all: children: cephs: hosts: instance: null computes: hosts: instance: null controllers: hosts: instance: null zuul_unreachable: hosts: {} hosts: instance: ansible_connection: ssh ansible_host: 162.253.55.140 ansible_port: 22 ansible_python_interpreter: auto ansible_user: zuul ceph_conf_overrides: - option: mon allow pool size one section: global value: true - option: osd crush chooseleaf type section: global value: 0 - option: auth allow insecure global id reclaim section: mon value: false ceph_csi_rbd_helm_values: provisioner: replicaCount: 1 ceph_fsid: 4837cbf8-4f90-4300-b3f6-726c9b9f89b4 ceph_osd_devices: - /dev/ceph-{{ inventory_hostname_short }}-osd0/data - /dev/ceph-{{ inventory_hostname_short }}-osd1/data - /dev/ceph-{{ inventory_hostname_short }}-osd2/data cilium_helm_values: operator: replicas: 1 cilium_ipv4_cidr: 172.24.0.0/16 csi_driver: local-path-provisioner kube_vip_address: 172.17.0.100 kube_vip_interface: '{{ ansible_facts[''default_ipv4''].interface }}' kubernetes_hostname: '{{ ansible_facts[''default_ipv4''].address }}' molecule_scenario: csi nodepool: az: nova cloud: public external_id: ba07c317-a12b-4e43-b366-1f84017d07c6 host_id: 41a201ef72a259be12e3756e510383f2b77edc2ac36483fdab96a683 interface_ip: 162.253.55.140 label: ubuntu-jammy node_properties: {} private_ipv4: 162.253.55.140 private_ipv6: null provider: yul1 public_ipv4: 162.253.55.140 public_ipv6: 2604:e100:1:0:f816:3eff:fe92:6b8c region: ca-ymq-1 slot: null zuul_node: az: nova cloud: public external_id: ba07c317-a12b-4e43-b366-1f84017d07c6 host_id: 41a201ef72a259be12e3756e510383f2b77edc2ac36483fdab96a683 interface_ip: 162.253.55.140 label: ubuntu-jammy node_properties: {} private_ipv4: 162.253.55.140 private_ipv6: null provider: yul1 public_ipv4: 162.253.55.140 public_ipv6: 2604:e100:1:0:f816:3eff:fe92:6b8c region: ca-ymq-1 slot: null uuid: null vars: ceph_conf_overrides: - option: mon allow pool size one section: global value: true - option: osd crush chooseleaf type section: global value: 0 - option: auth allow insecure global id reclaim section: mon value: false ceph_csi_rbd_helm_values: provisioner: replicaCount: 1 ceph_fsid: 4837cbf8-4f90-4300-b3f6-726c9b9f89b4 ceph_osd_devices: - /dev/ceph-{{ inventory_hostname_short }}-osd0/data - /dev/ceph-{{ inventory_hostname_short }}-osd1/data - /dev/ceph-{{ inventory_hostname_short }}-osd2/data cilium_helm_values: operator: replicas: 1 cilium_ipv4_cidr: 172.24.0.0/16 csi_driver: local-path-provisioner kube_vip_address: 172.17.0.100 kube_vip_interface: '{{ ansible_facts[''default_ipv4''].interface }}' kubernetes_hostname: '{{ ansible_facts[''default_ipv4''].address }}' molecule_scenario: csi zuul: _inheritance_path: - '' - '' - '' - '' - '' - '' ansible_version: '9' attempts: 1 branch: stable/2024.2 build: 9bc950d1d44543ecb803d6630e0d63a7 build_refs: - branch: stable/2024.2 change: '3469' change_message: "fix(horizon): bump image to include port security fix\n\n## Summary\n- Update horizon image to include the upstream fix for public port creation\n- The previous image was built on Dec 2, 2025, before the fix was merged to docker-horizon on Dec 3, 2025\n\n## Root Cause Analysis\nThe atmosphere stable/2024.2 branch was using a horizon image that was built before the upstream fix (Dont send enable_port_security when disallowed by policy) was included in docker-horizon.\n\nThe fix prevents sending enable_port_security when disallowed by policy, allowing non-admin users to create ports without policy errors.\n\nCloses A8E-90\n\n\U0001F916 Generated with [Claude Code](https://claude.ai/code)" change_url: https://github.com/vexxhost/atmosphere/pull/3469 commit_id: 3a49ba1d7869eca7308f101805fe749f750492fc patchset: 3a49ba1d7869eca7308f101805fe749f750492fc project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere name: vexxhost/atmosphere short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere topic: null buildset: ddc9d749a38f41adb94446739e9d7187 buildset_refs: - branch: stable/2024.2 change: '3469' change_message: "fix(horizon): bump image to include port security fix\n\n## Summary\n- Update horizon image to include the upstream fix for public port creation\n- The previous image was built on Dec 2, 2025, before the fix was merged to docker-horizon on Dec 3, 2025\n\n## Root Cause Analysis\nThe atmosphere stable/2024.2 branch was using a horizon image that was built before the upstream fix (Dont send enable_port_security when disallowed by policy) was included in docker-horizon.\n\nThe fix prevents sending enable_port_security when disallowed by policy, allowing non-admin users to create ports without policy errors.\n\nCloses A8E-90\n\n\U0001F916 Generated with [Claude Code](https://claude.ai/code)" change_url: https://github.com/vexxhost/atmosphere/pull/3469 commit_id: 3a49ba1d7869eca7308f101805fe749f750492fc patchset: 3a49ba1d7869eca7308f101805fe749f750492fc project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere name: vexxhost/atmosphere short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere topic: null change: '3469' change_message: "fix(horizon): bump image to include port security fix\n\n## Summary\n- Update horizon image to include the upstream fix for public port creation\n- The previous image was built on Dec 2, 2025, before the fix was merged to docker-horizon on Dec 3, 2025\n\n## Root Cause Analysis\nThe atmosphere stable/2024.2 branch was using a horizon image that was built before the upstream fix (Dont send enable_port_security when disallowed by policy) was included in docker-horizon.\n\nThe fix prevents sending enable_port_security when disallowed by policy, allowing non-admin users to create ports without policy errors.\n\nCloses A8E-90\n\n\U0001F916 Generated with [Claude Code](https://claude.ai/code)" change_url: https://github.com/vexxhost/atmosphere/pull/3469 child_jobs: [] commit_id: 3a49ba1d7869eca7308f101805fe749f750492fc event_id: 33d0fbc0-fbe2-11f0-96c3-d085e5fe03d9 executor: hostname: 3a2793d2bd32 inventory_file: /var/lib/zuul/builds/9bc950d1d44543ecb803d6630e0d63a7/ansible/inventory.yaml log_root: /var/lib/zuul/builds/9bc950d1d44543ecb803d6630e0d63a7/work/logs result_data_file: /var/lib/zuul/builds/9bc950d1d44543ecb803d6630e0d63a7/work/results.json src_root: /var/lib/zuul/builds/9bc950d1d44543ecb803d6630e0d63a7/work/src work_root: /var/lib/zuul/builds/9bc950d1d44543ecb803d6630e0d63a7/work include_vars: [] items: - branch: stable/2024.2 change: '3469' change_message: "fix(horizon): bump image to include port security fix\n\n## Summary\n- Update horizon image to include the upstream fix for public port creation\n- The previous image was built on Dec 2, 2025, before the fix was merged to docker-horizon on Dec 3, 2025\n\n## Root Cause Analysis\nThe atmosphere stable/2024.2 branch was using a horizon image that was built before the upstream fix (Dont send enable_port_security when disallowed by policy) was included in docker-horizon.\n\nThe fix prevents sending enable_port_security when disallowed by policy, allowing non-admin users to create ports without policy errors.\n\nCloses A8E-90\n\n\U0001F916 Generated with [Claude Code](https://claude.ai/code)" change_url: https://github.com/vexxhost/atmosphere/pull/3469 commit_id: 3a49ba1d7869eca7308f101805fe749f750492fc patchset: 3a49ba1d7869eca7308f101805fe749f750492fc project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere name: vexxhost/atmosphere short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere topic: null job: atmosphere-molecule-csi-local-path-provisioner jobtags: [] max_attempts: 3 message: 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 patchset: 3a49ba1d7869eca7308f101805fe749f750492fc pipeline: check playbook_context: playbook_projects: trusted/project_0/vexxhost.dev/zuul-config: canonical_name: vexxhost.dev/zuul-config checkout: main commit: 9052b5a7781b3346e4cffd452a54448cbff54d8b trusted/project_1/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: d73b78cc624f363c6b7fcfe833f2db4571e4e979 trusted/project_2/github.com/vexxhost/zuul-jobs: canonical_name: github.com/vexxhost/zuul-jobs checkout: main commit: a6e68243e02ef030ce5e75f8b67630880c475f33 untrusted/project_0/github.com/vexxhost/zuul-jobs: canonical_name: github.com/vexxhost/zuul-jobs checkout: main commit: a6e68243e02ef030ce5e75f8b67630880c475f33 untrusted/project_1/vexxhost.dev/zuul-config: canonical_name: vexxhost.dev/zuul-config checkout: main commit: 9052b5a7781b3346e4cffd452a54448cbff54d8b untrusted/project_2/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: d73b78cc624f363c6b7fcfe833f2db4571e4e979 untrusted/project_3/github.com/vexxhost/atmosphere: canonical_name: github.com/vexxhost/atmosphere checkout: stable/2024.2 commit: 3a49ba1d7869eca7308f101805fe749f750492fc untrusted/project_4/opendev.org/openstack/openstack-helm: canonical_name: opendev.org/openstack/openstack-helm checkout: master commit: 078840392dcd130024e126ed6aa2b402eff95837 playbooks: - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/molecule/run.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/playbook_0/role_1/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/playbook_0/role_1/zuul-jobs/roles - checkout: main checkout_description: playbook branch link_name: ansible/playbook_0/role_2/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/playbook_0/role_2/zuul-jobs/roles post_review: false post_timeout: null pre_timeout: null project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere name: vexxhost/atmosphere short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere projects: github.com/vexxhost/atmosphere: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere checkout: stable/2024.2 checkout_description: zuul branch commit: 3a49ba1d7869eca7308f101805fe749f750492fc name: vexxhost/atmosphere required: false short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere ref: refs/pull/3469/head resources: {} tenant: oss timeout: 1800 topic: null voting: true