all:
  children:
    cephs:
      hosts:
        instance: null
    computes:
      hosts:
        instance: null
    controllers:
      hosts:
        instance: null
    zuul_unreachable:
      hosts: {}
  hosts:
    instance:
      ansible_connection: ssh
      ansible_host: 199.19.213.29
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      atmosphere_deploy_tags: kubernetes,csi,cert-manager,cluster-issuer,ingress-nginx,rabbitmq-cluster-operator,percona-xtradb-cluster-operator,percona-xtradb-cluster,valkey,memcached,keycloak,kube-prometheus-stack,keystone,horizon
      atmosphere_image_prefix: harbor.atmosphere.dev/
      ceph_conf_overrides:
      - option: mon allow pool size one
        section: global
        value: true
      - option: osd crush chooseleaf type
        section: global
        value: 0
      - option: auth allow insecure global id reclaim
        section: mon
        value: false
      ceph_csi_rbd_helm_values:
        provisioner:
          replicaCount: 1
      ceph_fsid: 4837cbf8-4f90-4300-b3f6-726c9b9f89b4
      ceph_osd_devices:
      - /dev/ceph-{{ inventory_hostname_short }}-osd0/data
      - /dev/ceph-{{ inventory_hostname_short }}-osd1/data
      - /dev/ceph-{{ inventory_hostname_short }}-osd2/data
      ceph_public_network: '{{ ansible_facts[''default_ipv4''][''network''] + ''/''
        + (ansible_facts[''default_ipv4''][''prefix''] | string) }}'
      cilium_helm_values:
        operator:
          replicas: 1
      cluster_issuer_type: self-signed
      csi_driver: local-path-provisioner
      ingress_nginx_helm_values:
        controller:
          config:
            worker-processes: 2
      keystone_helm_values:
        pod:
          replicas:
            api: 1
      kube_vip_address: 172.17.0.100
      kube_vip_interface: '{{ ansible_facts[''default_ipv4''].interface }}'
      kubernetes_hostname: '{{ ansible_facts[''default_ipv4''].address }}'
      molecule_scenario: keycloak
      nodepool:
        az: nova
        cloud: public
        external_id: 0f923744-f52a-4dba-8d1e-45390ece9fd3
        host_id: 75d3a86f985f0d60e3cff8f4ecdf5573fc58e724d10889e9f3cb3f12
        interface_ip: 199.19.213.29
        label: ubuntu-jammy
        node_properties: {}
        private_ipv4: 199.19.213.29
        private_ipv6: null
        provider: yul1
        public_ipv4: 199.19.213.29
        public_ipv6: 2604:e100:1:0:f816:3eff:fe9c:f220
        region: ca-ymq-1
        slot: null
      percona_xtradb_cluster_spec:
        allowUnsafeConfigurations: true
        haproxy:
          size: 1
        pxc:
          size: 1
      zuul_node:
        az: nova
        cloud: public
        external_id: 0f923744-f52a-4dba-8d1e-45390ece9fd3
        host_id: 75d3a86f985f0d60e3cff8f4ecdf5573fc58e724d10889e9f3cb3f12
        interface_ip: 199.19.213.29
        label: ubuntu-jammy
        node_properties: {}
        private_ipv4: 199.19.213.29
        private_ipv6: null
        provider: yul1
        public_ipv4: 199.19.213.29
        public_ipv6: 2604:e100:1:0:f816:3eff:fe9c:f220
        region: ca-ymq-1
        slot: null
        uuid: null
  vars:
    atmosphere_deploy_tags: kubernetes,csi,cert-manager,cluster-issuer,ingress-nginx,rabbitmq-cluster-operator,percona-xtradb-cluster-operator,percona-xtradb-cluster,valkey,memcached,keycloak,kube-prometheus-stack,keystone,horizon
    atmosphere_image_prefix: harbor.atmosphere.dev/
    ceph_conf_overrides:
    - option: mon allow pool size one
      section: global
      value: true
    - option: osd crush chooseleaf type
      section: global
      value: 0
    - option: auth allow insecure global id reclaim
      section: mon
      value: false
    ceph_csi_rbd_helm_values:
      provisioner:
        replicaCount: 1
    ceph_fsid: 4837cbf8-4f90-4300-b3f6-726c9b9f89b4
    ceph_osd_devices:
    - /dev/ceph-{{ inventory_hostname_short }}-osd0/data
    - /dev/ceph-{{ inventory_hostname_short }}-osd1/data
    - /dev/ceph-{{ inventory_hostname_short }}-osd2/data
    ceph_public_network: '{{ ansible_facts[''default_ipv4''][''network''] + ''/''
      + (ansible_facts[''default_ipv4''][''prefix''] | string) }}'
    cilium_helm_values:
      operator:
        replicas: 1
    cluster_issuer_type: self-signed
    csi_driver: local-path-provisioner
    ingress_nginx_helm_values:
      controller:
        config:
          worker-processes: 2
    keystone_helm_values:
      pod:
        replicas:
          api: 1
    kube_vip_address: 172.17.0.100
    kube_vip_interface: '{{ ansible_facts[''default_ipv4''].interface }}'
    kubernetes_hostname: '{{ ansible_facts[''default_ipv4''].address }}'
    molecule_scenario: keycloak
    percona_xtradb_cluster_spec:
      allowUnsafeConfigurations: true
      haproxy:
        size: 1
      pxc:
        size: 1
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: vexxhost/zuul-config/zuul.d/jobs.yaml@main#1>'
      - '<Job molecule explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: vexxhost/zuul-jobs/zuul.d/ansible-jobs.yaml@main#1>'
      - '<Job atmosphere-molecule explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: vexxhost/atmosphere/.zuul.yaml@main#24>'
      - '<Job atmosphere-molecule-keycloak explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: vexxhost/atmosphere/.zuul.yaml@main#288>'
      - '<Job atmosphere-molecule-keycloak explicit: None implied: None source: vexxhost/atmosphere/.zuul.yaml@main#314>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: 2977a08611884487a3dee18d5278fe3e
      build_refs:
      - branch: main
        change: '3875'
        change_message: "feat(deploy): schedule DAG with per-node readiness instead
          of wave barriers\n\n## Summary\n\nReplace the wave-barrier scheduler in
          `pkg/dag/dag.go` with an event-driven (per-node readiness) one. Each component
          starts as soon as its own `DependsOn` nodes are complete, instead of waiting
          for the entire Kahn wave to drain.\n\n## Motivation\n\nCritical-path analysis
          of #3841 showed a **340s idle gap** on wave 2 of an AIO check build:\n\n-
          `cert-manager` ends at 253s.\n- `percona-xtradb-cluster-operator` only declares
          `DependsOn: [\"cert-manager\"]`, so it *should* start immediately at 253s.\n-
          Instead it starts at 593s, because `cert-manager` and `ceph` both have `kubernetes`
          as their only dep and therefore share a wave \u2014 and `ceph` is the long
          pole of that wave.\n\nThat 340-second stall isn't in any `DependsOn` declaration.
          It's purely an artifact of the `Waves()`-driven loop in `Run`:\n\n```go\nfor
          _, wave := range waves {\n    ...\n    if err := eg.Wait(); err != nil {
          return err }  // \u2190 barrier\n}\n```\n\n## Change\n\n`Run` now:\n\n-
          Spawns one goroutine per node up front.\n- Each goroutine `select`s on the
          `done` channels of its direct deps (or `ctx.Done()`).\n- Acquires the global
          concurrency semaphore (`concurrency` parameter, if > 0).\n- Calls `fn`,
          and on success closes its own `done` channel to unblock dependents.\n- On
          error, leaves its `done` channel **open** so dependents exit via the errgroup
          context cancellation.\n\nCycle detection is preserved by calling `Waves()`
          purely as a validation step before scheduling.\n\n## Correctness\n\n- Partial
          order from `DependsOn` is fully preserved (each node waits on every declared
          dep).\n- Failures propagate: failed node's dependents are cancelled, not
          hung.\n- `concurrency` becomes a **global** in-flight cap rather than per-wave.
          That matches what we actually want to bound (how many playbooks run at once
          on the executor).\n\n## Tests\n\n- `TestRunShortNodeNotBlockedByUnrelatedLongNode`
          \u2014 regression test that locks in the new behavior: a short node starts
          before an unrelated long node in the same Kahn wave finishes.\n- `TestRunStopsDependentsOnError`
          \u2014 dependents of a failed node never run.\n- `TestRunConcurrencyCap`
          \u2014 global cap bounds in-flight across the whole graph.\n- All existing
          tests (ordering, parallelism, subgraph, reverse) still pass.\n- `go test
          ./pkg/dag/ ./internal/deploy/ -race` is green.\n\n## Expected CP impact\n\nOn
          the measured #3841 build, the single direct saving on the critical path
          is bounded by where the pxc chain ultimately re-joins ceph via `csi`. But
          the **scheduler change is infrastructure, not a point fix**: any future
          build where a short node is wave-pinned behind a long unrelated node benefits
          immediately, without touching the DAG.\n\nNext PRs in this series (nova/neutron
          split, `glance_pre`, etc.) rely on this scheduler to realize their full
          savings.\n\n## Stacking\n\nBranched from `feat/parallel-deploy-orchestrator`
          (#3818) because it builds on that orchestrator. Targets `main` so that once
          #3818 merges, this PR's diff collapses to just the three files above.\n\n##
          Files\n\n- `pkg/dag/dag.go` \u2014 event-driven `Run`.\n- `pkg/dag/dag_test.go`
          \u2014 three new tests.\n- `releasenotes/notes/dag-event-driven-scheduler-*.yaml`
          \u2014 release note.\n"
        change_url: https://github.com/vexxhost/atmosphere/pull/3875
        commit_id: 3b1bce496ed411ce63463cfaa51b7b575ab13f2d
        patchset: 3b1bce496ed411ce63463cfaa51b7b575ab13f2d
        project:
          canonical_hostname: github.com
          canonical_name: github.com/vexxhost/atmosphere
          name: vexxhost/atmosphere
          short_name: atmosphere
          src_dir: src/github.com/vexxhost/atmosphere
        src_dir: src/github.com/vexxhost/atmosphere
        topic: null
      buildset: 232b6ed0fb5744ad9d681c093885c6b8
      buildset_refs:
      - branch: main
        change: '3875'
        change_message: "feat(deploy): schedule DAG with per-node readiness instead
          of wave barriers\n\n## Summary\n\nReplace the wave-barrier scheduler in
          `pkg/dag/dag.go` with an event-driven (per-node readiness) one. Each component
          starts as soon as its own `DependsOn` nodes are complete, instead of waiting
          for the entire Kahn wave to drain.\n\n## Motivation\n\nCritical-path analysis
          of #3841 showed a **340s idle gap** on wave 2 of an AIO check build:\n\n-
          `cert-manager` ends at 253s.\n- `percona-xtradb-cluster-operator` only declares
          `DependsOn: [\"cert-manager\"]`, so it *should* start immediately at 253s.\n-
          Instead it starts at 593s, because `cert-manager` and `ceph` both have `kubernetes`
          as their only dep and therefore share a wave \u2014 and `ceph` is the long
          pole of that wave.\n\nThat 340-second stall isn't in any `DependsOn` declaration.
          It's purely an artifact of the `Waves()`-driven loop in `Run`:\n\n```go\nfor
          _, wave := range waves {\n    ...\n    if err := eg.Wait(); err != nil {
          return err }  // \u2190 barrier\n}\n```\n\n## Change\n\n`Run` now:\n\n-
          Spawns one goroutine per node up front.\n- Each goroutine `select`s on the
          `done` channels of its direct deps (or `ctx.Done()`).\n- Acquires the global
          concurrency semaphore (`concurrency` parameter, if > 0).\n- Calls `fn`,
          and on success closes its own `done` channel to unblock dependents.\n- On
          error, leaves its `done` channel **open** so dependents exit via the errgroup
          context cancellation.\n\nCycle detection is preserved by calling `Waves()`
          purely as a validation step before scheduling.\n\n## Correctness\n\n- Partial
          order from `DependsOn` is fully preserved (each node waits on every declared
          dep).\n- Failures propagate: failed node's dependents are cancelled, not
          hung.\n- `concurrency` becomes a **global** in-flight cap rather than per-wave.
          That matches what we actually want to bound (how many playbooks run at once
          on the executor).\n\n## Tests\n\n- `TestRunShortNodeNotBlockedByUnrelatedLongNode`
          \u2014 regression test that locks in the new behavior: a short node starts
          before an unrelated long node in the same Kahn wave finishes.\n- `TestRunStopsDependentsOnError`
          \u2014 dependents of a failed node never run.\n- `TestRunConcurrencyCap`
          \u2014 global cap bounds in-flight across the whole graph.\n- All existing
          tests (ordering, parallelism, subgraph, reverse) still pass.\n- `go test
          ./pkg/dag/ ./internal/deploy/ -race` is green.\n\n## Expected CP impact\n\nOn
          the measured #3841 build, the single direct saving on the critical path
          is bounded by where the pxc chain ultimately re-joins ceph via `csi`. But
          the **scheduler change is infrastructure, not a point fix**: any future
          build where a short node is wave-pinned behind a long unrelated node benefits
          immediately, without touching the DAG.\n\nNext PRs in this series (nova/neutron
          split, `glance_pre`, etc.) rely on this scheduler to realize their full
          savings.\n\n## Stacking\n\nBranched from `feat/parallel-deploy-orchestrator`
          (#3818) because it builds on that orchestrator. Targets `main` so that once
          #3818 merges, this PR's diff collapses to just the three files above.\n\n##
          Files\n\n- `pkg/dag/dag.go` \u2014 event-driven `Run`.\n- `pkg/dag/dag_test.go`
          \u2014 three new tests.\n- `releasenotes/notes/dag-event-driven-scheduler-*.yaml`
          \u2014 release note.\n"
        change_url: https://github.com/vexxhost/atmosphere/pull/3875
        commit_id: 3b1bce496ed411ce63463cfaa51b7b575ab13f2d
        patchset: 3b1bce496ed411ce63463cfaa51b7b575ab13f2d
        project:
          canonical_hostname: github.com
          canonical_name: github.com/vexxhost/atmosphere
          name: vexxhost/atmosphere
          short_name: atmosphere
          src_dir: src/github.com/vexxhost/atmosphere
        src_dir: src/github.com/vexxhost/atmosphere
        topic: null
      change: '3875'
      change_message: "feat(deploy): schedule DAG with per-node readiness instead
        of wave barriers\n\n## Summary\n\nReplace the wave-barrier scheduler in `pkg/dag/dag.go`
        with an event-driven (per-node readiness) one. Each component starts as soon
        as its own `DependsOn` nodes are complete, instead of waiting for the entire
        Kahn wave to drain.\n\n## Motivation\n\nCritical-path analysis of #3841 showed
        a **340s idle gap** on wave 2 of an AIO check build:\n\n- `cert-manager` ends
        at 253s.\n- `percona-xtradb-cluster-operator` only declares `DependsOn: [\"cert-manager\"]`,
        so it *should* start immediately at 253s.\n- Instead it starts at 593s, because
        `cert-manager` and `ceph` both have `kubernetes` as their only dep and therefore
        share a wave \u2014 and `ceph` is the long pole of that wave.\n\nThat 340-second
        stall isn't in any `DependsOn` declaration. It's purely an artifact of the
        `Waves()`-driven loop in `Run`:\n\n```go\nfor _, wave := range waves {\n    ...\n
        \   if err := eg.Wait(); err != nil { return err }  // \u2190 barrier\n}\n```\n\n##
        Change\n\n`Run` now:\n\n- Spawns one goroutine per node up front.\n- Each
        goroutine `select`s on the `done` channels of its direct deps (or `ctx.Done()`).\n-
        Acquires the global concurrency semaphore (`concurrency` parameter, if > 0).\n-
        Calls `fn`, and on success closes its own `done` channel to unblock dependents.\n-
        On error, leaves its `done` channel **open** so dependents exit via the errgroup
        context cancellation.\n\nCycle detection is preserved by calling `Waves()`
        purely as a validation step before scheduling.\n\n## Correctness\n\n- Partial
        order from `DependsOn` is fully preserved (each node waits on every declared
        dep).\n- Failures propagate: failed node's dependents are cancelled, not hung.\n-
        `concurrency` becomes a **global** in-flight cap rather than per-wave. That
        matches what we actually want to bound (how many playbooks run at once on
        the executor).\n\n## Tests\n\n- `TestRunShortNodeNotBlockedByUnrelatedLongNode`
        \u2014 regression test that locks in the new behavior: a short node starts
        before an unrelated long node in the same Kahn wave finishes.\n- `TestRunStopsDependentsOnError`
        \u2014 dependents of a failed node never run.\n- `TestRunConcurrencyCap` \u2014
        global cap bounds in-flight across the whole graph.\n- All existing tests
        (ordering, parallelism, subgraph, reverse) still pass.\n- `go test ./pkg/dag/
        ./internal/deploy/ -race` is green.\n\n## Expected CP impact\n\nOn the measured
        #3841 build, the single direct saving on the critical path is bounded by where
        the pxc chain ultimately re-joins ceph via `csi`. But the **scheduler change
        is infrastructure, not a point fix**: any future build where a short node
        is wave-pinned behind a long unrelated node benefits immediately, without
        touching the DAG.\n\nNext PRs in this series (nova/neutron split, `glance_pre`,
        etc.) rely on this scheduler to realize their full savings.\n\n## Stacking\n\nBranched
        from `feat/parallel-deploy-orchestrator` (#3818) because it builds on that
        orchestrator. Targets `main` so that once #3818 merges, this PR's diff collapses
        to just the three files above.\n\n## Files\n\n- `pkg/dag/dag.go` \u2014 event-driven
        `Run`.\n- `pkg/dag/dag_test.go` \u2014 three new tests.\n- `releasenotes/notes/dag-event-driven-scheduler-*.yaml`
        \u2014 release note.\n"
      change_url: https://github.com/vexxhost/atmosphere/pull/3875
      child_jobs: []
      commit_id: 3b1bce496ed411ce63463cfaa51b7b575ab13f2d
      event_id: 174695c0-3f88-11f1-9e69-3725010d4f21
      executor:
        hostname: 0a8996d2b663
        inventory_file: /var/lib/zuul/builds/2977a08611884487a3dee18d5278fe3e/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/2977a08611884487a3dee18d5278fe3e/work/logs
        result_data_file: /var/lib/zuul/builds/2977a08611884487a3dee18d5278fe3e/work/results.json
        src_root: /var/lib/zuul/builds/2977a08611884487a3dee18d5278fe3e/work/src
        work_root: /var/lib/zuul/builds/2977a08611884487a3dee18d5278fe3e/work
      include_vars: []
      items:
      - branch: main
        change: '3875'
        change_message: "feat(deploy): schedule DAG with per-node readiness instead
          of wave barriers\n\n## Summary\n\nReplace the wave-barrier scheduler in
          `pkg/dag/dag.go` with an event-driven (per-node readiness) one. Each component
          starts as soon as its own `DependsOn` nodes are complete, instead of waiting
          for the entire Kahn wave to drain.\n\n## Motivation\n\nCritical-path analysis
          of #3841 showed a **340s idle gap** on wave 2 of an AIO check build:\n\n-
          `cert-manager` ends at 253s.\n- `percona-xtradb-cluster-operator` only declares
          `DependsOn: [\"cert-manager\"]`, so it *should* start immediately at 253s.\n-
          Instead it starts at 593s, because `cert-manager` and `ceph` both have `kubernetes`
          as their only dep and therefore share a wave \u2014 and `ceph` is the long
          pole of that wave.\n\nThat 340-second stall isn't in any `DependsOn` declaration.
          It's purely an artifact of the `Waves()`-driven loop in `Run`:\n\n```go\nfor
          _, wave := range waves {\n    ...\n    if err := eg.Wait(); err != nil {
          return err }  // \u2190 barrier\n}\n```\n\n## Change\n\n`Run` now:\n\n-
          Spawns one goroutine per node up front.\n- Each goroutine `select`s on the
          `done` channels of its direct deps (or `ctx.Done()`).\n- Acquires the global
          concurrency semaphore (`concurrency` parameter, if > 0).\n- Calls `fn`,
          and on success closes its own `done` channel to unblock dependents.\n- On
          error, leaves its `done` channel **open** so dependents exit via the errgroup
          context cancellation.\n\nCycle detection is preserved by calling `Waves()`
          purely as a validation step before scheduling.\n\n## Correctness\n\n- Partial
          order from `DependsOn` is fully preserved (each node waits on every declared
          dep).\n- Failures propagate: failed node's dependents are cancelled, not
          hung.\n- `concurrency` becomes a **global** in-flight cap rather than per-wave.
          That matches what we actually want to bound (how many playbooks run at once
          on the executor).\n\n## Tests\n\n- `TestRunShortNodeNotBlockedByUnrelatedLongNode`
          \u2014 regression test that locks in the new behavior: a short node starts
          before an unrelated long node in the same Kahn wave finishes.\n- `TestRunStopsDependentsOnError`
          \u2014 dependents of a failed node never run.\n- `TestRunConcurrencyCap`
          \u2014 global cap bounds in-flight across the whole graph.\n- All existing
          tests (ordering, parallelism, subgraph, reverse) still pass.\n- `go test
          ./pkg/dag/ ./internal/deploy/ -race` is green.\n\n## Expected CP impact\n\nOn
          the measured #3841 build, the single direct saving on the critical path
          is bounded by where the pxc chain ultimately re-joins ceph via `csi`. But
          the **scheduler change is infrastructure, not a point fix**: any future
          build where a short node is wave-pinned behind a long unrelated node benefits
          immediately, without touching the DAG.\n\nNext PRs in this series (nova/neutron
          split, `glance_pre`, etc.) rely on this scheduler to realize their full
          savings.\n\n## Stacking\n\nBranched from `feat/parallel-deploy-orchestrator`
          (#3818) because it builds on that orchestrator. Targets `main` so that once
          #3818 merges, this PR's diff collapses to just the three files above.\n\n##
          Files\n\n- `pkg/dag/dag.go` \u2014 event-driven `Run`.\n- `pkg/dag/dag_test.go`
          \u2014 three new tests.\n- `releasenotes/notes/dag-event-driven-scheduler-*.yaml`
          \u2014 release note.\n"
        change_url: https://github.com/vexxhost/atmosphere/pull/3875
        commit_id: 3b1bce496ed411ce63463cfaa51b7b575ab13f2d
        patchset: 3b1bce496ed411ce63463cfaa51b7b575ab13f2d
        project:
          canonical_hostname: github.com
          canonical_name: github.com/vexxhost/atmosphere
          name: vexxhost/atmosphere
          short_name: atmosphere
          src_dir: src/github.com/vexxhost/atmosphere
        topic: null
      job: atmosphere-molecule-keycloak
      jobtags: []
      max_attempts: 3
      message: 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
      patchset: 3b1bce496ed411ce63463cfaa51b7b575ab13f2d
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/vexxhost/zuul-config:
            canonical_name: github.com/vexxhost/zuul-config
            checkout: main
            commit: 298983cd1253e6833abdb49d87d912527e0e6597
          trusted/project_1/opendev.org/zuul/zuul-jobs:
            canonical_name: opendev.org/zuul/zuul-jobs
            checkout: master
            commit: 9f5c1d680d573485f0ccdb18d2184d4f1d446419
          trusted/project_2/github.com/vexxhost/zuul-jobs:
            canonical_name: github.com/vexxhost/zuul-jobs
            checkout: main
            commit: a6e68243e02ef030ce5e75f8b67630880c475f33
          untrusted/project_0/github.com/vexxhost/zuul-jobs:
            canonical_name: github.com/vexxhost/zuul-jobs
            checkout: main
            commit: a6e68243e02ef030ce5e75f8b67630880c475f33
          untrusted/project_1/github.com/vexxhost/zuul-config:
            canonical_name: github.com/vexxhost/zuul-config
            checkout: main
            commit: 298983cd1253e6833abdb49d87d912527e0e6597
          untrusted/project_2/opendev.org/zuul/zuul-jobs:
            canonical_name: opendev.org/zuul/zuul-jobs
            checkout: master
            commit: 9f5c1d680d573485f0ccdb18d2184d4f1d446419
          untrusted/project_3/github.com/vexxhost/atmosphere:
            canonical_name: github.com/vexxhost/atmosphere
            checkout: main
            commit: 3b1bce496ed411ce63463cfaa51b7b575ab13f2d
          untrusted/project_4/opendev.org/openstack/openstack-helm:
            canonical_name: opendev.org/openstack/openstack-helm
            checkout: master
            commit: 5d86e6f72b92d635fcb0c870dc69b170e2a3abca
        playbooks:
        - path: untrusted/project_3/github.com/vexxhost/atmosphere/molecule/keycloak/converge.yml
          roles:
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_0/role_0/atmosphere
            link_target: untrusted/project_3/github.com/vexxhost/atmosphere
            role_path: ansible/playbook_0/role_0/atmosphere/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_1/openstack-helm
            link_target: untrusted/project_4/opendev.org/openstack/openstack-helm
            role_path: ansible/playbook_0/role_1/openstack-helm/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_3/zuul-jobs
            link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs
            role_path: ansible/playbook_0/role_3/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_4/zuul-jobs
            link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs
            role_path: ansible/playbook_0/role_4/zuul-jobs/roles
        - path: untrusted/project_3/github.com/vexxhost/atmosphere/test-playbooks/molecule/run.yml
          roles:
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_1/role_0/atmosphere
            link_target: untrusted/project_3/github.com/vexxhost/atmosphere
            role_path: ansible/playbook_1/role_0/atmosphere/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_1/role_1/openstack-helm
            link_target: untrusted/project_4/opendev.org/openstack/openstack-helm
            role_path: ansible/playbook_1/role_1/openstack-helm/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_1/role_3/zuul-jobs
            link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs
            role_path: ansible/playbook_1/role_3/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_1/role_4/zuul-jobs
            link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs
            role_path: ansible/playbook_1/role_4/zuul-jobs/roles
        post_playbooks:
        - path: untrusted/project_3/github.com/vexxhost/atmosphere/test-playbooks/molecule/post.yml
          roles:
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/post_playbook_0/role_0/atmosphere
            link_target: untrusted/project_3/github.com/vexxhost/atmosphere
            role_path: ansible/post_playbook_0/role_0/atmosphere/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/post_playbook_0/role_1/openstack-helm
            link_target: untrusted/project_4/opendev.org/openstack/openstack-helm
            role_path: ansible/post_playbook_0/role_1/openstack-helm/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/post_playbook_0/role_3/zuul-jobs
            link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs
            role_path: ansible/post_playbook_0/role_3/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/post_playbook_0/role_4/zuul-jobs
            link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs
            role_path: ansible/post_playbook_0/role_4/zuul-jobs/roles
        - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post.yaml
          roles:
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/post_playbook_1/role_1/zuul-jobs
            link_target: trusted/project_1/opendev.org/zuul/zuul-jobs
            role_path: ansible/post_playbook_1/role_1/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/post_playbook_1/role_2/zuul-jobs
            link_target: trusted/project_2/github.com/vexxhost/zuul-jobs
            role_path: ansible/post_playbook_1/role_2/zuul-jobs/roles
        - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post-logs.yaml
          roles:
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/post_playbook_2/role_1/zuul-jobs
            link_target: trusted/project_1/opendev.org/zuul/zuul-jobs
            role_path: ansible/post_playbook_2/role_1/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/post_playbook_2/role_2/zuul-jobs
            link_target: trusted/project_2/github.com/vexxhost/zuul-jobs
            role_path: ansible/post_playbook_2/role_2/zuul-jobs/roles
        pre_playbooks:
        - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/pre.yaml
          roles:
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/pre_playbook_0/role_1/zuul-jobs
            link_target: trusted/project_1/opendev.org/zuul/zuul-jobs
            role_path: ansible/pre_playbook_0/role_1/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/pre_playbook_0/role_2/zuul-jobs
            link_target: trusted/project_2/github.com/vexxhost/zuul-jobs
            role_path: ansible/pre_playbook_0/role_2/zuul-jobs/roles
        - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/molecule/pre.yaml
          roles:
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/pre_playbook_1/role_1/zuul-jobs
            link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs
            role_path: ansible/pre_playbook_1/role_1/zuul-jobs/roles
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/pre_playbook_1/role_2/zuul-jobs
            link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs
            role_path: ansible/pre_playbook_1/role_2/zuul-jobs/roles
        - path: untrusted/project_3/github.com/vexxhost/atmosphere/test-playbooks/molecule/pre.yml
          roles:
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/pre_playbook_2/role_0/atmosphere
            link_target: untrusted/project_3/github.com/vexxhost/atmosphere
            role_path: ansible/pre_playbook_2/role_0/atmosphere/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/pre_playbook_2/role_1/openstack-helm
            link_target: untrusted/project_4/opendev.org/openstack/openstack-helm
            role_path: ansible/pre_playbook_2/role_1/openstack-helm/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/pre_playbook_2/role_3/zuul-jobs
            link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs
            role_path: ansible/pre_playbook_2/role_3/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/pre_playbook_2/role_4/zuul-jobs
            link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs
            role_path: ansible/pre_playbook_2/role_4/zuul-jobs/roles
      post_review: false
      post_timeout: null
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/vexxhost/atmosphere
        name: vexxhost/atmosphere
        short_name: atmosphere
        src_dir: src/github.com/vexxhost/atmosphere
      projects:
        github.com/vexxhost/atmosphere:
          canonical_hostname: github.com
          canonical_name: github.com/vexxhost/atmosphere
          checkout: main
          checkout_description: zuul branch
          commit: 3b1bce496ed411ce63463cfaa51b7b575ab13f2d
          name: vexxhost/atmosphere
          required: false
          short_name: atmosphere
          src_dir: src/github.com/vexxhost/atmosphere
      ref: refs/pull/3875/head
      resources: {}
      tenant: oss
      timeout: 1800
      topic: null
      voting: true
