all:
  children:
    cephs:
      hosts:
        instance: null
    computes:
      hosts:
        instance: null
    controllers:
      hosts:
        instance: null
    zuul_unreachable:
      hosts: {}
  hosts:
    instance:
      ansible_connection: ssh
      ansible_host: 199.204.45.205
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      atmosphere_image_prefix: harbor.atmosphere.dev/
      atmosphere_network_backend: openvswitch
      barbican_helm_values:
        pod:
          replicas:
            api: 1
      ceph_conf_overrides:
      - option: mon allow pool size one
        section: global
        value: true
      - option: osd crush chooseleaf type
        section: global
        value: 0
      - option: auth allow insecure global id reclaim
        section: mon
        value: false
      ceph_csi_rbd_helm_values:
        provisioner:
          replicaCount: 1
      ceph_fsid: 4837cbf8-4f90-4300-b3f6-726c9b9f89b4
      ceph_osd_devices:
      - /dev/ceph-{{ inventory_hostname_short }}-osd0/data
      - /dev/ceph-{{ inventory_hostname_short }}-osd1/data
      - /dev/ceph-{{ inventory_hostname_short }}-osd2/data
      ceph_public_network: '{{ ansible_facts[''default_ipv4''][''network''] + ''/''
        + (ansible_facts[''default_ipv4''][''prefix''] | string) }}'
      ceph_version: 18.2.7
      cilium_helm_values:
        operator:
          replicas: 1
      cinder_helm_values:
        conf:
          ceph:
            pools:
              backup:
                replication: 1
              cinder.volumes:
                replication: 1
          cinder:
            DEFAULT:
              osapi_volume_workers: 2
        pod:
          replicas:
            api: 1
            scheduler: 1
      cluster_issuer_type: self-signed
      coredns_helm_values:
        replicaCount: 1
      csi_driver: local-path-provisioner
      glance_helm_values:
        conf:
          glance:
            DEFAULT:
              workers: 2
            glance_store:
              rbd_store_replication: 1
        pod:
          replicas:
            api: 1
      glance_images:
      - container_format: bare
        disk_format: raw
        is_public: true
        min_disk: 1
        name: cirros
        url: http://download.cirros-cloud.net/0.6.2/cirros-0.6.2-x86_64-disk.img
      heat_helm_values:
        conf:
          heat:
            DEFAULT:
              num_engine_workers: 2
            heat_api:
              workers: 2
            heat_api_cfn:
              workers: 2
            heat_api_cloudwatch:
              workers: 2
        pod:
          replicas:
            api: 1
            cfn: 1
            cloudwatch: 1
            engine: 1
      horizon_helm_values:
        pod:
          replicas:
            server: 1
      ingress_nginx_helm_values:
        controller:
          config:
            worker-processes: 2
      keystone_helm_values:
        pod:
          replicas:
            api: 1
      kube_vip_address: 172.17.0.100
      kube_vip_interface: '{{ ansible_facts[''default_ipv4''].interface }}'
      kubernetes_hostname: '{{ ansible_facts[''default_ipv4''].address }}'
      kubernetes_keepalived_interface: br-mgmt
      magnum_helm_values:
        conf:
          magnum:
            api:
              workers: 2
            conductor:
              workers: 2
        pod:
          replicas:
            api: 1
            conductor: 1
      magnum_image_disk_format: qcow2
      magnum_images: '[ {{ _magnum_images[-1] }} ]'
      manila_helm_values:
        conf:
          manila:
            DEFAULT:
              osapi_share_workers: 2
        pod:
          replicas:
            api: 1
            scheduler: 1
      molecule_scenario: aio
      neutron_helm_values:
        conf:
          neutron:
            DEFAULT:
              api_workers: 2
              metadata_workers: 2
              rpc_workers: 2
        pod:
          replicas:
            rpc_server: 1
            server: 1
      nodepool:
        az: nova
        cloud: public
        external_id: 5b44f82c-227c-426f-81c4-0ce0b18bc03b
        host_id: d953b2b79ff732b94d97ea6274a0c4d1174b1c52cbf038923e842d1b
        interface_ip: 199.204.45.205
        label: ubuntu-jammy-16
        node_properties: {}
        private_ipv4: 199.204.45.205
        private_ipv6: null
        provider: yul1
        public_ipv4: 199.204.45.205
        public_ipv6: 2604:e100:1:0:f816:3eff:fe3c:3a79
        region: ca-ymq-1
        slot: null
      nova_helm_values:
        conf:
          nova:
            DEFAULT:
              metadata_workers: 2
              osapi_compute_workers: 2
            conductor:
              workers: 2
            scheduler:
              workers: 2
        pod:
          replicas:
            api_metadata: 1
            conductor: 1
            novncproxy: 1
            osapi: 1
            scheduler: 1
            spiceproxy: 1
      octavia_helm_values:
        conf:
          octavia:
            controller_worker:
              workers: 2
          octavia_api_uwsgi:
            uwsgi:
              processes: 2
        pod:
          replicas:
            api: 1
            housekeeping: 1
            worker: 1
      ovn_helm_values:
        conf:
          auto_bridge_add:
            br-ex: null
        pod:
          replicas:
            ovn_northd: 1
            ovn_ovsdb_nb: 1
            ovn_ovsdb_sb: 1
      percona_xtradb_cluster_spec:
        allowUnsafeConfigurations: true
        haproxy:
          size: 1
        pxc:
          size: 1
      placement_helm_values:
        conf:
          placement_api_uwsgi:
            uwsgi:
              processes: 2
        pod:
          replicas:
            api: 1
      rook_ceph_cluster_radosgw_spec:
        dataPool:
          failureDomain: osd
        gateway:
          instances: 1
        metadataPool:
          failureDomain: osd
      staffeln_helm_values:
        pod:
          replicas:
            api: 1
            conductor: 1
      valkey_helm_values:
        replica:
          replicaCount: 1
      zuul_node:
        az: nova
        cloud: public
        external_id: 5b44f82c-227c-426f-81c4-0ce0b18bc03b
        host_id: d953b2b79ff732b94d97ea6274a0c4d1174b1c52cbf038923e842d1b
        interface_ip: 199.204.45.205
        label: ubuntu-jammy-16
        node_properties: {}
        private_ipv4: 199.204.45.205
        private_ipv6: null
        provider: yul1
        public_ipv4: 199.204.45.205
        public_ipv6: 2604:e100:1:0:f816:3eff:fe3c:3a79
        region: ca-ymq-1
        slot: null
        uuid: null
  vars:
    atmosphere_image_prefix: harbor.atmosphere.dev/
    atmosphere_network_backend: openvswitch
    barbican_helm_values:
      pod:
        replicas:
          api: 1
    ceph_conf_overrides:
    - option: mon allow pool size one
      section: global
      value: true
    - option: osd crush chooseleaf type
      section: global
      value: 0
    - option: auth allow insecure global id reclaim
      section: mon
      value: false
    ceph_csi_rbd_helm_values:
      provisioner:
        replicaCount: 1
    ceph_fsid: 4837cbf8-4f90-4300-b3f6-726c9b9f89b4
    ceph_osd_devices:
    - /dev/ceph-{{ inventory_hostname_short }}-osd0/data
    - /dev/ceph-{{ inventory_hostname_short }}-osd1/data
    - /dev/ceph-{{ inventory_hostname_short }}-osd2/data
    ceph_public_network: '{{ ansible_facts[''default_ipv4''][''network''] + ''/''
      + (ansible_facts[''default_ipv4''][''prefix''] | string) }}'
    ceph_version: 18.2.7
    cilium_helm_values:
      operator:
        replicas: 1
    cinder_helm_values:
      conf:
        ceph:
          pools:
            backup:
              replication: 1
            cinder.volumes:
              replication: 1
        cinder:
          DEFAULT:
            osapi_volume_workers: 2
      pod:
        replicas:
          api: 1
          scheduler: 1
    cluster_issuer_type: self-signed
    coredns_helm_values:
      replicaCount: 1
    csi_driver: local-path-provisioner
    glance_helm_values:
      conf:
        glance:
          DEFAULT:
            workers: 2
          glance_store:
            rbd_store_replication: 1
      pod:
        replicas:
          api: 1
    glance_images:
    - container_format: bare
      disk_format: raw
      is_public: true
      min_disk: 1
      name: cirros
      url: http://download.cirros-cloud.net/0.6.2/cirros-0.6.2-x86_64-disk.img
    heat_helm_values:
      conf:
        heat:
          DEFAULT:
            num_engine_workers: 2
          heat_api:
            workers: 2
          heat_api_cfn:
            workers: 2
          heat_api_cloudwatch:
            workers: 2
      pod:
        replicas:
          api: 1
          cfn: 1
          cloudwatch: 1
          engine: 1
    horizon_helm_values:
      pod:
        replicas:
          server: 1
    ingress_nginx_helm_values:
      controller:
        config:
          worker-processes: 2
    keystone_helm_values:
      pod:
        replicas:
          api: 1
    kube_vip_address: 172.17.0.100
    kube_vip_interface: '{{ ansible_facts[''default_ipv4''].interface }}'
    kubernetes_hostname: '{{ ansible_facts[''default_ipv4''].address }}'
    kubernetes_keepalived_interface: br-mgmt
    magnum_helm_values:
      conf:
        magnum:
          api:
            workers: 2
          conductor:
            workers: 2
      pod:
        replicas:
          api: 1
          conductor: 1
    magnum_image_disk_format: qcow2
    magnum_images: '[ {{ _magnum_images[-1] }} ]'
    manila_helm_values:
      conf:
        manila:
          DEFAULT:
            osapi_share_workers: 2
      pod:
        replicas:
          api: 1
          scheduler: 1
    molecule_scenario: aio
    neutron_helm_values:
      conf:
        neutron:
          DEFAULT:
            api_workers: 2
            metadata_workers: 2
            rpc_workers: 2
      pod:
        replicas:
          rpc_server: 1
          server: 1
    nova_helm_values:
      conf:
        nova:
          DEFAULT:
            metadata_workers: 2
            osapi_compute_workers: 2
          conductor:
            workers: 2
          scheduler:
            workers: 2
      pod:
        replicas:
          api_metadata: 1
          conductor: 1
          novncproxy: 1
          osapi: 1
          scheduler: 1
          spiceproxy: 1
    octavia_helm_values:
      conf:
        octavia:
          controller_worker:
            workers: 2
        octavia_api_uwsgi:
          uwsgi:
            processes: 2
      pod:
        replicas:
          api: 1
          housekeeping: 1
          worker: 1
    ovn_helm_values:
      conf:
        auto_bridge_add:
          br-ex: null
      pod:
        replicas:
          ovn_northd: 1
          ovn_ovsdb_nb: 1
          ovn_ovsdb_sb: 1
    percona_xtradb_cluster_spec:
      allowUnsafeConfigurations: true
      haproxy:
        size: 1
      pxc:
        size: 1
    placement_helm_values:
      conf:
        placement_api_uwsgi:
          uwsgi:
            processes: 2
      pod:
        replicas:
          api: 1
    rook_ceph_cluster_radosgw_spec:
      dataPool:
        failureDomain: osd
      gateway:
        instances: 1
      metadataPool:
        failureDomain: osd
    staffeln_helm_values:
      pod:
        replicas:
          api: 1
          conductor: 1
    valkey_helm_values:
      replica:
        replicaCount: 1
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: vexxhost/zuul-config/zuul.d/jobs.yaml@main#1>'
      - '<Job molecule explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: vexxhost/zuul-jobs/zuul.d/ansible-jobs.yaml@main#1>'
      - '<Job atmosphere-molecule explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: vexxhost/atmosphere/.zuul.yaml@main#34>'
      - '<Job atmosphere-molecule-aio explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: vexxhost/atmosphere/.zuul.yaml@main#98>'
      - '<Job atmosphere-molecule-aio-openvswitch explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: vexxhost/atmosphere/.zuul.yaml@main#280>'
      - '<Job atmosphere-molecule-aio-openvswitch explicit: None implied: None source:
        vexxhost/atmosphere/.zuul.yaml@main#324>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: 0928069c1ff44fd3b9709e48c9ad9a9e
      build_refs:
      - branch: main
        change: '3915'
        change_message: "fix(deploy): four critical bugs in parallel orchestrator
          (follow-up to #3818)\n\n## Summary\n\nFollow-up to #3818 \u2014 fixes four
          critical bugs identified during code review of the parallel deployment orchestrator.\n\n>
          **Base note:** branch sits on top of `feat/parallel-deploy-orchestrator`
          (#3818). PR target is `main` so the diff visible here will only be meaningful
          **after** #3818 lands. Until then, review by looking at the latest commit
          on this branch only.\n\n## Bugs fixed\n\n| ID | Bug | Fix |\n|----|-----|-----|\n|
          **C1** | `atmosphere deploy --tags neutron,nova` (or any multi-tag where
          a selected component has `PreRoleDependsOn` outside the subgraph) **hangs
          forever** because the pre-role goroutine waits on completion channels that
          never close. | In `deployMultipleTags`, allocate `completionTracker` channels
          only for components in the subgraph. `tracker.Wait` already skips unknown
          names, which now matches the `--tags` semantic that everything not selected
          is assumed already deployed. |\n| **C2** | Ctrl-C **orphans `ansible-playbook`/`helm`/`ssh`
          subprocesses** because `cmd/atmosphere` never wraps the root context with
          `signal.NotifyContext`. Combined with `Setpgid: true`, children survive
          the parent. | Wrap `cmd.Context()` with `signal.NotifyContext(os.Interrupt,
          syscall.SIGTERM)` in `newDeployCmd.RunE`. |\n| **C3** | `defer tracker.MarkDone(id)`
          runs **even on failure**, briefly unblocking downstream pre-role gates before
          errgroup cancellation propagates. | Move `MarkDone` to the success path
          (after `Deployer.Deploy` returns nil). |\n| **C4** | `BuildGraph` **silently
          ignores** the error from `g.AddNode`, masking duplicate-name regressions.
          | Check the error and propagate it. |\n\n## Why the existing tests didn't
          catch C1\n\nThe mock deployers in `orchestrator_test.go` drop the `preGate`
          callback. The new `gateAwareDeployer` in `orchestrator_subgraph_pregate_test.go`
          invokes it, mirroring `AnsibleDeployer.Deploy`. With the old code, the new
          test deadlocks until the 5 s ctx timeout fires; with the fix, it returns
          immediately.\n\nVerified:\n\n```\n$ git stash && go test -run TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph
          -v ./internal/deploy\n--- FAIL: TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph
          (5.00s)\n    Deploy returned error (likely a hang regression): component
          neutron failed: context deadline exceeded\n\n$ git stash pop && go test
          -run TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph -v ./internal/deploy\n---
          PASS: TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph (0.00s)\n```\n\n##
          Tests added\n\n- `TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph`
          \u2014 neutron+nova (C1 regression guard)\n- `TestDeployMultipleTags_KeystoneAlone`
          \u2014 keystone variant of C1\n- `TestDeployFailure_DoesNotMarkDone` \u2014
          C3 regression guard\n\n## Files\n\n- `cmd/atmosphere/deploy.go` \u2014 C2\n-
          `internal/deploy/component.go` \u2014 C4\n- `internal/deploy/orchestrator.go`
          \u2014 C1, C3\n- `internal/deploy/orchestrator_subgraph_pregate_test.go`
          (new) \u2014 regression tests\n"
        change_url: https://github.com/vexxhost/atmosphere/pull/3915
        commit_id: 4460cec376737d23e8ed118c84d6ce000be51985
        patchset: 4460cec376737d23e8ed118c84d6ce000be51985
        project:
          canonical_hostname: github.com
          canonical_name: github.com/vexxhost/atmosphere
          name: vexxhost/atmosphere
          short_name: atmosphere
          src_dir: src/github.com/vexxhost/atmosphere
        src_dir: src/github.com/vexxhost/atmosphere
        topic: null
      buildset: 88e4c2e452534b8aa83eba05bea92475
      buildset_refs:
      - branch: main
        change: '3915'
        change_message: "fix(deploy): four critical bugs in parallel orchestrator
          (follow-up to #3818)\n\n## Summary\n\nFollow-up to #3818 \u2014 fixes four
          critical bugs identified during code review of the parallel deployment orchestrator.\n\n>
          **Base note:** branch sits on top of `feat/parallel-deploy-orchestrator`
          (#3818). PR target is `main` so the diff visible here will only be meaningful
          **after** #3818 lands. Until then, review by looking at the latest commit
          on this branch only.\n\n## Bugs fixed\n\n| ID | Bug | Fix |\n|----|-----|-----|\n|
          **C1** | `atmosphere deploy --tags neutron,nova` (or any multi-tag where
          a selected component has `PreRoleDependsOn` outside the subgraph) **hangs
          forever** because the pre-role goroutine waits on completion channels that
          never close. | In `deployMultipleTags`, allocate `completionTracker` channels
          only for components in the subgraph. `tracker.Wait` already skips unknown
          names, which now matches the `--tags` semantic that everything not selected
          is assumed already deployed. |\n| **C2** | Ctrl-C **orphans `ansible-playbook`/`helm`/`ssh`
          subprocesses** because `cmd/atmosphere` never wraps the root context with
          `signal.NotifyContext`. Combined with `Setpgid: true`, children survive
          the parent. | Wrap `cmd.Context()` with `signal.NotifyContext(os.Interrupt,
          syscall.SIGTERM)` in `newDeployCmd.RunE`. |\n| **C3** | `defer tracker.MarkDone(id)`
          runs **even on failure**, briefly unblocking downstream pre-role gates before
          errgroup cancellation propagates. | Move `MarkDone` to the success path
          (after `Deployer.Deploy` returns nil). |\n| **C4** | `BuildGraph` **silently
          ignores** the error from `g.AddNode`, masking duplicate-name regressions.
          | Check the error and propagate it. |\n\n## Why the existing tests didn't
          catch C1\n\nThe mock deployers in `orchestrator_test.go` drop the `preGate`
          callback. The new `gateAwareDeployer` in `orchestrator_subgraph_pregate_test.go`
          invokes it, mirroring `AnsibleDeployer.Deploy`. With the old code, the new
          test deadlocks until the 5 s ctx timeout fires; with the fix, it returns
          immediately.\n\nVerified:\n\n```\n$ git stash && go test -run TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph
          -v ./internal/deploy\n--- FAIL: TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph
          (5.00s)\n    Deploy returned error (likely a hang regression): component
          neutron failed: context deadline exceeded\n\n$ git stash pop && go test
          -run TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph -v ./internal/deploy\n---
          PASS: TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph (0.00s)\n```\n\n##
          Tests added\n\n- `TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph`
          \u2014 neutron+nova (C1 regression guard)\n- `TestDeployMultipleTags_KeystoneAlone`
          \u2014 keystone variant of C1\n- `TestDeployFailure_DoesNotMarkDone` \u2014
          C3 regression guard\n\n## Files\n\n- `cmd/atmosphere/deploy.go` \u2014 C2\n-
          `internal/deploy/component.go` \u2014 C4\n- `internal/deploy/orchestrator.go`
          \u2014 C1, C3\n- `internal/deploy/orchestrator_subgraph_pregate_test.go`
          (new) \u2014 regression tests\n"
        change_url: https://github.com/vexxhost/atmosphere/pull/3915
        commit_id: 4460cec376737d23e8ed118c84d6ce000be51985
        patchset: 4460cec376737d23e8ed118c84d6ce000be51985
        project:
          canonical_hostname: github.com
          canonical_name: github.com/vexxhost/atmosphere
          name: vexxhost/atmosphere
          short_name: atmosphere
          src_dir: src/github.com/vexxhost/atmosphere
        src_dir: src/github.com/vexxhost/atmosphere
        topic: null
      change: '3915'
      change_message: "fix(deploy): four critical bugs in parallel orchestrator (follow-up
        to #3818)\n\n## Summary\n\nFollow-up to #3818 \u2014 fixes four critical bugs
        identified during code review of the parallel deployment orchestrator.\n\n>
        **Base note:** branch sits on top of `feat/parallel-deploy-orchestrator` (#3818).
        PR target is `main` so the diff visible here will only be meaningful **after**
        #3818 lands. Until then, review by looking at the latest commit on this branch
        only.\n\n## Bugs fixed\n\n| ID | Bug | Fix |\n|----|-----|-----|\n| **C1**
        | `atmosphere deploy --tags neutron,nova` (or any multi-tag where a selected
        component has `PreRoleDependsOn` outside the subgraph) **hangs forever** because
        the pre-role goroutine waits on completion channels that never close. | In
        `deployMultipleTags`, allocate `completionTracker` channels only for components
        in the subgraph. `tracker.Wait` already skips unknown names, which now matches
        the `--tags` semantic that everything not selected is assumed already deployed.
        |\n| **C2** | Ctrl-C **orphans `ansible-playbook`/`helm`/`ssh` subprocesses**
        because `cmd/atmosphere` never wraps the root context with `signal.NotifyContext`.
        Combined with `Setpgid: true`, children survive the parent. | Wrap `cmd.Context()`
        with `signal.NotifyContext(os.Interrupt, syscall.SIGTERM)` in `newDeployCmd.RunE`.
        |\n| **C3** | `defer tracker.MarkDone(id)` runs **even on failure**, briefly
        unblocking downstream pre-role gates before errgroup cancellation propagates.
        | Move `MarkDone` to the success path (after `Deployer.Deploy` returns nil).
        |\n| **C4** | `BuildGraph` **silently ignores** the error from `g.AddNode`,
        masking duplicate-name regressions. | Check the error and propagate it. |\n\n##
        Why the existing tests didn't catch C1\n\nThe mock deployers in `orchestrator_test.go`
        drop the `preGate` callback. The new `gateAwareDeployer` in `orchestrator_subgraph_pregate_test.go`
        invokes it, mirroring `AnsibleDeployer.Deploy`. With the old code, the new
        test deadlocks until the 5 s ctx timeout fires; with the fix, it returns immediately.\n\nVerified:\n\n```\n$
        git stash && go test -run TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph
        -v ./internal/deploy\n--- FAIL: TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph
        (5.00s)\n    Deploy returned error (likely a hang regression): component neutron
        failed: context deadline exceeded\n\n$ git stash pop && go test -run TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph
        -v ./internal/deploy\n--- PASS: TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph
        (0.00s)\n```\n\n## Tests added\n\n- `TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph`
        \u2014 neutron+nova (C1 regression guard)\n- `TestDeployMultipleTags_KeystoneAlone`
        \u2014 keystone variant of C1\n- `TestDeployFailure_DoesNotMarkDone` \u2014
        C3 regression guard\n\n## Files\n\n- `cmd/atmosphere/deploy.go` \u2014 C2\n-
        `internal/deploy/component.go` \u2014 C4\n- `internal/deploy/orchestrator.go`
        \u2014 C1, C3\n- `internal/deploy/orchestrator_subgraph_pregate_test.go` (new)
        \u2014 regression tests\n"
      change_url: https://github.com/vexxhost/atmosphere/pull/3915
      child_jobs: []
      commit_id: 4460cec376737d23e8ed118c84d6ce000be51985
      event_id: ff966d90-4d35-11f1-97ff-4a3db5d9b23d
      executor:
        hostname: 2d72f0692154
        inventory_file: /var/lib/zuul/builds/0928069c1ff44fd3b9709e48c9ad9a9e/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/0928069c1ff44fd3b9709e48c9ad9a9e/work/logs
        result_data_file: /var/lib/zuul/builds/0928069c1ff44fd3b9709e48c9ad9a9e/work/results.json
        src_root: /var/lib/zuul/builds/0928069c1ff44fd3b9709e48c9ad9a9e/work/src
        work_root: /var/lib/zuul/builds/0928069c1ff44fd3b9709e48c9ad9a9e/work
      include_vars: []
      items:
      - branch: main
        change: '3915'
        change_message: "fix(deploy): four critical bugs in parallel orchestrator
          (follow-up to #3818)\n\n## Summary\n\nFollow-up to #3818 \u2014 fixes four
          critical bugs identified during code review of the parallel deployment orchestrator.\n\n>
          **Base note:** branch sits on top of `feat/parallel-deploy-orchestrator`
          (#3818). PR target is `main` so the diff visible here will only be meaningful
          **after** #3818 lands. Until then, review by looking at the latest commit
          on this branch only.\n\n## Bugs fixed\n\n| ID | Bug | Fix |\n|----|-----|-----|\n|
          **C1** | `atmosphere deploy --tags neutron,nova` (or any multi-tag where
          a selected component has `PreRoleDependsOn` outside the subgraph) **hangs
          forever** because the pre-role goroutine waits on completion channels that
          never close. | In `deployMultipleTags`, allocate `completionTracker` channels
          only for components in the subgraph. `tracker.Wait` already skips unknown
          names, which now matches the `--tags` semantic that everything not selected
          is assumed already deployed. |\n| **C2** | Ctrl-C **orphans `ansible-playbook`/`helm`/`ssh`
          subprocesses** because `cmd/atmosphere` never wraps the root context with
          `signal.NotifyContext`. Combined with `Setpgid: true`, children survive
          the parent. | Wrap `cmd.Context()` with `signal.NotifyContext(os.Interrupt,
          syscall.SIGTERM)` in `newDeployCmd.RunE`. |\n| **C3** | `defer tracker.MarkDone(id)`
          runs **even on failure**, briefly unblocking downstream pre-role gates before
          errgroup cancellation propagates. | Move `MarkDone` to the success path
          (after `Deployer.Deploy` returns nil). |\n| **C4** | `BuildGraph` **silently
          ignores** the error from `g.AddNode`, masking duplicate-name regressions.
          | Check the error and propagate it. |\n\n## Why the existing tests didn't
          catch C1\n\nThe mock deployers in `orchestrator_test.go` drop the `preGate`
          callback. The new `gateAwareDeployer` in `orchestrator_subgraph_pregate_test.go`
          invokes it, mirroring `AnsibleDeployer.Deploy`. With the old code, the new
          test deadlocks until the 5 s ctx timeout fires; with the fix, it returns
          immediately.\n\nVerified:\n\n```\n$ git stash && go test -run TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph
          -v ./internal/deploy\n--- FAIL: TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph
          (5.00s)\n    Deploy returned error (likely a hang regression): component
          neutron failed: context deadline exceeded\n\n$ git stash pop && go test
          -run TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph -v ./internal/deploy\n---
          PASS: TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph (0.00s)\n```\n\n##
          Tests added\n\n- `TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph`
          \u2014 neutron+nova (C1 regression guard)\n- `TestDeployMultipleTags_KeystoneAlone`
          \u2014 keystone variant of C1\n- `TestDeployFailure_DoesNotMarkDone` \u2014
          C3 regression guard\n\n## Files\n\n- `cmd/atmosphere/deploy.go` \u2014 C2\n-
          `internal/deploy/component.go` \u2014 C4\n- `internal/deploy/orchestrator.go`
          \u2014 C1, C3\n- `internal/deploy/orchestrator_subgraph_pregate_test.go`
          (new) \u2014 regression tests\n"
        change_url: https://github.com/vexxhost/atmosphere/pull/3915
        commit_id: 4460cec376737d23e8ed118c84d6ce000be51985
        patchset: 4460cec376737d23e8ed118c84d6ce000be51985
        project:
          canonical_hostname: github.com
          canonical_name: github.com/vexxhost/atmosphere
          name: vexxhost/atmosphere
          short_name: atmosphere
          src_dir: src/github.com/vexxhost/atmosphere
        topic: null
      job: atmosphere-molecule-aio-openvswitch
      jobtags: []
      max_attempts: 3
      message: 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
      patchset: 4460cec376737d23e8ed118c84d6ce000be51985
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/vexxhost/zuul-config:
            canonical_name: github.com/vexxhost/zuul-config
            checkout: main
            commit: 298983cd1253e6833abdb49d87d912527e0e6597
          trusted/project_1/opendev.org/zuul/zuul-jobs:
            canonical_name: opendev.org/zuul/zuul-jobs
            checkout: master
            commit: 79fe3eb1d01f8ac5739b0b7bc4759c407b6e248d
          trusted/project_2/github.com/vexxhost/zuul-jobs:
            canonical_name: github.com/vexxhost/zuul-jobs
            checkout: main
            commit: a6e68243e02ef030ce5e75f8b67630880c475f33
          untrusted/project_0/github.com/vexxhost/zuul-jobs:
            canonical_name: github.com/vexxhost/zuul-jobs
            checkout: main
            commit: a6e68243e02ef030ce5e75f8b67630880c475f33
          untrusted/project_1/github.com/vexxhost/zuul-config:
            canonical_name: github.com/vexxhost/zuul-config
            checkout: main
            commit: 298983cd1253e6833abdb49d87d912527e0e6597
          untrusted/project_2/opendev.org/zuul/zuul-jobs:
            canonical_name: opendev.org/zuul/zuul-jobs
            checkout: master
            commit: 79fe3eb1d01f8ac5739b0b7bc4759c407b6e248d
          untrusted/project_3/github.com/vexxhost/atmosphere:
            canonical_name: github.com/vexxhost/atmosphere
            checkout: main
            commit: 4460cec376737d23e8ed118c84d6ce000be51985
          untrusted/project_4/opendev.org/openstack/openstack-helm:
            canonical_name: opendev.org/openstack/openstack-helm
            checkout: master
            commit: 029cd19ebf2c39eb8bcba1fe3275dc014f95ef42
        playbooks:
        - path: untrusted/project_3/github.com/vexxhost/atmosphere/molecule/aio/converge.yml
          roles:
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_0/role_0/atmosphere
            link_target: untrusted/project_3/github.com/vexxhost/atmosphere
            role_path: ansible/playbook_0/role_0/atmosphere/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_1/openstack-helm
            link_target: untrusted/project_4/opendev.org/openstack/openstack-helm
            role_path: ansible/playbook_0/role_1/openstack-helm/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_3/zuul-jobs
            link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs
            role_path: ansible/playbook_0/role_3/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_4/zuul-jobs
            link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs
            role_path: ansible/playbook_0/role_4/zuul-jobs/roles
        - path: untrusted/project_3/github.com/vexxhost/atmosphere/test-playbooks/molecule/run.yml
          roles:
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_1/role_0/atmosphere
            link_target: untrusted/project_3/github.com/vexxhost/atmosphere
            role_path: ansible/playbook_1/role_0/atmosphere/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_1/role_1/openstack-helm
            link_target: untrusted/project_4/opendev.org/openstack/openstack-helm
            role_path: ansible/playbook_1/role_1/openstack-helm/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_1/role_3/zuul-jobs
            link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs
            role_path: ansible/playbook_1/role_3/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_1/role_4/zuul-jobs
            link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs
            role_path: ansible/playbook_1/role_4/zuul-jobs/roles
        post_playbooks:
        - path: untrusted/project_3/github.com/vexxhost/atmosphere/test-playbooks/molecule/post.yml
          roles:
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/post_playbook_0/role_0/atmosphere
            link_target: untrusted/project_3/github.com/vexxhost/atmosphere
            role_path: ansible/post_playbook_0/role_0/atmosphere/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/post_playbook_0/role_1/openstack-helm
            link_target: untrusted/project_4/opendev.org/openstack/openstack-helm
            role_path: ansible/post_playbook_0/role_1/openstack-helm/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/post_playbook_0/role_3/zuul-jobs
            link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs
            role_path: ansible/post_playbook_0/role_3/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/post_playbook_0/role_4/zuul-jobs
            link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs
            role_path: ansible/post_playbook_0/role_4/zuul-jobs/roles
        - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post.yaml
          roles:
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/post_playbook_1/role_1/zuul-jobs
            link_target: trusted/project_1/opendev.org/zuul/zuul-jobs
            role_path: ansible/post_playbook_1/role_1/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/post_playbook_1/role_2/zuul-jobs
            link_target: trusted/project_2/github.com/vexxhost/zuul-jobs
            role_path: ansible/post_playbook_1/role_2/zuul-jobs/roles
        - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post-logs.yaml
          roles:
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/post_playbook_2/role_1/zuul-jobs
            link_target: trusted/project_1/opendev.org/zuul/zuul-jobs
            role_path: ansible/post_playbook_2/role_1/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/post_playbook_2/role_2/zuul-jobs
            link_target: trusted/project_2/github.com/vexxhost/zuul-jobs
            role_path: ansible/post_playbook_2/role_2/zuul-jobs/roles
        pre_playbooks:
        - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/pre.yaml
          roles:
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/pre_playbook_0/role_1/zuul-jobs
            link_target: trusted/project_1/opendev.org/zuul/zuul-jobs
            role_path: ansible/pre_playbook_0/role_1/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/pre_playbook_0/role_2/zuul-jobs
            link_target: trusted/project_2/github.com/vexxhost/zuul-jobs
            role_path: ansible/pre_playbook_0/role_2/zuul-jobs/roles
        - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/molecule/pre.yaml
          roles:
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/pre_playbook_1/role_1/zuul-jobs
            link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs
            role_path: ansible/pre_playbook_1/role_1/zuul-jobs/roles
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/pre_playbook_1/role_2/zuul-jobs
            link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs
            role_path: ansible/pre_playbook_1/role_2/zuul-jobs/roles
        - path: untrusted/project_3/github.com/vexxhost/atmosphere/test-playbooks/molecule/pre.yml
          roles:
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/pre_playbook_2/role_0/atmosphere
            link_target: untrusted/project_3/github.com/vexxhost/atmosphere
            role_path: ansible/pre_playbook_2/role_0/atmosphere/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/pre_playbook_2/role_1/openstack-helm
            link_target: untrusted/project_4/opendev.org/openstack/openstack-helm
            role_path: ansible/pre_playbook_2/role_1/openstack-helm/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/pre_playbook_2/role_3/zuul-jobs
            link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs
            role_path: ansible/pre_playbook_2/role_3/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/pre_playbook_2/role_4/zuul-jobs
            link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs
            role_path: ansible/pre_playbook_2/role_4/zuul-jobs/roles
      post_review: false
      post_timeout: null
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/vexxhost/atmosphere
        name: vexxhost/atmosphere
        short_name: atmosphere
        src_dir: src/github.com/vexxhost/atmosphere
      projects:
        github.com/vexxhost/atmosphere:
          canonical_hostname: github.com
          canonical_name: github.com/vexxhost/atmosphere
          checkout: main
          checkout_description: zuul branch
          commit: 4460cec376737d23e8ed118c84d6ce000be51985
          name: vexxhost/atmosphere
          required: false
          short_name: atmosphere
          src_dir: src/github.com/vexxhost/atmosphere
      ref: refs/pull/3915/head
      resources: {}
      tenant: oss
      timeout: 7200
      topic: null
      voting: true
