[
{
"branch": "main",
"index": "0",
"phase": "pre",
"playbook": "github.com/vexxhost/zuul-config/playbooks/base/pre.yaml",
"plays": [
{
"play": {
"duration": {
"end": "2026-08-31T17:52:46.247197Z",
"start": "2026-08-31T17:52:43.846928Z"
},
"id": "0242ac17-0010-7c6a-c139-000000000002",
"name": "localhost"
},
"tasks": [
{
"hosts": {
"localhost": {
"action": "gather_facts",
"ansible_facts": {
"ansible_apparmor": {
"status": "disabled"
},
"ansible_architecture": "x86_64",
"ansible_bios_date": "NA",
"ansible_bios_vendor": "NA",
"ansible_bios_version": "NA",
"ansible_board_asset_tag": "NA",
"ansible_board_name": "NA",
"ansible_board_serial": "NA",
"ansible_board_vendor": "NA",
"ansible_board_version": "NA",
"ansible_chassis_asset_tag": "NA",
"ansible_chassis_serial": "NA",
"ansible_chassis_vendor": "NA",
"ansible_chassis_version": "NA",
"ansible_cmdline": {
"BOOT_IMAGE": "/boot/vmlinuz-5.15.0-130-generic",
"console": "ttyS0",
"ro": true,
"root": "UUID=5a569d86-b935-46dd-ae79-7a72a25b6a4c"
},
"ansible_date_time": {
"date": "2026-08-31",
"day": "31",
"epoch": "1788198764",
"epoch_int": "1788198764",
"hour": "17",
"iso8601": "2026-08-31T17:52:44Z",
"iso8601_basic": "20260831T175244410833",
"iso8601_basic_short": "20260831T175244",
"iso8601_micro": "2026-08-31T17:52:44.410833Z",
"minute": "52",
"month": "08",
"second": "44",
"time": "17:52:44",
"tz": "UTC",
"tz_dst": "UTC",
"tz_offset": "+0000",
"weekday": "Monday",
"weekday_number": "1",
"weeknumber": "35",
"year": "2026"
},
"ansible_devices": {},
"ansible_distribution": "Debian",
"ansible_distribution_major_version": "12",
"ansible_distribution_release": "bookworm",
"ansible_distribution_version": "12",
"ansible_dns": {
"nameservers": [
"127.0.0.11"
],
"options": {
"edns0": true,
"ndots": "0",
"trust-ad": true
},
"search": [
"openstacklocal"
]
},
"ansible_domain": "",
"ansible_effective_group_id": 0,
"ansible_effective_user_id": 0,
"ansible_env": {
"ANSIBLE_CONFIG": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/ansible/pre_playbook_0/ansible.cfg",
"DEBIAN_FRONTEND": "noninteractive",
"GPG_KEY": "A035C8C19219BA821ECEA86B64E628F8D684696D",
"HOME": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work",
"HOSTNAME": "2d72f0692154",
"KUBECONFIG": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/kube/config",
"LANG": "C.UTF-8",
"PATH": "/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
"PWD": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base",
"PYTHONPATH": "/var/lib/zuul/ansible/9",
"PYTHON_SHA256": "8d3ed8ec5c88c1c95f5e558612a725450d2452813ddad5e58fdb1a53b1209b78",
"PYTHON_VERSION": "3.11.14",
"SSH_AGENT_PID": "524414",
"SSH_AUTH_SOCK": "/tmp/ssh-0U0nPWbYQDic/agent.524413",
"TMP": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/tmp",
"ZUUL_ANSIBLE_SPLIT_STREAMS": "False",
"ZUUL_JOBDIR": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5",
"ZUUL_JOB_FAILURE_OUTPUT": "[]",
"ZUUL_JOB_LOG_CONFIG": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/ansible/logging.json",
"ZUUL_OUTPUT_MAX_BYTES": "1073741824"
},
"ansible_fibre_channel_wwn": [],
"ansible_fips": false,
"ansible_form_factor": "NA",
"ansible_fqdn": "2d72f0692154",
"ansible_hostname": "2d72f0692154",
"ansible_hostnqn": "",
"ansible_is_chroot": false,
"ansible_iscsi_iqn": "",
"ansible_kernel": "5.15.0-130-generic",
"ansible_kernel_version": "#140-Ubuntu SMP Wed Dec 18 17:59:53 UTC 2024",
"ansible_loadavg": {
"15m": 2.93896484375,
"1m": 2.59326171875,
"5m": 2.85986328125
},
"ansible_local": {},
"ansible_lsb": {},
"ansible_lvm": "N/A",
"ansible_machine": "x86_64",
"ansible_memfree_mb": 5679,
"ansible_memory_mb": {
"nocache": {
"free": 13578,
"used": 18512
},
"real": {
"free": 5679,
"total": 32090,
"used": 26411
},
"swap": {
"cached": 0,
"free": 0,
"total": 0,
"used": 0
}
},
"ansible_memtotal_mb": 32090,
"ansible_mounts": [
{
"block_available": 8574324,
"block_size": 4096,
"block_total": 40601580,
"block_used": 32027256,
"device": "/dev/vda1",
"fstype": "ext4",
"inode_available": 16685216,
"inode_total": 20643840,
"inode_used": 3958624,
"mount": "/etc/resolv.conf",
"options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind",
"size_available": 35120431104,
"size_total": 166304071680,
"uuid": "N/A"
},
{
"block_available": 8574324,
"block_size": 4096,
"block_total": 40601580,
"block_used": 32027256,
"device": "/dev/vda1",
"fstype": "ext4",
"inode_available": 16685216,
"inode_total": 20643840,
"inode_used": 3958624,
"mount": "/etc/hosts",
"options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind",
"size_available": 35120431104,
"size_total": 166304071680,
"uuid": "N/A"
},
{
"block_available": 8574324,
"block_size": 4096,
"block_total": 40601580,
"block_used": 32027256,
"device": "/dev/vda1",
"fstype": "ext4",
"inode_available": 16685216,
"inode_total": 20643840,
"inode_used": 3958624,
"mount": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work",
"options": "rw,nosuid,nodev,relatime,discard,errors=remount-ro,bind",
"size_available": 35120431104,
"size_total": 166304071680,
"uuid": "N/A"
},
{
"block_available": 8574324,
"block_size": 4096,
"block_total": 40601580,
"block_used": 32027256,
"device": "/dev/vda1",
"fstype": "ext4",
"inode_available": 16685216,
"inode_total": 20643840,
"inode_used": 3958624,
"mount": "/var/lib/zuul/ansible/9",
"options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind",
"size_available": 35120431104,
"size_total": 166304071680,
"uuid": "N/A"
},
{
"block_available": 8574324,
"block_size": 4096,
"block_total": 40601580,
"block_used": 32027256,
"device": "/dev/vda1",
"fstype": "ext4",
"inode_available": 16685216,
"inode_total": 20643840,
"inode_used": 3958624,
"mount": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/ansible",
"options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind",
"size_available": 35120431104,
"size_total": 166304071680,
"uuid": "N/A"
},
{
"block_available": 8574323,
"block_size": 4096,
"block_total": 40601580,
"block_used": 32027257,
"device": "/dev/vda1",
"fstype": "ext4",
"inode_available": 16685215,
"inode_total": 20643840,
"inode_used": 3958625,
"mount": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/kube",
"options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind",
"size_available": 35120427008,
"size_total": 166304071680,
"uuid": "N/A"
},
{
"block_available": 8574323,
"block_size": 4096,
"block_total": 40601580,
"block_used": 32027257,
"device": "/dev/vda1",
"fstype": "ext4",
"inode_available": 16685215,
"inode_total": 20643840,
"inode_used": 3958625,
"mount": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/trusted",
"options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind",
"size_available": 35120427008,
"size_total": 166304071680,
"uuid": "N/A"
},
{
"block_available": 8574323,
"block_size": 4096,
"block_total": 40601580,
"block_used": 32027257,
"device": "/dev/vda1",
"fstype": "ext4",
"inode_available": 16685215,
"inode_total": 20643840,
"inode_used": 3958625,
"mount": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/untrusted",
"options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind",
"size_available": 35120427008,
"size_total": 166304071680,
"uuid": "N/A"
},
{
"block_available": 8574323,
"block_size": 4096,
"block_total": 40601580,
"block_used": 32027257,
"device": "/dev/vda1",
"fstype": "ext4",
"inode_available": 16685215,
"inode_total": 20643840,
"inode_used": 3958625,
"mount": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/ansible/pre_playbook_0",
"options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind",
"size_available": 35120427008,
"size_total": 166304071680,
"uuid": "N/A"
},
{
"block_available": 8574323,
"block_size": 4096,
"block_total": 40601580,
"block_used": 32027257,
"device": "/dev/vda1",
"fstype": "ext4",
"inode_available": 16685215,
"inode_total": 20643840,
"inode_used": 3958625,
"mount": "/etc/zuul/site-variables.yaml",
"options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind",
"size_available": 35120427008,
"size_total": 166304071680,
"uuid": "N/A"
},
{
"block_available": 55001910,
"block_size": 4096,
"block_total": 263940717,
"block_used": 208938807,
"device": "/dev/vdb",
"fstype": "ext4",
"inode_available": 31177053,
"inode_total": 67108864,
"inode_used": 35931811,
"mount": "/srv/static/logs",
"options": "rw,nosuid,nodev,relatime,discard",
"size_available": 225287823360,
"size_total": 1081101176832,
"uuid": "N/A"
},
{
"block_available": 8574323,
"block_size": 4096,
"block_total": 40601580,
"block_used": 32027257,
"device": "/dev/vda1",
"fstype": "ext4",
"inode_available": 16685215,
"inode_total": 20643840,
"inode_used": 3958625,
"mount": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/.ansible",
"options": "rw,nosuid,nodev,relatime,discard,errors=remount-ro,bind",
"size_available": 35120427008,
"size_total": 166304071680,
"uuid": "N/A"
}
],
"ansible_nodename": "2d72f0692154",
"ansible_os_family": "Debian",
"ansible_pkg_mgr": "apt",
"ansible_proc_cmdline": {
"BOOT_IMAGE": "/boot/vmlinuz-5.15.0-130-generic",
"console": [
"tty1",
"ttyS0"
],
"ro": true,
"root": "UUID=5a569d86-b935-46dd-ae79-7a72a25b6a4c"
},
"ansible_processor": [
"0",
"AuthenticAMD",
"AMD EPYC-Rome Processor",
"1",
"AuthenticAMD",
"AMD EPYC-Rome Processor",
"2",
"AuthenticAMD",
"AMD EPYC-Rome Processor",
"3",
"AuthenticAMD",
"AMD EPYC-Rome Processor",
"4",
"AuthenticAMD",
"AMD EPYC-Rome Processor",
"5",
"AuthenticAMD",
"AMD EPYC-Rome Processor",
"6",
"AuthenticAMD",
"AMD EPYC-Rome Processor",
"7",
"AuthenticAMD",
"AMD EPYC-Rome Processor",
"8",
"AuthenticAMD",
"AMD EPYC-Rome Processor",
"9",
"AuthenticAMD",
"AMD EPYC-Rome Processor",
"10",
"AuthenticAMD",
"AMD EPYC-Rome Processor",
"11",
"AuthenticAMD",
"AMD EPYC-Rome Processor",
"12",
"AuthenticAMD",
"AMD EPYC-Rome Processor",
"13",
"AuthenticAMD",
"AMD EPYC-Rome Processor",
"14",
"AuthenticAMD",
"AMD EPYC-Rome Processor",
"15",
"AuthenticAMD",
"AMD EPYC-Rome Processor"
],
"ansible_processor_cores": 1,
"ansible_processor_count": 16,
"ansible_processor_nproc": 16,
"ansible_processor_threads_per_core": 1,
"ansible_processor_vcpus": 16,
"ansible_product_name": "NA",
"ansible_product_serial": "NA",
"ansible_product_uuid": "NA",
"ansible_product_version": "NA",
"ansible_python": {
"executable": "/usr/local/lib/zuul/ansible/9/bin/python",
"has_sslcontext": true,
"type": "cpython",
"version": {
"major": 3,
"micro": 14,
"minor": 11,
"releaselevel": "final",
"serial": 0
},
"version_info": [
3,
11,
14,
"final",
0
]
},
"ansible_python_version": "3.11.14",
"ansible_real_group_id": 0,
"ansible_real_user_id": 0,
"ansible_selinux": {
"status": "disabled"
},
"ansible_selinux_python_present": true,
"ansible_service_mgr": "bwrap",
"ansible_swapfree_mb": 0,
"ansible_swaptotal_mb": 0,
"ansible_system": "Linux",
"ansible_system_capabilities": "N/A",
"ansible_system_capabilities_enforced": "N/A",
"ansible_system_vendor": "NA",
"ansible_uptime_seconds": 51862494,
"ansible_user_dir": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work",
"ansible_user_gecos": "root",
"ansible_user_gid": 0,
"ansible_user_id": "root",
"ansible_user_shell": "/bin/bash",
"ansible_user_uid": 0,
"ansible_userspace_architecture": "x86_64",
"ansible_userspace_bits": "64",
"ansible_virtualization_role": "host",
"ansible_virtualization_tech_guest": [],
"ansible_virtualization_tech_host": [
"kvm"
],
"ansible_virtualization_type": "kvm",
"gather_subset": [
"all"
],
"module_setup": true
},
"changed": false,
"deprecations": [],
"warnings": []
}
},
"task": {
"duration": {
"end": "2026-08-31T17:52:44.745281Z",
"start": "2026-08-31T17:52:43.854735Z"
},
"id": "0242ac17-0010-7c6a-c139-00000000002a",
"name": "Gathering Facts"
}
},
{
"hosts": {
"localhost": {
"action": "include_role",
"changed": false,
"include_args": {
"name": "set-zuul-log-path-fact"
}
}
},
"role": {
"id": "0242ac17-0010-7c6a-c139-000000000006",
"name": "emit-job-header",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/emit-job-header"
},
"task": {
"duration": {
"end": "2026-08-31T17:52:44.774066Z",
"start": "2026-08-31T17:52:44.751395Z"
},
"id": "0242ac17-0010-7c6a-c139-000000000008",
"name": "Setup log path fact"
}
},
{
"hosts": {
"localhost": {
"action": "set_fact",
"ansible_facts": {
"zuul_log_path": "063/oss/0636888ade7c46d7a5fcb0c7ba6359f5"
},
"changed": false
}
},
"role": {
"id": "0242ac17-0010-7c6a-c139-000000000054",
"name": "set-zuul-log-path-fact",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/set-zuul-log-path-fact"
},
"task": {
"duration": {
"end": "2026-08-31T17:52:44.818887Z",
"start": "2026-08-31T17:52:44.790037Z"
},
"id": "0242ac17-0010-7c6a-c139-000000000056",
"name": "Set log path for a build"
}
},
{
"hosts": {
"localhost": {
"action": "debug",
"changed": false,
"msg": "# Job Information\nAnsible Version: 2.16.18\nJob: atmosphere-common-molecule-secretgen-controller\nPipeline: check\nExecutor: 2d72f0692154\nTriggered by: https://github.com/vexxhost/atmosphere.common/pull/102\nEvent ID: 3b283740-a564-11f1-8d91-063946bebca3\n"
}
},
"role": {
"id": "0242ac17-0010-7c6a-c139-000000000006",
"name": "emit-job-header",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/emit-job-header"
},
"task": {
"duration": {
"end": "2026-08-31T17:52:44.865677Z",
"start": "2026-08-31T17:52:44.826339Z"
},
"id": "0242ac17-0010-7c6a-c139-000000000009",
"name": "Print job information"
}
},
{
"hosts": {
"localhost": {
"action": "debug",
"changed": false,
"msg": "All items completed",
"results": [
{
"ansible_loop_var": "zj_item",
"changed": false,
"failed": false,
"msg": "# Node Information\nInventory Hostname: controller\nHostname: np0000191615\nUsername: zuul\nDistro: Ubuntu 24.04\nProvider: yul1\nRegion: ca-ymq-1\nLabel: ubuntu-noble\nProduct Name: OpenStack Nova\nInterface IP: 162.253.55.159\n",
"zj_item": "controller"
}
]
}
},
"role": {
"id": "0242ac17-0010-7c6a-c139-000000000006",
"name": "emit-job-header",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/emit-job-header"
},
"task": {
"duration": {
"end": "2026-08-31T17:52:45.011541Z",
"start": "2026-08-31T17:52:44.869437Z"
},
"id": "0242ac17-0010-7c6a-c139-00000000000a",
"name": "Print node information"
}
},
{
"hosts": {
"localhost": {
"action": "file",
"changed": true,
"diff": {
"after": {
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs/zuul-info",
"state": "directory"
},
"before": {
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs/zuul-info",
"state": "absent"
}
},
"gid": 0,
"group": "root",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": 493,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs/zuul-info",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0755",
"owner": "root",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs/zuul-info",
"size": 4096,
"state": "directory",
"uid": 0
}
},
"role": {
"id": "0242ac17-0010-7c6a-c139-00000000000d",
"name": "log-inventory",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/log-inventory"
},
"task": {
"duration": {
"end": "2026-08-31T17:52:45.414781Z",
"start": "2026-08-31T17:52:45.020677Z"
},
"id": "0242ac17-0010-7c6a-c139-00000000000f",
"name": "Ensure Zuul Ansible directory exists"
}
},
{
"hosts": {
"localhost": {
"action": "copy",
"changed": true,
"checksum": "a7bf3aaf141508c2d70afe14a3357549a47b66ff",
"dest": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs/zuul-info/inventory.yaml",
"diff": [],
"gid": 0,
"group": "root",
"invocation": {
"module_args": {
"_original_basename": "inventory.yaml",
"attributes": null,
"backup": false,
"checksum": "a7bf3aaf141508c2d70afe14a3357549a47b66ff",
"content": null,
"dest": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs/zuul-info",
"directory_mode": null,
"follow": false,
"force": true,
"group": null,
"local_follow": null,
"mode": 420,
"owner": null,
"remote_src": null,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/.ansible/tmp/ansible-tmp-1788198765.4508145-84-162459675392616/source",
"unsafe_writes": false,
"validate": null
}
},
"md5sum": "ff7f890ed660f20a5a534bedb08a8b7c",
"mode": "0644",
"owner": "root",
"size": 353376,
"src": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/.ansible/tmp/ansible-tmp-1788198765.4508145-84-162459675392616/source",
"state": "file",
"uid": 0
}
},
"role": {
"id": "0242ac17-0010-7c6a-c139-00000000000d",
"name": "log-inventory",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/log-inventory"
},
"task": {
"duration": {
"end": "2026-08-31T17:52:46.247197Z",
"start": "2026-08-31T17:52:45.421972Z"
},
"id": "0242ac17-0010-7c6a-c139-000000000010",
"name": "Copy ansible inventory to logs dir"
}
}
]
},
{
"play": {
"duration": {
"end": "2026-08-31T17:52:53.310261Z",
"start": "2026-08-31T17:52:46.257462Z"
},
"id": "0242ac17-0010-7c6a-c139-000000000011",
"name": "all"
},
"tasks": [
{
"hosts": {
"controller": {
"action": "stat",
"changed": false,
"failed_when_result": false,
"invocation": {
"module_args": {
"checksum_algorithm": "sha1",
"follow": false,
"get_attributes": true,
"get_checksum": true,
"get_mime": true,
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/0636888ade7c46d7a5fcb0c7ba6359f5_id_rsa"
}
},
"stat": {
"exists": false
}
}
},
"role": {
"id": "0242ac17-0010-7c6a-c139-000000000016",
"name": "add-build-sshkey",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey"
},
"task": {
"duration": {
"end": "2026-08-31T17:52:46.496047Z",
"start": "2026-08-31T17:52:46.268004Z"
},
"id": "0242ac17-0010-7c6a-c139-000000000018",
"name": "Check to see if ssh key was already created for this build"
}
},
{
"hosts": {
"controller": {
"action": "include_tasks",
"changed": false,
"include": "create-key-and-replace.yaml",
"include_args": {}
}
},
"role": {
"id": "0242ac17-0010-7c6a-c139-000000000016",
"name": "add-build-sshkey",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey"
},
"task": {
"duration": {
"end": "2026-08-31T17:52:46.541114Z",
"start": "2026-08-31T17:52:46.505858Z"
},
"id": "0242ac17-0010-7c6a-c139-000000000019",
"name": "Create a new key in workspace based on build UUID"
}
},
{
"hosts": {
"controller": {
"action": "command",
"changed": true,
"cmd": [
"ssh-keygen",
"-t",
"rsa",
"-N",
"",
"-C",
"zuul-build-sshkey",
"-f",
"/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/0636888ade7c46d7a5fcb0c7ba6359f5_id_rsa",
"-b",
"3072"
],
"delta": "0:00:00.229318",
"end": "2026-08-31 17:52:47.161817",
"invocation": {
"module_args": {
"_raw_params": "ssh-keygen -t rsa -N '' -C 'zuul-build-sshkey' -f /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/0636888ade7c46d7a5fcb0c7ba6359f5_id_rsa -b 3072",
"_uses_shell": false,
"argv": null,
"chdir": null,
"creates": null,
"executable": null,
"expand_argument_vars": true,
"removes": null,
"stdin": null,
"stdin_add_newline": true,
"strip_empty_ends": true,
"zuul_ansible_split_streams": false,
"zuul_log_id": "0242ac17-0010-7c6a-c139-00000000009c-0-controller",
"zuul_no_log": false,
"zuul_output_max_bytes": 1073741824
}
},
"msg": "",
"rc": 0,
"start": "2026-08-31 17:52:46.932499",
"stderr": "",
"stderr_lines": [],
"stdout": "Generating public/private rsa key pair.\nYour identification has been saved in /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/0636888ade7c46d7a5fcb0c7ba6359f5_id_rsa\nYour public key has been saved in /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/0636888ade7c46d7a5fcb0c7ba6359f5_id_rsa.pub\nThe key fingerprint is:\nSHA256:KRpo1qNV8PL9ZNxuIlu5LeMORZ/qzKsI0ua/76nZylA zuul-build-sshkey\nThe key's randomart image is:\n+---[RSA 3072]----+\n| . |\n| o |\n| . o . |\n| o + . + o . |\n| + = E S = + |\n| o + = . = + |\n| o * o * o |\n| + + + Xo= |\n| ..O*B+O+. |\n+----[SHA256]-----+",
"stdout_lines": [
"Generating public/private rsa key pair.",
"Your identification has been saved in /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/0636888ade7c46d7a5fcb0c7ba6359f5_id_rsa",
"Your public key has been saved in /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/0636888ade7c46d7a5fcb0c7ba6359f5_id_rsa.pub",
"The key fingerprint is:",
"SHA256:KRpo1qNV8PL9ZNxuIlu5LeMORZ/qzKsI0ua/76nZylA zuul-build-sshkey",
"The key's randomart image is:",
"+---[RSA 3072]----+",
"| . |",
"| o |",
"| . o . |",
"| o + . + o . |",
"| + = E S = + |",
"| o + = . = + |",
"| o * o * o |",
"| + + + Xo= |",
"| ..O*B+O+. |",
"+----[SHA256]-----+"
],
"zuul_log_id": "0242ac17-0010-7c6a-c139-00000000009c-0-controller"
}
},
"role": {
"id": "0242ac17-0010-7c6a-c139-000000000016",
"name": "add-build-sshkey",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey"
},
"task": {
"duration": {
"end": "2026-08-31T17:52:47.207432Z",
"start": "2026-08-31T17:52:46.564201Z"
},
"id": "0242ac17-0010-7c6a-c139-00000000009c",
"name": "Create Temp SSH key"
}
},
{
"hosts": {
"controller": {
"action": "include_tasks",
"changed": false,
"include": "remote-linux.yaml",
"include_args": {}
}
},
"role": {
"id": "0242ac17-0010-7c6a-c139-000000000016",
"name": "add-build-sshkey",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey"
},
"task": {
"duration": {
"end": "2026-08-31T17:52:47.251106Z",
"start": "2026-08-31T17:52:47.215065Z"
},
"id": "0242ac17-0010-7c6a-c139-00000000009d",
"name": "Remote setup ssh keys (linux)"
}
},
{
"hosts": {
"controller": {
"action": "lineinfile",
"changed": false,
"false_condition": "zuul_build_sshkey_cleanup",
"skip_reason": "Conditional result was False",
"skipped": true
}
},
"role": {
"id": "0242ac17-0010-7c6a-c139-000000000016",
"name": "add-build-sshkey",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey"
},
"task": {
"duration": {
"end": "2026-08-31T17:52:47.293469Z",
"start": "2026-08-31T17:52:47.269591Z"
},
"id": "0242ac17-0010-7c6a-c139-0000000000bc",
"name": "Remove previously added zuul-build-sshkey"
}
},
{
"hosts": {
"controller": {
"action": "authorized_key",
"changed": true,
"comment": null,
"exclusive": false,
"follow": false,
"invocation": {
"module_args": {
"changed": true,
"comment": null,
"exclusive": false,
"follow": false,
"key": "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC8gu0yOzdCFIfYClgv53HhuTfYRIiHI9lOnYet3h51pJA6RNM0l8xtEPJf9Jn79m/TEk7OVG51GuxR4mt4bnsacOX9+t3N0x7zXbaqHkkfaAzp1BsE8OXniOTeSwfp1Jlt3YFRo3fTS+caSJMbzOuLpLm5d7WexHwJYzmc1SgBypkW1CM1H2ovwJs8RrEyhQPpGKQ2Ev+FV8Cj6uV0PyU/dSKES3ir7E57HfSmbwstc2qkzhDkVo3OUbj2IiD/8ACSN6avDg5Fs6+5RKVJvPzJ99iIKMB/B2SR1fqWkJaMXVOsoJ2AuaRz9TEd8uhs/x2wClhHdc4cZ77g3xnrn21pDlxh/efEefuE3Ro/6oX3e2+5r4RAy4N6vAn1/UnY1EcE7IxBpFmnCTtDcGoiXM/Y34fI7Ih9TI+IRVygfGenRmhzQaWYAezUJF1jcJE9B1MaL2UeiFH4WVlubtzV76ClrLJtqd/TRxJNJmFD/t8cZCZiY09L9JEPZPU/UZPUf9c= zuul-build-sshkey",
"key_options": null,
"keyfile": "/home/zuul/.ssh/authorized_keys",
"manage_dir": true,
"path": null,
"state": "present",
"user": "zuul",
"validate_certs": true
}
},
"key": "ssh-rsa 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 zuul-build-sshkey",
"key_options": null,
"keyfile": "/home/zuul/.ssh/authorized_keys",
"manage_dir": true,
"path": null,
"state": "present",
"user": "zuul",
"validate_certs": true
}
},
"role": {
"id": "0242ac17-0010-7c6a-c139-000000000016",
"name": "add-build-sshkey",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey"
},
"task": {
"duration": {
"end": "2026-08-31T17:52:47.881126Z",
"start": "2026-08-31T17:52:47.305618Z"
},
"id": "0242ac17-0010-7c6a-c139-0000000000bd",
"name": "Enable access via build key on all nodes"
}
},
{
"hosts": {
"controller": {
"action": "file",
"changed": false,
"diff": {
"after": {
"path": "/home/zuul/.ssh"
},
"before": {
"path": "/home/zuul/.ssh"
}
},
"gid": 1000,
"group": "zuul",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": 448,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/home/zuul/.ssh",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0700",
"owner": "zuul",
"path": "/home/zuul/.ssh",
"size": 4096,
"state": "directory",
"uid": 1000
}
},
"role": {
"id": "0242ac17-0010-7c6a-c139-000000000016",
"name": "add-build-sshkey",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey"
},
"task": {
"duration": {
"end": "2026-08-31T17:52:48.095709Z",
"start": "2026-08-31T17:52:47.886114Z"
},
"id": "0242ac17-0010-7c6a-c139-0000000000be",
"name": "Make sure user has a .ssh"
}
},
{
"hosts": {
"controller": {
"action": "copy",
"changed": true,
"checksum": "e9c14e192ef3cf3eedc7ca45301e21535a34e466",
"dest": "/home/zuul/.ssh/id_rsa",
"diff": [],
"gid": 1000,
"group": "zuul",
"invocation": {
"module_args": {
"_original_basename": "0636888ade7c46d7a5fcb0c7ba6359f5_id_rsa",
"attributes": null,
"backup": false,
"checksum": "e9c14e192ef3cf3eedc7ca45301e21535a34e466",
"content": null,
"dest": "/home/zuul/.ssh/id_rsa",
"directory_mode": null,
"follow": false,
"force": false,
"group": null,
"local_follow": null,
"mode": 384,
"owner": null,
"remote_src": null,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": "/home/zuul/.ansible/tmp/ansible-tmp-1788198768.1531289-190-84923670294598/source",
"unsafe_writes": false,
"validate": null
}
},
"md5sum": "5598a71ec1bcbbd077e49968a17f156d",
"mode": "0600",
"owner": "zuul",
"size": 2602,
"src": "/home/zuul/.ansible/tmp/ansible-tmp-1788198768.1531289-190-84923670294598/source",
"state": "file",
"uid": 1000
}
},
"role": {
"id": "0242ac17-0010-7c6a-c139-000000000016",
"name": "add-build-sshkey",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey"
},
"task": {
"duration": {
"end": "2026-08-31T17:52:48.712779Z",
"start": "2026-08-31T17:52:48.101274Z"
},
"id": "0242ac17-0010-7c6a-c139-0000000000bf",
"name": "Install build private key as SSH key on all nodes"
}
},
{
"hosts": {
"controller": {
"action": "copy",
"changed": true,
"checksum": "177d24aba2491739ceaae676bd7d592b73f17a27",
"dest": "/home/zuul/.ssh/id_rsa.pub",
"diff": [],
"gid": 1000,
"group": "zuul",
"invocation": {
"module_args": {
"_original_basename": "0636888ade7c46d7a5fcb0c7ba6359f5_id_rsa.pub",
"attributes": null,
"backup": false,
"checksum": "177d24aba2491739ceaae676bd7d592b73f17a27",
"content": null,
"dest": "/home/zuul/.ssh/id_rsa.pub",
"directory_mode": null,
"follow": false,
"force": false,
"group": null,
"local_follow": null,
"mode": 420,
"owner": null,
"remote_src": null,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": "/home/zuul/.ansible/tmp/ansible-tmp-1788198768.7715514-200-7368401116831/source",
"unsafe_writes": false,
"validate": null
}
},
"md5sum": "95fd3e2c94e2f98620e4981634705497",
"mode": "0644",
"owner": "zuul",
"size": 571,
"src": "/home/zuul/.ansible/tmp/ansible-tmp-1788198768.7715514-200-7368401116831/source",
"state": "file",
"uid": 1000
}
},
"role": {
"id": "0242ac17-0010-7c6a-c139-000000000016",
"name": "add-build-sshkey",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey"
},
"task": {
"duration": {
"end": "2026-08-31T17:52:49.304320Z",
"start": "2026-08-31T17:52:48.719515Z"
},
"id": "0242ac17-0010-7c6a-c139-0000000000c0",
"name": "Install build public key as SSH key on all nodes"
}
},
{
"hosts": {
"controller": {
"action": "include_tasks",
"changed": false,
"false_condition": "ansible_os_family == \"Windows\"",
"skip_reason": "Conditional result was False",
"skipped": true
}
},
"role": {
"id": "0242ac17-0010-7c6a-c139-000000000016",
"name": "add-build-sshkey",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey"
},
"task": {
"duration": {
"end": "2026-08-31T17:52:49.339873Z",
"start": "2026-08-31T17:52:49.312432Z"
},
"id": "0242ac17-0010-7c6a-c139-00000000009e",
"name": "Remote setup ssh keys (windows)"
}
},
{
"hosts": {
"controller": {
"action": "sshagent_remove_keys",
"changed": true,
"invocation": {
"module_args": {
"remove": "^(?!\\(stdin\\)).*"
}
},
"removed": [
"/etc/zuul/id_rsa"
]
}
},
"role": {
"id": "0242ac17-0010-7c6a-c139-0000000000a3",
"name": "remove-zuul-sshkey",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/remove-zuul-sshkey"
},
"task": {
"duration": {
"end": "2026-08-31T17:52:49.710898Z",
"start": "2026-08-31T17:52:49.351627Z"
},
"id": "0242ac17-0010-7c6a-c139-0000000000a5",
"name": "Remove master key from local agent"
}
},
{
"hosts": {
"controller": {
"action": "command",
"changed": true,
"cmd": [
"ssh-add",
"/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/0636888ade7c46d7a5fcb0c7ba6359f5_id_rsa"
],
"delta": "0:00:00.012972",
"end": "2026-08-31 17:52:49.954016",
"invocation": {
"module_args": {
"_raw_params": "ssh-add /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/0636888ade7c46d7a5fcb0c7ba6359f5_id_rsa",
"_uses_shell": false,
"argv": null,
"chdir": null,
"creates": null,
"executable": null,
"expand_argument_vars": true,
"removes": null,
"stdin": null,
"stdin_add_newline": true,
"strip_empty_ends": true,
"zuul_ansible_split_streams": false,
"zuul_log_id": "0242ac17-0010-7c6a-c139-0000000000ab-0-controller",
"zuul_no_log": false,
"zuul_output_max_bytes": 1073741824
}
},
"msg": "",
"rc": 0,
"start": "2026-08-31 17:52:49.941044",
"stderr": "",
"stderr_lines": [],
"stdout": "Identity added: /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/0636888ade7c46d7a5fcb0c7ba6359f5_id_rsa (zuul-build-sshkey)",
"stdout_lines": [
"Identity added: /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/0636888ade7c46d7a5fcb0c7ba6359f5_id_rsa (zuul-build-sshkey)"
],
"zuul_log_id": "0242ac17-0010-7c6a-c139-0000000000ab-0-controller"
}
},
"role": {
"id": "0242ac17-0010-7c6a-c139-000000000016",
"name": "add-build-sshkey",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey"
},
"task": {
"duration": {
"end": "2026-08-31T17:52:50.005298Z",
"start": "2026-08-31T17:52:49.725905Z"
},
"id": "0242ac17-0010-7c6a-c139-0000000000ab",
"name": "Add back temp key"
}
},
{
"hosts": {
"controller": {
"action": "ping",
"changed": false,
"invocation": {
"module_args": {
"data": "pong"
}
},
"ping": "pong"
}
},
"role": {
"id": "0242ac17-0010-7c6a-c139-000000000016",
"name": "add-build-sshkey",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey"
},
"task": {
"duration": {
"end": "2026-08-31T17:52:50.367277Z",
"start": "2026-08-31T17:52:50.010888Z"
},
"id": "0242ac17-0010-7c6a-c139-0000000000ac",
"name": "Verify we can still SSH to all nodes"
}
},
{
"hosts": {
"controller": {
"action": "command",
"changed": false,
"false_condition": "ansible_os_family == \"Windows\"",
"skip_reason": "Conditional result was False",
"skipped": true
}
},
"role": {
"id": "0242ac17-0010-7c6a-c139-000000000016",
"name": "add-build-sshkey",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey"
},
"task": {
"duration": {
"end": "2026-08-31T17:52:50.402258Z",
"start": "2026-08-31T17:52:50.375131Z"
},
"id": "0242ac17-0010-7c6a-c139-0000000000ad",
"name": "Verify we can still SSH to all nodes (windows)"
}
},
{
"hosts": {
"controller": {
"action": "zuul_console",
"changed": false,
"invocation": {
"module_args": {
"path": "/tmp/console-{log_uuid}.log",
"port": 19885,
"state": "present"
}
}
}
},
"role": {
"id": "0242ac17-0010-7c6a-c139-00000000001b",
"name": "prepare-workspace",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/prepare-workspace"
},
"task": {
"duration": {
"end": "2026-08-31T17:52:50.841749Z",
"start": "2026-08-31T17:52:50.420273Z"
},
"id": "0242ac17-0010-7c6a-c139-00000000001d",
"name": "Start zuul_console daemon."
}
},
{
"hosts": {
"controller": {
"action": "synchronize",
"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result",
"changed": true
}
},
"role": {
"id": "0242ac17-0010-7c6a-c139-00000000001b",
"name": "prepare-workspace",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/prepare-workspace"
},
"task": {
"duration": {
"end": "2026-08-31T17:52:52.081347Z",
"start": "2026-08-31T17:52:50.848687Z"
},
"id": "0242ac17-0010-7c6a-c139-00000000001e",
"name": "Synchronize src repos to workspace directory."
}
},
{
"hosts": {
"controller": {
"action": "file",
"changed": false,
"msg": "All items completed",
"results": [
{
"ansible_loop_var": "zj_output_dir",
"changed": false,
"failed": false,
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": null,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/home/zuul/zuul-output/logs",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "absent",
"unsafe_writes": false
}
},
"path": "/home/zuul/zuul-output/logs",
"state": "absent",
"zj_output_dir": "logs"
},
{
"ansible_loop_var": "zj_output_dir",
"changed": false,
"failed": false,
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": null,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/home/zuul/zuul-output/artifacts",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "absent",
"unsafe_writes": false
}
},
"path": "/home/zuul/zuul-output/artifacts",
"state": "absent",
"zj_output_dir": "artifacts"
},
{
"ansible_loop_var": "zj_output_dir",
"changed": false,
"failed": false,
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": null,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/home/zuul/zuul-output/docs",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "absent",
"unsafe_writes": false
}
},
"path": "/home/zuul/zuul-output/docs",
"state": "absent",
"zj_output_dir": "docs"
}
]
}
},
"role": {
"id": "0242ac17-0010-7c6a-c139-000000000020",
"name": "ensure-output-dirs",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/ensure-output-dirs"
},
"task": {
"duration": {
"end": "2026-08-31T17:52:52.730233Z",
"start": "2026-08-31T17:52:52.091609Z"
},
"id": "0242ac17-0010-7c6a-c139-000000000022",
"name": "Empty Zuul Output directories by removing them"
}
},
{
"hosts": {
"controller": {
"action": "file",
"changed": true,
"msg": "All items completed",
"results": [
{
"ansible_loop_var": "zj_output_dir",
"changed": true,
"diff": {
"after": {
"mode": "0755",
"path": "/home/zuul/zuul-output/logs",
"state": "directory"
},
"before": {
"mode": "0775",
"path": "/home/zuul/zuul-output/logs",
"state": "absent"
}
},
"failed": false,
"gid": 1000,
"group": "zuul",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": 493,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/home/zuul/zuul-output/logs",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0755",
"owner": "zuul",
"path": "/home/zuul/zuul-output/logs",
"size": 4096,
"state": "directory",
"uid": 1000,
"zj_output_dir": "logs"
},
{
"ansible_loop_var": "zj_output_dir",
"changed": true,
"diff": {
"after": {
"mode": "0755",
"path": "/home/zuul/zuul-output/artifacts",
"state": "directory"
},
"before": {
"mode": "0775",
"path": "/home/zuul/zuul-output/artifacts",
"state": "absent"
}
},
"failed": false,
"gid": 1000,
"group": "zuul",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": 493,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/home/zuul/zuul-output/artifacts",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0755",
"owner": "zuul",
"path": "/home/zuul/zuul-output/artifacts",
"size": 4096,
"state": "directory",
"uid": 1000,
"zj_output_dir": "artifacts"
},
{
"ansible_loop_var": "zj_output_dir",
"changed": true,
"diff": {
"after": {
"mode": "0755",
"path": "/home/zuul/zuul-output/docs",
"state": "directory"
},
"before": {
"mode": "0775",
"path": "/home/zuul/zuul-output/docs",
"state": "absent"
}
},
"failed": false,
"gid": 1000,
"group": "zuul",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": 493,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/home/zuul/zuul-output/docs",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0755",
"owner": "zuul",
"path": "/home/zuul/zuul-output/docs",
"size": 4096,
"state": "directory",
"uid": 1000,
"zj_output_dir": "docs"
}
]
}
},
"role": {
"id": "0242ac17-0010-7c6a-c139-000000000020",
"name": "ensure-output-dirs",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/ensure-output-dirs"
},
"task": {
"duration": {
"end": "2026-08-31T17:52:53.310261Z",
"start": "2026-08-31T17:52:52.740101Z"
},
"id": "0242ac17-0010-7c6a-c139-000000000024",
"name": "Ensure Zuul Output directories exist"
}
}
]
}
],
"stats": {
"controller": {
"changed": 8,
"failures": 0,
"ignored": 0,
"ok": 15,
"rescued": 0,
"skipped": 3,
"unreachable": 0
},
"localhost": {
"changed": 2,
"failures": 0,
"ignored": 0,
"ok": 6,
"rescued": 0,
"skipped": 0,
"unreachable": 0
}
},
"trusted": true
},
{
"branch": "main",
"index": "1",
"phase": "pre",
"playbook": "github.com/vexxhost/zuul-jobs/playbooks/molecule/pre.yaml",
"plays": [
{
"play": {
"duration": {
"end": "2026-08-31T17:52:57.830804Z",
"start": "2026-08-31T17:52:54.067499Z"
},
"id": "0242ac17-0010-8b1d-f55c-000000000002",
"name": "all"
},
"tasks": [
{
"hosts": {
"controller": {
"action": "ansible.builtin.unarchive",
"changed": true,
"dest": "/usr/local/bin",
"extract_results": {
"cmd": [
"/usr/bin/tar",
"--extract",
"-C",
"/usr/local/bin",
"-z",
"--show-transformed-names",
"--strip-components=1",
"-f",
"/home/zuul/.ansible/tmp/ansible-tmp-1788198774.1219835-5-211046780077040/uv-x86_64-unknown-linux-gnu8zs_lxkf.tar.gz"
],
"err": "",
"out": "",
"rc": 0
},
"gid": 0,
"group": "root",
"handler": "TgzArchive",
"invocation": {
"module_args": {
"attributes": null,
"copy": true,
"creates": "/usr/local/bin/uv",
"decrypt": true,
"dest": "/usr/local/bin",
"exclude": [],
"extra_opts": [
"--strip-components=1"
],
"group": null,
"include": [],
"io_buffer_size": 65536,
"keep_newer": false,
"list_files": false,
"mode": null,
"owner": null,
"remote_src": true,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": "https://github.com/astral-sh/uv/releases/download/0.8.13/uv-x86_64-unknown-linux-gnu.tar.gz",
"unsafe_writes": false,
"validate_certs": true
}
},
"mode": "0755",
"owner": "root",
"size": 4096,
"src": "/home/zuul/.ansible/tmp/ansible-tmp-1788198774.1219835-5-211046780077040/uv-x86_64-unknown-linux-gnu8zs_lxkf.tar.gz",
"state": "directory",
"uid": 0
}
},
"role": {
"id": "0242ac17-0010-8b1d-f55c-000000000005",
"name": "setup-uv",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/untrusted/project_0/github.com/vexxhost/zuul-jobs/roles/setup-uv"
},
"task": {
"duration": {
"end": "2026-08-31T17:52:56.829758Z",
"start": "2026-08-31T17:52:54.079432Z"
},
"id": "0242ac17-0010-8b1d-f55c-000000000007",
"name": "Extract archive"
}
},
{
"hosts": {
"controller": {
"action": "ansible.builtin.command",
"changed": true,
"cmd": [
"/usr/local/bin/uv",
"--version"
],
"delta": "0:00:00.017721",
"end": "2026-08-31 17:52:57.235487",
"invocation": {
"module_args": {
"_raw_params": "/usr/local/bin/uv --version",
"_uses_shell": false,
"argv": null,
"chdir": null,
"creates": null,
"executable": null,
"expand_argument_vars": true,
"removes": null,
"stdin": null,
"stdin_add_newline": true,
"strip_empty_ends": true,
"zuul_ansible_split_streams": false,
"zuul_log_id": "0242ac17-0010-8b1d-f55c-000000000008-1-controller",
"zuul_no_log": false,
"zuul_output_max_bytes": 1073741824
}
},
"msg": "",
"rc": 0,
"start": "2026-08-31 17:52:57.217766",
"stderr": "",
"stderr_lines": [],
"stdout": "uv 0.8.13",
"stdout_lines": [
"uv 0.8.13"
],
"zuul_log_id": "0242ac17-0010-8b1d-f55c-000000000008-1-controller"
}
},
"role": {
"id": "0242ac17-0010-8b1d-f55c-000000000005",
"name": "setup-uv",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/untrusted/project_0/github.com/vexxhost/zuul-jobs/roles/setup-uv"
},
"task": {
"duration": {
"end": "2026-08-31T17:52:57.378674Z",
"start": "2026-08-31T17:52:56.858424Z"
},
"id": "0242ac17-0010-8b1d-f55c-000000000008",
"name": "Print version"
}
},
{
"hosts": {
"controller": {
"action": "molecule_install_galaxy_sibling_collections",
"changed": false,
"checkouts": [],
"installed": [],
"invocation": {
"module_args": {
"build_refs": [
{
"branch": "main",
"change": "102",
"change_message": "chore(deps): update dependency fluxcd/flux2 to v2.9.5\n\n> \u2139\ufe0f **Note**\n> \n> This PR body was truncated due to platform limits.\n\nThis PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n| [fluxcd/flux2](https://redirect.github.com/fluxcd/flux2) | minor | `2.6.4` \u2192 `2.9.5` |\n\n---\n\n### Release Notes\n\n\nfluxcd/flux2 (fluxcd/flux2)
\n\n### [`v2.9.5`](https://redirect.github.com/fluxcd/flux2/compare/v2.9.4...v2.9.5)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.9.4...v2.9.5)\n\n### [`v2.9.4`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.9.4)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.9.3...v2.9.4)\n\n#### Highlights\n\nFlux v2.9.4 is a patch release that ships various fixes to the Flux controllers, covering source-watcher tarball extraction and glob expansion limits, the refspecs accepted by `ImageUpdateAutomation`, the HTTP request limits of the notification-controller servers, and Helm repository index loading, OCI chart digest pinning, `Bucket` error handling and GCS static authentication in source-controller. On the CLI side, `flux migrate -f` now supports migrating repositories to Flux 2.9. Users are encouraged to upgrade for the best experience.\n\nNote that this release contains CRD schema changes for `ArtifactGenerator` and `ImageUpdateAutomation`; both CRDs must be updated along with the controllers.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Confine tarball extraction and bound glob expansion (source-watcher)\n- Disallow force-update and deletion via refspecs (image-automation-controller)\n- Unify HTTP server request limits (notification-controller)\n- Align Helm repository index loading with upstream Helm v4 (source-controller)\n- Improve error handling in `Bucket` reconciliation (source-controller)\n- Pin OCI chart verification by digest (source-controller)\n- Limit GCS static authentication to service account keys (source-controller)\n- Restrict the `allow-webhooks` network policy to the receiver port (flux CLI)\n\nImprovements:\n\n- Add support for migrating repositories to 2.9 in `flux migrate -f` (flux CLI)\n- Update fluxcd/pkg dependencies, which align the ECR host detection with upstream (source-controller, image-reflector-controller, flux CLI)\n- Update Bitbucket Cloud receiver guidance (notification-controller)\n\n#### Components changelog\n\n- source-controller [v1.9.4](https://redirect.github.com/fluxcd/source-controller/blob/v1.9.4/CHANGELOG.md)\n- source-watcher [v2.2.3](https://redirect.github.com/fluxcd/source-watcher/blob/v2.2.3/CHANGELOG.md)\n- notification-controller [v1.9.3](https://redirect.github.com/fluxcd/notification-controller/blob/v1.9.3/CHANGELOG.md)\n- image-reflector-controller [v1.2.4](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.2.4/CHANGELOG.md)\n- image-automation-controller [v1.2.4](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.2.4/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.9.x] Add support for 2.9 in `migrate -f` by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#6021](https://redirect.github.com/fluxcd/flux2/pull/6021)\n- Update fluxcd/pkg dependencies by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#6026](https://redirect.github.com/fluxcd/flux2/pull/6026)\n- \\[release/v2.9.x] fix: restrict `allow-webhooks` netpol to receiver port by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#6029](https://redirect.github.com/fluxcd/flux2/pull/6029)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#6031](https://redirect.github.com/fluxcd/flux2/pull/6031)\n\n**Full Changelog**: \n\n### [`v2.9.3`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.9.3)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.9.2...v2.9.3)\n\n#### Highlights\n\nFlux v2.9.3 is a patch release. It fixes empty lines vanishing from rendered Helm chart manifests, HelmReleases being marked as tested when their Helm test hooks never ran, and `spec.images` entries that set only some image fields discarding the remaining fields already declared for the same image in the `kustomization.yaml`. The latter affects both kustomize-controller and the `flux build|diff kustomization` commands. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix empty lines vanishing from rendered chart manifests (helm-controller)\n- Fix `HasBeenTested` for all corner cases, where a release could be marked as tested although its Helm test hooks never ran (helm-controller)\n- Fix a `spec.images` entry setting only some of the image fields discarding the remaining fields already declared for the same image in the `kustomization.yaml` at `spec.path`, e.g. overriding only `newName` produced an untagged image reference (kustomize-controller, flux CLI)\n\nImprovements:\n\n- Update fluxcd/pkg dependencies\n- Include source-watcher in the OCI flux-manifests artifact\n\n#### Components changelog\n\n- kustomize-controller [v1.9.4](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.9.4/CHANGELOG.md)\n- helm-controller [v1.6.3](https://redirect.github.com/fluxcd/helm-controller/blob/v1.6.3/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.9.x] Include source-watcher to oci flux-manifests by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5996](https://redirect.github.com/fluxcd/flux2/pull/5996)\n- Update fluxcd/pkg dependencies by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#6006](https://redirect.github.com/fluxcd/flux2/pull/6006)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#6011](https://redirect.github.com/fluxcd/flux2/pull/6011)\n\n**Full Changelog**: \n\n### [`v2.9.2`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.9.2)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.9.1...v2.9.2)\n\n##### Highlights\n\nFlux v2.9.2 is a patch release. The main fix addresses a regression introduced in\nv2.9.1 where a Kustomization with `openapi.path` pointing to a URL failed to\nreconcile with `failed to read OpenAPI schema`. This release also corrects several\nCRD field descriptions that contained inaccurate or leaked content. Users are\nencouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix a regression where a Kustomization with `openapi.path` pointing to a URL failed to reconcile with `failed to read OpenAPI schema` (kustomize-controller)\n- Fix the `HelmChart` CRD description for `.status.url`, which pointed users at `BucketStatus.Artifact` instead of `HelmChartStatus.Artifact` (source-controller)\n- Fix the `ImageRepository` CRD description for `.status.observedExclusionList`, which referred to `spec.lastScanResult` instead of `status.lastScanResult` (image-reflector-controller)\n- Fix the `ImageUpdateAutomation` CRD description for `.status.observedSourceRevision`, which had a stray Go struct declaration leaking into it (image-automation-controller)\n\nImprovements:\n\n- Update fluxcd/pkg dependencies\n\n##### Components changelog\n\n- source-controller [v1.9.3](https://redirect.github.com/fluxcd/source-controller/blob/v1.9.3/CHANGELOG.md)\n- kustomize-controller [v1.9.3](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.9.3/CHANGELOG.md)\n- helm-controller [v1.6.2](https://redirect.github.com/fluxcd/helm-controller/blob/v1.6.2/CHANGELOG.md)\n- notification-controller [v1.9.2](https://redirect.github.com/fluxcd/notification-controller/blob/v1.9.2/CHANGELOG.md)\n- image-reflector-controller [v1.2.3](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.2.3/CHANGELOG.md)\n- image-automation-controller [v1.2.3](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.2.3/CHANGELOG.md)\n- source-watcher [v2.2.2](https://redirect.github.com/fluxcd/source-watcher/blob/v2.2.2/CHANGELOG.md)\n\n##### CLI changelog\n\n- Update fluxcd/pkg dependencies by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5984](https://redirect.github.com/fluxcd/flux2/pull/5984)\n- Update fluxcd/pkg dependencies by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5990](https://redirect.github.com/fluxcd/flux2/pull/5990)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5994](https://redirect.github.com/fluxcd/flux2/pull/5994)\n\n**Full Changelog**: \n\n### [`v2.9.1`](https://redirect.github.com/fluxcd/flux2/compare/v2.9.0...v2.9.1)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.9.0...v2.9.1)\n\n### [`v2.9.0`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.9.0)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.8...v2.9.0)\n\n#### Highlights\n\nFlux v2.9.0 is a feature release. Users are encouraged to upgrade for the best experience.\n\nFor a compressive overview of new features and API changes included in this release, please refer to the [Announcing Flux 2.9 GA blog post](https://fluxcd.io/blog/2026/06/flux-v2.9.0/).\n\nOverview of the new features:\n\n- Flux CLI Plugin System with the Mirror and Schema plugins (`flux plugin`)\n- Server-Side Apply field ignore rules for fine-grained drift control (`Kustomization`)\n- SOPS decryption with the Age post-quantum cipher (`Kustomization`)\n- Kubernetes Workload Identity authentication for OpenBao and Vault (`Kustomization`)\n- Helm post-render strategies, including chart hooks support (`HelmRelease`)\n- Literal mode for Helm values references mirroring `helm --set-literal` (`HelmRelease`)\n- Allow empty kind in CEL health check expressions (`Kustomization`, `HelmRelease`)\n- Git commit signing and verification with SSH keys (`GitRepository`, `ImageUpdateAutomation`)\n- AWS CodeCommit authentication using Workload Identity (`GitRepository`)\n- Custom Sigstore trusted root for keyless verification in air-gapped environments (`OCIRepository`)\n- Path pattern directory discovery for monorepos (`ArtifactGenerator`)\n- Secret-less, OIDC-secured webhook Receivers (`Receiver`)\n\n\u2764\ufe0f Big thanks to all the Flux contributors that helped us with this release!\n\n##### Kubernetes compatibility\n\nThis release is compatible with the following Kubernetes versions:\n\n| Kubernetes version | Minimum required |\n| ------------------ | ---------------- |\n| `v1.34` | `>= 1.34.1` |\n| `v1.35` | `>= 1.35.0` |\n| `v1.36` | `>= 1.36.0` |\n\n> \\[!NOTE]\n> Note that the Flux project offers support only for the latest three minor versions of Kubernetes.\n> Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as\n> [ControlPlane](https://control-plane.io/enterprise-for-flux-cd/) that provide enterprise support for Flux.\n\n##### OpenShift compatibility\n\nFlux can be installed on Red Hat OpenShift cluster directly from OperatorHub using [Flux Operator](https://operatorhub.io/operator/flux-operator). The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.\n\n#### Upgrade procedure\n\n:warning: The Flux APIs `image.toolkit.fluxcd.io/v1beta2` and `notification.toolkit.fluxcd.io/v1beta2`\nhave reached end-of-life and have been removed from the CRDs.\n\nPlease follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from older versions of Flux to v2.9.\n\n#### Components changelog\n\n- source-controller [v1.9.1](https://redirect.github.com/fluxcd/source-controller/blob/v1.9.1/CHANGELOG.md)\n- kustomize-controller [v1.9.1](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.9.1/CHANGELOG.md)\n- notification-controller [v1.9.1](https://redirect.github.com/fluxcd/notification-controller/blob/v1.9.1/CHANGELOG.md)\n- helm-controller [v1.6.1](https://redirect.github.com/fluxcd/helm-controller/blob/v1.6.1/CHANGELOG.md)\n- image-reflector-controller [v1.2.1](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.2.1/CHANGELOG.md)\n- image-automation-controller [v1.2.1](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.2.1/CHANGELOG.md)\n- source-watcher [v2.2.1](https://redirect.github.com/fluxcd/source-watcher/blob/v2.2.1/CHANGELOG.md)\n\n#### CLI changelog\n\n- Add backport label for Flux 2.8 by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5732](https://redirect.github.com/fluxcd/flux2/pull/5732)\n- Remove no longer needed workaround for Flux 2.8 by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5733](https://redirect.github.com/fluxcd/flux2/pull/5733)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5740](https://redirect.github.com/fluxcd/flux2/pull/5740)\n- Add missing things to release notes template by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5743](https://redirect.github.com/fluxcd/flux2/pull/5743)\n- ci: add top-level permissions to upgrade-fluxcd-pkg workflow by [@gaganhr94](https://redirect.github.com/gaganhr94) in [#5763](https://redirect.github.com/fluxcd/flux2/pull/5763)\n- build(deps): bump the ci group across 1 directory with 11 updates by [@dependabot](https://redirect.github.com/dependabot)\\[bot] in [#5764](https://redirect.github.com/fluxcd/flux2/pull/5764)\n- Update fluxcd/pkg dependencies by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5766](https://redirect.github.com/fluxcd/flux2/pull/5766)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5769](https://redirect.github.com/fluxcd/flux2/pull/5769)\n- Add target branch name to update branch by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5773](https://redirect.github.com/fluxcd/flux2/pull/5773)\n- Fix/resume exit code by [@Aman-Cool](https://redirect.github.com/Aman-Cool) in [#5701](https://redirect.github.com/fluxcd/flux2/pull/5701)\n- Mark RFC 0010, 0011 and 0012 as implemented by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5776](https://redirect.github.com/fluxcd/flux2/pull/5776)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5780](https://redirect.github.com/fluxcd/flux2/pull/5780)\n- Add --resolve-symlinks flag to build and push artifact commands by [@rohansood10](https://redirect.github.com/rohansood10) in [#5724](https://redirect.github.com/fluxcd/flux2/pull/5724)\n- fix: validate --source flag in create kustomization command by [@gma1k](https://redirect.github.com/gma1k) in [#5798](https://redirect.github.com/fluxcd/flux2/pull/5798)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5821](https://redirect.github.com/fluxcd/flux2/pull/5821)\n- Add `--show-source` to `flux get ks` and `flux get hr` by [@rafaelperoco](https://redirect.github.com/rafaelperoco) in [#5828](https://redirect.github.com/fluxcd/flux2/pull/5828)\n- Add `flux create secret receiver` command by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5835](https://redirect.github.com/fluxcd/flux2/pull/5835)\n- fix: handle multiple symlinks to same target in build artifact by [@Iam-Karan-Suresh](https://redirect.github.com/Iam-Karan-Suresh) in [#5833](https://redirect.github.com/fluxcd/flux2/pull/5833)\n- Add `--in-memory-build` to `flux build ks` and `flux diff ks` by [@rycli](https://redirect.github.com/rycli) in [#5794](https://redirect.github.com/fluxcd/flux2/pull/5794)\n- Migrate end-to-end test to latest cloud SDKs by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5840](https://redirect.github.com/fluxcd/flux2/pull/5840)\n- docs: Add AI Coding Assistants Guidance by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5841](https://redirect.github.com/fluxcd/flux2/pull/5841)\n- Add AI Agents guidance by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5847](https://redirect.github.com/fluxcd/flux2/pull/5847)\n- \\[RFC-0013] Flux CLI Plugin System by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5795](https://redirect.github.com/fluxcd/flux2/pull/5795)\n- Add `--ignore-not-found` to `flux diff ks` by [@rycli](https://redirect.github.com/rycli) in [#5845](https://redirect.github.com/fluxcd/flux2/pull/5845)\n- \\[RFC-0013] Implement plugin system by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5849](https://redirect.github.com/fluxcd/flux2/pull/5849)\n- build(deps): bump github.com/go-git/go-git/v5 from 5.17.1 to 5.18.0 by [@dependabot](https://redirect.github.com/dependabot)\\[bot] in [#5853](https://redirect.github.com/fluxcd/flux2/pull/5853)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5856](https://redirect.github.com/fluxcd/flux2/pull/5856)\n- Add digest pinning support to `flux plugin install` by [@Iam-Karan-Suresh](https://redirect.github.com/Iam-Karan-Suresh) in [#5872](https://redirect.github.com/fluxcd/flux2/pull/5872)\n- Add `--ns-follows-kube-context` global flag for using the kubeconfig context namespace by [@jtyr](https://redirect.github.com/jtyr) in [#5831](https://redirect.github.com/fluxcd/flux2/pull/5831)\n- include source-watcher in install.yaml manifests by [@tmmorin](https://redirect.github.com/tmmorin) in [#5881](https://redirect.github.com/fluxcd/flux2/pull/5881)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5890](https://redirect.github.com/fluxcd/flux2/pull/5890)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5903](https://redirect.github.com/fluxcd/flux2/pull/5903)\n- Update fluxcd/pkg dependencies by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5907](https://redirect.github.com/fluxcd/flux2/pull/5907)\n- Validate Helm source URL schemes by [@immanuwell](https://redirect.github.com/immanuwell) in [#5909](https://redirect.github.com/fluxcd/flux2/pull/5909)\n- Introduce `flux trigger receiver` by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5908](https://redirect.github.com/fluxcd/flux2/pull/5908)\n- refactor(api): migrate MakeDependsOn to shared apis/meta func by [@vecil](https://redirect.github.com/vecil) in [#5912](https://redirect.github.com/fluxcd/flux2/pull/5912)\n- Update to Kubernetes 1.36 and Go 1.26 by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5924](https://redirect.github.com/fluxcd/flux2/pull/5924)\n- build(deps): bump the ci group across 1 directory with 19 updates by [@dependabot](https://redirect.github.com/dependabot)\\[bot] in [#5925](https://redirect.github.com/fluxcd/flux2/pull/5925)\n- Run conformance tests for Kubernetes 1.36 by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5926](https://redirect.github.com/fluxcd/flux2/pull/5926)\n- Add support for AWS CodeCommit to `flux bootstrap git` by [@taraspos](https://redirect.github.com/taraspos) in [#5868](https://redirect.github.com/fluxcd/flux2/pull/5868)\n- Validate plugin binary path by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5927](https://redirect.github.com/fluxcd/flux2/pull/5927)\n- Update fluxcd/pkg dependencies by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5928](https://redirect.github.com/fluxcd/flux2/pull/5928)\n- fix: preserve invalid metadata.labels in `flux build ks` by [@raffis](https://redirect.github.com/raffis) in [#5906](https://redirect.github.com/fluxcd/flux2/pull/5906)\n- build: target host arch for local builds/envtest by [@stealthybox](https://redirect.github.com/stealthybox) in [#5932](https://redirect.github.com/fluxcd/flux2/pull/5932)\n- build(deps): bump the ci group with 6 updates by [@dependabot](https://redirect.github.com/dependabot)\\[bot] in [#5938](https://redirect.github.com/fluxcd/flux2/pull/5938)\n- Support specifing sparseCheckout in flux bootstrap by [@piny940](https://redirect.github.com/piny940) in [#5918](https://redirect.github.com/fluxcd/flux2/pull/5918)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5944](https://redirect.github.com/fluxcd/flux2/pull/5944)\n- Honor `ks.spec.postBuild.substituteStrategy` by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5945](https://redirect.github.com/fluxcd/flux2/pull/5945)\n- Add DriftIgnoreRules support to flux diff kustomization by [@dipti-pai](https://redirect.github.com/dipti-pai) in [#5923](https://redirect.github.com/fluxcd/flux2/pull/5923)\n- Allow signing commits using SSH key by [@hiddeco](https://redirect.github.com/hiddeco) in [#5920](https://redirect.github.com/fluxcd/flux2/pull/5920)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5950](https://redirect.github.com/fluxcd/flux2/pull/5950)\n- Update fluxcd/pkg dependencies by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5937](https://redirect.github.com/fluxcd/flux2/pull/5937)\n- cmd: support `type!=status` in get --status-selector by [@3uzbcqje](https://redirect.github.com/3uzbcqje) in [#5952](https://redirect.github.com/fluxcd/flux2/pull/5952)\n- Fix `flux get all --status-selector` for empty results and notification resources by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5954](https://redirect.github.com/fluxcd/flux2/pull/5954)\n- Upgrade go-git-providers to v0.27.0 by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5956](https://redirect.github.com/fluxcd/flux2/pull/5956)\n- Fix using Receiver adapter for ArtifactGenerator by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5957](https://redirect.github.com/fluxcd/flux2/pull/5957)\n- feat: Install Plugins alongside Flux setup in gh actions by [@gat786](https://redirect.github.com/gat786) in [#5955](https://redirect.github.com/fluxcd/flux2/pull/5955)\n- Update fluxcd/pkg dependencies by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5960](https://redirect.github.com/fluxcd/flux2/pull/5960)\n- Add CLI support for OCIRepository.spec.layerSelector in flux create source oci by [@dme86](https://redirect.github.com/dme86) in [#5892](https://redirect.github.com/fluxcd/flux2/pull/5892)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5963](https://redirect.github.com/fluxcd/flux2/pull/5963)\n\n#### New Contributors\n\n- [@gaganhr94](https://redirect.github.com/gaganhr94) made their first contribution in [#5763](https://redirect.github.com/fluxcd/flux2/pull/5763)\n- [@rohansood10](https://redirect.github.com/rohansood10) made their first contribution in [#5724](https://redirect.github.com/fluxcd/flux2/pull/5724)\n- [@gma1k](https://redirect.github.com/gma1k) made their first contribution in [#5798](https://redirect.github.com/fluxcd/flux2/pull/5798)\n- [@rafaelperoco](https://redirect.github.com/rafaelperoco) made their first contribution in [#5828](https://redirect.github.com/fluxcd/flux2/pull/5828)\n- [@Iam-Karan-Suresh](https://redirect.github.com/Iam-Karan-Suresh) made their first contribution in [#5833](https://redirect.github.com/fluxcd/flux2/pull/5833)\n- [@rycli](https://redirect.github.com/rycli) made their first contribution in [#5794](https://redirect.github.com/fluxcd/flux2/pull/5794)\n- [@jtyr](https://redirect.github.com/jtyr) made their first contribution in [#5831](https://redirect.github.com/fluxcd/flux2/pull/5831)\n- [@tmmorin](https://redirect.github.com/tmmorin) made their first contribution in [#5881](https://redirect.github.com/fluxcd/flux2/pull/5881)\n- [@immanuwell](https://redirect.github.com/immanuwell) made their first contribution in [#5909](https://redirect.github.com/fluxcd/flux2/pull/5909)\n- [@vecil](https://redirect.github.com/vecil) made their first contribution in [#5912](https://redirect.github.com/fluxcd/flux2/pull/5912)\n- [@taraspos](https://redirect.github.com/taraspos) made their first contribution in [#5868](https://redirect.github.com/fluxcd/flux2/pull/5868)\n- [@piny940](https://redirect.github.com/piny940) made their first contribution in [#5918](https://redirect.github.com/fluxcd/flux2/pull/5918)\n- [@3uzbcqje](https://redirect.github.com/3uzbcqje) made their first contribution in [#5952](https://redirect.github.com/fluxcd/flux2/pull/5952)\n- [@gat786](https://redirect.github.com/gat786) made their first contribution in [#5955](https://redirect.github.com/fluxcd/flux2/pull/5955)\n- [@dme86](https://redirect.github.com/dme86) made their first contribution in [#5892](https://redirect.github.com/fluxcd/flux2/pull/5892)\n\n**Full Changelog**: \n\n### [`v2.8.8`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.8)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.7...v2.8.8)\n\n##### Highlights\n\nFlux v2.8.8 is a patch release that includes CVE fixes via go-git v5.19.1 (source-controller, image-automation-controller), reliability fixes in helm-controller and source-controller, the move of Helm back to upstream v4.2.0, support for GCP sovereign cloud artifact registries, and dependency updates. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Add a configurable HTTP timeout for artifact fetching, preventing fetches that could block indefinitely and stall reconciliations (helm-controller)\n- Fix unbounded memory growth caused by a Kubernetes client transport retry wrapper accumulating on every reconcile (helm-controller)\n- Stop force-applying non-CRD objects placed under a chart's `crds/` directory (helm-controller)\n- Fix the Helm test action failing to find releases with names longer than 53 characters (helm-controller)\n- Improve path handling in the source reconcilers (source-controller)\n- Support Helm semver build-metadata encoding in OCIRepository tags (source-controller)\n\nImprovements:\n\n- Update go-git to v5.19.1 which fixes [CVE-2026-45571](https://redirect.github.com/advisories/GHSA-crhj-59gh-8x96) and [CVE-2026-45570](https://redirect.github.com/advisories/GHSA-m7cr-m3pv-hgrp) (source-controller, image-automation-controller)\n- Move Helm back to upstream v4.2.0 (source-controller, helm-controller)\n- Add support for GCP sovereign cloud artifact registries (source-controller, image-reflector-controller)\n- Upgrade Kubernetes to 1.36.1 (source-controller, helm-controller)\n- Update fluxcd/pkg dependencies\n\n##### Components changelog\n\n- helm-controller [v1.5.5](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.5/CHANGELOG.md)\n- image-automation-controller [v1.1.4](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.4/CHANGELOG.md)\n- image-reflector-controller [v1.1.2](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.1.2/CHANGELOG.md)\n- source-controller [v1.8.5](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.5/CHANGELOG.md)\n\n##### CLI changelog\n\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5904](https://redirect.github.com/fluxcd/flux2/pull/5904)\n\n**Full Changelog**: \n\n### [`v2.8.7`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.7)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.6...v2.8.7)\n\n##### Highlights\n\nFlux v2.8.7 is a patch release that includes a bug fix in kustomize-controller, a CVE fix in source-controller and image-automation-controller via go-git v5.19.0, and dependency updates. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix management of objects annotated with `kustomize.toolkit.fluxcd.io/ssa: IfNotPresent` where non-namespaced resources were being deleted and recreated on each reconciliation (kustomize-controller)\n\nImprovements:\n\n- Update go-git to v5.19.0 which fixes [CVE-2026-45022](https://redirect.github.com/advisories/GHSA-389r-gv7p-r3rp) (source-controller, image-automation-controller)\n- Update fluxcd/pkg dependencies (source-controller, kustomize-controller, image-automation-controller)\n\n##### Components changelog\n\n- helm-controller [v1.5.4](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.4/CHANGELOG.md)\n- image-automation-controller [v1.1.3](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.3/CHANGELOG.md)\n- kustomize-controller [v1.8.5](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.5/CHANGELOG.md)\n- notification-controller [v1.8.4](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.4/CHANGELOG.md)\n- source-controller [v1.8.4](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.4/CHANGELOG.md)\n\n##### CLI changelog\n\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5891](https://redirect.github.com/fluxcd/flux2/pull/5891)\n\n**Full Changelog**: \n\n### [`v2.8.6`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.6)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.5...v2.8.6)\n\n#### Highlights\n\nFlux v2.8.6 is a patch release that includes bug fixes and improvements across helm-controller, image-automation-controller, kustomize-controller, notification-controller, and source-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix a post-renderer conflict between overlapping hooks and templates (helm-controller)\n- Ignore force replace when server-side apply is enabled (helm-controller)\n- Fix a regression where generic providers would not forward commit status events (notification-controller)\n- Require the `audience` field on the GCR Receiver secret for tighter verification \u2014 will become mandatory in Flux v2.9 (notification-controller)\n\nImprovements:\n\n- Introduce the `MigrateAPIVersion` feature gate for migrating the API version of resources in managed field entries (kustomize-controller)\n- Update go-git to v5.18.0 bringing performance improvements for Git operations (source-controller, image-automation-controller)\n\n#### Components changelog\n\n- helm-controller [v1.5.4](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.4/CHANGELOG.md)\n- image-automation-controller [v1.1.2](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.2/CHANGELOG.md)\n- kustomize-controller [v1.8.4](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.4/CHANGELOG.md)\n- notification-controller [v1.8.4](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.4/CHANGELOG.md)\n- source-controller [v1.8.3](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.3/CHANGELOG.md)\n\n#### CLI changelog\n\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5857](https://redirect.github.com/fluxcd/flux2/pull/5857)\n\n**Full Changelog**: \n\n### [`v2.8.5`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.5)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.4...v2.8.5)\n\n#### Highlights\n\nFlux v2.8.5 is a patch release that includes bug fixes and improvements across kustomize-controller, source-controller, and notification-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix a race condition where a cancelled reconciliation could leave stale data in the cache, causing Kustomizations to get stuck (kustomize-controller)\n- Fix Azure Blob prefix option not being passed to the storage client (source-controller)\n\nImprovements:\n\n- Improve error message for encrypted SSH keys without password (source-controller)\n- Add optional `email` and `audience` fields to the GCR Receiver for tighter verification (notification-controller)\n- Add provider manifest example for Azure Event Hub managed identity authentication (notification-controller)\n\n#### Components changelog\n\n- kustomize-controller [v1.8.3](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.3/CHANGELOG.md)\n- source-controller [v1.8.2](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.2/CHANGELOG.md)\n- notification-controller [v1.8.3](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.3/CHANGELOG.md)\n\n#### CLI changelog\n\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5822](https://redirect.github.com/fluxcd/flux2/pull/5822)\n\n**Full Changelog**: \n\n### [`v2.8.4`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.4)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.3...v2.8.4)\n\n#### Highlights\n\nFlux v2.8.4 is a patch release that includes fixes for the Flux CLI. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix `flux build ks` and `flux diff ks` on Windows\n- Fix `--source` flag validation in `create kustomization` command\n\n#### CLI changelog\n\n- Update fluxcd/pkg dependencies by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5796](https://redirect.github.com/fluxcd/flux2/pull/5796)\n- \\[release/v2.8.x] fix: validate --source flag in create kustomization command by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5799](https://redirect.github.com/fluxcd/flux2/pull/5799)\n\n**Full Changelog**: \n\n### [`v2.8.3`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.3)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.2...v2.8.3)\n\n#### Highlights\n\nFlux v2.8.3 is a patch release that fixes a regression in helm-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix templating errors for charts that include `---` in the content, e.g. YAML separators, embedded scripts, CAs inside ConfigMaps (helm-controller)\n\n#### Components changelog\n\n- helm-controller [v1.5.3](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.3/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.8.x] Add target branch name to update branch by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5774](https://redirect.github.com/fluxcd/flux2/pull/5774)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5779](https://redirect.github.com/fluxcd/flux2/pull/5779)\n\n**Full Changelog**: \n\n### [`v2.8.2`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.2)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.1...v2.8.2)\n\n##### Highlights\n\nFlux v2.8.2 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix enqueuing new reconciliation requests for events on source Flux objects when they are already reconciling the revision present in the watch event (kustomize-controller, helm-controller)\n- Fix the Go templates bug of YAML separator `---` getting concatenated to `apiVersion:` by updating to Helm 4.1.3 (helm-controller)\n- Fix canceled HelmReleases getting stuck when they don't have a retry strategy configured by introducing a new feature gate `DefaultToRetryOnFailure` that improves the experience when the `CancelHealthCheckOnNewRevision` is enabled (helm-controller)\n- Fix the auth scope for Azure Container Registry to use the ACR-specific scope (source-controller, image-reflector-controller)\n- Fix potential Denial of Service (DoS) during TLS handshakes (CVE-2026-27138) by building all controllers with Go 1.26.1\n\n##### Components changelog\n\n- source-controller [v1.8.1](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.1/CHANGELOG.md)\n- kustomize-controller [v1.8.2](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.2/CHANGELOG.md)\n- notification-controller [v1.8.2](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.2/CHANGELOG.md)\n- helm-controller [v1.5.2](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.2/CHANGELOG.md)\n- image-reflector-controller [v1.1.1](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.1.1/CHANGELOG.md)\n- image-automation-controller [v1.1.1](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.1/CHANGELOG.md)\n- source-watcher [v2.1.1](https://redirect.github.com/fluxcd/source-watcher/blob/v2.1.1/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.8.x] build(deps): bump the ci group across 1 directory with 11 updates by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5765](https://redirect.github.com/fluxcd/flux2/pull/5765)\n- Update fluxcd/pkg dependencies by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5767](https://redirect.github.com/fluxcd/flux2/pull/5767)\n- Update toolkit components by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5770](https://redirect.github.com/fluxcd/flux2/pull/5770)\n- Update fluxcd/pkg dependencies by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5771](https://redirect.github.com/fluxcd/flux2/pull/5771)\n\n**Full Changelog**: \n\n### [`v2.8.1`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.1)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.0...v2.8.1)\n\n##### Highlights\n\nFlux v2.8.1 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix Git commit status events being dropped for Kustomizations (notification-controller)\n- Fix health check for StatefulSets when the Pods are Pending/Unschedulable during rollout (helm-controller, kustomize-controller)\n\n##### Components changelog\n\n- kustomize-controller [v1.8.1](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.1/CHANGELOG.md)\n- notification-controller [v1.8.1](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.1/CHANGELOG.md)\n- helm-controller [v1.5.1](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.1/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.8.x] Remove no longer needed workaround for Flux 2.8 by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5735](https://redirect.github.com/fluxcd/flux2/pull/5735)\n- Update fluxcd/pkg dependencies by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5739](https://redirect.github.com/fluxcd/flux2/pull/5739)\n- \\[release/v2.8.x] Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5741](https://redirect.github.com/fluxcd/flux2/pull/5741)\n\n**Full Changelog**: \n\n### [`v2.8.0`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.0)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.5...v2.8.0)\n\n##### Highlights\n\nFlux v2.8.0 is a feature release. Users are encouraged to upgrade for the best experience.\n\nFor a compressive overview of new features and API changes included in this release, please refer to the [Announcing Flux 2.8 GA blog post](https://fluxcd.io/blog/2026/02/flux-v2.8.0/).\n\nOverview of the new features:\n\n- Helm v4 support, including server-side apply and kstatus-based health checking (`HelmRelease`)\n- Readiness evaluation of Helm-managed objects with CEL expressions (`HelmRelease`)\n- Improved observability of Helm releases with inventory tracking in `.status.inventory` (`HelmRelease`)\n- Reduced the mean time to recovery of Flux-managed applications via `CancelHealthCheckOnNewRevision` feature gate (`Kustomization`, `HelmRelease`)\n- Support for commenting on Pull Requests directly from Flux notifications (`Provider`)\n- Custom SSA apply stages for ordering resource application in kustomize-controller (`Kustomization`)\n- Automatic GitHub App installation ID lookup from the repository owner (`GitRepository`, `ImageUpdateAutomation`, `Provider`)\n- Support for Cosign v3 for verifying OCI artifacts and container images (`OCIRepository`)\n- ArtifactGenerator support for extracting and modifying Helm charts (`ArtifactGenerator`)\n- Bypass cache when fetching source objects via `DirectSourceFetch` feature gate (`Kustomization`, `HelmRelease`, `ArtifactGenerator`)\n\n\u2764\ufe0f Big thanks to all the Flux contributors that helped us with this release!\n\n##### Kubernetes compatibility\n\nThis release is compatible with the following Kubernetes versions:\n\n| Kubernetes version | Minimum required |\n| ------------------ | ---------------- |\n| `v1.33` | `>= 1.32.0` |\n| `v1.34` | `>= 1.34.1` |\n| `v1.35` | `>= 1.35.0` |\n\n> \\[!NOTE]\n> Note that the Flux project offers support only for the latest three minor versions of Kubernetes.\n> Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as\n> [ControlPlane](https://control-plane.io/enterprise-for-flux-cd/) that provide enterprise support for Flux.\n\n##### OpenShift compatibility\n\nFlux can be installed on Red Hat OpenShift cluster directly from OperatorHub using [Flux Operator](https://operatorhub.io/operator/flux-operator). The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.\n\n##### Upgrade procedure\n\n:warning: The Flux APIs `v1beta2` and `v2beta2` (deprecated in 2024) have reached end-of-life and have been removed from the CRDs.\n\nPlease follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from older versions of Flux to v2.8.\n\n##### Components changelog\n\n- source-controller [v1.8.0](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.0/CHANGELOG.md)\n- kustomize-controller [v1.8.0](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.0/CHANGELOG.md)\n- notification-controller [v1.8.0](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.0/CHANGELOG.md)\n- helm-controller [v1.5.0](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.0/CHANGELOG.md)\n- image-reflector-controller [v1.1.0](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.1.0/CHANGELOG.md)\n- image-automation-controller [v1.1.0](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.0/CHANGELOG.md)\n- source-watcher [v2.1.0](https://redirect.github.com/fluxcd/source-watcher/blob/v2.1.0/CHANGELOG.md)\n\n##### CLI changelog\n\n- ci: Set `GITHUB_TOKEN` in the `release-flux-manifests` workflow by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5547](https://redirect.github.com/fluxcd/flux2/pull/5547)\n- Add backport label for Flux 2.7 by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5550](https://redirect.github.com/fluxcd/flux2/pull/5550)\n- build(deps): bump the ci group across 1 directory with 3 updates by [@dependabot](https://redirect.github.com/dependabot)\\[bot] in [#5548](https://redirect.github.com/fluxcd/flux2/pull/5548)\n- Fix `flux push artifact` not working with `--provider` by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5551](https://redirect.github.com/fluxcd/flux2/pull/5551)\n- Extend `flux migrate` to work with local files by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5554](https://redirect.github.com/fluxcd/flux2/pull/5554)\n- Improve `flux migrate` for live cluster migrations by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5558](https://redirect.github.com/fluxcd/flux2/pull/5558)\n- Fix `flux migrate -f` command to work with comments by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5560](https://redirect.github.com/fluxcd/flux2/pull/5560)\n- Add source-watcher to docs by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5562](https://redirect.github.com/fluxcd/flux2/pull/5562)\n- Fix `flux migrate -f` not considering kind comments by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5563](https://redirect.github.com/fluxcd/flux2/pull/5563)\n- refactor: convert `Kustomization` resource into unstructured map only once during variable substitution by [@ramasai1](https://redirect.github.com/ramasai1) in [#5566](https://redirect.github.com/fluxcd/flux2/pull/5566)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5568](https://redirect.github.com/fluxcd/flux2/pull/5568)\n- Disable AUR publishing by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5570](https://redirect.github.com/fluxcd/flux2/pull/5570)\n- Fix manifest generation for `--storage-adv-addr` and `--events-addr` flags by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5574](https://redirect.github.com/fluxcd/flux2/pull/5574)\n- Update dependencies to Kubernetes v1.34.1 and Go 1.25.2 by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5576](https://redirect.github.com/fluxcd/flux2/pull/5576)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5578](https://redirect.github.com/fluxcd/flux2/pull/5578)\n- Restore GitHub PAT for backports by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5581](https://redirect.github.com/fluxcd/flux2/pull/5581)\n- \\[RFC-0012] Add command `flux get source external` by [@dgunzy](https://redirect.github.com/dgunzy) in [#5555](https://redirect.github.com/fluxcd/flux2/pull/5555)\n- fix: handle error when writing password prompt to stdout by [@akshatsinha0](https://redirect.github.com/akshatsinha0) in [#5589](https://redirect.github.com/fluxcd/flux2/pull/5589)\n- Pin cosign to v2.6.1 by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5594](https://redirect.github.com/fluxcd/flux2/pull/5594)\n- \\[RFC-0012] Add command `flux export source external` by [@dgunzy](https://redirect.github.com/dgunzy) in [#5583](https://redirect.github.com/fluxcd/flux2/pull/5583)\n- Fix bootstrap e2e test for image policy by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5604](https://redirect.github.com/fluxcd/flux2/pull/5604)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5603](https://redirect.github.com/fluxcd/flux2/pull/5603)\n- fix: return accepted values for flags when calling Values.Type() by [@jaxels10](https://redirect.github.com/jaxels10) in [#5602](https://redirect.github.com/fluxcd/flux2/pull/5602)\n- ci: Include source-watcher in the e2e test suite by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5614](https://redirect.github.com/fluxcd/flux2/pull/5614)\n- Add source.extensions.fluxcd.io group to aggregated RBAC roles by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5627](https://redirect.github.com/fluxcd/flux2/pull/5627)\n- Fix panic on reconcile with source of ExternalArtifact kind by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5630](https://redirect.github.com/fluxcd/flux2/pull/5630)\n- Upgrade k8s to 1.34.2, c-r to 0.22.4 and helm to 3.19.2 by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5633](https://redirect.github.com/fluxcd/flux2/pull/5633)\n- diff: report if object is skipped by [@hown3d](https://redirect.github.com/hown3d) in [#5625](https://redirect.github.com/fluxcd/flux2/pull/5625)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5639](https://redirect.github.com/fluxcd/flux2/pull/5639)\n- Allow option to skip tenant namespace creation by [@anshuishere](https://redirect.github.com/anshuishere) in [#5597](https://redirect.github.com/fluxcd/flux2/pull/5597)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5648](https://redirect.github.com/fluxcd/flux2/pull/5648)\n- fix: [#5654](https://redirect.github.com/fluxcd/flux2/issues/5654) by checking if both --chart and --chart-ref are set by [@jaxels10](https://redirect.github.com/jaxels10) in [#5656](https://redirect.github.com/fluxcd/flux2/pull/5656)\n- Added retry logic with delays to the Flux CLI download by [@ivan-munteanu](https://redirect.github.com/ivan-munteanu) in [#5659](https://redirect.github.com/fluxcd/flux2/pull/5659)\n- Run conformance tests for Kubernetes 1.35.0 by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5663](https://redirect.github.com/fluxcd/flux2/pull/5663)\n- fix: normalize path for Windows compatibility by [@sibasispadhi](https://redirect.github.com/sibasispadhi) in [#5674](https://redirect.github.com/fluxcd/flux2/pull/5674)\n- Introduce support for looking up GH app installation ID by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5682](https://redirect.github.com/fluxcd/flux2/pull/5682)\n- Update dependencies to Kubernetes v1.35.0 by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5688](https://redirect.github.com/fluxcd/flux2/pull/5688)\n- Fix resume command logging success after reconciliation failure by [@Aman-Cool](https://redirect.github.com/Aman-Cool) in [#5690](https://redirect.github.com/fluxcd/flux2/pull/5690)\n- Add 2.8 to supported versions for `flux migrate -f` by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5713](https://redirect.github.com/fluxcd/flux2/pull/5713)\n- Introduce workflow for bumping fluxcd/pkg deps by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5717](https://redirect.github.com/fluxcd/flux2/pull/5717)\n- Update fluxcd/pkg dependencies by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5719](https://redirect.github.com/fluxcd/flux2/pull/5719)\n- Fix event listing ignoring pagination token by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5721](https://redirect.github.com/fluxcd/flux2/pull/5721)\n- Build with Go 1.26 by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5723](https://redirect.github.com/fluxcd/flux2/pull/5723)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5722](https://redirect.github.com/fluxcd/flux2/pull/5722)\n- Update helm-controller to v1.5.0 by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5725](https://redirect.github.com/fluxcd/flux2/pull/5725)\n- build(deps): bump the ci group across 1 directory with 12 updates by [@dependabot](https://redirect.github.com/dependabot)\\[bot] in [#5720](https://redirect.github.com/fluxcd/flux2/pull/5720)\n- Fix bootstrap failure on Windows cross-drive paths by [@veeceey](https://redirect.github.com/veeceey) in [#5726](https://redirect.github.com/fluxcd/flux2/pull/5726)\n- Dump debug info on e2e tests by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5729](https://redirect.github.com/fluxcd/flux2/pull/5729)\n- Set Kubernetes 1.33 as min supported version by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5730](https://redirect.github.com/fluxcd/flux2/pull/5730)\n- Update conformance tests to min Kubernetes 1.33 by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5731](https://redirect.github.com/fluxcd/flux2/pull/5731)\n\n##### New Contributors\n\n- [@ramasai1](https://redirect.github.com/ramasai1) made their first contribution in [#5566](https://redirect.github.com/fluxcd/flux2/pull/5566)\n- [@akshatsinha0](https://redirect.github.com/akshatsinha0) made their first contribution in [#5589](https://redirect.github.com/fluxcd/flux2/pull/5589)\n- [@jaxels10](https://redirect.github.com/jaxels10) made their first contribution in [#5602](https://redirect.github.com/fluxcd/flux2/pull/5602)\n- [@hown3d](https://redirect.github.com/hown3d) made their first contribution in [#5625](https://redirect.github.com/fluxcd/flux2/pull/5625)\n- [@anshuishere](https://redirect.github.com/anshuishere) made their first contribution in [#5597](https://redirect.github.com/fluxcd/flux2/pull/5597)\n- [@ivan-munteanu](https://redirect.github.com/ivan-munteanu) made their first contribution in [#5659](https://redirect.github.com/fluxcd/flux2/pull/5659)\n- [@sibasispadhi](https://redirect.github.com/sibasispadhi) made their first contribution in [#5674](https://redirect.github.com/fluxcd/flux2/pull/5674)\n- [@Aman-Cool](https://redirect.github.com/Aman-Cool) made their first contribution in [#5690](https://redirect.github.com/fluxcd/flux2/pull/5690)\n- [@veeceey](https://redirect.github.com/veeceey) made their first contribution in [#5726](https://redirect.github.com/fluxcd/flux2/pull/5726)\n\n**Full Changelog**: \n\n### [`v2.7.5`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.5)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.4...v2.7.5)\n\n##### Highlights\n\nFlux v2.7.5 is a patch release that comes with fixes to helm-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix HelmRelease history truncation when using the `RetryOnFailure` str\n\n> \u2702 **Note**\n> \n> PR body was truncated to here.\n\n\n \n\n---\n\n### Configuration\n\n\ud83d\udcc5 **Schedule**: (UTC)\n\n- Branch creation\n - At any time (no schedule defined)\n- Automerge\n - At any time (no schedule defined)\n\n\ud83d\udea6 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.\n\n\u267b **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.\n\n\ud83d\udd15 **Ignore**: Close this PR and you won't be reminded about this update again.\n\n---\n\n - [ ] If you want to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/vexxhost/atmosphere.common).\n\n",
"change_url": "https://github.com/vexxhost/atmosphere.common/pull/102",
"commit_id": "81d78f20d6b8b6498e6ff2a32986b184e88bb3ca",
"patchset": "81d78f20d6b8b6498e6ff2a32986b184e88bb3ca",
"project": {
"canonical_hostname": "github.com",
"canonical_name": "github.com/vexxhost/atmosphere.common",
"name": "vexxhost/atmosphere.common",
"short_name": "atmosphere.common",
"src_dir": "src/github.com/vexxhost/atmosphere.common"
},
"src_dir": "src/github.com/vexxhost/atmosphere.common",
"topic": null
},
{
"branch": "main",
"change": "102",
"change_message": "chore(deps): update dependency fluxcd/flux2 to v2.9.5\n\n> \u2139\ufe0f **Note**\n> \n> This PR body was truncated due to platform limits.\n\nThis PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n| [fluxcd/flux2](https://redirect.github.com/fluxcd/flux2) | minor | `2.6.4` \u2192 `2.9.5` |\n\n---\n\n### Release Notes\n\n\nfluxcd/flux2 (fluxcd/flux2)
\n\n### [`v2.9.5`](https://redirect.github.com/fluxcd/flux2/compare/v2.9.4...v2.9.5)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.9.4...v2.9.5)\n\n### [`v2.9.4`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.9.4)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.9.3...v2.9.4)\n\n#### Highlights\n\nFlux v2.9.4 is a patch release that ships various fixes to the Flux controllers, covering source-watcher tarball extraction and glob expansion limits, the refspecs accepted by `ImageUpdateAutomation`, the HTTP request limits of the notification-controller servers, and Helm repository index loading, OCI chart digest pinning, `Bucket` error handling and GCS static authentication in source-controller. On the CLI side, `flux migrate -f` now supports migrating repositories to Flux 2.9. Users are encouraged to upgrade for the best experience.\n\nNote that this release contains CRD schema changes for `ArtifactGenerator` and `ImageUpdateAutomation`; both CRDs must be updated along with the controllers.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Confine tarball extraction and bound glob expansion (source-watcher)\n- Disallow force-update and deletion via refspecs (image-automation-controller)\n- Unify HTTP server request limits (notification-controller)\n- Align Helm repository index loading with upstream Helm v4 (source-controller)\n- Improve error handling in `Bucket` reconciliation (source-controller)\n- Pin OCI chart verification by digest (source-controller)\n- Limit GCS static authentication to service account keys (source-controller)\n- Restrict the `allow-webhooks` network policy to the receiver port (flux CLI)\n\nImprovements:\n\n- Add support for migrating repositories to 2.9 in `flux migrate -f` (flux CLI)\n- Update fluxcd/pkg dependencies, which align the ECR host detection with upstream (source-controller, image-reflector-controller, flux CLI)\n- Update Bitbucket Cloud receiver guidance (notification-controller)\n\n#### Components changelog\n\n- source-controller [v1.9.4](https://redirect.github.com/fluxcd/source-controller/blob/v1.9.4/CHANGELOG.md)\n- source-watcher [v2.2.3](https://redirect.github.com/fluxcd/source-watcher/blob/v2.2.3/CHANGELOG.md)\n- notification-controller [v1.9.3](https://redirect.github.com/fluxcd/notification-controller/blob/v1.9.3/CHANGELOG.md)\n- image-reflector-controller [v1.2.4](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.2.4/CHANGELOG.md)\n- image-automation-controller [v1.2.4](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.2.4/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.9.x] Add support for 2.9 in `migrate -f` by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#6021](https://redirect.github.com/fluxcd/flux2/pull/6021)\n- Update fluxcd/pkg dependencies by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#6026](https://redirect.github.com/fluxcd/flux2/pull/6026)\n- \\[release/v2.9.x] fix: restrict `allow-webhooks` netpol to receiver port by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#6029](https://redirect.github.com/fluxcd/flux2/pull/6029)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#6031](https://redirect.github.com/fluxcd/flux2/pull/6031)\n\n**Full Changelog**: \n\n### [`v2.9.3`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.9.3)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.9.2...v2.9.3)\n\n#### Highlights\n\nFlux v2.9.3 is a patch release. It fixes empty lines vanishing from rendered Helm chart manifests, HelmReleases being marked as tested when their Helm test hooks never ran, and `spec.images` entries that set only some image fields discarding the remaining fields already declared for the same image in the `kustomization.yaml`. The latter affects both kustomize-controller and the `flux build|diff kustomization` commands. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix empty lines vanishing from rendered chart manifests (helm-controller)\n- Fix `HasBeenTested` for all corner cases, where a release could be marked as tested although its Helm test hooks never ran (helm-controller)\n- Fix a `spec.images` entry setting only some of the image fields discarding the remaining fields already declared for the same image in the `kustomization.yaml` at `spec.path`, e.g. overriding only `newName` produced an untagged image reference (kustomize-controller, flux CLI)\n\nImprovements:\n\n- Update fluxcd/pkg dependencies\n- Include source-watcher in the OCI flux-manifests artifact\n\n#### Components changelog\n\n- kustomize-controller [v1.9.4](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.9.4/CHANGELOG.md)\n- helm-controller [v1.6.3](https://redirect.github.com/fluxcd/helm-controller/blob/v1.6.3/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.9.x] Include source-watcher to oci flux-manifests by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5996](https://redirect.github.com/fluxcd/flux2/pull/5996)\n- Update fluxcd/pkg dependencies by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#6006](https://redirect.github.com/fluxcd/flux2/pull/6006)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#6011](https://redirect.github.com/fluxcd/flux2/pull/6011)\n\n**Full Changelog**: \n\n### [`v2.9.2`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.9.2)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.9.1...v2.9.2)\n\n##### Highlights\n\nFlux v2.9.2 is a patch release. The main fix addresses a regression introduced in\nv2.9.1 where a Kustomization with `openapi.path` pointing to a URL failed to\nreconcile with `failed to read OpenAPI schema`. This release also corrects several\nCRD field descriptions that contained inaccurate or leaked content. Users are\nencouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix a regression where a Kustomization with `openapi.path` pointing to a URL failed to reconcile with `failed to read OpenAPI schema` (kustomize-controller)\n- Fix the `HelmChart` CRD description for `.status.url`, which pointed users at `BucketStatus.Artifact` instead of `HelmChartStatus.Artifact` (source-controller)\n- Fix the `ImageRepository` CRD description for `.status.observedExclusionList`, which referred to `spec.lastScanResult` instead of `status.lastScanResult` (image-reflector-controller)\n- Fix the `ImageUpdateAutomation` CRD description for `.status.observedSourceRevision`, which had a stray Go struct declaration leaking into it (image-automation-controller)\n\nImprovements:\n\n- Update fluxcd/pkg dependencies\n\n##### Components changelog\n\n- source-controller [v1.9.3](https://redirect.github.com/fluxcd/source-controller/blob/v1.9.3/CHANGELOG.md)\n- kustomize-controller [v1.9.3](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.9.3/CHANGELOG.md)\n- helm-controller [v1.6.2](https://redirect.github.com/fluxcd/helm-controller/blob/v1.6.2/CHANGELOG.md)\n- notification-controller [v1.9.2](https://redirect.github.com/fluxcd/notification-controller/blob/v1.9.2/CHANGELOG.md)\n- image-reflector-controller [v1.2.3](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.2.3/CHANGELOG.md)\n- image-automation-controller [v1.2.3](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.2.3/CHANGELOG.md)\n- source-watcher [v2.2.2](https://redirect.github.com/fluxcd/source-watcher/blob/v2.2.2/CHANGELOG.md)\n\n##### CLI changelog\n\n- Update fluxcd/pkg dependencies by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5984](https://redirect.github.com/fluxcd/flux2/pull/5984)\n- Update fluxcd/pkg dependencies by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5990](https://redirect.github.com/fluxcd/flux2/pull/5990)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5994](https://redirect.github.com/fluxcd/flux2/pull/5994)\n\n**Full Changelog**: \n\n### [`v2.9.1`](https://redirect.github.com/fluxcd/flux2/compare/v2.9.0...v2.9.1)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.9.0...v2.9.1)\n\n### [`v2.9.0`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.9.0)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.8...v2.9.0)\n\n#### Highlights\n\nFlux v2.9.0 is a feature release. Users are encouraged to upgrade for the best experience.\n\nFor a compressive overview of new features and API changes included in this release, please refer to the [Announcing Flux 2.9 GA blog post](https://fluxcd.io/blog/2026/06/flux-v2.9.0/).\n\nOverview of the new features:\n\n- Flux CLI Plugin System with the Mirror and Schema plugins (`flux plugin`)\n- Server-Side Apply field ignore rules for fine-grained drift control (`Kustomization`)\n- SOPS decryption with the Age post-quantum cipher (`Kustomization`)\n- Kubernetes Workload Identity authentication for OpenBao and Vault (`Kustomization`)\n- Helm post-render strategies, including chart hooks support (`HelmRelease`)\n- Literal mode for Helm values references mirroring `helm --set-literal` (`HelmRelease`)\n- Allow empty kind in CEL health check expressions (`Kustomization`, `HelmRelease`)\n- Git commit signing and verification with SSH keys (`GitRepository`, `ImageUpdateAutomation`)\n- AWS CodeCommit authentication using Workload Identity (`GitRepository`)\n- Custom Sigstore trusted root for keyless verification in air-gapped environments (`OCIRepository`)\n- Path pattern directory discovery for monorepos (`ArtifactGenerator`)\n- Secret-less, OIDC-secured webhook Receivers (`Receiver`)\n\n\u2764\ufe0f Big thanks to all the Flux contributors that helped us with this release!\n\n##### Kubernetes compatibility\n\nThis release is compatible with the following Kubernetes versions:\n\n| Kubernetes version | Minimum required |\n| ------------------ | ---------------- |\n| `v1.34` | `>= 1.34.1` |\n| `v1.35` | `>= 1.35.0` |\n| `v1.36` | `>= 1.36.0` |\n\n> \\[!NOTE]\n> Note that the Flux project offers support only for the latest three minor versions of Kubernetes.\n> Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as\n> [ControlPlane](https://control-plane.io/enterprise-for-flux-cd/) that provide enterprise support for Flux.\n\n##### OpenShift compatibility\n\nFlux can be installed on Red Hat OpenShift cluster directly from OperatorHub using [Flux Operator](https://operatorhub.io/operator/flux-operator). The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.\n\n#### Upgrade procedure\n\n:warning: The Flux APIs `image.toolkit.fluxcd.io/v1beta2` and `notification.toolkit.fluxcd.io/v1beta2`\nhave reached end-of-life and have been removed from the CRDs.\n\nPlease follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from older versions of Flux to v2.9.\n\n#### Components changelog\n\n- source-controller [v1.9.1](https://redirect.github.com/fluxcd/source-controller/blob/v1.9.1/CHANGELOG.md)\n- kustomize-controller [v1.9.1](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.9.1/CHANGELOG.md)\n- notification-controller [v1.9.1](https://redirect.github.com/fluxcd/notification-controller/blob/v1.9.1/CHANGELOG.md)\n- helm-controller [v1.6.1](https://redirect.github.com/fluxcd/helm-controller/blob/v1.6.1/CHANGELOG.md)\n- image-reflector-controller [v1.2.1](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.2.1/CHANGELOG.md)\n- image-automation-controller [v1.2.1](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.2.1/CHANGELOG.md)\n- source-watcher [v2.2.1](https://redirect.github.com/fluxcd/source-watcher/blob/v2.2.1/CHANGELOG.md)\n\n#### CLI changelog\n\n- Add backport label for Flux 2.8 by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5732](https://redirect.github.com/fluxcd/flux2/pull/5732)\n- Remove no longer needed workaround for Flux 2.8 by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5733](https://redirect.github.com/fluxcd/flux2/pull/5733)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5740](https://redirect.github.com/fluxcd/flux2/pull/5740)\n- Add missing things to release notes template by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5743](https://redirect.github.com/fluxcd/flux2/pull/5743)\n- ci: add top-level permissions to upgrade-fluxcd-pkg workflow by [@gaganhr94](https://redirect.github.com/gaganhr94) in [#5763](https://redirect.github.com/fluxcd/flux2/pull/5763)\n- build(deps): bump the ci group across 1 directory with 11 updates by [@dependabot](https://redirect.github.com/dependabot)\\[bot] in [#5764](https://redirect.github.com/fluxcd/flux2/pull/5764)\n- Update fluxcd/pkg dependencies by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5766](https://redirect.github.com/fluxcd/flux2/pull/5766)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5769](https://redirect.github.com/fluxcd/flux2/pull/5769)\n- Add target branch name to update branch by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5773](https://redirect.github.com/fluxcd/flux2/pull/5773)\n- Fix/resume exit code by [@Aman-Cool](https://redirect.github.com/Aman-Cool) in [#5701](https://redirect.github.com/fluxcd/flux2/pull/5701)\n- Mark RFC 0010, 0011 and 0012 as implemented by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5776](https://redirect.github.com/fluxcd/flux2/pull/5776)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5780](https://redirect.github.com/fluxcd/flux2/pull/5780)\n- Add --resolve-symlinks flag to build and push artifact commands by [@rohansood10](https://redirect.github.com/rohansood10) in [#5724](https://redirect.github.com/fluxcd/flux2/pull/5724)\n- fix: validate --source flag in create kustomization command by [@gma1k](https://redirect.github.com/gma1k) in [#5798](https://redirect.github.com/fluxcd/flux2/pull/5798)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5821](https://redirect.github.com/fluxcd/flux2/pull/5821)\n- Add `--show-source` to `flux get ks` and `flux get hr` by [@rafaelperoco](https://redirect.github.com/rafaelperoco) in [#5828](https://redirect.github.com/fluxcd/flux2/pull/5828)\n- Add `flux create secret receiver` command by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5835](https://redirect.github.com/fluxcd/flux2/pull/5835)\n- fix: handle multiple symlinks to same target in build artifact by [@Iam-Karan-Suresh](https://redirect.github.com/Iam-Karan-Suresh) in [#5833](https://redirect.github.com/fluxcd/flux2/pull/5833)\n- Add `--in-memory-build` to `flux build ks` and `flux diff ks` by [@rycli](https://redirect.github.com/rycli) in [#5794](https://redirect.github.com/fluxcd/flux2/pull/5794)\n- Migrate end-to-end test to latest cloud SDKs by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5840](https://redirect.github.com/fluxcd/flux2/pull/5840)\n- docs: Add AI Coding Assistants Guidance by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5841](https://redirect.github.com/fluxcd/flux2/pull/5841)\n- Add AI Agents guidance by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5847](https://redirect.github.com/fluxcd/flux2/pull/5847)\n- \\[RFC-0013] Flux CLI Plugin System by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5795](https://redirect.github.com/fluxcd/flux2/pull/5795)\n- Add `--ignore-not-found` to `flux diff ks` by [@rycli](https://redirect.github.com/rycli) in [#5845](https://redirect.github.com/fluxcd/flux2/pull/5845)\n- \\[RFC-0013] Implement plugin system by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5849](https://redirect.github.com/fluxcd/flux2/pull/5849)\n- build(deps): bump github.com/go-git/go-git/v5 from 5.17.1 to 5.18.0 by [@dependabot](https://redirect.github.com/dependabot)\\[bot] in [#5853](https://redirect.github.com/fluxcd/flux2/pull/5853)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5856](https://redirect.github.com/fluxcd/flux2/pull/5856)\n- Add digest pinning support to `flux plugin install` by [@Iam-Karan-Suresh](https://redirect.github.com/Iam-Karan-Suresh) in [#5872](https://redirect.github.com/fluxcd/flux2/pull/5872)\n- Add `--ns-follows-kube-context` global flag for using the kubeconfig context namespace by [@jtyr](https://redirect.github.com/jtyr) in [#5831](https://redirect.github.com/fluxcd/flux2/pull/5831)\n- include source-watcher in install.yaml manifests by [@tmmorin](https://redirect.github.com/tmmorin) in [#5881](https://redirect.github.com/fluxcd/flux2/pull/5881)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5890](https://redirect.github.com/fluxcd/flux2/pull/5890)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5903](https://redirect.github.com/fluxcd/flux2/pull/5903)\n- Update fluxcd/pkg dependencies by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5907](https://redirect.github.com/fluxcd/flux2/pull/5907)\n- Validate Helm source URL schemes by [@immanuwell](https://redirect.github.com/immanuwell) in [#5909](https://redirect.github.com/fluxcd/flux2/pull/5909)\n- Introduce `flux trigger receiver` by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5908](https://redirect.github.com/fluxcd/flux2/pull/5908)\n- refactor(api): migrate MakeDependsOn to shared apis/meta func by [@vecil](https://redirect.github.com/vecil) in [#5912](https://redirect.github.com/fluxcd/flux2/pull/5912)\n- Update to Kubernetes 1.36 and Go 1.26 by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5924](https://redirect.github.com/fluxcd/flux2/pull/5924)\n- build(deps): bump the ci group across 1 directory with 19 updates by [@dependabot](https://redirect.github.com/dependabot)\\[bot] in [#5925](https://redirect.github.com/fluxcd/flux2/pull/5925)\n- Run conformance tests for Kubernetes 1.36 by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5926](https://redirect.github.com/fluxcd/flux2/pull/5926)\n- Add support for AWS CodeCommit to `flux bootstrap git` by [@taraspos](https://redirect.github.com/taraspos) in [#5868](https://redirect.github.com/fluxcd/flux2/pull/5868)\n- Validate plugin binary path by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5927](https://redirect.github.com/fluxcd/flux2/pull/5927)\n- Update fluxcd/pkg dependencies by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5928](https://redirect.github.com/fluxcd/flux2/pull/5928)\n- fix: preserve invalid metadata.labels in `flux build ks` by [@raffis](https://redirect.github.com/raffis) in [#5906](https://redirect.github.com/fluxcd/flux2/pull/5906)\n- build: target host arch for local builds/envtest by [@stealthybox](https://redirect.github.com/stealthybox) in [#5932](https://redirect.github.com/fluxcd/flux2/pull/5932)\n- build(deps): bump the ci group with 6 updates by [@dependabot](https://redirect.github.com/dependabot)\\[bot] in [#5938](https://redirect.github.com/fluxcd/flux2/pull/5938)\n- Support specifing sparseCheckout in flux bootstrap by [@piny940](https://redirect.github.com/piny940) in [#5918](https://redirect.github.com/fluxcd/flux2/pull/5918)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5944](https://redirect.github.com/fluxcd/flux2/pull/5944)\n- Honor `ks.spec.postBuild.substituteStrategy` by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5945](https://redirect.github.com/fluxcd/flux2/pull/5945)\n- Add DriftIgnoreRules support to flux diff kustomization by [@dipti-pai](https://redirect.github.com/dipti-pai) in [#5923](https://redirect.github.com/fluxcd/flux2/pull/5923)\n- Allow signing commits using SSH key by [@hiddeco](https://redirect.github.com/hiddeco) in [#5920](https://redirect.github.com/fluxcd/flux2/pull/5920)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5950](https://redirect.github.com/fluxcd/flux2/pull/5950)\n- Update fluxcd/pkg dependencies by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5937](https://redirect.github.com/fluxcd/flux2/pull/5937)\n- cmd: support `type!=status` in get --status-selector by [@3uzbcqje](https://redirect.github.com/3uzbcqje) in [#5952](https://redirect.github.com/fluxcd/flux2/pull/5952)\n- Fix `flux get all --status-selector` for empty results and notification resources by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5954](https://redirect.github.com/fluxcd/flux2/pull/5954)\n- Upgrade go-git-providers to v0.27.0 by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5956](https://redirect.github.com/fluxcd/flux2/pull/5956)\n- Fix using Receiver adapter for ArtifactGenerator by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5957](https://redirect.github.com/fluxcd/flux2/pull/5957)\n- feat: Install Plugins alongside Flux setup in gh actions by [@gat786](https://redirect.github.com/gat786) in [#5955](https://redirect.github.com/fluxcd/flux2/pull/5955)\n- Update fluxcd/pkg dependencies by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5960](https://redirect.github.com/fluxcd/flux2/pull/5960)\n- Add CLI support for OCIRepository.spec.layerSelector in flux create source oci by [@dme86](https://redirect.github.com/dme86) in [#5892](https://redirect.github.com/fluxcd/flux2/pull/5892)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5963](https://redirect.github.com/fluxcd/flux2/pull/5963)\n\n#### New Contributors\n\n- [@gaganhr94](https://redirect.github.com/gaganhr94) made their first contribution in [#5763](https://redirect.github.com/fluxcd/flux2/pull/5763)\n- [@rohansood10](https://redirect.github.com/rohansood10) made their first contribution in [#5724](https://redirect.github.com/fluxcd/flux2/pull/5724)\n- [@gma1k](https://redirect.github.com/gma1k) made their first contribution in [#5798](https://redirect.github.com/fluxcd/flux2/pull/5798)\n- [@rafaelperoco](https://redirect.github.com/rafaelperoco) made their first contribution in [#5828](https://redirect.github.com/fluxcd/flux2/pull/5828)\n- [@Iam-Karan-Suresh](https://redirect.github.com/Iam-Karan-Suresh) made their first contribution in [#5833](https://redirect.github.com/fluxcd/flux2/pull/5833)\n- [@rycli](https://redirect.github.com/rycli) made their first contribution in [#5794](https://redirect.github.com/fluxcd/flux2/pull/5794)\n- [@jtyr](https://redirect.github.com/jtyr) made their first contribution in [#5831](https://redirect.github.com/fluxcd/flux2/pull/5831)\n- [@tmmorin](https://redirect.github.com/tmmorin) made their first contribution in [#5881](https://redirect.github.com/fluxcd/flux2/pull/5881)\n- [@immanuwell](https://redirect.github.com/immanuwell) made their first contribution in [#5909](https://redirect.github.com/fluxcd/flux2/pull/5909)\n- [@vecil](https://redirect.github.com/vecil) made their first contribution in [#5912](https://redirect.github.com/fluxcd/flux2/pull/5912)\n- [@taraspos](https://redirect.github.com/taraspos) made their first contribution in [#5868](https://redirect.github.com/fluxcd/flux2/pull/5868)\n- [@piny940](https://redirect.github.com/piny940) made their first contribution in [#5918](https://redirect.github.com/fluxcd/flux2/pull/5918)\n- [@3uzbcqje](https://redirect.github.com/3uzbcqje) made their first contribution in [#5952](https://redirect.github.com/fluxcd/flux2/pull/5952)\n- [@gat786](https://redirect.github.com/gat786) made their first contribution in [#5955](https://redirect.github.com/fluxcd/flux2/pull/5955)\n- [@dme86](https://redirect.github.com/dme86) made their first contribution in [#5892](https://redirect.github.com/fluxcd/flux2/pull/5892)\n\n**Full Changelog**: \n\n### [`v2.8.8`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.8)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.7...v2.8.8)\n\n##### Highlights\n\nFlux v2.8.8 is a patch release that includes CVE fixes via go-git v5.19.1 (source-controller, image-automation-controller), reliability fixes in helm-controller and source-controller, the move of Helm back to upstream v4.2.0, support for GCP sovereign cloud artifact registries, and dependency updates. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Add a configurable HTTP timeout for artifact fetching, preventing fetches that could block indefinitely and stall reconciliations (helm-controller)\n- Fix unbounded memory growth caused by a Kubernetes client transport retry wrapper accumulating on every reconcile (helm-controller)\n- Stop force-applying non-CRD objects placed under a chart's `crds/` directory (helm-controller)\n- Fix the Helm test action failing to find releases with names longer than 53 characters (helm-controller)\n- Improve path handling in the source reconcilers (source-controller)\n- Support Helm semver build-metadata encoding in OCIRepository tags (source-controller)\n\nImprovements:\n\n- Update go-git to v5.19.1 which fixes [CVE-2026-45571](https://redirect.github.com/advisories/GHSA-crhj-59gh-8x96) and [CVE-2026-45570](https://redirect.github.com/advisories/GHSA-m7cr-m3pv-hgrp) (source-controller, image-automation-controller)\n- Move Helm back to upstream v4.2.0 (source-controller, helm-controller)\n- Add support for GCP sovereign cloud artifact registries (source-controller, image-reflector-controller)\n- Upgrade Kubernetes to 1.36.1 (source-controller, helm-controller)\n- Update fluxcd/pkg dependencies\n\n##### Components changelog\n\n- helm-controller [v1.5.5](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.5/CHANGELOG.md)\n- image-automation-controller [v1.1.4](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.4/CHANGELOG.md)\n- image-reflector-controller [v1.1.2](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.1.2/CHANGELOG.md)\n- source-controller [v1.8.5](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.5/CHANGELOG.md)\n\n##### CLI changelog\n\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5904](https://redirect.github.com/fluxcd/flux2/pull/5904)\n\n**Full Changelog**: \n\n### [`v2.8.7`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.7)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.6...v2.8.7)\n\n##### Highlights\n\nFlux v2.8.7 is a patch release that includes a bug fix in kustomize-controller, a CVE fix in source-controller and image-automation-controller via go-git v5.19.0, and dependency updates. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix management of objects annotated with `kustomize.toolkit.fluxcd.io/ssa: IfNotPresent` where non-namespaced resources were being deleted and recreated on each reconciliation (kustomize-controller)\n\nImprovements:\n\n- Update go-git to v5.19.0 which fixes [CVE-2026-45022](https://redirect.github.com/advisories/GHSA-389r-gv7p-r3rp) (source-controller, image-automation-controller)\n- Update fluxcd/pkg dependencies (source-controller, kustomize-controller, image-automation-controller)\n\n##### Components changelog\n\n- helm-controller [v1.5.4](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.4/CHANGELOG.md)\n- image-automation-controller [v1.1.3](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.3/CHANGELOG.md)\n- kustomize-controller [v1.8.5](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.5/CHANGELOG.md)\n- notification-controller [v1.8.4](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.4/CHANGELOG.md)\n- source-controller [v1.8.4](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.4/CHANGELOG.md)\n\n##### CLI changelog\n\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5891](https://redirect.github.com/fluxcd/flux2/pull/5891)\n\n**Full Changelog**: \n\n### [`v2.8.6`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.6)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.5...v2.8.6)\n\n#### Highlights\n\nFlux v2.8.6 is a patch release that includes bug fixes and improvements across helm-controller, image-automation-controller, kustomize-controller, notification-controller, and source-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix a post-renderer conflict between overlapping hooks and templates (helm-controller)\n- Ignore force replace when server-side apply is enabled (helm-controller)\n- Fix a regression where generic providers would not forward commit status events (notification-controller)\n- Require the `audience` field on the GCR Receiver secret for tighter verification \u2014 will become mandatory in Flux v2.9 (notification-controller)\n\nImprovements:\n\n- Introduce the `MigrateAPIVersion` feature gate for migrating the API version of resources in managed field entries (kustomize-controller)\n- Update go-git to v5.18.0 bringing performance improvements for Git operations (source-controller, image-automation-controller)\n\n#### Components changelog\n\n- helm-controller [v1.5.4](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.4/CHANGELOG.md)\n- image-automation-controller [v1.1.2](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.2/CHANGELOG.md)\n- kustomize-controller [v1.8.4](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.4/CHANGELOG.md)\n- notification-controller [v1.8.4](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.4/CHANGELOG.md)\n- source-controller [v1.8.3](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.3/CHANGELOG.md)\n\n#### CLI changelog\n\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5857](https://redirect.github.com/fluxcd/flux2/pull/5857)\n\n**Full Changelog**: \n\n### [`v2.8.5`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.5)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.4...v2.8.5)\n\n#### Highlights\n\nFlux v2.8.5 is a patch release that includes bug fixes and improvements across kustomize-controller, source-controller, and notification-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix a race condition where a cancelled reconciliation could leave stale data in the cache, causing Kustomizations to get stuck (kustomize-controller)\n- Fix Azure Blob prefix option not being passed to the storage client (source-controller)\n\nImprovements:\n\n- Improve error message for encrypted SSH keys without password (source-controller)\n- Add optional `email` and `audience` fields to the GCR Receiver for tighter verification (notification-controller)\n- Add provider manifest example for Azure Event Hub managed identity authentication (notification-controller)\n\n#### Components changelog\n\n- kustomize-controller [v1.8.3](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.3/CHANGELOG.md)\n- source-controller [v1.8.2](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.2/CHANGELOG.md)\n- notification-controller [v1.8.3](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.3/CHANGELOG.md)\n\n#### CLI changelog\n\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5822](https://redirect.github.com/fluxcd/flux2/pull/5822)\n\n**Full Changelog**: \n\n### [`v2.8.4`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.4)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.3...v2.8.4)\n\n#### Highlights\n\nFlux v2.8.4 is a patch release that includes fixes for the Flux CLI. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix `flux build ks` and `flux diff ks` on Windows\n- Fix `--source` flag validation in `create kustomization` command\n\n#### CLI changelog\n\n- Update fluxcd/pkg dependencies by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5796](https://redirect.github.com/fluxcd/flux2/pull/5796)\n- \\[release/v2.8.x] fix: validate --source flag in create kustomization command by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5799](https://redirect.github.com/fluxcd/flux2/pull/5799)\n\n**Full Changelog**: \n\n### [`v2.8.3`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.3)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.2...v2.8.3)\n\n#### Highlights\n\nFlux v2.8.3 is a patch release that fixes a regression in helm-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix templating errors for charts that include `---` in the content, e.g. YAML separators, embedded scripts, CAs inside ConfigMaps (helm-controller)\n\n#### Components changelog\n\n- helm-controller [v1.5.3](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.3/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.8.x] Add target branch name to update branch by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5774](https://redirect.github.com/fluxcd/flux2/pull/5774)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5779](https://redirect.github.com/fluxcd/flux2/pull/5779)\n\n**Full Changelog**: \n\n### [`v2.8.2`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.2)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.1...v2.8.2)\n\n##### Highlights\n\nFlux v2.8.2 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix enqueuing new reconciliation requests for events on source Flux objects when they are already reconciling the revision present in the watch event (kustomize-controller, helm-controller)\n- Fix the Go templates bug of YAML separator `---` getting concatenated to `apiVersion:` by updating to Helm 4.1.3 (helm-controller)\n- Fix canceled HelmReleases getting stuck when they don't have a retry strategy configured by introducing a new feature gate `DefaultToRetryOnFailure` that improves the experience when the `CancelHealthCheckOnNewRevision` is enabled (helm-controller)\n- Fix the auth scope for Azure Container Registry to use the ACR-specific scope (source-controller, image-reflector-controller)\n- Fix potential Denial of Service (DoS) during TLS handshakes (CVE-2026-27138) by building all controllers with Go 1.26.1\n\n##### Components changelog\n\n- source-controller [v1.8.1](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.1/CHANGELOG.md)\n- kustomize-controller [v1.8.2](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.2/CHANGELOG.md)\n- notification-controller [v1.8.2](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.2/CHANGELOG.md)\n- helm-controller [v1.5.2](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.2/CHANGELOG.md)\n- image-reflector-controller [v1.1.1](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.1.1/CHANGELOG.md)\n- image-automation-controller [v1.1.1](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.1/CHANGELOG.md)\n- source-watcher [v2.1.1](https://redirect.github.com/fluxcd/source-watcher/blob/v2.1.1/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.8.x] build(deps): bump the ci group across 1 directory with 11 updates by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5765](https://redirect.github.com/fluxcd/flux2/pull/5765)\n- Update fluxcd/pkg dependencies by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5767](https://redirect.github.com/fluxcd/flux2/pull/5767)\n- Update toolkit components by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5770](https://redirect.github.com/fluxcd/flux2/pull/5770)\n- Update fluxcd/pkg dependencies by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5771](https://redirect.github.com/fluxcd/flux2/pull/5771)\n\n**Full Changelog**: \n\n### [`v2.8.1`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.1)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.0...v2.8.1)\n\n##### Highlights\n\nFlux v2.8.1 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix Git commit status events being dropped for Kustomizations (notification-controller)\n- Fix health check for StatefulSets when the Pods are Pending/Unschedulable during rollout (helm-controller, kustomize-controller)\n\n##### Components changelog\n\n- kustomize-controller [v1.8.1](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.1/CHANGELOG.md)\n- notification-controller [v1.8.1](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.1/CHANGELOG.md)\n- helm-controller [v1.5.1](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.1/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.8.x] Remove no longer needed workaround for Flux 2.8 by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5735](https://redirect.github.com/fluxcd/flux2/pull/5735)\n- Update fluxcd/pkg dependencies by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5739](https://redirect.github.com/fluxcd/flux2/pull/5739)\n- \\[release/v2.8.x] Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5741](https://redirect.github.com/fluxcd/flux2/pull/5741)\n\n**Full Changelog**: \n\n### [`v2.8.0`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.0)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.5...v2.8.0)\n\n##### Highlights\n\nFlux v2.8.0 is a feature release. Users are encouraged to upgrade for the best experience.\n\nFor a compressive overview of new features and API changes included in this release, please refer to the [Announcing Flux 2.8 GA blog post](https://fluxcd.io/blog/2026/02/flux-v2.8.0/).\n\nOverview of the new features:\n\n- Helm v4 support, including server-side apply and kstatus-based health checking (`HelmRelease`)\n- Readiness evaluation of Helm-managed objects with CEL expressions (`HelmRelease`)\n- Improved observability of Helm releases with inventory tracking in `.status.inventory` (`HelmRelease`)\n- Reduced the mean time to recovery of Flux-managed applications via `CancelHealthCheckOnNewRevision` feature gate (`Kustomization`, `HelmRelease`)\n- Support for commenting on Pull Requests directly from Flux notifications (`Provider`)\n- Custom SSA apply stages for ordering resource application in kustomize-controller (`Kustomization`)\n- Automatic GitHub App installation ID lookup from the repository owner (`GitRepository`, `ImageUpdateAutomation`, `Provider`)\n- Support for Cosign v3 for verifying OCI artifacts and container images (`OCIRepository`)\n- ArtifactGenerator support for extracting and modifying Helm charts (`ArtifactGenerator`)\n- Bypass cache when fetching source objects via `DirectSourceFetch` feature gate (`Kustomization`, `HelmRelease`, `ArtifactGenerator`)\n\n\u2764\ufe0f Big thanks to all the Flux contributors that helped us with this release!\n\n##### Kubernetes compatibility\n\nThis release is compatible with the following Kubernetes versions:\n\n| Kubernetes version | Minimum required |\n| ------------------ | ---------------- |\n| `v1.33` | `>= 1.32.0` |\n| `v1.34` | `>= 1.34.1` |\n| `v1.35` | `>= 1.35.0` |\n\n> \\[!NOTE]\n> Note that the Flux project offers support only for the latest three minor versions of Kubernetes.\n> Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as\n> [ControlPlane](https://control-plane.io/enterprise-for-flux-cd/) that provide enterprise support for Flux.\n\n##### OpenShift compatibility\n\nFlux can be installed on Red Hat OpenShift cluster directly from OperatorHub using [Flux Operator](https://operatorhub.io/operator/flux-operator). The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.\n\n##### Upgrade procedure\n\n:warning: The Flux APIs `v1beta2` and `v2beta2` (deprecated in 2024) have reached end-of-life and have been removed from the CRDs.\n\nPlease follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from older versions of Flux to v2.8.\n\n##### Components changelog\n\n- source-controller [v1.8.0](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.0/CHANGELOG.md)\n- kustomize-controller [v1.8.0](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.0/CHANGELOG.md)\n- notification-controller [v1.8.0](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.0/CHANGELOG.md)\n- helm-controller [v1.5.0](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.0/CHANGELOG.md)\n- image-reflector-controller [v1.1.0](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.1.0/CHANGELOG.md)\n- image-automation-controller [v1.1.0](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.0/CHANGELOG.md)\n- source-watcher [v2.1.0](https://redirect.github.com/fluxcd/source-watcher/blob/v2.1.0/CHANGELOG.md)\n\n##### CLI changelog\n\n- ci: Set `GITHUB_TOKEN` in the `release-flux-manifests` workflow by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5547](https://redirect.github.com/fluxcd/flux2/pull/5547)\n- Add backport label for Flux 2.7 by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5550](https://redirect.github.com/fluxcd/flux2/pull/5550)\n- build(deps): bump the ci group across 1 directory with 3 updates by [@dependabot](https://redirect.github.com/dependabot)\\[bot] in [#5548](https://redirect.github.com/fluxcd/flux2/pull/5548)\n- Fix `flux push artifact` not working with `--provider` by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5551](https://redirect.github.com/fluxcd/flux2/pull/5551)\n- Extend `flux migrate` to work with local files by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5554](https://redirect.github.com/fluxcd/flux2/pull/5554)\n- Improve `flux migrate` for live cluster migrations by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5558](https://redirect.github.com/fluxcd/flux2/pull/5558)\n- Fix `flux migrate -f` command to work with comments by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5560](https://redirect.github.com/fluxcd/flux2/pull/5560)\n- Add source-watcher to docs by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5562](https://redirect.github.com/fluxcd/flux2/pull/5562)\n- Fix `flux migrate -f` not considering kind comments by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5563](https://redirect.github.com/fluxcd/flux2/pull/5563)\n- refactor: convert `Kustomization` resource into unstructured map only once during variable substitution by [@ramasai1](https://redirect.github.com/ramasai1) in [#5566](https://redirect.github.com/fluxcd/flux2/pull/5566)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5568](https://redirect.github.com/fluxcd/flux2/pull/5568)\n- Disable AUR publishing by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5570](https://redirect.github.com/fluxcd/flux2/pull/5570)\n- Fix manifest generation for `--storage-adv-addr` and `--events-addr` flags by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5574](https://redirect.github.com/fluxcd/flux2/pull/5574)\n- Update dependencies to Kubernetes v1.34.1 and Go 1.25.2 by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5576](https://redirect.github.com/fluxcd/flux2/pull/5576)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5578](https://redirect.github.com/fluxcd/flux2/pull/5578)\n- Restore GitHub PAT for backports by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5581](https://redirect.github.com/fluxcd/flux2/pull/5581)\n- \\[RFC-0012] Add command `flux get source external` by [@dgunzy](https://redirect.github.com/dgunzy) in [#5555](https://redirect.github.com/fluxcd/flux2/pull/5555)\n- fix: handle error when writing password prompt to stdout by [@akshatsinha0](https://redirect.github.com/akshatsinha0) in [#5589](https://redirect.github.com/fluxcd/flux2/pull/5589)\n- Pin cosign to v2.6.1 by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5594](https://redirect.github.com/fluxcd/flux2/pull/5594)\n- \\[RFC-0012] Add command `flux export source external` by [@dgunzy](https://redirect.github.com/dgunzy) in [#5583](https://redirect.github.com/fluxcd/flux2/pull/5583)\n- Fix bootstrap e2e test for image policy by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5604](https://redirect.github.com/fluxcd/flux2/pull/5604)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5603](https://redirect.github.com/fluxcd/flux2/pull/5603)\n- fix: return accepted values for flags when calling Values.Type() by [@jaxels10](https://redirect.github.com/jaxels10) in [#5602](https://redirect.github.com/fluxcd/flux2/pull/5602)\n- ci: Include source-watcher in the e2e test suite by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5614](https://redirect.github.com/fluxcd/flux2/pull/5614)\n- Add source.extensions.fluxcd.io group to aggregated RBAC roles by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5627](https://redirect.github.com/fluxcd/flux2/pull/5627)\n- Fix panic on reconcile with source of ExternalArtifact kind by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5630](https://redirect.github.com/fluxcd/flux2/pull/5630)\n- Upgrade k8s to 1.34.2, c-r to 0.22.4 and helm to 3.19.2 by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5633](https://redirect.github.com/fluxcd/flux2/pull/5633)\n- diff: report if object is skipped by [@hown3d](https://redirect.github.com/hown3d) in [#5625](https://redirect.github.com/fluxcd/flux2/pull/5625)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5639](https://redirect.github.com/fluxcd/flux2/pull/5639)\n- Allow option to skip tenant namespace creation by [@anshuishere](https://redirect.github.com/anshuishere) in [#5597](https://redirect.github.com/fluxcd/flux2/pull/5597)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5648](https://redirect.github.com/fluxcd/flux2/pull/5648)\n- fix: [#5654](https://redirect.github.com/fluxcd/flux2/issues/5654) by checking if both --chart and --chart-ref are set by [@jaxels10](https://redirect.github.com/jaxels10) in [#5656](https://redirect.github.com/fluxcd/flux2/pull/5656)\n- Added retry logic with delays to the Flux CLI download by [@ivan-munteanu](https://redirect.github.com/ivan-munteanu) in [#5659](https://redirect.github.com/fluxcd/flux2/pull/5659)\n- Run conformance tests for Kubernetes 1.35.0 by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5663](https://redirect.github.com/fluxcd/flux2/pull/5663)\n- fix: normalize path for Windows compatibility by [@sibasispadhi](https://redirect.github.com/sibasispadhi) in [#5674](https://redirect.github.com/fluxcd/flux2/pull/5674)\n- Introduce support for looking up GH app installation ID by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5682](https://redirect.github.com/fluxcd/flux2/pull/5682)\n- Update dependencies to Kubernetes v1.35.0 by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5688](https://redirect.github.com/fluxcd/flux2/pull/5688)\n- Fix resume command logging success after reconciliation failure by [@Aman-Cool](https://redirect.github.com/Aman-Cool) in [#5690](https://redirect.github.com/fluxcd/flux2/pull/5690)\n- Add 2.8 to supported versions for `flux migrate -f` by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5713](https://redirect.github.com/fluxcd/flux2/pull/5713)\n- Introduce workflow for bumping fluxcd/pkg deps by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5717](https://redirect.github.com/fluxcd/flux2/pull/5717)\n- Update fluxcd/pkg dependencies by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5719](https://redirect.github.com/fluxcd/flux2/pull/5719)\n- Fix event listing ignoring pagination token by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5721](https://redirect.github.com/fluxcd/flux2/pull/5721)\n- Build with Go 1.26 by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5723](https://redirect.github.com/fluxcd/flux2/pull/5723)\n- Update toolkit components by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5722](https://redirect.github.com/fluxcd/flux2/pull/5722)\n- Update helm-controller to v1.5.0 by [@fluxcdbot](https://redirect.github.com/fluxcdbot) in [#5725](https://redirect.github.com/fluxcd/flux2/pull/5725)\n- build(deps): bump the ci group across 1 directory with 12 updates by [@dependabot](https://redirect.github.com/dependabot)\\[bot] in [#5720](https://redirect.github.com/fluxcd/flux2/pull/5720)\n- Fix bootstrap failure on Windows cross-drive paths by [@veeceey](https://redirect.github.com/veeceey) in [#5726](https://redirect.github.com/fluxcd/flux2/pull/5726)\n- Dump debug info on e2e tests by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5729](https://redirect.github.com/fluxcd/flux2/pull/5729)\n- Set Kubernetes 1.33 as min supported version by [@matheuscscp](https://redirect.github.com/matheuscscp) in [#5730](https://redirect.github.com/fluxcd/flux2/pull/5730)\n- Update conformance tests to min Kubernetes 1.33 by [@stefanprodan](https://redirect.github.com/stefanprodan) in [#5731](https://redirect.github.com/fluxcd/flux2/pull/5731)\n\n##### New Contributors\n\n- [@ramasai1](https://redirect.github.com/ramasai1) made their first contribution in [#5566](https://redirect.github.com/fluxcd/flux2/pull/5566)\n- [@akshatsinha0](https://redirect.github.com/akshatsinha0) made their first contribution in [#5589](https://redirect.github.com/fluxcd/flux2/pull/5589)\n- [@jaxels10](https://redirect.github.com/jaxels10) made their first contribution in [#5602](https://redirect.github.com/fluxcd/flux2/pull/5602)\n- [@hown3d](https://redirect.github.com/hown3d) made their first contribution in [#5625](https://redirect.github.com/fluxcd/flux2/pull/5625)\n- [@anshuishere](https://redirect.github.com/anshuishere) made their first contribution in [#5597](https://redirect.github.com/fluxcd/flux2/pull/5597)\n- [@ivan-munteanu](https://redirect.github.com/ivan-munteanu) made their first contribution in [#5659](https://redirect.github.com/fluxcd/flux2/pull/5659)\n- [@sibasispadhi](https://redirect.github.com/sibasispadhi) made their first contribution in [#5674](https://redirect.github.com/fluxcd/flux2/pull/5674)\n- [@Aman-Cool](https://redirect.github.com/Aman-Cool) made their first contribution in [#5690](https://redirect.github.com/fluxcd/flux2/pull/5690)\n- [@veeceey](https://redirect.github.com/veeceey) made their first contribution in [#5726](https://redirect.github.com/fluxcd/flux2/pull/5726)\n\n**Full Changelog**: \n\n### [`v2.7.5`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.5)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.4...v2.7.5)\n\n##### Highlights\n\nFlux v2.7.5 is a patch release that comes with fixes to helm-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix HelmRelease history truncation when using the `RetryOnFailure` str\n\n> \u2702 **Note**\n> \n> PR body was truncated to here.\n\n\n \n\n---\n\n### Configuration\n\n\ud83d\udcc5 **Schedule**: (UTC)\n\n- Branch creation\n - At any time (no schedule defined)\n- Automerge\n - At any time (no schedule defined)\n\n\ud83d\udea6 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.\n\n\u267b **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.\n\n\ud83d\udd15 **Ignore**: Close this PR and you won't be reminded about this update again.\n\n---\n\n - [ ] If you want to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/vexxhost/atmosphere.common).\n\n",
"change_url": "https://github.com/vexxhost/atmosphere.common/pull/102",
"commit_id": "81d78f20d6b8b6498e6ff2a32986b184e88bb3ca",
"patchset": "81d78f20d6b8b6498e6ff2a32986b184e88bb3ca",
"project": {
"canonical_hostname": "github.com",
"canonical_name": "github.com/vexxhost/atmosphere.common",
"name": "vexxhost/atmosphere.common",
"short_name": "atmosphere.common",
"src_dir": "src/github.com/vexxhost/atmosphere.common"
},
"topic": null
}
],
"collections_path": "/home/zuul/.ansible/collections",
"executable": "uv",
"project_dir": "src/github.com/vexxhost/atmosphere.common",
"projects": [
{
"canonical_hostname": "github.com",
"canonical_name": "github.com/vexxhost/atmosphere.common",
"checkout": "main",
"checkout_description": "zuul branch",
"commit": "f24a6c545c72ad8eaeb8ffa2f818e3ebd8fde952",
"name": "vexxhost/atmosphere.common",
"required": false,
"short_name": "atmosphere.common",
"src_dir": "src/github.com/vexxhost/atmosphere.common"
}
],
"workspace_dir": "/home/zuul"
}
},
"log": [
"Skipping kubernetes.core: no checked-out sibling",
"Skipping openstack.cloud: no checked-out sibling",
"Skipping vexxhost.kubernetes: no checked-out sibling"
],
"msg": "Skipping kubernetes.core: no checked-out sibling\nSkipping openstack.cloud: no checked-out sibling\nSkipping vexxhost.kubernetes: no checked-out sibling"
}
},
"task": {
"duration": {
"end": "2026-08-31T17:52:57.830804Z",
"start": "2026-08-31T17:52:57.391037Z"
},
"id": "0242ac17-0010-8b1d-f55c-00000000000a",
"name": "Install Ansible collection siblings"
}
}
]
}
],
"stats": {
"controller": {
"changed": 2,
"failures": 0,
"ignored": 0,
"ok": 3,
"rescued": 0,
"skipped": 0,
"unreachable": 0
}
},
"trusted": false
},
{
"branch": "main",
"index": "2",
"phase": "pre",
"playbook": "github.com/vexxhost/atmosphere.common/test-playbooks/molecule/pre.yml",
"plays": [
{
"play": {
"duration": {
"end": "2026-08-31T17:53:06.555958Z",
"start": "2026-08-31T17:52:58.559030Z"
},
"id": "0242ac17-0010-22b1-c370-000000000002",
"name": "Prepare Molecule log collection"
},
"tasks": [
{
"hosts": {
"controller": {
"action": "ansible.builtin.apt",
"cache_update_time": 1788198782,
"cache_updated": true,
"changed": true,
"diff": {},
"invocation": {
"module_args": {
"allow_change_held_packages": false,
"allow_downgrade": false,
"allow_unauthenticated": false,
"autoclean": false,
"autoremove": false,
"cache_valid_time": 0,
"clean": false,
"deb": null,
"default_release": null,
"dpkg_options": "force-confdef,force-confold",
"fail_on_autoremove": false,
"force": false,
"force_apt_get": false,
"install_recommends": null,
"lock_timeout": 60,
"name": "jq",
"only_upgrade": false,
"package": [
"jq"
],
"policy_rc_d": null,
"purge": false,
"state": "present",
"update_cache": true,
"update_cache_retries": 5,
"update_cache_retry_max_delay": 12,
"upgrade": null
}
},
"stderr": "debconf: delaying package configuration, since apt-utils is not installed\n",
"stderr_lines": [
"debconf: delaying package configuration, since apt-utils is not installed"
],
"stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libjq1 libonig5\nThe following NEW packages will be installed:\n jq libjq1 libonig5\n0 upgraded, 3 newly installed, 0 to remove and 26 not upgraded.\nNeed to get 380 kB of archives.\nAfter this operation, 1127 kB of additional disk space will be used.\nGet:1 http://yul2.clouds.archive.ubuntu.com/ubuntu noble/main amd64 libonig5 amd64 6.9.9-1build1 [172 kB]\nGet:2 http://yul2.clouds.archive.ubuntu.com/ubuntu noble-updates/main amd64 libjq1 amd64 1.7.1-3ubuntu0.24.04.2 [142 kB]\nGet:3 http://yul2.clouds.archive.ubuntu.com/ubuntu noble-updates/main amd64 jq amd64 1.7.1-3ubuntu0.24.04.2 [65.7 kB]\nFetched 380 kB in 1s (590 kB/s)\nSelecting previously unselected package libonig5:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 31242 files and directories currently installed.)\r\nPreparing to unpack .../libonig5_6.9.9-1build1_amd64.deb ...\r\nUnpacking libonig5:amd64 (6.9.9-1build1) ...\r\nSelecting previously unselected package libjq1:amd64.\r\nPreparing to unpack .../libjq1_1.7.1-3ubuntu0.24.04.2_amd64.deb ...\r\nUnpacking libjq1:amd64 (1.7.1-3ubuntu0.24.04.2) ...\r\nSelecting previously unselected package jq.\r\nPreparing to unpack .../jq_1.7.1-3ubuntu0.24.04.2_amd64.deb ...\r\nUnpacking jq (1.7.1-3ubuntu0.24.04.2) ...\r\nSetting up libonig5:amd64 (6.9.9-1build1) ...\r\nSetting up libjq1:amd64 (1.7.1-3ubuntu0.24.04.2) ...\r\nSetting up jq (1.7.1-3ubuntu0.24.04.2) ...\r\nProcessing triggers for libc-bin (2.39-0ubuntu8.8) ...\r\n",
"stdout_lines": [
"Reading package lists...",
"Building dependency tree...",
"Reading state information...",
"The following additional packages will be installed:",
" libjq1 libonig5",
"The following NEW packages will be installed:",
" jq libjq1 libonig5",
"0 upgraded, 3 newly installed, 0 to remove and 26 not upgraded.",
"Need to get 380 kB of archives.",
"After this operation, 1127 kB of additional disk space will be used.",
"Get:1 http://yul2.clouds.archive.ubuntu.com/ubuntu noble/main amd64 libonig5 amd64 6.9.9-1build1 [172 kB]",
"Get:2 http://yul2.clouds.archive.ubuntu.com/ubuntu noble-updates/main amd64 libjq1 amd64 1.7.1-3ubuntu0.24.04.2 [142 kB]",
"Get:3 http://yul2.clouds.archive.ubuntu.com/ubuntu noble-updates/main amd64 jq amd64 1.7.1-3ubuntu0.24.04.2 [65.7 kB]",
"Fetched 380 kB in 1s (590 kB/s)",
"Selecting previously unselected package libonig5:amd64.",
"(Reading database ... ",
"(Reading database ... 5%",
"(Reading database ... 10%",
"(Reading database ... 15%",
"(Reading database ... 20%",
"(Reading database ... 25%",
"(Reading database ... 30%",
"(Reading database ... 35%",
"(Reading database ... 40%",
"(Reading database ... 45%",
"(Reading database ... 50%",
"(Reading database ... 55%",
"(Reading database ... 60%",
"(Reading database ... 65%",
"(Reading database ... 70%",
"(Reading database ... 75%",
"(Reading database ... 80%",
"(Reading database ... 85%",
"(Reading database ... 90%",
"(Reading database ... 95%",
"(Reading database ... 100%",
"(Reading database ... 31242 files and directories currently installed.)",
"Preparing to unpack .../libonig5_6.9.9-1build1_amd64.deb ...",
"Unpacking libonig5:amd64 (6.9.9-1build1) ...",
"Selecting previously unselected package libjq1:amd64.",
"Preparing to unpack .../libjq1_1.7.1-3ubuntu0.24.04.2_amd64.deb ...",
"Unpacking libjq1:amd64 (1.7.1-3ubuntu0.24.04.2) ...",
"Selecting previously unselected package jq.",
"Preparing to unpack .../jq_1.7.1-3ubuntu0.24.04.2_amd64.deb ...",
"Unpacking jq (1.7.1-3ubuntu0.24.04.2) ...",
"Setting up libonig5:amd64 (6.9.9-1build1) ...",
"Setting up libjq1:amd64 (1.7.1-3ubuntu0.24.04.2) ...",
"Setting up jq (1.7.1-3ubuntu0.24.04.2) ...",
"Processing triggers for libc-bin (2.39-0ubuntu8.8) ..."
]
}
},
"task": {
"duration": {
"end": "2026-08-31T17:53:06.555958Z",
"start": "2026-08-31T17:52:58.570603Z"
},
"id": "0242ac17-0010-22b1-c370-000000000004",
"name": "Install jq for log collection"
}
}
]
}
],
"stats": {
"controller": {
"changed": 1,
"failures": 0,
"ignored": 0,
"ok": 1,
"rescued": 0,
"skipped": 0,
"unreachable": 0
}
},
"trusted": false
},
{
"branch": "main",
"index": "0",
"phase": "run",
"playbook": "github.com/vexxhost/zuul-jobs/playbooks/molecule/run.yaml",
"plays": [
{
"play": {
"duration": {
"end": "2026-08-31T17:54:19.015467Z",
"start": "2026-08-31T17:53:07.305883Z"
},
"id": "0242ac17-0010-e6a4-b97f-000000000002",
"name": "all"
},
"tasks": [
{
"hosts": {
"controller": {
"action": "ansible.builtin.stat",
"changed": false,
"msg": "All items completed",
"results": [
{
"ansible_loop_var": "item",
"changed": false,
"failed": false,
"invocation": {
"module_args": {
"checksum_algorithm": "sha1",
"follow": true,
"get_attributes": true,
"get_checksum": true,
"get_mime": true,
"path": "src/github.com/vexxhost/atmosphere.common"
}
},
"item": "src/github.com/vexxhost/atmosphere.common",
"stat": {
"atime": 1788198771.9289515,
"attr_flags": "e",
"attributes": [
"extents"
],
"block_size": 4096,
"blocks": 8,
"charset": "unknown",
"ctime": 1788198771.96597,
"dev": 64769,
"device_type": 0,
"executable": true,
"exists": true,
"gid": 1000,
"gr_name": "zuul",
"inode": 1034272,
"isblk": false,
"ischr": false,
"isdir": true,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": false,
"issock": false,
"isuid": false,
"mimetype": "unknown",
"mode": "0755",
"mtime": 1788198755.878881,
"nlink": 10,
"path": "src/github.com/vexxhost/atmosphere.common",
"pw_name": "zuul",
"readable": true,
"rgrp": true,
"roth": true,
"rusr": true,
"size": 4096,
"uid": 1000,
"version": "3047115091",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": true,
"xoth": true,
"xusr": true
}
},
{
"ansible_loop_var": "item",
"changed": false,
"failed": false,
"invocation": {
"module_args": {
"checksum_algorithm": "sha1",
"follow": true,
"get_attributes": true,
"get_checksum": true,
"get_mime": true,
"path": "src/github.com/vexxhost/atmosphere.common/molecule/secretgen-controller/inventory"
}
},
"item": "src/github.com/vexxhost/atmosphere.common/molecule/secretgen-controller/inventory",
"stat": {
"exists": false
}
},
{
"ansible_loop_var": "item",
"changed": false,
"failed": false,
"invocation": {
"module_args": {
"checksum_algorithm": "sha1",
"follow": true,
"get_attributes": true,
"get_checksum": true,
"get_mime": true,
"path": "src/github.com/vexxhost/atmosphere.common/extensions/molecule/secretgen-controller/inventory"
}
},
"item": "src/github.com/vexxhost/atmosphere.common/extensions/molecule/secretgen-controller/inventory",
"stat": {
"exists": false
}
}
]
}
},
"task": {
"duration": {
"end": "2026-08-31T17:53:08.044638Z",
"start": "2026-08-31T17:53:07.317572Z"
},
"id": "0242ac17-0010-e6a4-b97f-000000000004",
"name": "Check inventory directories"
}
},
{
"hosts": {
"controller": {
"action": "ansible.builtin.copy",
"changed": true,
"msg": "All items completed",
"results": [
{
"ansible_loop_var": "item",
"changed": true,
"checksum": "a7bf3aaf141508c2d70afe14a3357549a47b66ff",
"dest": "src/github.com/vexxhost/atmosphere.common/inventory.yaml",
"diff": [],
"failed": false,
"gid": 1000,
"group": "zuul",
"invocation": {
"module_args": {
"_original_basename": "inventory.yaml",
"attributes": null,
"backup": false,
"checksum": "a7bf3aaf141508c2d70afe14a3357549a47b66ff",
"content": null,
"dest": "src/github.com/vexxhost/atmosphere.common",
"directory_mode": null,
"follow": false,
"force": true,
"group": null,
"local_follow": null,
"mode": "0644",
"owner": null,
"remote_src": null,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": "/home/zuul/.ansible/tmp/ansible-tmp-1788198788.123632-9-147100535121602/source",
"unsafe_writes": false,
"validate": null
}
},
"item": {
"ansible_loop_var": "item",
"changed": false,
"failed": false,
"invocation": {
"module_args": {
"checksum_algorithm": "sha1",
"follow": true,
"get_attributes": true,
"get_checksum": true,
"get_mime": true,
"path": "src/github.com/vexxhost/atmosphere.common"
}
},
"item": "src/github.com/vexxhost/atmosphere.common",
"stat": {
"atime": 1788198771.9289515,
"attr_flags": "e",
"attributes": [
"extents"
],
"block_size": 4096,
"blocks": 8,
"charset": "unknown",
"ctime": 1788198771.96597,
"dev": 64769,
"device_type": 0,
"executable": true,
"exists": true,
"gid": 1000,
"gr_name": "zuul",
"inode": 1034272,
"isblk": false,
"ischr": false,
"isdir": true,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": false,
"issock": false,
"isuid": false,
"mimetype": "unknown",
"mode": "0755",
"mtime": 1788198755.878881,
"nlink": 10,
"path": "src/github.com/vexxhost/atmosphere.common",
"pw_name": "zuul",
"readable": true,
"rgrp": true,
"roth": true,
"rusr": true,
"size": 4096,
"uid": 1000,
"version": "3047115091",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": true,
"xoth": true,
"xusr": true
}
},
"md5sum": "ff7f890ed660f20a5a534bedb08a8b7c",
"mode": "0644",
"owner": "zuul",
"size": 353376,
"src": "/home/zuul/.ansible/tmp/ansible-tmp-1788198788.123632-9-147100535121602/source",
"state": "file",
"uid": 1000
},
{
"ansible_loop_var": "item",
"changed": false,
"false_condition": "item.stat.isdir | default(false)",
"item": {
"ansible_loop_var": "item",
"changed": false,
"failed": false,
"invocation": {
"module_args": {
"checksum_algorithm": "sha1",
"follow": true,
"get_attributes": true,
"get_checksum": true,
"get_mime": true,
"path": "src/github.com/vexxhost/atmosphere.common/molecule/secretgen-controller/inventory"
}
},
"item": "src/github.com/vexxhost/atmosphere.common/molecule/secretgen-controller/inventory",
"stat": {
"exists": false
}
},
"skip_reason": "Conditional result was False",
"skipped": true
},
{
"ansible_loop_var": "item",
"changed": false,
"false_condition": "item.stat.isdir | default(false)",
"item": {
"ansible_loop_var": "item",
"changed": false,
"failed": false,
"invocation": {
"module_args": {
"checksum_algorithm": "sha1",
"follow": true,
"get_attributes": true,
"get_checksum": true,
"get_mime": true,
"path": "src/github.com/vexxhost/atmosphere.common/extensions/molecule/secretgen-controller/inventory"
}
},
"item": "src/github.com/vexxhost/atmosphere.common/extensions/molecule/secretgen-controller/inventory",
"stat": {
"exists": false
}
},
"skip_reason": "Conditional result was False",
"skipped": true
}
]
}
},
"task": {
"duration": {
"end": "2026-08-31T17:53:09.013739Z",
"start": "2026-08-31T17:53:08.055806Z"
},
"id": "0242ac17-0010-e6a4-b97f-000000000005",
"name": "Copy inventory file for Zuul"
}
},
{
"hosts": {
"controller": {
"action": "ansible.builtin.replace",
"changed": true,
"msg": "All items completed",
"results": [
{
"ansible_loop_var": "item",
"changed": true,
"failed": false,
"invocation": {
"module_args": {
"after": null,
"attributes": null,
"backup": false,
"before": null,
"encoding": "utf-8",
"group": null,
"mode": null,
"owner": null,
"path": "src/github.com/vexxhost/atmosphere.common/inventory.yaml",
"regexp": "(^\\s*ansible_host:\\s*).*$",
"replace": "\\1\"{{ nodepool.private_ipv4 }}\"",
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"unsafe_writes": false,
"validate": null
}
},
"item": {
"ansible_loop_var": "item",
"changed": false,
"failed": false,
"invocation": {
"module_args": {
"checksum_algorithm": "sha1",
"follow": true,
"get_attributes": true,
"get_checksum": true,
"get_mime": true,
"path": "src/github.com/vexxhost/atmosphere.common"
}
},
"item": "src/github.com/vexxhost/atmosphere.common",
"stat": {
"atime": 1788198771.9289515,
"attr_flags": "e",
"attributes": [
"extents"
],
"block_size": 4096,
"blocks": 8,
"charset": "unknown",
"ctime": 1788198771.96597,
"dev": 64769,
"device_type": 0,
"executable": true,
"exists": true,
"gid": 1000,
"gr_name": "zuul",
"inode": 1034272,
"isblk": false,
"ischr": false,
"isdir": true,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": false,
"issock": false,
"isuid": false,
"mimetype": "unknown",
"mode": "0755",
"mtime": 1788198755.878881,
"nlink": 10,
"path": "src/github.com/vexxhost/atmosphere.common",
"pw_name": "zuul",
"readable": true,
"rgrp": true,
"roth": true,
"rusr": true,
"size": 4096,
"uid": 1000,
"version": "3047115091",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": true,
"xoth": true,
"xusr": true
}
},
"msg": "1 replacements made",
"rc": 0
},
{
"ansible_loop_var": "item",
"changed": false,
"false_condition": "item.stat.isdir | default(false)",
"item": {
"ansible_loop_var": "item",
"changed": false,
"failed": false,
"invocation": {
"module_args": {
"checksum_algorithm": "sha1",
"follow": true,
"get_attributes": true,
"get_checksum": true,
"get_mime": true,
"path": "src/github.com/vexxhost/atmosphere.common/molecule/secretgen-controller/inventory"
}
},
"item": "src/github.com/vexxhost/atmosphere.common/molecule/secretgen-controller/inventory",
"stat": {
"exists": false
}
},
"skip_reason": "Conditional result was False",
"skipped": true
},
{
"ansible_loop_var": "item",
"changed": false,
"false_condition": "item.stat.isdir | default(false)",
"item": {
"ansible_loop_var": "item",
"changed": false,
"failed": false,
"invocation": {
"module_args": {
"checksum_algorithm": "sha1",
"follow": true,
"get_attributes": true,
"get_checksum": true,
"get_mime": true,
"path": "src/github.com/vexxhost/atmosphere.common/extensions/molecule/secretgen-controller/inventory"
}
},
"item": "src/github.com/vexxhost/atmosphere.common/extensions/molecule/secretgen-controller/inventory",
"stat": {
"exists": false
}
},
"skip_reason": "Conditional result was False",
"skipped": true
}
]
}
},
"task": {
"duration": {
"end": "2026-08-31T17:53:09.416983Z",
"start": "2026-08-31T17:53:09.021118Z"
},
"id": "0242ac17-0010-e6a4-b97f-000000000006",
"name": "Switch \"ansible_host\" to private IP"
}
},
{
"hosts": {
"controller": {
"action": "ansible.builtin.command",
"changed": true,
"cmd": [
"uv",
"run",
"molecule",
"test",
"--destroy",
"never",
"-s",
"secretgen-controller"
],
"delta": "0:01:09.133439",
"end": "2026-08-31 17:54:18.940948",
"failed": true,
"invocation": {
"module_args": {
"_raw_params": "uv run molecule test --destroy never -s secretgen-controller",
"_uses_shell": false,
"argv": null,
"chdir": "src/github.com/vexxhost/atmosphere.common",
"creates": null,
"executable": null,
"expand_argument_vars": true,
"removes": null,
"stdin": null,
"stdin_add_newline": true,
"strip_empty_ends": true,
"zuul_ansible_split_streams": false,
"zuul_log_id": "0242ac17-0010-e6a4-b97f-000000000007-1-controller",
"zuul_no_log": false,
"zuul_output_max_bytes": 1073741824
}
},
"msg": "non-zero return code",
"rc": 1,
"start": "2026-08-31 17:53:09.807509",
"stderr": "",
"stderr_lines": [],
"stdout": "Using CPython 3.12.3 interpreter at: /usr/bin/python3\nCreating virtual environment at: .venv\nwarning: No `requires-python` value found in the workspace. Defaulting to `>=3.12`.\nDownloading pydantic-core (2.0MiB)\nDownloading ansible-core (2.1MiB)\nDownloading kubernetes (1.9MiB)\nDownloading cryptography (4.3MiB)\nDownloading pygments (1.2MiB)\n Downloading pydantic-core\n Downloading cryptography\n Downloading pygments\n Downloading kubernetes\n Downloading ansible-core\nInstalled 52 packages in 67ms\nINFO Collection 'atmosphere.common' detected.\nINFO Scenarios will be used from 'extensions/molecule'\nINFO [secretgen-controller > discovery] scenario test matrix: dependency, cleanup, destroy, syntax, create, prepare, converge, idempotence, side_effect, verify, cleanup, destroy\nINFO [secretgen-controller > prerun] Performing prerun with role_name_check=0...\nWARNING Retrying execution failure 250 of: ansible-galaxy collection install -vvv kubernetes.core:>=2.4.0\nERROR Command ansible-galaxy collection install -vvv kubernetes.core:>=2.4.0, returned 250 code:\nStarting galaxy collection install process\nProcess install dependency map\nthe full traceback was:\n\nTraceback (most recent call last):\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/cli/__init__.py\", line 646, in cli_executor\n exit_code = cli.run()\n ^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/cli/galaxy.py\", line 727, in run\n return context.CLIARGS()\n ^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/cli/galaxy.py\", line 98, in method_wrapper\n return wrapped_method(*args, **kwargs)\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/cli/galaxy.py\", line 1392, in execute_install\n self._execute_install_collection(\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/cli/galaxy.py\", line 1441, in _execute_install_collection\n install_collections(\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/collection/__init__.py\", line 736, in install_collections\n dependency_map = _resolve_depenency_map(\n ^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/collection/__init__.py\", line 1863, in _resolve_depenency_map\n return collection_dep_resolver.resolve(\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/resolvelib/resolvers.py\", line 546, in resolve\n state = resolution.resolve(requirements, max_rounds=max_rounds)\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/resolvelib/resolvers.py\", line 397, in resolve\n self._add_to_criteria(self.state.criteria, r, parent=None)\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/resolvelib/resolvers.py\", line 148, in _add_to_criteria\n matches = self._p.find_matches(\n ^^^^^^^^^^^^^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/dependency_resolution/providers.py\", line 477, in find_matches\n match for match in self._find_matches(list(requirements))\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/dependency_resolution/providers.py\", line 253, in _find_matches\n coll_versions = if preinstalled_candidates else self._api_proxy.get_collection_versions(first_req) # type: t.Iterable]\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/collection/galaxy_api_proxy.py\", line 103, in get_collection_versions\n return set(\n ^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/collection/galaxy_api_proxy.py\", line 103, in \n return set(\n ^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/collection/galaxy_api_proxy.py\", line 85, in _get_collection_versions\n raise last_error\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/collection/galaxy_api_proxy.py\", line 64, in _get_collection_versions\n versions = api.get_collection_versions(requirement.namespace, requirement.name)\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/api.py\", line 144, in wrapped\n return method(self, *args, **kwargs)\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/api.py\", line 873, in get_collection_versions\n data = self._call_galaxy(versions_url, error_context_msg=error_context_msg, cache=True, cache_key=cache_key)\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/module_utils/api.py\", line 169, in run_function\n return call_retryable_function()\n ^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/api.py\", line 389, in _call_galaxy\n res = path_cache\n ~~~~~~~~~~^^^^^^^^^^^\nKeyError: 'results'\n\nansible-galaxy \n config file = None\n configured module search path = \n ansible python module location = /home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible\n ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/dist-packages:/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3/dist-packages:/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/local/lib/python3.12/dist-packages:/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages\n executable location = /home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/bin/ansible-galaxy\n python version = 3.12.3 (main, Jul 15 2026, 23:46:41) (/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/bin/python)\n jinja version = 3.1.6\n libyaml = True\nNo config file found; using defaults\nCreated /home/zuul/.ansible/galaxy_token\n: Skipping Galaxy server https://galaxy.ansible.com/api/. Got an\nunexpected error when getting available versions of collection kubernetes.core:\n'results'\nERROR! Unexpected Exception, this is probably a bug: 'results'\n\nTraceback (most recent call last):\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/bin/molecule\", line 10, in \n sys.exit(main())\n ^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/click/core.py\", line 1442, in __call__\n return self.main(*args, **kwargs)\n ^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/click/core.py\", line 1363, in main\n rv = self.invoke(ctx)\n ^^^^^^^^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/click/core.py\", line 1830, in invoke\n return _process_result(sub_ctx.command.invoke(sub_ctx))\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/click/core.py\", line 1226, in invoke\n return ctx.invoke(self.callback, **ctx.params)\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/click/core.py\", line 794, in invoke\n return callback(*args, **kwargs)\n ^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/molecule/click_cfg.py\", line 583, in wrapper\n return func(*args, **kwargs)\n ^^^^^^^^^^^^^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/click/decorators.py\", line 34, in new_func\n return f(get_current_context(), *args, **kwargs)\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/molecule/click_cfg.py\", line 418, in wrapper\n return func(ctx)\n ^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/molecule/command/test.py\", line 81, in test\n base.execute_cmdline_scenarios(scenario_name, args, command_args, ansible_args, exclude)\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/molecule/command/base.py\", line 169, in execute_cmdline_scenarios\n _run_scenarios(scenarios, command_args, default_config)\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/molecule/command/base.py\", line 240, in _run_scenarios\n scenario.config.runtime.prepare_environment(\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible_compat/runtime.py\", line 752, in prepare_environment\n self.install_collection(\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible_compat/runtime.py\", line 609, in install_collection\n raise InvalidPrerequisiteError(msg)\nansible_compat.errors.InvalidPrerequisiteError: Command ansible-galaxy collection install -vvv kubernetes.core:>=2.4.0, returned 250 code:\nStarting galaxy collection install process\nProcess install dependency map\nthe full traceback was:\n\nTraceback (most recent call last):\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/cli/__init__.py\", line 646, in cli_executor\n exit_code = cli.run()\n ^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/cli/galaxy.py\", line 727, in run\n return context.CLIARGS['func']()\n ^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/cli/galaxy.py\", line 98, in method_wrapper\n return wrapped_method(*args, **kwargs)\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/cli/galaxy.py\", line 1392, in execute_install\n self._execute_install_collection(\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/cli/galaxy.py\", line 1441, in _execute_install_collection\n install_collections(\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/collection/__init__.py\", line 736, in install_collections\n dependency_map = _resolve_depenency_map(\n ^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/collection/__init__.py\", line 1863, in _resolve_depenency_map\n return collection_dep_resolver.resolve(\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/resolvelib/resolvers.py\", line 546, in resolve\n state = resolution.resolve(requirements, max_rounds=max_rounds)\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/resolvelib/resolvers.py\", line 397, in resolve\n self._add_to_criteria(self.state.criteria, r, parent=None)\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/resolvelib/resolvers.py\", line 148, in _add_to_criteria\n matches = self._p.find_matches(\n ^^^^^^^^^^^^^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/dependency_resolution/providers.py\", line 477, in find_matches\n match for match in self._find_matches(list(requirements[identifier]))\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/dependency_resolution/providers.py\", line 253, in _find_matches\n coll_versions = [] if preinstalled_candidates else self._api_proxy.get_collection_versions(first_req) # type: t.Iterable[t.Tuple[str, GalaxyAPI]]\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/collection/galaxy_api_proxy.py\", line 103, in get_collection_versions\n return set(\n ^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/collection/galaxy_api_proxy.py\", line 103, in \n return set(\n ^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/collection/galaxy_api_proxy.py\", line 85, in _get_collection_versions\n raise last_error\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/collection/galaxy_api_proxy.py\", line 64, in _get_collection_versions\n versions = api.get_collection_versions(requirement.namespace, requirement.name)\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/api.py\", line 144, in wrapped\n return method(self, *args, **kwargs)\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/api.py\", line 873, in get_collection_versions\n data = self._call_galaxy(versions_url, error_context_msg=error_context_msg, cache=True, cache_key=cache_key)\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/module_utils/api.py\", line 169, in run_function\n return call_retryable_function()\n ^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/api.py\", line 389, in _call_galaxy\n res = path_cache['results']\n ~~~~~~~~~~^^^^^^^^^^^\nKeyError: 'results'\n\nansible-galaxy [core 2.18.17]\n config file = None\n configured module search path = ['/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']\n ansible python module location = /home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible\n ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/dist-packages:/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3/dist-packages:/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/local/lib/python3.12/dist-packages:/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages\n executable location = /home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/bin/ansible-galaxy\n python version = 3.12.3 (main, Jul 15 2026, 23:46:41) [GCC 13.3.0] (/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/bin/python)\n jinja version = 3.1.6\n libyaml = True\nNo config file found; using defaults\nCreated /home/zuul/.ansible/galaxy_token\n[WARNING]: Skipping Galaxy server https://galaxy.ansible.com/api/. Got an\nunexpected error when getting available versions of collection kubernetes.core:\n'results'\nERROR! Unexpected Exception, this is probably a bug: 'results'",
"stdout_lines": [
"Using CPython 3.12.3 interpreter at: /usr/bin/python3",
"Creating virtual environment at: .venv",
"warning: No `requires-python` value found in the workspace. Defaulting to `>=3.12`.",
"Downloading pydantic-core (2.0MiB)",
"Downloading ansible-core (2.1MiB)",
"Downloading kubernetes (1.9MiB)",
"Downloading cryptography (4.3MiB)",
"Downloading pygments (1.2MiB)",
" Downloading pydantic-core",
" Downloading cryptography",
" Downloading pygments",
" Downloading kubernetes",
" Downloading ansible-core",
"Installed 52 packages in 67ms",
"INFO Collection 'atmosphere.common' detected.",
"INFO Scenarios will be used from 'extensions/molecule'",
"INFO [secretgen-controller > discovery] scenario test matrix: dependency, cleanup, destroy, syntax, create, prepare, converge, idempotence, side_effect, verify, cleanup, destroy",
"INFO [secretgen-controller > prerun] Performing prerun with role_name_check=0...",
"WARNING Retrying execution failure 250 of: ansible-galaxy collection install -vvv kubernetes.core:>=2.4.0",
"ERROR Command ansible-galaxy collection install -vvv kubernetes.core:>=2.4.0, returned 250 code:",
"Starting galaxy collection install process",
"Process install dependency map",
"the full traceback was:",
"",
"Traceback (most recent call last):",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/cli/__init__.py\", line 646, in cli_executor",
" exit_code = cli.run()",
" ^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/cli/galaxy.py\", line 727, in run",
" return context.CLIARGS()",
" ^^^^^^^^^^^^^^^^^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/cli/galaxy.py\", line 98, in method_wrapper",
" return wrapped_method(*args, **kwargs)",
" ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/cli/galaxy.py\", line 1392, in execute_install",
" self._execute_install_collection(",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/cli/galaxy.py\", line 1441, in _execute_install_collection",
" install_collections(",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/collection/__init__.py\", line 736, in install_collections",
" dependency_map = _resolve_depenency_map(",
" ^^^^^^^^^^^^^^^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/collection/__init__.py\", line 1863, in _resolve_depenency_map",
" return collection_dep_resolver.resolve(",
" ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/resolvelib/resolvers.py\", line 546, in resolve",
" state = resolution.resolve(requirements, max_rounds=max_rounds)",
" ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/resolvelib/resolvers.py\", line 397, in resolve",
" self._add_to_criteria(self.state.criteria, r, parent=None)",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/resolvelib/resolvers.py\", line 148, in _add_to_criteria",
" matches = self._p.find_matches(",
" ^^^^^^^^^^^^^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/dependency_resolution/providers.py\", line 477, in find_matches",
" match for match in self._find_matches(list(requirements))",
" ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/dependency_resolution/providers.py\", line 253, in _find_matches",
" coll_versions = if preinstalled_candidates else self._api_proxy.get_collection_versions(first_req) # type: t.Iterable]",
" ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/collection/galaxy_api_proxy.py\", line 103, in get_collection_versions",
" return set(",
" ^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/collection/galaxy_api_proxy.py\", line 103, in ",
" return set(",
" ^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/collection/galaxy_api_proxy.py\", line 85, in _get_collection_versions",
" raise last_error",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/collection/galaxy_api_proxy.py\", line 64, in _get_collection_versions",
" versions = api.get_collection_versions(requirement.namespace, requirement.name)",
" ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/api.py\", line 144, in wrapped",
" return method(self, *args, **kwargs)",
" ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/api.py\", line 873, in get_collection_versions",
" data = self._call_galaxy(versions_url, error_context_msg=error_context_msg, cache=True, cache_key=cache_key)",
" ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/module_utils/api.py\", line 169, in run_function",
" return call_retryable_function()",
" ^^^^^^^^^^^^^^^^^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/api.py\", line 389, in _call_galaxy",
" res = path_cache",
" ~~~~~~~~~~^^^^^^^^^^^",
"KeyError: 'results'",
"",
"ansible-galaxy ",
" config file = None",
" configured module search path = ",
" ansible python module location = /home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible",
" ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/dist-packages:/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3/dist-packages:/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/local/lib/python3.12/dist-packages:/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages",
" executable location = /home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/bin/ansible-galaxy",
" python version = 3.12.3 (main, Jul 15 2026, 23:46:41) (/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/bin/python)",
" jinja version = 3.1.6",
" libyaml = True",
"No config file found; using defaults",
"Created /home/zuul/.ansible/galaxy_token",
": Skipping Galaxy server https://galaxy.ansible.com/api/. Got an",
"unexpected error when getting available versions of collection kubernetes.core:",
"'results'",
"ERROR! Unexpected Exception, this is probably a bug: 'results'",
"",
"Traceback (most recent call last):",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/bin/molecule\", line 10, in ",
" sys.exit(main())",
" ^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/click/core.py\", line 1442, in __call__",
" return self.main(*args, **kwargs)",
" ^^^^^^^^^^^^^^^^^^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/click/core.py\", line 1363, in main",
" rv = self.invoke(ctx)",
" ^^^^^^^^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/click/core.py\", line 1830, in invoke",
" return _process_result(sub_ctx.command.invoke(sub_ctx))",
" ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/click/core.py\", line 1226, in invoke",
" return ctx.invoke(self.callback, **ctx.params)",
" ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/click/core.py\", line 794, in invoke",
" return callback(*args, **kwargs)",
" ^^^^^^^^^^^^^^^^^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/molecule/click_cfg.py\", line 583, in wrapper",
" return func(*args, **kwargs)",
" ^^^^^^^^^^^^^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/click/decorators.py\", line 34, in new_func",
" return f(get_current_context(), *args, **kwargs)",
" ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/molecule/click_cfg.py\", line 418, in wrapper",
" return func(ctx)",
" ^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/molecule/command/test.py\", line 81, in test",
" base.execute_cmdline_scenarios(scenario_name, args, command_args, ansible_args, exclude)",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/molecule/command/base.py\", line 169, in execute_cmdline_scenarios",
" _run_scenarios(scenarios, command_args, default_config)",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/molecule/command/base.py\", line 240, in _run_scenarios",
" scenario.config.runtime.prepare_environment(",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible_compat/runtime.py\", line 752, in prepare_environment",
" self.install_collection(",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible_compat/runtime.py\", line 609, in install_collection",
" raise InvalidPrerequisiteError(msg)",
"ansible_compat.errors.InvalidPrerequisiteError: Command ansible-galaxy collection install -vvv kubernetes.core:>=2.4.0, returned 250 code:",
"Starting galaxy collection install process",
"Process install dependency map",
"the full traceback was:",
"",
"Traceback (most recent call last):",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/cli/__init__.py\", line 646, in cli_executor",
" exit_code = cli.run()",
" ^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/cli/galaxy.py\", line 727, in run",
" return context.CLIARGS['func']()",
" ^^^^^^^^^^^^^^^^^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/cli/galaxy.py\", line 98, in method_wrapper",
" return wrapped_method(*args, **kwargs)",
" ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/cli/galaxy.py\", line 1392, in execute_install",
" self._execute_install_collection(",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/cli/galaxy.py\", line 1441, in _execute_install_collection",
" install_collections(",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/collection/__init__.py\", line 736, in install_collections",
" dependency_map = _resolve_depenency_map(",
" ^^^^^^^^^^^^^^^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/collection/__init__.py\", line 1863, in _resolve_depenency_map",
" return collection_dep_resolver.resolve(",
" ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/resolvelib/resolvers.py\", line 546, in resolve",
" state = resolution.resolve(requirements, max_rounds=max_rounds)",
" ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/resolvelib/resolvers.py\", line 397, in resolve",
" self._add_to_criteria(self.state.criteria, r, parent=None)",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/resolvelib/resolvers.py\", line 148, in _add_to_criteria",
" matches = self._p.find_matches(",
" ^^^^^^^^^^^^^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/dependency_resolution/providers.py\", line 477, in find_matches",
" match for match in self._find_matches(list(requirements[identifier]))",
" ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/dependency_resolution/providers.py\", line 253, in _find_matches",
" coll_versions = [] if preinstalled_candidates else self._api_proxy.get_collection_versions(first_req) # type: t.Iterable[t.Tuple[str, GalaxyAPI]]",
" ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/collection/galaxy_api_proxy.py\", line 103, in get_collection_versions",
" return set(",
" ^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/collection/galaxy_api_proxy.py\", line 103, in ",
" return set(",
" ^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/collection/galaxy_api_proxy.py\", line 85, in _get_collection_versions",
" raise last_error",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/collection/galaxy_api_proxy.py\", line 64, in _get_collection_versions",
" versions = api.get_collection_versions(requirement.namespace, requirement.name)",
" ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/api.py\", line 144, in wrapped",
" return method(self, *args, **kwargs)",
" ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/api.py\", line 873, in get_collection_versions",
" data = self._call_galaxy(versions_url, error_context_msg=error_context_msg, cache=True, cache_key=cache_key)",
" ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/module_utils/api.py\", line 169, in run_function",
" return call_retryable_function()",
" ^^^^^^^^^^^^^^^^^^^^^^^^^",
" File \"/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible/galaxy/api.py\", line 389, in _call_galaxy",
" res = path_cache['results']",
" ~~~~~~~~~~^^^^^^^^^^^",
"KeyError: 'results'",
"",
"ansible-galaxy [core 2.18.17]",
" config file = None",
" configured module search path = ['/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']",
" ansible python module location = /home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages/ansible",
" ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/dist-packages:/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3/dist-packages:/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/local/lib/python3.12/dist-packages:/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/lib/python3.12/site-packages",
" executable location = /home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/bin/ansible-galaxy",
" python version = 3.12.3 (main, Jul 15 2026, 23:46:41) [GCC 13.3.0] (/home/zuul/src/github.com/vexxhost/atmosphere.common/.venv/bin/python)",
" jinja version = 3.1.6",
" libyaml = True",
"No config file found; using defaults",
"Created /home/zuul/.ansible/galaxy_token",
"[WARNING]: Skipping Galaxy server https://galaxy.ansible.com/api/. Got an",
"unexpected error when getting available versions of collection kubernetes.core:",
"'results'",
"ERROR! Unexpected Exception, this is probably a bug: 'results'"
],
"zuul_log_id": "0242ac17-0010-e6a4-b97f-000000000007-1-controller"
}
},
"task": {
"duration": {
"end": "2026-08-31T17:54:19.015467Z",
"start": "2026-08-31T17:53:09.446031Z"
},
"id": "0242ac17-0010-e6a4-b97f-000000000007",
"name": "Run Molecule scenario"
}
}
]
}
],
"stats": {
"controller": {
"changed": 2,
"failures": 1,
"ignored": 0,
"ok": 3,
"rescued": 0,
"skipped": 0,
"unreachable": 0
}
},
"trusted": false
},
{
"branch": "main",
"index": "0",
"phase": "post",
"playbook": "github.com/vexxhost/atmosphere.common/test-playbooks/molecule/post.yml",
"plays": [
{
"play": {
"duration": {
"end": "2026-08-31T17:54:30.832952Z",
"start": "2026-08-31T17:54:19.821464Z"
},
"id": "0242ac17-0010-451d-e6cf-000000000002",
"name": "Collect Molecule logs"
},
"tasks": [
{
"hosts": {
"controller": {
"action": "file",
"changed": true,
"diff": {
"after": {
"path": "/tmp/logs/system",
"state": "directory"
},
"before": {
"path": "/tmp/logs/system",
"state": "absent"
}
},
"gid": 0,
"group": "root",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": null,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/tmp/logs/system",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0755",
"owner": "root",
"path": "/tmp/logs/system",
"size": 4096,
"state": "directory",
"uid": 0
}
},
"role": {
"id": "0242ac17-0010-451d-e6cf-00000000000a",
"name": "gather-host-logs",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/gather-host-logs"
},
"task": {
"duration": {
"end": "2026-08-31T17:54:20.280312Z",
"start": "2026-08-31T17:54:19.835303Z"
},
"id": "0242ac17-0010-451d-e6cf-00000000000c",
"name": "creating directory for system status"
}
},
{
"hosts": {
"controller": {
"action": "shell",
"changed": true,
"cmd": "set -x\nsystemd-cgls --full --all --no-pager > /tmp/logs/system/systemd-cgls.txt\nip addr > /tmp/logs/system/ip-addr.txt\nip route > /tmp/logs/system/ip-route.txt\nlsblk > /tmp/logs/system/lsblk.txt\nmount > /tmp/logs/system/mount.txt\ndocker images > /tmp/logs/system/docker-images.txt\nbrctl show > /tmp/logs/system/brctl-show.txt\nps aux --sort=-%mem > /tmp/logs/system/ps.txt\ndpkg -l > /tmp/logs/system/packages.txt\nCONTAINERS=($(docker ps -a --format '{{ .Names }}' --filter label=zuul))\nif [ ! -z \"$CONTAINERS\" ]; then\n mkdir -p \"/tmp/logs/system/containers\"\n for CONTAINER in ${CONTAINERS}; do\n docker logs \"${CONTAINER}\" > \"/tmp/logs/system/containers/${CONTAINER}.txt\"\n done\nfi",
"delta": "0:00:00.116475",
"end": "2026-08-31 17:54:20.783194",
"invocation": {
"module_args": {
"_raw_params": "set -x\nsystemd-cgls --full --all --no-pager > /tmp/logs/system/systemd-cgls.txt\nip addr > /tmp/logs/system/ip-addr.txt\nip route > /tmp/logs/system/ip-route.txt\nlsblk > /tmp/logs/system/lsblk.txt\nmount > /tmp/logs/system/mount.txt\ndocker images > /tmp/logs/system/docker-images.txt\nbrctl show > /tmp/logs/system/brctl-show.txt\nps aux --sort=-%mem > /tmp/logs/system/ps.txt\ndpkg -l > /tmp/logs/system/packages.txt\nCONTAINERS=($(docker ps -a --format '{{ .Names }}' --filter label=zuul))\nif [ ! -z \"$CONTAINERS\" ]; then\n mkdir -p \"/tmp/logs/system/containers\"\n for CONTAINER in ${CONTAINERS}; do\n docker logs \"${CONTAINER}\" > \"/tmp/logs/system/containers/${CONTAINER}.txt\"\n done\nfi",
"_uses_shell": true,
"argv": null,
"chdir": null,
"creates": null,
"executable": "/bin/bash",
"expand_argument_vars": true,
"removes": null,
"stdin": null,
"stdin_add_newline": true,
"strip_empty_ends": true,
"zuul_ansible_split_streams": false,
"zuul_log_id": "0242ac17-0010-451d-e6cf-00000000000d-1-controller",
"zuul_no_log": false,
"zuul_output_max_bytes": 1073741824
}
},
"msg": "",
"rc": 0,
"start": "2026-08-31 17:54:20.666719",
"stderr": "",
"stderr_lines": [],
"stdout": "+ systemd-cgls --full --all --no-pager\n+ ip addr\n+ ip route\n+ lsblk\n+ mount\n+ docker images\n/bin/bash: line 7: docker: command not found\n+ brctl show\n/bin/bash: line 8: brctl: command not found\n+ ps aux --sort=-%mem\n+ dpkg -l\n+ CONTAINERS=($(docker ps -a --format '{{ .Names }}' --filter label=zuul))\n++ docker ps -a --format '{{ .Names }}' --filter label=zuul\n/bin/bash: line 11: docker: command not found\n+ '[' '!' -z '' ']'",
"stdout_lines": [
"+ systemd-cgls --full --all --no-pager",
"+ ip addr",
"+ ip route",
"+ lsblk",
"+ mount",
"+ docker images",
"/bin/bash: line 7: docker: command not found",
"+ brctl show",
"/bin/bash: line 8: brctl: command not found",
"+ ps aux --sort=-%mem",
"+ dpkg -l",
"+ CONTAINERS=($(docker ps -a --format '{{ .Names }}' --filter label=zuul))",
"++ docker ps -a --format '{{ .Names }}' --filter label=zuul",
"/bin/bash: line 11: docker: command not found",
"+ '[' '!' -z '' ']'"
],
"zuul_log_id": "0242ac17-0010-451d-e6cf-00000000000d-1-controller"
}
},
"role": {
"id": "0242ac17-0010-451d-e6cf-00000000000a",
"name": "gather-host-logs",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/gather-host-logs"
},
"task": {
"duration": {
"end": "2026-08-31T17:54:20.825405Z",
"start": "2026-08-31T17:54:20.307842Z"
},
"id": "0242ac17-0010-451d-e6cf-00000000000d",
"name": "Get logs for each host"
}
},
{
"hosts": {
"controller": {
"action": "synchronize",
"changed": true,
"cmd": "/usr/bin/rsync --delay-updates -F --compress --archive --rsh='/usr/bin/ssh -S none -o Port=22 -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null' --rsync-path='sudo -u root rsync' --out-format='<>%i %n%L' zuul@162.253.55.159:/tmp/logs/system /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs/controller",
"invocation": {
"module_args": {
"_local_rsync_password": null,
"_local_rsync_path": "rsync",
"_ssh_args": null,
"_substitute_controller": false,
"archive": true,
"checksum": false,
"compress": true,
"copy_links": false,
"delay_updates": true,
"delete": false,
"dest": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs/controller",
"dest_port": 22,
"dirs": false,
"existing_only": false,
"group": null,
"link_dest": null,
"links": null,
"mode": "pull",
"owner": null,
"partial": false,
"perms": null,
"private_key": null,
"recursive": null,
"rsync_opts": [],
"rsync_path": "sudo -u root rsync",
"rsync_timeout": 0,
"set_remote_user": true,
"src": "zuul@162.253.55.159:/tmp/logs/system",
"ssh_connection_multiplexing": false,
"times": null,
"use_ssh_args": false,
"verify_host": false
}
},
"msg": "created directory /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs/controller\ncd+++++++++ system/\n>f+++++++++ system/brctl-show.txt\n>f+++++++++ system/docker-images.txt\n>f+++++++++ system/ip-addr.txt\n>f+++++++++ system/ip-route.txt\n>f+++++++++ system/lsblk.txt\n>f+++++++++ system/mount.txt\n>f+++++++++ system/packages.txt\n>f+++++++++ system/ps.txt\n>f+++++++++ system/systemd-cgls.txt\n",
"rc": 0,
"stdout_lines": [
"created directory /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs/controller",
"cd+++++++++ system/",
">f+++++++++ system/brctl-show.txt",
">f+++++++++ system/docker-images.txt",
">f+++++++++ system/ip-addr.txt",
">f+++++++++ system/ip-route.txt",
">f+++++++++ system/lsblk.txt",
">f+++++++++ system/mount.txt",
">f+++++++++ system/packages.txt",
">f+++++++++ system/ps.txt",
">f+++++++++ system/systemd-cgls.txt"
]
}
},
"role": {
"id": "0242ac17-0010-451d-e6cf-00000000000a",
"name": "gather-host-logs",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/gather-host-logs"
},
"task": {
"duration": {
"end": "2026-08-31T17:54:21.493771Z",
"start": "2026-08-31T17:54:20.831976Z"
},
"id": "0242ac17-0010-451d-e6cf-00000000000e",
"name": "Downloads logs to executor"
}
},
{
"hosts": {
"controller": {
"action": "file",
"changed": true,
"msg": "All items completed",
"results": [
{
"ansible_loop_var": "directory",
"changed": true,
"diff": {
"after": {
"path": "/tmp/logs/helm/values",
"state": "directory"
},
"before": {
"path": "/tmp/logs/helm/values",
"state": "absent"
}
},
"directory": "values",
"failed": false,
"gid": 0,
"group": "root",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": null,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/tmp/logs/helm/values",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0755",
"owner": "root",
"path": "/tmp/logs/helm/values",
"size": 4096,
"state": "directory",
"uid": 0
},
{
"ansible_loop_var": "directory",
"changed": true,
"diff": {
"after": {
"path": "/tmp/logs/helm/releases",
"state": "directory"
},
"before": {
"path": "/tmp/logs/helm/releases",
"state": "absent"
}
},
"directory": "releases",
"failed": false,
"gid": 0,
"group": "root",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": null,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/tmp/logs/helm/releases",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0755",
"owner": "root",
"path": "/tmp/logs/helm/releases",
"size": 4096,
"state": "directory",
"uid": 0
}
]
}
},
"role": {
"id": "0242ac17-0010-451d-e6cf-000000000010",
"name": "helm-release-status",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/helm-release-status"
},
"task": {
"duration": {
"end": "2026-08-31T17:54:22.002729Z",
"start": "2026-08-31T17:54:21.503058Z"
},
"id": "0242ac17-0010-451d-e6cf-000000000012",
"name": "creating directory for helm release status"
}
},
{
"hosts": {
"controller": {
"action": "shell",
"changed": true,
"cmd": "set -e\n\nfor namespace in $(kubectl get namespaces --no-headers --output custom-columns=\":metadata.name\"); do\n # get all Helm releases including pending and failed releases\n for release in $(helm list --all --short --namespace $namespace); do\n # Make respective directories only when a Helm release actually exists in the namespace\n # to prevent uploading a bunch of empty directories for namespaces without a Helm release.\n mkdir -p /tmp/logs/helm/releases/$namespace\n mkdir -p /tmp/logs/helm/values/$namespace\n\n helm status $release --namespace $namespace >> /tmp/logs/helm/releases/$namespace/$release.txt\n helm get values $release --namespace $namespace --all >> /tmp/logs/helm/values/$namespace/$release.yaml\n done\ndone",
"delta": "0:00:00.010993",
"end": "2026-08-31 17:54:22.296896",
"invocation": {
"module_args": {
"_raw_params": "set -e\n\nfor namespace in $(kubectl get namespaces --no-headers --output custom-columns=\":metadata.name\"); do\n # get all Helm releases including pending and failed releases\n for release in $(helm list --all --short --namespace $namespace); do\n # Make respective directories only when a Helm release actually exists in the namespace\n # to prevent uploading a bunch of empty directories for namespaces without a Helm release.\n mkdir -p /tmp/logs/helm/releases/$namespace\n mkdir -p /tmp/logs/helm/values/$namespace\n\n helm status $release --namespace $namespace >> /tmp/logs/helm/releases/$namespace/$release.txt\n helm get values $release --namespace $namespace --all >> /tmp/logs/helm/values/$namespace/$release.yaml\n done\ndone",
"_uses_shell": true,
"argv": null,
"chdir": null,
"creates": null,
"executable": "/bin/bash",
"expand_argument_vars": true,
"removes": null,
"stdin": null,
"stdin_add_newline": true,
"strip_empty_ends": true,
"zuul_ansible_split_streams": false,
"zuul_log_id": "0242ac17-0010-451d-e6cf-000000000014-1-controller",
"zuul_no_log": false,
"zuul_output_max_bytes": 1073741824
}
},
"msg": "",
"rc": 0,
"start": "2026-08-31 17:54:22.285903",
"stderr": "",
"stderr_lines": [],
"stdout": "/bin/bash: line 3: kubectl: command not found",
"stdout_lines": [
"/bin/bash: line 3: kubectl: command not found"
],
"zuul_log_id": "0242ac17-0010-451d-e6cf-000000000014-1-controller"
}
},
"role": {
"id": "0242ac17-0010-451d-e6cf-000000000010",
"name": "helm-release-status",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/helm-release-status"
},
"task": {
"duration": {
"end": "2026-08-31T17:54:22.556541Z",
"start": "2026-08-31T17:54:22.034305Z"
},
"id": "0242ac17-0010-451d-e6cf-000000000014",
"name": "Gather get release status for helm charts"
}
},
{
"hosts": {
"controller": {
"action": "synchronize",
"changed": true,
"cmd": "/usr/bin/rsync --delay-updates -F --compress --archive --rsh='/usr/bin/ssh -S none -o Port=22 -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null' --rsync-path='sudo -u root rsync' --out-format='<>%i %n%L' zuul@162.253.55.159:/tmp/logs/helm /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs/controller",
"invocation": {
"module_args": {
"_local_rsync_password": null,
"_local_rsync_path": "rsync",
"_ssh_args": null,
"_substitute_controller": false,
"archive": true,
"checksum": false,
"compress": true,
"copy_links": false,
"delay_updates": true,
"delete": false,
"dest": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs/controller",
"dest_port": 22,
"dirs": false,
"existing_only": false,
"group": null,
"link_dest": null,
"links": null,
"mode": "pull",
"owner": null,
"partial": false,
"perms": null,
"private_key": null,
"recursive": null,
"rsync_opts": [],
"rsync_path": "sudo -u root rsync",
"rsync_timeout": 0,
"set_remote_user": true,
"src": "zuul@162.253.55.159:/tmp/logs/helm",
"ssh_connection_multiplexing": false,
"times": null,
"use_ssh_args": false,
"verify_host": false
}
},
"msg": "cd+++++++++ helm/\ncd+++++++++ helm/releases/\ncd+++++++++ helm/values/\n",
"rc": 0,
"stdout_lines": [
"cd+++++++++ helm/",
"cd+++++++++ helm/releases/",
"cd+++++++++ helm/values/"
]
}
},
"role": {
"id": "0242ac17-0010-451d-e6cf-000000000010",
"name": "helm-release-status",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/helm-release-status"
},
"task": {
"duration": {
"end": "2026-08-31T17:54:23.089375Z",
"start": "2026-08-31T17:54:22.562231Z"
},
"id": "0242ac17-0010-451d-e6cf-000000000015",
"name": "Downloads logs to executor"
}
},
{
"hosts": {
"controller": {
"action": "file",
"changed": true,
"diff": {
"after": {
"path": "/tmp/logs/objects/cluster",
"state": "directory"
},
"before": {
"path": "/tmp/logs/objects/cluster",
"state": "absent"
}
},
"gid": 0,
"group": "root",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": null,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/tmp/logs/objects/cluster",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0755",
"owner": "root",
"path": "/tmp/logs/objects/cluster",
"size": 4096,
"state": "directory",
"uid": 0
}
},
"role": {
"id": "0242ac17-0010-451d-e6cf-000000000017",
"name": "describe-kubernetes-objects",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/describe-kubernetes-objects"
},
"task": {
"duration": {
"end": "2026-08-31T17:54:23.368007Z",
"start": "2026-08-31T17:54:23.099702Z"
},
"id": "0242ac17-0010-451d-e6cf-000000000019",
"name": "creating directory for cluster scoped objects"
}
},
{
"hosts": {
"controller": {
"action": "shell",
"changed": true,
"cmd": "set -e\nexport OBJECT_TYPE=node,clusterrole,clusterrolebinding,storageclass,namespace\nexport PARALLELISM_FACTOR=2\n\nfunction list_objects () {\n printf ${OBJECT_TYPE} | xargs -d ',' -I {} -P1 -n1 bash -c 'echo \"$@\"' _ {}\n}\nexport -f list_objects\n\nfunction name_objects () {\n export OBJECT=$1\n kubectl get ${OBJECT} -o name | xargs -L1 -I {} -P1 -n1 bash -c 'echo \"${OBJECT} ${1#*/}\"' _ {}\n}\nexport -f name_objects\n\nfunction get_objects () {\n input=($1)\n export OBJECT=${input[0]}\n export NAME=${input[1]#*/}\n echo \"${OBJECT}/${NAME}\"\n DIR=\"/tmp/logs/objects/cluster/${OBJECT}\"\n mkdir -p ${DIR}\n kubectl get ${OBJECT} ${NAME} -o yaml > \"${DIR}/${NAME}.yaml\"\n kubectl describe ${OBJECT} ${NAME} > \"${DIR}/${NAME}.txt\"\n}\nexport -f get_objects\n\nlist_objects | xargs -r -n 1 -P ${PARALLELISM_FACTOR} -I {} bash -c 'name_objects \"$@\"' _ {} | xargs -r -n 1 -P ${PARALLELISM_FACTOR} -I {} bash -c 'get_objects \"$@\"' _ {}",
"delta": "0:00:00.042953",
"end": "2026-08-31 17:54:23.735843",
"invocation": {
"module_args": {
"_raw_params": "set -e\nexport OBJECT_TYPE=node,clusterrole,clusterrolebinding,storageclass,namespace\nexport PARALLELISM_FACTOR=2\n\nfunction list_objects () {\n printf ${OBJECT_TYPE} | xargs -d ',' -I {} -P1 -n1 bash -c 'echo \"$@\"' _ {}\n}\nexport -f list_objects\n\nfunction name_objects () {\n export OBJECT=$1\n kubectl get ${OBJECT} -o name | xargs -L1 -I {} -P1 -n1 bash -c 'echo \"${OBJECT} ${1#*/}\"' _ {}\n}\nexport -f name_objects\n\nfunction get_objects () {\n input=($1)\n export OBJECT=${input[0]}\n export NAME=${input[1]#*/}\n echo \"${OBJECT}/${NAME}\"\n DIR=\"/tmp/logs/objects/cluster/${OBJECT}\"\n mkdir -p ${DIR}\n kubectl get ${OBJECT} ${NAME} -o yaml > \"${DIR}/${NAME}.yaml\"\n kubectl describe ${OBJECT} ${NAME} > \"${DIR}/${NAME}.txt\"\n}\nexport -f get_objects\n\nlist_objects | xargs -r -n 1 -P ${PARALLELISM_FACTOR} -I {} bash -c 'name_objects \"$@\"' _ {} | xargs -r -n 1 -P ${PARALLELISM_FACTOR} -I {} bash -c 'get_objects \"$@\"' _ {}",
"_uses_shell": true,
"argv": null,
"chdir": null,
"creates": null,
"executable": "/bin/bash",
"expand_argument_vars": true,
"removes": null,
"stdin": null,
"stdin_add_newline": true,
"strip_empty_ends": true,
"zuul_ansible_split_streams": false,
"zuul_log_id": "0242ac17-0010-451d-e6cf-00000000001a-1-controller",
"zuul_no_log": false,
"zuul_output_max_bytes": 1073741824
}
},
"msg": "",
"rc": 0,
"start": "2026-08-31 17:54:23.692890",
"stderr": "",
"stderr_lines": [],
"stdout": "xargs: warning: options --max-args and --replace/-I/-i are mutually exclusive, ignoring previous --max-args value\nxargs: warning: options --max-args and --replace/-I/-i are mutually exclusive, ignoring previous --max-args value\nenvironment: line 1: kubectl: command not found\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nenvironment: line 1: kubectl: command not found\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nenvironment: line 1: kubectl: command not found\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nenvironment: line 1: kubectl: command not found\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value\nenvironment: line 1: kubectl: command not found\nxargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"stdout_lines": [
"xargs: warning: options --max-args and --replace/-I/-i are mutually exclusive, ignoring previous --max-args value",
"xargs: warning: options --max-args and --replace/-I/-i are mutually exclusive, ignoring previous --max-args value",
"environment: line 1: kubectl: command not found",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"environment: line 1: kubectl: command not found",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"environment: line 1: kubectl: command not found",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"environment: line 1: kubectl: command not found",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value",
"environment: line 1: kubectl: command not found",
"xargs: warning: options --max-lines and --replace/-I/-i are mutually exclusive, ignoring previous --max-lines value"
],
"zuul_log_id": "0242ac17-0010-451d-e6cf-00000000001a-1-controller"
}
},
"role": {
"id": "0242ac17-0010-451d-e6cf-000000000017",
"name": "describe-kubernetes-objects",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/describe-kubernetes-objects"
},
"task": {
"duration": {
"end": "2026-08-31T17:54:23.964967Z",
"start": "2026-08-31T17:54:23.443839Z"
},
"id": "0242ac17-0010-451d-e6cf-00000000001a",
"name": "Gathering descriptions for cluster scoped objects"
}
},
{
"hosts": {
"controller": {
"action": "file",
"changed": true,
"diff": {
"after": {
"path": "/tmp/logs/objects/namespaced",
"state": "directory"
},
"before": {
"path": "/tmp/logs/objects/namespaced",
"state": "absent"
}
},
"gid": 0,
"group": "root",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": null,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/tmp/logs/objects/namespaced",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0755",
"owner": "root",
"path": "/tmp/logs/objects/namespaced",
"size": 4096,
"state": "directory",
"uid": 0
}
},
"role": {
"id": "0242ac17-0010-451d-e6cf-000000000017",
"name": "describe-kubernetes-objects",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/describe-kubernetes-objects"
},
"task": {
"duration": {
"end": "2026-08-31T17:54:24.252102Z",
"start": "2026-08-31T17:54:23.971818Z"
},
"id": "0242ac17-0010-451d-e6cf-00000000001b",
"name": "creating directory for namespace scoped objects"
}
},
{
"hosts": {
"controller": {
"action": "shell",
"changed": true,
"cmd": "set -e\nexport OBJECT_TYPE=configmaps,cronjobs,daemonsets,deployment,endpoints,ingresses,jobs,networkpolicies,pods,podsecuritypolicies,persistentvolumeclaims,rolebindings,roles,secrets,serviceaccounts,services,statefulsets\nexport PARALLELISM_FACTOR=2\nfunction get_namespaces () {\n kubectl get namespaces -o name | awk -F '/' '{ print $NF }'\n}\n\nfunction list_namespaced_objects () {\n export NAMESPACE=$1\n printf ${OBJECT_TYPE} | xargs -d ',' -I {} -P1 -n1 bash -c 'echo \"${NAMESPACE} $@\"' _ {}\n}\nexport -f list_namespaced_objects\n\nfunction name_objects () {\n input=($1)\n export NAMESPACE=${input[0]}\n export OBJECT=${input[1]}\n kubectl get -n ${NAMESPACE} ${OBJECT} -o name | xargs -L1 -I {} -P1 -n1 bash -c 'echo \"${NAMESPACE} ${OBJECT} $@\"' _ {}\n}\nexport -f name_objects\n\nfunction get_objects () {\n input=($1)\n export NAMESPACE=${input[0]}\n export OBJECT=${input[1]}\n export NAME=${input[2]#*/}\n echo \"${NAMESPACE}/${OBJECT}/${NAME}\"\n DIR=\"/tmp/logs/objects/namespaced/${NAMESPACE}/${OBJECT}\"\n mkdir -p ${DIR}\n kubectl get -n ${NAMESPACE} ${OBJECT} ${NAME} -o yaml > \"${DIR}/${NAME}.yaml\"\n kubectl describe -n ${NAMESPACE} ${OBJECT} ${NAME} > \"${DIR}/${NAME}.txt\"\n}\nexport -f get_objects\n\nget_namespaces | xargs -r -n 1 -P ${PARALLELISM_FACTOR} -I {} bash -c 'list_namespaced_objects \"$@\"' _ {} | xargs -r -n 1 -P ${PARALLELISM_FACTOR} -I {} bash -c 'name_objects \"$@\"' _ {} | xargs -r -n 1 -P ${PARALLELISM_FACTOR} -I {} bash -c 'get_objects \"$@\"' _ {}",
"delta": "0:00:00.015065",
"end": "2026-08-31 17:54:24.550607",
"invocation": {
"module_args": {
"_raw_params": "set -e\nexport OBJECT_TYPE=configmaps,cronjobs,daemonsets,deployment,endpoints,ingresses,jobs,networkpolicies,pods,podsecuritypolicies,persistentvolumeclaims,rolebindings,roles,secrets,serviceaccounts,services,statefulsets\nexport PARALLELISM_FACTOR=2\nfunction get_namespaces () {\n kubectl get namespaces -o name | awk -F '/' '{ print $NF }'\n}\n\nfunction list_namespaced_objects () {\n export NAMESPACE=$1\n printf ${OBJECT_TYPE} | xargs -d ',' -I {} -P1 -n1 bash -c 'echo \"${NAMESPACE} $@\"' _ {}\n}\nexport -f list_namespaced_objects\n\nfunction name_objects () {\n input=($1)\n export NAMESPACE=${input[0]}\n export OBJECT=${input[1]}\n kubectl get -n ${NAMESPACE} ${OBJECT} -o name | xargs -L1 -I {} -P1 -n1 bash -c 'echo \"${NAMESPACE} ${OBJECT} $@\"' _ {}\n}\nexport -f name_objects\n\nfunction get_objects () {\n input=($1)\n export NAMESPACE=${input[0]}\n export OBJECT=${input[1]}\n export NAME=${input[2]#*/}\n echo \"${NAMESPACE}/${OBJECT}/${NAME}\"\n DIR=\"/tmp/logs/objects/namespaced/${NAMESPACE}/${OBJECT}\"\n mkdir -p ${DIR}\n kubectl get -n ${NAMESPACE} ${OBJECT} ${NAME} -o yaml > \"${DIR}/${NAME}.yaml\"\n kubectl describe -n ${NAMESPACE} ${OBJECT} ${NAME} > \"${DIR}/${NAME}.txt\"\n}\nexport -f get_objects\n\nget_namespaces | xargs -r -n 1 -P ${PARALLELISM_FACTOR} -I {} bash -c 'list_namespaced_objects \"$@\"' _ {} | xargs -r -n 1 -P ${PARALLELISM_FACTOR} -I {} bash -c 'name_objects \"$@\"' _ {} | xargs -r -n 1 -P ${PARALLELISM_FACTOR} -I {} bash -c 'get_objects \"$@\"' _ {}",
"_uses_shell": true,
"argv": null,
"chdir": null,
"creates": null,
"executable": "/bin/bash",
"expand_argument_vars": true,
"removes": null,
"stdin": null,
"stdin_add_newline": true,
"strip_empty_ends": true,
"zuul_ansible_split_streams": false,
"zuul_log_id": "0242ac17-0010-451d-e6cf-00000000001c-1-controller",
"zuul_no_log": false,
"zuul_output_max_bytes": 1073741824
}
},
"msg": "",
"rc": 0,
"start": "2026-08-31 17:54:24.535542",
"stderr": "",
"stderr_lines": [],
"stdout": "environment: line 5: kubectl: command not found\nxargs: warning: options --max-args and --replace/-I/-i are mutually exclusive, ignoring previous --max-args value\nxargs: warning: options --max-args and --replace/-I/-i are mutually exclusive, ignoring previous --max-args value\nxargs: warning: options --max-args and --replace/-I/-i are mutually exclusive, ignoring previous --max-args value",
"stdout_lines": [
"environment: line 5: kubectl: command not found",
"xargs: warning: options --max-args and --replace/-I/-i are mutually exclusive, ignoring previous --max-args value",
"xargs: warning: options --max-args and --replace/-I/-i are mutually exclusive, ignoring previous --max-args value",
"xargs: warning: options --max-args and --replace/-I/-i are mutually exclusive, ignoring previous --max-args value"
],
"zuul_log_id": "0242ac17-0010-451d-e6cf-00000000001c-1-controller"
}
},
"role": {
"id": "0242ac17-0010-451d-e6cf-000000000017",
"name": "describe-kubernetes-objects",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/describe-kubernetes-objects"
},
"task": {
"duration": {
"end": "2026-08-31T17:54:24.800089Z",
"start": "2026-08-31T17:54:24.280973Z"
},
"id": "0242ac17-0010-451d-e6cf-00000000001c",
"name": "Gathering descriptions for namespace scoped objects"
}
},
{
"hosts": {
"controller": {
"action": "synchronize",
"changed": true,
"cmd": "/usr/bin/rsync --delay-updates -F --compress --archive --rsh='/usr/bin/ssh -S none -o Port=22 -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null' --rsync-path='sudo -u root rsync' --out-format='<>%i %n%L' zuul@162.253.55.159:/tmp/logs/objects /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs/controller",
"invocation": {
"module_args": {
"_local_rsync_password": null,
"_local_rsync_path": "rsync",
"_ssh_args": null,
"_substitute_controller": false,
"archive": true,
"checksum": false,
"compress": true,
"copy_links": false,
"delay_updates": true,
"delete": false,
"dest": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs/controller",
"dest_port": 22,
"dirs": false,
"existing_only": false,
"group": null,
"link_dest": null,
"links": null,
"mode": "pull",
"owner": null,
"partial": false,
"perms": null,
"private_key": null,
"recursive": null,
"rsync_opts": [],
"rsync_path": "sudo -u root rsync",
"rsync_timeout": 0,
"set_remote_user": true,
"src": "zuul@162.253.55.159:/tmp/logs/objects",
"ssh_connection_multiplexing": false,
"times": null,
"use_ssh_args": false,
"verify_host": false
}
},
"msg": "cd+++++++++ objects/\ncd+++++++++ objects/cluster/\ncd+++++++++ objects/namespaced/\n",
"rc": 0,
"stdout_lines": [
"cd+++++++++ objects/",
"cd+++++++++ objects/cluster/",
"cd+++++++++ objects/namespaced/"
]
}
},
"role": {
"id": "0242ac17-0010-451d-e6cf-000000000017",
"name": "describe-kubernetes-objects",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/describe-kubernetes-objects"
},
"task": {
"duration": {
"end": "2026-08-31T17:54:25.359635Z",
"start": "2026-08-31T17:54:24.807098Z"
},
"id": "0242ac17-0010-451d-e6cf-00000000001d",
"name": "Downloads logs to executor"
}
},
{
"hosts": {
"controller": {
"action": "file",
"changed": true,
"diff": {
"after": {
"path": "/tmp/logs/pod-logs",
"state": "directory"
},
"before": {
"path": "/tmp/logs/pod-logs",
"state": "absent"
}
},
"gid": 0,
"group": "root",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": null,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/tmp/logs/pod-logs",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0755",
"owner": "root",
"path": "/tmp/logs/pod-logs",
"size": 4096,
"state": "directory",
"uid": 0
}
},
"role": {
"id": "0242ac17-0010-451d-e6cf-00000000001f",
"name": "gather-pod-logs",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/gather-pod-logs"
},
"task": {
"duration": {
"end": "2026-08-31T17:54:25.635609Z",
"start": "2026-08-31T17:54:25.372269Z"
},
"id": "0242ac17-0010-451d-e6cf-000000000021",
"name": "creating directory for pod logs"
}
},
{
"hosts": {
"controller": {
"action": "file",
"changed": true,
"diff": {
"after": {
"path": "/tmp/logs/pod-logs/failed-pods",
"state": "directory"
},
"before": {
"path": "/tmp/logs/pod-logs/failed-pods",
"state": "absent"
}
},
"gid": 0,
"group": "root",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": null,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/tmp/logs/pod-logs/failed-pods",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0755",
"owner": "root",
"path": "/tmp/logs/pod-logs/failed-pods",
"size": 4096,
"state": "directory",
"uid": 0
}
},
"role": {
"id": "0242ac17-0010-451d-e6cf-00000000001f",
"name": "gather-pod-logs",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/gather-pod-logs"
},
"task": {
"duration": {
"end": "2026-08-31T17:54:25.917436Z",
"start": "2026-08-31T17:54:25.641043Z"
},
"id": "0242ac17-0010-451d-e6cf-000000000022",
"name": "creating directory for failed pod logs"
}
},
{
"hosts": {
"controller": {
"action": "shell",
"changed": true,
"cmd": "set -e\nfunction get_namespaces () {\n kubectl get namespaces -o name | awk -F '/' '{ print $NF }'\n}\nfunction get_pods () {\n NAMESPACE=$1\n kubectl get pods -n ${NAMESPACE} -o name | awk -F '/' '{ print $NF }' | xargs -I {} echo ${NAMESPACE} {}\n}\nexport -f get_pods\nfunction get_pod_logs () {\n NAMESPACE=${1% *}\n POD=${1#* }\n INIT_CONTAINERS=$(kubectl get pod $POD -n ${NAMESPACE} -o json | jq -r '.spec.initContainers[]?.name')\n CONTAINERS=$(kubectl get pod $POD -n ${NAMESPACE} -o json | jq -r '.spec.containers[].name')\n for CONTAINER in ${INIT_CONTAINERS} ${CONTAINERS}; do\n echo \"${NAMESPACE}/${POD}/${CONTAINER}\"\n mkdir -p \"/tmp/logs/pod-logs/${NAMESPACE}/${POD}\"\n mkdir -p \"/tmp/logs/pod-logs/failed-pods/${NAMESPACE}/${POD}\"\n kubectl logs ${POD} -n ${NAMESPACE} -c ${CONTAINER} > \"/tmp/logs/pod-logs/${NAMESPACE}/${POD}/${CONTAINER}.txt\"\n kubectl logs --previous ${POD} -n ${NAMESPACE} -c ${CONTAINER} > \"/tmp/logs/pod-logs/failed-pods/${NAMESPACE}/${POD}/${CONTAINER}.txt\"\n done\n}\nexport -f get_pod_logs\nget_namespaces | xargs -r -I {} bash -c 'get_pods \"$@\"' _ {} | xargs -r -I {} bash -c 'get_pod_logs \"$@\"' _ {}",
"delta": "0:00:00.015771",
"end": "2026-08-31 17:54:26.224216",
"invocation": {
"module_args": {
"_raw_params": "set -e\nfunction get_namespaces () {\n kubectl get namespaces -o name | awk -F '/' '{ print $NF }'\n}\nfunction get_pods () {\n NAMESPACE=$1\n kubectl get pods -n ${NAMESPACE} -o name | awk -F '/' '{ print $NF }' | xargs -I {} echo ${NAMESPACE} {}\n}\nexport -f get_pods\nfunction get_pod_logs () {\n NAMESPACE=${1% *}\n POD=${1#* }\n INIT_CONTAINERS=$(kubectl get pod $POD -n ${NAMESPACE} -o json | jq -r '.spec.initContainers[]?.name')\n CONTAINERS=$(kubectl get pod $POD -n ${NAMESPACE} -o json | jq -r '.spec.containers[].name')\n for CONTAINER in ${INIT_CONTAINERS} ${CONTAINERS}; do\n echo \"${NAMESPACE}/${POD}/${CONTAINER}\"\n mkdir -p \"/tmp/logs/pod-logs/${NAMESPACE}/${POD}\"\n mkdir -p \"/tmp/logs/pod-logs/failed-pods/${NAMESPACE}/${POD}\"\n kubectl logs ${POD} -n ${NAMESPACE} -c ${CONTAINER} > \"/tmp/logs/pod-logs/${NAMESPACE}/${POD}/${CONTAINER}.txt\"\n kubectl logs --previous ${POD} -n ${NAMESPACE} -c ${CONTAINER} > \"/tmp/logs/pod-logs/failed-pods/${NAMESPACE}/${POD}/${CONTAINER}.txt\"\n done\n}\nexport -f get_pod_logs\nget_namespaces | xargs -r -I {} bash -c 'get_pods \"$@\"' _ {} | xargs -r -I {} bash -c 'get_pod_logs \"$@\"' _ {}",
"_uses_shell": true,
"argv": null,
"chdir": null,
"creates": null,
"executable": "/bin/bash",
"expand_argument_vars": true,
"removes": null,
"stdin": null,
"stdin_add_newline": true,
"strip_empty_ends": true,
"zuul_ansible_split_streams": false,
"zuul_log_id": "0242ac17-0010-451d-e6cf-000000000023-1-controller",
"zuul_no_log": false,
"zuul_output_max_bytes": 1073741824
}
},
"msg": "",
"rc": 0,
"start": "2026-08-31 17:54:26.208445",
"stderr": "",
"stderr_lines": [],
"stdout": "environment: line 3: kubectl: command not found",
"stdout_lines": [
"environment: line 3: kubectl: command not found"
],
"zuul_log_id": "0242ac17-0010-451d-e6cf-000000000023-1-controller"
}
},
"role": {
"id": "0242ac17-0010-451d-e6cf-00000000001f",
"name": "gather-pod-logs",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/gather-pod-logs"
},
"task": {
"duration": {
"end": "2026-08-31T17:54:26.463722Z",
"start": "2026-08-31T17:54:25.944294Z"
},
"id": "0242ac17-0010-451d-e6cf-000000000023",
"name": "retrieve all kubernetes logs, current and previous (if they exist)"
}
},
{
"hosts": {
"controller": {
"action": "synchronize",
"changed": true,
"cmd": "/usr/bin/rsync --delay-updates -F --compress --archive --rsh='/usr/bin/ssh -S none -o Port=22 -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null' --rsync-path='sudo -u root rsync' --out-format='<>%i %n%L' zuul@162.253.55.159:/tmp/logs/pod-logs /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs/controller",
"invocation": {
"module_args": {
"_local_rsync_password": null,
"_local_rsync_path": "rsync",
"_ssh_args": null,
"_substitute_controller": false,
"archive": true,
"checksum": false,
"compress": true,
"copy_links": false,
"delay_updates": true,
"delete": false,
"dest": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs/controller",
"dest_port": 22,
"dirs": false,
"existing_only": false,
"group": null,
"link_dest": null,
"links": null,
"mode": "pull",
"owner": null,
"partial": false,
"perms": null,
"private_key": null,
"recursive": null,
"rsync_opts": [],
"rsync_path": "sudo -u root rsync",
"rsync_timeout": 0,
"set_remote_user": true,
"src": "zuul@162.253.55.159:/tmp/logs/pod-logs",
"ssh_connection_multiplexing": false,
"times": null,
"use_ssh_args": false,
"verify_host": false
}
},
"msg": "cd+++++++++ pod-logs/\ncd+++++++++ pod-logs/failed-pods/\n",
"rc": 0,
"stdout_lines": [
"cd+++++++++ pod-logs/",
"cd+++++++++ pod-logs/failed-pods/"
]
}
},
"role": {
"id": "0242ac17-0010-451d-e6cf-00000000001f",
"name": "gather-pod-logs",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/gather-pod-logs"
},
"task": {
"duration": {
"end": "2026-08-31T17:54:26.998980Z",
"start": "2026-08-31T17:54:26.468767Z"
},
"id": "0242ac17-0010-451d-e6cf-000000000024",
"name": "Downloads pod logs to executor"
}
},
{
"hosts": {
"controller": {
"action": "file",
"changed": true,
"diff": {
"after": {
"path": "/tmp/logs/prometheus",
"state": "directory"
},
"before": {
"path": "/tmp/logs/prometheus",
"state": "absent"
}
},
"gid": 0,
"group": "root",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": null,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/tmp/logs/prometheus",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0755",
"owner": "root",
"path": "/tmp/logs/prometheus",
"size": 4096,
"state": "directory",
"uid": 0
}
},
"role": {
"id": "0242ac17-0010-451d-e6cf-000000000026",
"name": "gather-prom-metrics",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/gather-prom-metrics"
},
"task": {
"duration": {
"end": "2026-08-31T17:54:27.281097Z",
"start": "2026-08-31T17:54:27.012942Z"
},
"id": "0242ac17-0010-451d-e6cf-000000000028",
"name": "creating directory for helm release descriptions"
}
},
{
"hosts": {
"controller": {
"action": "shell",
"changed": true,
"cmd": "set -e\nNAMESPACES=$(kubectl get namespaces -o json | jq -r '.items[].metadata.name')\nfor NS in $NAMESPACES; do\n SERVICES=$(kubectl get svc -n $NS -o json | jq -r '.items[] | select(.spec.ports[].name==\"metrics\") | .metadata.name')\n for SVC in $SERVICES; do\n PORT=$(kubectl get svc $SVC -n $NS -o json | jq -r '.spec.ports[] | select(.name==\"metrics\") | .port')\n echo \"Scraping $SVC.$NS:$PORT/metrics:\"\n curl \"$SVC.$NS:$PORT/metrics\" >> \"/tmp/logs\"/prometheus/$NS-$SVC.txt || true\n done\ndone",
"delta": "0:00:00.016188",
"end": "2026-08-31 17:54:27.577184",
"invocation": {
"module_args": {
"_raw_params": "set -e\nNAMESPACES=$(kubectl get namespaces -o json | jq -r '.items[].metadata.name')\nfor NS in $NAMESPACES; do\n SERVICES=$(kubectl get svc -n $NS -o json | jq -r '.items[] | select(.spec.ports[].name==\"metrics\") | .metadata.name')\n for SVC in $SERVICES; do\n PORT=$(kubectl get svc $SVC -n $NS -o json | jq -r '.spec.ports[] | select(.name==\"metrics\") | .port')\n echo \"Scraping $SVC.$NS:$PORT/metrics:\"\n curl \"$SVC.$NS:$PORT/metrics\" >> \"/tmp/logs\"/prometheus/$NS-$SVC.txt || true\n done\ndone",
"_uses_shell": true,
"argv": null,
"chdir": null,
"creates": null,
"executable": "/bin/bash",
"expand_argument_vars": true,
"removes": null,
"stdin": null,
"stdin_add_newline": true,
"strip_empty_ends": true,
"zuul_ansible_split_streams": false,
"zuul_log_id": "0242ac17-0010-451d-e6cf-000000000029-1-controller",
"zuul_no_log": false,
"zuul_output_max_bytes": 1073741824
}
},
"msg": "",
"rc": 0,
"start": "2026-08-31 17:54:27.560996",
"stderr": "",
"stderr_lines": [],
"stdout": "/bin/bash: line 2: kubectl: command not found",
"stdout_lines": [
"/bin/bash: line 2: kubectl: command not found"
],
"zuul_log_id": "0242ac17-0010-451d-e6cf-000000000029-1-controller"
}
},
"role": {
"id": "0242ac17-0010-451d-e6cf-000000000026",
"name": "gather-prom-metrics",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/gather-prom-metrics"
},
"task": {
"duration": {
"end": "2026-08-31T17:54:27.826092Z",
"start": "2026-08-31T17:54:27.305906Z"
},
"id": "0242ac17-0010-451d-e6cf-000000000029",
"name": "Get metrics from exporter services in all namespaces"
}
},
{
"hosts": {
"controller": {
"action": "shell",
"changed": true,
"cmd": "set -e\nmgr_endpoints=$(kubectl get endpoints -n ceph -l component=manager -o json | jq -r '.items[].subsets[].addresses[].ip')\necho \"ceph-mgr endpoints: $mgr_endpoints\"\nfor endpoint in $mgr_endpoints; do\n echo \"checking ceph-mgr at $endpoint\"\n metrics_curl=\"curl $endpoint:9283/metrics\"\n op=$(eval \"$metrics_curl\")\n if [[ -n $op ]]; then\n curl $endpoint:9283/metrics >> \"/tmp/logs\"/prometheus/ceph-ceph-mgr.txt\n break\n else\n echo \"$endpoint is a standby ceph-mgr. Trying next endpoint\"\n fi\ndone",
"delta": "0:00:00.017092",
"end": "2026-08-31 17:54:28.121394",
"invocation": {
"module_args": {
"_raw_params": "set -e\nmgr_endpoints=$(kubectl get endpoints -n ceph -l component=manager -o json | jq -r '.items[].subsets[].addresses[].ip')\necho \"ceph-mgr endpoints: $mgr_endpoints\"\nfor endpoint in $mgr_endpoints; do\n echo \"checking ceph-mgr at $endpoint\"\n metrics_curl=\"curl $endpoint:9283/metrics\"\n op=$(eval \"$metrics_curl\")\n if [[ -n $op ]]; then\n curl $endpoint:9283/metrics >> \"/tmp/logs\"/prometheus/ceph-ceph-mgr.txt\n break\n else\n echo \"$endpoint is a standby ceph-mgr. Trying next endpoint\"\n fi\ndone",
"_uses_shell": true,
"argv": null,
"chdir": null,
"creates": null,
"executable": "/bin/bash",
"expand_argument_vars": true,
"removes": null,
"stdin": null,
"stdin_add_newline": true,
"strip_empty_ends": true,
"zuul_ansible_split_streams": false,
"zuul_log_id": "0242ac17-0010-451d-e6cf-00000000002a-1-controller",
"zuul_no_log": false,
"zuul_output_max_bytes": 1073741824
}
},
"msg": "",
"rc": 0,
"start": "2026-08-31 17:54:28.104302",
"stderr": "",
"stderr_lines": [],
"stdout": "/bin/bash: line 2: kubectl: command not found\nceph-mgr endpoints: ",
"stdout_lines": [
"/bin/bash: line 2: kubectl: command not found",
"ceph-mgr endpoints: "
],
"zuul_log_id": "0242ac17-0010-451d-e6cf-00000000002a-1-controller"
}
},
"role": {
"id": "0242ac17-0010-451d-e6cf-000000000026",
"name": "gather-prom-metrics",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/gather-prom-metrics"
},
"task": {
"duration": {
"end": "2026-08-31T17:54:28.371212Z",
"start": "2026-08-31T17:54:27.851357Z"
},
"id": "0242ac17-0010-451d-e6cf-00000000002a",
"name": "Get ceph metrics from ceph-mgr"
}
},
{
"hosts": {
"controller": {
"action": "shell",
"changed": true,
"cmd": "set -e\nNAMESPACE=\"osh-infra\"\nAPP_LABEL=\"fluentd\"\nPODS=$(kubectl get pods -n $NAMESPACE -l application=$APP_LABEL -o json | jq -r '.items[].metadata.name')\nfor POD in $PODS; do\n IP=$(kubectl get pod -n $NAMESPACE $POD -o json | jq -r '.status.podIP')\n PORT=$(kubectl get pod -n $NAMESPACE $POD -o json | jq -r '.spec.containers[0].ports[] | select(.name==\"metrics\") | .containerPort')\n echo \"Scraping $POD at $IP:$PORT/metrics\"\n curl \"$IP:$PORT/metrics\" >> \"/tmp/logs\"/prometheus/$POD.txt || true\ndone",
"delta": "0:00:00.017259",
"end": "2026-08-31 17:54:28.669752",
"invocation": {
"module_args": {
"_raw_params": "set -e\nNAMESPACE=\"osh-infra\"\nAPP_LABEL=\"fluentd\"\nPODS=$(kubectl get pods -n $NAMESPACE -l application=$APP_LABEL -o json | jq -r '.items[].metadata.name')\nfor POD in $PODS; do\n IP=$(kubectl get pod -n $NAMESPACE $POD -o json | jq -r '.status.podIP')\n PORT=$(kubectl get pod -n $NAMESPACE $POD -o json | jq -r '.spec.containers[0].ports[] | select(.name==\"metrics\") | .containerPort')\n echo \"Scraping $POD at $IP:$PORT/metrics\"\n curl \"$IP:$PORT/metrics\" >> \"/tmp/logs\"/prometheus/$POD.txt || true\ndone",
"_uses_shell": true,
"argv": null,
"chdir": null,
"creates": null,
"executable": "/bin/bash",
"expand_argument_vars": true,
"removes": null,
"stdin": null,
"stdin_add_newline": true,
"strip_empty_ends": true,
"zuul_ansible_split_streams": false,
"zuul_log_id": "0242ac17-0010-451d-e6cf-00000000002b-1-controller",
"zuul_no_log": false,
"zuul_output_max_bytes": 1073741824
}
},
"msg": "",
"rc": 0,
"start": "2026-08-31 17:54:28.652493",
"stderr": "",
"stderr_lines": [],
"stdout": "/bin/bash: line 4: kubectl: command not found",
"stdout_lines": [
"/bin/bash: line 4: kubectl: command not found"
],
"zuul_log_id": "0242ac17-0010-451d-e6cf-00000000002b-1-controller"
}
},
"role": {
"id": "0242ac17-0010-451d-e6cf-000000000026",
"name": "gather-prom-metrics",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/gather-prom-metrics"
},
"task": {
"duration": {
"end": "2026-08-31T17:54:28.918882Z",
"start": "2026-08-31T17:54:28.398895Z"
},
"id": "0242ac17-0010-451d-e6cf-00000000002b",
"name": "Get metrics from fluentd pods"
}
},
{
"hosts": {
"controller": {
"action": "synchronize",
"changed": true,
"cmd": "/usr/bin/rsync --delay-updates -F --compress --archive --rsh='/usr/bin/ssh -S none -o Port=22 -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null' --rsync-path='sudo -u root rsync' --out-format='<>%i %n%L' zuul@162.253.55.159:/tmp/logs/prometheus /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs/controller",
"invocation": {
"module_args": {
"_local_rsync_password": null,
"_local_rsync_path": "rsync",
"_ssh_args": null,
"_substitute_controller": false,
"archive": true,
"checksum": false,
"compress": true,
"copy_links": false,
"delay_updates": true,
"delete": false,
"dest": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs/controller",
"dest_port": 22,
"dirs": false,
"existing_only": false,
"group": null,
"link_dest": null,
"links": null,
"mode": "pull",
"owner": null,
"partial": false,
"perms": null,
"private_key": null,
"recursive": null,
"rsync_opts": [],
"rsync_path": "sudo -u root rsync",
"rsync_timeout": 0,
"set_remote_user": true,
"src": "zuul@162.253.55.159:/tmp/logs/prometheus",
"ssh_connection_multiplexing": false,
"times": null,
"use_ssh_args": false,
"verify_host": false
}
},
"msg": "cd+++++++++ prometheus/\n",
"rc": 0,
"stdout_lines": [
"cd+++++++++ prometheus/"
]
}
},
"role": {
"id": "0242ac17-0010-451d-e6cf-000000000026",
"name": "gather-prom-metrics",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/gather-prom-metrics"
},
"task": {
"duration": {
"end": "2026-08-31T17:54:29.447872Z",
"start": "2026-08-31T17:54:28.924038Z"
},
"id": "0242ac17-0010-451d-e6cf-00000000002c",
"name": "Downloads logs to executor"
}
},
{
"hosts": {
"controller": {
"action": "file",
"changed": true,
"diff": {
"after": {
"path": "/tmp/logs/selenium",
"state": "directory"
},
"before": {
"path": "/tmp/logs/selenium",
"state": "absent"
}
},
"gid": 0,
"group": "root",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": null,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/tmp/logs/selenium",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0755",
"owner": "root",
"path": "/tmp/logs/selenium",
"size": 4096,
"state": "directory",
"uid": 0
}
},
"role": {
"id": "0242ac17-0010-451d-e6cf-00000000002e",
"name": "gather-selenium-data",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/gather-selenium-data"
},
"task": {
"duration": {
"end": "2026-08-31T17:54:29.777036Z",
"start": "2026-08-31T17:54:29.499161Z"
},
"id": "0242ac17-0010-451d-e6cf-000000000030",
"name": "creating directory for helm release descriptions"
}
},
{
"hosts": {
"controller": {
"action": "shell",
"changed": true,
"cmd": "set -x\ncp /tmp/artifacts/* /tmp/logs/selenium/.",
"delta": "0:00:00.013239",
"end": "2026-08-31 17:54:30.061148",
"failed": true,
"invocation": {
"module_args": {
"_raw_params": "set -x\ncp /tmp/artifacts/* /tmp/logs/selenium/.",
"_uses_shell": true,
"argv": null,
"chdir": null,
"creates": null,
"executable": "/bin/bash",
"expand_argument_vars": true,
"removes": null,
"stdin": null,
"stdin_add_newline": true,
"strip_empty_ends": true,
"zuul_ansible_split_streams": false,
"zuul_log_id": "0242ac17-0010-451d-e6cf-000000000031-1-controller",
"zuul_no_log": false,
"zuul_output_max_bytes": 1073741824
}
},
"msg": "non-zero return code",
"rc": 1,
"start": "2026-08-31 17:54:30.047909",
"stderr": "",
"stderr_lines": [],
"stdout": "+ cp '/tmp/artifacts/*' /tmp/logs/selenium/.\ncp: cannot stat '/tmp/artifacts/*': No such file or directory",
"stdout_lines": [
"+ cp '/tmp/artifacts/*' /tmp/logs/selenium/.",
"cp: cannot stat '/tmp/artifacts/*': No such file or directory"
],
"zuul_log_id": "0242ac17-0010-451d-e6cf-000000000031-1-controller"
}
},
"role": {
"id": "0242ac17-0010-451d-e6cf-00000000002e",
"name": "gather-selenium-data",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/gather-selenium-data"
},
"task": {
"duration": {
"end": "2026-08-31T17:54:30.324262Z",
"start": "2026-08-31T17:54:29.803009Z"
},
"id": "0242ac17-0010-451d-e6cf-000000000031",
"name": "Get selenium data"
}
},
{
"hosts": {
"controller": {
"action": "synchronize",
"changed": true,
"cmd": "/usr/bin/rsync --delay-updates -F --compress --archive --rsh='/usr/bin/ssh -S none -o Port=22 -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null' --rsync-path='sudo -u root rsync' --out-format='<>%i %n%L' zuul@162.253.55.159:/tmp/logs/selenium /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs/controller",
"invocation": {
"module_args": {
"_local_rsync_password": null,
"_local_rsync_path": "rsync",
"_ssh_args": null,
"_substitute_controller": false,
"archive": true,
"checksum": false,
"compress": true,
"copy_links": false,
"delay_updates": true,
"delete": false,
"dest": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs/controller",
"dest_port": 22,
"dirs": false,
"existing_only": false,
"group": null,
"link_dest": null,
"links": null,
"mode": "pull",
"owner": null,
"partial": false,
"perms": null,
"private_key": null,
"recursive": null,
"rsync_opts": [],
"rsync_path": "sudo -u root rsync",
"rsync_timeout": 0,
"set_remote_user": true,
"src": "zuul@162.253.55.159:/tmp/logs/selenium",
"ssh_connection_multiplexing": false,
"times": null,
"use_ssh_args": false,
"verify_host": false
}
},
"msg": "cd+++++++++ selenium/\n",
"rc": 0,
"stdout_lines": [
"cd+++++++++ selenium/"
]
}
},
"role": {
"id": "0242ac17-0010-451d-e6cf-00000000002e",
"name": "gather-selenium-data",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/untrusted/project_4/opendev.org/openstack/openstack-helm/roles/gather-selenium-data"
},
"task": {
"duration": {
"end": "2026-08-31T17:54:30.832952Z",
"start": "2026-08-31T17:54:30.329990Z"
},
"id": "0242ac17-0010-451d-e6cf-000000000032",
"name": "Downloads logs to executor"
}
}
]
}
],
"stats": {
"controller": {
"changed": 23,
"failures": 0,
"ignored": 1,
"ok": 23,
"rescued": 0,
"skipped": 0,
"unreachable": 0
}
},
"trusted": false
},
{
"branch": "main",
"index": "1",
"phase": "post",
"playbook": "github.com/vexxhost/zuul-config/playbooks/base/post.yaml",
"plays": [
{
"play": {
"duration": {
"end": "2026-08-31T17:54:34.880302Z",
"start": "2026-08-31T17:54:31.569952Z"
},
"id": "0242ac17-0010-c277-45e5-000000000002",
"name": "all"
},
"tasks": [
{
"hosts": {
"controller": {
"action": "set_fact",
"changed": false,
"false_condition": "groups['all'] | length > 1",
"skip_reason": "Conditional result was False",
"skipped": true
}
},
"role": {
"id": "0242ac17-0010-c277-45e5-000000000006",
"name": "fetch-output",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/fetch-output"
},
"task": {
"duration": {
"end": "2026-08-31T17:54:31.628434Z",
"start": "2026-08-31T17:54:31.581953Z"
},
"id": "0242ac17-0010-c277-45e5-000000000008",
"name": "Set log path for multiple nodes"
}
},
{
"hosts": {
"controller": {
"action": "set_fact",
"ansible_facts": {
"log_path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs"
},
"changed": false
}
},
"role": {
"id": "0242ac17-0010-c277-45e5-000000000006",
"name": "fetch-output",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/fetch-output"
},
"task": {
"duration": {
"end": "2026-08-31T17:54:31.688329Z",
"start": "2026-08-31T17:54:31.639627Z"
},
"id": "0242ac17-0010-c277-45e5-000000000009",
"name": "Set log path for single node"
}
},
{
"hosts": {
"controller": {
"action": "file",
"changed": true,
"msg": "All items completed",
"results": [
{
"ansible_loop_var": "zj_output_dir",
"changed": false,
"diff": {
"after": {
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs"
},
"before": {
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs"
}
},
"failed": false,
"gid": 0,
"group": "root",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": 493,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0755",
"owner": "root",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs",
"size": 4096,
"state": "directory",
"uid": 0,
"zj_output_dir": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs"
},
{
"ansible_loop_var": "zj_output_dir",
"changed": true,
"diff": {
"after": {
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/artifacts",
"state": "directory"
},
"before": {
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/artifacts",
"state": "absent"
}
},
"failed": false,
"gid": 0,
"group": "root",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": 493,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/artifacts",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0755",
"owner": "root",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/artifacts",
"size": 4096,
"state": "directory",
"uid": 0,
"zj_output_dir": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/artifacts"
},
{
"ansible_loop_var": "zj_output_dir",
"changed": true,
"diff": {
"after": {
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/docs",
"state": "directory"
},
"before": {
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/docs",
"state": "absent"
}
},
"failed": false,
"gid": 0,
"group": "root",
"invocation": {
"module_args": {
"_diff_peek": null,
"_original_basename": null,
"access_time": null,
"access_time_format": "%Y%m%d%H%M.%S",
"attributes": null,
"follow": true,
"force": false,
"group": null,
"mode": 493,
"modification_time": null,
"modification_time_format": "%Y%m%d%H%M.%S",
"owner": null,
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/docs",
"recurse": false,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"src": null,
"state": "directory",
"unsafe_writes": false
}
},
"mode": "0755",
"owner": "root",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/docs",
"size": 4096,
"state": "directory",
"uid": 0,
"zj_output_dir": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/docs"
}
]
}
},
"role": {
"id": "0242ac17-0010-c277-45e5-000000000006",
"name": "fetch-output",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/fetch-output"
},
"task": {
"duration": {
"end": "2026-08-31T17:54:32.509513Z",
"start": "2026-08-31T17:54:31.693361Z"
},
"id": "0242ac17-0010-c277-45e5-00000000000a",
"name": "Ensure local output dirs"
}
},
{
"hosts": {
"controller": {
"action": "synchronize",
"changed": true,
"msg": "All items completed",
"results": [
{
"ansible_loop_var": "zj_output",
"changed": true,
"cmd": "/usr/bin/rsync --delay-updates -F --compress --archive --no-owner --no-group --rsh='/usr/bin/ssh -S none -o Port=22' --out-format='<>%i %n%L' zuul@162.253.55.159:/home/zuul/zuul-output/logs/ /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs/",
"failed": false,
"invocation": {
"module_args": {
"_local_rsync_password": null,
"_local_rsync_path": "rsync",
"_ssh_args": null,
"_substitute_controller": false,
"archive": true,
"checksum": false,
"compress": true,
"copy_links": false,
"delay_updates": true,
"delete": false,
"dest": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs/",
"dest_port": 22,
"dirs": false,
"existing_only": false,
"group": false,
"link_dest": null,
"links": null,
"mode": "pull",
"owner": false,
"partial": false,
"perms": null,
"private_key": null,
"recursive": null,
"rsync_opts": [],
"rsync_path": null,
"rsync_timeout": 0,
"set_remote_user": true,
"src": "zuul@162.253.55.159:/home/zuul/zuul-output/logs/",
"ssh_connection_multiplexing": false,
"times": null,
"use_ssh_args": false,
"verify_host": true
}
},
"msg": ".d..t...... ./\n",
"rc": 0,
"stdout_lines": [
".d..t...... ./"
],
"zj_output": {
"dest": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs",
"src": "logs"
}
},
{
"ansible_loop_var": "zj_output",
"changed": true,
"cmd": "/usr/bin/rsync --delay-updates -F --compress --archive --no-owner --no-group --rsh='/usr/bin/ssh -S none -o Port=22' --out-format='<>%i %n%L' zuul@162.253.55.159:/home/zuul/zuul-output/artifacts/ /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/artifacts/",
"failed": false,
"invocation": {
"module_args": {
"_local_rsync_password": null,
"_local_rsync_path": "rsync",
"_ssh_args": null,
"_substitute_controller": false,
"archive": true,
"checksum": false,
"compress": true,
"copy_links": false,
"delay_updates": true,
"delete": false,
"dest": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/artifacts/",
"dest_port": 22,
"dirs": false,
"existing_only": false,
"group": false,
"link_dest": null,
"links": null,
"mode": "pull",
"owner": false,
"partial": false,
"perms": null,
"private_key": null,
"recursive": null,
"rsync_opts": [],
"rsync_path": null,
"rsync_timeout": 0,
"set_remote_user": true,
"src": "zuul@162.253.55.159:/home/zuul/zuul-output/artifacts/",
"ssh_connection_multiplexing": false,
"times": null,
"use_ssh_args": false,
"verify_host": true
}
},
"msg": ".d..t...... ./\n",
"rc": 0,
"stdout_lines": [
".d..t...... ./"
],
"zj_output": {
"dest": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/artifacts",
"src": "artifacts"
}
},
{
"ansible_loop_var": "zj_output",
"changed": true,
"cmd": "/usr/bin/rsync --delay-updates -F --compress --archive --no-owner --no-group --rsh='/usr/bin/ssh -S none -o Port=22' --out-format='<>%i %n%L' zuul@162.253.55.159:/home/zuul/zuul-output/docs/ /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/docs/",
"failed": false,
"invocation": {
"module_args": {
"_local_rsync_password": null,
"_local_rsync_path": "rsync",
"_ssh_args": null,
"_substitute_controller": false,
"archive": true,
"checksum": false,
"compress": true,
"copy_links": false,
"delay_updates": true,
"delete": false,
"dest": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/docs/",
"dest_port": 22,
"dirs": false,
"existing_only": false,
"group": false,
"link_dest": null,
"links": null,
"mode": "pull",
"owner": false,
"partial": false,
"perms": null,
"private_key": null,
"recursive": null,
"rsync_opts": [],
"rsync_path": null,
"rsync_timeout": 0,
"set_remote_user": true,
"src": "zuul@162.253.55.159:/home/zuul/zuul-output/docs/",
"ssh_connection_multiplexing": false,
"times": null,
"use_ssh_args": false,
"verify_host": true
}
},
"msg": ".d..t...... ./\n",
"rc": 0,
"stdout_lines": [
".d..t...... ./"
],
"zj_output": {
"dest": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/docs",
"src": "docs"
}
}
]
}
},
"role": {
"id": "0242ac17-0010-c277-45e5-000000000006",
"name": "fetch-output",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/fetch-output"
},
"task": {
"duration": {
"end": "2026-08-31T17:54:34.204659Z",
"start": "2026-08-31T17:54:32.521498Z"
},
"id": "0242ac17-0010-c277-45e5-00000000000c",
"name": "Collect logs, artifacts and docs"
}
},
{
"hosts": {
"controller": {
"action": "shell",
"changed": true,
"msg": "All items completed",
"results": [
{
"ansible_loop_var": "zj_item",
"changed": true,
"cmd": "if [ -n \"$(find /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/artifacts -mindepth 1)\" ] ; then\n # Only create target directory if it is needed.\n # Do not fail if it is already there.\n mkdir -p /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs/artifacts\n # Leave the original directory behind so that other roles\n # operating on the interface directories can simply no-op.\n mv -f /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/artifacts/* /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs/artifacts\nfi\n",
"delta": "0:00:00.011517",
"end": "2026-08-31 17:54:34.601679",
"failed": false,
"invocation": {
"module_args": {
"_raw_params": "if [ -n \"$(find /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/artifacts -mindepth 1)\" ] ; then\n # Only create target directory if it is needed.\n # Do not fail if it is already there.\n mkdir -p /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs/artifacts\n # Leave the original directory behind so that other roles\n # operating on the interface directories can simply no-op.\n mv -f /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/artifacts/* /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs/artifacts\nfi\n",
"_uses_shell": true,
"argv": null,
"chdir": null,
"creates": null,
"executable": null,
"expand_argument_vars": true,
"removes": null,
"stdin": null,
"stdin_add_newline": true,
"strip_empty_ends": true,
"zuul_ansible_split_streams": false,
"zuul_log_id": "in-loop-ignore",
"zuul_no_log": false,
"zuul_output_max_bytes": 1073741824
}
},
"msg": "",
"rc": 0,
"start": "2026-08-31 17:54:34.590162",
"stderr": "",
"stderr_lines": [],
"stdout": "",
"stdout_lines": [],
"zj_item": "artifacts",
"zuul_log_id": "in-loop-ignore"
},
{
"ansible_loop_var": "zj_item",
"changed": true,
"cmd": "if [ -n \"$(find /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/docs -mindepth 1)\" ] ; then\n # Only create target directory if it is needed.\n # Do not fail if it is already there.\n mkdir -p /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs/docs\n # Leave the original directory behind so that other roles\n # operating on the interface directories can simply no-op.\n mv -f /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/docs/* /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs/docs\nfi\n",
"delta": "0:00:00.007247",
"end": "2026-08-31 17:54:34.821989",
"failed": false,
"invocation": {
"module_args": {
"_raw_params": "if [ -n \"$(find /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/docs -mindepth 1)\" ] ; then\n # Only create target directory if it is needed.\n # Do not fail if it is already there.\n mkdir -p /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs/docs\n # Leave the original directory behind so that other roles\n # operating on the interface directories can simply no-op.\n mv -f /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/docs/* /var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/work/logs/docs\nfi\n",
"_uses_shell": true,
"argv": null,
"chdir": null,
"creates": null,
"executable": null,
"expand_argument_vars": true,
"removes": null,
"stdin": null,
"stdin_add_newline": true,
"strip_empty_ends": true,
"zuul_ansible_split_streams": false,
"zuul_log_id": "in-loop-ignore",
"zuul_no_log": false,
"zuul_output_max_bytes": 1073741824
}
},
"msg": "",
"rc": 0,
"start": "2026-08-31 17:54:34.814742",
"stderr": "",
"stderr_lines": [],
"stdout": "",
"stdout_lines": [],
"zj_item": "docs",
"zuul_log_id": "in-loop-ignore"
}
]
}
},
"role": {
"id": "0242ac17-0010-c277-45e5-00000000000f",
"name": "merge-output-to-logs",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/merge-output-to-logs"
},
"task": {
"duration": {
"end": "2026-08-31T17:54:34.880302Z",
"start": "2026-08-31T17:54:34.220330Z"
},
"id": "0242ac17-0010-c277-45e5-000000000011",
"name": "Move artifacts and docs to logs dir"
}
}
]
},
{
"play": {
"duration": {
"end": "2026-08-31T17:54:35.623071Z",
"start": "2026-08-31T17:54:34.892461Z"
},
"id": "0242ac17-0010-c277-45e5-000000000013",
"name": "all"
},
"tasks": [
{
"hosts": {
"controller": {
"action": "authorized_key",
"changed": true,
"comment": null,
"exclusive": false,
"follow": false,
"invocation": {
"module_args": {
"changed": true,
"comment": null,
"exclusive": false,
"follow": false,
"key": "ssh-rsa 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 zuul-build-sshkey",
"key_options": null,
"keyfile": "/home/zuul/.ssh/authorized_keys",
"manage_dir": true,
"path": null,
"state": "absent",
"user": "zuul",
"validate_certs": true
}
},
"key": "ssh-rsa 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 zuul-build-sshkey",
"key_options": null,
"keyfile": "/home/zuul/.ssh/authorized_keys",
"manage_dir": true,
"path": null,
"state": "absent",
"user": "zuul",
"validate_certs": true
}
},
"role": {
"id": "0242ac17-0010-c277-45e5-000000000016",
"name": "remove-build-sshkey",
"path": "/var/lib/zuul/builds/0636888ade7c46d7a5fcb0c7ba6359f5/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/remove-build-sshkey"
},
"task": {
"duration": {
"end": "2026-08-31T17:54:35.623071Z",
"start": "2026-08-31T17:54:34.899099Z"
},
"id": "0242ac17-0010-c277-45e5-000000000018",
"name": "Remove the build SSH key from all nodes"
}
}
]
}
],
"stats": {
"controller": {
"changed": 4,
"failures": 0,
"ignored": 0,
"ok": 5,
"rescued": 0,
"skipped": 1,
"unreachable": 0
}
},
"trusted": true
}
]