all: children: cephs: hosts: instance: null computes: hosts: instance: null controllers: hosts: instance: null zuul_unreachable: hosts: {} hosts: instance: ansible_connection: ssh ansible_host: 199.204.45.144 ansible_port: 22 ansible_python_interpreter: auto ansible_user: zuul atmosphere_image_prefix: harbor.atmosphere.dev/ ceph_conf_overrides: - option: mon allow pool size one section: global value: true - option: osd crush chooseleaf type section: global value: 0 - option: auth allow insecure global id reclaim section: mon value: false ceph_csi_rbd_helm_values: provisioner: replicaCount: 1 ceph_fsid: 4837cbf8-4f90-4300-b3f6-726c9b9f89b4 ceph_osd_devices: - /dev/ceph-{{ inventory_hostname_short }}-osd0/data - /dev/ceph-{{ inventory_hostname_short }}-osd1/data - /dev/ceph-{{ inventory_hostname_short }}-osd2/data cilium_helm_values: operator: replicas: 1 cluster_issuer_type: self-signed csi_driver: local-path-provisioner ingress_nginx_helm_values: controller: config: worker-processes: 2 keystone_helm_values: pod: replicas: api: 1 kube_vip_address: 172.17.0.100 kube_vip_interface: '{{ ansible_facts[''default_ipv4''].interface }}' kubernetes_hostname: '{{ ansible_facts[''default_ipv4''].address }}' molecule_install_collection_siblings: true molecule_scenario: keycloak nodepool: az: nova cloud: public external_id: daa19e38-0aec-41e8-856f-683ac7707977 host_id: be92abac58cdf319c41ec3044bb265315879370c10aa7110cfdbfb5f interface_ip: 199.204.45.144 label: ubuntu-jammy node_properties: {} private_ipv4: 199.204.45.144 private_ipv6: null provider: yul1 public_ipv4: 199.204.45.144 public_ipv6: 2604:e100:1:0:f816:3eff:febf:17b0 region: ca-ymq-1 slot: null percona_xtradb_cluster_spec: allowUnsafeConfigurations: true haproxy: size: 1 pxc: size: 1 zuul_node: az: nova cloud: public external_id: daa19e38-0aec-41e8-856f-683ac7707977 host_id: be92abac58cdf319c41ec3044bb265315879370c10aa7110cfdbfb5f interface_ip: 199.204.45.144 label: ubuntu-jammy node_properties: {} private_ipv4: 199.204.45.144 private_ipv6: null provider: yul1 public_ipv4: 199.204.45.144 public_ipv6: 2604:e100:1:0:f816:3eff:febf:17b0 region: ca-ymq-1 slot: null uuid: null vars: atmosphere_image_prefix: harbor.atmosphere.dev/ ceph_conf_overrides: - option: mon allow pool size one section: global value: true - option: osd crush chooseleaf type section: global value: 0 - option: auth allow insecure global id reclaim section: mon value: false ceph_csi_rbd_helm_values: provisioner: replicaCount: 1 ceph_fsid: 4837cbf8-4f90-4300-b3f6-726c9b9f89b4 ceph_osd_devices: - /dev/ceph-{{ inventory_hostname_short }}-osd0/data - /dev/ceph-{{ inventory_hostname_short }}-osd1/data - /dev/ceph-{{ inventory_hostname_short }}-osd2/data cilium_helm_values: operator: replicas: 1 cluster_issuer_type: self-signed csi_driver: local-path-provisioner ingress_nginx_helm_values: controller: config: worker-processes: 2 keystone_helm_values: pod: replicas: api: 1 kube_vip_address: 172.17.0.100 kube_vip_interface: '{{ ansible_facts[''default_ipv4''].interface }}' kubernetes_hostname: '{{ ansible_facts[''default_ipv4''].address }}' molecule_install_collection_siblings: true molecule_scenario: keycloak percona_xtradb_cluster_spec: allowUnsafeConfigurations: true haproxy: size: 1 pxc: size: 1 zuul: _inheritance_path: - '' - '' - '' - '' - '' ansible_version: '9' attempts: 1 branch: main build: d3fdce9d1ee747d7bf9641586036f6cd build_refs: - branch: main change: '4134' change_message: 'feat(keycloak): add PostgreSQL migration path ## Summary - add a PostgreSQL backend option for Keycloak using an externally managed application secret - add a controlled MySQL/PXC-to-PostgreSQL export, import, and cutover playbook - prevent a migrated deployment from being unintentionally returned to MySQL ## Follow-up CloudNativePG installation, CRD lifecycle, backup/restore, and Kubernetes-version support remain in #3314. This change deliberately consumes a dedicated PostgreSQL service so it can be reviewed independently of that unfinished operator work. This provides the prerequisite migration path for the Keycloak 26.6.3 upgrade in #4096.' change_url: https://github.com/vexxhost/atmosphere/pull/4134 commit_id: ad9ef136a6363bf84cdf0b076bffa3f7284efbca patchset: ad9ef136a6363bf84cdf0b076bffa3f7284efbca project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere name: vexxhost/atmosphere short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere src_dir: src/github.com/vexxhost/atmosphere topic: null buildset: e32467ca6b504e518b9299650ccab34e buildset_refs: - branch: main change: '4134' change_message: 'feat(keycloak): add PostgreSQL migration path ## Summary - add a PostgreSQL backend option for Keycloak using an externally managed application secret - add a controlled MySQL/PXC-to-PostgreSQL export, import, and cutover playbook - prevent a migrated deployment from being unintentionally returned to MySQL ## Follow-up CloudNativePG installation, CRD lifecycle, backup/restore, and Kubernetes-version support remain in #3314. This change deliberately consumes a dedicated PostgreSQL service so it can be reviewed independently of that unfinished operator work. This provides the prerequisite migration path for the Keycloak 26.6.3 upgrade in #4096.' change_url: https://github.com/vexxhost/atmosphere/pull/4134 commit_id: ad9ef136a6363bf84cdf0b076bffa3f7284efbca patchset: ad9ef136a6363bf84cdf0b076bffa3f7284efbca project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere name: vexxhost/atmosphere short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere src_dir: src/github.com/vexxhost/atmosphere topic: null change: '4134' change_message: 'feat(keycloak): add PostgreSQL migration path ## Summary - add a PostgreSQL backend option for Keycloak using an externally managed application secret - add a controlled MySQL/PXC-to-PostgreSQL export, import, and cutover playbook - prevent a migrated deployment from being unintentionally returned to MySQL ## Follow-up CloudNativePG installation, CRD lifecycle, backup/restore, and Kubernetes-version support remain in #3314. This change deliberately consumes a dedicated PostgreSQL service so it can be reviewed independently of that unfinished operator work. This provides the prerequisite migration path for the Keycloak 26.6.3 upgrade in #4096.' change_url: https://github.com/vexxhost/atmosphere/pull/4134 child_jobs: [] commit_id: ad9ef136a6363bf84cdf0b076bffa3f7284efbca event_id: c4058b00-7c0e-11f1-9eb1-275395f399cd executor: hostname: 2d72f0692154 inventory_file: /var/lib/zuul/builds/d3fdce9d1ee747d7bf9641586036f6cd/ansible/inventory.yaml log_root: /var/lib/zuul/builds/d3fdce9d1ee747d7bf9641586036f6cd/work/logs result_data_file: /var/lib/zuul/builds/d3fdce9d1ee747d7bf9641586036f6cd/work/results.json src_root: /var/lib/zuul/builds/d3fdce9d1ee747d7bf9641586036f6cd/work/src work_root: /var/lib/zuul/builds/d3fdce9d1ee747d7bf9641586036f6cd/work include_vars: [] items: - branch: main change: '4134' change_message: 'feat(keycloak): add PostgreSQL migration path ## Summary - add a PostgreSQL backend option for Keycloak using an externally managed application secret - add a controlled MySQL/PXC-to-PostgreSQL export, import, and cutover playbook - prevent a migrated deployment from being unintentionally returned to MySQL ## Follow-up CloudNativePG installation, CRD lifecycle, backup/restore, and Kubernetes-version support remain in #3314. This change deliberately consumes a dedicated PostgreSQL service so it can be reviewed independently of that unfinished operator work. This provides the prerequisite migration path for the Keycloak 26.6.3 upgrade in #4096.' change_url: https://github.com/vexxhost/atmosphere/pull/4134 commit_id: ad9ef136a6363bf84cdf0b076bffa3f7284efbca patchset: ad9ef136a6363bf84cdf0b076bffa3f7284efbca project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere name: vexxhost/atmosphere short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere topic: null job: atmosphere-molecule-keycloak jobtags: [] max_attempts: 3 message: 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 patchset: ad9ef136a6363bf84cdf0b076bffa3f7284efbca pipeline: check playbook_context: playbook_projects: trusted/project_0/github.com/vexxhost/zuul-config: canonical_name: github.com/vexxhost/zuul-config checkout: main commit: 298983cd1253e6833abdb49d87d912527e0e6597 trusted/project_1/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: 623cebddafe9df8291c923be8815a4bb5236ce49 trusted/project_2/github.com/vexxhost/zuul-jobs: canonical_name: github.com/vexxhost/zuul-jobs checkout: main commit: c286bf94224b5660b8e49e9a058289e61062a9a0 untrusted/project_0/github.com/vexxhost/zuul-jobs: canonical_name: github.com/vexxhost/zuul-jobs checkout: main commit: c286bf94224b5660b8e49e9a058289e61062a9a0 untrusted/project_1/github.com/vexxhost/zuul-config: canonical_name: github.com/vexxhost/zuul-config checkout: main commit: 298983cd1253e6833abdb49d87d912527e0e6597 untrusted/project_2/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: 623cebddafe9df8291c923be8815a4bb5236ce49 untrusted/project_3/github.com/vexxhost/atmosphere-zuul-jobs: canonical_name: github.com/vexxhost/atmosphere-zuul-jobs checkout: main commit: acb8e36a801f3b93fdd30dec43a15b6f8d809c2f untrusted/project_4/opendev.org/openstack/openstack-helm: canonical_name: opendev.org/openstack/openstack-helm checkout: master commit: d03dd061a8112c468e2f6529cb0663873f96b50f playbooks: - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/molecule/run.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/playbook_0/role_1/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/playbook_0/role_1/zuul-jobs/roles - checkout: main checkout_description: playbook branch link_name: ansible/playbook_0/role_2/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/playbook_0/role_2/zuul-jobs/roles post_playbooks: - path: untrusted/project_3/github.com/vexxhost/atmosphere-zuul-jobs/playbooks/molecule/post.yml roles: - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_0/role_1/openstack-helm link_target: untrusted/project_4/opendev.org/openstack/openstack-helm role_path: ansible/post_playbook_0/role_1/openstack-helm/roles - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_0/role_3/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_0/role_3/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_0/role_4/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_0/role_4/zuul-jobs/roles - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_1/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_1/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_1/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_1/role_2/zuul-jobs/roles - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post-logs.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_2/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_2/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_2/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_2/role_2/zuul-jobs/roles pre_playbooks: - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/pre.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_0/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_0/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/pre_playbook_0/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_0/role_2/zuul-jobs/roles - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/molecule/pre.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_1/role_1/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_1/role_1/zuul-jobs/roles - checkout: main checkout_description: playbook branch link_name: ansible/pre_playbook_1/role_2/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_1/role_2/zuul-jobs/roles - path: untrusted/project_3/github.com/vexxhost/atmosphere-zuul-jobs/playbooks/molecule/pre.yml roles: - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_2/role_1/openstack-helm link_target: untrusted/project_4/opendev.org/openstack/openstack-helm role_path: ansible/pre_playbook_2/role_1/openstack-helm/roles - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_2/role_3/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_2/role_3/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/pre_playbook_2/role_4/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_2/role_4/zuul-jobs/roles post_review: false post_timeout: null pre_timeout: null project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere name: vexxhost/atmosphere short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere projects: github.com/ansible-collections/ansible.netcommon: canonical_hostname: github.com canonical_name: github.com/ansible-collections/ansible.netcommon checkout: main checkout_description: zuul branch commit: 4e8ea5de4c9f98476914e5cd391a4db44d5759f0 name: ansible-collections/ansible.netcommon required: true short_name: ansible.netcommon src_dir: src/github.com/ansible-collections/ansible.netcommon github.com/ansible-collections/ansible.posix: canonical_hostname: github.com canonical_name: github.com/ansible-collections/ansible.posix checkout: main checkout_description: zuul branch commit: ef1937b771670f104853d16888dd1083f983bc65 name: ansible-collections/ansible.posix required: true short_name: ansible.posix src_dir: src/github.com/ansible-collections/ansible.posix github.com/ansible-collections/ansible.utils: canonical_hostname: github.com canonical_name: github.com/ansible-collections/ansible.utils checkout: main checkout_description: zuul branch commit: 9210878670881ccb7c718be447d84cc6ed7020fd name: ansible-collections/ansible.utils required: true short_name: ansible.utils src_dir: src/github.com/ansible-collections/ansible.utils github.com/ansible-collections/community.crypto: canonical_hostname: github.com canonical_name: github.com/ansible-collections/community.crypto checkout: main checkout_description: zuul branch commit: 70ce1dfc91895595cfa7e72ac6073ed396cce6d8 name: ansible-collections/community.crypto required: true short_name: community.crypto src_dir: src/github.com/ansible-collections/community.crypto github.com/ansible-collections/community.general: canonical_hostname: github.com canonical_name: github.com/ansible-collections/community.general checkout: main checkout_description: zuul branch commit: a5a543a0a7949ea23198f4a0f6a94bbc7fbd43ac name: ansible-collections/community.general required: true short_name: community.general src_dir: src/github.com/ansible-collections/community.general github.com/ansible-collections/community.mysql: canonical_hostname: github.com canonical_name: github.com/ansible-collections/community.mysql checkout: main checkout_description: zuul branch commit: 4cf7a3176fbd07be43459f1366e8066381df6d97 name: ansible-collections/community.mysql required: true short_name: community.mysql src_dir: src/github.com/ansible-collections/community.mysql github.com/ansible-collections/kubernetes.core: canonical_hostname: github.com canonical_name: github.com/ansible-collections/kubernetes.core checkout: main checkout_description: zuul branch commit: 18f8894a22db7cb37f7fe7a190ccc1a8de62d6fa name: ansible-collections/kubernetes.core required: true short_name: kubernetes.core src_dir: src/github.com/ansible-collections/kubernetes.core github.com/vexxhost/ansible-collection-ceph: canonical_hostname: github.com canonical_name: github.com/vexxhost/ansible-collection-ceph checkout: main checkout_description: zuul branch commit: d87ebb249b48b0a1d8c291cf6aaaa3dcaa92268a name: vexxhost/ansible-collection-ceph required: true short_name: ansible-collection-ceph src_dir: src/github.com/vexxhost/ansible-collection-ceph github.com/vexxhost/ansible-collection-containers: canonical_hostname: github.com canonical_name: github.com/vexxhost/ansible-collection-containers checkout: main checkout_description: zuul branch commit: 9639110c2a3b5bc61ba371b6583a4fcc13996127 name: vexxhost/ansible-collection-containers required: true short_name: ansible-collection-containers src_dir: src/github.com/vexxhost/ansible-collection-containers github.com/vexxhost/ansible-collection-kubernetes: canonical_hostname: github.com canonical_name: github.com/vexxhost/ansible-collection-kubernetes checkout: main checkout_description: zuul branch commit: 9d5de1cc18913b012de2196667e5e6868d41d7e3 name: vexxhost/ansible-collection-kubernetes required: true short_name: ansible-collection-kubernetes src_dir: src/github.com/vexxhost/ansible-collection-kubernetes github.com/vexxhost/atmosphere: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere checkout: main checkout_description: zuul branch commit: b63b1a01a2a4bd398aa9bf39f3368055aa5d870a name: vexxhost/atmosphere required: false short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere github.com/vexxhost/atmosphere.common: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere.common checkout: main checkout_description: zuul branch commit: d00ec7f88fdc7ca2ce504a7e19c4049986cdac86 name: vexxhost/atmosphere.common required: true short_name: atmosphere.common src_dir: src/github.com/vexxhost/atmosphere.common opendev.org/openstack/ansible-collections-openstack: canonical_hostname: opendev.org canonical_name: opendev.org/openstack/ansible-collections-openstack checkout: master checkout_description: project default branch commit: 209cf2d60533d5094aaf0308765d2e538091f203 name: openstack/ansible-collections-openstack required: true short_name: ansible-collections-openstack src_dir: src/opendev.org/openstack/ansible-collections-openstack ref: refs/pull/4134/head resources: {} tenant: oss timeout: 1800 topic: null voting: true