all: children: cephs: hosts: instance: null computes: hosts: instance: null controllers: hosts: instance: null zuul_unreachable: hosts: {} hosts: instance: ansible_connection: ssh ansible_host: 199.204.45.72 ansible_port: 22 ansible_python_interpreter: auto ansible_user: zuul atmosphere_image_prefix: harbor.atmosphere.dev/ ceph_conf_overrides: - option: mon allow pool size one section: global value: true - option: osd crush chooseleaf type section: global value: 0 - option: auth allow insecure global id reclaim section: mon value: false ceph_csi_rbd_helm_values: provisioner: replicaCount: 1 ceph_fsid: 4837cbf8-4f90-4300-b3f6-726c9b9f89b4 ceph_osd_devices: - /dev/ceph-{{ inventory_hostname_short }}-osd0/data - /dev/ceph-{{ inventory_hostname_short }}-osd1/data - /dev/ceph-{{ inventory_hostname_short }}-osd2/data cilium_helm_values: operator: replicas: 1 csi_driver: local-path-provisioner kube_vip_address: 172.17.0.100 kube_vip_interface: '{{ ansible_facts[''default_ipv4''].interface }}' kubernetes_hostname: '{{ ansible_facts[''default_ipv4''].address }}' molecule_scenario: csi nodepool: az: nova cloud: public external_id: aacdc694-72e5-40ff-8f73-ad20bb5cca02 host_id: c9670958829e9c96e47d452d2c9c4ce9edaac336d3dbc4a3c4ec531c interface_ip: 199.204.45.72 label: ubuntu-jammy node_properties: {} private_ipv4: 199.204.45.72 private_ipv6: null provider: yul1 public_ipv4: 199.204.45.72 public_ipv6: 2604:e100:1:0:f816:3eff:fe4b:e16c region: ca-ymq-1 slot: null zuul_node: az: nova cloud: public external_id: aacdc694-72e5-40ff-8f73-ad20bb5cca02 host_id: c9670958829e9c96e47d452d2c9c4ce9edaac336d3dbc4a3c4ec531c interface_ip: 199.204.45.72 label: ubuntu-jammy node_properties: {} private_ipv4: 199.204.45.72 private_ipv6: null provider: yul1 public_ipv4: 199.204.45.72 public_ipv6: 2604:e100:1:0:f816:3eff:fe4b:e16c region: ca-ymq-1 slot: null uuid: null vars: atmosphere_image_prefix: harbor.atmosphere.dev/ ceph_conf_overrides: - option: mon allow pool size one section: global value: true - option: osd crush chooseleaf type section: global value: 0 - option: auth allow insecure global id reclaim section: mon value: false ceph_csi_rbd_helm_values: provisioner: replicaCount: 1 ceph_fsid: 4837cbf8-4f90-4300-b3f6-726c9b9f89b4 ceph_osd_devices: - /dev/ceph-{{ inventory_hostname_short }}-osd0/data - /dev/ceph-{{ inventory_hostname_short }}-osd1/data - /dev/ceph-{{ inventory_hostname_short }}-osd2/data cilium_helm_values: operator: replicas: 1 csi_driver: local-path-provisioner kube_vip_address: 172.17.0.100 kube_vip_interface: '{{ ansible_facts[''default_ipv4''].interface }}' kubernetes_hostname: '{{ ansible_facts[''default_ipv4''].address }}' molecule_scenario: csi zuul: _inheritance_path: - '' - '' - '' - '' - '' - '' ansible_version: '9' attempts: 1 branch: main build: 1c48e90df5274dd1a7cacb2d7706f232 build_refs: - branch: main change: '3712' change_message: 'feat(neutron): add support for Neutron FWaaS ## Summary Add an Ansible variable `neutron_fwaas_enabled` (default: `false`) to enable Neutron Firewall as a Service (FWaaS) with the OVN firewall service driver. ## Changes - **roles/neutron/defaults/main.yml**: Added `neutron_fwaas_enabled: false` - **roles/neutron/vars/main.yml**: Added FWaaS Helm values for both standard and OVN backends (OVN firewall L3 driver, `firewall_v2` service plugin) - **roles/neutron/tasks/main.yml**: Conditionally appends FWaaS Helm values when enabled - **charts/neutron/**: Added `neutron_fwaas.conf` to configmap and conditional volume mount in server deployment - **charts/patches/neutron/**: Added corresponding patch file ## Configuration To enable FWaaS: ```yaml neutron_fwaas_enabled: true ``` ## Related - Docker image support: https://github.com/vexxhost/docker-neutron/pull/634' change_url: https://github.com/vexxhost/atmosphere/pull/3712 commit_id: a4fd575bef511f38500ae617c28b163be5d8b37d patchset: a4fd575bef511f38500ae617c28b163be5d8b37d project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere name: vexxhost/atmosphere short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere src_dir: src/github.com/vexxhost/atmosphere topic: null buildset: d44531c46b1d4e158d6ae3e4e12df59e buildset_refs: - branch: main change: '3712' change_message: 'feat(neutron): add support for Neutron FWaaS ## Summary Add an Ansible variable `neutron_fwaas_enabled` (default: `false`) to enable Neutron Firewall as a Service (FWaaS) with the OVN firewall service driver. ## Changes - **roles/neutron/defaults/main.yml**: Added `neutron_fwaas_enabled: false` - **roles/neutron/vars/main.yml**: Added FWaaS Helm values for both standard and OVN backends (OVN firewall L3 driver, `firewall_v2` service plugin) - **roles/neutron/tasks/main.yml**: Conditionally appends FWaaS Helm values when enabled - **charts/neutron/**: Added `neutron_fwaas.conf` to configmap and conditional volume mount in server deployment - **charts/patches/neutron/**: Added corresponding patch file ## Configuration To enable FWaaS: ```yaml neutron_fwaas_enabled: true ``` ## Related - Docker image support: https://github.com/vexxhost/docker-neutron/pull/634' change_url: https://github.com/vexxhost/atmosphere/pull/3712 commit_id: a4fd575bef511f38500ae617c28b163be5d8b37d patchset: a4fd575bef511f38500ae617c28b163be5d8b37d project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere name: vexxhost/atmosphere short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere src_dir: src/github.com/vexxhost/atmosphere topic: null change: '3712' change_message: 'feat(neutron): add support for Neutron FWaaS ## Summary Add an Ansible variable `neutron_fwaas_enabled` (default: `false`) to enable Neutron Firewall as a Service (FWaaS) with the OVN firewall service driver. ## Changes - **roles/neutron/defaults/main.yml**: Added `neutron_fwaas_enabled: false` - **roles/neutron/vars/main.yml**: Added FWaaS Helm values for both standard and OVN backends (OVN firewall L3 driver, `firewall_v2` service plugin) - **roles/neutron/tasks/main.yml**: Conditionally appends FWaaS Helm values when enabled - **charts/neutron/**: Added `neutron_fwaas.conf` to configmap and conditional volume mount in server deployment - **charts/patches/neutron/**: Added corresponding patch file ## Configuration To enable FWaaS: ```yaml neutron_fwaas_enabled: true ``` ## Related - Docker image support: https://github.com/vexxhost/docker-neutron/pull/634' change_url: https://github.com/vexxhost/atmosphere/pull/3712 child_jobs: [] commit_id: a4fd575bef511f38500ae617c28b163be5d8b37d event_id: df5eaca0-16ed-11f1-99a3-a06898493715 executor: hostname: 0a8996d2b663 inventory_file: /var/lib/zuul/builds/1c48e90df5274dd1a7cacb2d7706f232/ansible/inventory.yaml log_root: /var/lib/zuul/builds/1c48e90df5274dd1a7cacb2d7706f232/work/logs result_data_file: /var/lib/zuul/builds/1c48e90df5274dd1a7cacb2d7706f232/work/results.json src_root: /var/lib/zuul/builds/1c48e90df5274dd1a7cacb2d7706f232/work/src work_root: /var/lib/zuul/builds/1c48e90df5274dd1a7cacb2d7706f232/work include_vars: [] items: - branch: main change: '3712' change_message: 'feat(neutron): add support for Neutron FWaaS ## Summary Add an Ansible variable `neutron_fwaas_enabled` (default: `false`) to enable Neutron Firewall as a Service (FWaaS) with the OVN firewall service driver. ## Changes - **roles/neutron/defaults/main.yml**: Added `neutron_fwaas_enabled: false` - **roles/neutron/vars/main.yml**: Added FWaaS Helm values for both standard and OVN backends (OVN firewall L3 driver, `firewall_v2` service plugin) - **roles/neutron/tasks/main.yml**: Conditionally appends FWaaS Helm values when enabled - **charts/neutron/**: Added `neutron_fwaas.conf` to configmap and conditional volume mount in server deployment - **charts/patches/neutron/**: Added corresponding patch file ## Configuration To enable FWaaS: ```yaml neutron_fwaas_enabled: true ``` ## Related - Docker image support: https://github.com/vexxhost/docker-neutron/pull/634' change_url: https://github.com/vexxhost/atmosphere/pull/3712 commit_id: a4fd575bef511f38500ae617c28b163be5d8b37d patchset: a4fd575bef511f38500ae617c28b163be5d8b37d project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere name: vexxhost/atmosphere short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere topic: null job: atmosphere-molecule-csi-local-path-provisioner jobtags: [] max_attempts: 3 message: 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 patchset: a4fd575bef511f38500ae617c28b163be5d8b37d pipeline: check playbook_context: playbook_projects: trusted/project_0/github.com/vexxhost/zuul-config: canonical_name: github.com/vexxhost/zuul-config checkout: main commit: 9052b5a7781b3346e4cffd452a54448cbff54d8b trusted/project_1/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: 571c0efa3491d12ecb8fc1169c510716d55c0fc2 trusted/project_2/github.com/vexxhost/zuul-jobs: canonical_name: github.com/vexxhost/zuul-jobs checkout: main commit: a6e68243e02ef030ce5e75f8b67630880c475f33 untrusted/project_0/github.com/vexxhost/zuul-jobs: canonical_name: github.com/vexxhost/zuul-jobs checkout: main commit: a6e68243e02ef030ce5e75f8b67630880c475f33 untrusted/project_1/github.com/vexxhost/zuul-config: canonical_name: github.com/vexxhost/zuul-config checkout: main commit: 9052b5a7781b3346e4cffd452a54448cbff54d8b untrusted/project_2/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: 571c0efa3491d12ecb8fc1169c510716d55c0fc2 untrusted/project_3/github.com/vexxhost/atmosphere: canonical_name: github.com/vexxhost/atmosphere checkout: main commit: a4fd575bef511f38500ae617c28b163be5d8b37d untrusted/project_4/opendev.org/openstack/openstack-helm: canonical_name: opendev.org/openstack/openstack-helm checkout: master commit: 81627775600f7f837c9e522606cac61c62f49bf5 playbooks: - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/molecule/run.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/playbook_0/role_1/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/playbook_0/role_1/zuul-jobs/roles - checkout: main checkout_description: playbook branch link_name: ansible/playbook_0/role_2/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/playbook_0/role_2/zuul-jobs/roles post_playbooks: - path: untrusted/project_3/github.com/vexxhost/atmosphere/test-playbooks/molecule/post.yml roles: - checkout: main checkout_description: playbook branch link_name: ansible/post_playbook_0/role_0/atmosphere link_target: untrusted/project_3/github.com/vexxhost/atmosphere role_path: ansible/post_playbook_0/role_0/atmosphere/roles - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_0/role_1/openstack-helm link_target: untrusted/project_4/opendev.org/openstack/openstack-helm role_path: ansible/post_playbook_0/role_1/openstack-helm/roles - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_0/role_3/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_0/role_3/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_0/role_4/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_0/role_4/zuul-jobs/roles - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_1/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_1/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_1/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_1/role_2/zuul-jobs/roles - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post-logs.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_2/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_2/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_2/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_2/role_2/zuul-jobs/roles pre_playbooks: - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/pre.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_0/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_0/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/pre_playbook_0/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_0/role_2/zuul-jobs/roles - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/molecule/pre.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_1/role_1/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_1/role_1/zuul-jobs/roles - checkout: main checkout_description: playbook branch link_name: ansible/pre_playbook_1/role_2/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_1/role_2/zuul-jobs/roles - path: untrusted/project_3/github.com/vexxhost/atmosphere/test-playbooks/molecule/pre.yml roles: - checkout: main checkout_description: playbook branch link_name: ansible/pre_playbook_2/role_0/atmosphere link_target: untrusted/project_3/github.com/vexxhost/atmosphere role_path: ansible/pre_playbook_2/role_0/atmosphere/roles - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_2/role_1/openstack-helm link_target: untrusted/project_4/opendev.org/openstack/openstack-helm role_path: ansible/pre_playbook_2/role_1/openstack-helm/roles - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_2/role_3/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_2/role_3/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/pre_playbook_2/role_4/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_2/role_4/zuul-jobs/roles post_review: false post_timeout: null pre_timeout: null project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere name: vexxhost/atmosphere short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere projects: github.com/vexxhost/atmosphere: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere checkout: main checkout_description: zuul branch commit: a4fd575bef511f38500ae617c28b163be5d8b37d name: vexxhost/atmosphere required: false short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere ref: refs/pull/3712/head resources: {} tenant: oss timeout: 1800 topic: null voting: true