[ { "branch": "main", "index": "0", "phase": "pre", "playbook": "github.com/vexxhost/zuul-config/playbooks/base/pre.yaml", "plays": [ { "play": { "duration": { "end": "2026-05-20T12:54:50.920215Z", "start": "2026-05-20T12:54:48.550827Z" }, "id": "0242ac17-0010-d1f1-30ce-000000000002", "name": "localhost" }, "tasks": [ { "hosts": { "localhost": { "action": "gather_facts", "ansible_facts": { "ansible_apparmor": { "status": "disabled" }, "ansible_architecture": "x86_64", "ansible_bios_date": "NA", "ansible_bios_vendor": "NA", "ansible_bios_version": "NA", "ansible_board_asset_tag": "NA", "ansible_board_name": "NA", "ansible_board_serial": "NA", "ansible_board_vendor": "NA", "ansible_board_version": "NA", "ansible_chassis_asset_tag": "NA", "ansible_chassis_serial": "NA", "ansible_chassis_vendor": "NA", "ansible_chassis_version": "NA", "ansible_cmdline": { "BOOT_IMAGE": "/boot/vmlinuz-5.15.0-130-generic", "console": "ttyS0", "ro": true, "root": "UUID=5a569d86-b935-46dd-ae79-7a72a25b6a4c" }, "ansible_date_time": { "date": "2026-05-20", "day": "20", "epoch": "1779281689", "epoch_int": "1779281689", "hour": "12", "iso8601": "2026-05-20T12:54:49Z", "iso8601_basic": "20260520T125449119828", "iso8601_basic_short": "20260520T125449", "iso8601_micro": "2026-05-20T12:54:49.119828Z", "minute": "54", "month": "05", "second": "49", "time": "12:54:49", "tz": "UTC", "tz_dst": "UTC", "tz_offset": "+0000", "weekday": "Wednesday", "weekday_number": "3", "weeknumber": "20", "year": "2026" }, "ansible_devices": {}, "ansible_distribution": "Debian", "ansible_distribution_major_version": "12", "ansible_distribution_release": "bookworm", "ansible_distribution_version": "12", "ansible_dns": { "nameservers": [ "127.0.0.11" ], "options": { "edns0": true, "ndots": "0", "trust-ad": true }, "search": [ "openstacklocal" ] }, "ansible_domain": "", "ansible_effective_group_id": 0, "ansible_effective_user_id": 0, "ansible_env": { "ANSIBLE_CONFIG": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/ansible/pre_playbook_0/ansible.cfg", "DEBIAN_FRONTEND": "noninteractive", "GPG_KEY": "A035C8C19219BA821ECEA86B64E628F8D684696D", "HOME": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work", "HOSTNAME": "2d72f0692154", "KUBECONFIG": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/kube/config", "LANG": "C.UTF-8", "PATH": "/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin", "PWD": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base", "PYTHONPATH": "/var/lib/zuul/ansible/9", "PYTHON_SHA256": "8d3ed8ec5c88c1c95f5e558612a725450d2452813ddad5e58fdb1a53b1209b78", "PYTHON_VERSION": "3.11.14", "SSH_AGENT_PID": "1536793", "SSH_AUTH_SOCK": "/tmp/ssh-PgA22fnBk1a5/agent.1536792", "TMP": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/tmp", "ZUUL_ANSIBLE_SPLIT_STREAMS": "False", "ZUUL_JOBDIR": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec", "ZUUL_JOB_FAILURE_OUTPUT": "[]", "ZUUL_JOB_LOG_CONFIG": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/ansible/logging.json", "ZUUL_OUTPUT_MAX_BYTES": "1073741824" }, "ansible_fibre_channel_wwn": [], "ansible_fips": false, "ansible_form_factor": "NA", "ansible_fqdn": "2d72f0692154", "ansible_hostname": "2d72f0692154", "ansible_hostnqn": "", "ansible_is_chroot": false, "ansible_iscsi_iqn": "", "ansible_kernel": "5.15.0-130-generic", "ansible_kernel_version": "#140-Ubuntu SMP Wed Dec 18 17:59:53 UTC 2024", "ansible_loadavg": { "15m": 3.32470703125, "1m": 1.93994140625, "5m": 3.00830078125 }, "ansible_local": {}, "ansible_lsb": {}, "ansible_lvm": "N/A", "ansible_machine": "x86_64", "ansible_memfree_mb": 5090, "ansible_memory_mb": { "nocache": { "free": 16088, "used": 16002 }, "real": { "free": 5090, "total": 32090, "used": 27000 }, "swap": { "cached": 0, "free": 0, "total": 0, "used": 0 } }, "ansible_memtotal_mb": 32090, "ansible_mounts": [ { "block_available": 8216742, "block_size": 4096, "block_total": 40601580, "block_used": 32384838, "device": "/dev/vda1", "fstype": "ext4", "inode_available": 16224539, "inode_total": 20643840, "inode_used": 4419301, "mount": "/etc/resolv.conf", "options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind", "size_available": 33655775232, "size_total": 166304071680, "uuid": "N/A" }, { "block_available": 8216742, "block_size": 4096, "block_total": 40601580, "block_used": 32384838, "device": "/dev/vda1", "fstype": "ext4", "inode_available": 16224539, "inode_total": 20643840, "inode_used": 4419301, "mount": "/etc/hosts", "options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind", "size_available": 33655775232, "size_total": 166304071680, "uuid": "N/A" }, { "block_available": 8216742, "block_size": 4096, "block_total": 40601580, "block_used": 32384838, "device": "/dev/vda1", "fstype": "ext4", "inode_available": 16224539, "inode_total": 20643840, "inode_used": 4419301, "mount": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work", "options": "rw,nosuid,nodev,relatime,discard,errors=remount-ro,bind", "size_available": 33655775232, "size_total": 166304071680, "uuid": "N/A" }, { "block_available": 8216742, "block_size": 4096, "block_total": 40601580, "block_used": 32384838, "device": "/dev/vda1", "fstype": "ext4", "inode_available": 16224539, "inode_total": 20643840, "inode_used": 4419301, "mount": "/var/lib/zuul/ansible/9", "options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind", "size_available": 33655775232, "size_total": 166304071680, "uuid": "N/A" }, { "block_available": 8216742, "block_size": 4096, "block_total": 40601580, "block_used": 32384838, "device": "/dev/vda1", "fstype": "ext4", "inode_available": 16224539, "inode_total": 20643840, "inode_used": 4419301, "mount": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/ansible", "options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind", "size_available": 33655775232, "size_total": 166304071680, "uuid": "N/A" }, { "block_available": 8216742, "block_size": 4096, "block_total": 40601580, "block_used": 32384838, "device": "/dev/vda1", "fstype": "ext4", "inode_available": 16224539, "inode_total": 20643840, "inode_used": 4419301, "mount": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/kube", "options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind", "size_available": 33655775232, "size_total": 166304071680, "uuid": "N/A" }, { "block_available": 8216742, "block_size": 4096, "block_total": 40601580, "block_used": 32384838, "device": "/dev/vda1", "fstype": "ext4", "inode_available": 16224539, "inode_total": 20643840, "inode_used": 4419301, "mount": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/trusted", "options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind", "size_available": 33655775232, "size_total": 166304071680, "uuid": "N/A" }, { "block_available": 8216742, "block_size": 4096, "block_total": 40601580, "block_used": 32384838, "device": "/dev/vda1", "fstype": "ext4", "inode_available": 16224539, "inode_total": 20643840, "inode_used": 4419301, "mount": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/untrusted", "options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind", "size_available": 33655775232, "size_total": 166304071680, "uuid": "N/A" }, { "block_available": 8216742, "block_size": 4096, "block_total": 40601580, "block_used": 32384838, "device": "/dev/vda1", "fstype": "ext4", "inode_available": 16224539, "inode_total": 20643840, "inode_used": 4419301, "mount": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/ansible/pre_playbook_0", "options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind", "size_available": 33655775232, "size_total": 166304071680, "uuid": "N/A" }, { "block_available": 8216742, "block_size": 4096, "block_total": 40601580, "block_used": 32384838, "device": "/dev/vda1", "fstype": "ext4", "inode_available": 16224539, "inode_total": 20643840, "inode_used": 4419301, "mount": "/etc/zuul/site-variables.yaml", "options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind", "size_available": 33655775232, "size_total": 166304071680, "uuid": "N/A" }, { "block_available": 142058087, "block_size": 4096, "block_total": 263940717, "block_used": 121882630, "device": "/dev/vdb", "fstype": "ext4", "inode_available": 47896608, "inode_total": 67108864, "inode_used": 19212256, "mount": "/srv/static/logs", "options": "rw,nosuid,nodev,relatime,discard", "size_available": 581869924352, "size_total": 1081101176832, "uuid": "N/A" }, { "block_available": 8216742, "block_size": 4096, "block_total": 40601580, "block_used": 32384838, "device": "/dev/vda1", "fstype": "ext4", "inode_available": 16224539, "inode_total": 20643840, "inode_used": 4419301, "mount": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/.ansible", "options": "rw,nosuid,nodev,relatime,discard,errors=remount-ro,bind", "size_available": 33655775232, "size_total": 166304071680, "uuid": "N/A" } ], "ansible_nodename": "2d72f0692154", "ansible_os_family": "Debian", "ansible_pkg_mgr": "apt", "ansible_proc_cmdline": { "BOOT_IMAGE": "/boot/vmlinuz-5.15.0-130-generic", "console": [ "tty1", "ttyS0" ], "ro": true, "root": "UUID=5a569d86-b935-46dd-ae79-7a72a25b6a4c" }, "ansible_processor": [ "0", "AuthenticAMD", "AMD EPYC-Rome Processor", "1", "AuthenticAMD", "AMD EPYC-Rome Processor", "2", "AuthenticAMD", "AMD EPYC-Rome Processor", "3", "AuthenticAMD", "AMD EPYC-Rome Processor", "4", "AuthenticAMD", "AMD EPYC-Rome Processor", "5", "AuthenticAMD", "AMD EPYC-Rome Processor", "6", "AuthenticAMD", "AMD EPYC-Rome Processor", "7", "AuthenticAMD", "AMD EPYC-Rome Processor", "8", "AuthenticAMD", "AMD EPYC-Rome Processor", "9", "AuthenticAMD", "AMD EPYC-Rome Processor", "10", "AuthenticAMD", "AMD EPYC-Rome Processor", "11", "AuthenticAMD", "AMD EPYC-Rome Processor", "12", "AuthenticAMD", "AMD EPYC-Rome Processor", "13", "AuthenticAMD", "AMD EPYC-Rome Processor", "14", "AuthenticAMD", "AMD EPYC-Rome Processor", "15", "AuthenticAMD", "AMD EPYC-Rome Processor" ], "ansible_processor_cores": 1, "ansible_processor_count": 16, "ansible_processor_nproc": 16, "ansible_processor_threads_per_core": 1, "ansible_processor_vcpus": 16, "ansible_product_name": "NA", "ansible_product_serial": "NA", "ansible_product_uuid": "NA", "ansible_product_version": "NA", "ansible_python": { "executable": "/usr/local/lib/zuul/ansible/9/bin/python", "has_sslcontext": true, "type": "cpython", "version": { "major": 3, "micro": 14, "minor": 11, "releaselevel": "final", "serial": 0 }, "version_info": [ 3, 11, 14, "final", 0 ] }, "ansible_python_version": "3.11.14", "ansible_real_group_id": 0, "ansible_real_user_id": 0, "ansible_selinux": { "status": "disabled" }, "ansible_selinux_python_present": true, "ansible_service_mgr": "bwrap", "ansible_swapfree_mb": 0, "ansible_swaptotal_mb": 0, "ansible_system": "Linux", "ansible_system_capabilities": "N/A", "ansible_system_capabilities_enforced": "N/A", "ansible_system_vendor": "NA", "ansible_uptime_seconds": 42945418, "ansible_user_dir": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work", "ansible_user_gecos": "root", "ansible_user_gid": 0, "ansible_user_id": "root", "ansible_user_shell": "/bin/bash", "ansible_user_uid": 0, "ansible_userspace_architecture": "x86_64", "ansible_userspace_bits": "64", "ansible_virtualization_role": "host", "ansible_virtualization_tech_guest": [], "ansible_virtualization_tech_host": [ "kvm" ], "ansible_virtualization_type": "kvm", "gather_subset": [ "all" ], "module_setup": true }, "changed": false, "deprecations": [], "warnings": [] } }, "task": { "duration": { "end": "2026-05-20T12:54:49.424570Z", "start": "2026-05-20T12:54:48.558463Z" }, "id": "0242ac17-0010-d1f1-30ce-00000000002a", "name": "Gathering Facts" } }, { "hosts": { "localhost": { "action": "include_role", "changed": false, "include_args": { "name": "set-zuul-log-path-fact" } } }, "role": { "id": "0242ac17-0010-d1f1-30ce-000000000006", "name": "emit-job-header", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/emit-job-header" }, "task": { "duration": { "end": "2026-05-20T12:54:49.451808Z", "start": "2026-05-20T12:54:49.429934Z" }, "id": "0242ac17-0010-d1f1-30ce-000000000008", "name": "Setup log path fact" } }, { "hosts": { "localhost": { "action": "set_fact", "ansible_facts": { "zuul_log_path": "0d9/oss/0d9acc5383204797ab924da55add7cec" }, "changed": false } }, "role": { "id": "0242ac17-0010-d1f1-30ce-000000000054", "name": "set-zuul-log-path-fact", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/set-zuul-log-path-fact" }, "task": { "duration": { "end": "2026-05-20T12:54:49.497267Z", "start": "2026-05-20T12:54:49.465097Z" }, "id": "0242ac17-0010-d1f1-30ce-000000000056", "name": "Set log path for a build" } }, { "hosts": { "localhost": { "action": "debug", "changed": false, "msg": "# Job Information\nAnsible Version: 2.16.18\nJob: atmosphere-common-molecule-secretgen-controller\nPipeline: check\nExecutor: 2d72f0692154\nTriggered by: https://github.com/vexxhost/atmosphere.common/pull/102\nEvent ID: fbca7aa0-544a-11f1-91ad-95872e22035f\n" } }, "role": { "id": "0242ac17-0010-d1f1-30ce-000000000006", "name": "emit-job-header", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/emit-job-header" }, "task": { "duration": { "end": "2026-05-20T12:54:49.547917Z", "start": "2026-05-20T12:54:49.506258Z" }, "id": "0242ac17-0010-d1f1-30ce-000000000009", "name": "Print job information" } }, { "hosts": { "localhost": { "action": "debug", "changed": false, "msg": "All items completed", "results": [ { "ansible_loop_var": "zj_item", "changed": false, "failed": false, "msg": "# Node Information\nInventory Hostname: controller\nHostname: np0000175361\nUsername: zuul\nDistro: Ubuntu 24.04\nProvider: yul1\nRegion: ca-ymq-1\nLabel: ubuntu-noble\nProduct Name: OpenStack Nova\nInterface IP: 199.204.45.244\n", "zj_item": "controller" } ] } }, "role": { "id": "0242ac17-0010-d1f1-30ce-000000000006", "name": "emit-job-header", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/emit-job-header" }, "task": { "duration": { "end": "2026-05-20T12:54:49.674972Z", "start": "2026-05-20T12:54:49.552113Z" }, "id": "0242ac17-0010-d1f1-30ce-00000000000a", "name": "Print node information" } }, { "hosts": { "localhost": { "action": "file", "changed": true, "diff": { "after": { "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/logs/zuul-info", "state": "directory" }, "before": { "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/logs/zuul-info", "state": "absent" } }, "gid": 0, "group": "root", "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": 493, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/logs/zuul-info", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "directory", "unsafe_writes": false } }, "mode": "0755", "owner": "root", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/logs/zuul-info", "size": 4096, "state": "directory", "uid": 0 } }, "role": { "id": "0242ac17-0010-d1f1-30ce-00000000000d", "name": "log-inventory", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/log-inventory" }, "task": { "duration": { "end": "2026-05-20T12:54:50.068175Z", "start": "2026-05-20T12:54:49.684388Z" }, "id": "0242ac17-0010-d1f1-30ce-00000000000f", "name": "Ensure Zuul Ansible directory exists" } }, { "hosts": { "localhost": { "action": "copy", "changed": true, "checksum": "0a24cc0796c88870e53be5e81172463cc90da5d1", "dest": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/logs/zuul-info/inventory.yaml", "diff": [], "gid": 0, "group": "root", "invocation": { "module_args": { "_original_basename": "inventory.yaml", "attributes": null, "backup": false, "checksum": "0a24cc0796c88870e53be5e81172463cc90da5d1", "content": null, "dest": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/logs/zuul-info", "directory_mode": null, "follow": false, "force": true, "group": null, "local_follow": null, "mode": 420, "owner": null, "remote_src": null, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/.ansible/tmp/ansible-tmp-1779281690.101433-84-208762351782673/source", "unsafe_writes": false, "validate": null } }, "md5sum": "0ffa1d9843d39fa9b1579ef7cb704d12", "mode": "0644", "owner": "root", "size": 349825, "src": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/.ansible/tmp/ansible-tmp-1779281690.101433-84-208762351782673/source", "state": "file", "uid": 0 } }, "role": { "id": "0242ac17-0010-d1f1-30ce-00000000000d", "name": "log-inventory", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/log-inventory" }, "task": { "duration": { "end": "2026-05-20T12:54:50.920215Z", "start": "2026-05-20T12:54:50.074901Z" }, "id": "0242ac17-0010-d1f1-30ce-000000000010", "name": "Copy ansible inventory to logs dir" } } ] }, { "play": { "duration": { "end": "2026-05-20T12:54:57.666957Z", "start": "2026-05-20T12:54:50.929194Z" }, "id": "0242ac17-0010-d1f1-30ce-000000000011", "name": "all" }, "tasks": [ { "hosts": { "controller": { "action": "stat", "changed": false, "failed_when_result": false, "invocation": { "module_args": { "checksum_algorithm": "sha1", "follow": false, "get_attributes": true, "get_checksum": true, "get_mime": true, "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/0d9acc5383204797ab924da55add7cec_id_rsa" } }, "stat": { "exists": false } } }, "role": { "id": "0242ac17-0010-d1f1-30ce-000000000016", "name": "add-build-sshkey", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey" }, "task": { "duration": { "end": "2026-05-20T12:54:51.165282Z", "start": "2026-05-20T12:54:50.938164Z" }, "id": "0242ac17-0010-d1f1-30ce-000000000018", "name": "Check to see if ssh key was already created for this build" } }, { "hosts": { "controller": { "action": "include_tasks", "changed": false, "include": "create-key-and-replace.yaml", "include_args": {} } }, "role": { "id": "0242ac17-0010-d1f1-30ce-000000000016", "name": "add-build-sshkey", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey" }, "task": { "duration": { "end": "2026-05-20T12:54:51.209606Z", "start": "2026-05-20T12:54:51.173764Z" }, "id": "0242ac17-0010-d1f1-30ce-000000000019", "name": "Create a new key in workspace based on build UUID" } }, { "hosts": { "controller": { "action": "command", "changed": true, "cmd": [ "ssh-keygen", "-t", "rsa", "-N", "", "-C", "zuul-build-sshkey", "-f", "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/0d9acc5383204797ab924da55add7cec_id_rsa", "-b", "3072" ], "delta": "0:00:00.304303", "end": "2026-05-20 12:54:51.909624", "invocation": { "module_args": { "_raw_params": "ssh-keygen -t rsa -N '' -C 'zuul-build-sshkey' -f /var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/0d9acc5383204797ab924da55add7cec_id_rsa -b 3072", "_uses_shell": false, "argv": null, "chdir": null, "creates": null, "executable": null, "expand_argument_vars": true, "removes": null, "stdin": null, "stdin_add_newline": true, "strip_empty_ends": true, "zuul_ansible_split_streams": false, "zuul_log_id": "0242ac17-0010-d1f1-30ce-00000000009c-0-controller", "zuul_no_log": false, "zuul_output_max_bytes": 1073741824 } }, "msg": "", "rc": 0, "start": "2026-05-20 12:54:51.605321", "stderr": "", "stderr_lines": [], "stdout": "Generating public/private rsa key pair.\nYour identification has been saved in /var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/0d9acc5383204797ab924da55add7cec_id_rsa\nYour public key has been saved in /var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/0d9acc5383204797ab924da55add7cec_id_rsa.pub\nThe key fingerprint is:\nSHA256:DjVrCAjqXore8255KO+R9SUCdo9e5ovZIyrmlcQiIIQ zuul-build-sshkey\nThe key's randomart image is:\n+---[RSA 3072]----+\n|o. |\n|E. . |\n|+ . .o .o |\n|+ o.oooo |\n| o o oo+S= . |\n|o + o =+* o |\n|.o =o..o |\n|. .=.+.o+.. |\n| .ooX*oo.o. |\n+----[SHA256]-----+", "stdout_lines": [ "Generating public/private rsa key pair.", "Your identification has been saved in /var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/0d9acc5383204797ab924da55add7cec_id_rsa", "Your public key has been saved in /var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/0d9acc5383204797ab924da55add7cec_id_rsa.pub", "The key fingerprint is:", "SHA256:DjVrCAjqXore8255KO+R9SUCdo9e5ovZIyrmlcQiIIQ zuul-build-sshkey", "The key's randomart image is:", "+---[RSA 3072]----+", "|o. |", "|E. . |", "|+ . .o .o |", "|+ o.oooo |", "| o o oo+S= . |", "|o + o =+* o |", "|.o =o..o |", "|. .=.+.o+.. |", "| .ooX*oo.o. |", "+----[SHA256]-----+" ], "zuul_log_id": "0242ac17-0010-d1f1-30ce-00000000009c-0-controller" } }, "role": { "id": "0242ac17-0010-d1f1-30ce-000000000016", "name": "add-build-sshkey", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey" }, "task": { "duration": { "end": "2026-05-20T12:54:51.952814Z", "start": "2026-05-20T12:54:51.229542Z" }, "id": "0242ac17-0010-d1f1-30ce-00000000009c", "name": "Create Temp SSH key" } }, { "hosts": { "controller": { "action": "include_tasks", "changed": false, "include": "remote-linux.yaml", "include_args": {} } }, "role": { "id": "0242ac17-0010-d1f1-30ce-000000000016", "name": "add-build-sshkey", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey" }, "task": { "duration": { "end": "2026-05-20T12:54:51.995020Z", "start": "2026-05-20T12:54:51.960277Z" }, "id": "0242ac17-0010-d1f1-30ce-00000000009d", "name": "Remote setup ssh keys (linux)" } }, { "hosts": { "controller": { "action": "lineinfile", "changed": false, "false_condition": "zuul_build_sshkey_cleanup", "skip_reason": "Conditional result was False", "skipped": true } }, "role": { "id": "0242ac17-0010-d1f1-30ce-000000000016", "name": "add-build-sshkey", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey" }, "task": { "duration": { "end": "2026-05-20T12:54:52.038278Z", "start": "2026-05-20T12:54:52.013711Z" }, "id": "0242ac17-0010-d1f1-30ce-0000000000bc", "name": "Remove previously added zuul-build-sshkey" } }, { "hosts": { "controller": { "action": "authorized_key", "changed": true, "comment": null, "exclusive": false, "follow": false, "invocation": { "module_args": { "changed": true, "comment": null, "exclusive": false, "follow": false, "key": "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCetb+PtmKXzV9nlpFzRB3VO6IGbBQ62XVgPDYrYAaZFUgqRyG3QeJCghDF41hmteOehlx5+0cmRZuGZjiqiL31wCOawsoDd4MjVRhOknR22S97Was6CGcWYGbpE8+o/mzaqlvB9puZNQFU2JTBql+hx/JVuXKXqiexCzJPmL+oU/q21i+9WdoyPgpUSH/Mn0coSfJJG3xu6aCJHSpweoC8vOElHyXyhq9xlN20rwb263fvPB9UDhI7lmjV6QEgdFC2h7kGzNo4QBL+mXXGVNvPPaSO5OE3NPu4bu+e4rvLS8eQpwqDK/9rsh/sdmbMeddbTH7xjkf4JdVuEFHpT54Omm3Ph5ppzCo8iQ2VRdtFoEVgxY5mdFyhE8DlgTA0HU3YVwgGbuB9serojvXGZJrBPqYmCAwWGRCxUr59nJBgglm3sI0uI2koO1LWi7IYDvSP4tOwUa39mfkzHKL2VLIDuBtWP+Y1zyyeTZTuFI7wPliHtZm8yBMyi3zog3T2IeM= zuul-build-sshkey", "key_options": null, "keyfile": "/home/zuul/.ssh/authorized_keys", "manage_dir": true, "path": null, "state": "present", "user": "zuul", "validate_certs": true } }, "key": "ssh-rsa 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 zuul-build-sshkey", "key_options": null, "keyfile": "/home/zuul/.ssh/authorized_keys", "manage_dir": true, "path": null, "state": "present", "user": "zuul", "validate_certs": true } }, "role": { "id": "0242ac17-0010-d1f1-30ce-000000000016", "name": "add-build-sshkey", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey" }, "task": { "duration": { "end": "2026-05-20T12:54:52.619452Z", "start": "2026-05-20T12:54:52.047799Z" }, "id": "0242ac17-0010-d1f1-30ce-0000000000bd", "name": "Enable access via build key on all nodes" } }, { "hosts": { "controller": { "action": "file", "changed": false, "diff": { "after": { "path": "/home/zuul/.ssh" }, "before": { "path": "/home/zuul/.ssh" } }, "gid": 1000, "group": "zuul", "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": 448, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/home/zuul/.ssh", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "directory", "unsafe_writes": false } }, "mode": "0700", "owner": "zuul", "path": "/home/zuul/.ssh", "size": 4096, "state": "directory", "uid": 1000 } }, "role": { "id": "0242ac17-0010-d1f1-30ce-000000000016", "name": "add-build-sshkey", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey" }, "task": { "duration": { "end": "2026-05-20T12:54:52.873873Z", "start": "2026-05-20T12:54:52.625540Z" }, "id": "0242ac17-0010-d1f1-30ce-0000000000be", "name": "Make sure user has a .ssh" } }, { "hosts": { "controller": { "action": "copy", "changed": true, "checksum": "19d760a897880c5d938156e1b3cdfc0beece6778", "dest": "/home/zuul/.ssh/id_rsa", "diff": [], "gid": 1000, "group": "zuul", "invocation": { "module_args": { "_original_basename": "0d9acc5383204797ab924da55add7cec_id_rsa", "attributes": null, "backup": false, "checksum": "19d760a897880c5d938156e1b3cdfc0beece6778", "content": null, "dest": "/home/zuul/.ssh/id_rsa", "directory_mode": null, "follow": false, "force": false, "group": null, "local_follow": null, "mode": 384, "owner": null, "remote_src": null, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1779281692.9190443-190-71149460047496/source", "unsafe_writes": false, "validate": null } }, "md5sum": "02ccda44a63b0cb56e6e64b624055d91", "mode": "0600", "owner": "zuul", "size": 2602, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1779281692.9190443-190-71149460047496/source", "state": "file", "uid": 1000 } }, "role": { "id": "0242ac17-0010-d1f1-30ce-000000000016", "name": "add-build-sshkey", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey" }, "task": { "duration": { "end": "2026-05-20T12:54:53.431629Z", "start": "2026-05-20T12:54:52.878977Z" }, "id": "0242ac17-0010-d1f1-30ce-0000000000bf", "name": "Install build private key as SSH key on all nodes" } }, { "hosts": { "controller": { "action": "copy", "changed": true, "checksum": "186d35319a504fdf470045e0d311c45e8ef665f5", "dest": "/home/zuul/.ssh/id_rsa.pub", "diff": [], "gid": 1000, "group": "zuul", "invocation": { "module_args": { "_original_basename": "0d9acc5383204797ab924da55add7cec_id_rsa.pub", "attributes": null, "backup": false, "checksum": "186d35319a504fdf470045e0d311c45e8ef665f5", "content": null, "dest": "/home/zuul/.ssh/id_rsa.pub", "directory_mode": null, "follow": false, "force": false, "group": null, "local_follow": null, "mode": 420, "owner": null, "remote_src": null, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1779281693.4803348-200-185328952909653/source", "unsafe_writes": false, "validate": null } }, "md5sum": "754e2d8febd23231a758f0c04d82ad31", "mode": "0644", "owner": "zuul", "size": 571, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1779281693.4803348-200-185328952909653/source", "state": "file", "uid": 1000 } }, "role": { "id": "0242ac17-0010-d1f1-30ce-000000000016", "name": "add-build-sshkey", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey" }, "task": { "duration": { "end": "2026-05-20T12:54:54.020909Z", "start": "2026-05-20T12:54:53.436912Z" }, "id": "0242ac17-0010-d1f1-30ce-0000000000c0", "name": "Install build public key as SSH key on all nodes" } }, { "hosts": { "controller": { "action": "include_tasks", "changed": false, "false_condition": "ansible_os_family == \"Windows\"", "skip_reason": "Conditional result was False", "skipped": true } }, "role": { "id": "0242ac17-0010-d1f1-30ce-000000000016", "name": "add-build-sshkey", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey" }, "task": { "duration": { "end": "2026-05-20T12:54:54.042648Z", "start": "2026-05-20T12:54:54.028047Z" }, "id": "0242ac17-0010-d1f1-30ce-00000000009e", "name": "Remote setup ssh keys (windows)" } }, { "hosts": { "controller": { "action": "sshagent_remove_keys", "changed": true, "invocation": { "module_args": { "remove": "^(?!\\(stdin\\)).*" } }, "removed": [ "/etc/zuul/id_rsa" ] } }, "role": { "id": "0242ac17-0010-d1f1-30ce-0000000000a3", "name": "remove-zuul-sshkey", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/remove-zuul-sshkey" }, "task": { "duration": { "end": "2026-05-20T12:54:54.406969Z", "start": "2026-05-20T12:54:54.049029Z" }, "id": "0242ac17-0010-d1f1-30ce-0000000000a5", "name": "Remove master key from local agent" } }, { "hosts": { "controller": { "action": "command", "changed": true, "cmd": [ "ssh-add", "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/0d9acc5383204797ab924da55add7cec_id_rsa" ], "delta": "0:00:00.012923", "end": "2026-05-20 12:54:54.661242", "invocation": { "module_args": { "_raw_params": "ssh-add /var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/0d9acc5383204797ab924da55add7cec_id_rsa", "_uses_shell": false, "argv": null, "chdir": null, "creates": null, "executable": null, "expand_argument_vars": true, "removes": null, "stdin": null, "stdin_add_newline": true, "strip_empty_ends": true, "zuul_ansible_split_streams": false, "zuul_log_id": "0242ac17-0010-d1f1-30ce-0000000000ab-0-controller", "zuul_no_log": false, "zuul_output_max_bytes": 1073741824 } }, "msg": "", "rc": 0, "start": "2026-05-20 12:54:54.648319", "stderr": "", "stderr_lines": [], "stdout": "Identity added: /var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/0d9acc5383204797ab924da55add7cec_id_rsa (zuul-build-sshkey)", "stdout_lines": [ "Identity added: /var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/0d9acc5383204797ab924da55add7cec_id_rsa (zuul-build-sshkey)" ], "zuul_log_id": "0242ac17-0010-d1f1-30ce-0000000000ab-0-controller" } }, "role": { "id": "0242ac17-0010-d1f1-30ce-000000000016", "name": "add-build-sshkey", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey" }, "task": { "duration": { "end": "2026-05-20T12:54:54.702998Z", "start": "2026-05-20T12:54:54.424174Z" }, "id": "0242ac17-0010-d1f1-30ce-0000000000ab", "name": "Add back temp key" } }, { "hosts": { "controller": { "action": "ping", "changed": false, "invocation": { "module_args": { "data": "pong" } }, "ping": "pong" } }, "role": { "id": "0242ac17-0010-d1f1-30ce-000000000016", "name": "add-build-sshkey", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey" }, "task": { "duration": { "end": "2026-05-20T12:54:55.036806Z", "start": "2026-05-20T12:54:54.709816Z" }, "id": "0242ac17-0010-d1f1-30ce-0000000000ac", "name": "Verify we can still SSH to all nodes" } }, { "hosts": { "controller": { "action": "command", "changed": false, "false_condition": "ansible_os_family == \"Windows\"", "skip_reason": "Conditional result was False", "skipped": true } }, "role": { "id": "0242ac17-0010-d1f1-30ce-000000000016", "name": "add-build-sshkey", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey" }, "task": { "duration": { "end": "2026-05-20T12:54:55.070238Z", "start": "2026-05-20T12:54:55.044645Z" }, "id": "0242ac17-0010-d1f1-30ce-0000000000ad", "name": "Verify we can still SSH to all nodes (windows)" } }, { "hosts": { "controller": { "action": "zuul_console", "changed": false, "invocation": { "module_args": { "path": "/tmp/console-{log_uuid}.log", "port": 19885, "state": "present" } } } }, "role": { "id": "0242ac17-0010-d1f1-30ce-00000000001b", "name": "prepare-workspace", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/prepare-workspace" }, "task": { "duration": { "end": "2026-05-20T12:54:55.479439Z", "start": "2026-05-20T12:54:55.086973Z" }, "id": "0242ac17-0010-d1f1-30ce-00000000001d", "name": "Start zuul_console daemon." } }, { "hosts": { "controller": { "action": "synchronize", "censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": true } }, "role": { "id": "0242ac17-0010-d1f1-30ce-00000000001b", "name": "prepare-workspace", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/prepare-workspace" }, "task": { "duration": { "end": "2026-05-20T12:54:56.358678Z", "start": "2026-05-20T12:54:55.485101Z" }, "id": "0242ac17-0010-d1f1-30ce-00000000001e", "name": "Synchronize src repos to workspace directory." } }, { "hosts": { "controller": { "action": "file", "changed": false, "msg": "All items completed", "results": [ { "ansible_loop_var": "zj_output_dir", "changed": false, "failed": false, "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": null, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/home/zuul/zuul-output/logs", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "absent", "unsafe_writes": false } }, "path": "/home/zuul/zuul-output/logs", "state": "absent", "zj_output_dir": "logs" }, { "ansible_loop_var": "zj_output_dir", "changed": false, "failed": false, "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": null, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/home/zuul/zuul-output/artifacts", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "absent", "unsafe_writes": false } }, "path": "/home/zuul/zuul-output/artifacts", "state": "absent", "zj_output_dir": "artifacts" }, { "ansible_loop_var": "zj_output_dir", "changed": false, "failed": false, "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": null, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/home/zuul/zuul-output/docs", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "absent", "unsafe_writes": false } }, "path": "/home/zuul/zuul-output/docs", "state": "absent", "zj_output_dir": "docs" } ] } }, "role": { "id": "0242ac17-0010-d1f1-30ce-000000000020", "name": "ensure-output-dirs", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/ensure-output-dirs" }, "task": { "duration": { "end": "2026-05-20T12:54:57.007303Z", "start": "2026-05-20T12:54:56.370991Z" }, "id": "0242ac17-0010-d1f1-30ce-000000000022", "name": "Empty Zuul Output directories by removing them" } }, { "hosts": { "controller": { "action": "file", "changed": true, "msg": "All items completed", "results": [ { "ansible_loop_var": "zj_output_dir", "changed": true, "diff": { "after": { "mode": "0755", "path": "/home/zuul/zuul-output/logs", "state": "directory" }, "before": { "mode": "0775", "path": "/home/zuul/zuul-output/logs", "state": "absent" } }, "failed": false, "gid": 1000, "group": "zuul", "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": 493, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/home/zuul/zuul-output/logs", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "directory", "unsafe_writes": false } }, "mode": "0755", "owner": "zuul", "path": "/home/zuul/zuul-output/logs", "size": 4096, "state": "directory", "uid": 1000, "zj_output_dir": "logs" }, { "ansible_loop_var": "zj_output_dir", "changed": true, "diff": { "after": { "mode": "0755", "path": "/home/zuul/zuul-output/artifacts", "state": "directory" }, "before": { "mode": "0775", "path": "/home/zuul/zuul-output/artifacts", "state": "absent" } }, "failed": false, "gid": 1000, "group": "zuul", "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": 493, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/home/zuul/zuul-output/artifacts", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "directory", "unsafe_writes": false } }, "mode": "0755", "owner": "zuul", "path": "/home/zuul/zuul-output/artifacts", "size": 4096, "state": "directory", "uid": 1000, "zj_output_dir": "artifacts" }, { "ansible_loop_var": "zj_output_dir", "changed": true, "diff": { "after": { "mode": "0755", "path": "/home/zuul/zuul-output/docs", "state": "directory" }, "before": { "mode": "0775", "path": "/home/zuul/zuul-output/docs", "state": "absent" } }, "failed": false, "gid": 1000, "group": "zuul", "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": 493, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/home/zuul/zuul-output/docs", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "directory", "unsafe_writes": false } }, "mode": "0755", "owner": "zuul", "path": "/home/zuul/zuul-output/docs", "size": 4096, "state": "directory", "uid": 1000, "zj_output_dir": "docs" } ] } }, "role": { "id": "0242ac17-0010-d1f1-30ce-000000000020", "name": "ensure-output-dirs", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/ensure-output-dirs" }, "task": { "duration": { "end": "2026-05-20T12:54:57.666957Z", "start": "2026-05-20T12:54:57.015370Z" }, "id": "0242ac17-0010-d1f1-30ce-000000000024", "name": "Ensure Zuul Output directories exist" } } ] } ], "stats": { "controller": { "changed": 8, "failures": 0, "ignored": 0, "ok": 15, "rescued": 0, "skipped": 3, "unreachable": 0 }, "localhost": { "changed": 2, "failures": 0, "ignored": 0, "ok": 6, "rescued": 0, "skipped": 0, "unreachable": 0 } }, "trusted": true }, { "branch": "main", "index": "1", "phase": "pre", "playbook": "github.com/vexxhost/zuul-jobs/playbooks/molecule/pre.yaml", "plays": [ { "play": { "duration": { "end": "2026-05-20T12:55:01.815694Z", "start": "2026-05-20T12:54:58.390269Z" }, "id": "0242ac17-0010-22e1-ce8a-000000000002", "name": "all" }, "tasks": [ { "hosts": { "controller": { "action": "ansible.builtin.unarchive", "changed": true, "dest": "/usr/local/bin", "extract_results": { "cmd": [ "/usr/bin/tar", "--extract", "-C", "/usr/local/bin", "-z", "--show-transformed-names", "--strip-components=1", "-f", "/home/zuul/.ansible/tmp/ansible-tmp-1779281698.4404306-5-48914728625154/uv-x86_64-unknown-linux-gnut9pb4wco.tar.gz" ], "err": "", "out": "", "rc": 0 }, "gid": 0, "group": "root", "handler": "TgzArchive", "invocation": { "module_args": { "attributes": null, "copy": true, "creates": "/usr/local/bin/uv", "decrypt": true, "dest": "/usr/local/bin", "exclude": [], "extra_opts": [ "--strip-components=1" ], "group": null, "include": [], "io_buffer_size": 65536, "keep_newer": false, "list_files": false, "mode": null, "owner": null, "remote_src": true, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": "https://github.com/astral-sh/uv/releases/download/0.8.13/uv-x86_64-unknown-linux-gnu.tar.gz", "unsafe_writes": false, "validate_certs": true } }, "mode": "0755", "owner": "root", "size": 4096, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1779281698.4404306-5-48914728625154/uv-x86_64-unknown-linux-gnut9pb4wco.tar.gz", "state": "directory", "uid": 0 } }, "role": { "id": "0242ac17-0010-22e1-ce8a-000000000005", "name": "setup-uv", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/untrusted/project_0/github.com/vexxhost/zuul-jobs/roles/setup-uv" }, "task": { "duration": { "end": "2026-05-20T12:55:00.840474Z", "start": "2026-05-20T12:54:58.402018Z" }, "id": "0242ac17-0010-22e1-ce8a-000000000007", "name": "Extract archive" } }, { "hosts": { "controller": { "action": "ansible.builtin.command", "changed": true, "cmd": [ "/usr/local/bin/uv", "--version" ], "delta": "0:00:00.017751", "end": "2026-05-20 12:55:00.228912", "invocation": { "module_args": { "_raw_params": "/usr/local/bin/uv --version", "_uses_shell": false, "argv": null, "chdir": null, "creates": null, "executable": null, "expand_argument_vars": true, "removes": null, "stdin": null, "stdin_add_newline": true, "strip_empty_ends": true, "zuul_ansible_split_streams": false, "zuul_log_id": "0242ac17-0010-22e1-ce8a-000000000008-1-controller", "zuul_no_log": false, "zuul_output_max_bytes": 1073741824 } }, "msg": "", "rc": 0, "start": "2026-05-20 12:55:00.211161", "stderr": "", "stderr_lines": [], "stdout": "uv 0.8.13", "stdout_lines": [ "uv 0.8.13" ], "zuul_log_id": "0242ac17-0010-22e1-ce8a-000000000008-1-controller" } }, "role": { "id": "0242ac17-0010-22e1-ce8a-000000000005", "name": "setup-uv", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/untrusted/project_0/github.com/vexxhost/zuul-jobs/roles/setup-uv" }, "task": { "duration": { "end": "2026-05-20T12:55:01.385197Z", "start": "2026-05-20T12:55:00.867371Z" }, "id": "0242ac17-0010-22e1-ce8a-000000000008", "name": "Print version" } }, { "hosts": { "controller": { "action": "molecule_install_galaxy_sibling_collections", "changed": false, "checkouts": [], "installed": [], "invocation": { "module_args": { "build_refs": [ { "branch": "main", "change": "102", "change_message": "chore(deps): update dependency fluxcd/flux2 to v2.8.8\n\n> \u2139\ufe0f **Note**\n> \n> This PR body was truncated due to platform limits.\n\nThis PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n| [fluxcd/flux2](https://redirect.github.com/fluxcd/flux2) | minor | `2.6.4` \u2192 `2.8.8` |\n\n---\n\n### Release Notes\n\n
\nfluxcd/flux2 (fluxcd/flux2)\n\n### [`v2.8.8`](https://redirect.github.com/fluxcd/flux2/compare/v2.8.7...v2.8.8)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.7...v2.8.8)\n\n### [`v2.8.7`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.7)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.6...v2.8.7)\n\n#### Highlights\n\nFlux v2.8.7 is a patch release that includes a bug fix in kustomize-controller, a CVE fix in source-controller and image-automation-controller via go-git v5.19.0, and dependency updates. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix management of objects annotated with `kustomize.toolkit.fluxcd.io/ssa: IfNotPresent` where non-namespaced resources were being deleted and recreated on each reconciliation (kustomize-controller)\n\nImprovements:\n\n- Update go-git to v5.19.0 which fixes [CVE-2026-45022](https://redirect.github.com/advisories/GHSA-389r-gv7p-r3rp) (source-controller, image-automation-controller)\n- Update fluxcd/pkg dependencies (source-controller, kustomize-controller, image-automation-controller)\n\n#### Components changelog\n\n- helm-controller [v1.5.4](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.4/CHANGELOG.md)\n- image-automation-controller [v1.1.3](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.3/CHANGELOG.md)\n- kustomize-controller [v1.8.5](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.5/CHANGELOG.md)\n- notification-controller [v1.8.4](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.4/CHANGELOG.md)\n- source-controller [v1.8.4](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.4/CHANGELOG.md)\n\n#### CLI changelog\n\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5891](https://redirect.github.com/fluxcd/flux2/pull/5891)\n\n**Full Changelog**: \n\n### [`v2.8.6`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.6)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.5...v2.8.6)\n\n#### Highlights\n\nFlux v2.8.6 is a patch release that includes bug fixes and improvements across helm-controller, image-automation-controller, kustomize-controller, notification-controller, and source-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix a post-renderer conflict between overlapping hooks and templates (helm-controller)\n- Ignore force replace when server-side apply is enabled (helm-controller)\n- Fix a regression where generic providers would not forward commit status events (notification-controller)\n- Require the `audience` field on the GCR Receiver secret for tighter verification \u2014 will become mandatory in Flux v2.9 (notification-controller)\n\nImprovements:\n\n- Introduce the `MigrateAPIVersion` feature gate for migrating the API version of resources in managed field entries (kustomize-controller)\n- Update go-git to v5.18.0 bringing performance improvements for Git operations (source-controller, image-automation-controller)\n\n#### Components changelog\n\n- helm-controller [v1.5.4](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.4/CHANGELOG.md)\n- image-automation-controller [v1.1.2](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.2/CHANGELOG.md)\n- kustomize-controller [v1.8.4](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.4/CHANGELOG.md)\n- notification-controller [v1.8.4](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.4/CHANGELOG.md)\n- source-controller [v1.8.3](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.3/CHANGELOG.md)\n\n#### CLI changelog\n\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5857](https://redirect.github.com/fluxcd/flux2/pull/5857)\n\n**Full Changelog**: \n\n### [`v2.8.5`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.5)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.4...v2.8.5)\n\n#### Highlights\n\nFlux v2.8.5 is a patch release that includes bug fixes and improvements across kustomize-controller, source-controller, and notification-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix a race condition where a cancelled reconciliation could leave stale data in the cache, causing Kustomizations to get stuck (kustomize-controller)\n- Fix Azure Blob prefix option not being passed to the storage client (source-controller)\n\nImprovements:\n\n- Improve error message for encrypted SSH keys without password (source-controller)\n- Add optional `email` and `audience` fields to the GCR Receiver for tighter verification (notification-controller)\n- Add provider manifest example for Azure Event Hub managed identity authentication (notification-controller)\n\n#### Components changelog\n\n- kustomize-controller [v1.8.3](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.3/CHANGELOG.md)\n- source-controller [v1.8.2](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.2/CHANGELOG.md)\n- notification-controller [v1.8.3](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.3/CHANGELOG.md)\n\n#### CLI changelog\n\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5822](https://redirect.github.com/fluxcd/flux2/pull/5822)\n\n**Full Changelog**: \n\n### [`v2.8.4`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.4)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.3...v2.8.4)\n\n#### Highlights\n\nFlux v2.8.4 is a patch release that includes fixes for the Flux CLI. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix `flux build ks` and `flux diff ks` on Windows\n- Fix `--source` flag validation in `create kustomization` command\n\n#### CLI changelog\n\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5796](https://redirect.github.com/fluxcd/flux2/pull/5796)\n- \\[release/v2.8.x] fix: validate --source flag in create kustomization command by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5799](https://redirect.github.com/fluxcd/flux2/pull/5799)\n\n**Full Changelog**: \n\n### [`v2.8.3`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.3)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.2...v2.8.3)\n\n#### Highlights\n\nFlux v2.8.3 is a patch release that fixes a regression in helm-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix templating errors for charts that include `---` in the content, e.g. YAML separators, embedded scripts, CAs inside ConfigMaps (helm-controller)\n\n#### Components changelog\n\n- helm-controller [v1.5.3](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.3/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.8.x] Add target branch name to update branch by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5774](https://redirect.github.com/fluxcd/flux2/pull/5774)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5779](https://redirect.github.com/fluxcd/flux2/pull/5779)\n\n**Full Changelog**: \n\n### [`v2.8.2`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.2)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.1...v2.8.2)\n\n#### Highlights\n\nFlux v2.8.2 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix enqueuing new reconciliation requests for events on source Flux objects when they are already reconciling the revision present in the watch event (kustomize-controller, helm-controller)\n- Fix the Go templates bug of YAML separator `---` getting concatenated to `apiVersion:` by updating to Helm 4.1.3 (helm-controller)\n- Fix canceled HelmReleases getting stuck when they don't have a retry strategy configured by introducing a new feature gate `DefaultToRetryOnFailure` that improves the experience when the `CancelHealthCheckOnNewRevision` is enabled (helm-controller)\n- Fix the auth scope for Azure Container Registry to use the ACR-specific scope (source-controller, image-reflector-controller)\n- Fix potential Denial of Service (DoS) during TLS handshakes (CVE-2026-27138) by building all controllers with Go 1.26.1\n\n#### Components changelog\n\n- source-controller [v1.8.1](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.1/CHANGELOG.md)\n- kustomize-controller [v1.8.2](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.2/CHANGELOG.md)\n- notification-controller [v1.8.2](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.2/CHANGELOG.md)\n- helm-controller [v1.5.2](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.2/CHANGELOG.md)\n- image-reflector-controller [v1.1.1](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.1.1/CHANGELOG.md)\n- image-automation-controller [v1.1.1](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.1/CHANGELOG.md)\n- source-watcher [v2.1.1](https://redirect.github.com/fluxcd/source-watcher/blob/v2.1.1/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.8.x] build(deps): bump the ci group across 1 directory with 11 updates by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5765](https://redirect.github.com/fluxcd/flux2/pull/5765)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5767](https://redirect.github.com/fluxcd/flux2/pull/5767)\n- Update toolkit components by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5770](https://redirect.github.com/fluxcd/flux2/pull/5770)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5771](https://redirect.github.com/fluxcd/flux2/pull/5771)\n\n**Full Changelog**: \n\n### [`v2.8.1`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.1)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.0...v2.8.1)\n\n#### Highlights\n\nFlux v2.8.1 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix Git commit status events being dropped for Kustomizations (notification-controller)\n- Fix health check for StatefulSets when the Pods are Pending/Unschedulable during rollout (helm-controller, kustomize-controller)\n\n#### Components changelog\n\n- kustomize-controller [v1.8.1](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.1/CHANGELOG.md)\n- notification-controller [v1.8.1](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.1/CHANGELOG.md)\n- helm-controller [v1.5.1](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.1/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.8.x] Remove no longer needed workaround for Flux 2.8 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5735](https://redirect.github.com/fluxcd/flux2/pull/5735)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5739](https://redirect.github.com/fluxcd/flux2/pull/5739)\n- \\[release/v2.8.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5741](https://redirect.github.com/fluxcd/flux2/pull/5741)\n\n**Full Changelog**: \n\n### [`v2.8.0`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.0)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.5...v2.8.0)\n\n#### Highlights\n\nFlux v2.8.0 is a feature release. Users are encouraged to upgrade for the best experience.\n\nFor a compressive overview of new features and API changes included in this release, please refer to the [Announcing Flux 2.8 GA blog post](https://fluxcd.io/blog/2026/02/flux-v2.8.0/).\n\nOverview of the new features:\n\n- Helm v4 support, including server-side apply and kstatus-based health checking (`HelmRelease`)\n- Readiness evaluation of Helm-managed objects with CEL expressions (`HelmRelease`)\n- Improved observability of Helm releases with inventory tracking in `.status.inventory` (`HelmRelease`)\n- Reduced the mean time to recovery of Flux-managed applications via `CancelHealthCheckOnNewRevision` feature gate (`Kustomization`, `HelmRelease`)\n- Support for commenting on Pull Requests directly from Flux notifications (`Provider`)\n- Custom SSA apply stages for ordering resource application in kustomize-controller (`Kustomization`)\n- Automatic GitHub App installation ID lookup from the repository owner (`GitRepository`, `ImageUpdateAutomation`, `Provider`)\n- Support for Cosign v3 for verifying OCI artifacts and container images (`OCIRepository`)\n- ArtifactGenerator support for extracting and modifying Helm charts (`ArtifactGenerator`)\n- Bypass cache when fetching source objects via `DirectSourceFetch` feature gate (`Kustomization`, `HelmRelease`, `ArtifactGenerator`)\n\n\u2764\ufe0f Big thanks to all the Flux contributors that helped us with this release!\n\n##### Kubernetes compatibility\n\nThis release is compatible with the following Kubernetes versions:\n\n| Kubernetes version | Minimum required |\n| ------------------ | ---------------- |\n| `v1.33` | `>= 1.32.0` |\n| `v1.34` | `>= 1.34.1` |\n| `v1.35` | `>= 1.35.0` |\n\n> \\[!NOTE]\n> Note that the Flux project offers support only for the latest three minor versions of Kubernetes.\n> Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as\n> [ControlPlane](https://control-plane.io/enterprise-for-flux-cd/) that provide enterprise support for Flux.\n\n##### OpenShift compatibility\n\nFlux can be installed on Red Hat OpenShift cluster directly from OperatorHub using [Flux Operator](https://operatorhub.io/operator/flux-operator). The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.\n\n#### Upgrade procedure\n\n:warning: The Flux APIs `v1beta2` and `v2beta2` (deprecated in 2024) have reached end-of-life and have been removed from the CRDs.\n\nPlease follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from older versions of Flux to v2.8.\n\n#### Components changelog\n\n- source-controller [v1.8.0](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.0/CHANGELOG.md)\n- kustomize-controller [v1.8.0](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.0/CHANGELOG.md)\n- notification-controller [v1.8.0](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.0/CHANGELOG.md)\n- helm-controller [v1.5.0](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.0/CHANGELOG.md)\n- image-reflector-controller [v1.1.0](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.1.0/CHANGELOG.md)\n- image-automation-controller [v1.1.0](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.0/CHANGELOG.md)\n- source-watcher [v2.1.0](https://redirect.github.com/fluxcd/source-watcher/blob/v2.1.0/CHANGELOG.md)\n\n#### CLI changelog\n\n- ci: Set `GITHUB_TOKEN` in the `release-flux-manifests` workflow by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5547](https://redirect.github.com/fluxcd/flux2/pull/5547)\n- Add backport label for Flux 2.7 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5550](https://redirect.github.com/fluxcd/flux2/pull/5550)\n- build(deps): bump the ci group across 1 directory with 3 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5548](https://redirect.github.com/fluxcd/flux2/pull/5548)\n- Fix `flux push artifact` not working with `--provider` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5551](https://redirect.github.com/fluxcd/flux2/pull/5551)\n- Extend `flux migrate` to work with local files by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5554](https://redirect.github.com/fluxcd/flux2/pull/5554)\n- Improve `flux migrate` for live cluster migrations by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5558](https://redirect.github.com/fluxcd/flux2/pull/5558)\n- Fix `flux migrate -f` command to work with comments by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5560](https://redirect.github.com/fluxcd/flux2/pull/5560)\n- Add source-watcher to docs by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5562](https://redirect.github.com/fluxcd/flux2/pull/5562)\n- Fix `flux migrate -f` not considering kind comments by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5563](https://redirect.github.com/fluxcd/flux2/pull/5563)\n- refactor: convert `Kustomization` resource into unstructured map only once during variable substitution by [@​ramasai1](https://redirect.github.com/ramasai1) in [#​5566](https://redirect.github.com/fluxcd/flux2/pull/5566)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5568](https://redirect.github.com/fluxcd/flux2/pull/5568)\n- Disable AUR publishing by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5570](https://redirect.github.com/fluxcd/flux2/pull/5570)\n- Fix manifest generation for `--storage-adv-addr` and `--events-addr` flags by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5574](https://redirect.github.com/fluxcd/flux2/pull/5574)\n- Update dependencies to Kubernetes v1.34.1 and Go 1.25.2 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5576](https://redirect.github.com/fluxcd/flux2/pull/5576)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5578](https://redirect.github.com/fluxcd/flux2/pull/5578)\n- Restore GitHub PAT for backports by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5581](https://redirect.github.com/fluxcd/flux2/pull/5581)\n- \\[RFC-0012] Add command `flux get source external` by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5555](https://redirect.github.com/fluxcd/flux2/pull/5555)\n- fix: handle error when writing password prompt to stdout by [@​akshatsinha0](https://redirect.github.com/akshatsinha0) in [#​5589](https://redirect.github.com/fluxcd/flux2/pull/5589)\n- Pin cosign to v2.6.1 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5594](https://redirect.github.com/fluxcd/flux2/pull/5594)\n- \\[RFC-0012] Add command `flux export source external` by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5583](https://redirect.github.com/fluxcd/flux2/pull/5583)\n- Fix bootstrap e2e test for image policy by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5604](https://redirect.github.com/fluxcd/flux2/pull/5604)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5603](https://redirect.github.com/fluxcd/flux2/pull/5603)\n- fix: return accepted values for flags when calling Values.Type() by [@​jaxels10](https://redirect.github.com/jaxels10) in [#​5602](https://redirect.github.com/fluxcd/flux2/pull/5602)\n- ci: Include source-watcher in the e2e test suite by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5614](https://redirect.github.com/fluxcd/flux2/pull/5614)\n- Add source.extensions.fluxcd.io group to aggregated RBAC roles by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5627](https://redirect.github.com/fluxcd/flux2/pull/5627)\n- Fix panic on reconcile with source of ExternalArtifact kind by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5630](https://redirect.github.com/fluxcd/flux2/pull/5630)\n- Upgrade k8s to 1.34.2, c-r to 0.22.4 and helm to 3.19.2 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5633](https://redirect.github.com/fluxcd/flux2/pull/5633)\n- diff: report if object is skipped by [@​hown3d](https://redirect.github.com/hown3d) in [#​5625](https://redirect.github.com/fluxcd/flux2/pull/5625)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5639](https://redirect.github.com/fluxcd/flux2/pull/5639)\n- Allow option to skip tenant namespace creation by [@​anshuishere](https://redirect.github.com/anshuishere) in [#​5597](https://redirect.github.com/fluxcd/flux2/pull/5597)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5648](https://redirect.github.com/fluxcd/flux2/pull/5648)\n- fix: [#​5654](https://redirect.github.com/fluxcd/flux2/issues/5654) by checking if both --chart and --chart-ref are set by [@​jaxels10](https://redirect.github.com/jaxels10) in [#​5656](https://redirect.github.com/fluxcd/flux2/pull/5656)\n- Added retry logic with delays to the Flux CLI download by [@​ivan-munteanu](https://redirect.github.com/ivan-munteanu) in [#​5659](https://redirect.github.com/fluxcd/flux2/pull/5659)\n- Run conformance tests for Kubernetes 1.35.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5663](https://redirect.github.com/fluxcd/flux2/pull/5663)\n- fix: normalize path for Windows compatibility by [@​sibasispadhi](https://redirect.github.com/sibasispadhi) in [#​5674](https://redirect.github.com/fluxcd/flux2/pull/5674)\n- Introduce support for looking up GH app installation ID by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5682](https://redirect.github.com/fluxcd/flux2/pull/5682)\n- Update dependencies to Kubernetes v1.35.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5688](https://redirect.github.com/fluxcd/flux2/pull/5688)\n- Fix resume command logging success after reconciliation failure by [@​Aman-Cool](https://redirect.github.com/Aman-Cool) in [#​5690](https://redirect.github.com/fluxcd/flux2/pull/5690)\n- Add 2.8 to supported versions for `flux migrate -f` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5713](https://redirect.github.com/fluxcd/flux2/pull/5713)\n- Introduce workflow for bumping fluxcd/pkg deps by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5717](https://redirect.github.com/fluxcd/flux2/pull/5717)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5719](https://redirect.github.com/fluxcd/flux2/pull/5719)\n- Fix event listing ignoring pagination token by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5721](https://redirect.github.com/fluxcd/flux2/pull/5721)\n- Build with Go 1.26 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5723](https://redirect.github.com/fluxcd/flux2/pull/5723)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5722](https://redirect.github.com/fluxcd/flux2/pull/5722)\n- Update helm-controller to v1.5.0 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5725](https://redirect.github.com/fluxcd/flux2/pull/5725)\n- build(deps): bump the ci group across 1 directory with 12 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5720](https://redirect.github.com/fluxcd/flux2/pull/5720)\n- Fix bootstrap failure on Windows cross-drive paths by [@​veeceey](https://redirect.github.com/veeceey) in [#​5726](https://redirect.github.com/fluxcd/flux2/pull/5726)\n- Dump debug info on e2e tests by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5729](https://redirect.github.com/fluxcd/flux2/pull/5729)\n- Set Kubernetes 1.33 as min supported version by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5730](https://redirect.github.com/fluxcd/flux2/pull/5730)\n- Update conformance tests to min Kubernetes 1.33 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5731](https://redirect.github.com/fluxcd/flux2/pull/5731)\n\n#### New Contributors\n\n- [@​ramasai1](https://redirect.github.com/ramasai1) made their first contribution in [#​5566](https://redirect.github.com/fluxcd/flux2/pull/5566)\n- [@​akshatsinha0](https://redirect.github.com/akshatsinha0) made their first contribution in [#​5589](https://redirect.github.com/fluxcd/flux2/pull/5589)\n- [@​jaxels10](https://redirect.github.com/jaxels10) made their first contribution in [#​5602](https://redirect.github.com/fluxcd/flux2/pull/5602)\n- [@​hown3d](https://redirect.github.com/hown3d) made their first contribution in [#​5625](https://redirect.github.com/fluxcd/flux2/pull/5625)\n- [@​anshuishere](https://redirect.github.com/anshuishere) made their first contribution in [#​5597](https://redirect.github.com/fluxcd/flux2/pull/5597)\n- [@​ivan-munteanu](https://redirect.github.com/ivan-munteanu) made their first contribution in [#​5659](https://redirect.github.com/fluxcd/flux2/pull/5659)\n- [@​sibasispadhi](https://redirect.github.com/sibasispadhi) made their first contribution in [#​5674](https://redirect.github.com/fluxcd/flux2/pull/5674)\n- [@​Aman-Cool](https://redirect.github.com/Aman-Cool) made their first contribution in [#​5690](https://redirect.github.com/fluxcd/flux2/pull/5690)\n- [@​veeceey](https://redirect.github.com/veeceey) made their first contribution in [#​5726](https://redirect.github.com/fluxcd/flux2/pull/5726)\n\n**Full Changelog**: \n\n### [`v2.7.5`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.5)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.4...v2.7.5)\n\n#### Highlights\n\nFlux v2.7.5 is a patch release that comes with fixes to helm-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix HelmRelease history truncation when using the `RetryOnFailure` strategy.\n\n:warning: Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3.\nFlux users are advised to use [Cosign v2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries) for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.\n\n#### Components changelog\n\n- helm-controller [v1.4.5](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.5/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.7.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5649](https://redirect.github.com/fluxcd/flux2/pull/5649)\n\n**Full Changelog**: \n\n### [`v2.7.4`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.4)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.3...v2.7.4)\n\n#### Highlights\n\nFlux v2.7.4 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Add `DisableConfigWatchers` feature gate to all controllers for disabling the Secrets/ConfigMaps watchers\n- Fix Workload Identity for Azure China Cloud in all controllers\n- Update Helm Go SDK to v3.19.2 fixing schema validation issues in helm-controller\n- Skip secret decryption for remote kustomize patches in kustomize-controller\n- Improve post-build error reporting in kustomize-controller\n- Add `ArtifactGenerator` to aggregated RBAC roles\n\n:warning: Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3.\nFlux users are advised to use [Cosign v2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries) for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.\n\n#### Components changelog\n\n- source-controller [v1.7.4](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.4/CHANGELOG.md)\n- kustomize-controller [v1.7.3](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.7.3/CHANGELOG.md)\n- notification-controller [v1.7.5](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.5/CHANGELOG.md)\n- helm-controller [v1.4.4](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.4/CHANGELOG.md)\n- image-reflector-controller [v1.0.4](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.4/CHANGELOG.md)\n- image-automation-controller [v1.0.4](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.4/CHANGELOG.md)\n- source-watcher [v2.0.3](https://redirect.github.com/fluxcd/source-watcher/blob/v2.0.3/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.7.x] ci: Include source-watcher in the e2e test suite by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5615](https://redirect.github.com/fluxcd/flux2/pull/5615)\n- \\[release/v2.7.x] Add source.extensions.fluxcd.io group to aggregated RBAC roles by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5628](https://redirect.github.com/fluxcd/flux2/pull/5628)\n- \\[release/v2.7.x] Fix panic on reconcile with source of ExternalArtifact kind by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5631](https://redirect.github.com/fluxcd/flux2/pull/5631)\n- \\[release/v2.7.x] Upgrade k8s to 1.34.2, c-r to 0.22.4 and helm to 3.19.2 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5634](https://redirect.github.com/fluxcd/flux2/pull/5634)\n- \\[release/v2.7.x] diff: report if object is skipped by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5635](https://redirect.github.com/fluxcd/flux2/pull/5635)\n- \\[release/v2.7.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5640](https://redirect.github.com/fluxcd/flux2/pull/5640)\n- \\[release/v2.7.x] Allow option to skip tenant namespace creation by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5642](https://redirect.github.com/fluxcd/flux2/pull/5642)\n\n**Full Changelog**: \n\n### [`v2.7.3`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.3)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.2...v2.7.3)\n\n#### Highlights\n\nFlux v2.7.3 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Restore SOCKS5 proxy support in all controllers\n- Fix status reporting of HelmReleases with `RetryOnFailure` strategy\n- Automated retries for ImagePolicies when no image tags are found in the database\n- Fix alerting for Telegram's `message_thread_id`\n- Allow running kustomize-controller and helm-controller on the same loopback interface as source-watcher\n\n:warning: Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3. Users are advised to use [Cosign v2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries) for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.\n\n#### Components changelog\n\n- source-controller [v1.7.3](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.3/CHANGELOG.md)\n- kustomize-controller [v1.7.2](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.7.2/CHANGELOG.md)\n- notification-controller [v1.7.4](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.4/CHANGELOG.md)\n- helm-controller [v1.4.3](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.3/CHANGELOG.md)\n- image-reflector-controller [v1.0.3](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.3/CHANGELOG.md)\n- image-automation-controller [v1.0.3](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.3/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.7.x] Pin cosign to v2.6.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5595](https://redirect.github.com/fluxcd/flux2/pull/5595)\n- \\[release/v2.7.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5605](https://redirect.github.com/fluxcd/flux2/pull/5605)\n- \\[release/v2.7.x] fix: return accepted values for flags when calling Values.Type() by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5606](https://redirect.github.com/fluxcd/flux2/pull/5606)\n\n**Full Changelog**: \n\n### [`v2.7.2`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.2)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.1...v2.7.2)\n\n#### Highlights\n\nFlux v2.7.2 is a patch release that comes with security fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nAll Flux components are now built with Go 1.25.2 which includes fixes for vulnerabilities in the Go stdlib that could lead to denial of service. The list of security fixes can be found in the [Go 1.25.2 release notes](https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI/m/qZN5nc-mBgAJ).\n\n#### Components changelog\n\n- source-controller [v1.7.2](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.2/CHANGELOG.md)\n- kustomize-controller [v1.7.1](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.7.1/CHANGELOG.md)\n- notification-controller [v1.7.3](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.3/CHANGELOG.md)\n- helm-controller [v1.4.2](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.2/CHANGELOG.md)\n- image-reflector-controller [v1.0.2](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.2/CHANGELOG.md)\n- image-automation-controller [v1.0.2](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.2/CHANGELOG.md)\n- source-watcher [v2.0.2](https://redirect.github.com/fluxcd/source-watcher/blob/v2.0.2/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.7.x] Fix manifest generation for `--storage-adv-addr` and `--events-addr` flags by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5575](https://redirect.github.com/fluxcd/flux2/pull/5575)\n- \\[release/v2.7.x] Update dependencies to Kubernetes v1.34.1 and Go 1.25.2 by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5577](https://redirect.github.com/fluxcd/flux2/pull/5577)\n- \\[release/v2.7.x] Update toolkit components by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5579](https://redirect.github.com/fluxcd/flux2/pull/5579)\n\n**Full Changelog**: \n\n### [`v2.7.1`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.1)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.0...v2.7.1)\n\n#### Highlights\n\nFlux v2.7.1 is a patch release that comes with various improvements and fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nImprovements:\n\n- Extend [flux migrate](https://fluxcd.io/flux/cmd/flux_migrate/) with support for migrating manifests in Git repositories to the latest API versions.\n- Add [recommendations](https://fluxcd.io/flux/components/helm/helmreleases/#recommended-settings) for configuring HelmReleases on production environments.\n\nFixes:\n\n- Fix `flux migrate` command to handle managed fields properly.\n- Fix self-signed TLS cert handling for public Helm repositories in source-controller.\n- Fix the default API versions used by receivers in notification-controller.\n- Fix redundant `Ready` condition patching in helm-controller.\n- Fix workload identity configuration examples for kubeconfig in helm-controller and kustomize-controller.\n\n#### Components changelog\n\n- source-controller [v1.7.1](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.1/CHANGELOG.md)\n- notification-controller [v1.7.2](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.2/CHANGELOG.md)\n- helm-controller [v1.4.1](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.1/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.7.x] Backport CI fixes and updates by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5552](https://redirect.github.com/fluxcd/flux2/pull/5552)\n- \\[release/v2.7.x] Fix `flux push artifact` not working with `--provider` by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5553](https://redirect.github.com/fluxcd/flux2/pull/5553)\n- \\[release/v2.7.x] Extend `flux migrate` to work with local files by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5557](https://redirect.github.com/fluxcd/flux2/pull/5557)\n- \\[release/v2.7.x] Improve `flux migrate` for live cluster migrations by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5559](https://redirect.github.com/fluxcd/flux2/pull/5559)\n- \\[release/v2.7.x] Fix `flux migrate -f` command to work with comments by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5561](https://redirect.github.com/fluxcd/flux2/pull/5561)\n- \\[release/v2.7.x] Fix `flux migrate -f` not considering kind comments by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5564](https://redirect.github.com/fluxcd/flux2/pull/5564)\n- \\[release/v2.7.x] Update toolkit components by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5569](https://redirect.github.com/fluxcd/flux2/pull/5569)\n- \\[release/v2.7.x] Disable AUR publishing by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5571](https://redirect.github.com/fluxcd/flux2/pull/5571)\n\n**Full Changelog**: \n\n### [`v2.7.0`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.0)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.6.4...v2.7.0)\n\n#### Highlights\n\nFlux v2.7.0 is a feature release. Users are encouraged to upgrade for the best experience.\n\nFor a compressive overview of new features and API changes included in this release, please refer to the [Announcing Flux 2.7 GA blog post](https://fluxcd.io/blog/2025/09/flux-v2.7.0/).\n\nOverview of the new features:\n\n- General availability release of the Image Automation APIs (`ImagePolicy`, `ImageRepository`, `ImageUpdateAutomation`)\n- Watch for changes in ConfigMaps and Secrets references (`Kustomization`, `HelmRelease`)\n- Support for remote cluster authentication using Workload Identity (`Kustomization`, `HelmRelease`)\n- Extend the readiness evaluation of dependencies with CEL expressions (`Kustomization`, `HelmRelease`)\n- Support for global SOPS Age decryption keys on single-tenant clusters (`Kustomization`)\n- Support for optional Kustomize components (`Kustomization`)\n- Introduce `RetryOnFailure` lifecycle management strategy (`HelmRelease`)\n- Support mTLS for sending alerts to external systems (`Provider`)\n- Object-level workload identity authentication (`Bucket`, `Provider`)\n- Support mTLS for GitHub App transport (`GitRepository`, `ImageUpdateAutomation`, `Provider`)\n- OpenTelemetry tracing for `Kustomization` and `HelmRelease` reconciliation (`Provider`)\n- Support for 3rd-party source controllers (`ExternalArtifact`)\n- Support for source composition and decomposition patterns (`ArtifactGenerator`)\n- `CancelHealthCheckOnNewRevision` feature gate (kustomize-controller)\n- `GitSparseCheckout` feature gate (image-automation-controller)\n\n\u2764\ufe0f Big thanks to all the Flux contributors that helped us with this release!\n\n##### Kubernetes compatibility\n\nThis release is compatible with the following Kubernetes versions:\n\n| Kubernetes version | Minimum required |\n| ------------------ | ---------------- |\n| `v1.32` | `>= 1.32.0` |\n| `v1.33` | `>= 1.33.0` |\n| `v1.34` | `>= 1.34.1` |\n\n> \\[!NOTE]\n> Note that the Flux project offers support only for the latest three minor versions of Kubernetes.\n> Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as\n> [ControlPlane](https://control-plane.io/enterprise-for-flux-cd/) that provide enterprise support for Flux.\n\n##### OpenShift compatibility\n\nFlux can be installed on Red Hat OpenShift cluster directly from OperatorHub using [Flux Operator](https://operatorhub.io/operator/flux-operator). The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.\n\n#### Upgrade procedure\n\n:warning: The Flux APIs `v1beta1` and `v2beta1` (deprecated in 2023) have reached end-of-life and have been removed from the CRDs.\n\nUnless you are using [Flux Operator](https://redirect.github.com/controlplaneio-fluxcd/flux-operator) to deploy the Flux controllers, you must run the `flux migrate` command on clusters before upgrading.\n\nFor more details, please refer to the [Flux v2.7 upgrade guide](https://fluxcd.io/blog/2025/09/flux-v2.7.0/#upgrade-procedure).\n\n#### Components changelog\n\n- source-controller [v1.7.0](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.0/CHANGELOG.md)\n- kustomize-controller [v1.7.0](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.7.0/CHANGELOG.md)\n- notification-controller [v1.7.0](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.0/CHANGELOG.md) [v1.7.1](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.1/CHANGELOG.md)\n- helm-controller [v1.4.0](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.0/CHANGELOG.md)\n- image-reflector-controller [v1.0.0](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.0/CHANGELOG.md) [v1.0.1](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.1/CHANGELOG.md)\n- image-automation-controller [v1.0.0](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.0/CHANGELOG.md) [v1.0.1](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.1/CHANGELOG.md)\n- source-watcher [v2.0.0](https://redirect.github.com/fluxcd/source-watcher/blob/v2.0.0/CHANGELOG.md) [v2.0.1](https://redirect.github.com/fluxcd/source-watcher/blob/v1.0.1/CHANGELOG.md)\n\n##### New Documentation\n\n- [ImageRepository v1 specification](https://fluxcd.io/flux/components/image/imagerepositories)\n- [ImagePolicy v1 specification](https://fluxcd.io/flux/components/image/imagepolicies)\n- [ImageUpdateAutomation v1 specification](https://fluxcd.io/flux/components/image/imageupdateautomations)\n- [ExternalArtifact v1 specification](https://fluxcd.io/flux/components/source/externalartifacts)\n- [ArtifactGenerator v1beta1 specification](https://fluxcd.io/flux/components/source/artifactgenerators)\n\n#### CLI changelog\n\n- Add backport label for `v2.6.x` by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5379](https://redirect.github.com/fluxcd/flux2/pull/5379)\n- Update image-reflector-controller to v0.35.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5381](https://redirect.github.com/fluxcd/flux2/pull/5381)\n- Add digest pinning to image automation testing by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5383](https://redirect.github.com/fluxcd/flux2/pull/5383)\n- correct small typo by [@​JIbald](https://redirect.github.com/JIbald) in [#​5388](https://redirect.github.com/fluxcd/flux2/pull/5388)\n- Remove credentials sync manifests by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5347](https://redirect.github.com/fluxcd/flux2/pull/5347)\n- Add sparse checkout to cli by [@​ba-work](https://redirect.github.com/ba-work) in [#​5389](https://redirect.github.com/fluxcd/flux2/pull/5389)\n- fix: Allow Azure CLI calls in `flux push artifact --provider azure` on DevOps runners by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5390](https://redirect.github.com/fluxcd/flux2/pull/5390)\n- Fix `knownhosts key mismatch` regression bug by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5404](https://redirect.github.com/fluxcd/flux2/pull/5404)\n- refactor: Use `normalize.UnstructuredList` instead of `ssa.SetNativeKindsDefaults` by [@​cappyzawa](https://redirect.github.com/cappyzawa) in [#​5407](https://redirect.github.com/fluxcd/flux2/pull/5407)\n- Make service-account name configurable in `flux create tenant` by [@​reiSh6phoo9o](https://redirect.github.com/reiSh6phoo9o) in [#​5402](https://redirect.github.com/fluxcd/flux2/pull/5402)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5409](https://redirect.github.com/fluxcd/flux2/pull/5409)\n- refactor: cleanup GetArtifactRegistryCredentials error handling by [@​cappyzawa](https://redirect.github.com/cappyzawa) in [#​5418](https://redirect.github.com/fluxcd/flux2/pull/5418)\n- Promote image CLI commands to stable by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5421](https://redirect.github.com/fluxcd/flux2/pull/5421)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5426](https://redirect.github.com/fluxcd/flux2/pull/5426)\n- Bump pkg/ssa to v0.49.0 for CABundle validation fix by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5431](https://redirect.github.com/fluxcd/flux2/pull/5431)\n- \\[RFC-0010] Add workload identity support for remote clusters by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5434](https://redirect.github.com/fluxcd/flux2/pull/5434)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5443](https://redirect.github.com/fluxcd/flux2/pull/5443)\n- Fix `flux push artifact` for insecure registries by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5449](https://redirect.github.com/fluxcd/flux2/pull/5449)\n- \\[RFC-0010] Add workload identity support for remote generic clusters by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5452](https://redirect.github.com/fluxcd/flux2/pull/5452)\n- Fix `flux diff kustomization` ignore patterns by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5451](https://redirect.github.com/fluxcd/flux2/pull/5451)\n- Update dependencies to Kubernetes 1.33.2 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5453](https://redirect.github.com/fluxcd/flux2/pull/5453)\n- build(deps): bump the ci group across 1 directory with 7 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5435](https://redirect.github.com/fluxcd/flux2/pull/5435)\n- Upgrade fluxcd/pkg dependencies by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5455](https://redirect.github.com/fluxcd/flux2/pull/5455)\n- ci: Use GITHUB\\_TOKEN for API calls in update workflow by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5460](https://redirect.github.com/fluxcd/flux2/pull/5460)\n- manifests: Add `app.kubernetes.io/part-of: flux` label to controller pods by [@​pinkavaj](https://redirect.github.com/pinkavaj) in [#​5440](https://redirect.github.com/fluxcd/flux2/pull/5440)\n- Migrate sourcesecret package to runtime/secrets APIs by [@​cappyzawa](https://redirect.github.com/cappyzawa) in [#​5462](https://redirect.github.com/fluxcd/flux2/pull/5462)\n- Implement `flux migrate` command by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5473](https://redirect.github.com/fluxcd/flux2/pull/5473)\n- \\[RFC-0007] Implementation history update by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5480](https://redirect.github.com/fluxcd/flux2/pull/5480)\n- Run conformance tests for Kubernetes 1.34.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5497](https://redirect.github.com/fluxcd/flux2/pull/5497)\n- Update to Kubernetes v1.34.0 and Go 1.25.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5499](https://redirect.github.com/fluxcd/flux2/pull/5499)\n- build(deps): bump the ci group across 1 directory with 10 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5500](https://redirect.github.com/fluxcd/flux2/pull/5500)\n- Allow the Go runtime to dynamically set `GOMAXPROCS` by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5501](https://redirect.github.com/fluxcd/flux2/pull/5501)\n- fix(events): respect `--all-namespaces` flag by [@​mohiuddin-khan-shiam](https://redirect.github.com/mohiuddin-khan-shiam) in [#​5414](https://redirect.github.com/fluxcd/flux2/pull/5414)\n- \\[RFC-0011] OpenTelemetry Tracing by [@​adri1197](https://redirect.github.com/adri1197) in [#​5321](https://redirect.github.com/fluxcd/flux2/pull/5321)\n- \\[RFC-0012] External Artifact API by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5292](https://redirect.github.com/fluxcd/flux2/pull/5292)\n- Add `--show-history` flag to `debug helmrelease` by [@​hawkaii](https://redirect.github.com/hawkaii) in [#​5505](https://redirect.github.com/fluxcd/flux2/pull/5505)\n- Skip release candidates on updates by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5507](https://redirect.github.com/fluxcd/flux2/pull/5507)\n- ci: Align azure e2e tests secret names with fluxcd/pkg by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5508](https://redirect.github.com/fluxcd/flux2/pull/5508)\n- Update image-reflector-controller to v1.0.0 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5517](https://redirect.github.com/fluxcd/flux2/pull/5517)\n- Update source-controller to v1.7.0 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5518](https://redirect.github.com/fluxcd/flux2/pull/5518)\n- Add the source-watcher controller to the Flux distribution by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5519](https://redirect.github.com/fluxcd/flux2/pull/5519)\n- Add read-only commands for `ArtifactGenerator` kind by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5520](https://redirect.github.com/fluxcd/flux2/pull/5520)\n- ci: Add source-watcher to the update workflow by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5521](https://redirect.github.com/fluxcd/flux2/pull/5521)\n- Update image-automation-controller to v1.0.0 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5522](https://redirect.github.com/fluxcd/flux2/pull/5522)\n- Update image-reflector-controller to v1.0.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5525](https://redirect.github.com/fluxcd/flux2/pull/5525)\n- Implement `flux [reconcile|suspend|resume] image policy` commands by [@​lukas8219](https://redirect.github.com/lukas8219) in [#​5492](https://redirect.github.com/fluxcd/flux2/pull/5492)\n- Handle `force: enabled` annotation in `flux diff ks` command by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5528](https://redirect.github.com/fluxcd/flux2/pull/5528)\n- ci: Refactor CI with `fluxcd/gha-workflows` by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5529](https://redirect.github.com/fluxcd/flux2/pull/5529)\n- Remove `ArtifactGenerators` during uninstall by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5531](https://redirect.github.com/fluxcd/flux2/pull/5531)\n- Add support for `ExternalArtifact` to `flux trace` by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5532](https://redirect.github.com/fluxcd/flux2/pull/5532)\n- Set Kubernetes 1.32 as min supported version by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5533](https://redirect.github.com/fluxcd/flux2/pull/5533)\n- build(deps): bump the ci group with 6 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5535](https://redirect.github.com/fluxcd/flux2/pull/5535)\n- Add support for custom storage namespace in HelmRelease creation by [@​prasad89](https://redirect.github.com/prasad89) in [#​5534](https://redirect.github.com/fluxcd/flux2/pull/5534)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5537](https://redirect.github.com/fluxcd/flux2/pull/5537)\n- ci: remove cron schedule from update by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5539](https://redirect.github.com/fluxcd/flux2/pull/5539)\n- Update source-watcher to v2.0.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5540](https://redirect.github.com/fluxcd/flux2/pull/5540)\n- Add `--show-history` flag to `debug kustomization` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5541](https://redirect.github.com/fluxcd/flux2/pull/5541)\n- Update image-automation-controller to v1.0.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5542](https://redirect.github.com/fluxcd/flux2/pull/5542)\n- `fluxcd/flux2/action`: Determine late\n\n> \u2702 **Note**\n> \n> PR body was truncated to here.\n\n\n
\n\n---\n\n### Configuration\n\n\ud83d\udcc5 **Schedule**: (UTC)\n\n- Branch creation\n - At any time (no schedule defined)\n- Automerge\n - At any time (no schedule defined)\n\n\ud83d\udea6 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.\n\n\u267b **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.\n\n\ud83d\udd15 **Ignore**: Close this PR and you won't be reminded about this update again.\n\n---\n\n - [ ] If you want to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/vexxhost/atmosphere.common).\n\n", "change_url": "https://github.com/vexxhost/atmosphere.common/pull/102", "commit_id": "f714cae425e326d180564d27c7d00831897a7465", "patchset": "f714cae425e326d180564d27c7d00831897a7465", "project": { "canonical_hostname": "github.com", "canonical_name": "github.com/vexxhost/atmosphere.common", "name": "vexxhost/atmosphere.common", "short_name": "atmosphere.common", "src_dir": "src/github.com/vexxhost/atmosphere.common" }, "src_dir": "src/github.com/vexxhost/atmosphere.common", "topic": null }, { "branch": "main", "change": "102", "change_message": "chore(deps): update dependency fluxcd/flux2 to v2.8.8\n\n> \u2139\ufe0f **Note**\n> \n> This PR body was truncated due to platform limits.\n\nThis PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n| [fluxcd/flux2](https://redirect.github.com/fluxcd/flux2) | minor | `2.6.4` \u2192 `2.8.8` |\n\n---\n\n### Release Notes\n\n
\nfluxcd/flux2 (fluxcd/flux2)\n\n### [`v2.8.8`](https://redirect.github.com/fluxcd/flux2/compare/v2.8.7...v2.8.8)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.7...v2.8.8)\n\n### [`v2.8.7`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.7)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.6...v2.8.7)\n\n#### Highlights\n\nFlux v2.8.7 is a patch release that includes a bug fix in kustomize-controller, a CVE fix in source-controller and image-automation-controller via go-git v5.19.0, and dependency updates. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix management of objects annotated with `kustomize.toolkit.fluxcd.io/ssa: IfNotPresent` where non-namespaced resources were being deleted and recreated on each reconciliation (kustomize-controller)\n\nImprovements:\n\n- Update go-git to v5.19.0 which fixes [CVE-2026-45022](https://redirect.github.com/advisories/GHSA-389r-gv7p-r3rp) (source-controller, image-automation-controller)\n- Update fluxcd/pkg dependencies (source-controller, kustomize-controller, image-automation-controller)\n\n#### Components changelog\n\n- helm-controller [v1.5.4](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.4/CHANGELOG.md)\n- image-automation-controller [v1.1.3](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.3/CHANGELOG.md)\n- kustomize-controller [v1.8.5](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.5/CHANGELOG.md)\n- notification-controller [v1.8.4](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.4/CHANGELOG.md)\n- source-controller [v1.8.4](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.4/CHANGELOG.md)\n\n#### CLI changelog\n\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5891](https://redirect.github.com/fluxcd/flux2/pull/5891)\n\n**Full Changelog**: \n\n### [`v2.8.6`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.6)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.5...v2.8.6)\n\n#### Highlights\n\nFlux v2.8.6 is a patch release that includes bug fixes and improvements across helm-controller, image-automation-controller, kustomize-controller, notification-controller, and source-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix a post-renderer conflict between overlapping hooks and templates (helm-controller)\n- Ignore force replace when server-side apply is enabled (helm-controller)\n- Fix a regression where generic providers would not forward commit status events (notification-controller)\n- Require the `audience` field on the GCR Receiver secret for tighter verification \u2014 will become mandatory in Flux v2.9 (notification-controller)\n\nImprovements:\n\n- Introduce the `MigrateAPIVersion` feature gate for migrating the API version of resources in managed field entries (kustomize-controller)\n- Update go-git to v5.18.0 bringing performance improvements for Git operations (source-controller, image-automation-controller)\n\n#### Components changelog\n\n- helm-controller [v1.5.4](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.4/CHANGELOG.md)\n- image-automation-controller [v1.1.2](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.2/CHANGELOG.md)\n- kustomize-controller [v1.8.4](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.4/CHANGELOG.md)\n- notification-controller [v1.8.4](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.4/CHANGELOG.md)\n- source-controller [v1.8.3](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.3/CHANGELOG.md)\n\n#### CLI changelog\n\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5857](https://redirect.github.com/fluxcd/flux2/pull/5857)\n\n**Full Changelog**: \n\n### [`v2.8.5`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.5)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.4...v2.8.5)\n\n#### Highlights\n\nFlux v2.8.5 is a patch release that includes bug fixes and improvements across kustomize-controller, source-controller, and notification-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix a race condition where a cancelled reconciliation could leave stale data in the cache, causing Kustomizations to get stuck (kustomize-controller)\n- Fix Azure Blob prefix option not being passed to the storage client (source-controller)\n\nImprovements:\n\n- Improve error message for encrypted SSH keys without password (source-controller)\n- Add optional `email` and `audience` fields to the GCR Receiver for tighter verification (notification-controller)\n- Add provider manifest example for Azure Event Hub managed identity authentication (notification-controller)\n\n#### Components changelog\n\n- kustomize-controller [v1.8.3](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.3/CHANGELOG.md)\n- source-controller [v1.8.2](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.2/CHANGELOG.md)\n- notification-controller [v1.8.3](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.3/CHANGELOG.md)\n\n#### CLI changelog\n\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5822](https://redirect.github.com/fluxcd/flux2/pull/5822)\n\n**Full Changelog**: \n\n### [`v2.8.4`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.4)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.3...v2.8.4)\n\n#### Highlights\n\nFlux v2.8.4 is a patch release that includes fixes for the Flux CLI. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix `flux build ks` and `flux diff ks` on Windows\n- Fix `--source` flag validation in `create kustomization` command\n\n#### CLI changelog\n\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5796](https://redirect.github.com/fluxcd/flux2/pull/5796)\n- \\[release/v2.8.x] fix: validate --source flag in create kustomization command by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5799](https://redirect.github.com/fluxcd/flux2/pull/5799)\n\n**Full Changelog**: \n\n### [`v2.8.3`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.3)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.2...v2.8.3)\n\n#### Highlights\n\nFlux v2.8.3 is a patch release that fixes a regression in helm-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix templating errors for charts that include `---` in the content, e.g. YAML separators, embedded scripts, CAs inside ConfigMaps (helm-controller)\n\n#### Components changelog\n\n- helm-controller [v1.5.3](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.3/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.8.x] Add target branch name to update branch by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5774](https://redirect.github.com/fluxcd/flux2/pull/5774)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5779](https://redirect.github.com/fluxcd/flux2/pull/5779)\n\n**Full Changelog**: \n\n### [`v2.8.2`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.2)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.1...v2.8.2)\n\n#### Highlights\n\nFlux v2.8.2 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix enqueuing new reconciliation requests for events on source Flux objects when they are already reconciling the revision present in the watch event (kustomize-controller, helm-controller)\n- Fix the Go templates bug of YAML separator `---` getting concatenated to `apiVersion:` by updating to Helm 4.1.3 (helm-controller)\n- Fix canceled HelmReleases getting stuck when they don't have a retry strategy configured by introducing a new feature gate `DefaultToRetryOnFailure` that improves the experience when the `CancelHealthCheckOnNewRevision` is enabled (helm-controller)\n- Fix the auth scope for Azure Container Registry to use the ACR-specific scope (source-controller, image-reflector-controller)\n- Fix potential Denial of Service (DoS) during TLS handshakes (CVE-2026-27138) by building all controllers with Go 1.26.1\n\n#### Components changelog\n\n- source-controller [v1.8.1](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.1/CHANGELOG.md)\n- kustomize-controller [v1.8.2](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.2/CHANGELOG.md)\n- notification-controller [v1.8.2](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.2/CHANGELOG.md)\n- helm-controller [v1.5.2](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.2/CHANGELOG.md)\n- image-reflector-controller [v1.1.1](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.1.1/CHANGELOG.md)\n- image-automation-controller [v1.1.1](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.1/CHANGELOG.md)\n- source-watcher [v2.1.1](https://redirect.github.com/fluxcd/source-watcher/blob/v2.1.1/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.8.x] build(deps): bump the ci group across 1 directory with 11 updates by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5765](https://redirect.github.com/fluxcd/flux2/pull/5765)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5767](https://redirect.github.com/fluxcd/flux2/pull/5767)\n- Update toolkit components by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5770](https://redirect.github.com/fluxcd/flux2/pull/5770)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5771](https://redirect.github.com/fluxcd/flux2/pull/5771)\n\n**Full Changelog**: \n\n### [`v2.8.1`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.1)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.0...v2.8.1)\n\n#### Highlights\n\nFlux v2.8.1 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix Git commit status events being dropped for Kustomizations (notification-controller)\n- Fix health check for StatefulSets when the Pods are Pending/Unschedulable during rollout (helm-controller, kustomize-controller)\n\n#### Components changelog\n\n- kustomize-controller [v1.8.1](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.1/CHANGELOG.md)\n- notification-controller [v1.8.1](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.1/CHANGELOG.md)\n- helm-controller [v1.5.1](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.1/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.8.x] Remove no longer needed workaround for Flux 2.8 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5735](https://redirect.github.com/fluxcd/flux2/pull/5735)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5739](https://redirect.github.com/fluxcd/flux2/pull/5739)\n- \\[release/v2.8.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5741](https://redirect.github.com/fluxcd/flux2/pull/5741)\n\n**Full Changelog**: \n\n### [`v2.8.0`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.0)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.5...v2.8.0)\n\n#### Highlights\n\nFlux v2.8.0 is a feature release. Users are encouraged to upgrade for the best experience.\n\nFor a compressive overview of new features and API changes included in this release, please refer to the [Announcing Flux 2.8 GA blog post](https://fluxcd.io/blog/2026/02/flux-v2.8.0/).\n\nOverview of the new features:\n\n- Helm v4 support, including server-side apply and kstatus-based health checking (`HelmRelease`)\n- Readiness evaluation of Helm-managed objects with CEL expressions (`HelmRelease`)\n- Improved observability of Helm releases with inventory tracking in `.status.inventory` (`HelmRelease`)\n- Reduced the mean time to recovery of Flux-managed applications via `CancelHealthCheckOnNewRevision` feature gate (`Kustomization`, `HelmRelease`)\n- Support for commenting on Pull Requests directly from Flux notifications (`Provider`)\n- Custom SSA apply stages for ordering resource application in kustomize-controller (`Kustomization`)\n- Automatic GitHub App installation ID lookup from the repository owner (`GitRepository`, `ImageUpdateAutomation`, `Provider`)\n- Support for Cosign v3 for verifying OCI artifacts and container images (`OCIRepository`)\n- ArtifactGenerator support for extracting and modifying Helm charts (`ArtifactGenerator`)\n- Bypass cache when fetching source objects via `DirectSourceFetch` feature gate (`Kustomization`, `HelmRelease`, `ArtifactGenerator`)\n\n\u2764\ufe0f Big thanks to all the Flux contributors that helped us with this release!\n\n##### Kubernetes compatibility\n\nThis release is compatible with the following Kubernetes versions:\n\n| Kubernetes version | Minimum required |\n| ------------------ | ---------------- |\n| `v1.33` | `>= 1.32.0` |\n| `v1.34` | `>= 1.34.1` |\n| `v1.35` | `>= 1.35.0` |\n\n> \\[!NOTE]\n> Note that the Flux project offers support only for the latest three minor versions of Kubernetes.\n> Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as\n> [ControlPlane](https://control-plane.io/enterprise-for-flux-cd/) that provide enterprise support for Flux.\n\n##### OpenShift compatibility\n\nFlux can be installed on Red Hat OpenShift cluster directly from OperatorHub using [Flux Operator](https://operatorhub.io/operator/flux-operator). The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.\n\n#### Upgrade procedure\n\n:warning: The Flux APIs `v1beta2` and `v2beta2` (deprecated in 2024) have reached end-of-life and have been removed from the CRDs.\n\nPlease follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from older versions of Flux to v2.8.\n\n#### Components changelog\n\n- source-controller [v1.8.0](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.0/CHANGELOG.md)\n- kustomize-controller [v1.8.0](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.0/CHANGELOG.md)\n- notification-controller [v1.8.0](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.0/CHANGELOG.md)\n- helm-controller [v1.5.0](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.0/CHANGELOG.md)\n- image-reflector-controller [v1.1.0](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.1.0/CHANGELOG.md)\n- image-automation-controller [v1.1.0](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.0/CHANGELOG.md)\n- source-watcher [v2.1.0](https://redirect.github.com/fluxcd/source-watcher/blob/v2.1.0/CHANGELOG.md)\n\n#### CLI changelog\n\n- ci: Set `GITHUB_TOKEN` in the `release-flux-manifests` workflow by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5547](https://redirect.github.com/fluxcd/flux2/pull/5547)\n- Add backport label for Flux 2.7 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5550](https://redirect.github.com/fluxcd/flux2/pull/5550)\n- build(deps): bump the ci group across 1 directory with 3 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5548](https://redirect.github.com/fluxcd/flux2/pull/5548)\n- Fix `flux push artifact` not working with `--provider` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5551](https://redirect.github.com/fluxcd/flux2/pull/5551)\n- Extend `flux migrate` to work with local files by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5554](https://redirect.github.com/fluxcd/flux2/pull/5554)\n- Improve `flux migrate` for live cluster migrations by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5558](https://redirect.github.com/fluxcd/flux2/pull/5558)\n- Fix `flux migrate -f` command to work with comments by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5560](https://redirect.github.com/fluxcd/flux2/pull/5560)\n- Add source-watcher to docs by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5562](https://redirect.github.com/fluxcd/flux2/pull/5562)\n- Fix `flux migrate -f` not considering kind comments by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5563](https://redirect.github.com/fluxcd/flux2/pull/5563)\n- refactor: convert `Kustomization` resource into unstructured map only once during variable substitution by [@​ramasai1](https://redirect.github.com/ramasai1) in [#​5566](https://redirect.github.com/fluxcd/flux2/pull/5566)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5568](https://redirect.github.com/fluxcd/flux2/pull/5568)\n- Disable AUR publishing by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5570](https://redirect.github.com/fluxcd/flux2/pull/5570)\n- Fix manifest generation for `--storage-adv-addr` and `--events-addr` flags by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5574](https://redirect.github.com/fluxcd/flux2/pull/5574)\n- Update dependencies to Kubernetes v1.34.1 and Go 1.25.2 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5576](https://redirect.github.com/fluxcd/flux2/pull/5576)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5578](https://redirect.github.com/fluxcd/flux2/pull/5578)\n- Restore GitHub PAT for backports by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5581](https://redirect.github.com/fluxcd/flux2/pull/5581)\n- \\[RFC-0012] Add command `flux get source external` by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5555](https://redirect.github.com/fluxcd/flux2/pull/5555)\n- fix: handle error when writing password prompt to stdout by [@​akshatsinha0](https://redirect.github.com/akshatsinha0) in [#​5589](https://redirect.github.com/fluxcd/flux2/pull/5589)\n- Pin cosign to v2.6.1 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5594](https://redirect.github.com/fluxcd/flux2/pull/5594)\n- \\[RFC-0012] Add command `flux export source external` by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5583](https://redirect.github.com/fluxcd/flux2/pull/5583)\n- Fix bootstrap e2e test for image policy by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5604](https://redirect.github.com/fluxcd/flux2/pull/5604)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5603](https://redirect.github.com/fluxcd/flux2/pull/5603)\n- fix: return accepted values for flags when calling Values.Type() by [@​jaxels10](https://redirect.github.com/jaxels10) in [#​5602](https://redirect.github.com/fluxcd/flux2/pull/5602)\n- ci: Include source-watcher in the e2e test suite by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5614](https://redirect.github.com/fluxcd/flux2/pull/5614)\n- Add source.extensions.fluxcd.io group to aggregated RBAC roles by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5627](https://redirect.github.com/fluxcd/flux2/pull/5627)\n- Fix panic on reconcile with source of ExternalArtifact kind by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5630](https://redirect.github.com/fluxcd/flux2/pull/5630)\n- Upgrade k8s to 1.34.2, c-r to 0.22.4 and helm to 3.19.2 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5633](https://redirect.github.com/fluxcd/flux2/pull/5633)\n- diff: report if object is skipped by [@​hown3d](https://redirect.github.com/hown3d) in [#​5625](https://redirect.github.com/fluxcd/flux2/pull/5625)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5639](https://redirect.github.com/fluxcd/flux2/pull/5639)\n- Allow option to skip tenant namespace creation by [@​anshuishere](https://redirect.github.com/anshuishere) in [#​5597](https://redirect.github.com/fluxcd/flux2/pull/5597)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5648](https://redirect.github.com/fluxcd/flux2/pull/5648)\n- fix: [#​5654](https://redirect.github.com/fluxcd/flux2/issues/5654) by checking if both --chart and --chart-ref are set by [@​jaxels10](https://redirect.github.com/jaxels10) in [#​5656](https://redirect.github.com/fluxcd/flux2/pull/5656)\n- Added retry logic with delays to the Flux CLI download by [@​ivan-munteanu](https://redirect.github.com/ivan-munteanu) in [#​5659](https://redirect.github.com/fluxcd/flux2/pull/5659)\n- Run conformance tests for Kubernetes 1.35.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5663](https://redirect.github.com/fluxcd/flux2/pull/5663)\n- fix: normalize path for Windows compatibility by [@​sibasispadhi](https://redirect.github.com/sibasispadhi) in [#​5674](https://redirect.github.com/fluxcd/flux2/pull/5674)\n- Introduce support for looking up GH app installation ID by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5682](https://redirect.github.com/fluxcd/flux2/pull/5682)\n- Update dependencies to Kubernetes v1.35.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5688](https://redirect.github.com/fluxcd/flux2/pull/5688)\n- Fix resume command logging success after reconciliation failure by [@​Aman-Cool](https://redirect.github.com/Aman-Cool) in [#​5690](https://redirect.github.com/fluxcd/flux2/pull/5690)\n- Add 2.8 to supported versions for `flux migrate -f` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5713](https://redirect.github.com/fluxcd/flux2/pull/5713)\n- Introduce workflow for bumping fluxcd/pkg deps by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5717](https://redirect.github.com/fluxcd/flux2/pull/5717)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5719](https://redirect.github.com/fluxcd/flux2/pull/5719)\n- Fix event listing ignoring pagination token by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5721](https://redirect.github.com/fluxcd/flux2/pull/5721)\n- Build with Go 1.26 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5723](https://redirect.github.com/fluxcd/flux2/pull/5723)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5722](https://redirect.github.com/fluxcd/flux2/pull/5722)\n- Update helm-controller to v1.5.0 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5725](https://redirect.github.com/fluxcd/flux2/pull/5725)\n- build(deps): bump the ci group across 1 directory with 12 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5720](https://redirect.github.com/fluxcd/flux2/pull/5720)\n- Fix bootstrap failure on Windows cross-drive paths by [@​veeceey](https://redirect.github.com/veeceey) in [#​5726](https://redirect.github.com/fluxcd/flux2/pull/5726)\n- Dump debug info on e2e tests by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5729](https://redirect.github.com/fluxcd/flux2/pull/5729)\n- Set Kubernetes 1.33 as min supported version by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5730](https://redirect.github.com/fluxcd/flux2/pull/5730)\n- Update conformance tests to min Kubernetes 1.33 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5731](https://redirect.github.com/fluxcd/flux2/pull/5731)\n\n#### New Contributors\n\n- [@​ramasai1](https://redirect.github.com/ramasai1) made their first contribution in [#​5566](https://redirect.github.com/fluxcd/flux2/pull/5566)\n- [@​akshatsinha0](https://redirect.github.com/akshatsinha0) made their first contribution in [#​5589](https://redirect.github.com/fluxcd/flux2/pull/5589)\n- [@​jaxels10](https://redirect.github.com/jaxels10) made their first contribution in [#​5602](https://redirect.github.com/fluxcd/flux2/pull/5602)\n- [@​hown3d](https://redirect.github.com/hown3d) made their first contribution in [#​5625](https://redirect.github.com/fluxcd/flux2/pull/5625)\n- [@​anshuishere](https://redirect.github.com/anshuishere) made their first contribution in [#​5597](https://redirect.github.com/fluxcd/flux2/pull/5597)\n- [@​ivan-munteanu](https://redirect.github.com/ivan-munteanu) made their first contribution in [#​5659](https://redirect.github.com/fluxcd/flux2/pull/5659)\n- [@​sibasispadhi](https://redirect.github.com/sibasispadhi) made their first contribution in [#​5674](https://redirect.github.com/fluxcd/flux2/pull/5674)\n- [@​Aman-Cool](https://redirect.github.com/Aman-Cool) made their first contribution in [#​5690](https://redirect.github.com/fluxcd/flux2/pull/5690)\n- [@​veeceey](https://redirect.github.com/veeceey) made their first contribution in [#​5726](https://redirect.github.com/fluxcd/flux2/pull/5726)\n\n**Full Changelog**: \n\n### [`v2.7.5`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.5)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.4...v2.7.5)\n\n#### Highlights\n\nFlux v2.7.5 is a patch release that comes with fixes to helm-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix HelmRelease history truncation when using the `RetryOnFailure` strategy.\n\n:warning: Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3.\nFlux users are advised to use [Cosign v2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries) for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.\n\n#### Components changelog\n\n- helm-controller [v1.4.5](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.5/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.7.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5649](https://redirect.github.com/fluxcd/flux2/pull/5649)\n\n**Full Changelog**: \n\n### [`v2.7.4`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.4)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.3...v2.7.4)\n\n#### Highlights\n\nFlux v2.7.4 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Add `DisableConfigWatchers` feature gate to all controllers for disabling the Secrets/ConfigMaps watchers\n- Fix Workload Identity for Azure China Cloud in all controllers\n- Update Helm Go SDK to v3.19.2 fixing schema validation issues in helm-controller\n- Skip secret decryption for remote kustomize patches in kustomize-controller\n- Improve post-build error reporting in kustomize-controller\n- Add `ArtifactGenerator` to aggregated RBAC roles\n\n:warning: Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3.\nFlux users are advised to use [Cosign v2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries) for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.\n\n#### Components changelog\n\n- source-controller [v1.7.4](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.4/CHANGELOG.md)\n- kustomize-controller [v1.7.3](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.7.3/CHANGELOG.md)\n- notification-controller [v1.7.5](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.5/CHANGELOG.md)\n- helm-controller [v1.4.4](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.4/CHANGELOG.md)\n- image-reflector-controller [v1.0.4](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.4/CHANGELOG.md)\n- image-automation-controller [v1.0.4](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.4/CHANGELOG.md)\n- source-watcher [v2.0.3](https://redirect.github.com/fluxcd/source-watcher/blob/v2.0.3/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.7.x] ci: Include source-watcher in the e2e test suite by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5615](https://redirect.github.com/fluxcd/flux2/pull/5615)\n- \\[release/v2.7.x] Add source.extensions.fluxcd.io group to aggregated RBAC roles by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5628](https://redirect.github.com/fluxcd/flux2/pull/5628)\n- \\[release/v2.7.x] Fix panic on reconcile with source of ExternalArtifact kind by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5631](https://redirect.github.com/fluxcd/flux2/pull/5631)\n- \\[release/v2.7.x] Upgrade k8s to 1.34.2, c-r to 0.22.4 and helm to 3.19.2 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5634](https://redirect.github.com/fluxcd/flux2/pull/5634)\n- \\[release/v2.7.x] diff: report if object is skipped by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5635](https://redirect.github.com/fluxcd/flux2/pull/5635)\n- \\[release/v2.7.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5640](https://redirect.github.com/fluxcd/flux2/pull/5640)\n- \\[release/v2.7.x] Allow option to skip tenant namespace creation by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5642](https://redirect.github.com/fluxcd/flux2/pull/5642)\n\n**Full Changelog**: \n\n### [`v2.7.3`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.3)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.2...v2.7.3)\n\n#### Highlights\n\nFlux v2.7.3 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Restore SOCKS5 proxy support in all controllers\n- Fix status reporting of HelmReleases with `RetryOnFailure` strategy\n- Automated retries for ImagePolicies when no image tags are found in the database\n- Fix alerting for Telegram's `message_thread_id`\n- Allow running kustomize-controller and helm-controller on the same loopback interface as source-watcher\n\n:warning: Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3. Users are advised to use [Cosign v2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries) for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.\n\n#### Components changelog\n\n- source-controller [v1.7.3](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.3/CHANGELOG.md)\n- kustomize-controller [v1.7.2](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.7.2/CHANGELOG.md)\n- notification-controller [v1.7.4](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.4/CHANGELOG.md)\n- helm-controller [v1.4.3](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.3/CHANGELOG.md)\n- image-reflector-controller [v1.0.3](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.3/CHANGELOG.md)\n- image-automation-controller [v1.0.3](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.3/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.7.x] Pin cosign to v2.6.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5595](https://redirect.github.com/fluxcd/flux2/pull/5595)\n- \\[release/v2.7.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5605](https://redirect.github.com/fluxcd/flux2/pull/5605)\n- \\[release/v2.7.x] fix: return accepted values for flags when calling Values.Type() by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5606](https://redirect.github.com/fluxcd/flux2/pull/5606)\n\n**Full Changelog**: \n\n### [`v2.7.2`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.2)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.1...v2.7.2)\n\n#### Highlights\n\nFlux v2.7.2 is a patch release that comes with security fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nAll Flux components are now built with Go 1.25.2 which includes fixes for vulnerabilities in the Go stdlib that could lead to denial of service. The list of security fixes can be found in the [Go 1.25.2 release notes](https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI/m/qZN5nc-mBgAJ).\n\n#### Components changelog\n\n- source-controller [v1.7.2](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.2/CHANGELOG.md)\n- kustomize-controller [v1.7.1](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.7.1/CHANGELOG.md)\n- notification-controller [v1.7.3](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.3/CHANGELOG.md)\n- helm-controller [v1.4.2](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.2/CHANGELOG.md)\n- image-reflector-controller [v1.0.2](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.2/CHANGELOG.md)\n- image-automation-controller [v1.0.2](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.2/CHANGELOG.md)\n- source-watcher [v2.0.2](https://redirect.github.com/fluxcd/source-watcher/blob/v2.0.2/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.7.x] Fix manifest generation for `--storage-adv-addr` and `--events-addr` flags by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5575](https://redirect.github.com/fluxcd/flux2/pull/5575)\n- \\[release/v2.7.x] Update dependencies to Kubernetes v1.34.1 and Go 1.25.2 by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5577](https://redirect.github.com/fluxcd/flux2/pull/5577)\n- \\[release/v2.7.x] Update toolkit components by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5579](https://redirect.github.com/fluxcd/flux2/pull/5579)\n\n**Full Changelog**: \n\n### [`v2.7.1`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.1)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.0...v2.7.1)\n\n#### Highlights\n\nFlux v2.7.1 is a patch release that comes with various improvements and fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\ufe0f Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nImprovements:\n\n- Extend [flux migrate](https://fluxcd.io/flux/cmd/flux_migrate/) with support for migrating manifests in Git repositories to the latest API versions.\n- Add [recommendations](https://fluxcd.io/flux/components/helm/helmreleases/#recommended-settings) for configuring HelmReleases on production environments.\n\nFixes:\n\n- Fix `flux migrate` command to handle managed fields properly.\n- Fix self-signed TLS cert handling for public Helm repositories in source-controller.\n- Fix the default API versions used by receivers in notification-controller.\n- Fix redundant `Ready` condition patching in helm-controller.\n- Fix workload identity configuration examples for kubeconfig in helm-controller and kustomize-controller.\n\n#### Components changelog\n\n- source-controller [v1.7.1](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.1/CHANGELOG.md)\n- notification-controller [v1.7.2](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.2/CHANGELOG.md)\n- helm-controller [v1.4.1](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.1/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.7.x] Backport CI fixes and updates by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5552](https://redirect.github.com/fluxcd/flux2/pull/5552)\n- \\[release/v2.7.x] Fix `flux push artifact` not working with `--provider` by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5553](https://redirect.github.com/fluxcd/flux2/pull/5553)\n- \\[release/v2.7.x] Extend `flux migrate` to work with local files by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5557](https://redirect.github.com/fluxcd/flux2/pull/5557)\n- \\[release/v2.7.x] Improve `flux migrate` for live cluster migrations by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5559](https://redirect.github.com/fluxcd/flux2/pull/5559)\n- \\[release/v2.7.x] Fix `flux migrate -f` command to work with comments by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5561](https://redirect.github.com/fluxcd/flux2/pull/5561)\n- \\[release/v2.7.x] Fix `flux migrate -f` not considering kind comments by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5564](https://redirect.github.com/fluxcd/flux2/pull/5564)\n- \\[release/v2.7.x] Update toolkit components by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5569](https://redirect.github.com/fluxcd/flux2/pull/5569)\n- \\[release/v2.7.x] Disable AUR publishing by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5571](https://redirect.github.com/fluxcd/flux2/pull/5571)\n\n**Full Changelog**: \n\n### [`v2.7.0`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.0)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.6.4...v2.7.0)\n\n#### Highlights\n\nFlux v2.7.0 is a feature release. Users are encouraged to upgrade for the best experience.\n\nFor a compressive overview of new features and API changes included in this release, please refer to the [Announcing Flux 2.7 GA blog post](https://fluxcd.io/blog/2025/09/flux-v2.7.0/).\n\nOverview of the new features:\n\n- General availability release of the Image Automation APIs (`ImagePolicy`, `ImageRepository`, `ImageUpdateAutomation`)\n- Watch for changes in ConfigMaps and Secrets references (`Kustomization`, `HelmRelease`)\n- Support for remote cluster authentication using Workload Identity (`Kustomization`, `HelmRelease`)\n- Extend the readiness evaluation of dependencies with CEL expressions (`Kustomization`, `HelmRelease`)\n- Support for global SOPS Age decryption keys on single-tenant clusters (`Kustomization`)\n- Support for optional Kustomize components (`Kustomization`)\n- Introduce `RetryOnFailure` lifecycle management strategy (`HelmRelease`)\n- Support mTLS for sending alerts to external systems (`Provider`)\n- Object-level workload identity authentication (`Bucket`, `Provider`)\n- Support mTLS for GitHub App transport (`GitRepository`, `ImageUpdateAutomation`, `Provider`)\n- OpenTelemetry tracing for `Kustomization` and `HelmRelease` reconciliation (`Provider`)\n- Support for 3rd-party source controllers (`ExternalArtifact`)\n- Support for source composition and decomposition patterns (`ArtifactGenerator`)\n- `CancelHealthCheckOnNewRevision` feature gate (kustomize-controller)\n- `GitSparseCheckout` feature gate (image-automation-controller)\n\n\u2764\ufe0f Big thanks to all the Flux contributors that helped us with this release!\n\n##### Kubernetes compatibility\n\nThis release is compatible with the following Kubernetes versions:\n\n| Kubernetes version | Minimum required |\n| ------------------ | ---------------- |\n| `v1.32` | `>= 1.32.0` |\n| `v1.33` | `>= 1.33.0` |\n| `v1.34` | `>= 1.34.1` |\n\n> \\[!NOTE]\n> Note that the Flux project offers support only for the latest three minor versions of Kubernetes.\n> Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as\n> [ControlPlane](https://control-plane.io/enterprise-for-flux-cd/) that provide enterprise support for Flux.\n\n##### OpenShift compatibility\n\nFlux can be installed on Red Hat OpenShift cluster directly from OperatorHub using [Flux Operator](https://operatorhub.io/operator/flux-operator). The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.\n\n#### Upgrade procedure\n\n:warning: The Flux APIs `v1beta1` and `v2beta1` (deprecated in 2023) have reached end-of-life and have been removed from the CRDs.\n\nUnless you are using [Flux Operator](https://redirect.github.com/controlplaneio-fluxcd/flux-operator) to deploy the Flux controllers, you must run the `flux migrate` command on clusters before upgrading.\n\nFor more details, please refer to the [Flux v2.7 upgrade guide](https://fluxcd.io/blog/2025/09/flux-v2.7.0/#upgrade-procedure).\n\n#### Components changelog\n\n- source-controller [v1.7.0](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.0/CHANGELOG.md)\n- kustomize-controller [v1.7.0](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.7.0/CHANGELOG.md)\n- notification-controller [v1.7.0](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.0/CHANGELOG.md) [v1.7.1](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.1/CHANGELOG.md)\n- helm-controller [v1.4.0](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.0/CHANGELOG.md)\n- image-reflector-controller [v1.0.0](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.0/CHANGELOG.md) [v1.0.1](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.1/CHANGELOG.md)\n- image-automation-controller [v1.0.0](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.0/CHANGELOG.md) [v1.0.1](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.1/CHANGELOG.md)\n- source-watcher [v2.0.0](https://redirect.github.com/fluxcd/source-watcher/blob/v2.0.0/CHANGELOG.md) [v2.0.1](https://redirect.github.com/fluxcd/source-watcher/blob/v1.0.1/CHANGELOG.md)\n\n##### New Documentation\n\n- [ImageRepository v1 specification](https://fluxcd.io/flux/components/image/imagerepositories)\n- [ImagePolicy v1 specification](https://fluxcd.io/flux/components/image/imagepolicies)\n- [ImageUpdateAutomation v1 specification](https://fluxcd.io/flux/components/image/imageupdateautomations)\n- [ExternalArtifact v1 specification](https://fluxcd.io/flux/components/source/externalartifacts)\n- [ArtifactGenerator v1beta1 specification](https://fluxcd.io/flux/components/source/artifactgenerators)\n\n#### CLI changelog\n\n- Add backport label for `v2.6.x` by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5379](https://redirect.github.com/fluxcd/flux2/pull/5379)\n- Update image-reflector-controller to v0.35.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5381](https://redirect.github.com/fluxcd/flux2/pull/5381)\n- Add digest pinning to image automation testing by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5383](https://redirect.github.com/fluxcd/flux2/pull/5383)\n- correct small typo by [@​JIbald](https://redirect.github.com/JIbald) in [#​5388](https://redirect.github.com/fluxcd/flux2/pull/5388)\n- Remove credentials sync manifests by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5347](https://redirect.github.com/fluxcd/flux2/pull/5347)\n- Add sparse checkout to cli by [@​ba-work](https://redirect.github.com/ba-work) in [#​5389](https://redirect.github.com/fluxcd/flux2/pull/5389)\n- fix: Allow Azure CLI calls in `flux push artifact --provider azure` on DevOps runners by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5390](https://redirect.github.com/fluxcd/flux2/pull/5390)\n- Fix `knownhosts key mismatch` regression bug by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5404](https://redirect.github.com/fluxcd/flux2/pull/5404)\n- refactor: Use `normalize.UnstructuredList` instead of `ssa.SetNativeKindsDefaults` by [@​cappyzawa](https://redirect.github.com/cappyzawa) in [#​5407](https://redirect.github.com/fluxcd/flux2/pull/5407)\n- Make service-account name configurable in `flux create tenant` by [@​reiSh6phoo9o](https://redirect.github.com/reiSh6phoo9o) in [#​5402](https://redirect.github.com/fluxcd/flux2/pull/5402)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5409](https://redirect.github.com/fluxcd/flux2/pull/5409)\n- refactor: cleanup GetArtifactRegistryCredentials error handling by [@​cappyzawa](https://redirect.github.com/cappyzawa) in [#​5418](https://redirect.github.com/fluxcd/flux2/pull/5418)\n- Promote image CLI commands to stable by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5421](https://redirect.github.com/fluxcd/flux2/pull/5421)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5426](https://redirect.github.com/fluxcd/flux2/pull/5426)\n- Bump pkg/ssa to v0.49.0 for CABundle validation fix by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5431](https://redirect.github.com/fluxcd/flux2/pull/5431)\n- \\[RFC-0010] Add workload identity support for remote clusters by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5434](https://redirect.github.com/fluxcd/flux2/pull/5434)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5443](https://redirect.github.com/fluxcd/flux2/pull/5443)\n- Fix `flux push artifact` for insecure registries by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5449](https://redirect.github.com/fluxcd/flux2/pull/5449)\n- \\[RFC-0010] Add workload identity support for remote generic clusters by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5452](https://redirect.github.com/fluxcd/flux2/pull/5452)\n- Fix `flux diff kustomization` ignore patterns by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5451](https://redirect.github.com/fluxcd/flux2/pull/5451)\n- Update dependencies to Kubernetes 1.33.2 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5453](https://redirect.github.com/fluxcd/flux2/pull/5453)\n- build(deps): bump the ci group across 1 directory with 7 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5435](https://redirect.github.com/fluxcd/flux2/pull/5435)\n- Upgrade fluxcd/pkg dependencies by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5455](https://redirect.github.com/fluxcd/flux2/pull/5455)\n- ci: Use GITHUB\\_TOKEN for API calls in update workflow by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5460](https://redirect.github.com/fluxcd/flux2/pull/5460)\n- manifests: Add `app.kubernetes.io/part-of: flux` label to controller pods by [@​pinkavaj](https://redirect.github.com/pinkavaj) in [#​5440](https://redirect.github.com/fluxcd/flux2/pull/5440)\n- Migrate sourcesecret package to runtime/secrets APIs by [@​cappyzawa](https://redirect.github.com/cappyzawa) in [#​5462](https://redirect.github.com/fluxcd/flux2/pull/5462)\n- Implement `flux migrate` command by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5473](https://redirect.github.com/fluxcd/flux2/pull/5473)\n- \\[RFC-0007] Implementation history update by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5480](https://redirect.github.com/fluxcd/flux2/pull/5480)\n- Run conformance tests for Kubernetes 1.34.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5497](https://redirect.github.com/fluxcd/flux2/pull/5497)\n- Update to Kubernetes v1.34.0 and Go 1.25.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5499](https://redirect.github.com/fluxcd/flux2/pull/5499)\n- build(deps): bump the ci group across 1 directory with 10 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5500](https://redirect.github.com/fluxcd/flux2/pull/5500)\n- Allow the Go runtime to dynamically set `GOMAXPROCS` by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5501](https://redirect.github.com/fluxcd/flux2/pull/5501)\n- fix(events): respect `--all-namespaces` flag by [@​mohiuddin-khan-shiam](https://redirect.github.com/mohiuddin-khan-shiam) in [#​5414](https://redirect.github.com/fluxcd/flux2/pull/5414)\n- \\[RFC-0011] OpenTelemetry Tracing by [@​adri1197](https://redirect.github.com/adri1197) in [#​5321](https://redirect.github.com/fluxcd/flux2/pull/5321)\n- \\[RFC-0012] External Artifact API by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5292](https://redirect.github.com/fluxcd/flux2/pull/5292)\n- Add `--show-history` flag to `debug helmrelease` by [@​hawkaii](https://redirect.github.com/hawkaii) in [#​5505](https://redirect.github.com/fluxcd/flux2/pull/5505)\n- Skip release candidates on updates by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5507](https://redirect.github.com/fluxcd/flux2/pull/5507)\n- ci: Align azure e2e tests secret names with fluxcd/pkg by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5508](https://redirect.github.com/fluxcd/flux2/pull/5508)\n- Update image-reflector-controller to v1.0.0 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5517](https://redirect.github.com/fluxcd/flux2/pull/5517)\n- Update source-controller to v1.7.0 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5518](https://redirect.github.com/fluxcd/flux2/pull/5518)\n- Add the source-watcher controller to the Flux distribution by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5519](https://redirect.github.com/fluxcd/flux2/pull/5519)\n- Add read-only commands for `ArtifactGenerator` kind by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5520](https://redirect.github.com/fluxcd/flux2/pull/5520)\n- ci: Add source-watcher to the update workflow by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5521](https://redirect.github.com/fluxcd/flux2/pull/5521)\n- Update image-automation-controller to v1.0.0 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5522](https://redirect.github.com/fluxcd/flux2/pull/5522)\n- Update image-reflector-controller to v1.0.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5525](https://redirect.github.com/fluxcd/flux2/pull/5525)\n- Implement `flux [reconcile|suspend|resume] image policy` commands by [@​lukas8219](https://redirect.github.com/lukas8219) in [#​5492](https://redirect.github.com/fluxcd/flux2/pull/5492)\n- Handle `force: enabled` annotation in `flux diff ks` command by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5528](https://redirect.github.com/fluxcd/flux2/pull/5528)\n- ci: Refactor CI with `fluxcd/gha-workflows` by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5529](https://redirect.github.com/fluxcd/flux2/pull/5529)\n- Remove `ArtifactGenerators` during uninstall by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5531](https://redirect.github.com/fluxcd/flux2/pull/5531)\n- Add support for `ExternalArtifact` to `flux trace` by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5532](https://redirect.github.com/fluxcd/flux2/pull/5532)\n- Set Kubernetes 1.32 as min supported version by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5533](https://redirect.github.com/fluxcd/flux2/pull/5533)\n- build(deps): bump the ci group with 6 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5535](https://redirect.github.com/fluxcd/flux2/pull/5535)\n- Add support for custom storage namespace in HelmRelease creation by [@​prasad89](https://redirect.github.com/prasad89) in [#​5534](https://redirect.github.com/fluxcd/flux2/pull/5534)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5537](https://redirect.github.com/fluxcd/flux2/pull/5537)\n- ci: remove cron schedule from update by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5539](https://redirect.github.com/fluxcd/flux2/pull/5539)\n- Update source-watcher to v2.0.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5540](https://redirect.github.com/fluxcd/flux2/pull/5540)\n- Add `--show-history` flag to `debug kustomization` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5541](https://redirect.github.com/fluxcd/flux2/pull/5541)\n- Update image-automation-controller to v1.0.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5542](https://redirect.github.com/fluxcd/flux2/pull/5542)\n- `fluxcd/flux2/action`: Determine late\n\n> \u2702 **Note**\n> \n> PR body was truncated to here.\n\n\n
\n\n---\n\n### Configuration\n\n\ud83d\udcc5 **Schedule**: (UTC)\n\n- Branch creation\n - At any time (no schedule defined)\n- Automerge\n - At any time (no schedule defined)\n\n\ud83d\udea6 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.\n\n\u267b **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.\n\n\ud83d\udd15 **Ignore**: Close this PR and you won't be reminded about this update again.\n\n---\n\n - [ ] If you want to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/vexxhost/atmosphere.common).\n\n", "change_url": "https://github.com/vexxhost/atmosphere.common/pull/102", "commit_id": "f714cae425e326d180564d27c7d00831897a7465", "patchset": "f714cae425e326d180564d27c7d00831897a7465", "project": { "canonical_hostname": "github.com", "canonical_name": "github.com/vexxhost/atmosphere.common", "name": "vexxhost/atmosphere.common", "short_name": "atmosphere.common", "src_dir": "src/github.com/vexxhost/atmosphere.common" }, "topic": null } ], "collections_path": "/home/zuul/.ansible/collections", "executable": "uv", "project_dir": "src/github.com/vexxhost/atmosphere.common", "projects": [ { "canonical_hostname": "github.com", "canonical_name": "github.com/vexxhost/atmosphere.common", "checkout": "main", "checkout_description": "zuul branch", "commit": "e2f6de47d9559610d92ce2fe38dd69339127299b", "name": "vexxhost/atmosphere.common", "required": false, "short_name": "atmosphere.common", "src_dir": "src/github.com/vexxhost/atmosphere.common" } ], "workspace_dir": "/home/zuul" } }, "log": [ "Skipping kubernetes.core: no checked-out sibling", "Skipping vexxhost.kubernetes: no checked-out sibling" ], "msg": "Skipping kubernetes.core: no checked-out sibling\nSkipping vexxhost.kubernetes: no checked-out sibling" } }, "task": { "duration": { "end": "2026-05-20T12:55:01.815694Z", "start": "2026-05-20T12:55:01.397693Z" }, "id": "0242ac17-0010-22e1-ce8a-00000000000a", "name": "Install Ansible collection siblings" } } ] } ], "stats": { "controller": { "changed": 2, "failures": 0, "ignored": 0, "ok": 3, "rescued": 0, "skipped": 0, "unreachable": 0 } }, "trusted": false }, { "branch": "main", "index": "0", "phase": "run", "playbook": "github.com/vexxhost/zuul-jobs/playbooks/molecule/run.yaml", "plays": [ { "play": { "duration": { "end": "2026-05-20T12:59:43.090276Z", "start": "2026-05-20T12:55:02.528451Z" }, "id": "0242ac17-0010-1c29-b4f2-000000000002", "name": "all" }, "tasks": [ { "hosts": { "controller": { "action": "ansible.builtin.copy", "changed": true, "checksum": "0a24cc0796c88870e53be5e81172463cc90da5d1", "dest": "src/github.com/vexxhost/atmosphere.common/inventory.yaml", "diff": [], "gid": 1000, "group": "zuul", "invocation": { "module_args": { "_original_basename": "inventory.yaml", "attributes": null, "backup": false, "checksum": "0a24cc0796c88870e53be5e81172463cc90da5d1", "content": null, "dest": "src/github.com/vexxhost/atmosphere.common", "directory_mode": null, "follow": false, "force": true, "group": null, "local_follow": null, "mode": 420, "owner": null, "remote_src": null, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1779281702.5859036-5-35924171585063/source", "unsafe_writes": false, "validate": null } }, "md5sum": "0ffa1d9843d39fa9b1579ef7cb704d12", "mode": "0644", "owner": "zuul", "size": 349825, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1779281702.5859036-5-35924171585063/source", "state": "file", "uid": 1000 } }, "task": { "duration": { "end": "2026-05-20T12:55:03.509518Z", "start": "2026-05-20T12:55:02.540192Z" }, "id": "0242ac17-0010-1c29-b4f2-000000000004", "name": "Copy inventory file for Zuul" } }, { "hosts": { "controller": { "action": "ansible.builtin.replace", "changed": true, "invocation": { "module_args": { "after": null, "attributes": null, "backup": false, "before": null, "encoding": "utf-8", "group": null, "mode": null, "owner": null, "path": "src/github.com/vexxhost/atmosphere.common/inventory.yaml", "regexp": "(^\\s*ansible_host:\\s*).*$", "replace": "\\1\"{{ nodepool.private_ipv4 }}\"", "selevel": null, "serole": null, "setype": null, "seuser": null, "unsafe_writes": false, "validate": null } }, "msg": "1 replacements made", "rc": 0 } }, "task": { "duration": { "end": "2026-05-20T12:55:03.866333Z", "start": "2026-05-20T12:55:03.514924Z" }, "id": "0242ac17-0010-1c29-b4f2-000000000005", "name": "Switch \"ansible_host\" to private IP" } }, { "hosts": { "controller": { "action": "ansible.builtin.command", "changed": true, "cmd": [ "uv", "run", "molecule", "test", "--destroy", "never", "-s", "secretgen-controller" ], "delta": "0:04:39.779170", "end": "2026-05-20 12:59:43.029185", "invocation": { "module_args": { "_raw_params": "uv run molecule test --destroy never -s secretgen-controller", "_uses_shell": false, "argv": null, "chdir": "src/github.com/vexxhost/atmosphere.common", "creates": null, "executable": null, "expand_argument_vars": true, "removes": null, "stdin": null, "stdin_add_newline": true, "strip_empty_ends": true, "zuul_ansible_split_streams": false, "zuul_log_id": "0242ac17-0010-1c29-b4f2-000000000006-1-controller", "zuul_no_log": false, "zuul_output_max_bytes": 1073741824 } }, "msg": "", "rc": 0, "start": "2026-05-20 12:55:03.250015", "stderr": "", "stderr_lines": [], "stdout": "Using CPython 3.12.3 interpreter at: /usr/bin/python3\nCreating virtual environment at: .venv\nwarning: No `requires-python` value found in the workspace. Defaulting to `>=3.12`.\nDownloading pygments (1.2MiB)\nDownloading kubernetes (1.9MiB)\nDownloading cryptography (4.3MiB)\nDownloading ansible-core (2.3MiB)\n Downloading cryptography\n Downloading pygments\n Downloading kubernetes\n Downloading ansible-core\nInstalled 47 packages in 43ms\nINFO Collection 'atmosphere.common' detected.\nINFO Scenarios will be used from 'extensions/molecule'\nINFO [secretgen-controller > discovery] scenario test matrix: dependency, cleanup, destroy, syntax, create, prepare, converge, idempotence, side_effect, verify, cleanup, destroy\nINFO [secretgen-controller > prerun] Performing prerun with role_name_check=0...\nINFO [secretgen-controller > dependency] Executing\nWARNING [secretgen-controller > dependency] Missing roles requirements file: requirements.yml\nWARNING [secretgen-controller > dependency] Missing collections requirements file: collections.yml\nWARNING [secretgen-controller > dependency] Executed: 2 missing (Remove from test_sequence to suppress)\nINFO [secretgen-controller > cleanup] Executing\nWARNING [secretgen-controller > cleanup] Executed: Missing playbook (Remove from test_sequence to suppress)\nINFO [secretgen-controller > destroy] Executing\nWARNING [secretgen-controller > destroy] Skipping, '--destroy=never' requested.\nINFO [secretgen-controller > destroy] Executed: Successful\nINFO [secretgen-controller > syntax] Executing\n\nplaybook: /home/zuul/src/github.com/vexxhost/atmosphere.common/extensions/molecule/secretgen-controller/converge.yml\nINFO [secretgen-controller > syntax] Executed: Successful\nINFO [secretgen-controller > create] Executing\nWARNING [secretgen-controller > create] Executed: Missing playbook (Remove from test_sequence to suppress)\nINFO [secretgen-controller > prepare] Executing\n\nPLAY [Prepare] *****************************************************************\n\nTASK [Gathering Facts] *********************************************************\nWednesday 20 May 2026 12:55:29 +0000 (0:00:00.032) 0:00:00.032 *********\n[WARNING]: Host 'controller' is using the discovered Python interpreter at '/usr/bin/python3.12', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.19/reference_appendices/interpreter_discovery.html for more information.\nok: [controller]\n\nTASK [Install Debian packages] *************************************************\nWednesday 20 May 2026 12:55:30 +0000 (0:00:01.416) 0:00:01.448 *********\nok: [controller]\n\nPLAY [Configure Kubernetes VIP] ************************************************\n\nTASK [Gathering Facts] *********************************************************\nWednesday 20 May 2026 12:55:37 +0000 (0:00:06.965) 0:00:08.413 *********\nok: [controller]\n\nTASK [vexxhost.containers.directory : Create directory (/etc/kubernetes/manifests)] ***\nWednesday 20 May 2026 12:55:38 +0000 (0:00:00.880) 0:00:09.294 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kube_vip : Uninstall legacy HA stack] ****************\nWednesday 20 May 2026 12:55:38 +0000 (0:00:00.479) 0:00:09.773 *********\nok: [controller] => (item=/etc/keepalived/keepalived.conf)\nok: [controller] => (item=/etc/keepalived/check_apiserver.sh)\nok: [controller] => (item=/etc/kubernetes/manifests/keepalived.yaml)\nok: [controller] => (item=/etc/haproxy/haproxy.cfg)\nok: [controller] => (item=/etc/kubernetes/manifests/haproxy.yaml)\n\nTASK [vexxhost.kubernetes.kube_vip : Switch API server to run on port 6443] ****\nWednesday 20 May 2026 12:55:40 +0000 (0:00:01.540) 0:00:11.314 *********\n[ERROR]: Task failed: Module failed: Path /etc/kubernetes/manifests/kube-apiserver.yaml does not exist !\nOrigin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kube_vip/tasks/main.yml:32:3\n\n30 - Restart \"kubelet\" service\n31\n32 - name: Switch API server to run on port 6443\n ^ column 3\n\nfailed: [controller] (item=/etc/kubernetes/manifests/kube-apiserver.yaml) => {\"ansible_loop_var\": \"item\", \"changed\": false, \"item\": \"/etc/kubernetes/manifests/kube-apiserver.yaml\", \"msg\": \"Path /etc/kubernetes/manifests/kube-apiserver.yaml does not exist !\", \"rc\": 257}\n[ERROR]: Task failed: Module failed: Path /etc/kubernetes/controller-manager.conf does not exist !\nOrigin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kube_vip/tasks/main.yml:32:3\n\n30 - Restart \"kubelet\" service\n31\n32 - name: Switch API server to run on port 6443\n ^ column 3\n\nfailed: [controller] (item=/etc/kubernetes/controller-manager.conf) => {\"ansible_loop_var\": \"item\", \"changed\": false, \"item\": \"/etc/kubernetes/controller-manager.conf\", \"msg\": \"Path /etc/kubernetes/controller-manager.conf does not exist !\", \"rc\": 257}\n[ERROR]: Task failed: Module failed: Path /etc/kubernetes/scheduler.conf does not exist !\nOrigin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kube_vip/tasks/main.yml:32:3\n\n30 - Restart \"kubelet\" service\n31\n32 - name: Switch API server to run on port 6443\n ^ column 3\n\nfailed: [controller] (item=/etc/kubernetes/scheduler.conf) => {\"ansible_loop_var\": \"item\", \"changed\": false, \"item\": \"/etc/kubernetes/scheduler.conf\", \"msg\": \"Path /etc/kubernetes/scheduler.conf does not exist !\", \"rc\": 257}\n...ignoring\n\nTASK [vexxhost.kubernetes.kube_vip : Check if super-admin.conf exists] *********\nWednesday 20 May 2026 12:55:41 +0000 (0:00:01.041) 0:00:12.355 *********\nok: [controller]\n\nTASK [vexxhost.kubernetes.kube_vip : Check if kubeadm has already run] *********\nWednesday 20 May 2026 12:55:41 +0000 (0:00:00.461) 0:00:12.817 *********\nok: [controller]\n\nTASK [vexxhost.kubernetes.kube_vip : Set fact with KUBECONFIG path] ************\nWednesday 20 May 2026 12:55:42 +0000 (0:00:00.317) 0:00:13.134 *********\nok: [controller]\n\nTASK [vexxhost.kubernetes.kube_vip : Set fact with KUBECONFIG path (with super-admin.conf)] ***\nWednesday 20 May 2026 12:55:42 +0000 (0:00:00.034) 0:00:13.169 *********\nok: [controller]\n\nTASK [vexxhost.kubernetes.kube_vip : Upload Kubernetes manifest] ***************\nWednesday 20 May 2026 12:55:42 +0000 (0:00:00.043) 0:00:13.212 *********\nok: [controller]\n\nTASK [vexxhost.kubernetes.kube_vip : Ensure kube-vip configuration file] *******\nWednesday 20 May 2026 12:55:43 +0000 (0:00:01.009) 0:00:14.222 *********\nok: [controller]\n\nTASK [vexxhost.kubernetes.kube_vip : Flush handlers] ***************************\nWednesday 20 May 2026 12:55:43 +0000 (0:00:00.344) 0:00:14.566 *********\n\nPLAY [Install Kubernetes] ******************************************************\n\nTASK [Gathering Facts] *********************************************************\nWednesday 20 May 2026 12:55:43 +0000 (0:00:00.049) 0:00:14.616 *********\nok: [controller]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nWednesday 20 May 2026 12:55:44 +0000 (0:00:00.919) 0:00:15.536 *********\nok: [controller]\n\nTASK [vexxhost.containers.package : Update state for tar] **********************\nWednesday 20 May 2026 12:55:44 +0000 (0:00:00.396) 0:00:15.932 *********\nskipping: [controller]\n\nTASK [vexxhost.containers.directory : Create directory (/var/lib/downloads)] ***\nWednesday 20 May 2026 12:55:44 +0000 (0:00:00.030) 0:00:15.963 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nWednesday 20 May 2026 12:55:45 +0000 (0:00:00.355) 0:00:16.318 *********\nok: [controller] => {\n \"msg\": \"https://github.com/opencontainers/runc/releases/download/v1.4.2/runc.amd64\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nWednesday 20 May 2026 12:55:45 +0000 (0:00:00.080) 0:00:16.399 *********\n[WARNING]: Module remote_tmp /root/.ansible/tmp did not exist and was created with a mode of 0700, this may cause issues when running as another user. To avoid this, create the remote_tmp dir with the correct permissions manually\nchanged: [controller]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nWednesday 20 May 2026 12:55:46 +0000 (0:00:00.831) 0:00:17.230 *********\nskipping: [controller]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nWednesday 20 May 2026 12:55:46 +0000 (0:00:00.036) 0:00:17.266 *********\nok: [controller]\n\nTASK [vexxhost.containers.package : Update state for tar] **********************\nWednesday 20 May 2026 12:55:46 +0000 (0:00:00.323) 0:00:17.589 *********\nok: [controller]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nWednesday 20 May 2026 12:55:47 +0000 (0:00:01.231) 0:00:18.820 *********\nok: [controller] => {\n \"msg\": \"https://github.com/containerd/containerd/releases/download/v2.2.3/containerd-2.2.3-linux-amd64.tar.gz\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nWednesday 20 May 2026 12:55:47 +0000 (0:00:00.072) 0:00:18.893 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nWednesday 20 May 2026 12:55:48 +0000 (0:00:00.992) 0:00:19.886 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.containerd : Install SELinux packages] ***************\nWednesday 20 May 2026 12:55:52 +0000 (0:00:03.304) 0:00:23.190 *********\nskipping: [controller]\n\nTASK [vexxhost.containers.containerd : Set SELinux to permissive at runtime] ***\nWednesday 20 May 2026 12:55:52 +0000 (0:00:00.029) 0:00:23.220 *********\nskipping: [controller]\n\nTASK [vexxhost.containers.containerd : Persist SELinux permissive mode] ********\nWednesday 20 May 2026 12:55:52 +0000 (0:00:00.035) 0:00:23.256 *********\nskipping: [controller]\n\nTASK [vexxhost.containers.containerd : Install AppArmor packages] **************\nWednesday 20 May 2026 12:55:52 +0000 (0:00:00.034) 0:00:23.290 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.containerd : Create systemd service file for containerd] ***\nWednesday 20 May 2026 12:56:00 +0000 (0:00:08.473) 0:00:31.763 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.containerd : Create folders for configuration] *******\nWednesday 20 May 2026 12:56:01 +0000 (0:00:00.717) 0:00:32.481 *********\nchanged: [controller] => (item={'path': '/etc/containerd'})\nchanged: [controller] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})\nchanged: [controller] => (item={'path': '/run/containerd', 'mode': '0o711'})\nchanged: [controller] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})\nchanged: [controller] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})\n\nTASK [vexxhost.containers.containerd : Create containerd config file] **********\nWednesday 20 May 2026 12:56:02 +0000 (0:00:01.477) 0:00:33.958 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.containerd : Force any restarts if necessary] ********\nWednesday 20 May 2026 12:56:03 +0000 (0:00:00.837) 0:00:34.795 *********\n\nRUNNING HANDLER [vexxhost.containers.containerd : Restart containerd] **********\nWednesday 20 May 2026 12:56:03 +0000 (0:00:00.005) 0:00:34.801 *********\nchanged: [controller]\n\nRUNNING HANDLER [vexxhost.kubernetes.kubelet : Reload systemd] *****************\nWednesday 20 May 2026 12:56:04 +0000 (0:00:00.931) 0:00:35.732 *********\nok: [controller]\n\nTASK [vexxhost.containers.containerd : Enable and start service] ***************\nWednesday 20 May 2026 12:56:05 +0000 (0:00:00.992) 0:00:36.725 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes_upgrade_check : Retrieve the \"kubeadm-config\" ConfigMap] ***\nWednesday 20 May 2026 12:56:06 +0000 (0:00:00.761) 0:00:37.486 *********\n[ERROR]: Task failed: Module failed: Failed to import the required Python library (kubernetes) on np0000175361's Python /usr/bin/python3.12. Please read the module documentation and install it in the appropriate location. If the required library is installed, but Ansible is using the wrong Python interpreter, please consult the documentation on ansible_python_interpreter\nOrigin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubernetes_upgrade_check/tasks/main.yml:16:3\n\n14\n15 ---\n16 - name: Retrieve the \"kubeadm-config\" ConfigMap\n ^ column 3\n\nfatal: [controller]: FAILED! => {\"changed\": false, \"msg\": \"Failed to import the required Python library (kubernetes) on np0000175361's Python /usr/bin/python3.12. Please read the module documentation and install it in the appropriate location. If the required library is installed, but Ansible is using the wrong Python interpreter, please consult the documentation on ansible_python_interpreter\"}\n...ignoring\n\nTASK [vexxhost.kubernetes.kubernetes_upgrade_check : Parse the ClusterConfiguration] ***\nWednesday 20 May 2026 12:56:07 +0000 (0:00:00.732) 0:00:38.218 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes_upgrade_check : Retrieve the current Kubernetes version] ***\nWednesday 20 May 2026 12:56:07 +0000 (0:00:00.032) 0:00:38.250 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes_upgrade_check : Extract major, minor, and patch versions] ***\nWednesday 20 May 2026 12:56:07 +0000 (0:00:00.034) 0:00:38.285 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes_upgrade_check : Fail if we're jumping more than one minor version] ***\nWednesday 20 May 2026 12:56:07 +0000 (0:00:00.034) 0:00:38.319 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes_upgrade_check : Set fact if we need to upgrade] ***\nWednesday 20 May 2026 12:56:07 +0000 (0:00:00.029) 0:00:38.349 *********\nskipping: [controller]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nWednesday 20 May 2026 12:56:07 +0000 (0:00:00.031) 0:00:38.381 *********\nok: [controller]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nWednesday 20 May 2026 12:56:07 +0000 (0:00:00.355) 0:00:38.736 *********\nok: [controller] => {\n \"msg\": \"https://dl.k8s.io/release/v1.28.13/bin/linux/amd64/kubeadm\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nWednesday 20 May 2026 12:56:07 +0000 (0:00:00.044) 0:00:38.781 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nWednesday 20 May 2026 12:56:11 +0000 (0:00:03.729) 0:00:42.510 *********\nskipping: [controller]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nWednesday 20 May 2026 12:56:11 +0000 (0:00:00.037) 0:00:42.548 *********\nok: [controller]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nWednesday 20 May 2026 12:56:11 +0000 (0:00:00.317) 0:00:42.865 *********\nok: [controller] => {\n \"msg\": \"https://dl.k8s.io/release/v1.28.13/bin/linux/amd64/kubectl\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nWednesday 20 May 2026 12:56:11 +0000 (0:00:00.042) 0:00:42.908 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nWednesday 20 May 2026 12:56:13 +0000 (0:00:01.132) 0:00:44.041 *********\nskipping: [controller]\n\nTASK [vexxhost.containers.containerd : Install SELinux packages] ***************\nWednesday 20 May 2026 12:56:13 +0000 (0:00:00.041) 0:00:44.082 *********\nskipping: [controller]\n\nTASK [vexxhost.containers.containerd : Set SELinux to permissive at runtime] ***\nWednesday 20 May 2026 12:56:13 +0000 (0:00:00.026) 0:00:44.109 *********\nskipping: [controller]\n\nTASK [vexxhost.containers.containerd : Persist SELinux permissive mode] ********\nWednesday 20 May 2026 12:56:13 +0000 (0:00:00.030) 0:00:44.140 *********\nskipping: [controller]\n\nTASK [vexxhost.containers.containerd : Install AppArmor packages] **************\nWednesday 20 May 2026 12:56:13 +0000 (0:00:00.027) 0:00:44.168 *********\nok: [controller]\n\nTASK [vexxhost.containers.containerd : Create systemd service file for containerd] ***\nWednesday 20 May 2026 12:56:14 +0000 (0:00:01.121) 0:00:45.289 *********\nok: [controller]\n\nTASK [vexxhost.containers.containerd : Create folders for configuration] *******\nWednesday 20 May 2026 12:56:14 +0000 (0:00:00.688) 0:00:45.978 *********\nok: [controller] => (item={'path': '/etc/containerd'})\nok: [controller] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})\nok: [controller] => (item={'path': '/run/containerd', 'mode': '0o711'})\nok: [controller] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})\nok: [controller] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})\n\nTASK [vexxhost.containers.containerd : Create containerd config file] **********\nWednesday 20 May 2026 12:56:16 +0000 (0:00:01.517) 0:00:47.495 *********\nok: [controller]\n\nTASK [vexxhost.containers.containerd : Force any restarts if necessary] ********\nWednesday 20 May 2026 12:56:17 +0000 (0:00:00.803) 0:00:48.298 *********\n\nTASK [vexxhost.containers.containerd : Enable and start service] ***************\nWednesday 20 May 2026 12:56:17 +0000 (0:00:00.004) 0:00:48.303 *********\nok: [controller]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nWednesday 20 May 2026 12:56:17 +0000 (0:00:00.492) 0:00:48.795 *********\nok: [controller]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nWednesday 20 May 2026 12:56:18 +0000 (0:00:00.338) 0:00:49.134 *********\nok: [controller] => {\n \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.35.0/crictl-v1.35.0-linux-amd64.tar.gz\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nWednesday 20 May 2026 12:56:18 +0000 (0:00:00.059) 0:00:49.193 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nWednesday 20 May 2026 12:56:18 +0000 (0:00:00.823) 0:00:50.017 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nWednesday 20 May 2026 12:56:20 +0000 (0:00:01.695) 0:00:51.712 *********\nok: [controller] => {\n \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.35.0/critest-v1.35.0-linux-amd64.tar.gz\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nWednesday 20 May 2026 12:56:20 +0000 (0:00:00.069) 0:00:51.782 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nWednesday 20 May 2026 12:56:21 +0000 (0:00:01.055) 0:00:52.837 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.cri_tools : Create crictl config] ********************\nWednesday 20 May 2026 12:56:23 +0000 (0:00:01.696) 0:00:54.533 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.directory : Create directory (/opt/cni/bin)] *********\nWednesday 20 May 2026 12:56:24 +0000 (0:00:00.701) 0:00:55.235 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nWednesday 20 May 2026 12:56:24 +0000 (0:00:00.311) 0:00:55.546 *********\nok: [controller]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nWednesday 20 May 2026 12:56:24 +0000 (0:00:00.313) 0:00:55.860 *********\nok: [controller] => {\n \"msg\": \"https://github.com/containernetworking/plugins/releases/download/v1.9.1/cni-plugins-linux-amd64-v1.9.1.tgz\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nWednesday 20 May 2026 12:56:24 +0000 (0:00:00.059) 0:00:55.919 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nWednesday 20 May 2026 12:56:25 +0000 (0:00:01.067) 0:00:56.987 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.cni_plugins : Gather variables for each operating system] ***\nWednesday 20 May 2026 12:56:28 +0000 (0:00:03.015) 0:01:00.002 *********\nok: [controller] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/containers/roles/cni_plugins/vars/debian.yml)\n\nTASK [vexxhost.containers.cni_plugins : Install additional packages] ***********\nWednesday 20 May 2026 12:56:29 +0000 (0:00:00.050) 0:01:00.052 *********\nok: [controller]\n\nTASK [vexxhost.containers.cni_plugins : Ensure IPv6 is enabled] ****************\nWednesday 20 May 2026 12:56:30 +0000 (0:00:01.073) 0:01:01.126 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.cni_plugins : Enable kernel modules on-boot] *********\nWednesday 20 May 2026 12:56:30 +0000 (0:00:00.462) 0:01:01.589 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.cni_plugins : Enable kernel modules in runtime] ******\nWednesday 20 May 2026 12:56:31 +0000 (0:00:00.707) 0:01:02.296 *********\nchanged: [controller] => (item=br_netfilter)\nok: [controller] => (item=ip_tables)\nchanged: [controller] => (item=ip6_tables)\nchanged: [controller] => (item=nf_conntrack)\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nWednesday 20 May 2026 12:56:32 +0000 (0:00:01.395) 0:01:03.691 *********\nok: [controller]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nWednesday 20 May 2026 12:56:32 +0000 (0:00:00.327) 0:01:04.019 *********\nok: [controller] => {\n \"msg\": \"https://dl.k8s.io/release/v1.28.13/bin/linux/amd64/kubelet\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nWednesday 20 May 2026 12:56:33 +0000 (0:00:00.045) 0:01:04.064 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nWednesday 20 May 2026 12:56:34 +0000 (0:00:01.531) 0:01:05.595 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubelet : Gather variables for each operating system] ***\nWednesday 20 May 2026 12:56:34 +0000 (0:00:00.033) 0:01:05.629 *********\nok: [controller] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/vars/debian.yml)\n\nTASK [vexxhost.kubernetes.kubelet : Install coreutils] *************************\nWednesday 20 May 2026 12:56:34 +0000 (0:00:00.055) 0:01:05.684 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubelet : Install additional packages] ***************\nWednesday 20 May 2026 12:56:34 +0000 (0:00:00.033) 0:01:05.718 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kubelet : Configure sysctl values] *******************\nWednesday 20 May 2026 12:56:38 +0000 (0:00:03.629) 0:01:09.347 *********\nchanged: [controller] => (item={'name': 'net.ipv4.ip_forward', 'value': 1})\nchanged: [controller] => (item={'name': 'net.bridge.bridge-nf-call-iptables', 'value': 1})\nchanged: [controller] => (item={'name': 'net.bridge.bridge-nf-call-ip6tables', 'value': 1})\nchanged: [controller] => (item={'name': 'net.ipv4.conf.all.rp_filter', 'value': 0})\nchanged: [controller] => (item={'name': 'fs.inotify.max_queued_events', 'value': 1048576})\nchanged: [controller] => (item={'name': 'fs.inotify.max_user_instances', 'value': 8192})\nchanged: [controller] => (item={'name': 'fs.inotify.max_user_watches', 'value': 1048576})\n\nTASK [vexxhost.kubernetes.kubelet : Create folders for kubernetes configuration] ***\nWednesday 20 May 2026 12:56:40 +0000 (0:00:02.184) 0:01:11.532 *********\nchanged: [controller] => (item=/etc/systemd/system/kubelet.service.d)\nok: [controller] => (item=/etc/kubernetes)\nok: [controller] => (item=/etc/kubernetes/manifests)\n\nTASK [vexxhost.kubernetes.kubelet : Add kubelet systemd service config] ********\nWednesday 20 May 2026 12:56:41 +0000 (0:00:00.941) 0:01:12.474 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kubelet : Add kubeadm dropin for kubelet systemd service config] ***\nWednesday 20 May 2026 12:56:42 +0000 (0:00:00.723) 0:01:13.197 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kubelet : Check swap status] *************************\nWednesday 20 May 2026 12:56:42 +0000 (0:00:00.713) 0:01:13.910 *********\nok: [controller]\n\nTASK [vexxhost.kubernetes.kubelet : Disable swap] ******************************\nWednesday 20 May 2026 12:56:43 +0000 (0:00:00.465) 0:01:14.376 *********\n[ERROR]: Task failed: Conditional result was '' of type 'str', which evaluates to False. Conditionals must have a boolean result.\n\nTask failed.\nOrigin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:86:7\n\n84 register: kubelet_swapon\n85\n86 - name: Disable swap\n ^ column 7\n\n<<< caused by >>>\n\nConditional result was '' of type 'str', which evaluates to False. Conditionals must have a boolean result.\nOrigin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:91:11\n\n89 ignore_errors: \"{{ ansible_check_mode }}\"\n90 when:\n91 - kubelet_swapon.stdout\n ^ column 11\n\nBroken conditionals can be temporarily allowed with the `ALLOW_BROKEN_CONDITIONALS` configuration option.\n\nfatal: [controller]: FAILED! => {\"changed\": false, \"msg\": \"Task failed: Conditional result was '' of type 'str', which evaluates to False. Conditionals must have a boolean result.\"}\n...ignoring\n\nTASK [vexxhost.kubernetes.kubelet : Remove swapfile from /etc/fstab] ***********\nWednesday 20 May 2026 12:56:43 +0000 (0:00:00.030) 0:01:14.406 *********\nok: [controller] => (item=swap)\nok: [controller] => (item=none)\n\nTASK [vexxhost.kubernetes.kubelet : Create noswap systemd service config file] ***\nWednesday 20 May 2026 12:56:44 +0000 (0:00:00.740) 0:01:15.146 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kubelet : Enable noswap service] *********************\nWednesday 20 May 2026 12:56:44 +0000 (0:00:00.712) 0:01:15.859 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kubelet : Force any restarts if necessary] ***********\nWednesday 20 May 2026 12:56:45 +0000 (0:00:00.753) 0:01:16.612 *********\n\nRUNNING HANDLER [vexxhost.kubernetes.kubelet : Reload systemd] *****************\nWednesday 20 May 2026 12:56:45 +0000 (0:00:00.005) 0:01:16.617 *********\nok: [controller]\n\nTASK [vexxhost.kubernetes.kubelet : Enable and start kubelet service] **********\nWednesday 20 May 2026 12:56:46 +0000 (0:00:00.919) 0:01:17.537 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kubelet : Ensure availability of dbus on Debian] *****\nWednesday 20 May 2026 12:56:47 +0000 (0:00:00.787) 0:01:18.325 *********\nok: [controller]\n\nTASK [vexxhost.kubernetes.kubelet : Configure short hostname] ******************\nWednesday 20 May 2026 12:56:48 +0000 (0:00:01.048) 0:01:19.373 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kubelet : Ensure hostname inside hosts file] *********\nWednesday 20 May 2026 12:56:49 +0000 (0:00:00.888) 0:01:20.261 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Remove kubernetes repository] ***********\nWednesday 20 May 2026 12:56:49 +0000 (0:00:00.445) 0:01:20.707 *********\nok: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Setup control plane] ********************\nWednesday 20 May 2026 12:56:50 +0000 (0:00:00.616) 0:01:21.323 *********\nincluded: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubernetes/tasks/control-plane.yml for controller\n\nTASK [vexxhost.kubernetes.kubernetes : Bootstrap cluster] **********************\nWednesday 20 May 2026 12:56:50 +0000 (0:00:00.071) 0:01:21.394 *********\nincluded: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubernetes/tasks/bootstrap-cluster.yml for controller\n\nTASK [vexxhost.kubernetes.kubernetes : Check if any control plane is bootstrapped] ***\nWednesday 20 May 2026 12:56:50 +0000 (0:00:00.075) 0:01:21.469 *********\nok: [controller] => (item=controller)\n\nTASK [vexxhost.kubernetes.kubernetes : Pick node from pre-existing cluster] ****\nWednesday 20 May 2026 12:56:50 +0000 (0:00:00.311) 0:01:21.781 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Select first node to initialize cluster] ***\nWednesday 20 May 2026 12:56:50 +0000 (0:00:00.040) 0:01:21.822 *********\nok: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Print selected bootstrap node] **********\nWednesday 20 May 2026 12:56:50 +0000 (0:00:00.046) 0:01:21.868 *********\nok: [controller] => {\n \"msg\": \"controller\"\n}\n\nTASK [vexxhost.kubernetes.kubernetes : Upload cluster configuration for bootstrap node] ***\nWednesday 20 May 2026 12:56:50 +0000 (0:00:00.038) 0:01:21.907 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Create pki folder] **********************\nWednesday 20 May 2026 12:56:51 +0000 (0:00:00.733) 0:01:22.641 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Create kubernetes ca key] ***************\nWednesday 20 May 2026 12:56:51 +0000 (0:00:00.033) 0:01:22.674 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Create kubernetes ca cert] **************\nWednesday 20 May 2026 12:56:51 +0000 (0:00:00.027) 0:01:22.702 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Create etcd-ca key] *********************\nWednesday 20 May 2026 12:56:51 +0000 (0:00:00.025) 0:01:22.727 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Create etcd-ca cert] ********************\nWednesday 20 May 2026 12:56:51 +0000 (0:00:00.036) 0:01:22.764 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Create front-proxy-ca key] **************\nWednesday 20 May 2026 12:56:51 +0000 (0:00:00.034) 0:01:22.799 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Create front-proxy-ca cert] *************\nWednesday 20 May 2026 12:56:51 +0000 (0:00:00.034) 0:01:22.833 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Initialize cluster] *********************\nWednesday 20 May 2026 12:56:51 +0000 (0:00:00.032) 0:01:22.866 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Check if the node is already part of the cluster] ***\nWednesday 20 May 2026 12:57:38 +0000 (0:00:47.027) 0:02:09.893 *********\nok: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Join cluster] ***************************\nWednesday 20 May 2026 12:57:39 +0000 (0:00:00.353) 0:02:10.246 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Create folder for admin configuration] ***\nWednesday 20 May 2026 12:57:39 +0000 (0:00:00.027) 0:02:10.274 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Creating a symlink for admin configuration file] ***\nWednesday 20 May 2026 12:57:39 +0000 (0:00:00.313) 0:02:10.588 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Add bash autocomplete for kubectl] ******\nWednesday 20 May 2026 12:57:39 +0000 (0:00:00.315) 0:02:10.903 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Install PIP] ****************************\nWednesday 20 May 2026 12:57:40 +0000 (0:00:00.337) 0:02:11.241 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Install Kubernetes Python package using pip on supported systems] ***\nWednesday 20 May 2026 12:57:40 +0000 (0:00:00.038) 0:02:11.279 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Enable EPEL repository] *****************\nWednesday 20 May 2026 12:57:40 +0000 (0:00:00.037) 0:02:11.316 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Install Kubernetes Python package using package manager on supported systems] ***\nWednesday 20 May 2026 12:57:40 +0000 (0:00:00.036) 0:02:11.352 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Allow workload on control plane node] ***\nWednesday 20 May 2026 12:57:51 +0000 (0:00:10.851) 0:02:22.204 *********\n[WARNING]: kubernetes<24.2.0 is not supported or tested. Some features may not work.\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Remove kube-proxy resources] ************\nWednesday 20 May 2026 12:57:52 +0000 (0:00:01.110) 0:02:23.315 *********\nskipping: [controller] => (item=DaemonSet)\nskipping: [controller] => (item=ConfigMap)\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Start an upgrade] ***********************\nWednesday 20 May 2026 12:57:52 +0000 (0:00:00.042) 0:02:23.358 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Check if the Kubernetes API services is up to date] ***\nWednesday 20 May 2026 12:57:52 +0000 (0:00:00.038) 0:02:23.397 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Trigger an upgrade of the Kubernetes API services] ***\nWednesday 20 May 2026 12:57:52 +0000 (0:00:00.038) 0:02:23.436 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Setup nodes] ****************************\nWednesday 20 May 2026 12:57:52 +0000 (0:00:00.039) 0:02:23.475 *********\nskipping: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Upgrade & restart Kubelet node for upgrade (if needed)] ***\nWednesday 20 May 2026 12:57:52 +0000 (0:00:00.034) 0:02:23.510 *********\nok: [controller]\n\nTASK [vexxhost.kubernetes.kubernetes : Set node selector for CoreDNS components] ***\nWednesday 20 May 2026 12:57:53 +0000 (0:00:00.587) 0:02:24.097 *********\nchanged: [controller]\n\nPLAY [Install control-plane components] ****************************************\n\nTASK [Gathering Facts] *********************************************************\nWednesday 20 May 2026 12:57:54 +0000 (0:00:01.047) 0:02:25.144 *********\nok: [controller]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nWednesday 20 May 2026 12:57:54 +0000 (0:00:00.856) 0:02:26.001 *********\nok: [controller]\n\nTASK [vexxhost.containers.package : Update state for tar] **********************\nWednesday 20 May 2026 12:57:55 +0000 (0:00:00.322) 0:02:26.324 *********\nok: [controller]\n\nTASK [vexxhost.containers.directory : Create directory (/var/lib/downloads)] ***\nWednesday 20 May 2026 12:57:56 +0000 (0:00:01.039) 0:02:27.363 *********\nok: [controller]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nWednesday 20 May 2026 12:57:56 +0000 (0:00:00.347) 0:02:27.711 *********\nok: [controller] => {\n \"msg\": \"https://get.helm.sh/helm-v3.11.2-linux-amd64.tar.gz\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nWednesday 20 May 2026 12:57:56 +0000 (0:00:00.042) 0:02:27.754 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nWednesday 20 May 2026 12:57:57 +0000 (0:00:00.938) 0:02:28.693 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.helm : Remove Helm repository] ***********************\nWednesday 20 May 2026 12:57:59 +0000 (0:00:01.768) 0:02:30.461 *********\nok: [controller]\n\nTASK [vexxhost.kubernetes.helm : Add bash autocomplete for helm] ***************\nWednesday 20 May 2026 12:57:59 +0000 (0:00:00.459) 0:02:30.921 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.helm : Get Helm plugins dir] *************************\nWednesday 20 May 2026 12:58:00 +0000 (0:00:00.303) 0:02:31.224 *********\nok: [controller]\n\nTASK [vexxhost.kubernetes.helm : Create Helm plugins directory if it does not exist] ***\nWednesday 20 May 2026 12:58:00 +0000 (0:00:00.395) 0:02:31.620 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.helm : Remove Helm diff plugin installed by kubernetes.core.helm_plugin] ***\nWednesday 20 May 2026 12:58:00 +0000 (0:00:00.327) 0:02:31.947 *********\nok: [controller]\n\nTASK [Install plugin] **********************************************************\nWednesday 20 May 2026 12:58:01 +0000 (0:00:00.308) 0:02:32.255 *********\nincluded: vexxhost.containers.download_artifact for controller\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nWednesday 20 May 2026 12:58:01 +0000 (0:00:00.045) 0:02:32.300 *********\nok: [controller] => {\n \"msg\": \"https://github.com/databus23/helm-diff/releases/download/v3.8.1/helm-diff-linux-amd64.tgz\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nWednesday 20 May 2026 12:58:01 +0000 (0:00:00.034) 0:02:32.335 *********\nchanged: [controller]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nWednesday 20 May 2026 12:58:02 +0000 (0:00:00.976) 0:02:33.312 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.upload_helm_chart : Include help chart upload method tasks] ***\nWednesday 20 May 2026 12:58:04 +0000 (0:00:02.102) 0:02:35.414 *********\nincluded: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/upload_helm_chart/tasks/synchronize.yml for controller\n\nTASK [vexxhost.kubernetes.upload_helm_chart : Upload Helm chart] ***************\nWednesday 20 May 2026 12:58:04 +0000 (0:00:00.042) 0:02:35.456 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.cilium : Get current Kubernetes version] *************\nWednesday 20 May 2026 12:58:05 +0000 (0:00:00.796) 0:02:36.253 *********\nok: [controller]\n\nTASK [vexxhost.kubernetes.cilium : Deploy Helm chart] **************************\nWednesday 20 May 2026 12:58:06 +0000 (0:00:00.950) 0:02:37.203 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.upload_helm_chart : Include help chart upload method tasks] ***\nWednesday 20 May 2026 12:58:08 +0000 (0:00:02.424) 0:02:39.628 *********\nincluded: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/upload_helm_chart/tasks/synchronize.yml for controller\n\nTASK [vexxhost.kubernetes.upload_helm_chart : Upload Helm chart] ***************\nWednesday 20 May 2026 12:58:08 +0000 (0:00:00.034) 0:02:39.662 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.envoy_gateway : Deploy Helm chart] *******************\nWednesday 20 May 2026 12:58:09 +0000 (0:00:00.638) 0:02:40.300 *********\nchanged: [controller]\n\nTASK [vexxhost.kubernetes.envoy_gateway : Create GatewayClass] *****************\nWednesday 20 May 2026 12:59:31 +0000 (0:01:22.511) 0:04:02.811 *********\nchanged: [controller]\n\nPLAY RECAP *********************************************************************\ncontroller : ok=118 changed=54 unreachable=0 failed=0 skipped=34 rescued=0 ignored=3\n\n\nTASKS RECAP ********************************************************************\nWednesday 20 May 2026 12:59:32 +0000 (0:00:00.787) 0:04:03.599 *********\n===============================================================================\nvexxhost.kubernetes.envoy_gateway : Deploy Helm chart ------------------ 82.51s\nvexxhost.kubernetes.kubernetes : Initialize cluster -------------------- 47.03s\nvexxhost.kubernetes.kubernetes : Install Kubernetes Python package using package manager on supported systems -- 10.85s\nvexxhost.containers.containerd : Install AppArmor packages -------------- 8.47s\nInstall Debian packages ------------------------------------------------- 6.97s\nvexxhost.containers.download_artifact : Download item ------------------- 3.73s\nvexxhost.kubernetes.kubelet : Install additional packages --------------- 3.63s\nvexxhost.containers.download_artifact : Extract archive ----------------- 3.30s\nvexxhost.containers.download_artifact : Extract archive ----------------- 3.02s\nvexxhost.kubernetes.cilium : Deploy Helm chart -------------------------- 2.42s\nvexxhost.kubernetes.kubelet : Configure sysctl values ------------------- 2.18s\nvexxhost.containers.download_artifact : Extract archive ----------------- 2.10s\nvexxhost.kubernetes.kubelet : Reload systemd ---------------------------- 1.91s\nvexxhost.containers.download_artifact : Extract archive ----------------- 1.77s\nvexxhost.containers.download_artifact : Extract archive ----------------- 1.70s\nvexxhost.containers.download_artifact : Extract archive ----------------- 1.70s\nvexxhost.kubernetes.kube_vip : Uninstall legacy HA stack ---------------- 1.54s\nvexxhost.containers.download_artifact : Download item ------------------- 1.53s\nvexxhost.containers.containerd : Create folders for configuration ------- 1.52s\nvexxhost.containers.containerd : Create folders for configuration ------- 1.48s\nINFO [secretgen-controller > prepare] Executed: Successful\nINFO [secretgen-controller > converge] Executing\n\nPLAY [Deploy \"secretgen-controller\"] *******************************************\n\nTASK [atmosphere.common.secretgen_controller : Deploy secretgen-controller] ****\nWednesday 20 May 2026 12:59:33 +0000 (0:00:00.013) 0:00:00.013 *********\n[WARNING]: Host 'controller' is using the discovered Python interpreter at '/usr/bin/python3.12', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.19/reference_appendices/interpreter_discovery.html for more information.\n[WARNING]: kubernetes<24.2.0 is not supported or tested. Some features may not work.\n[WARNING]: Deprecation warnings can be disabled by setting `deprecation_warnings=False` in ansible.cfg.\n[DEPRECATION WARNING]: Direct access to the `environment` attribute is deprecated. This feature will be removed from ansible-core version 2.23. Consider using `copy_with_new_env` or passing `overrides` to `template`.\nchanged: [controller]\n\nPLAY RECAP *********************************************************************\ncontroller : ok=1 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0\n\n\nTASKS RECAP ********************************************************************\nWednesday 20 May 2026 12:59:35 +0000 (0:00:01.471) 0:00:01.484 *********\n===============================================================================\natmosphere.common.secretgen_controller : Deploy secretgen-controller ---- 1.47s\nINFO [secretgen-controller > converge] Executed: Successful\nINFO [secretgen-controller > idempotence] Executing\n\nPLAY [Deploy \"secretgen-controller\"] *******************************************\n\nTASK [atmosphere.common.secretgen_controller : Deploy secretgen-controller] ****\nWednesday 20 May 2026 12:59:36 +0000 (0:00:00.012) 0:00:00.012 *********\n[WARNING]: Host 'controller' is using the discovered Python interpreter at '/usr/bin/python3.12', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.19/reference_appendices/interpreter_discovery.html for more information.\n[WARNING]: kubernetes<24.2.0 is not supported or tested. Some features may not work.\n[WARNING]: Deprecation warnings can be disabled by setting `deprecation_warnings=False` in ansible.cfg.\n[DEPRECATION WARNING]: Direct access to the `environment` attribute is deprecated. This feature will be removed from ansible-core version 2.23. Consider using `copy_with_new_env` or passing `overrides` to `template`.\nok: [controller]\n\nPLAY RECAP *********************************************************************\ncontroller : ok=1 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0\n\n\nTASKS RECAP ********************************************************************\nWednesday 20 May 2026 12:59:37 +0000 (0:00:01.426) 0:00:01.439 *********\n===============================================================================\natmosphere.common.secretgen_controller : Deploy secretgen-controller ---- 1.43s\nINFO [secretgen-controller > idempotence] Executed: Successful\nINFO [secretgen-controller > side_effect] Executing\nWARNING [secretgen-controller > side_effect] Executed: Missing playbook (Remove from test_sequence to suppress)\nINFO [secretgen-controller > verify] Executing\n\nPLAY [Verify] ******************************************************************\n\nTASK [Gathering Facts] *********************************************************\nWednesday 20 May 2026 12:59:38 +0000 (0:00:00.009) 0:00:00.009 *********\n[WARNING]: Host 'controller' is using the discovered Python interpreter at '/usr/bin/python3.12', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.19/reference_appendices/interpreter_discovery.html for more information.\nok: [controller]\n\nTASK [Wait for secretgen-controller deployment to be available] ****************\nWednesday 20 May 2026 12:59:40 +0000 (0:00:01.330) 0:00:01.340 *********\n[WARNING]: kubernetes<24.2.0 is not supported or tested. Some features may not work.\nok: [controller]\n\nTASK [Create a test Password resource] *****************************************\nWednesday 20 May 2026 12:59:41 +0000 (0:00:00.989) 0:00:02.329 *********\nchanged: [controller]\n\nTASK [Wait for test-password secret to be generated] ***************************\nWednesday 20 May 2026 12:59:42 +0000 (0:00:00.952) 0:00:03.281 *********\nok: [controller]\n\nPLAY RECAP *********************************************************************\ncontroller : ok=4 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0\n\n\nTASKS RECAP ********************************************************************\nWednesday 20 May 2026 12:59:42 +0000 (0:00:00.792) 0:00:04.074 *********\n===============================================================================\nGathering Facts --------------------------------------------------------- 1.33s\nWait for secretgen-controller deployment to be available ---------------- 0.99s\nCreate a test Password resource ----------------------------------------- 0.95s\nWait for test-password secret to be generated --------------------------- 0.79s\nINFO [secretgen-controller > verify] Executed: Successful\nINFO [secretgen-controller > cleanup] Executing\nWARNING [secretgen-controller > cleanup] Executed: Missing playbook (Remove from test_sequence to suppress)\nINFO [secretgen-controller > destroy] Executing\nWARNING [secretgen-controller > destroy] Skipping, '--destroy=never' requested.\nINFO [secretgen-controller > destroy] Executed: Successful\nWARNING Molecule executed 1 scenario (1 missing files)", "stdout_lines": [ "Using CPython 3.12.3 interpreter at: /usr/bin/python3", "Creating virtual environment at: .venv", "warning: No `requires-python` value found in the workspace. Defaulting to `>=3.12`.", "Downloading pygments (1.2MiB)", "Downloading kubernetes (1.9MiB)", "Downloading cryptography (4.3MiB)", "Downloading ansible-core (2.3MiB)", " Downloading cryptography", " Downloading pygments", " Downloading kubernetes", " Downloading ansible-core", "Installed 47 packages in 43ms", "INFO Collection 'atmosphere.common' detected.", "INFO Scenarios will be used from 'extensions/molecule'", "INFO [secretgen-controller > discovery] scenario test matrix: dependency, cleanup, destroy, syntax, create, prepare, converge, idempotence, side_effect, verify, cleanup, destroy", "INFO [secretgen-controller > prerun] Performing prerun with role_name_check=0...", "INFO [secretgen-controller > dependency] Executing", "WARNING [secretgen-controller > dependency] Missing roles requirements file: requirements.yml", "WARNING [secretgen-controller > dependency] Missing collections requirements file: collections.yml", "WARNING [secretgen-controller > dependency] Executed: 2 missing (Remove from test_sequence to suppress)", "INFO [secretgen-controller > cleanup] Executing", "WARNING [secretgen-controller > cleanup] Executed: Missing playbook (Remove from test_sequence to suppress)", "INFO [secretgen-controller > destroy] Executing", "WARNING [secretgen-controller > destroy] Skipping, '--destroy=never' requested.", "INFO [secretgen-controller > destroy] Executed: Successful", "INFO [secretgen-controller > syntax] Executing", "", "playbook: /home/zuul/src/github.com/vexxhost/atmosphere.common/extensions/molecule/secretgen-controller/converge.yml", "INFO [secretgen-controller > syntax] Executed: Successful", "INFO [secretgen-controller > create] Executing", "WARNING [secretgen-controller > create] Executed: Missing playbook (Remove from test_sequence to suppress)", "INFO [secretgen-controller > prepare] Executing", "", "PLAY [Prepare] *****************************************************************", "", "TASK [Gathering Facts] *********************************************************", "Wednesday 20 May 2026 12:55:29 +0000 (0:00:00.032) 0:00:00.032 *********", "[WARNING]: Host 'controller' is using the discovered Python interpreter at '/usr/bin/python3.12', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.19/reference_appendices/interpreter_discovery.html for more information.", "ok: [controller]", "", "TASK [Install Debian packages] *************************************************", "Wednesday 20 May 2026 12:55:30 +0000 (0:00:01.416) 0:00:01.448 *********", "ok: [controller]", "", "PLAY [Configure Kubernetes VIP] ************************************************", "", "TASK [Gathering Facts] *********************************************************", "Wednesday 20 May 2026 12:55:37 +0000 (0:00:06.965) 0:00:08.413 *********", "ok: [controller]", "", "TASK [vexxhost.containers.directory : Create directory (/etc/kubernetes/manifests)] ***", "Wednesday 20 May 2026 12:55:38 +0000 (0:00:00.880) 0:00:09.294 *********", "changed: [controller]", "", "TASK [vexxhost.kubernetes.kube_vip : Uninstall legacy HA stack] ****************", "Wednesday 20 May 2026 12:55:38 +0000 (0:00:00.479) 0:00:09.773 *********", "ok: [controller] => (item=/etc/keepalived/keepalived.conf)", "ok: [controller] => (item=/etc/keepalived/check_apiserver.sh)", "ok: [controller] => (item=/etc/kubernetes/manifests/keepalived.yaml)", "ok: [controller] => (item=/etc/haproxy/haproxy.cfg)", "ok: [controller] => (item=/etc/kubernetes/manifests/haproxy.yaml)", "", "TASK [vexxhost.kubernetes.kube_vip : Switch API server to run on port 6443] ****", "Wednesday 20 May 2026 12:55:40 +0000 (0:00:01.540) 0:00:11.314 *********", "[ERROR]: Task failed: Module failed: Path /etc/kubernetes/manifests/kube-apiserver.yaml does not exist !", "Origin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kube_vip/tasks/main.yml:32:3", "", "30 - Restart \"kubelet\" service", "31", "32 - name: Switch API server to run on port 6443", " ^ column 3", "", "failed: [controller] (item=/etc/kubernetes/manifests/kube-apiserver.yaml) => {\"ansible_loop_var\": \"item\", \"changed\": false, \"item\": \"/etc/kubernetes/manifests/kube-apiserver.yaml\", \"msg\": \"Path /etc/kubernetes/manifests/kube-apiserver.yaml does not exist !\", \"rc\": 257}", "[ERROR]: Task failed: Module failed: Path /etc/kubernetes/controller-manager.conf does not exist !", "Origin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kube_vip/tasks/main.yml:32:3", "", "30 - Restart \"kubelet\" service", "31", "32 - name: Switch API server to run on port 6443", " ^ column 3", "", "failed: [controller] (item=/etc/kubernetes/controller-manager.conf) => {\"ansible_loop_var\": \"item\", \"changed\": false, \"item\": \"/etc/kubernetes/controller-manager.conf\", \"msg\": \"Path /etc/kubernetes/controller-manager.conf does not exist !\", \"rc\": 257}", "[ERROR]: Task failed: Module failed: Path /etc/kubernetes/scheduler.conf does not exist !", "Origin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kube_vip/tasks/main.yml:32:3", "", "30 - Restart \"kubelet\" service", "31", "32 - name: Switch API server to run on port 6443", " ^ column 3", "", "failed: [controller] (item=/etc/kubernetes/scheduler.conf) => {\"ansible_loop_var\": \"item\", \"changed\": false, \"item\": \"/etc/kubernetes/scheduler.conf\", \"msg\": \"Path /etc/kubernetes/scheduler.conf does not exist !\", \"rc\": 257}", "...ignoring", "", "TASK [vexxhost.kubernetes.kube_vip : Check if super-admin.conf exists] *********", "Wednesday 20 May 2026 12:55:41 +0000 (0:00:01.041) 0:00:12.355 *********", "ok: [controller]", "", "TASK [vexxhost.kubernetes.kube_vip : Check if kubeadm has already run] *********", "Wednesday 20 May 2026 12:55:41 +0000 (0:00:00.461) 0:00:12.817 *********", "ok: [controller]", "", "TASK [vexxhost.kubernetes.kube_vip : Set fact with KUBECONFIG path] ************", "Wednesday 20 May 2026 12:55:42 +0000 (0:00:00.317) 0:00:13.134 *********", "ok: [controller]", "", "TASK [vexxhost.kubernetes.kube_vip : Set fact with KUBECONFIG path (with super-admin.conf)] ***", "Wednesday 20 May 2026 12:55:42 +0000 (0:00:00.034) 0:00:13.169 *********", "ok: [controller]", "", "TASK [vexxhost.kubernetes.kube_vip : Upload Kubernetes manifest] ***************", "Wednesday 20 May 2026 12:55:42 +0000 (0:00:00.043) 0:00:13.212 *********", "ok: [controller]", "", "TASK [vexxhost.kubernetes.kube_vip : Ensure kube-vip configuration file] *******", "Wednesday 20 May 2026 12:55:43 +0000 (0:00:01.009) 0:00:14.222 *********", "ok: [controller]", "", "TASK [vexxhost.kubernetes.kube_vip : Flush handlers] ***************************", "Wednesday 20 May 2026 12:55:43 +0000 (0:00:00.344) 0:00:14.566 *********", "", "PLAY [Install Kubernetes] ******************************************************", "", "TASK [Gathering Facts] *********************************************************", "Wednesday 20 May 2026 12:55:43 +0000 (0:00:00.049) 0:00:14.616 *********", "ok: [controller]", "", "TASK [vexxhost.containers.forget_package : Forget package] *********************", "Wednesday 20 May 2026 12:55:44 +0000 (0:00:00.919) 0:00:15.536 *********", "ok: [controller]", "", "TASK [vexxhost.containers.package : Update state for tar] **********************", "Wednesday 20 May 2026 12:55:44 +0000 (0:00:00.396) 0:00:15.932 *********", "skipping: [controller]", "", "TASK [vexxhost.containers.directory : Create directory (/var/lib/downloads)] ***", "Wednesday 20 May 2026 12:55:44 +0000 (0:00:00.030) 0:00:15.963 *********", "changed: [controller]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Wednesday 20 May 2026 12:55:45 +0000 (0:00:00.355) 0:00:16.318 *********", "ok: [controller] => {", " \"msg\": \"https://github.com/opencontainers/runc/releases/download/v1.4.2/runc.amd64\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Wednesday 20 May 2026 12:55:45 +0000 (0:00:00.080) 0:00:16.399 *********", "[WARNING]: Module remote_tmp /root/.ansible/tmp did not exist and was created with a mode of 0700, this may cause issues when running as another user. To avoid this, create the remote_tmp dir with the correct permissions manually", "changed: [controller]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Wednesday 20 May 2026 12:55:46 +0000 (0:00:00.831) 0:00:17.230 *********", "skipping: [controller]", "", "TASK [vexxhost.containers.forget_package : Forget package] *********************", "Wednesday 20 May 2026 12:55:46 +0000 (0:00:00.036) 0:00:17.266 *********", "ok: [controller]", "", "TASK [vexxhost.containers.package : Update state for tar] **********************", "Wednesday 20 May 2026 12:55:46 +0000 (0:00:00.323) 0:00:17.589 *********", "ok: [controller]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Wednesday 20 May 2026 12:55:47 +0000 (0:00:01.231) 0:00:18.820 *********", "ok: [controller] => {", " \"msg\": \"https://github.com/containerd/containerd/releases/download/v2.2.3/containerd-2.2.3-linux-amd64.tar.gz\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Wednesday 20 May 2026 12:55:47 +0000 (0:00:00.072) 0:00:18.893 *********", "changed: [controller]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Wednesday 20 May 2026 12:55:48 +0000 (0:00:00.992) 0:00:19.886 *********", "changed: [controller]", "", "TASK [vexxhost.containers.containerd : Install SELinux packages] ***************", "Wednesday 20 May 2026 12:55:52 +0000 (0:00:03.304) 0:00:23.190 *********", "skipping: [controller]", "", "TASK [vexxhost.containers.containerd : Set SELinux to permissive at runtime] ***", "Wednesday 20 May 2026 12:55:52 +0000 (0:00:00.029) 0:00:23.220 *********", "skipping: [controller]", "", "TASK [vexxhost.containers.containerd : Persist SELinux permissive mode] ********", "Wednesday 20 May 2026 12:55:52 +0000 (0:00:00.035) 0:00:23.256 *********", "skipping: [controller]", "", "TASK [vexxhost.containers.containerd : Install AppArmor packages] **************", "Wednesday 20 May 2026 12:55:52 +0000 (0:00:00.034) 0:00:23.290 *********", "changed: [controller]", "", "TASK [vexxhost.containers.containerd : Create systemd service file for containerd] ***", "Wednesday 20 May 2026 12:56:00 +0000 (0:00:08.473) 0:00:31.763 *********", "changed: [controller]", "", "TASK [vexxhost.containers.containerd : Create folders for configuration] *******", "Wednesday 20 May 2026 12:56:01 +0000 (0:00:00.717) 0:00:32.481 *********", "changed: [controller] => (item={'path': '/etc/containerd'})", "changed: [controller] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})", "changed: [controller] => (item={'path': '/run/containerd', 'mode': '0o711'})", "changed: [controller] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})", "changed: [controller] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})", "", "TASK [vexxhost.containers.containerd : Create containerd config file] **********", "Wednesday 20 May 2026 12:56:02 +0000 (0:00:01.477) 0:00:33.958 *********", "changed: [controller]", "", "TASK [vexxhost.containers.containerd : Force any restarts if necessary] ********", "Wednesday 20 May 2026 12:56:03 +0000 (0:00:00.837) 0:00:34.795 *********", "", "RUNNING HANDLER [vexxhost.containers.containerd : Restart containerd] **********", "Wednesday 20 May 2026 12:56:03 +0000 (0:00:00.005) 0:00:34.801 *********", "changed: [controller]", "", "RUNNING HANDLER [vexxhost.kubernetes.kubelet : Reload systemd] *****************", "Wednesday 20 May 2026 12:56:04 +0000 (0:00:00.931) 0:00:35.732 *********", "ok: [controller]", "", "TASK [vexxhost.containers.containerd : Enable and start service] ***************", "Wednesday 20 May 2026 12:56:05 +0000 (0:00:00.992) 0:00:36.725 *********", "changed: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes_upgrade_check : Retrieve the \"kubeadm-config\" ConfigMap] ***", "Wednesday 20 May 2026 12:56:06 +0000 (0:00:00.761) 0:00:37.486 *********", "[ERROR]: Task failed: Module failed: Failed to import the required Python library (kubernetes) on np0000175361's Python /usr/bin/python3.12. Please read the module documentation and install it in the appropriate location. If the required library is installed, but Ansible is using the wrong Python interpreter, please consult the documentation on ansible_python_interpreter", "Origin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubernetes_upgrade_check/tasks/main.yml:16:3", "", "14", "15 ---", "16 - name: Retrieve the \"kubeadm-config\" ConfigMap", " ^ column 3", "", "fatal: [controller]: FAILED! => {\"changed\": false, \"msg\": \"Failed to import the required Python library (kubernetes) on np0000175361's Python /usr/bin/python3.12. Please read the module documentation and install it in the appropriate location. If the required library is installed, but Ansible is using the wrong Python interpreter, please consult the documentation on ansible_python_interpreter\"}", "...ignoring", "", "TASK [vexxhost.kubernetes.kubernetes_upgrade_check : Parse the ClusterConfiguration] ***", "Wednesday 20 May 2026 12:56:07 +0000 (0:00:00.732) 0:00:38.218 *********", "skipping: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes_upgrade_check : Retrieve the current Kubernetes version] ***", "Wednesday 20 May 2026 12:56:07 +0000 (0:00:00.032) 0:00:38.250 *********", "skipping: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes_upgrade_check : Extract major, minor, and patch versions] ***", "Wednesday 20 May 2026 12:56:07 +0000 (0:00:00.034) 0:00:38.285 *********", "skipping: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes_upgrade_check : Fail if we're jumping more than one minor version] ***", "Wednesday 20 May 2026 12:56:07 +0000 (0:00:00.034) 0:00:38.319 *********", "skipping: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes_upgrade_check : Set fact if we need to upgrade] ***", "Wednesday 20 May 2026 12:56:07 +0000 (0:00:00.029) 0:00:38.349 *********", "skipping: [controller]", "", "TASK [vexxhost.containers.forget_package : Forget package] *********************", "Wednesday 20 May 2026 12:56:07 +0000 (0:00:00.031) 0:00:38.381 *********", "ok: [controller]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Wednesday 20 May 2026 12:56:07 +0000 (0:00:00.355) 0:00:38.736 *********", "ok: [controller] => {", " \"msg\": \"https://dl.k8s.io/release/v1.28.13/bin/linux/amd64/kubeadm\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Wednesday 20 May 2026 12:56:07 +0000 (0:00:00.044) 0:00:38.781 *********", "changed: [controller]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Wednesday 20 May 2026 12:56:11 +0000 (0:00:03.729) 0:00:42.510 *********", "skipping: [controller]", "", "TASK [vexxhost.containers.forget_package : Forget package] *********************", "Wednesday 20 May 2026 12:56:11 +0000 (0:00:00.037) 0:00:42.548 *********", "ok: [controller]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Wednesday 20 May 2026 12:56:11 +0000 (0:00:00.317) 0:00:42.865 *********", "ok: [controller] => {", " \"msg\": \"https://dl.k8s.io/release/v1.28.13/bin/linux/amd64/kubectl\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Wednesday 20 May 2026 12:56:11 +0000 (0:00:00.042) 0:00:42.908 *********", "changed: [controller]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Wednesday 20 May 2026 12:56:13 +0000 (0:00:01.132) 0:00:44.041 *********", "skipping: [controller]", "", "TASK [vexxhost.containers.containerd : Install SELinux packages] ***************", "Wednesday 20 May 2026 12:56:13 +0000 (0:00:00.041) 0:00:44.082 *********", "skipping: [controller]", "", "TASK [vexxhost.containers.containerd : Set SELinux to permissive at runtime] ***", "Wednesday 20 May 2026 12:56:13 +0000 (0:00:00.026) 0:00:44.109 *********", "skipping: [controller]", "", "TASK [vexxhost.containers.containerd : Persist SELinux permissive mode] ********", "Wednesday 20 May 2026 12:56:13 +0000 (0:00:00.030) 0:00:44.140 *********", "skipping: [controller]", "", "TASK [vexxhost.containers.containerd : Install AppArmor packages] **************", "Wednesday 20 May 2026 12:56:13 +0000 (0:00:00.027) 0:00:44.168 *********", "ok: [controller]", "", "TASK [vexxhost.containers.containerd : Create systemd service file for containerd] ***", "Wednesday 20 May 2026 12:56:14 +0000 (0:00:01.121) 0:00:45.289 *********", "ok: [controller]", "", "TASK [vexxhost.containers.containerd : Create folders for configuration] *******", "Wednesday 20 May 2026 12:56:14 +0000 (0:00:00.688) 0:00:45.978 *********", "ok: [controller] => (item={'path': '/etc/containerd'})", "ok: [controller] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})", "ok: [controller] => (item={'path': '/run/containerd', 'mode': '0o711'})", "ok: [controller] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})", "ok: [controller] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})", "", "TASK [vexxhost.containers.containerd : Create containerd config file] **********", "Wednesday 20 May 2026 12:56:16 +0000 (0:00:01.517) 0:00:47.495 *********", "ok: [controller]", "", "TASK [vexxhost.containers.containerd : Force any restarts if necessary] ********", "Wednesday 20 May 2026 12:56:17 +0000 (0:00:00.803) 0:00:48.298 *********", "", "TASK [vexxhost.containers.containerd : Enable and start service] ***************", "Wednesday 20 May 2026 12:56:17 +0000 (0:00:00.004) 0:00:48.303 *********", "ok: [controller]", "", "TASK [vexxhost.containers.forget_package : Forget package] *********************", "Wednesday 20 May 2026 12:56:17 +0000 (0:00:00.492) 0:00:48.795 *********", "ok: [controller]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Wednesday 20 May 2026 12:56:18 +0000 (0:00:00.338) 0:00:49.134 *********", "ok: [controller] => {", " \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.35.0/crictl-v1.35.0-linux-amd64.tar.gz\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Wednesday 20 May 2026 12:56:18 +0000 (0:00:00.059) 0:00:49.193 *********", "changed: [controller]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Wednesday 20 May 2026 12:56:18 +0000 (0:00:00.823) 0:00:50.017 *********", "changed: [controller]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Wednesday 20 May 2026 12:56:20 +0000 (0:00:01.695) 0:00:51.712 *********", "ok: [controller] => {", " \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.35.0/critest-v1.35.0-linux-amd64.tar.gz\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Wednesday 20 May 2026 12:56:20 +0000 (0:00:00.069) 0:00:51.782 *********", "changed: [controller]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Wednesday 20 May 2026 12:56:21 +0000 (0:00:01.055) 0:00:52.837 *********", "changed: [controller]", "", "TASK [vexxhost.containers.cri_tools : Create crictl config] ********************", "Wednesday 20 May 2026 12:56:23 +0000 (0:00:01.696) 0:00:54.533 *********", "changed: [controller]", "", "TASK [vexxhost.containers.directory : Create directory (/opt/cni/bin)] *********", "Wednesday 20 May 2026 12:56:24 +0000 (0:00:00.701) 0:00:55.235 *********", "changed: [controller]", "", "TASK [vexxhost.containers.forget_package : Forget package] *********************", "Wednesday 20 May 2026 12:56:24 +0000 (0:00:00.311) 0:00:55.546 *********", "ok: [controller]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Wednesday 20 May 2026 12:56:24 +0000 (0:00:00.313) 0:00:55.860 *********", "ok: [controller] => {", " \"msg\": \"https://github.com/containernetworking/plugins/releases/download/v1.9.1/cni-plugins-linux-amd64-v1.9.1.tgz\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Wednesday 20 May 2026 12:56:24 +0000 (0:00:00.059) 0:00:55.919 *********", "changed: [controller]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Wednesday 20 May 2026 12:56:25 +0000 (0:00:01.067) 0:00:56.987 *********", "changed: [controller]", "", "TASK [vexxhost.containers.cni_plugins : Gather variables for each operating system] ***", "Wednesday 20 May 2026 12:56:28 +0000 (0:00:03.015) 0:01:00.002 *********", "ok: [controller] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/containers/roles/cni_plugins/vars/debian.yml)", "", "TASK [vexxhost.containers.cni_plugins : Install additional packages] ***********", "Wednesday 20 May 2026 12:56:29 +0000 (0:00:00.050) 0:01:00.052 *********", "ok: [controller]", "", "TASK [vexxhost.containers.cni_plugins : Ensure IPv6 is enabled] ****************", "Wednesday 20 May 2026 12:56:30 +0000 (0:00:01.073) 0:01:01.126 *********", "changed: [controller]", "", "TASK [vexxhost.containers.cni_plugins : Enable kernel modules on-boot] *********", "Wednesday 20 May 2026 12:56:30 +0000 (0:00:00.462) 0:01:01.589 *********", "changed: [controller]", "", "TASK [vexxhost.containers.cni_plugins : Enable kernel modules in runtime] ******", "Wednesday 20 May 2026 12:56:31 +0000 (0:00:00.707) 0:01:02.296 *********", "changed: [controller] => (item=br_netfilter)", "ok: [controller] => (item=ip_tables)", "changed: [controller] => (item=ip6_tables)", "changed: [controller] => (item=nf_conntrack)", "", "TASK [vexxhost.containers.forget_package : Forget package] *********************", "Wednesday 20 May 2026 12:56:32 +0000 (0:00:01.395) 0:01:03.691 *********", "ok: [controller]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Wednesday 20 May 2026 12:56:32 +0000 (0:00:00.327) 0:01:04.019 *********", "ok: [controller] => {", " \"msg\": \"https://dl.k8s.io/release/v1.28.13/bin/linux/amd64/kubelet\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Wednesday 20 May 2026 12:56:33 +0000 (0:00:00.045) 0:01:04.064 *********", "changed: [controller]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Wednesday 20 May 2026 12:56:34 +0000 (0:00:01.531) 0:01:05.595 *********", "skipping: [controller]", "", "TASK [vexxhost.kubernetes.kubelet : Gather variables for each operating system] ***", "Wednesday 20 May 2026 12:56:34 +0000 (0:00:00.033) 0:01:05.629 *********", "ok: [controller] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/vars/debian.yml)", "", "TASK [vexxhost.kubernetes.kubelet : Install coreutils] *************************", "Wednesday 20 May 2026 12:56:34 +0000 (0:00:00.055) 0:01:05.684 *********", "skipping: [controller]", "", "TASK [vexxhost.kubernetes.kubelet : Install additional packages] ***************", "Wednesday 20 May 2026 12:56:34 +0000 (0:00:00.033) 0:01:05.718 *********", "changed: [controller]", "", "TASK [vexxhost.kubernetes.kubelet : Configure sysctl values] *******************", "Wednesday 20 May 2026 12:56:38 +0000 (0:00:03.629) 0:01:09.347 *********", "changed: [controller] => (item={'name': 'net.ipv4.ip_forward', 'value': 1})", "changed: [controller] => (item={'name': 'net.bridge.bridge-nf-call-iptables', 'value': 1})", "changed: [controller] => (item={'name': 'net.bridge.bridge-nf-call-ip6tables', 'value': 1})", "changed: [controller] => (item={'name': 'net.ipv4.conf.all.rp_filter', 'value': 0})", "changed: [controller] => (item={'name': 'fs.inotify.max_queued_events', 'value': 1048576})", "changed: [controller] => (item={'name': 'fs.inotify.max_user_instances', 'value': 8192})", "changed: [controller] => (item={'name': 'fs.inotify.max_user_watches', 'value': 1048576})", "", "TASK [vexxhost.kubernetes.kubelet : Create folders for kubernetes configuration] ***", "Wednesday 20 May 2026 12:56:40 +0000 (0:00:02.184) 0:01:11.532 *********", "changed: [controller] => (item=/etc/systemd/system/kubelet.service.d)", "ok: [controller] => (item=/etc/kubernetes)", "ok: [controller] => (item=/etc/kubernetes/manifests)", "", "TASK [vexxhost.kubernetes.kubelet : Add kubelet systemd service config] ********", "Wednesday 20 May 2026 12:56:41 +0000 (0:00:00.941) 0:01:12.474 *********", "changed: [controller]", "", "TASK [vexxhost.kubernetes.kubelet : Add kubeadm dropin for kubelet systemd service config] ***", "Wednesday 20 May 2026 12:56:42 +0000 (0:00:00.723) 0:01:13.197 *********", "changed: [controller]", "", "TASK [vexxhost.kubernetes.kubelet : Check swap status] *************************", "Wednesday 20 May 2026 12:56:42 +0000 (0:00:00.713) 0:01:13.910 *********", "ok: [controller]", "", "TASK [vexxhost.kubernetes.kubelet : Disable swap] ******************************", "Wednesday 20 May 2026 12:56:43 +0000 (0:00:00.465) 0:01:14.376 *********", "[ERROR]: Task failed: Conditional result was '' of type 'str', which evaluates to False. Conditionals must have a boolean result.", "", "Task failed.", "Origin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:86:7", "", "84 register: kubelet_swapon", "85", "86 - name: Disable swap", " ^ column 7", "", "<<< caused by >>>", "", "Conditional result was '' of type 'str', which evaluates to False. Conditionals must have a boolean result.", "Origin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:91:11", "", "89 ignore_errors: \"{{ ansible_check_mode }}\"", "90 when:", "91 - kubelet_swapon.stdout", " ^ column 11", "", "Broken conditionals can be temporarily allowed with the `ALLOW_BROKEN_CONDITIONALS` configuration option.", "", "fatal: [controller]: FAILED! => {\"changed\": false, \"msg\": \"Task failed: Conditional result was '' of type 'str', which evaluates to False. Conditionals must have a boolean result.\"}", "...ignoring", "", "TASK [vexxhost.kubernetes.kubelet : Remove swapfile from /etc/fstab] ***********", "Wednesday 20 May 2026 12:56:43 +0000 (0:00:00.030) 0:01:14.406 *********", "ok: [controller] => (item=swap)", "ok: [controller] => (item=none)", "", "TASK [vexxhost.kubernetes.kubelet : Create noswap systemd service config file] ***", "Wednesday 20 May 2026 12:56:44 +0000 (0:00:00.740) 0:01:15.146 *********", "changed: [controller]", "", "TASK [vexxhost.kubernetes.kubelet : Enable noswap service] *********************", "Wednesday 20 May 2026 12:56:44 +0000 (0:00:00.712) 0:01:15.859 *********", "changed: [controller]", "", "TASK [vexxhost.kubernetes.kubelet : Force any restarts if necessary] ***********", "Wednesday 20 May 2026 12:56:45 +0000 (0:00:00.753) 0:01:16.612 *********", "", "RUNNING HANDLER [vexxhost.kubernetes.kubelet : Reload systemd] *****************", "Wednesday 20 May 2026 12:56:45 +0000 (0:00:00.005) 0:01:16.617 *********", "ok: [controller]", "", "TASK [vexxhost.kubernetes.kubelet : Enable and start kubelet service] **********", "Wednesday 20 May 2026 12:56:46 +0000 (0:00:00.919) 0:01:17.537 *********", "changed: [controller]", "", "TASK [vexxhost.kubernetes.kubelet : Ensure availability of dbus on Debian] *****", "Wednesday 20 May 2026 12:56:47 +0000 (0:00:00.787) 0:01:18.325 *********", "ok: [controller]", "", "TASK [vexxhost.kubernetes.kubelet : Configure short hostname] ******************", "Wednesday 20 May 2026 12:56:48 +0000 (0:00:01.048) 0:01:19.373 *********", "changed: [controller]", "", "TASK [vexxhost.kubernetes.kubelet : Ensure hostname inside hosts file] *********", "Wednesday 20 May 2026 12:56:49 +0000 (0:00:00.888) 0:01:20.261 *********", "changed: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes : Remove kubernetes repository] ***********", "Wednesday 20 May 2026 12:56:49 +0000 (0:00:00.445) 0:01:20.707 *********", "ok: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes : Setup control plane] ********************", "Wednesday 20 May 2026 12:56:50 +0000 (0:00:00.616) 0:01:21.323 *********", "included: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubernetes/tasks/control-plane.yml for controller", "", "TASK [vexxhost.kubernetes.kubernetes : Bootstrap cluster] **********************", "Wednesday 20 May 2026 12:56:50 +0000 (0:00:00.071) 0:01:21.394 *********", "included: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubernetes/tasks/bootstrap-cluster.yml for controller", "", "TASK [vexxhost.kubernetes.kubernetes : Check if any control plane is bootstrapped] ***", "Wednesday 20 May 2026 12:56:50 +0000 (0:00:00.075) 0:01:21.469 *********", "ok: [controller] => (item=controller)", "", "TASK [vexxhost.kubernetes.kubernetes : Pick node from pre-existing cluster] ****", "Wednesday 20 May 2026 12:56:50 +0000 (0:00:00.311) 0:01:21.781 *********", "skipping: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes : Select first node to initialize cluster] ***", "Wednesday 20 May 2026 12:56:50 +0000 (0:00:00.040) 0:01:21.822 *********", "ok: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes : Print selected bootstrap node] **********", "Wednesday 20 May 2026 12:56:50 +0000 (0:00:00.046) 0:01:21.868 *********", "ok: [controller] => {", " \"msg\": \"controller\"", "}", "", "TASK [vexxhost.kubernetes.kubernetes : Upload cluster configuration for bootstrap node] ***", "Wednesday 20 May 2026 12:56:50 +0000 (0:00:00.038) 0:01:21.907 *********", "changed: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes : Create pki folder] **********************", "Wednesday 20 May 2026 12:56:51 +0000 (0:00:00.733) 0:01:22.641 *********", "skipping: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes : Create kubernetes ca key] ***************", "Wednesday 20 May 2026 12:56:51 +0000 (0:00:00.033) 0:01:22.674 *********", "skipping: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes : Create kubernetes ca cert] **************", "Wednesday 20 May 2026 12:56:51 +0000 (0:00:00.027) 0:01:22.702 *********", "skipping: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes : Create etcd-ca key] *********************", "Wednesday 20 May 2026 12:56:51 +0000 (0:00:00.025) 0:01:22.727 *********", "skipping: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes : Create etcd-ca cert] ********************", "Wednesday 20 May 2026 12:56:51 +0000 (0:00:00.036) 0:01:22.764 *********", "skipping: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes : Create front-proxy-ca key] **************", "Wednesday 20 May 2026 12:56:51 +0000 (0:00:00.034) 0:01:22.799 *********", "skipping: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes : Create front-proxy-ca cert] *************", "Wednesday 20 May 2026 12:56:51 +0000 (0:00:00.034) 0:01:22.833 *********", "skipping: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes : Initialize cluster] *********************", "Wednesday 20 May 2026 12:56:51 +0000 (0:00:00.032) 0:01:22.866 *********", "changed: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes : Check if the node is already part of the cluster] ***", "Wednesday 20 May 2026 12:57:38 +0000 (0:00:47.027) 0:02:09.893 *********", "ok: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes : Join cluster] ***************************", "Wednesday 20 May 2026 12:57:39 +0000 (0:00:00.353) 0:02:10.246 *********", "skipping: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes : Create folder for admin configuration] ***", "Wednesday 20 May 2026 12:57:39 +0000 (0:00:00.027) 0:02:10.274 *********", "changed: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes : Creating a symlink for admin configuration file] ***", "Wednesday 20 May 2026 12:57:39 +0000 (0:00:00.313) 0:02:10.588 *********", "changed: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes : Add bash autocomplete for kubectl] ******", "Wednesday 20 May 2026 12:57:39 +0000 (0:00:00.315) 0:02:10.903 *********", "changed: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes : Install PIP] ****************************", "Wednesday 20 May 2026 12:57:40 +0000 (0:00:00.337) 0:02:11.241 *********", "skipping: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes : Install Kubernetes Python package using pip on supported systems] ***", "Wednesday 20 May 2026 12:57:40 +0000 (0:00:00.038) 0:02:11.279 *********", "skipping: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes : Enable EPEL repository] *****************", "Wednesday 20 May 2026 12:57:40 +0000 (0:00:00.037) 0:02:11.316 *********", "skipping: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes : Install Kubernetes Python package using package manager on supported systems] ***", "Wednesday 20 May 2026 12:57:40 +0000 (0:00:00.036) 0:02:11.352 *********", "changed: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes : Allow workload on control plane node] ***", "Wednesday 20 May 2026 12:57:51 +0000 (0:00:10.851) 0:02:22.204 *********", "[WARNING]: kubernetes<24.2.0 is not supported or tested. Some features may not work.", "changed: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes : Remove kube-proxy resources] ************", "Wednesday 20 May 2026 12:57:52 +0000 (0:00:01.110) 0:02:23.315 *********", "skipping: [controller] => (item=DaemonSet)", "skipping: [controller] => (item=ConfigMap)", "skipping: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes : Start an upgrade] ***********************", "Wednesday 20 May 2026 12:57:52 +0000 (0:00:00.042) 0:02:23.358 *********", "skipping: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes : Check if the Kubernetes API services is up to date] ***", "Wednesday 20 May 2026 12:57:52 +0000 (0:00:00.038) 0:02:23.397 *********", "skipping: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes : Trigger an upgrade of the Kubernetes API services] ***", "Wednesday 20 May 2026 12:57:52 +0000 (0:00:00.038) 0:02:23.436 *********", "skipping: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes : Setup nodes] ****************************", "Wednesday 20 May 2026 12:57:52 +0000 (0:00:00.039) 0:02:23.475 *********", "skipping: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes : Upgrade & restart Kubelet node for upgrade (if needed)] ***", "Wednesday 20 May 2026 12:57:52 +0000 (0:00:00.034) 0:02:23.510 *********", "ok: [controller]", "", "TASK [vexxhost.kubernetes.kubernetes : Set node selector for CoreDNS components] ***", "Wednesday 20 May 2026 12:57:53 +0000 (0:00:00.587) 0:02:24.097 *********", "changed: [controller]", "", "PLAY [Install control-plane components] ****************************************", "", "TASK [Gathering Facts] *********************************************************", "Wednesday 20 May 2026 12:57:54 +0000 (0:00:01.047) 0:02:25.144 *********", "ok: [controller]", "", "TASK [vexxhost.containers.forget_package : Forget package] *********************", "Wednesday 20 May 2026 12:57:54 +0000 (0:00:00.856) 0:02:26.001 *********", "ok: [controller]", "", "TASK [vexxhost.containers.package : Update state for tar] **********************", "Wednesday 20 May 2026 12:57:55 +0000 (0:00:00.322) 0:02:26.324 *********", "ok: [controller]", "", "TASK [vexxhost.containers.directory : Create directory (/var/lib/downloads)] ***", "Wednesday 20 May 2026 12:57:56 +0000 (0:00:01.039) 0:02:27.363 *********", "ok: [controller]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Wednesday 20 May 2026 12:57:56 +0000 (0:00:00.347) 0:02:27.711 *********", "ok: [controller] => {", " \"msg\": \"https://get.helm.sh/helm-v3.11.2-linux-amd64.tar.gz\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Wednesday 20 May 2026 12:57:56 +0000 (0:00:00.042) 0:02:27.754 *********", "changed: [controller]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Wednesday 20 May 2026 12:57:57 +0000 (0:00:00.938) 0:02:28.693 *********", "changed: [controller]", "", "TASK [vexxhost.kubernetes.helm : Remove Helm repository] ***********************", "Wednesday 20 May 2026 12:57:59 +0000 (0:00:01.768) 0:02:30.461 *********", "ok: [controller]", "", "TASK [vexxhost.kubernetes.helm : Add bash autocomplete for helm] ***************", "Wednesday 20 May 2026 12:57:59 +0000 (0:00:00.459) 0:02:30.921 *********", "changed: [controller]", "", "TASK [vexxhost.kubernetes.helm : Get Helm plugins dir] *************************", "Wednesday 20 May 2026 12:58:00 +0000 (0:00:00.303) 0:02:31.224 *********", "ok: [controller]", "", "TASK [vexxhost.kubernetes.helm : Create Helm plugins directory if it does not exist] ***", "Wednesday 20 May 2026 12:58:00 +0000 (0:00:00.395) 0:02:31.620 *********", "changed: [controller]", "", "TASK [vexxhost.kubernetes.helm : Remove Helm diff plugin installed by kubernetes.core.helm_plugin] ***", "Wednesday 20 May 2026 12:58:00 +0000 (0:00:00.327) 0:02:31.947 *********", "ok: [controller]", "", "TASK [Install plugin] **********************************************************", "Wednesday 20 May 2026 12:58:01 +0000 (0:00:00.308) 0:02:32.255 *********", "included: vexxhost.containers.download_artifact for controller", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Wednesday 20 May 2026 12:58:01 +0000 (0:00:00.045) 0:02:32.300 *********", "ok: [controller] => {", " \"msg\": \"https://github.com/databus23/helm-diff/releases/download/v3.8.1/helm-diff-linux-amd64.tgz\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Wednesday 20 May 2026 12:58:01 +0000 (0:00:00.034) 0:02:32.335 *********", "changed: [controller]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Wednesday 20 May 2026 12:58:02 +0000 (0:00:00.976) 0:02:33.312 *********", "changed: [controller]", "", "TASK [vexxhost.kubernetes.upload_helm_chart : Include help chart upload method tasks] ***", "Wednesday 20 May 2026 12:58:04 +0000 (0:00:02.102) 0:02:35.414 *********", "included: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/upload_helm_chart/tasks/synchronize.yml for controller", "", "TASK [vexxhost.kubernetes.upload_helm_chart : Upload Helm chart] ***************", "Wednesday 20 May 2026 12:58:04 +0000 (0:00:00.042) 0:02:35.456 *********", "changed: [controller]", "", "TASK [vexxhost.kubernetes.cilium : Get current Kubernetes version] *************", "Wednesday 20 May 2026 12:58:05 +0000 (0:00:00.796) 0:02:36.253 *********", "ok: [controller]", "", "TASK [vexxhost.kubernetes.cilium : Deploy Helm chart] **************************", "Wednesday 20 May 2026 12:58:06 +0000 (0:00:00.950) 0:02:37.203 *********", "changed: [controller]", "", "TASK [vexxhost.kubernetes.upload_helm_chart : Include help chart upload method tasks] ***", "Wednesday 20 May 2026 12:58:08 +0000 (0:00:02.424) 0:02:39.628 *********", "included: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/upload_helm_chart/tasks/synchronize.yml for controller", "", "TASK [vexxhost.kubernetes.upload_helm_chart : Upload Helm chart] ***************", "Wednesday 20 May 2026 12:58:08 +0000 (0:00:00.034) 0:02:39.662 *********", "changed: [controller]", "", "TASK [vexxhost.kubernetes.envoy_gateway : Deploy Helm chart] *******************", "Wednesday 20 May 2026 12:58:09 +0000 (0:00:00.638) 0:02:40.300 *********", "changed: [controller]", "", "TASK [vexxhost.kubernetes.envoy_gateway : Create GatewayClass] *****************", "Wednesday 20 May 2026 12:59:31 +0000 (0:01:22.511) 0:04:02.811 *********", "changed: [controller]", "", "PLAY RECAP *********************************************************************", "controller : ok=118 changed=54 unreachable=0 failed=0 skipped=34 rescued=0 ignored=3", "", "", "TASKS RECAP ********************************************************************", "Wednesday 20 May 2026 12:59:32 +0000 (0:00:00.787) 0:04:03.599 *********", "===============================================================================", "vexxhost.kubernetes.envoy_gateway : Deploy Helm chart ------------------ 82.51s", "vexxhost.kubernetes.kubernetes : Initialize cluster -------------------- 47.03s", "vexxhost.kubernetes.kubernetes : Install Kubernetes Python package using package manager on supported systems -- 10.85s", "vexxhost.containers.containerd : Install AppArmor packages -------------- 8.47s", "Install Debian packages ------------------------------------------------- 6.97s", "vexxhost.containers.download_artifact : Download item ------------------- 3.73s", "vexxhost.kubernetes.kubelet : Install additional packages --------------- 3.63s", "vexxhost.containers.download_artifact : Extract archive ----------------- 3.30s", "vexxhost.containers.download_artifact : Extract archive ----------------- 3.02s", "vexxhost.kubernetes.cilium : Deploy Helm chart -------------------------- 2.42s", "vexxhost.kubernetes.kubelet : Configure sysctl values ------------------- 2.18s", "vexxhost.containers.download_artifact : Extract archive ----------------- 2.10s", "vexxhost.kubernetes.kubelet : Reload systemd ---------------------------- 1.91s", "vexxhost.containers.download_artifact : Extract archive ----------------- 1.77s", "vexxhost.containers.download_artifact : Extract archive ----------------- 1.70s", "vexxhost.containers.download_artifact : Extract archive ----------------- 1.70s", "vexxhost.kubernetes.kube_vip : Uninstall legacy HA stack ---------------- 1.54s", "vexxhost.containers.download_artifact : Download item ------------------- 1.53s", "vexxhost.containers.containerd : Create folders for configuration ------- 1.52s", "vexxhost.containers.containerd : Create folders for configuration ------- 1.48s", "INFO [secretgen-controller > prepare] Executed: Successful", "INFO [secretgen-controller > converge] Executing", "", "PLAY [Deploy \"secretgen-controller\"] *******************************************", "", "TASK [atmosphere.common.secretgen_controller : Deploy secretgen-controller] ****", "Wednesday 20 May 2026 12:59:33 +0000 (0:00:00.013) 0:00:00.013 *********", "[WARNING]: Host 'controller' is using the discovered Python interpreter at '/usr/bin/python3.12', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.19/reference_appendices/interpreter_discovery.html for more information.", "[WARNING]: kubernetes<24.2.0 is not supported or tested. Some features may not work.", "[WARNING]: Deprecation warnings can be disabled by setting `deprecation_warnings=False` in ansible.cfg.", "[DEPRECATION WARNING]: Direct access to the `environment` attribute is deprecated. This feature will be removed from ansible-core version 2.23. Consider using `copy_with_new_env` or passing `overrides` to `template`.", "changed: [controller]", "", "PLAY RECAP *********************************************************************", "controller : ok=1 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0", "", "", "TASKS RECAP ********************************************************************", "Wednesday 20 May 2026 12:59:35 +0000 (0:00:01.471) 0:00:01.484 *********", "===============================================================================", "atmosphere.common.secretgen_controller : Deploy secretgen-controller ---- 1.47s", "INFO [secretgen-controller > converge] Executed: Successful", "INFO [secretgen-controller > idempotence] Executing", "", "PLAY [Deploy \"secretgen-controller\"] *******************************************", "", "TASK [atmosphere.common.secretgen_controller : Deploy secretgen-controller] ****", "Wednesday 20 May 2026 12:59:36 +0000 (0:00:00.012) 0:00:00.012 *********", "[WARNING]: Host 'controller' is using the discovered Python interpreter at '/usr/bin/python3.12', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.19/reference_appendices/interpreter_discovery.html for more information.", "[WARNING]: kubernetes<24.2.0 is not supported or tested. Some features may not work.", "[WARNING]: Deprecation warnings can be disabled by setting `deprecation_warnings=False` in ansible.cfg.", "[DEPRECATION WARNING]: Direct access to the `environment` attribute is deprecated. This feature will be removed from ansible-core version 2.23. Consider using `copy_with_new_env` or passing `overrides` to `template`.", "ok: [controller]", "", "PLAY RECAP *********************************************************************", "controller : ok=1 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0", "", "", "TASKS RECAP ********************************************************************", "Wednesday 20 May 2026 12:59:37 +0000 (0:00:01.426) 0:00:01.439 *********", "===============================================================================", "atmosphere.common.secretgen_controller : Deploy secretgen-controller ---- 1.43s", "INFO [secretgen-controller > idempotence] Executed: Successful", "INFO [secretgen-controller > side_effect] Executing", "WARNING [secretgen-controller > side_effect] Executed: Missing playbook (Remove from test_sequence to suppress)", "INFO [secretgen-controller > verify] Executing", "", "PLAY [Verify] ******************************************************************", "", "TASK [Gathering Facts] *********************************************************", "Wednesday 20 May 2026 12:59:38 +0000 (0:00:00.009) 0:00:00.009 *********", "[WARNING]: Host 'controller' is using the discovered Python interpreter at '/usr/bin/python3.12', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.19/reference_appendices/interpreter_discovery.html for more information.", "ok: [controller]", "", "TASK [Wait for secretgen-controller deployment to be available] ****************", "Wednesday 20 May 2026 12:59:40 +0000 (0:00:01.330) 0:00:01.340 *********", "[WARNING]: kubernetes<24.2.0 is not supported or tested. Some features may not work.", "ok: [controller]", "", "TASK [Create a test Password resource] *****************************************", "Wednesday 20 May 2026 12:59:41 +0000 (0:00:00.989) 0:00:02.329 *********", "changed: [controller]", "", "TASK [Wait for test-password secret to be generated] ***************************", "Wednesday 20 May 2026 12:59:42 +0000 (0:00:00.952) 0:00:03.281 *********", "ok: [controller]", "", "PLAY RECAP *********************************************************************", "controller : ok=4 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0", "", "", "TASKS RECAP ********************************************************************", "Wednesday 20 May 2026 12:59:42 +0000 (0:00:00.792) 0:00:04.074 *********", "===============================================================================", "Gathering Facts --------------------------------------------------------- 1.33s", "Wait for secretgen-controller deployment to be available ---------------- 0.99s", "Create a test Password resource ----------------------------------------- 0.95s", "Wait for test-password secret to be generated --------------------------- 0.79s", "INFO [secretgen-controller > verify] Executed: Successful", "INFO [secretgen-controller > cleanup] Executing", "WARNING [secretgen-controller > cleanup] Executed: Missing playbook (Remove from test_sequence to suppress)", "INFO [secretgen-controller > destroy] Executing", "WARNING [secretgen-controller > destroy] Skipping, '--destroy=never' requested.", "INFO [secretgen-controller > destroy] Executed: Successful", "WARNING Molecule executed 1 scenario (1 missing files)" ], "zuul_log_id": "0242ac17-0010-1c29-b4f2-000000000006-1-controller" } }, "task": { "duration": { "end": "2026-05-20T12:59:43.090276Z", "start": "2026-05-20T12:55:03.893361Z" }, "id": "0242ac17-0010-1c29-b4f2-000000000006", "name": "Run Molecule scenario" } } ] } ], "stats": { "controller": { "changed": 3, "failures": 0, "ignored": 0, "ok": 3, "rescued": 0, "skipped": 0, "unreachable": 0 } }, "trusted": false }, { "branch": "main", "index": "0", "phase": "post", "playbook": "github.com/vexxhost/zuul-config/playbooks/base/post.yaml", "plays": [ { "play": { "duration": { "end": "2026-05-20T12:59:47.073956Z", "start": "2026-05-20T12:59:43.882109Z" }, "id": "0242ac17-0010-8a9d-e72f-000000000002", "name": "all" }, "tasks": [ { "hosts": { "controller": { "action": "set_fact", "changed": false, "false_condition": "groups['all'] | length > 1", "skip_reason": "Conditional result was False", "skipped": true } }, "role": { "id": "0242ac17-0010-8a9d-e72f-000000000006", "name": "fetch-output", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/fetch-output" }, "task": { "duration": { "end": "2026-05-20T12:59:43.939210Z", "start": "2026-05-20T12:59:43.893598Z" }, "id": "0242ac17-0010-8a9d-e72f-000000000008", "name": "Set log path for multiple nodes" } }, { "hosts": { "controller": { "action": "set_fact", "ansible_facts": { "log_path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/logs" }, "changed": false } }, "role": { "id": "0242ac17-0010-8a9d-e72f-000000000006", "name": "fetch-output", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/fetch-output" }, "task": { "duration": { "end": "2026-05-20T12:59:43.997637Z", "start": "2026-05-20T12:59:43.949680Z" }, "id": "0242ac17-0010-8a9d-e72f-000000000009", "name": "Set log path for single node" } }, { "hosts": { "controller": { "action": "file", "changed": true, "msg": "All items completed", "results": [ { "ansible_loop_var": "zj_output_dir", "changed": false, "diff": { "after": { "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/logs" }, "before": { "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/logs" } }, "failed": false, "gid": 0, "group": "root", "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": 493, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/logs", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "directory", "unsafe_writes": false } }, "mode": "0755", "owner": "root", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/logs", "size": 4096, "state": "directory", "uid": 0, "zj_output_dir": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/logs" }, { "ansible_loop_var": "zj_output_dir", "changed": true, "diff": { "after": { "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/artifacts", "state": "directory" }, "before": { "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/artifacts", "state": "absent" } }, "failed": false, "gid": 0, "group": "root", "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": 493, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/artifacts", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "directory", "unsafe_writes": false } }, "mode": "0755", "owner": "root", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/artifacts", "size": 4096, "state": "directory", "uid": 0, "zj_output_dir": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/artifacts" }, { "ansible_loop_var": "zj_output_dir", "changed": true, "diff": { "after": { "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/docs", "state": "directory" }, "before": { "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/docs", "state": "absent" } }, "failed": false, "gid": 0, "group": "root", "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": 493, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/docs", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "directory", "unsafe_writes": false } }, "mode": "0755", "owner": "root", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/docs", "size": 4096, "state": "directory", "uid": 0, "zj_output_dir": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/docs" } ] } }, "role": { "id": "0242ac17-0010-8a9d-e72f-000000000006", "name": "fetch-output", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/fetch-output" }, "task": { "duration": { "end": "2026-05-20T12:59:44.797607Z", "start": "2026-05-20T12:59:44.004001Z" }, "id": "0242ac17-0010-8a9d-e72f-00000000000a", "name": "Ensure local output dirs" } }, { "hosts": { "controller": { "action": "synchronize", "changed": true, "msg": "All items completed", "results": [ { "ansible_loop_var": "zj_output", "changed": true, "cmd": "/usr/bin/rsync --delay-updates -F --compress --archive --no-owner --no-group --rsh='/usr/bin/ssh -S none -o Port=22' --out-format='<>%i %n%L' zuul@199.204.45.244:/home/zuul/zuul-output/logs/ /var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/logs/", "failed": false, "invocation": { "module_args": { "_local_rsync_password": null, "_local_rsync_path": "rsync", "_ssh_args": null, "_substitute_controller": false, "archive": true, "checksum": false, "compress": true, "copy_links": false, "delay_updates": true, "delete": false, "dest": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/logs/", "dest_port": 22, "dirs": false, "existing_only": false, "group": false, "link_dest": null, "links": null, "mode": "pull", "owner": false, "partial": false, "perms": null, "private_key": null, "recursive": null, "rsync_opts": [], "rsync_path": null, "rsync_timeout": 0, "set_remote_user": true, "src": "zuul@199.204.45.244:/home/zuul/zuul-output/logs/", "ssh_connection_multiplexing": false, "times": null, "use_ssh_args": false, "verify_host": true } }, "msg": ".d..t...... ./\n", "rc": 0, "stdout_lines": [ ".d..t...... ./" ], "zj_output": { "dest": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/logs", "src": "logs" } }, { "ansible_loop_var": "zj_output", "changed": true, "cmd": "/usr/bin/rsync --delay-updates -F --compress --archive --no-owner --no-group --rsh='/usr/bin/ssh -S none -o Port=22' --out-format='<>%i %n%L' zuul@199.204.45.244:/home/zuul/zuul-output/artifacts/ /var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/artifacts/", "failed": false, "invocation": { "module_args": { "_local_rsync_password": null, "_local_rsync_path": "rsync", "_ssh_args": null, "_substitute_controller": false, "archive": true, "checksum": false, "compress": true, "copy_links": false, "delay_updates": true, "delete": false, "dest": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/artifacts/", "dest_port": 22, "dirs": false, "existing_only": false, "group": false, "link_dest": null, "links": null, "mode": "pull", "owner": false, "partial": false, "perms": null, "private_key": null, "recursive": null, "rsync_opts": [], "rsync_path": null, "rsync_timeout": 0, "set_remote_user": true, "src": "zuul@199.204.45.244:/home/zuul/zuul-output/artifacts/", "ssh_connection_multiplexing": false, "times": null, "use_ssh_args": false, "verify_host": true } }, "msg": ".d..t...... ./\n", "rc": 0, "stdout_lines": [ ".d..t...... ./" ], "zj_output": { "dest": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/artifacts", "src": "artifacts" } }, { "ansible_loop_var": "zj_output", "changed": true, "cmd": "/usr/bin/rsync --delay-updates -F --compress --archive --no-owner --no-group --rsh='/usr/bin/ssh -S none -o Port=22' --out-format='<>%i %n%L' zuul@199.204.45.244:/home/zuul/zuul-output/docs/ /var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/docs/", "failed": false, "invocation": { "module_args": { "_local_rsync_password": null, "_local_rsync_path": "rsync", "_ssh_args": null, "_substitute_controller": false, "archive": true, "checksum": false, "compress": true, "copy_links": false, "delay_updates": true, "delete": false, "dest": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/docs/", "dest_port": 22, "dirs": false, "existing_only": false, "group": false, "link_dest": null, "links": null, "mode": "pull", "owner": false, "partial": false, "perms": null, "private_key": null, "recursive": null, "rsync_opts": [], "rsync_path": null, "rsync_timeout": 0, "set_remote_user": true, "src": "zuul@199.204.45.244:/home/zuul/zuul-output/docs/", "ssh_connection_multiplexing": false, "times": null, "use_ssh_args": false, "verify_host": true } }, "msg": ".d..t...... ./\n", "rc": 0, "stdout_lines": [ ".d..t...... ./" ], "zj_output": { "dest": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/docs", "src": "docs" } } ] } }, "role": { "id": "0242ac17-0010-8a9d-e72f-000000000006", "name": "fetch-output", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/fetch-output" }, "task": { "duration": { "end": "2026-05-20T12:59:46.396124Z", "start": "2026-05-20T12:59:44.806282Z" }, "id": "0242ac17-0010-8a9d-e72f-00000000000c", "name": "Collect logs, artifacts and docs" } }, { "hosts": { "controller": { "action": "shell", "changed": true, "msg": "All items completed", "results": [ { "ansible_loop_var": "zj_item", "changed": true, "cmd": "if [ -n \"$(find /var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/artifacts -mindepth 1)\" ] ; then\n # Only create target directory if it is needed.\n # Do not fail if it is already there.\n mkdir -p /var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/logs/artifacts\n # Leave the original directory behind so that other roles\n # operating on the interface directories can simply no-op.\n mv -f /var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/artifacts/* /var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/logs/artifacts\nfi\n", "delta": "0:00:00.008668", "end": "2026-05-20 12:59:46.782426", "failed": false, "invocation": { "module_args": { "_raw_params": "if [ -n \"$(find /var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/artifacts -mindepth 1)\" ] ; then\n # Only create target directory if it is needed.\n # Do not fail if it is already there.\n mkdir -p /var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/logs/artifacts\n # Leave the original directory behind so that other roles\n # operating on the interface directories can simply no-op.\n mv -f /var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/artifacts/* /var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/logs/artifacts\nfi\n", "_uses_shell": true, "argv": null, "chdir": null, "creates": null, "executable": null, "expand_argument_vars": true, "removes": null, "stdin": null, "stdin_add_newline": true, "strip_empty_ends": true, "zuul_ansible_split_streams": false, "zuul_log_id": "in-loop-ignore", "zuul_no_log": false, "zuul_output_max_bytes": 1073741824 } }, "msg": "", "rc": 0, "start": "2026-05-20 12:59:46.773758", "stderr": "", "stderr_lines": [], "stdout": "", "stdout_lines": [], "zj_item": "artifacts", "zuul_log_id": "in-loop-ignore" }, { "ansible_loop_var": "zj_item", "changed": true, "cmd": "if [ -n \"$(find /var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/docs -mindepth 1)\" ] ; then\n # Only create target directory if it is needed.\n # Do not fail if it is already there.\n mkdir -p /var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/logs/docs\n # Leave the original directory behind so that other roles\n # operating on the interface directories can simply no-op.\n mv -f /var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/docs/* /var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/logs/docs\nfi\n", "delta": "0:00:00.008269", "end": "2026-05-20 12:59:47.023719", "failed": false, "invocation": { "module_args": { "_raw_params": "if [ -n \"$(find /var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/docs -mindepth 1)\" ] ; then\n # Only create target directory if it is needed.\n # Do not fail if it is already there.\n mkdir -p /var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/logs/docs\n # Leave the original directory behind so that other roles\n # operating on the interface directories can simply no-op.\n mv -f /var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/docs/* /var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/work/logs/docs\nfi\n", "_uses_shell": true, "argv": null, "chdir": null, "creates": null, "executable": null, "expand_argument_vars": true, "removes": null, "stdin": null, "stdin_add_newline": true, "strip_empty_ends": true, "zuul_ansible_split_streams": false, "zuul_log_id": "in-loop-ignore", "zuul_no_log": false, "zuul_output_max_bytes": 1073741824 } }, "msg": "", "rc": 0, "start": "2026-05-20 12:59:47.015450", "stderr": "", "stderr_lines": [], "stdout": "", "stdout_lines": [], "zj_item": "docs", "zuul_log_id": "in-loop-ignore" } ] } }, "role": { "id": "0242ac17-0010-8a9d-e72f-00000000000f", "name": "merge-output-to-logs", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/merge-output-to-logs" }, "task": { "duration": { "end": "2026-05-20T12:59:47.073956Z", "start": "2026-05-20T12:59:46.409914Z" }, "id": "0242ac17-0010-8a9d-e72f-000000000011", "name": "Move artifacts and docs to logs dir" } } ] }, { "play": { "duration": { "end": "2026-05-20T12:59:47.562575Z", "start": "2026-05-20T12:59:47.086401Z" }, "id": "0242ac17-0010-8a9d-e72f-000000000013", "name": "all" }, "tasks": [ { "hosts": { "controller": { "action": "authorized_key", "changed": true, "comment": null, "exclusive": false, "follow": false, "invocation": { "module_args": { "changed": true, "comment": null, "exclusive": false, "follow": false, "key": "ssh-rsa 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 zuul-build-sshkey", "key_options": null, "keyfile": "/home/zuul/.ssh/authorized_keys", "manage_dir": true, "path": null, "state": "absent", "user": "zuul", "validate_certs": true } }, "key": "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCetb+PtmKXzV9nlpFzRB3VO6IGbBQ62XVgPDYrYAaZFUgqRyG3QeJCghDF41hmteOehlx5+0cmRZuGZjiqiL31wCOawsoDd4MjVRhOknR22S97Was6CGcWYGbpE8+o/mzaqlvB9puZNQFU2JTBql+hx/JVuXKXqiexCzJPmL+oU/q21i+9WdoyPgpUSH/Mn0coSfJJG3xu6aCJHSpweoC8vOElHyXyhq9xlN20rwb263fvPB9UDhI7lmjV6QEgdFC2h7kGzNo4QBL+mXXGVNvPPaSO5OE3NPu4bu+e4rvLS8eQpwqDK/9rsh/sdmbMeddbTH7xjkf4JdVuEFHpT54Omm3Ph5ppzCo8iQ2VRdtFoEVgxY5mdFyhE8DlgTA0HU3YVwgGbuB9serojvXGZJrBPqYmCAwWGRCxUr59nJBgglm3sI0uI2koO1LWi7IYDvSP4tOwUa39mfkzHKL2VLIDuBtWP+Y1zyyeTZTuFI7wPliHtZm8yBMyi3zog3T2IeM= zuul-build-sshkey", "key_options": null, "keyfile": "/home/zuul/.ssh/authorized_keys", "manage_dir": true, "path": null, "state": "absent", "user": "zuul", "validate_certs": true } }, "role": { "id": "0242ac17-0010-8a9d-e72f-000000000016", "name": "remove-build-sshkey", "path": "/var/lib/zuul/builds/0d9acc5383204797ab924da55add7cec/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/remove-build-sshkey" }, "task": { "duration": { "end": "2026-05-20T12:59:47.562575Z", "start": "2026-05-20T12:59:47.092491Z" }, "id": "0242ac17-0010-8a9d-e72f-000000000018", "name": "Remove the build SSH key from all nodes" } } ] } ], "stats": { "controller": { "changed": 4, "failures": 0, "ignored": 0, "ok": 5, "rescued": 0, "skipped": 1, "unreachable": 0 } }, "trusted": true } ]