all:
  children:
    cephs:
      hosts:
        instance: null
    computes:
      hosts:
        instance: null
    controllers:
      hosts:
        instance: null
    zuul_unreachable:
      hosts: {}
  hosts:
    instance:
      ansible_connection: ssh
      ansible_host: 199.19.213.60
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      atmosphere_image_prefix: harbor.atmosphere.dev/
      ceph_conf_overrides:
      - option: mon allow pool size one
        section: global
        value: true
      - option: osd crush chooseleaf type
        section: global
        value: 0
      - option: auth allow insecure global id reclaim
        section: mon
        value: false
      ceph_csi_rbd_helm_values:
        provisioner:
          replicaCount: 1
      ceph_fsid: 4837cbf8-4f90-4300-b3f6-726c9b9f89b4
      ceph_osd_devices:
      - /dev/ceph-{{ inventory_hostname_short }}-osd0/data
      - /dev/ceph-{{ inventory_hostname_short }}-osd1/data
      - /dev/ceph-{{ inventory_hostname_short }}-osd2/data
      cilium_helm_values:
        operator:
          replicas: 1
      cluster_issuer_type: self-signed
      csi_driver: local-path-provisioner
      ingress_nginx_helm_values:
        controller:
          config:
            worker-processes: 2
      keystone_helm_values:
        pod:
          replicas:
            api: 1
      kube_vip_address: 172.17.0.100
      kube_vip_interface: '{{ ansible_facts[''default_ipv4''].interface }}'
      kubernetes_hostname: '{{ ansible_facts[''default_ipv4''].address }}'
      molecule_scenario: keycloak
      nodepool:
        az: nova
        cloud: public
        external_id: e4a837c4-69b3-4f61-8927-e852f4262414
        host_id: fe6a549c934f5f67345b1bd07db2b4711c0ee4717d98054273574436
        interface_ip: 199.19.213.60
        label: ubuntu-jammy
        node_properties: {}
        private_ipv4: 199.19.213.60
        private_ipv6: null
        provider: yul1
        public_ipv4: 199.19.213.60
        public_ipv6: 2604:e100:1:0:f816:3eff:fe60:5115
        region: ca-ymq-1
        slot: null
      percona_xtradb_cluster_spec:
        allowUnsafeConfigurations: true
        haproxy:
          size: 1
        pxc:
          size: 1
      zuul_node:
        az: nova
        cloud: public
        external_id: e4a837c4-69b3-4f61-8927-e852f4262414
        host_id: fe6a549c934f5f67345b1bd07db2b4711c0ee4717d98054273574436
        interface_ip: 199.19.213.60
        label: ubuntu-jammy
        node_properties: {}
        private_ipv4: 199.19.213.60
        private_ipv6: null
        provider: yul1
        public_ipv4: 199.19.213.60
        public_ipv6: 2604:e100:1:0:f816:3eff:fe60:5115
        region: ca-ymq-1
        slot: null
        uuid: null
  vars:
    atmosphere_image_prefix: harbor.atmosphere.dev/
    ceph_conf_overrides:
    - option: mon allow pool size one
      section: global
      value: true
    - option: osd crush chooseleaf type
      section: global
      value: 0
    - option: auth allow insecure global id reclaim
      section: mon
      value: false
    ceph_csi_rbd_helm_values:
      provisioner:
        replicaCount: 1
    ceph_fsid: 4837cbf8-4f90-4300-b3f6-726c9b9f89b4
    ceph_osd_devices:
    - /dev/ceph-{{ inventory_hostname_short }}-osd0/data
    - /dev/ceph-{{ inventory_hostname_short }}-osd1/data
    - /dev/ceph-{{ inventory_hostname_short }}-osd2/data
    cilium_helm_values:
      operator:
        replicas: 1
    cluster_issuer_type: self-signed
    csi_driver: local-path-provisioner
    ingress_nginx_helm_values:
      controller:
        config:
          worker-processes: 2
    keystone_helm_values:
      pod:
        replicas:
          api: 1
    kube_vip_address: 172.17.0.100
    kube_vip_interface: '{{ ansible_facts[''default_ipv4''].interface }}'
    kubernetes_hostname: '{{ ansible_facts[''default_ipv4''].address }}'
    molecule_scenario: keycloak
    percona_xtradb_cluster_spec:
      allowUnsafeConfigurations: true
      haproxy:
        size: 1
      pxc:
        size: 1
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: vexxhost/zuul-config/zuul.d/jobs.yaml@main#1>'
      - '<Job molecule explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: vexxhost/zuul-jobs/zuul.d/ansible-jobs.yaml@main#1>'
      - '<Job atmosphere-molecule explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: vexxhost/atmosphere/.zuul.yaml@main#24>'
      - '<Job atmosphere-molecule-keycloak explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: vexxhost/atmosphere/.zuul.yaml@main#275>'
      - '<Job atmosphere-molecule-keycloak explicit: None implied: None source: vexxhost/atmosphere/.zuul.yaml@main#297>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: 012b42a54ebd4058bad84489cd7fc9a1
      build_refs:
      - branch: main
        change: '3835'
        change_message: "[WIP] Simulate PR1 \u2014 pre-install dependencies early
          in CI\n\n- [x] Commit 1: Create `test-playbooks/molecule/pre-install-deps.yml`
          with all 4 dependency categories\n- [x] Commit 1: Update `.zuul.yaml` to
          add new playbook as pre-run before existing `pre.yml`\n- [x] Commit 2: Empty
          out tasks in `test-playbooks/molecule/pre.yml` (remove jq install)\n- [x]
          Commit 2: Remove \"Install dirmngr\" task from `molecule/aio/prepare.yml`\n-
          [x] Commit 2: Make `openssh-server` install conditional in `.github/actions/molecule/action.yaml`\n-
          [x] Commit 2: Replace unconditional Helm removal with version check in `.github/actions/molecule/action.yaml`\n-
          [x] Fix: Use `ansible.builtin.systemd` module instead of shell for enabling
          services\n\n<!-- START COPILOT ORIGINAL PROMPT -->\n\n\n\n<details>\n\n<summary>Original
          prompt</summary>\n\n\n## Goal\n\nSimulate the effect of pre-baking CI dependencies
          into the Nodepool diskimage, so we can measure the time improvement before
          actually modifying the diskimage. This PR should have **two commits**:\n\n###
          Commit 1: \"Simulate PR1 \u2014 pre-install dependencies early in CI\"\n\nAdd
          a new pre-run playbook `test-playbooks/molecule/pre-install-deps.yml` that
          installs all 4 categories of dependencies **before** any other CI work happens.
          Wire it into `.zuul.yaml` as an additional `pre-run` step that runs before
          the existing `test-playbooks/molecule/pre.yml`.\n\nThe new playbook `test-playbooks/molecule/pre-install-deps.yml`
          should:\n\n1. **System packages** \u2014 install all of these in a single
          `apt-get install` call with `update_cache: true`:\n   - `open-iscsi`, `multipath-tools`,
          `sg3-utils`\n   - `openssh-server`, `dirmngr`, `jq`\n   - `gpg`, `gpg-agent`,
          `socat`, `conntrack`, `ipset`, `ethtool`, `ebtables`\n   - Then enable `iscsid`
          and `multipathd` services via `systemctl enable`\n\n2. **Helm binary** \u2014
          download and install Helm 3.14.4 to `/usr/local/bin/helm`:\n   ```\n   curl
          -fsSL https://get.helm.sh/helm-v3.14.4-linux-amd64.tar.gz | tar -xz -C /usr/local/bin
          --strip-components=1 linux-amd64/helm\n   ```\n\n3. **Go toolchain** \u2014
          download and install Go 1.24.2 to `/usr/local`:\n   ```\n   curl -fsSL https://go.dev/dl/go1.24.2.linux-amd64.tar.gz
          | tar -xz -C /usr/local\n   ```\n\n4. **Python venv with openstacksdk**
          \u2014 create a venv at `/opt/atmosphere-venv` and install `openstacksdk`
          and `python-openstackclient`:\n   ```\n   python3 -m venv /opt/atmosphere-venv\n
          \  /opt/atmosphere-venv/bin/pip install --no-cache-dir openstacksdk python-openstackclient\n
          \  ```\n   (Make sure `python3-venv` and `python3-pip` are installed via
          apt first \u2014 add them to the system packages list above.)\n\nThe playbook
          should target `hosts: all` with `become: true`. Use `ansible.builtin.apt`
          for packages, `ansible.builtin.shell` or `ansible.builtin.command` for the
          binary downloads, and `ansible.builtin.pip` for the Python packages. Add
          the `SPDX-License-Identifier: Apache-2.0` copyright header matching the
          style of the existing `test-playbooks/molecule/pre.yml`.\n\nIn `.zuul.yaml`,
          add the new playbook as a pre-run **before** the existing `pre-run: test-playbooks/molecule/pre.yml`
          in the `atmosphere-molecule` job definition. The `.zuul.yaml` job currently
          has:\n```yaml\npre-run: test-playbooks/molecule/pre.yml\n```\nChange it
          to a list:\n```yaml\npre-run:\n  - test-playbooks/molecule/pre-install-deps.yml\n
          \ - test-playbooks/molecule/pre.yml\n```\n\n### Commit 2: \"Simulate PR2
          \u2014 remove redundant installs\"\n\nNow that the dependencies are pre-installed,
          remove the redundant install steps:\n\n1. **`test-playbooks/molecule/pre.yml`**
          \u2014 Remove the \"Install jq for log collection\" task entirely (jq is
          now pre-installed). The file should still exist as a valid playbook but
          with an empty tasks list:\n   ```yaml\n   # Copyright (c) 2025 VEXXHOST,
          Inc.\n   # SPDX-License-Identifier: Apache-2.0\n\n   - hosts: all\n     become:
          true\n     tasks: []\n   ```\n\n2. **`molecule/aio/prepare.yml`** \u2014
          Remove only the \"Install dirmngr for GPG keyserver operations\" task (lines
          19-22). Keep everything else (hostname workaround, snapd purge, networking,
          ceph, neutron) exactly as-is.\n\n3. **`.github/actions/molecule/action.yaml`**
          \u2014 Make two changes:\n   - Replace the `openssh-server` install step
          (lines 25-27) with a conditional that skips if already installed:\n     ```yaml\n
          \    - shell: bash\n       run: |\n         if ! dpkg -s openssh-server
          &>/dev/null; then\n           sudo apt-get update\n           sudo apt-get
          install -y openssh-server\n         fi\n     ```\n   - Replace the unconditional
          Helm removal (line 61) with a version check:\n     ```yaml\n     - shell:
          bash\n       run: |\n         if ! helm version --short 2>/dev/null | grep
          -q \"v3.14\"; then\n           rm -rfv /usr/local/bin/helm || true\n         fi\n
          \    ```\n\n## Important Notes\n\n- Do NOT change any Ansible roles, playbooks
          under `roles/`, `playbooks/`, or the `molecule/aio/converge.yml`\n- Do NOT
          change any Helm charts or values files\n- The purpose is purely to measure
          timing improvement in CI \u2014 this simulates what a diskimage pre-bake
          would achieve\n\n\nThe following is the prior conversation context from
          the user's chat exploration (may be truncated):\n\nUser: what's my Remaining
          reqs\n\nAssistant: \n\nI don't have access to check your remaining API requests,
          rate limits, or usage quotas. That information isn't available through any
          of the tools I have.\n\nIf you're asking about **GitHub API rate limits**,
          you can check them yourself:\n\n```bash\ncurl -H \"Authorization: Bearer
          YOUR_TOKEN\" https://api.github.com/rate_limit\n```\n\nOr if you're asking
          about **Copilot Chat usage limits**, you can check your plan details at
          **github.com/settings/copilot**.\n\nWhat specifically are you trying to
          check?\n\nUser: analysis time in https://zuul.oss.vexxhost.dev/stream/19c9e1d14aa648ae8e0322607a286ec4
          like https://github.\ncom/vexxhost/atmosphere/pull/3818#issuecomment-4245094888
          \n...\n\n</details>\n\n\n\n<!-- START COPILOT CODING AGENT SUFFIX -->\n\n*This
          pull request was created from Copilot chat.*\n>"
        change_url: https://github.com/vexxhost/atmosphere/pull/3835
        commit_id: 5617670d32f62a6c5ed7ef8657ead0b4cbe40457
        patchset: 5617670d32f62a6c5ed7ef8657ead0b4cbe40457
        project:
          canonical_hostname: github.com
          canonical_name: github.com/vexxhost/atmosphere
          name: vexxhost/atmosphere
          short_name: atmosphere
          src_dir: src/github.com/vexxhost/atmosphere
        src_dir: src/github.com/vexxhost/atmosphere
        topic: null
      buildset: 5ec9a675f2a04355a6fe3635153283ff
      buildset_refs:
      - branch: main
        change: '3835'
        change_message: "[WIP] Simulate PR1 \u2014 pre-install dependencies early
          in CI\n\n- [x] Commit 1: Create `test-playbooks/molecule/pre-install-deps.yml`
          with all 4 dependency categories\n- [x] Commit 1: Update `.zuul.yaml` to
          add new playbook as pre-run before existing `pre.yml`\n- [x] Commit 2: Empty
          out tasks in `test-playbooks/molecule/pre.yml` (remove jq install)\n- [x]
          Commit 2: Remove \"Install dirmngr\" task from `molecule/aio/prepare.yml`\n-
          [x] Commit 2: Make `openssh-server` install conditional in `.github/actions/molecule/action.yaml`\n-
          [x] Commit 2: Replace unconditional Helm removal with version check in `.github/actions/molecule/action.yaml`\n-
          [x] Fix: Use `ansible.builtin.systemd` module instead of shell for enabling
          services\n\n<!-- START COPILOT ORIGINAL PROMPT -->\n\n\n\n<details>\n\n<summary>Original
          prompt</summary>\n\n\n## Goal\n\nSimulate the effect of pre-baking CI dependencies
          into the Nodepool diskimage, so we can measure the time improvement before
          actually modifying the diskimage. This PR should have **two commits**:\n\n###
          Commit 1: \"Simulate PR1 \u2014 pre-install dependencies early in CI\"\n\nAdd
          a new pre-run playbook `test-playbooks/molecule/pre-install-deps.yml` that
          installs all 4 categories of dependencies **before** any other CI work happens.
          Wire it into `.zuul.yaml` as an additional `pre-run` step that runs before
          the existing `test-playbooks/molecule/pre.yml`.\n\nThe new playbook `test-playbooks/molecule/pre-install-deps.yml`
          should:\n\n1. **System packages** \u2014 install all of these in a single
          `apt-get install` call with `update_cache: true`:\n   - `open-iscsi`, `multipath-tools`,
          `sg3-utils`\n   - `openssh-server`, `dirmngr`, `jq`\n   - `gpg`, `gpg-agent`,
          `socat`, `conntrack`, `ipset`, `ethtool`, `ebtables`\n   - Then enable `iscsid`
          and `multipathd` services via `systemctl enable`\n\n2. **Helm binary** \u2014
          download and install Helm 3.14.4 to `/usr/local/bin/helm`:\n   ```\n   curl
          -fsSL https://get.helm.sh/helm-v3.14.4-linux-amd64.tar.gz | tar -xz -C /usr/local/bin
          --strip-components=1 linux-amd64/helm\n   ```\n\n3. **Go toolchain** \u2014
          download and install Go 1.24.2 to `/usr/local`:\n   ```\n   curl -fsSL https://go.dev/dl/go1.24.2.linux-amd64.tar.gz
          | tar -xz -C /usr/local\n   ```\n\n4. **Python venv with openstacksdk**
          \u2014 create a venv at `/opt/atmosphere-venv` and install `openstacksdk`
          and `python-openstackclient`:\n   ```\n   python3 -m venv /opt/atmosphere-venv\n
          \  /opt/atmosphere-venv/bin/pip install --no-cache-dir openstacksdk python-openstackclient\n
          \  ```\n   (Make sure `python3-venv` and `python3-pip` are installed via
          apt first \u2014 add them to the system packages list above.)\n\nThe playbook
          should target `hosts: all` with `become: true`. Use `ansible.builtin.apt`
          for packages, `ansible.builtin.shell` or `ansible.builtin.command` for the
          binary downloads, and `ansible.builtin.pip` for the Python packages. Add
          the `SPDX-License-Identifier: Apache-2.0` copyright header matching the
          style of the existing `test-playbooks/molecule/pre.yml`.\n\nIn `.zuul.yaml`,
          add the new playbook as a pre-run **before** the existing `pre-run: test-playbooks/molecule/pre.yml`
          in the `atmosphere-molecule` job definition. The `.zuul.yaml` job currently
          has:\n```yaml\npre-run: test-playbooks/molecule/pre.yml\n```\nChange it
          to a list:\n```yaml\npre-run:\n  - test-playbooks/molecule/pre-install-deps.yml\n
          \ - test-playbooks/molecule/pre.yml\n```\n\n### Commit 2: \"Simulate PR2
          \u2014 remove redundant installs\"\n\nNow that the dependencies are pre-installed,
          remove the redundant install steps:\n\n1. **`test-playbooks/molecule/pre.yml`**
          \u2014 Remove the \"Install jq for log collection\" task entirely (jq is
          now pre-installed). The file should still exist as a valid playbook but
          with an empty tasks list:\n   ```yaml\n   # Copyright (c) 2025 VEXXHOST,
          Inc.\n   # SPDX-License-Identifier: Apache-2.0\n\n   - hosts: all\n     become:
          true\n     tasks: []\n   ```\n\n2. **`molecule/aio/prepare.yml`** \u2014
          Remove only the \"Install dirmngr for GPG keyserver operations\" task (lines
          19-22). Keep everything else (hostname workaround, snapd purge, networking,
          ceph, neutron) exactly as-is.\n\n3. **`.github/actions/molecule/action.yaml`**
          \u2014 Make two changes:\n   - Replace the `openssh-server` install step
          (lines 25-27) with a conditional that skips if already installed:\n     ```yaml\n
          \    - shell: bash\n       run: |\n         if ! dpkg -s openssh-server
          &>/dev/null; then\n           sudo apt-get update\n           sudo apt-get
          install -y openssh-server\n         fi\n     ```\n   - Replace the unconditional
          Helm removal (line 61) with a version check:\n     ```yaml\n     - shell:
          bash\n       run: |\n         if ! helm version --short 2>/dev/null | grep
          -q \"v3.14\"; then\n           rm -rfv /usr/local/bin/helm || true\n         fi\n
          \    ```\n\n## Important Notes\n\n- Do NOT change any Ansible roles, playbooks
          under `roles/`, `playbooks/`, or the `molecule/aio/converge.yml`\n- Do NOT
          change any Helm charts or values files\n- The purpose is purely to measure
          timing improvement in CI \u2014 this simulates what a diskimage pre-bake
          would achieve\n\n\nThe following is the prior conversation context from
          the user's chat exploration (may be truncated):\n\nUser: what's my Remaining
          reqs\n\nAssistant: \n\nI don't have access to check your remaining API requests,
          rate limits, or usage quotas. That information isn't available through any
          of the tools I have.\n\nIf you're asking about **GitHub API rate limits**,
          you can check them yourself:\n\n```bash\ncurl -H \"Authorization: Bearer
          YOUR_TOKEN\" https://api.github.com/rate_limit\n```\n\nOr if you're asking
          about **Copilot Chat usage limits**, you can check your plan details at
          **github.com/settings/copilot**.\n\nWhat specifically are you trying to
          check?\n\nUser: analysis time in https://zuul.oss.vexxhost.dev/stream/19c9e1d14aa648ae8e0322607a286ec4
          like https://github.\ncom/vexxhost/atmosphere/pull/3818#issuecomment-4245094888
          \n...\n\n</details>\n\n\n\n<!-- START COPILOT CODING AGENT SUFFIX -->\n\n*This
          pull request was created from Copilot chat.*\n>"
        change_url: https://github.com/vexxhost/atmosphere/pull/3835
        commit_id: 5617670d32f62a6c5ed7ef8657ead0b4cbe40457
        patchset: 5617670d32f62a6c5ed7ef8657ead0b4cbe40457
        project:
          canonical_hostname: github.com
          canonical_name: github.com/vexxhost/atmosphere
          name: vexxhost/atmosphere
          short_name: atmosphere
          src_dir: src/github.com/vexxhost/atmosphere
        src_dir: src/github.com/vexxhost/atmosphere
        topic: null
      change: '3835'
      change_message: "[WIP] Simulate PR1 \u2014 pre-install dependencies early in
        CI\n\n- [x] Commit 1: Create `test-playbooks/molecule/pre-install-deps.yml`
        with all 4 dependency categories\n- [x] Commit 1: Update `.zuul.yaml` to add
        new playbook as pre-run before existing `pre.yml`\n- [x] Commit 2: Empty out
        tasks in `test-playbooks/molecule/pre.yml` (remove jq install)\n- [x] Commit
        2: Remove \"Install dirmngr\" task from `molecule/aio/prepare.yml`\n- [x]
        Commit 2: Make `openssh-server` install conditional in `.github/actions/molecule/action.yaml`\n-
        [x] Commit 2: Replace unconditional Helm removal with version check in `.github/actions/molecule/action.yaml`\n-
        [x] Fix: Use `ansible.builtin.systemd` module instead of shell for enabling
        services\n\n<!-- START COPILOT ORIGINAL PROMPT -->\n\n\n\n<details>\n\n<summary>Original
        prompt</summary>\n\n\n## Goal\n\nSimulate the effect of pre-baking CI dependencies
        into the Nodepool diskimage, so we can measure the time improvement before
        actually modifying the diskimage. This PR should have **two commits**:\n\n###
        Commit 1: \"Simulate PR1 \u2014 pre-install dependencies early in CI\"\n\nAdd
        a new pre-run playbook `test-playbooks/molecule/pre-install-deps.yml` that
        installs all 4 categories of dependencies **before** any other CI work happens.
        Wire it into `.zuul.yaml` as an additional `pre-run` step that runs before
        the existing `test-playbooks/molecule/pre.yml`.\n\nThe new playbook `test-playbooks/molecule/pre-install-deps.yml`
        should:\n\n1. **System packages** \u2014 install all of these in a single
        `apt-get install` call with `update_cache: true`:\n   - `open-iscsi`, `multipath-tools`,
        `sg3-utils`\n   - `openssh-server`, `dirmngr`, `jq`\n   - `gpg`, `gpg-agent`,
        `socat`, `conntrack`, `ipset`, `ethtool`, `ebtables`\n   - Then enable `iscsid`
        and `multipathd` services via `systemctl enable`\n\n2. **Helm binary** \u2014
        download and install Helm 3.14.4 to `/usr/local/bin/helm`:\n   ```\n   curl
        -fsSL https://get.helm.sh/helm-v3.14.4-linux-amd64.tar.gz | tar -xz -C /usr/local/bin
        --strip-components=1 linux-amd64/helm\n   ```\n\n3. **Go toolchain** \u2014
        download and install Go 1.24.2 to `/usr/local`:\n   ```\n   curl -fsSL https://go.dev/dl/go1.24.2.linux-amd64.tar.gz
        | tar -xz -C /usr/local\n   ```\n\n4. **Python venv with openstacksdk** \u2014
        create a venv at `/opt/atmosphere-venv` and install `openstacksdk` and `python-openstackclient`:\n
        \  ```\n   python3 -m venv /opt/atmosphere-venv\n   /opt/atmosphere-venv/bin/pip
        install --no-cache-dir openstacksdk python-openstackclient\n   ```\n   (Make
        sure `python3-venv` and `python3-pip` are installed via apt first \u2014 add
        them to the system packages list above.)\n\nThe playbook should target `hosts:
        all` with `become: true`. Use `ansible.builtin.apt` for packages, `ansible.builtin.shell`
        or `ansible.builtin.command` for the binary downloads, and `ansible.builtin.pip`
        for the Python packages. Add the `SPDX-License-Identifier: Apache-2.0` copyright
        header matching the style of the existing `test-playbooks/molecule/pre.yml`.\n\nIn
        `.zuul.yaml`, add the new playbook as a pre-run **before** the existing `pre-run:
        test-playbooks/molecule/pre.yml` in the `atmosphere-molecule` job definition.
        The `.zuul.yaml` job currently has:\n```yaml\npre-run: test-playbooks/molecule/pre.yml\n```\nChange
        it to a list:\n```yaml\npre-run:\n  - test-playbooks/molecule/pre-install-deps.yml\n
        \ - test-playbooks/molecule/pre.yml\n```\n\n### Commit 2: \"Simulate PR2 \u2014
        remove redundant installs\"\n\nNow that the dependencies are pre-installed,
        remove the redundant install steps:\n\n1. **`test-playbooks/molecule/pre.yml`**
        \u2014 Remove the \"Install jq for log collection\" task entirely (jq is now
        pre-installed). The file should still exist as a valid playbook but with an
        empty tasks list:\n   ```yaml\n   # Copyright (c) 2025 VEXXHOST, Inc.\n   #
        SPDX-License-Identifier: Apache-2.0\n\n   - hosts: all\n     become: true\n
        \    tasks: []\n   ```\n\n2. **`molecule/aio/prepare.yml`** \u2014 Remove
        only the \"Install dirmngr for GPG keyserver operations\" task (lines 19-22).
        Keep everything else (hostname workaround, snapd purge, networking, ceph,
        neutron) exactly as-is.\n\n3. **`.github/actions/molecule/action.yaml`** \u2014
        Make two changes:\n   - Replace the `openssh-server` install step (lines 25-27)
        with a conditional that skips if already installed:\n     ```yaml\n     -
        shell: bash\n       run: |\n         if ! dpkg -s openssh-server &>/dev/null;
        then\n           sudo apt-get update\n           sudo apt-get install -y openssh-server\n
        \        fi\n     ```\n   - Replace the unconditional Helm removal (line 61)
        with a version check:\n     ```yaml\n     - shell: bash\n       run: |\n         if
        ! helm version --short 2>/dev/null | grep -q \"v3.14\"; then\n           rm
        -rfv /usr/local/bin/helm || true\n         fi\n     ```\n\n## Important Notes\n\n-
        Do NOT change any Ansible roles, playbooks under `roles/`, `playbooks/`, or
        the `molecule/aio/converge.yml`\n- Do NOT change any Helm charts or values
        files\n- The purpose is purely to measure timing improvement in CI \u2014
        this simulates what a diskimage pre-bake would achieve\n\n\nThe following
        is the prior conversation context from the user's chat exploration (may be
        truncated):\n\nUser: what's my Remaining reqs\n\nAssistant: \n\nI don't have
        access to check your remaining API requests, rate limits, or usage quotas.
        That information isn't available through any of the tools I have.\n\nIf you're
        asking about **GitHub API rate limits**, you can check them yourself:\n\n```bash\ncurl
        -H \"Authorization: Bearer YOUR_TOKEN\" https://api.github.com/rate_limit\n```\n\nOr
        if you're asking about **Copilot Chat usage limits**, you can check your plan
        details at **github.com/settings/copilot**.\n\nWhat specifically are you trying
        to check?\n\nUser: analysis time in https://zuul.oss.vexxhost.dev/stream/19c9e1d14aa648ae8e0322607a286ec4
        like https://github.\ncom/vexxhost/atmosphere/pull/3818#issuecomment-4245094888
        \n...\n\n</details>\n\n\n\n<!-- START COPILOT CODING AGENT SUFFIX -->\n\n*This
        pull request was created from Copilot chat.*\n>"
      change_url: https://github.com/vexxhost/atmosphere/pull/3835
      child_jobs: []
      commit_id: 5617670d32f62a6c5ed7ef8657ead0b4cbe40457
      event_id: 445c0150-389c-11f1-9bf0-bf117ef4760a
      executor:
        hostname: 0a8996d2b663
        inventory_file: /var/lib/zuul/builds/012b42a54ebd4058bad84489cd7fc9a1/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/012b42a54ebd4058bad84489cd7fc9a1/work/logs
        result_data_file: /var/lib/zuul/builds/012b42a54ebd4058bad84489cd7fc9a1/work/results.json
        src_root: /var/lib/zuul/builds/012b42a54ebd4058bad84489cd7fc9a1/work/src
        work_root: /var/lib/zuul/builds/012b42a54ebd4058bad84489cd7fc9a1/work
      include_vars: []
      items:
      - branch: main
        change: '3835'
        change_message: "[WIP] Simulate PR1 \u2014 pre-install dependencies early
          in CI\n\n- [x] Commit 1: Create `test-playbooks/molecule/pre-install-deps.yml`
          with all 4 dependency categories\n- [x] Commit 1: Update `.zuul.yaml` to
          add new playbook as pre-run before existing `pre.yml`\n- [x] Commit 2: Empty
          out tasks in `test-playbooks/molecule/pre.yml` (remove jq install)\n- [x]
          Commit 2: Remove \"Install dirmngr\" task from `molecule/aio/prepare.yml`\n-
          [x] Commit 2: Make `openssh-server` install conditional in `.github/actions/molecule/action.yaml`\n-
          [x] Commit 2: Replace unconditional Helm removal with version check in `.github/actions/molecule/action.yaml`\n-
          [x] Fix: Use `ansible.builtin.systemd` module instead of shell for enabling
          services\n\n<!-- START COPILOT ORIGINAL PROMPT -->\n\n\n\n<details>\n\n<summary>Original
          prompt</summary>\n\n\n## Goal\n\nSimulate the effect of pre-baking CI dependencies
          into the Nodepool diskimage, so we can measure the time improvement before
          actually modifying the diskimage. This PR should have **two commits**:\n\n###
          Commit 1: \"Simulate PR1 \u2014 pre-install dependencies early in CI\"\n\nAdd
          a new pre-run playbook `test-playbooks/molecule/pre-install-deps.yml` that
          installs all 4 categories of dependencies **before** any other CI work happens.
          Wire it into `.zuul.yaml` as an additional `pre-run` step that runs before
          the existing `test-playbooks/molecule/pre.yml`.\n\nThe new playbook `test-playbooks/molecule/pre-install-deps.yml`
          should:\n\n1. **System packages** \u2014 install all of these in a single
          `apt-get install` call with `update_cache: true`:\n   - `open-iscsi`, `multipath-tools`,
          `sg3-utils`\n   - `openssh-server`, `dirmngr`, `jq`\n   - `gpg`, `gpg-agent`,
          `socat`, `conntrack`, `ipset`, `ethtool`, `ebtables`\n   - Then enable `iscsid`
          and `multipathd` services via `systemctl enable`\n\n2. **Helm binary** \u2014
          download and install Helm 3.14.4 to `/usr/local/bin/helm`:\n   ```\n   curl
          -fsSL https://get.helm.sh/helm-v3.14.4-linux-amd64.tar.gz | tar -xz -C /usr/local/bin
          --strip-components=1 linux-amd64/helm\n   ```\n\n3. **Go toolchain** \u2014
          download and install Go 1.24.2 to `/usr/local`:\n   ```\n   curl -fsSL https://go.dev/dl/go1.24.2.linux-amd64.tar.gz
          | tar -xz -C /usr/local\n   ```\n\n4. **Python venv with openstacksdk**
          \u2014 create a venv at `/opt/atmosphere-venv` and install `openstacksdk`
          and `python-openstackclient`:\n   ```\n   python3 -m venv /opt/atmosphere-venv\n
          \  /opt/atmosphere-venv/bin/pip install --no-cache-dir openstacksdk python-openstackclient\n
          \  ```\n   (Make sure `python3-venv` and `python3-pip` are installed via
          apt first \u2014 add them to the system packages list above.)\n\nThe playbook
          should target `hosts: all` with `become: true`. Use `ansible.builtin.apt`
          for packages, `ansible.builtin.shell` or `ansible.builtin.command` for the
          binary downloads, and `ansible.builtin.pip` for the Python packages. Add
          the `SPDX-License-Identifier: Apache-2.0` copyright header matching the
          style of the existing `test-playbooks/molecule/pre.yml`.\n\nIn `.zuul.yaml`,
          add the new playbook as a pre-run **before** the existing `pre-run: test-playbooks/molecule/pre.yml`
          in the `atmosphere-molecule` job definition. The `.zuul.yaml` job currently
          has:\n```yaml\npre-run: test-playbooks/molecule/pre.yml\n```\nChange it
          to a list:\n```yaml\npre-run:\n  - test-playbooks/molecule/pre-install-deps.yml\n
          \ - test-playbooks/molecule/pre.yml\n```\n\n### Commit 2: \"Simulate PR2
          \u2014 remove redundant installs\"\n\nNow that the dependencies are pre-installed,
          remove the redundant install steps:\n\n1. **`test-playbooks/molecule/pre.yml`**
          \u2014 Remove the \"Install jq for log collection\" task entirely (jq is
          now pre-installed). The file should still exist as a valid playbook but
          with an empty tasks list:\n   ```yaml\n   # Copyright (c) 2025 VEXXHOST,
          Inc.\n   # SPDX-License-Identifier: Apache-2.0\n\n   - hosts: all\n     become:
          true\n     tasks: []\n   ```\n\n2. **`molecule/aio/prepare.yml`** \u2014
          Remove only the \"Install dirmngr for GPG keyserver operations\" task (lines
          19-22). Keep everything else (hostname workaround, snapd purge, networking,
          ceph, neutron) exactly as-is.\n\n3. **`.github/actions/molecule/action.yaml`**
          \u2014 Make two changes:\n   - Replace the `openssh-server` install step
          (lines 25-27) with a conditional that skips if already installed:\n     ```yaml\n
          \    - shell: bash\n       run: |\n         if ! dpkg -s openssh-server
          &>/dev/null; then\n           sudo apt-get update\n           sudo apt-get
          install -y openssh-server\n         fi\n     ```\n   - Replace the unconditional
          Helm removal (line 61) with a version check:\n     ```yaml\n     - shell:
          bash\n       run: |\n         if ! helm version --short 2>/dev/null | grep
          -q \"v3.14\"; then\n           rm -rfv /usr/local/bin/helm || true\n         fi\n
          \    ```\n\n## Important Notes\n\n- Do NOT change any Ansible roles, playbooks
          under `roles/`, `playbooks/`, or the `molecule/aio/converge.yml`\n- Do NOT
          change any Helm charts or values files\n- The purpose is purely to measure
          timing improvement in CI \u2014 this simulates what a diskimage pre-bake
          would achieve\n\n\nThe following is the prior conversation context from
          the user's chat exploration (may be truncated):\n\nUser: what's my Remaining
          reqs\n\nAssistant: \n\nI don't have access to check your remaining API requests,
          rate limits, or usage quotas. That information isn't available through any
          of the tools I have.\n\nIf you're asking about **GitHub API rate limits**,
          you can check them yourself:\n\n```bash\ncurl -H \"Authorization: Bearer
          YOUR_TOKEN\" https://api.github.com/rate_limit\n```\n\nOr if you're asking
          about **Copilot Chat usage limits**, you can check your plan details at
          **github.com/settings/copilot**.\n\nWhat specifically are you trying to
          check?\n\nUser: analysis time in https://zuul.oss.vexxhost.dev/stream/19c9e1d14aa648ae8e0322607a286ec4
          like https://github.\ncom/vexxhost/atmosphere/pull/3818#issuecomment-4245094888
          \n...\n\n</details>\n\n\n\n<!-- START COPILOT CODING AGENT SUFFIX -->\n\n*This
          pull request was created from Copilot chat.*\n>"
        change_url: https://github.com/vexxhost/atmosphere/pull/3835
        commit_id: 5617670d32f62a6c5ed7ef8657ead0b4cbe40457
        patchset: 5617670d32f62a6c5ed7ef8657ead0b4cbe40457
        project:
          canonical_hostname: github.com
          canonical_name: github.com/vexxhost/atmosphere
          name: vexxhost/atmosphere
          short_name: atmosphere
          src_dir: src/github.com/vexxhost/atmosphere
        topic: null
      job: atmosphere-molecule-keycloak
      jobtags: []
      max_attempts: 3
      message: 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
      patchset: 5617670d32f62a6c5ed7ef8657ead0b4cbe40457
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/vexxhost/zuul-config:
            canonical_name: github.com/vexxhost/zuul-config
            checkout: main
            commit: 298983cd1253e6833abdb49d87d912527e0e6597
          trusted/project_1/opendev.org/zuul/zuul-jobs:
            canonical_name: opendev.org/zuul/zuul-jobs
            checkout: master
            commit: fc4af6d44718d2e648cf6396f3e96bb46a55117a
          trusted/project_2/github.com/vexxhost/zuul-jobs:
            canonical_name: github.com/vexxhost/zuul-jobs
            checkout: main
            commit: a6e68243e02ef030ce5e75f8b67630880c475f33
          untrusted/project_0/github.com/vexxhost/zuul-jobs:
            canonical_name: github.com/vexxhost/zuul-jobs
            checkout: main
            commit: a6e68243e02ef030ce5e75f8b67630880c475f33
          untrusted/project_1/github.com/vexxhost/zuul-config:
            canonical_name: github.com/vexxhost/zuul-config
            checkout: main
            commit: 298983cd1253e6833abdb49d87d912527e0e6597
          untrusted/project_2/opendev.org/zuul/zuul-jobs:
            canonical_name: opendev.org/zuul/zuul-jobs
            checkout: master
            commit: fc4af6d44718d2e648cf6396f3e96bb46a55117a
          untrusted/project_3/github.com/vexxhost/atmosphere:
            canonical_name: github.com/vexxhost/atmosphere
            checkout: main
            commit: 5617670d32f62a6c5ed7ef8657ead0b4cbe40457
          untrusted/project_4/opendev.org/openstack/openstack-helm:
            canonical_name: opendev.org/openstack/openstack-helm
            checkout: master
            commit: 1ad73cc3ea68948edf2574a6e0f71ff3c90096ef
        playbooks:
        - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/molecule/run.yaml
          roles:
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_1/zuul-jobs
            link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs
            role_path: ansible/playbook_0/role_1/zuul-jobs/roles
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_0/role_2/zuul-jobs
            link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs
            role_path: ansible/playbook_0/role_2/zuul-jobs/roles
        post_playbooks:
        - path: untrusted/project_3/github.com/vexxhost/atmosphere/test-playbooks/molecule/post.yml
          roles:
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/post_playbook_0/role_0/atmosphere
            link_target: untrusted/project_3/github.com/vexxhost/atmosphere
            role_path: ansible/post_playbook_0/role_0/atmosphere/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/post_playbook_0/role_1/openstack-helm
            link_target: untrusted/project_4/opendev.org/openstack/openstack-helm
            role_path: ansible/post_playbook_0/role_1/openstack-helm/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/post_playbook_0/role_3/zuul-jobs
            link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs
            role_path: ansible/post_playbook_0/role_3/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/post_playbook_0/role_4/zuul-jobs
            link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs
            role_path: ansible/post_playbook_0/role_4/zuul-jobs/roles
        - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post.yaml
          roles:
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/post_playbook_1/role_1/zuul-jobs
            link_target: trusted/project_1/opendev.org/zuul/zuul-jobs
            role_path: ansible/post_playbook_1/role_1/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/post_playbook_1/role_2/zuul-jobs
            link_target: trusted/project_2/github.com/vexxhost/zuul-jobs
            role_path: ansible/post_playbook_1/role_2/zuul-jobs/roles
        - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post-logs.yaml
          roles:
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/post_playbook_2/role_1/zuul-jobs
            link_target: trusted/project_1/opendev.org/zuul/zuul-jobs
            role_path: ansible/post_playbook_2/role_1/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/post_playbook_2/role_2/zuul-jobs
            link_target: trusted/project_2/github.com/vexxhost/zuul-jobs
            role_path: ansible/post_playbook_2/role_2/zuul-jobs/roles
        pre_playbooks:
        - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/pre.yaml
          roles:
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/pre_playbook_0/role_1/zuul-jobs
            link_target: trusted/project_1/opendev.org/zuul/zuul-jobs
            role_path: ansible/pre_playbook_0/role_1/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/pre_playbook_0/role_2/zuul-jobs
            link_target: trusted/project_2/github.com/vexxhost/zuul-jobs
            role_path: ansible/pre_playbook_0/role_2/zuul-jobs/roles
        - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/molecule/pre.yaml
          roles:
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/pre_playbook_1/role_1/zuul-jobs
            link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs
            role_path: ansible/pre_playbook_1/role_1/zuul-jobs/roles
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/pre_playbook_1/role_2/zuul-jobs
            link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs
            role_path: ansible/pre_playbook_1/role_2/zuul-jobs/roles
        - path: untrusted/project_3/github.com/vexxhost/atmosphere/test-playbooks/molecule/pre-install-deps.yml
          roles:
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/pre_playbook_2/role_0/atmosphere
            link_target: untrusted/project_3/github.com/vexxhost/atmosphere
            role_path: ansible/pre_playbook_2/role_0/atmosphere/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/pre_playbook_2/role_1/openstack-helm
            link_target: untrusted/project_4/opendev.org/openstack/openstack-helm
            role_path: ansible/pre_playbook_2/role_1/openstack-helm/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/pre_playbook_2/role_3/zuul-jobs
            link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs
            role_path: ansible/pre_playbook_2/role_3/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/pre_playbook_2/role_4/zuul-jobs
            link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs
            role_path: ansible/pre_playbook_2/role_4/zuul-jobs/roles
        - path: untrusted/project_3/github.com/vexxhost/atmosphere/test-playbooks/molecule/pre.yml
          roles:
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/pre_playbook_3/role_0/atmosphere
            link_target: untrusted/project_3/github.com/vexxhost/atmosphere
            role_path: ansible/pre_playbook_3/role_0/atmosphere/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/pre_playbook_3/role_1/openstack-helm
            link_target: untrusted/project_4/opendev.org/openstack/openstack-helm
            role_path: ansible/pre_playbook_3/role_1/openstack-helm/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/pre_playbook_3/role_3/zuul-jobs
            link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs
            role_path: ansible/pre_playbook_3/role_3/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/pre_playbook_3/role_4/zuul-jobs
            link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs
            role_path: ansible/pre_playbook_3/role_4/zuul-jobs/roles
      post_review: false
      post_timeout: null
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/vexxhost/atmosphere
        name: vexxhost/atmosphere
        short_name: atmosphere
        src_dir: src/github.com/vexxhost/atmosphere
      projects:
        github.com/vexxhost/atmosphere:
          canonical_hostname: github.com
          canonical_name: github.com/vexxhost/atmosphere
          checkout: main
          checkout_description: zuul branch
          commit: 5617670d32f62a6c5ed7ef8657ead0b4cbe40457
          name: vexxhost/atmosphere
          required: false
          short_name: atmosphere
          src_dir: src/github.com/vexxhost/atmosphere
      ref: refs/pull/3835/head
      resources: {}
      tenant: oss
      timeout: 1800
      topic: null
      voting: true
