all: children: cephs: hosts: instance: null computes: hosts: instance: null controllers: hosts: instance: null zuul_unreachable: hosts: {} hosts: instance: ansible_connection: ssh ansible_host: 199.204.45.25 ansible_port: 22 ansible_python_interpreter: auto ansible_user: zuul atmosphere_deploy_tags: kubernetes,csi,cert-manager,cluster-issuer,ingress-nginx,rabbitmq-cluster-operator,percona-xtradb-cluster-operator,percona-xtradb-cluster,valkey,memcached,keycloak,kube-prometheus-stack,keystone,horizon atmosphere_image_prefix: harbor.atmosphere.dev/ ceph_conf_overrides: - option: mon allow pool size one section: global value: true - option: osd crush chooseleaf type section: global value: 0 - option: auth allow insecure global id reclaim section: mon value: false ceph_csi_rbd_helm_values: provisioner: replicaCount: 1 ceph_fsid: 4837cbf8-4f90-4300-b3f6-726c9b9f89b4 ceph_osd_devices: - /dev/ceph-{{ inventory_hostname_short }}-osd0/data - /dev/ceph-{{ inventory_hostname_short }}-osd1/data - /dev/ceph-{{ inventory_hostname_short }}-osd2/data ceph_public_network: '{{ ansible_facts[''default_ipv4''][''network''] + ''/'' + (ansible_facts[''default_ipv4''][''prefix''] | string) }}' cilium_helm_values: operator: replicas: 1 cluster_issuer_type: self-signed csi_driver: local-path-provisioner ingress_nginx_helm_values: controller: config: worker-processes: 2 keystone_helm_values: pod: replicas: api: 1 kube_vip_address: 172.17.0.100 kube_vip_interface: '{{ ansible_facts[''default_ipv4''].interface }}' kubernetes_hostname: '{{ ansible_facts[''default_ipv4''].address }}' molecule_scenario: keycloak nodepool: az: nova cloud: public external_id: 8c44e55d-2010-4298-ada9-24ed2eb44167 host_id: 6782d36b49969b8e83d63aec7c00c7f3fbf4fe3934e38116e588005f interface_ip: 199.204.45.25 label: ubuntu-jammy node_properties: {} private_ipv4: 199.204.45.25 private_ipv6: null provider: yul1 public_ipv4: 199.204.45.25 public_ipv6: 2604:e100:1:0:f816:3eff:feec:f785 region: ca-ymq-1 slot: null percona_xtradb_cluster_spec: allowUnsafeConfigurations: true haproxy: size: 1 pxc: size: 1 zuul_node: az: nova cloud: public external_id: 8c44e55d-2010-4298-ada9-24ed2eb44167 host_id: 6782d36b49969b8e83d63aec7c00c7f3fbf4fe3934e38116e588005f interface_ip: 199.204.45.25 label: ubuntu-jammy node_properties: {} private_ipv4: 199.204.45.25 private_ipv6: null provider: yul1 public_ipv4: 199.204.45.25 public_ipv6: 2604:e100:1:0:f816:3eff:feec:f785 region: ca-ymq-1 slot: null uuid: null vars: atmosphere_deploy_tags: kubernetes,csi,cert-manager,cluster-issuer,ingress-nginx,rabbitmq-cluster-operator,percona-xtradb-cluster-operator,percona-xtradb-cluster,valkey,memcached,keycloak,kube-prometheus-stack,keystone,horizon atmosphere_image_prefix: harbor.atmosphere.dev/ ceph_conf_overrides: - option: mon allow pool size one section: global value: true - option: osd crush chooseleaf type section: global value: 0 - option: auth allow insecure global id reclaim section: mon value: false ceph_csi_rbd_helm_values: provisioner: replicaCount: 1 ceph_fsid: 4837cbf8-4f90-4300-b3f6-726c9b9f89b4 ceph_osd_devices: - /dev/ceph-{{ inventory_hostname_short }}-osd0/data - /dev/ceph-{{ inventory_hostname_short }}-osd1/data - /dev/ceph-{{ inventory_hostname_short }}-osd2/data ceph_public_network: '{{ ansible_facts[''default_ipv4''][''network''] + ''/'' + (ansible_facts[''default_ipv4''][''prefix''] | string) }}' cilium_helm_values: operator: replicas: 1 cluster_issuer_type: self-signed csi_driver: local-path-provisioner ingress_nginx_helm_values: controller: config: worker-processes: 2 keystone_helm_values: pod: replicas: api: 1 kube_vip_address: 172.17.0.100 kube_vip_interface: '{{ ansible_facts[''default_ipv4''].interface }}' kubernetes_hostname: '{{ ansible_facts[''default_ipv4''].address }}' molecule_scenario: keycloak percona_xtradb_cluster_spec: allowUnsafeConfigurations: true haproxy: size: 1 pxc: size: 1 zuul: _inheritance_path: - '' - '' - '' - '' - '' ansible_version: '9' attempts: 1 branch: main build: 99728db7850a4f3a9d923898a73aaa5a build_refs: - branch: main change: '3915' change_message: "fix(deploy): four critical bugs in parallel orchestrator (follow-up to #3818)\n\n## Summary\n\nFollow-up to #3818 \u2014 fixes four critical bugs identified during code review of the parallel deployment orchestrator.\n\n> **Base note:** branch sits on top of `feat/parallel-deploy-orchestrator` (#3818). PR target is `main` so the diff visible here will only be meaningful **after** #3818 lands. Until then, review by looking at the latest commit on this branch only.\n\n## Bugs fixed\n\n| ID | Bug | Fix |\n|----|-----|-----|\n| **C1** | `atmosphere deploy --tags neutron,nova` (or any multi-tag where a selected component has `PreRoleDependsOn` outside the subgraph) **hangs forever** because the pre-role goroutine waits on completion channels that never close. | In `deployMultipleTags`, allocate `completionTracker` channels only for components in the subgraph. `tracker.Wait` already skips unknown names, which now matches the `--tags` semantic that everything not selected is assumed already deployed. |\n| **C2** | Ctrl-C **orphans `ansible-playbook`/`helm`/`ssh` subprocesses** because `cmd/atmosphere` never wraps the root context with `signal.NotifyContext`. Combined with `Setpgid: true`, children survive the parent. | Wrap `cmd.Context()` with `signal.NotifyContext(os.Interrupt, syscall.SIGTERM)` in `newDeployCmd.RunE`. |\n| **C3** | `defer tracker.MarkDone(id)` runs **even on failure**, briefly unblocking downstream pre-role gates before errgroup cancellation propagates. | Move `MarkDone` to the success path (after `Deployer.Deploy` returns nil). |\n| **C4** | `BuildGraph` **silently ignores** the error from `g.AddNode`, masking duplicate-name regressions. | Check the error and propagate it. |\n\n## Why the existing tests didn't catch C1\n\nThe mock deployers in `orchestrator_test.go` drop the `preGate` callback. The new `gateAwareDeployer` in `orchestrator_subgraph_pregate_test.go` invokes it, mirroring `AnsibleDeployer.Deploy`. With the old code, the new test deadlocks until the 5 s ctx timeout fires; with the fix, it returns immediately.\n\nVerified:\n\n```\n$ git stash && go test -run TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph -v ./internal/deploy\n--- FAIL: TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph (5.00s)\n Deploy returned error (likely a hang regression): component neutron failed: context deadline exceeded\n\n$ git stash pop && go test -run TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph -v ./internal/deploy\n--- PASS: TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph (0.00s)\n```\n\n## Tests added\n\n- `TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph` \u2014 neutron+nova (C1 regression guard)\n- `TestDeployMultipleTags_KeystoneAlone` \u2014 keystone variant of C1\n- `TestDeployFailure_DoesNotMarkDone` \u2014 C3 regression guard\n\n## Files\n\n- `cmd/atmosphere/deploy.go` \u2014 C2\n- `internal/deploy/component.go` \u2014 C4\n- `internal/deploy/orchestrator.go` \u2014 C1, C3\n- `internal/deploy/orchestrator_subgraph_pregate_test.go` (new) \u2014 regression tests\n" change_url: https://github.com/vexxhost/atmosphere/pull/3915 commit_id: 8a234917250c709897346027c968017d33656c14 patchset: 8a234917250c709897346027c968017d33656c14 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere name: vexxhost/atmosphere short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere src_dir: src/github.com/vexxhost/atmosphere topic: null buildset: e9e7a4ee22344578ad8596f3f00b3194 buildset_refs: - branch: main change: '3915' change_message: "fix(deploy): four critical bugs in parallel orchestrator (follow-up to #3818)\n\n## Summary\n\nFollow-up to #3818 \u2014 fixes four critical bugs identified during code review of the parallel deployment orchestrator.\n\n> **Base note:** branch sits on top of `feat/parallel-deploy-orchestrator` (#3818). PR target is `main` so the diff visible here will only be meaningful **after** #3818 lands. Until then, review by looking at the latest commit on this branch only.\n\n## Bugs fixed\n\n| ID | Bug | Fix |\n|----|-----|-----|\n| **C1** | `atmosphere deploy --tags neutron,nova` (or any multi-tag where a selected component has `PreRoleDependsOn` outside the subgraph) **hangs forever** because the pre-role goroutine waits on completion channels that never close. | In `deployMultipleTags`, allocate `completionTracker` channels only for components in the subgraph. `tracker.Wait` already skips unknown names, which now matches the `--tags` semantic that everything not selected is assumed already deployed. |\n| **C2** | Ctrl-C **orphans `ansible-playbook`/`helm`/`ssh` subprocesses** because `cmd/atmosphere` never wraps the root context with `signal.NotifyContext`. Combined with `Setpgid: true`, children survive the parent. | Wrap `cmd.Context()` with `signal.NotifyContext(os.Interrupt, syscall.SIGTERM)` in `newDeployCmd.RunE`. |\n| **C3** | `defer tracker.MarkDone(id)` runs **even on failure**, briefly unblocking downstream pre-role gates before errgroup cancellation propagates. | Move `MarkDone` to the success path (after `Deployer.Deploy` returns nil). |\n| **C4** | `BuildGraph` **silently ignores** the error from `g.AddNode`, masking duplicate-name regressions. | Check the error and propagate it. |\n\n## Why the existing tests didn't catch C1\n\nThe mock deployers in `orchestrator_test.go` drop the `preGate` callback. The new `gateAwareDeployer` in `orchestrator_subgraph_pregate_test.go` invokes it, mirroring `AnsibleDeployer.Deploy`. With the old code, the new test deadlocks until the 5 s ctx timeout fires; with the fix, it returns immediately.\n\nVerified:\n\n```\n$ git stash && go test -run TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph -v ./internal/deploy\n--- FAIL: TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph (5.00s)\n Deploy returned error (likely a hang regression): component neutron failed: context deadline exceeded\n\n$ git stash pop && go test -run TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph -v ./internal/deploy\n--- PASS: TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph (0.00s)\n```\n\n## Tests added\n\n- `TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph` \u2014 neutron+nova (C1 regression guard)\n- `TestDeployMultipleTags_KeystoneAlone` \u2014 keystone variant of C1\n- `TestDeployFailure_DoesNotMarkDone` \u2014 C3 regression guard\n\n## Files\n\n- `cmd/atmosphere/deploy.go` \u2014 C2\n- `internal/deploy/component.go` \u2014 C4\n- `internal/deploy/orchestrator.go` \u2014 C1, C3\n- `internal/deploy/orchestrator_subgraph_pregate_test.go` (new) \u2014 regression tests\n" change_url: https://github.com/vexxhost/atmosphere/pull/3915 commit_id: 8a234917250c709897346027c968017d33656c14 patchset: 8a234917250c709897346027c968017d33656c14 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere name: vexxhost/atmosphere short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere src_dir: src/github.com/vexxhost/atmosphere topic: null change: '3915' change_message: "fix(deploy): four critical bugs in parallel orchestrator (follow-up to #3818)\n\n## Summary\n\nFollow-up to #3818 \u2014 fixes four critical bugs identified during code review of the parallel deployment orchestrator.\n\n> **Base note:** branch sits on top of `feat/parallel-deploy-orchestrator` (#3818). PR target is `main` so the diff visible here will only be meaningful **after** #3818 lands. Until then, review by looking at the latest commit on this branch only.\n\n## Bugs fixed\n\n| ID | Bug | Fix |\n|----|-----|-----|\n| **C1** | `atmosphere deploy --tags neutron,nova` (or any multi-tag where a selected component has `PreRoleDependsOn` outside the subgraph) **hangs forever** because the pre-role goroutine waits on completion channels that never close. | In `deployMultipleTags`, allocate `completionTracker` channels only for components in the subgraph. `tracker.Wait` already skips unknown names, which now matches the `--tags` semantic that everything not selected is assumed already deployed. |\n| **C2** | Ctrl-C **orphans `ansible-playbook`/`helm`/`ssh` subprocesses** because `cmd/atmosphere` never wraps the root context with `signal.NotifyContext`. Combined with `Setpgid: true`, children survive the parent. | Wrap `cmd.Context()` with `signal.NotifyContext(os.Interrupt, syscall.SIGTERM)` in `newDeployCmd.RunE`. |\n| **C3** | `defer tracker.MarkDone(id)` runs **even on failure**, briefly unblocking downstream pre-role gates before errgroup cancellation propagates. | Move `MarkDone` to the success path (after `Deployer.Deploy` returns nil). |\n| **C4** | `BuildGraph` **silently ignores** the error from `g.AddNode`, masking duplicate-name regressions. | Check the error and propagate it. |\n\n## Why the existing tests didn't catch C1\n\nThe mock deployers in `orchestrator_test.go` drop the `preGate` callback. The new `gateAwareDeployer` in `orchestrator_subgraph_pregate_test.go` invokes it, mirroring `AnsibleDeployer.Deploy`. With the old code, the new test deadlocks until the 5 s ctx timeout fires; with the fix, it returns immediately.\n\nVerified:\n\n```\n$ git stash && go test -run TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph -v ./internal/deploy\n--- FAIL: TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph (5.00s)\n Deploy returned error (likely a hang regression): component neutron failed: context deadline exceeded\n\n$ git stash pop && go test -run TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph -v ./internal/deploy\n--- PASS: TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph (0.00s)\n```\n\n## Tests added\n\n- `TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph` \u2014 neutron+nova (C1 regression guard)\n- `TestDeployMultipleTags_KeystoneAlone` \u2014 keystone variant of C1\n- `TestDeployFailure_DoesNotMarkDone` \u2014 C3 regression guard\n\n## Files\n\n- `cmd/atmosphere/deploy.go` \u2014 C2\n- `internal/deploy/component.go` \u2014 C4\n- `internal/deploy/orchestrator.go` \u2014 C1, C3\n- `internal/deploy/orchestrator_subgraph_pregate_test.go` (new) \u2014 regression tests\n" change_url: https://github.com/vexxhost/atmosphere/pull/3915 child_jobs: [] commit_id: 8a234917250c709897346027c968017d33656c14 event_id: 3d110a00-4d08-11f1-8267-555a5996a5b4 executor: hostname: 2d72f0692154 inventory_file: /var/lib/zuul/builds/99728db7850a4f3a9d923898a73aaa5a/ansible/inventory.yaml log_root: /var/lib/zuul/builds/99728db7850a4f3a9d923898a73aaa5a/work/logs result_data_file: /var/lib/zuul/builds/99728db7850a4f3a9d923898a73aaa5a/work/results.json src_root: /var/lib/zuul/builds/99728db7850a4f3a9d923898a73aaa5a/work/src work_root: /var/lib/zuul/builds/99728db7850a4f3a9d923898a73aaa5a/work include_vars: [] items: - branch: main change: '3915' change_message: "fix(deploy): four critical bugs in parallel orchestrator (follow-up to #3818)\n\n## Summary\n\nFollow-up to #3818 \u2014 fixes four critical bugs identified during code review of the parallel deployment orchestrator.\n\n> **Base note:** branch sits on top of `feat/parallel-deploy-orchestrator` (#3818). PR target is `main` so the diff visible here will only be meaningful **after** #3818 lands. Until then, review by looking at the latest commit on this branch only.\n\n## Bugs fixed\n\n| ID | Bug | Fix |\n|----|-----|-----|\n| **C1** | `atmosphere deploy --tags neutron,nova` (or any multi-tag where a selected component has `PreRoleDependsOn` outside the subgraph) **hangs forever** because the pre-role goroutine waits on completion channels that never close. | In `deployMultipleTags`, allocate `completionTracker` channels only for components in the subgraph. `tracker.Wait` already skips unknown names, which now matches the `--tags` semantic that everything not selected is assumed already deployed. |\n| **C2** | Ctrl-C **orphans `ansible-playbook`/`helm`/`ssh` subprocesses** because `cmd/atmosphere` never wraps the root context with `signal.NotifyContext`. Combined with `Setpgid: true`, children survive the parent. | Wrap `cmd.Context()` with `signal.NotifyContext(os.Interrupt, syscall.SIGTERM)` in `newDeployCmd.RunE`. |\n| **C3** | `defer tracker.MarkDone(id)` runs **even on failure**, briefly unblocking downstream pre-role gates before errgroup cancellation propagates. | Move `MarkDone` to the success path (after `Deployer.Deploy` returns nil). |\n| **C4** | `BuildGraph` **silently ignores** the error from `g.AddNode`, masking duplicate-name regressions. | Check the error and propagate it. |\n\n## Why the existing tests didn't catch C1\n\nThe mock deployers in `orchestrator_test.go` drop the `preGate` callback. The new `gateAwareDeployer` in `orchestrator_subgraph_pregate_test.go` invokes it, mirroring `AnsibleDeployer.Deploy`. With the old code, the new test deadlocks until the 5 s ctx timeout fires; with the fix, it returns immediately.\n\nVerified:\n\n```\n$ git stash && go test -run TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph -v ./internal/deploy\n--- FAIL: TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph (5.00s)\n Deploy returned error (likely a hang regression): component neutron failed: context deadline exceeded\n\n$ git stash pop && go test -run TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph -v ./internal/deploy\n--- PASS: TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph (0.00s)\n```\n\n## Tests added\n\n- `TestDeployMultipleTags_PreRoleDependencyOutsideSubgraph` \u2014 neutron+nova (C1 regression guard)\n- `TestDeployMultipleTags_KeystoneAlone` \u2014 keystone variant of C1\n- `TestDeployFailure_DoesNotMarkDone` \u2014 C3 regression guard\n\n## Files\n\n- `cmd/atmosphere/deploy.go` \u2014 C2\n- `internal/deploy/component.go` \u2014 C4\n- `internal/deploy/orchestrator.go` \u2014 C1, C3\n- `internal/deploy/orchestrator_subgraph_pregate_test.go` (new) \u2014 regression tests\n" change_url: https://github.com/vexxhost/atmosphere/pull/3915 commit_id: 8a234917250c709897346027c968017d33656c14 patchset: 8a234917250c709897346027c968017d33656c14 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere name: vexxhost/atmosphere short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere topic: null job: atmosphere-molecule-keycloak jobtags: [] max_attempts: 3 message: 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 patchset: 8a234917250c709897346027c968017d33656c14 pipeline: check playbook_context: playbook_projects: trusted/project_0/github.com/vexxhost/zuul-config: canonical_name: github.com/vexxhost/zuul-config checkout: main commit: 298983cd1253e6833abdb49d87d912527e0e6597 trusted/project_1/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: 79fe3eb1d01f8ac5739b0b7bc4759c407b6e248d trusted/project_2/github.com/vexxhost/zuul-jobs: canonical_name: github.com/vexxhost/zuul-jobs checkout: main commit: a6e68243e02ef030ce5e75f8b67630880c475f33 untrusted/project_0/github.com/vexxhost/zuul-jobs: canonical_name: github.com/vexxhost/zuul-jobs checkout: main commit: a6e68243e02ef030ce5e75f8b67630880c475f33 untrusted/project_1/github.com/vexxhost/zuul-config: canonical_name: github.com/vexxhost/zuul-config checkout: main commit: 298983cd1253e6833abdb49d87d912527e0e6597 untrusted/project_2/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: 79fe3eb1d01f8ac5739b0b7bc4759c407b6e248d untrusted/project_3/github.com/vexxhost/atmosphere: canonical_name: github.com/vexxhost/atmosphere checkout: main commit: 8a234917250c709897346027c968017d33656c14 untrusted/project_4/opendev.org/openstack/openstack-helm: canonical_name: opendev.org/openstack/openstack-helm checkout: master commit: 029cd19ebf2c39eb8bcba1fe3275dc014f95ef42 playbooks: - path: untrusted/project_3/github.com/vexxhost/atmosphere/molecule/keycloak/converge.yml roles: - checkout: main checkout_description: playbook branch link_name: ansible/playbook_0/role_0/atmosphere link_target: untrusted/project_3/github.com/vexxhost/atmosphere role_path: ansible/playbook_0/role_0/atmosphere/roles - checkout: master checkout_description: project default branch link_name: ansible/playbook_0/role_1/openstack-helm link_target: untrusted/project_4/opendev.org/openstack/openstack-helm role_path: ansible/playbook_0/role_1/openstack-helm/roles - checkout: master checkout_description: project default branch link_name: ansible/playbook_0/role_3/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/playbook_0/role_3/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/playbook_0/role_4/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/playbook_0/role_4/zuul-jobs/roles - path: untrusted/project_3/github.com/vexxhost/atmosphere/test-playbooks/molecule/run.yml roles: - checkout: main checkout_description: playbook branch link_name: ansible/playbook_1/role_0/atmosphere link_target: untrusted/project_3/github.com/vexxhost/atmosphere role_path: ansible/playbook_1/role_0/atmosphere/roles - checkout: master checkout_description: project default branch link_name: ansible/playbook_1/role_1/openstack-helm link_target: untrusted/project_4/opendev.org/openstack/openstack-helm role_path: ansible/playbook_1/role_1/openstack-helm/roles - checkout: master checkout_description: project default branch link_name: ansible/playbook_1/role_3/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/playbook_1/role_3/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/playbook_1/role_4/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/playbook_1/role_4/zuul-jobs/roles post_playbooks: - path: untrusted/project_3/github.com/vexxhost/atmosphere/test-playbooks/molecule/post.yml roles: - checkout: main checkout_description: playbook branch link_name: ansible/post_playbook_0/role_0/atmosphere link_target: untrusted/project_3/github.com/vexxhost/atmosphere role_path: ansible/post_playbook_0/role_0/atmosphere/roles - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_0/role_1/openstack-helm link_target: untrusted/project_4/opendev.org/openstack/openstack-helm role_path: ansible/post_playbook_0/role_1/openstack-helm/roles - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_0/role_3/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_0/role_3/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_0/role_4/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_0/role_4/zuul-jobs/roles - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_1/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_1/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_1/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_1/role_2/zuul-jobs/roles - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post-logs.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_2/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_2/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_2/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_2/role_2/zuul-jobs/roles pre_playbooks: - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/pre.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_0/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_0/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/pre_playbook_0/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_0/role_2/zuul-jobs/roles - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/molecule/pre.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_1/role_1/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_1/role_1/zuul-jobs/roles - checkout: main checkout_description: playbook branch link_name: ansible/pre_playbook_1/role_2/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_1/role_2/zuul-jobs/roles - path: untrusted/project_3/github.com/vexxhost/atmosphere/test-playbooks/molecule/pre.yml roles: - checkout: main checkout_description: playbook branch link_name: ansible/pre_playbook_2/role_0/atmosphere link_target: untrusted/project_3/github.com/vexxhost/atmosphere role_path: ansible/pre_playbook_2/role_0/atmosphere/roles - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_2/role_1/openstack-helm link_target: untrusted/project_4/opendev.org/openstack/openstack-helm role_path: ansible/pre_playbook_2/role_1/openstack-helm/roles - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_2/role_3/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_2/role_3/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/pre_playbook_2/role_4/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_2/role_4/zuul-jobs/roles post_review: false post_timeout: null pre_timeout: null project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere name: vexxhost/atmosphere short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere projects: github.com/vexxhost/atmosphere: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere checkout: main checkout_description: zuul branch commit: 8a234917250c709897346027c968017d33656c14 name: vexxhost/atmosphere required: false short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere ref: refs/pull/3915/head resources: {} tenant: oss timeout: 1800 topic: null voting: true