all: children: zuul_unreachable: hosts: {} hosts: ubuntu-noble: ansible_connection: ssh ansible_host: 199.204.45.38 ansible_port: 22 ansible_python_interpreter: auto ansible_user: zuul nodepool: az: nova cloud: public external_id: 7780048f-17c9-4ba3-ba18-4d011ad9168f host_id: 41a201ef72a259be12e3756e510383f2b77edc2ac36483fdab96a683 interface_ip: 199.204.45.38 label: ubuntu-noble node_properties: {} private_ipv4: 199.204.45.38 private_ipv6: null provider: yul1 public_ipv4: 199.204.45.38 public_ipv6: 2604:e100:1:0:f816:3eff:fe59:a290 region: ca-ymq-1 slot: null zuul_node: az: nova cloud: public external_id: 7780048f-17c9-4ba3-ba18-4d011ad9168f host_id: 41a201ef72a259be12e3756e510383f2b77edc2ac36483fdab96a683 interface_ip: 199.204.45.38 label: ubuntu-noble node_properties: {} private_ipv4: 199.204.45.38 private_ipv6: null provider: yul1 public_ipv4: 199.204.45.38 public_ipv6: 2604:e100:1:0:f816:3eff:fe59:a290 region: ca-ymq-1 slot: null uuid: null vars: zuul: _inheritance_path: - '' - '' - '' ansible_version: '9' attempts: 1 branch: main build: aab8927165f348c8885d4810b8db5f5e build_refs: - branch: main change: '284' change_message: "feat(cert_manager): switch from vendored chart to OCI\n\n## Summary\n\nReplace the vendored cert-manager Helm chart with OCI references from `ghcr.io/vexxhost/charts/cert-manager`. This eliminates the need to bundle chart files in the collection and allows the role to dynamically select the correct chart version and values based on `cert_manager_helm_chart_version`.\n\n## Changes\n\n- **Remove vendored chart**: Deletes 7,500+ lines of vendored cert-manager chart files from `roles/cert_manager/files/chart/`\n- **OCI chart reference**: Uses `kubernetes.core.helm` native OCI support with `chart_ref: oci://ghcr.io/vexxhost/charts/cert-manager` and explicit `chart_version`\n- **`cert_manager_helm_chart_version` as primary source of truth**: Image tags and version-specific value overrides all derive from this single variable\n- **Version-specific values layering**: `vars/v1.15.yml` overrides the startupapicheck image for v1.15.x charts (renamed from `cert-manager-ctl` to `cert-manager-startupapicheck`). Uses major.minor fallback via `with_first_found` so patch bumps automatically get the right values\n- **Auto-select startupapicheck image**: `cert_manager_image_startupapicheck` auto-selects based on chart version (`>= 1.15.0`)\n- **Remove upload_helm_chart dependency**: No longer needed \u2014 the chart is pulled directly from OCI at deploy time\n- **Molecule scenario**: New `extensions/molecule/cert-manager/` scenario for version testing\n- **Zuul jobs**: Added `molecule-cert-manager` and `molecule-cert-manager-v1.15.5` to check/gate pipelines\n\n## Backward Compatibility\n\n- Default `cert_manager_helm_chart_version` is `v1.11.5` \u2014 existing users see no change\n- Atmosphere can pin `cert_manager_helm_chart_version: v1.15.5` to deploy the latest chart\n\n\U0001F916 Generated with [Claude Code](https://claude.com/claude-code)" change_url: https://github.com/vexxhost/ansible-collection-kubernetes/pull/284 commit_id: 8f82e77aade6025db5c181bffcaf07ac59eab7b2 patchset: 8f82e77aade6025db5c181bffcaf07ac59eab7b2 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/ansible-collection-kubernetes name: vexxhost/ansible-collection-kubernetes short_name: ansible-collection-kubernetes src_dir: src/github.com/vexxhost/ansible-collection-kubernetes src_dir: src/github.com/vexxhost/ansible-collection-kubernetes topic: null buildset: 6f32527eebc74007b1299e67dbb0b2e5 buildset_refs: - branch: main change: '284' change_message: "feat(cert_manager): switch from vendored chart to OCI\n\n## Summary\n\nReplace the vendored cert-manager Helm chart with OCI references from `ghcr.io/vexxhost/charts/cert-manager`. This eliminates the need to bundle chart files in the collection and allows the role to dynamically select the correct chart version and values based on `cert_manager_helm_chart_version`.\n\n## Changes\n\n- **Remove vendored chart**: Deletes 7,500+ lines of vendored cert-manager chart files from `roles/cert_manager/files/chart/`\n- **OCI chart reference**: Uses `kubernetes.core.helm` native OCI support with `chart_ref: oci://ghcr.io/vexxhost/charts/cert-manager` and explicit `chart_version`\n- **`cert_manager_helm_chart_version` as primary source of truth**: Image tags and version-specific value overrides all derive from this single variable\n- **Version-specific values layering**: `vars/v1.15.yml` overrides the startupapicheck image for v1.15.x charts (renamed from `cert-manager-ctl` to `cert-manager-startupapicheck`). Uses major.minor fallback via `with_first_found` so patch bumps automatically get the right values\n- **Auto-select startupapicheck image**: `cert_manager_image_startupapicheck` auto-selects based on chart version (`>= 1.15.0`)\n- **Remove upload_helm_chart dependency**: No longer needed \u2014 the chart is pulled directly from OCI at deploy time\n- **Molecule scenario**: New `extensions/molecule/cert-manager/` scenario for version testing\n- **Zuul jobs**: Added `molecule-cert-manager` and `molecule-cert-manager-v1.15.5` to check/gate pipelines\n\n## Backward Compatibility\n\n- Default `cert_manager_helm_chart_version` is `v1.11.5` \u2014 existing users see no change\n- Atmosphere can pin `cert_manager_helm_chart_version: v1.15.5` to deploy the latest chart\n\n\U0001F916 Generated with [Claude Code](https://claude.com/claude-code)" change_url: https://github.com/vexxhost/ansible-collection-kubernetes/pull/284 commit_id: 8f82e77aade6025db5c181bffcaf07ac59eab7b2 patchset: 8f82e77aade6025db5c181bffcaf07ac59eab7b2 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/ansible-collection-kubernetes name: vexxhost/ansible-collection-kubernetes short_name: ansible-collection-kubernetes src_dir: src/github.com/vexxhost/ansible-collection-kubernetes src_dir: src/github.com/vexxhost/ansible-collection-kubernetes topic: null change: '284' change_message: "feat(cert_manager): switch from vendored chart to OCI\n\n## Summary\n\nReplace the vendored cert-manager Helm chart with OCI references from `ghcr.io/vexxhost/charts/cert-manager`. This eliminates the need to bundle chart files in the collection and allows the role to dynamically select the correct chart version and values based on `cert_manager_helm_chart_version`.\n\n## Changes\n\n- **Remove vendored chart**: Deletes 7,500+ lines of vendored cert-manager chart files from `roles/cert_manager/files/chart/`\n- **OCI chart reference**: Uses `kubernetes.core.helm` native OCI support with `chart_ref: oci://ghcr.io/vexxhost/charts/cert-manager` and explicit `chart_version`\n- **`cert_manager_helm_chart_version` as primary source of truth**: Image tags and version-specific value overrides all derive from this single variable\n- **Version-specific values layering**: `vars/v1.15.yml` overrides the startupapicheck image for v1.15.x charts (renamed from `cert-manager-ctl` to `cert-manager-startupapicheck`). Uses major.minor fallback via `with_first_found` so patch bumps automatically get the right values\n- **Auto-select startupapicheck image**: `cert_manager_image_startupapicheck` auto-selects based on chart version (`>= 1.15.0`)\n- **Remove upload_helm_chart dependency**: No longer needed \u2014 the chart is pulled directly from OCI at deploy time\n- **Molecule scenario**: New `extensions/molecule/cert-manager/` scenario for version testing\n- **Zuul jobs**: Added `molecule-cert-manager` and `molecule-cert-manager-v1.15.5` to check/gate pipelines\n\n## Backward Compatibility\n\n- Default `cert_manager_helm_chart_version` is `v1.11.5` \u2014 existing users see no change\n- Atmosphere can pin `cert_manager_helm_chart_version: v1.15.5` to deploy the latest chart\n\n\U0001F916 Generated with [Claude Code](https://claude.com/claude-code)" change_url: https://github.com/vexxhost/ansible-collection-kubernetes/pull/284 child_jobs: [] commit_id: 8f82e77aade6025db5c181bffcaf07ac59eab7b2 event_id: d07fc740-6a7c-11f1-8b15-c170421f36dc executor: hostname: 2d72f0692154 inventory_file: /var/lib/zuul/builds/aab8927165f348c8885d4810b8db5f5e/ansible/inventory.yaml log_root: /var/lib/zuul/builds/aab8927165f348c8885d4810b8db5f5e/work/logs result_data_file: /var/lib/zuul/builds/aab8927165f348c8885d4810b8db5f5e/work/results.json src_root: /var/lib/zuul/builds/aab8927165f348c8885d4810b8db5f5e/work/src work_root: /var/lib/zuul/builds/aab8927165f348c8885d4810b8db5f5e/work include_vars: [] items: - branch: main change: '284' change_message: "feat(cert_manager): switch from vendored chart to OCI\n\n## Summary\n\nReplace the vendored cert-manager Helm chart with OCI references from `ghcr.io/vexxhost/charts/cert-manager`. This eliminates the need to bundle chart files in the collection and allows the role to dynamically select the correct chart version and values based on `cert_manager_helm_chart_version`.\n\n## Changes\n\n- **Remove vendored chart**: Deletes 7,500+ lines of vendored cert-manager chart files from `roles/cert_manager/files/chart/`\n- **OCI chart reference**: Uses `kubernetes.core.helm` native OCI support with `chart_ref: oci://ghcr.io/vexxhost/charts/cert-manager` and explicit `chart_version`\n- **`cert_manager_helm_chart_version` as primary source of truth**: Image tags and version-specific value overrides all derive from this single variable\n- **Version-specific values layering**: `vars/v1.15.yml` overrides the startupapicheck image for v1.15.x charts (renamed from `cert-manager-ctl` to `cert-manager-startupapicheck`). Uses major.minor fallback via `with_first_found` so patch bumps automatically get the right values\n- **Auto-select startupapicheck image**: `cert_manager_image_startupapicheck` auto-selects based on chart version (`>= 1.15.0`)\n- **Remove upload_helm_chart dependency**: No longer needed \u2014 the chart is pulled directly from OCI at deploy time\n- **Molecule scenario**: New `extensions/molecule/cert-manager/` scenario for version testing\n- **Zuul jobs**: Added `molecule-cert-manager` and `molecule-cert-manager-v1.15.5` to check/gate pipelines\n\n## Backward Compatibility\n\n- Default `cert_manager_helm_chart_version` is `v1.11.5` \u2014 existing users see no change\n- Atmosphere can pin `cert_manager_helm_chart_version: v1.15.5` to deploy the latest chart\n\n\U0001F916 Generated with [Claude Code](https://claude.com/claude-code)" change_url: https://github.com/vexxhost/ansible-collection-kubernetes/pull/284 commit_id: 8f82e77aade6025db5c181bffcaf07ac59eab7b2 patchset: 8f82e77aade6025db5c181bffcaf07ac59eab7b2 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/ansible-collection-kubernetes name: vexxhost/ansible-collection-kubernetes short_name: ansible-collection-kubernetes src_dir: src/github.com/vexxhost/ansible-collection-kubernetes topic: null job: pre-commit jobtags: [] max_attempts: 3 message: ZmVhdChjZXJ0X21hbmFnZXIpOiBzd2l0Y2ggZnJvbSB2ZW5kb3JlZCBjaGFydCB0byBPQ0kKCiMjIFN1bW1hcnkKClJlcGxhY2UgdGhlIHZlbmRvcmVkIGNlcnQtbWFuYWdlciBIZWxtIGNoYXJ0IHdpdGggT0NJIHJlZmVyZW5jZXMgZnJvbSBgZ2hjci5pby92ZXh4aG9zdC9jaGFydHMvY2VydC1tYW5hZ2VyYC4gVGhpcyBlbGltaW5hdGVzIHRoZSBuZWVkIHRvIGJ1bmRsZSBjaGFydCBmaWxlcyBpbiB0aGUgY29sbGVjdGlvbiBhbmQgYWxsb3dzIHRoZSByb2xlIHRvIGR5bmFtaWNhbGx5IHNlbGVjdCB0aGUgY29ycmVjdCBjaGFydCB2ZXJzaW9uIGFuZCB2YWx1ZXMgYmFzZWQgb24gYGNlcnRfbWFuYWdlcl9oZWxtX2NoYXJ0X3ZlcnNpb25gLgoKIyMgQ2hhbmdlcwoKLSAqKlJlbW92ZSB2ZW5kb3JlZCBjaGFydCoqOiBEZWxldGVzIDcsNTAwKyBsaW5lcyBvZiB2ZW5kb3JlZCBjZXJ0LW1hbmFnZXIgY2hhcnQgZmlsZXMgZnJvbSBgcm9sZXMvY2VydF9tYW5hZ2VyL2ZpbGVzL2NoYXJ0L2AKLSAqKk9DSSBjaGFydCByZWZlcmVuY2UqKjogVXNlcyBga3ViZXJuZXRlcy5jb3JlLmhlbG1gIG5hdGl2ZSBPQ0kgc3VwcG9ydCB3aXRoIGBjaGFydF9yZWY6IG9jaTovL2doY3IuaW8vdmV4eGhvc3QvY2hhcnRzL2NlcnQtbWFuYWdlcmAgYW5kIGV4cGxpY2l0IGBjaGFydF92ZXJzaW9uYAotICoqYGNlcnRfbWFuYWdlcl9oZWxtX2NoYXJ0X3ZlcnNpb25gIGFzIHByaW1hcnkgc291cmNlIG9mIHRydXRoKio6IEltYWdlIHRhZ3MgYW5kIHZlcnNpb24tc3BlY2lmaWMgdmFsdWUgb3ZlcnJpZGVzIGFsbCBkZXJpdmUgZnJvbSB0aGlzIHNpbmdsZSB2YXJpYWJsZQotICoqVmVyc2lvbi1zcGVjaWZpYyB2YWx1ZXMgbGF5ZXJpbmcqKjogYHZhcnMvdjEuMTUueW1sYCBvdmVycmlkZXMgdGhlIHN0YXJ0dXBhcGljaGVjayBpbWFnZSBmb3IgdjEuMTUueCBjaGFydHMgKHJlbmFtZWQgZnJvbSBgY2VydC1tYW5hZ2VyLWN0bGAgdG8gYGNlcnQtbWFuYWdlci1zdGFydHVwYXBpY2hlY2tgKS4gVXNlcyBtYWpvci5taW5vciBmYWxsYmFjayB2aWEgYHdpdGhfZmlyc3RfZm91bmRgIHNvIHBhdGNoIGJ1bXBzIGF1dG9tYXRpY2FsbHkgZ2V0IHRoZSByaWdodCB2YWx1ZXMKLSAqKkF1dG8tc2VsZWN0IHN0YXJ0dXBhcGljaGVjayBpbWFnZSoqOiBgY2VydF9tYW5hZ2VyX2ltYWdlX3N0YXJ0dXBhcGljaGVja2AgYXV0by1zZWxlY3RzIGJhc2VkIG9uIGNoYXJ0IHZlcnNpb24gKGA+PSAxLjE1LjBgKQotICoqUmVtb3ZlIHVwbG9hZF9oZWxtX2NoYXJ0IGRlcGVuZGVuY3kqKjogTm8gbG9uZ2VyIG5lZWRlZCDigJQgdGhlIGNoYXJ0IGlzIHB1bGxlZCBkaXJlY3RseSBmcm9tIE9DSSBhdCBkZXBsb3kgdGltZQotICoqTW9sZWN1bGUgc2NlbmFyaW8qKjogTmV3IGBleHRlbnNpb25zL21vbGVjdWxlL2NlcnQtbWFuYWdlci9gIHNjZW5hcmlvIGZvciB2ZXJzaW9uIHRlc3RpbmcKLSAqKlp1dWwgam9icyoqOiBBZGRlZCBgbW9sZWN1bGUtY2VydC1tYW5hZ2VyYCBhbmQgYG1vbGVjdWxlLWNlcnQtbWFuYWdlci12MS4xNS41YCB0byBjaGVjay9nYXRlIHBpcGVsaW5lcwoKIyMgQmFja3dhcmQgQ29tcGF0aWJpbGl0eQoKLSBEZWZhdWx0IGBjZXJ0X21hbmFnZXJfaGVsbV9jaGFydF92ZXJzaW9uYCBpcyBgdjEuMTEuNWAg4oCUIGV4aXN0aW5nIHVzZXJzIHNlZSBubyBjaGFuZ2UKLSBBdG1vc3BoZXJlIGNhbiBwaW4gYGNlcnRfbWFuYWdlcl9oZWxtX2NoYXJ0X3ZlcnNpb246IHYxLjE1LjVgIHRvIGRlcGxveSB0aGUgbGF0ZXN0IGNoYXJ0Cgrwn6SWIEdlbmVyYXRlZCB3aXRoIFtDbGF1ZGUgQ29kZV0oaHR0cHM6Ly9jbGF1ZGUuY29tL2NsYXVkZS1jb2RlKQ== patchset: 8f82e77aade6025db5c181bffcaf07ac59eab7b2 pipeline: check playbook_context: playbook_projects: trusted/project_0/github.com/vexxhost/zuul-config: canonical_name: github.com/vexxhost/zuul-config checkout: main commit: 298983cd1253e6833abdb49d87d912527e0e6597 trusted/project_1/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: aa325aae459aaeadbd8fef95bd700bdae70ab38c trusted/project_2/github.com/vexxhost/zuul-jobs: canonical_name: github.com/vexxhost/zuul-jobs checkout: main commit: c286bf94224b5660b8e49e9a058289e61062a9a0 untrusted/project_0/github.com/vexxhost/zuul-jobs: canonical_name: github.com/vexxhost/zuul-jobs checkout: main commit: c286bf94224b5660b8e49e9a058289e61062a9a0 untrusted/project_1/github.com/vexxhost/zuul-config: canonical_name: github.com/vexxhost/zuul-config checkout: main commit: 298983cd1253e6833abdb49d87d912527e0e6597 untrusted/project_2/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: aa325aae459aaeadbd8fef95bd700bdae70ab38c playbooks: - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/pre-commit/run.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/playbook_0/role_1/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/playbook_0/role_1/zuul-jobs/roles - checkout: main checkout_description: playbook branch link_name: ansible/playbook_0/role_2/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/playbook_0/role_2/zuul-jobs/roles post_playbooks: - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_0/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_0/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_0/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_0/role_2/zuul-jobs/roles - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post-logs.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_1/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_1/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_1/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_1/role_2/zuul-jobs/roles pre_playbooks: - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/pre.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_0/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_0/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/pre_playbook_0/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_0/role_2/zuul-jobs/roles - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/pre-commit/pre.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_1/role_1/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_1/role_1/zuul-jobs/roles - checkout: main checkout_description: playbook branch link_name: ansible/pre_playbook_1/role_2/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_1/role_2/zuul-jobs/roles post_review: false post_timeout: null pre_timeout: null project: canonical_hostname: github.com canonical_name: github.com/vexxhost/ansible-collection-kubernetes name: vexxhost/ansible-collection-kubernetes short_name: ansible-collection-kubernetes src_dir: src/github.com/vexxhost/ansible-collection-kubernetes projects: github.com/vexxhost/ansible-collection-kubernetes: canonical_hostname: github.com canonical_name: github.com/vexxhost/ansible-collection-kubernetes checkout: main checkout_description: zuul branch commit: fcb31fd6cac4e71111804c43b91e939b610fd810 name: vexxhost/ansible-collection-kubernetes required: false short_name: ansible-collection-kubernetes src_dir: src/github.com/vexxhost/ansible-collection-kubernetes ref: refs/pull/284/head resources: {} tenant: oss timeout: 1800 topic: null voting: true