all: children: controllers: hosts: controller: null zuul_unreachable: hosts: {} hosts: controller: ansible_connection: ssh ansible_host: 162.253.55.66 ansible_port: 22 ansible_python_interpreter: auto ansible_user: zuul cilium_helm_values: operator: replicas: 1 cilium_ipv4_cidr: 172.24.0.0/16 kube_vip_address: 172.17.0.100 kube_vip_interface: '{{ ansible_facts[''default_ipv4''].interface }}' kubernetes_hostname: '{{ ansible_facts[''default_ipv4''].address }}' kubernetes_version: 1.34.0 molecule_install_collection_siblings: true molecule_scenario: aio nodepool: az: yul2 cloud: public external_id: e70e8554-576d-4ad8-b615-0e9c2cc7f306 host_id: 9397092358959ee9f389c4841bc323dd9604367dc3a7f6383546ec8c interface_ip: 162.253.55.66 label: ubuntu-noble node_properties: {} private_ipv4: 162.253.55.66 private_ipv6: null provider: yul1 public_ipv4: 162.253.55.66 public_ipv6: 2604:e100:1:0:f816:3eff:fe1e:12d9 region: ca-ymq-1 slot: null zuul_node: az: yul2 cloud: public external_id: e70e8554-576d-4ad8-b615-0e9c2cc7f306 host_id: 9397092358959ee9f389c4841bc323dd9604367dc3a7f6383546ec8c interface_ip: 162.253.55.66 label: ubuntu-noble node_properties: {} private_ipv4: 162.253.55.66 private_ipv6: null provider: yul1 public_ipv4: 162.253.55.66 public_ipv6: 2604:e100:1:0:f816:3eff:fe1e:12d9 region: ca-ymq-1 slot: null uuid: null vars: cilium_helm_values: operator: replicas: 1 kubernetes_version: 1.34.0 molecule_install_collection_siblings: true molecule_scenario: aio zuul: _inheritance_path: - '' - '' - '' - '' - '' - '' ansible_version: '9' attempts: 1 branch: main build: 7cbb146c33e24b0691093baa1f729272 build_refs: - branch: main change: '302' change_message: 'fix(kubernetes): preserve control plane bind addresses on upgrade Upgrades of existing clusters can reset kube-scheduler and kube-controller-manager to `127.0.0.1` when their bind-address overrides are missing from the stored `kubeadm-config`, even though the rendered local configuration specifies `0.0.0.0`. This makes their health and metrics endpoints unreachable through the node IPs. Reconcile only those two bind addresses in the shared `ClusterConfiguration` before `kubeadm upgrade apply`, preserving all other cluster settings and component arguments. Subsequent control-plane nodes read the corrected configuration during `kubeadm upgrade node`. Handle both legacy argument mappings and v1beta4 argument lists, and document the upgrade behavior. Validation: - All 56 unit tests passed, including preservation of custom settings, missing arguments, repeated v1beta4 arguments, and idempotence. - Pre-commit checks on the changed files. - On a Kubernetes 1.29.15 AIO, recreated the missing-bind configuration and applied the actual reconciliation tasks: both overrides were restored, every other stored setting remained unchanged, and a second application left the ConfigMap resource version unchanged. - `kubeadm upgrade apply --dry-run` generated both components with `--bind-address=0.0.0.0`. The AIO remained healthy after restoring its original ConfigMap representation. Live validation used one controller; a three-controller upgrade has not been tested. ' change_url: https://github.com/vexxhost/ansible-collection-kubernetes/pull/302 commit_id: 7d8cff48663ccf8e2e700501aa197c58aca3c900 patchset: 7d8cff48663ccf8e2e700501aa197c58aca3c900 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/ansible-collection-kubernetes name: vexxhost/ansible-collection-kubernetes short_name: ansible-collection-kubernetes src_dir: src/github.com/vexxhost/ansible-collection-kubernetes src_dir: src/github.com/vexxhost/ansible-collection-kubernetes topic: null buildset: 576942b2ace34815b2bc8d1295d087e8 buildset_refs: - branch: main change: '302' change_message: 'fix(kubernetes): preserve control plane bind addresses on upgrade Upgrades of existing clusters can reset kube-scheduler and kube-controller-manager to `127.0.0.1` when their bind-address overrides are missing from the stored `kubeadm-config`, even though the rendered local configuration specifies `0.0.0.0`. This makes their health and metrics endpoints unreachable through the node IPs. Reconcile only those two bind addresses in the shared `ClusterConfiguration` before `kubeadm upgrade apply`, preserving all other cluster settings and component arguments. Subsequent control-plane nodes read the corrected configuration during `kubeadm upgrade node`. Handle both legacy argument mappings and v1beta4 argument lists, and document the upgrade behavior. Validation: - All 56 unit tests passed, including preservation of custom settings, missing arguments, repeated v1beta4 arguments, and idempotence. - Pre-commit checks on the changed files. - On a Kubernetes 1.29.15 AIO, recreated the missing-bind configuration and applied the actual reconciliation tasks: both overrides were restored, every other stored setting remained unchanged, and a second application left the ConfigMap resource version unchanged. - `kubeadm upgrade apply --dry-run` generated both components with `--bind-address=0.0.0.0`. The AIO remained healthy after restoring its original ConfigMap representation. Live validation used one controller; a three-controller upgrade has not been tested. ' change_url: https://github.com/vexxhost/ansible-collection-kubernetes/pull/302 commit_id: 7d8cff48663ccf8e2e700501aa197c58aca3c900 patchset: 7d8cff48663ccf8e2e700501aa197c58aca3c900 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/ansible-collection-kubernetes name: vexxhost/ansible-collection-kubernetes short_name: ansible-collection-kubernetes src_dir: src/github.com/vexxhost/ansible-collection-kubernetes src_dir: src/github.com/vexxhost/ansible-collection-kubernetes topic: null change: '302' change_message: 'fix(kubernetes): preserve control plane bind addresses on upgrade Upgrades of existing clusters can reset kube-scheduler and kube-controller-manager to `127.0.0.1` when their bind-address overrides are missing from the stored `kubeadm-config`, even though the rendered local configuration specifies `0.0.0.0`. This makes their health and metrics endpoints unreachable through the node IPs. Reconcile only those two bind addresses in the shared `ClusterConfiguration` before `kubeadm upgrade apply`, preserving all other cluster settings and component arguments. Subsequent control-plane nodes read the corrected configuration during `kubeadm upgrade node`. Handle both legacy argument mappings and v1beta4 argument lists, and document the upgrade behavior. Validation: - All 56 unit tests passed, including preservation of custom settings, missing arguments, repeated v1beta4 arguments, and idempotence. - Pre-commit checks on the changed files. - On a Kubernetes 1.29.15 AIO, recreated the missing-bind configuration and applied the actual reconciliation tasks: both overrides were restored, every other stored setting remained unchanged, and a second application left the ConfigMap resource version unchanged. - `kubeadm upgrade apply --dry-run` generated both components with `--bind-address=0.0.0.0`. The AIO remained healthy after restoring its original ConfigMap representation. Live validation used one controller; a three-controller upgrade has not been tested. ' change_url: https://github.com/vexxhost/ansible-collection-kubernetes/pull/302 child_jobs: [] commit_id: 7d8cff48663ccf8e2e700501aa197c58aca3c900 event_id: d97935c4-cd4c-11f1-83f3-08027d6310fe executor: hostname: 2d72f0692154 inventory_file: /var/lib/zuul/builds/7cbb146c33e24b0691093baa1f729272/ansible/inventory.yaml log_root: /var/lib/zuul/builds/7cbb146c33e24b0691093baa1f729272/work/logs result_data_file: /var/lib/zuul/builds/7cbb146c33e24b0691093baa1f729272/work/results.json src_root: /var/lib/zuul/builds/7cbb146c33e24b0691093baa1f729272/work/src work_root: /var/lib/zuul/builds/7cbb146c33e24b0691093baa1f729272/work include_vars: [] items: - branch: main change: '302' change_message: 'fix(kubernetes): preserve control plane bind addresses on upgrade Upgrades of existing clusters can reset kube-scheduler and kube-controller-manager to `127.0.0.1` when their bind-address overrides are missing from the stored `kubeadm-config`, even though the rendered local configuration specifies `0.0.0.0`. This makes their health and metrics endpoints unreachable through the node IPs. Reconcile only those two bind addresses in the shared `ClusterConfiguration` before `kubeadm upgrade apply`, preserving all other cluster settings and component arguments. Subsequent control-plane nodes read the corrected configuration during `kubeadm upgrade node`. Handle both legacy argument mappings and v1beta4 argument lists, and document the upgrade behavior. Validation: - All 56 unit tests passed, including preservation of custom settings, missing arguments, repeated v1beta4 arguments, and idempotence. - Pre-commit checks on the changed files. - On a Kubernetes 1.29.15 AIO, recreated the missing-bind configuration and applied the actual reconciliation tasks: both overrides were restored, every other stored setting remained unchanged, and a second application left the ConfigMap resource version unchanged. - `kubeadm upgrade apply --dry-run` generated both components with `--bind-address=0.0.0.0`. The AIO remained healthy after restoring its original ConfigMap representation. Live validation used one controller; a three-controller upgrade has not been tested. ' change_url: https://github.com/vexxhost/ansible-collection-kubernetes/pull/302 commit_id: 7d8cff48663ccf8e2e700501aa197c58aca3c900 patchset: 7d8cff48663ccf8e2e700501aa197c58aca3c900 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/ansible-collection-kubernetes name: vexxhost/ansible-collection-kubernetes short_name: ansible-collection-kubernetes src_dir: src/github.com/vexxhost/ansible-collection-kubernetes topic: null job: ansible-collection-kubernetes-molecule-aio-ubuntu-noble jobtags: [] max_attempts: 3 message: Zml4KGt1YmVybmV0ZXMpOiBwcmVzZXJ2ZSBjb250cm9sIHBsYW5lIGJpbmQgYWRkcmVzc2VzIG9uIHVwZ3JhZGUKClVwZ3JhZGVzIG9mIGV4aXN0aW5nIGNsdXN0ZXJzIGNhbiByZXNldCBrdWJlLXNjaGVkdWxlciBhbmQga3ViZS1jb250cm9sbGVyLW1hbmFnZXIgdG8gYDEyNy4wLjAuMWAgd2hlbiB0aGVpciBiaW5kLWFkZHJlc3Mgb3ZlcnJpZGVzIGFyZSBtaXNzaW5nIGZyb20gdGhlIHN0b3JlZCBga3ViZWFkbS1jb25maWdgLCBldmVuIHRob3VnaCB0aGUgcmVuZGVyZWQgbG9jYWwgY29uZmlndXJhdGlvbiBzcGVjaWZpZXMgYDAuMC4wLjBgLiBUaGlzIG1ha2VzIHRoZWlyIGhlYWx0aCBhbmQgbWV0cmljcyBlbmRwb2ludHMgdW5yZWFjaGFibGUgdGhyb3VnaCB0aGUgbm9kZSBJUHMuCgpSZWNvbmNpbGUgb25seSB0aG9zZSB0d28gYmluZCBhZGRyZXNzZXMgaW4gdGhlIHNoYXJlZCBgQ2x1c3RlckNvbmZpZ3VyYXRpb25gIGJlZm9yZSBga3ViZWFkbSB1cGdyYWRlIGFwcGx5YCwgcHJlc2VydmluZyBhbGwgb3RoZXIgY2x1c3RlciBzZXR0aW5ncyBhbmQgY29tcG9uZW50IGFyZ3VtZW50cy4gU3Vic2VxdWVudCBjb250cm9sLXBsYW5lIG5vZGVzIHJlYWQgdGhlIGNvcnJlY3RlZCBjb25maWd1cmF0aW9uIGR1cmluZyBga3ViZWFkbSB1cGdyYWRlIG5vZGVgLiBIYW5kbGUgYm90aCBsZWdhY3kgYXJndW1lbnQgbWFwcGluZ3MgYW5kIHYxYmV0YTQgYXJndW1lbnQgbGlzdHMsIGFuZCBkb2N1bWVudCB0aGUgdXBncmFkZSBiZWhhdmlvci4KClZhbGlkYXRpb246Ci0gQWxsIDU2IHVuaXQgdGVzdHMgcGFzc2VkLCBpbmNsdWRpbmcgcHJlc2VydmF0aW9uIG9mIGN1c3RvbSBzZXR0aW5ncywgbWlzc2luZyBhcmd1bWVudHMsIHJlcGVhdGVkIHYxYmV0YTQgYXJndW1lbnRzLCBhbmQgaWRlbXBvdGVuY2UuCi0gUHJlLWNvbW1pdCBjaGVja3Mgb24gdGhlIGNoYW5nZWQgZmlsZXMuCi0gT24gYSBLdWJlcm5ldGVzIDEuMjkuMTUgQUlPLCByZWNyZWF0ZWQgdGhlIG1pc3NpbmctYmluZCBjb25maWd1cmF0aW9uIGFuZCBhcHBsaWVkIHRoZSBhY3R1YWwgcmVjb25jaWxpYXRpb24gdGFza3M6IGJvdGggb3ZlcnJpZGVzIHdlcmUgcmVzdG9yZWQsIGV2ZXJ5IG90aGVyIHN0b3JlZCBzZXR0aW5nIHJlbWFpbmVkIHVuY2hhbmdlZCwgYW5kIGEgc2Vjb25kIGFwcGxpY2F0aW9uIGxlZnQgdGhlIENvbmZpZ01hcCByZXNvdXJjZSB2ZXJzaW9uIHVuY2hhbmdlZC4KLSBga3ViZWFkbSB1cGdyYWRlIGFwcGx5IC0tZHJ5LXJ1bmAgZ2VuZXJhdGVkIGJvdGggY29tcG9uZW50cyB3aXRoIGAtLWJpbmQtYWRkcmVzcz0wLjAuMC4wYC4gVGhlIEFJTyByZW1haW5lZCBoZWFsdGh5IGFmdGVyIHJlc3RvcmluZyBpdHMgb3JpZ2luYWwgQ29uZmlnTWFwIHJlcHJlc2VudGF0aW9uLgoKTGl2ZSB2YWxpZGF0aW9uIHVzZWQgb25lIGNvbnRyb2xsZXI7IGEgdGhyZWUtY29udHJvbGxlciB1cGdyYWRlIGhhcyBub3QgYmVlbiB0ZXN0ZWQuCg== patchset: 7d8cff48663ccf8e2e700501aa197c58aca3c900 pipeline: check playbook_context: playbook_projects: trusted/project_0/github.com/vexxhost/zuul-config: canonical_name: github.com/vexxhost/zuul-config checkout: main commit: 298983cd1253e6833abdb49d87d912527e0e6597 trusted/project_1/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: be52461cd48abccbf95b13a58b2551ac673d8ad7 trusted/project_2/github.com/vexxhost/zuul-jobs: canonical_name: github.com/vexxhost/zuul-jobs checkout: main commit: 4fd48825891421af0774bdd500fee36e111d80a6 untrusted/project_0/github.com/vexxhost/zuul-jobs: canonical_name: github.com/vexxhost/zuul-jobs checkout: main commit: 4fd48825891421af0774bdd500fee36e111d80a6 untrusted/project_1/github.com/vexxhost/zuul-config: canonical_name: github.com/vexxhost/zuul-config checkout: main commit: 298983cd1253e6833abdb49d87d912527e0e6597 untrusted/project_2/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: be52461cd48abccbf95b13a58b2551ac673d8ad7 untrusted/project_3/github.com/vexxhost/ansible-collection-kubernetes: canonical_name: github.com/vexxhost/ansible-collection-kubernetes checkout: main commit: 8d76accd7551f0ba9a59183421b5a32276b1e09e untrusted/project_4/opendev.org/openstack/openstack-helm: canonical_name: opendev.org/openstack/openstack-helm checkout: master commit: ea389afb1f6feaf99dce46c68a6afe970c5d14bb playbooks: - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/molecule/run.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/playbook_0/role_1/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/playbook_0/role_1/zuul-jobs/roles - checkout: main checkout_description: playbook branch link_name: ansible/playbook_0/role_2/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/playbook_0/role_2/zuul-jobs/roles post_playbooks: - path: untrusted/project_3/github.com/vexxhost/ansible-collection-kubernetes/test-playbooks/molecule/post.yml roles: - checkout: main checkout_description: playbook branch link_name: ansible/post_playbook_0/role_0/collection-kubernetes link_target: untrusted/project_3/github.com/vexxhost/ansible-collection-kubernetes role_path: ansible/post_playbook_0/role_0/collection-kubernetes/roles - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_0/role_1/openstack-helm link_target: untrusted/project_4/opendev.org/openstack/openstack-helm role_path: ansible/post_playbook_0/role_1/openstack-helm/roles - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_0/role_3/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_0/role_3/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_0/role_4/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_0/role_4/zuul-jobs/roles - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_1/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_1/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_1/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_1/role_2/zuul-jobs/roles - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post-logs.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_2/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_2/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_2/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_2/role_2/zuul-jobs/roles pre_playbooks: - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/pre.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_0/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_0/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/pre_playbook_0/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_0/role_2/zuul-jobs/roles - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/molecule/pre.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_1/role_1/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_1/role_1/zuul-jobs/roles - checkout: main checkout_description: playbook branch link_name: ansible/pre_playbook_1/role_2/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_1/role_2/zuul-jobs/roles - path: untrusted/project_3/github.com/vexxhost/ansible-collection-kubernetes/test-playbooks/molecule/pre.yml roles: - checkout: main checkout_description: playbook branch link_name: ansible/pre_playbook_2/role_0/collection-kubernetes link_target: untrusted/project_3/github.com/vexxhost/ansible-collection-kubernetes role_path: ansible/pre_playbook_2/role_0/collection-kubernetes/roles - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_2/role_1/openstack-helm link_target: untrusted/project_4/opendev.org/openstack/openstack-helm role_path: ansible/pre_playbook_2/role_1/openstack-helm/roles - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_2/role_3/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_2/role_3/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/pre_playbook_2/role_4/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_2/role_4/zuul-jobs/roles post_review: false post_timeout: null pre_timeout: null project: canonical_hostname: github.com canonical_name: github.com/vexxhost/ansible-collection-kubernetes name: vexxhost/ansible-collection-kubernetes short_name: ansible-collection-kubernetes src_dir: src/github.com/vexxhost/ansible-collection-kubernetes projects: github.com/vexxhost/ansible-collection-kubernetes: canonical_hostname: github.com canonical_name: github.com/vexxhost/ansible-collection-kubernetes checkout: main checkout_description: zuul branch commit: 8d76accd7551f0ba9a59183421b5a32276b1e09e name: vexxhost/ansible-collection-kubernetes required: false short_name: ansible-collection-kubernetes src_dir: src/github.com/vexxhost/ansible-collection-kubernetes ref: refs/pull/302/head resources: {} tenant: oss timeout: 1800 topic: null voting: true