-loop-ignore"
},
{
"ansible_loop_var": "zj_item",
"changed": true,
"cmd": "if [ -n \"$(find /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/docs -mindepth 1)\" ] ; then\n # Only create target directory if it is needed.\n # Do not fail if it is already there.\n mkdir -p /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs/docs\n # Leave the original directory behind so that other roles\n # operating on the interface directories can simply no-op.\n mv -f /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/docs/* /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs/docs\nfi\n",
"delta": "0:00:00.006720",
"end": "2026-07-09 00:49:29.472264",
"failed": false,
"invocation": {
"module_args": {
"_raw_params": "if [ -n \"$(find /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/docs -mindepth 1)\" ] ; then\n # Only create target directory if it is needed.\n # Do not fail if it is already there.\n mkdir -p /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs/docs\n # Leave the original directory behind so that other roles\n # operating on the interface directories can simply no-op.\n mv -f /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/docs/* /var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/work/logs/docs\nfi\n",
"_uses_shell": true,
"argv": null,
"chdir": null,
"creates": null,
"executable": null,
"expand_argument_vars": true,
"removes": null,
"stdin": null,
"stdin_add_newline": true,
"strip_empty_ends": true,
"zuul_ansible_split_streams": false,
"zuul_log_id": "in-loop-ignore",
"zuul_no_log": false,
"zuul_output_max_bytes": 1073741824
}
},
"msg": "",
"rc": 0,
"start": "2026-07-09 00:49:29.465544",
"stderr": "",
"stderr_lines": [],
"stdout": "",
"stdout_lines": [],
"zj_item": "docs",
"zuul_log_id": "in-loop-ignore"
}
]
}
},
"role": {
"id": "0242ac17-0010-a348-5988-00000000000f",
"name": "merge-output-to-logs",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/merge-output-to-logs"
},
"task": {
"duration": {
"end": "2026-07-09T00:49:29.519607Z",
"start": "2026-07-09T00:49:28.882025Z"
},
"id": "0242ac17-0010-a348-5988-000000000011",
"name": "Move artifacts and docs to logs dir"
}
}
]
},
{
"play": {
"duration": {
"end": "2026-07-09T00:49:30.039277Z",
"start": "2026-07-09T00:49:29.532032Z"
},
"id": "0242ac17-0010-a348-5988-000000000013",
"name": "all"
},
"tasks": [
{
"hosts": {
"controller": {
"action": "authorized_key",
"changed": true,
"comment": null,
"exclusive": false,
"follow": false,
"invocation": {
"module_args": {
"changed": true,
"comment": null,
"exclusive": false,
"follow": false,
"key": "ssh-rsa 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 zuul-build-sshkey",
"key_options": null,
"keyfile": "/home/zuul/.ssh/authorized_keys",
"manage_dir": true,
"path": null,
"state": "absent",
"user": "zuul",
"validate_certs": true
}
},
"key": "ssh-rsa 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 zuul-build-sshkey",
"key_options": null,
"keyfile": "/home/zuul/.ssh/authorized_keys",
"manage_dir": true,
"path": null,
"state": "absent",
"user": "zuul",
"validate_certs": true
}
},
"role": {
"id": "0242ac17-0010-a348-5988-000000000016",
"name": "remove-build-sshkey",
"path": "/var/lib/zuul/builds/87af44eeea0646a68aee97da6965a1dd/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/remove-build-sshkey"
},
"task": {
"duration": {
"end": "2026-07-09T00:49:30.039277Z",
"start": "2026-07-09T00:49:29.538395Z"
},
"id": "0242ac17-0010-a348-5988-000000000018",
"name": "Remove the build SSH key from all nodes"
}
}
]
}
],
"stats": {
"controller": {
"changed": 4,
"failures": 0,
"ignored": 0,
"ok": 5,
"rescued": 0,
"skipped": 1,
"unreachable": 0
}
},
"trusted": true
}
]