all: children: tempest: hosts: controller: null zuul_unreachable: hosts: {} hosts: controller: ansible_connection: ssh ansible_host: 199.204.45.138 ansible_port: 22 ansible_python_interpreter: auto ansible_user: zuul configure_swap_size: 8192 devstack_local_conf: post-config: $NEUTRON_CONF: DEFAULT: global_physnet_mtu: '{{ external_bridge_mtu }}' /etc/magnum/magnum.conf: cluster_template: kubernetes_allowed_network_drivers: calico,cilium kubernetes_default_network_driver: calico nova_client: api_version: 2.15 /etc/manila/manila.conf: generic: connect_share_server_to_tenant_network: true driver_handles_share_servers: true devstack_localrc: ADMIN_PASSWORD: secretadmin DATABASE_PASSWORD: secretdatabase DEBUG_LIBVIRT_COREDUMPS: true DISABLE_AMP_IMAGE_BUILD: true ENABLE_SYSCTL_MEM_TUNING: true ENABLE_SYSCTL_NET_TUNING: true ENABLE_ZSWAP: true ERROR_ON_CLONE: true FIXED_RANGE: 10.1.0.0/20 FLOATING_RANGE: 172.24.5.0/24 GIT_BASE: https://github.com HOST_IP: '{{ hostvars[''controller''][''nodepool''][''private_ipv4''] }}' IPV4_ADDRS_SAFE_TO_USE: 10.1.0.0/20 LIBVIRT_TYPE: '{{ devstack_libvirt_type | default("qemu") }}' LOGFILE: /opt/stack/logs/devstacklog.txt LOG_COLOR: false MAGNUM_GUEST_IMAGE_URL: '{{ image_url }}' MANILA_DEFAULT_SHARE_TYPE_EXTRA_SPECS: snapshot_support=True create_share_from_snapshot_support=True MANILA_ENABLED_BACKENDS: generic MANILA_USE_SERVICE_INSTANCE_PASSWORD: true NETWORK_GATEWAY: 10.1.0.1 NOVA_LIBVIRT_TB_CACHE_SIZE: 128 NOVA_VNC_ENABLED: true OCTAVIA_NODE: api OVN_DBS_LOG_LEVEL: dbg PUBLIC_BRIDGE_MTU: '{{ external_bridge_mtu }}' PUBLIC_NETWORK_GATEWAY: 172.24.5.1 RABBIT_PASSWORD: secretrabbit SERVICE_HOST: '{{ hostvars[''controller''][''nodepool''][''private_ipv4''] }}' SERVICE_PASSWORD: secretservice SWIFT_HASH: 1234123412341234 SWIFT_REPLICAS: 1 SWIFT_START_ALL_SERVICES: false VERBOSE: true VERBOSE_NO_TIMESTAMP: true devstack_plugins: barbican: https://github.com/openstack/barbican magnum: https://review.opendev.org/openstack/magnum magnum-cluster-api: https://github.com/vexxhost/magnum-cluster-api manila: https://github.com/openstack/manila octavia: https://github.com/openstack/octavia ovn-octavia-provider: https://github.com/openstack/ovn-octavia-provider devstack_services: base: false c-api: true c-bak: true c-sch: true c-vol: true dstat: false etcd3: true file_tracker: true g-api: true horizon: false key: true memory_tracker: true mysql: true n-api: true n-api-meta: true n-cond: true n-cpu: true n-novnc: true n-sch: true o-api: true o-da: true o-hk: true octavia: true openstack-cli-server: true ovn-controller: true ovn-northd: true ovs-vswitchd: true ovsdb-server: true placement-api: true q-ovn-agent: true q-svc: true rabbit: true s-account: false s-container: false s-object: false s-proxy: false tempest: false tls-proxy: true extensions_to_txt: auto: true conf: true localrc: true log: true stackenv: true image_url: https://github.com/vexxhost/capo-image-elements/releases/latest/download/ubuntu-22.04-{{ kube_tag }}.qcow2 kube_tag: v1.33.11 network_driver: cilium nodepool: az: nova cloud: public external_id: c60f1ce8-f76e-4beb-96c9-2d8b158c3dbe host_id: 46a3119b92b21b95fc3b5fbffd17c6ebf9fffaf9848b0a50b2d8d56a interface_ip: 199.204.45.138 label: ubuntu-noble-16 node_properties: {} private_ipv4: 199.204.45.138 private_ipv6: null provider: yul1 public_ipv4: 199.204.45.138 public_ipv6: 2604:e100:1:0:f816:3eff:fe45:e01e region: ca-ymq-1 slot: null zuul_copy_output: /etc/ceph: logs /etc/glusterfs/glusterd.vol: logs /etc/libvirt: logs /etc/lvm: logs /etc/resolv.conf: logs /etc/sudoers: logs /etc/sudoers.d: logs /var/log/ceph: logs /var/log/glusterfs: logs /var/log/libvirt: logs /var/log/mysql: logs /var/log/openvswitch: logs /var/log/postgresql: logs /var/log/rabbitmq: logs /var/log/unbound.log: logs '{{ devstack_conf_dir }}/.localrc.auto': logs '{{ devstack_conf_dir }}/.stackenv': logs '{{ devstack_conf_dir }}/local.conf': logs '{{ devstack_conf_dir }}/localrc': logs '{{ devstack_full_log}}': logs '{{ devstack_log_dir }}/atop': logs '{{ devstack_log_dir }}/devstacklog.txt': logs '{{ devstack_log_dir }}/devstacklog.txt.summary': logs '{{ devstack_log_dir }}/dstat-csv.log': logs '{{ devstack_log_dir }}/qemu.coredump': logs '{{ devstack_log_dir }}/tcpdump.pcap': logs '{{ devstack_log_dir }}/worlddump-latest.txt': logs '{{ stage_dir }}/apache': logs '{{ stage_dir }}/apache_config': logs '{{ stage_dir }}/audit.log': logs '{{ stage_dir }}/core': logs '{{ stage_dir }}/deprecations.log': logs '{{ stage_dir }}/df.txt': logs '{{ stage_dir }}/dpkg-l.txt': logs '{{ stage_dir }}/etc': logs '{{ stage_dir }}/iptables.txt': logs '{{ stage_dir }}/listen53.txt': logs '{{ stage_dir }}/mount.txt': logs '{{ stage_dir }}/performance.json': logs '{{ stage_dir }}/pip2-freeze.txt': logs '{{ stage_dir }}/pip3-freeze.txt': logs '{{ stage_dir }}/rpm-qa.txt': logs '{{ stage_dir }}/services.txt': logs '{{ stage_dir }}/verify_tempest_conf.log': logs zuul_node: az: nova cloud: public external_id: c60f1ce8-f76e-4beb-96c9-2d8b158c3dbe host_id: 46a3119b92b21b95fc3b5fbffd17c6ebf9fffaf9848b0a50b2d8d56a interface_ip: 199.204.45.138 label: ubuntu-noble-16 node_properties: {} private_ipv4: 199.204.45.138 private_ipv6: null provider: yul1 public_ipv4: 199.204.45.138 public_ipv6: 2604:e100:1:0:f816:3eff:fe45:e01e region: ca-ymq-1 slot: null uuid: null vars: configure_swap_size: 8192 devstack_local_conf: post-config: $NEUTRON_CONF: DEFAULT: global_physnet_mtu: '{{ external_bridge_mtu }}' /etc/magnum/magnum.conf: cluster_template: kubernetes_allowed_network_drivers: calico,cilium kubernetes_default_network_driver: calico nova_client: api_version: 2.15 /etc/manila/manila.conf: generic: connect_share_server_to_tenant_network: true driver_handles_share_servers: true devstack_localrc: ADMIN_PASSWORD: secretadmin DATABASE_PASSWORD: secretdatabase DEBUG_LIBVIRT_COREDUMPS: true DISABLE_AMP_IMAGE_BUILD: true ENABLE_SYSCTL_MEM_TUNING: true ENABLE_SYSCTL_NET_TUNING: true ENABLE_ZSWAP: true ERROR_ON_CLONE: true FIXED_RANGE: 10.1.0.0/20 FLOATING_RANGE: 172.24.5.0/24 GIT_BASE: https://github.com HOST_IP: '{{ hostvars[''controller''][''nodepool''][''private_ipv4''] }}' IPV4_ADDRS_SAFE_TO_USE: 10.1.0.0/20 LIBVIRT_TYPE: '{{ devstack_libvirt_type | default("qemu") }}' LOGFILE: /opt/stack/logs/devstacklog.txt LOG_COLOR: false MAGNUM_GUEST_IMAGE_URL: '{{ image_url }}' MANILA_DEFAULT_SHARE_TYPE_EXTRA_SPECS: snapshot_support=True create_share_from_snapshot_support=True MANILA_ENABLED_BACKENDS: generic MANILA_USE_SERVICE_INSTANCE_PASSWORD: true NETWORK_GATEWAY: 10.1.0.1 NOVA_LIBVIRT_TB_CACHE_SIZE: 128 NOVA_VNC_ENABLED: true OCTAVIA_NODE: api OVN_DBS_LOG_LEVEL: dbg PUBLIC_BRIDGE_MTU: '{{ external_bridge_mtu }}' PUBLIC_NETWORK_GATEWAY: 172.24.5.1 RABBIT_PASSWORD: secretrabbit SERVICE_HOST: '{{ hostvars[''controller''][''nodepool''][''private_ipv4''] }}' SERVICE_PASSWORD: secretservice SWIFT_HASH: 1234123412341234 SWIFT_REPLICAS: 1 SWIFT_START_ALL_SERVICES: false VERBOSE: true VERBOSE_NO_TIMESTAMP: true devstack_plugins: barbican: https://github.com/openstack/barbican magnum: https://review.opendev.org/openstack/magnum magnum-cluster-api: https://github.com/vexxhost/magnum-cluster-api manila: https://github.com/openstack/manila octavia: https://github.com/openstack/octavia ovn-octavia-provider: https://github.com/openstack/ovn-octavia-provider devstack_services: base: false c-api: true c-bak: true c-sch: true c-vol: true dstat: false etcd3: true file_tracker: true g-api: true horizon: false key: true memory_tracker: true mysql: true n-api: true n-api-meta: true n-cond: true n-cpu: true n-novnc: true n-sch: true o-api: true o-da: true o-hk: true octavia: true openstack-cli-server: true ovn-controller: true ovn-northd: true ovs-vswitchd: true ovsdb-server: true placement-api: true q-ovn-agent: true q-svc: true rabbit: true s-account: false s-container: false s-object: false s-proxy: false tempest: false tls-proxy: true extensions_to_txt: auto: true conf: true localrc: true log: true stackenv: true image_url: https://github.com/vexxhost/capo-image-elements/releases/latest/download/ubuntu-22.04-{{ kube_tag }}.qcow2 kube_tag: v1.33.11 network_driver: cilium zuul: _inheritance_path: - '' - '' - '' - '' - '' - '' - '' - '' - '' - '' ansible_version: '9' attempts: 1 branch: main build: 9bf73e1d808b4e57a09eff93190da2cb build_refs: - branch: main change: '1013' change_message: "feat: configure kubelet via kubeadm config patches\n\n## Problem\n\nBaremetal and GPU-oriented Kubernetes clusters need kubelet CPU, topology, and pod-density tuning through Magnum labels so the settings survive node replacement, scale-up, and rolling upgrades. The old alternatives are weak for production:\n\n- post-create SSH edits to `/var/lib/kubelet/config.yaml` are not declarative and do not survive replacement;\n- `kubeletExtraArgs` forwards command-line flags, but kubelet is moving these settings to structured configuration and the equivalent CLI flags are deprecated;\n- accepting arbitrary JSON/YAML from a Magnum label would make labels carry too much structured configuration and would be hard to validate safely.\n\n## Solution\n\nPR #1013 now exposes a structured kubelet configuration path backed by operator-managed profiles.\n\nOperators define reusable kubelet profiles in the management Kubernetes cluster with this ConfigMap:\n\n```yaml\napiVersion: v1\nkind: ConfigMap\nmetadata:\n name: mcapi-kubelet-config-profiles\n namespace: magnum-system\ndata:\n profile-gpu: |\n cpuManagerPolicy: static\n topologyManagerPolicy: single-numa-node\n reservedSystemCPUs: 0-1\n maxPods: 250\n```\n\nUsers select a predefined profile with `kubelet_config_profile=`, then may override individual supported fields with typed labels:\n\n| Label | Example | Effect |\n|---|---|---|\n| `kubelet_config_profile` | `profile-gpu` | Loads operator-defined defaults from `ConfigMap/mcapi-kubelet-config-profiles`. |\n| `kubelet_max_pods` | `250` | Sets kubelet `maxPods`. |\n| `kubelet_cpu_manager_policy` | `static` | Sets kubelet `cpuManagerPolicy`. Accepted values: `none`, `static`. |\n| `kubelet_topology_manager_policy` | `single-numa-node` | Sets kubelet `topologyManagerPolicy`. Accepted values: `none`, `best-effort`, `restricted`, `single-numa-node`. |\n| `kubelet_reserved_cpus` | `0-1` | Sets kubelet `reservedSystemCPUs`. |\n\nExplicit labels win over profile defaults.\n\nWhen a profile or any kubelet label is set, mcapi passes a `kubeletConfig` ClusterClass topology variable and renders `/etc/kubernetes/patches/kubeletconfiguration+merge.yaml` into both control-plane and worker kubeadm configs. The feature also sets the kubeadm patches directory to `/etc/kubernetes/patches` for init/join paths.\n\nmcapi validates the requested profile before creating the cluster. If the ConfigMap is missing, the profile name is unknown, the profile YAML is invalid, or the profile contains unsupported/invalid fields, cluster creation fails before CAPI resources are rendered.\n\nThe driver also merges any missing cluster-template labels into the sparse `cluster.labels` value that Magnum stores when users pass `--labels`, so required template labels such as `kube_tag` remain available to the Rust driver and later monitor/delete paths.\n\n## Usage\n\n```bash\nopenstack coe cluster create bm-gpu \\\n \ --cluster-template k8s-bm \\\n --labels kubelet_max_pods=250 \\\n --labels kubelet_cpu_manager_policy=static \\\n --labels kubelet_topology_manager_policy=single-numa-node \\\n --labels kubelet_reserved_cpus=0-1 \\\n --labels kubelet_config_profile=profile-gpu\n```\n\nTo verify rendering before nodes are Ready, inspect the generated CAPI/bootstrap resources for:\n\n```yaml\npath: /etc/kubernetes/patches/kubeletconfiguration+merge.yaml\ncontent: |\n apiVersion: kubelet.config.k8s.io/v1beta1\n kind: KubeletConfiguration\n \ cpuManagerPolicy: static\n topologyManagerPolicy: single-numa-node\n \ reservedSystemCPUs: 0-1\n maxPods: 250\n```\n\nOnce nodes are Ready, verify the merged kubelet config on a node:\n\n```bash\nsudo grep -E 'cpuManagerPolicy|topologyManagerPolicy|reservedSystemCPUs|maxPods' /var/lib/kubelet/config.yaml\n```\n\n## Why profiles instead of arbitrary kubelet config labels?\n\nProfiles avoid turning Magnum labels into a large untyped config transport. Operators own the reusable kubelet policy in the management cluster, while users get a small and validated label surface for selecting a profile and overriding the fields mcapi intentionally supports.\n\nThis also avoids hardcoding deployment-specific profiles in mcapi config. The source of truth is a normal Kubernetes resource in the management cluster, so operators can update profile definitions without changing mcapi code or oslo configuration.\n\n## Tests\n\nLocal validation:\n\n```bash\nuv run --python 3.10 pytest magnum_cluster_api/tests/unit/test_utils.py::TestKubeletConfigLabels magnum_cluster_api/tests/unit/test_utils.py::TestFillMissingLabelsFromTemplate magnum_cluster_api/tests/unit/test_resources.py magnum_cluster_api/tests/unit/test_driver.py::TestDriver::test_create_cluster\ncargo test kubelet_config\ncargo test test_convert_values_to_cluster_topology_variables\nuvx pre-commit run --all-files\nuvx --with mkdocs-material --with mkdocs-literate-nav mkdocs build --strict\ngit diff --cached --check\nrustfmt --check src/features/kubelet_config.rs\nuv run --python 3.10 python -m compileall -q magnum_cluster_api\n```\n\nResults: all passed.\n\nAIO OVN validation on `38.108.68.110`:\n\n- Rolled Magnum API, conductor, and `magnum-cluster-api-proxy` to a temporary local image built from this PR commit.\n- Created `ConfigMap/mcapi-kubelet-config-profiles` in `magnum-system` with `profile-gpu`.\n- Created a test cluster with `kubelet_config_profile=profile-gpu` plus explicit `kubelet_*` labels.\n- Confirmed the profile code loaded in the conductor and the ClusterClass rendered the `kubeletConfig` patch and schema.\n- Found and fixed the sparse-label live-path issue where user `--labels` replaced template labels and left the Rust driver without `kube_tag`.\n- Full CAPI Cluster creation is currently blocked by existing AIO OpenStackSDK compatibility issues outside this PR path, first in Magnum API validation and then in conductor helper calls such as `osc.cinder().volume_types`.\n" change_url: https://github.com/vexxhost/magnum-cluster-api/pull/1013 commit_id: 3fe8744b5568f8f38e2c76b94f637d299d11a6e5 patchset: 3fe8744b5568f8f38e2c76b94f637d299d11a6e5 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/magnum-cluster-api name: vexxhost/magnum-cluster-api short_name: magnum-cluster-api src_dir: src/github.com/vexxhost/magnum-cluster-api src_dir: src/github.com/vexxhost/magnum-cluster-api topic: null buildset: 0e76cdfea38c4cacb253a83f50b836ab buildset_refs: - branch: main change: '1013' change_message: "feat: configure kubelet via kubeadm config patches\n\n## Problem\n\nBaremetal and GPU-oriented Kubernetes clusters need kubelet CPU, topology, and pod-density tuning through Magnum labels so the settings survive node replacement, scale-up, and rolling upgrades. The old alternatives are weak for production:\n\n- post-create SSH edits to `/var/lib/kubelet/config.yaml` are not declarative and do not survive replacement;\n- `kubeletExtraArgs` forwards command-line flags, but kubelet is moving these settings to structured configuration and the equivalent CLI flags are deprecated;\n- accepting arbitrary JSON/YAML from a Magnum label would make labels carry too much structured configuration and would be hard to validate safely.\n\n## Solution\n\nPR #1013 now exposes a structured kubelet configuration path backed by operator-managed profiles.\n\nOperators define reusable kubelet profiles in the management Kubernetes cluster with this ConfigMap:\n\n```yaml\napiVersion: v1\nkind: ConfigMap\nmetadata:\n name: mcapi-kubelet-config-profiles\n namespace: magnum-system\ndata:\n profile-gpu: |\n cpuManagerPolicy: static\n topologyManagerPolicy: single-numa-node\n reservedSystemCPUs: 0-1\n maxPods: 250\n```\n\nUsers select a predefined profile with `kubelet_config_profile=`, then may override individual supported fields with typed labels:\n\n| Label | Example | Effect |\n|---|---|---|\n| `kubelet_config_profile` | `profile-gpu` | Loads operator-defined defaults from `ConfigMap/mcapi-kubelet-config-profiles`. |\n| `kubelet_max_pods` | `250` | Sets kubelet `maxPods`. |\n| `kubelet_cpu_manager_policy` | `static` | Sets kubelet `cpuManagerPolicy`. Accepted values: `none`, `static`. |\n| `kubelet_topology_manager_policy` | `single-numa-node` | Sets kubelet `topologyManagerPolicy`. Accepted values: `none`, `best-effort`, `restricted`, `single-numa-node`. |\n| `kubelet_reserved_cpus` | `0-1` | Sets kubelet `reservedSystemCPUs`. |\n\nExplicit labels win over profile defaults.\n\nWhen a profile or any kubelet label is set, mcapi passes a `kubeletConfig` ClusterClass topology variable and renders `/etc/kubernetes/patches/kubeletconfiguration+merge.yaml` into both control-plane and worker kubeadm configs. The feature also sets the kubeadm patches directory to `/etc/kubernetes/patches` for init/join paths.\n\nmcapi validates the requested profile before creating the cluster. If the ConfigMap is missing, the profile name is unknown, the profile YAML is invalid, or the profile contains unsupported/invalid fields, cluster creation fails before CAPI resources are rendered.\n\nThe driver also merges any missing cluster-template labels into the sparse `cluster.labels` value that Magnum stores when users pass `--labels`, so required template labels such as `kube_tag` remain available to the Rust driver and later monitor/delete paths.\n\n## Usage\n\n```bash\nopenstack coe cluster create bm-gpu \\\n \ --cluster-template k8s-bm \\\n --labels kubelet_max_pods=250 \\\n --labels kubelet_cpu_manager_policy=static \\\n --labels kubelet_topology_manager_policy=single-numa-node \\\n --labels kubelet_reserved_cpus=0-1 \\\n --labels kubelet_config_profile=profile-gpu\n```\n\nTo verify rendering before nodes are Ready, inspect the generated CAPI/bootstrap resources for:\n\n```yaml\npath: /etc/kubernetes/patches/kubeletconfiguration+merge.yaml\ncontent: |\n apiVersion: kubelet.config.k8s.io/v1beta1\n kind: KubeletConfiguration\n \ cpuManagerPolicy: static\n topologyManagerPolicy: single-numa-node\n \ reservedSystemCPUs: 0-1\n maxPods: 250\n```\n\nOnce nodes are Ready, verify the merged kubelet config on a node:\n\n```bash\nsudo grep -E 'cpuManagerPolicy|topologyManagerPolicy|reservedSystemCPUs|maxPods' /var/lib/kubelet/config.yaml\n```\n\n## Why profiles instead of arbitrary kubelet config labels?\n\nProfiles avoid turning Magnum labels into a large untyped config transport. Operators own the reusable kubelet policy in the management cluster, while users get a small and validated label surface for selecting a profile and overriding the fields mcapi intentionally supports.\n\nThis also avoids hardcoding deployment-specific profiles in mcapi config. The source of truth is a normal Kubernetes resource in the management cluster, so operators can update profile definitions without changing mcapi code or oslo configuration.\n\n## Tests\n\nLocal validation:\n\n```bash\nuv run --python 3.10 pytest magnum_cluster_api/tests/unit/test_utils.py::TestKubeletConfigLabels magnum_cluster_api/tests/unit/test_utils.py::TestFillMissingLabelsFromTemplate magnum_cluster_api/tests/unit/test_resources.py magnum_cluster_api/tests/unit/test_driver.py::TestDriver::test_create_cluster\ncargo test kubelet_config\ncargo test test_convert_values_to_cluster_topology_variables\nuvx pre-commit run --all-files\nuvx --with mkdocs-material --with mkdocs-literate-nav mkdocs build --strict\ngit diff --cached --check\nrustfmt --check src/features/kubelet_config.rs\nuv run --python 3.10 python -m compileall -q magnum_cluster_api\n```\n\nResults: all passed.\n\nAIO OVN validation on `38.108.68.110`:\n\n- Rolled Magnum API, conductor, and `magnum-cluster-api-proxy` to a temporary local image built from this PR commit.\n- Created `ConfigMap/mcapi-kubelet-config-profiles` in `magnum-system` with `profile-gpu`.\n- Created a test cluster with `kubelet_config_profile=profile-gpu` plus explicit `kubelet_*` labels.\n- Confirmed the profile code loaded in the conductor and the ClusterClass rendered the `kubeletConfig` patch and schema.\n- Found and fixed the sparse-label live-path issue where user `--labels` replaced template labels and left the Rust driver without `kube_tag`.\n- Full CAPI Cluster creation is currently blocked by existing AIO OpenStackSDK compatibility issues outside this PR path, first in Magnum API validation and then in conductor helper calls such as `osc.cinder().volume_types`.\n" change_url: https://github.com/vexxhost/magnum-cluster-api/pull/1013 commit_id: 3fe8744b5568f8f38e2c76b94f637d299d11a6e5 patchset: 3fe8744b5568f8f38e2c76b94f637d299d11a6e5 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/magnum-cluster-api name: vexxhost/magnum-cluster-api short_name: magnum-cluster-api src_dir: src/github.com/vexxhost/magnum-cluster-api src_dir: src/github.com/vexxhost/magnum-cluster-api topic: null change: '1013' change_message: "feat: configure kubelet via kubeadm config patches\n\n## Problem\n\nBaremetal and GPU-oriented Kubernetes clusters need kubelet CPU, topology, and pod-density tuning through Magnum labels so the settings survive node replacement, scale-up, and rolling upgrades. The old alternatives are weak for production:\n\n- post-create SSH edits to `/var/lib/kubelet/config.yaml` are not declarative and do not survive replacement;\n- `kubeletExtraArgs` forwards command-line flags, but kubelet is moving these settings to structured configuration and the equivalent CLI flags are deprecated;\n- accepting arbitrary JSON/YAML from a Magnum label would make labels carry too much structured configuration and would be hard to validate safely.\n\n## Solution\n\nPR #1013 now exposes a structured kubelet configuration path backed by operator-managed profiles.\n\nOperators define reusable kubelet profiles in the management Kubernetes cluster with this ConfigMap:\n\n```yaml\napiVersion: v1\nkind: ConfigMap\nmetadata:\n name: mcapi-kubelet-config-profiles\n namespace: magnum-system\ndata:\n profile-gpu: |\n cpuManagerPolicy: static\n topologyManagerPolicy: single-numa-node\n reservedSystemCPUs: 0-1\n maxPods: 250\n```\n\nUsers select a predefined profile with `kubelet_config_profile=`, then may override individual supported fields with typed labels:\n\n| Label | Example | Effect |\n|---|---|---|\n| `kubelet_config_profile` | `profile-gpu` | Loads operator-defined defaults from `ConfigMap/mcapi-kubelet-config-profiles`. |\n| `kubelet_max_pods` | `250` | Sets kubelet `maxPods`. |\n| `kubelet_cpu_manager_policy` | `static` | Sets kubelet `cpuManagerPolicy`. Accepted values: `none`, `static`. |\n| `kubelet_topology_manager_policy` | `single-numa-node` | Sets kubelet `topologyManagerPolicy`. Accepted values: `none`, `best-effort`, `restricted`, `single-numa-node`. |\n| `kubelet_reserved_cpus` | `0-1` | Sets kubelet `reservedSystemCPUs`. |\n\nExplicit labels win over profile defaults.\n\nWhen a profile or any kubelet label is set, mcapi passes a `kubeletConfig` ClusterClass topology variable and renders `/etc/kubernetes/patches/kubeletconfiguration+merge.yaml` into both control-plane and worker kubeadm configs. The feature also sets the kubeadm patches directory to `/etc/kubernetes/patches` for init/join paths.\n\nmcapi validates the requested profile before creating the cluster. If the ConfigMap is missing, the profile name is unknown, the profile YAML is invalid, or the profile contains unsupported/invalid fields, cluster creation fails before CAPI resources are rendered.\n\nThe driver also merges any missing cluster-template labels into the sparse `cluster.labels` value that Magnum stores when users pass `--labels`, so required template labels such as `kube_tag` remain available to the Rust driver and later monitor/delete paths.\n\n## Usage\n\n```bash\nopenstack coe cluster create bm-gpu \\\n --cluster-template k8s-bm \\\n --labels kubelet_max_pods=250 \\\n --labels kubelet_cpu_manager_policy=static \\\n --labels kubelet_topology_manager_policy=single-numa-node \\\n --labels kubelet_reserved_cpus=0-1 \\\n --labels kubelet_config_profile=profile-gpu\n```\n\nTo verify rendering before nodes are Ready, inspect the generated CAPI/bootstrap resources for:\n\n```yaml\npath: /etc/kubernetes/patches/kubeletconfiguration+merge.yaml\ncontent: |\n apiVersion: kubelet.config.k8s.io/v1beta1\n kind: KubeletConfiguration\n \ cpuManagerPolicy: static\n topologyManagerPolicy: single-numa-node\n reservedSystemCPUs: 0-1\n maxPods: 250\n```\n\nOnce nodes are Ready, verify the merged kubelet config on a node:\n\n```bash\nsudo grep -E 'cpuManagerPolicy|topologyManagerPolicy|reservedSystemCPUs|maxPods' /var/lib/kubelet/config.yaml\n```\n\n## Why profiles instead of arbitrary kubelet config labels?\n\nProfiles avoid turning Magnum labels into a large untyped config transport. Operators own the reusable kubelet policy in the management cluster, while users get a small and validated label surface for selecting a profile and overriding the fields mcapi intentionally supports.\n\nThis also avoids hardcoding deployment-specific profiles in mcapi config. The source of truth is a normal Kubernetes resource in the management cluster, so operators can update profile definitions without changing mcapi code or oslo configuration.\n\n## Tests\n\nLocal validation:\n\n```bash\nuv run --python 3.10 pytest magnum_cluster_api/tests/unit/test_utils.py::TestKubeletConfigLabels magnum_cluster_api/tests/unit/test_utils.py::TestFillMissingLabelsFromTemplate magnum_cluster_api/tests/unit/test_resources.py magnum_cluster_api/tests/unit/test_driver.py::TestDriver::test_create_cluster\ncargo test kubelet_config\ncargo test test_convert_values_to_cluster_topology_variables\nuvx pre-commit run --all-files\nuvx --with mkdocs-material --with mkdocs-literate-nav mkdocs build --strict\ngit diff --cached --check\nrustfmt --check src/features/kubelet_config.rs\nuv run --python 3.10 python -m compileall -q magnum_cluster_api\n```\n\nResults: all passed.\n\nAIO OVN validation on `38.108.68.110`:\n\n- Rolled Magnum API, conductor, and `magnum-cluster-api-proxy` to a temporary local image built from this PR commit.\n- Created `ConfigMap/mcapi-kubelet-config-profiles` in `magnum-system` with `profile-gpu`.\n- Created a test cluster with `kubelet_config_profile=profile-gpu` plus explicit `kubelet_*` labels.\n- Confirmed the profile code loaded in the conductor and the ClusterClass rendered the `kubeletConfig` patch and schema.\n- Found and fixed the sparse-label live-path issue where user `--labels` replaced template labels and left the Rust driver without `kube_tag`.\n- Full CAPI Cluster creation is currently blocked by existing AIO OpenStackSDK compatibility issues outside this PR path, first in Magnum API validation and then in conductor helper calls such as `osc.cinder().volume_types`.\n" change_url: https://github.com/vexxhost/magnum-cluster-api/pull/1013 child_jobs: [] commit_id: 3fe8744b5568f8f38e2c76b94f637d299d11a6e5 event_id: 69c06340-536e-11f1-9ab4-80d9fbf36a94 executor: hostname: 2d72f0692154 inventory_file: /var/lib/zuul/builds/9bf73e1d808b4e57a09eff93190da2cb/ansible/inventory.yaml log_root: /var/lib/zuul/builds/9bf73e1d808b4e57a09eff93190da2cb/work/logs result_data_file: /var/lib/zuul/builds/9bf73e1d808b4e57a09eff93190da2cb/work/results.json src_root: /var/lib/zuul/builds/9bf73e1d808b4e57a09eff93190da2cb/work/src work_root: /var/lib/zuul/builds/9bf73e1d808b4e57a09eff93190da2cb/work include_vars: [] items: - branch: main change: '1013' change_message: "feat: configure kubelet via kubeadm config patches\n\n## Problem\n\nBaremetal and GPU-oriented Kubernetes clusters need kubelet CPU, topology, and pod-density tuning through Magnum labels so the settings survive node replacement, scale-up, and rolling upgrades. The old alternatives are weak for production:\n\n- post-create SSH edits to `/var/lib/kubelet/config.yaml` are not declarative and do not survive replacement;\n- `kubeletExtraArgs` forwards command-line flags, but kubelet is moving these settings to structured configuration and the equivalent CLI flags are deprecated;\n- accepting arbitrary JSON/YAML from a Magnum label would make labels carry too much structured configuration and would be hard to validate safely.\n\n## Solution\n\nPR #1013 now exposes a structured kubelet configuration path backed by operator-managed profiles.\n\nOperators define reusable kubelet profiles in the management Kubernetes cluster with this ConfigMap:\n\n```yaml\napiVersion: v1\nkind: ConfigMap\nmetadata:\n name: mcapi-kubelet-config-profiles\n namespace: magnum-system\ndata:\n profile-gpu: |\n cpuManagerPolicy: static\n topologyManagerPolicy: single-numa-node\n reservedSystemCPUs: 0-1\n maxPods: 250\n```\n\nUsers select a predefined profile with `kubelet_config_profile=`, then may override individual supported fields with typed labels:\n\n| Label | Example | Effect |\n|---|---|---|\n| `kubelet_config_profile` | `profile-gpu` | Loads operator-defined defaults from `ConfigMap/mcapi-kubelet-config-profiles`. |\n| `kubelet_max_pods` | `250` | Sets kubelet `maxPods`. |\n| `kubelet_cpu_manager_policy` | `static` | Sets kubelet `cpuManagerPolicy`. Accepted values: `none`, `static`. |\n| `kubelet_topology_manager_policy` | `single-numa-node` | Sets kubelet `topologyManagerPolicy`. Accepted values: `none`, `best-effort`, `restricted`, `single-numa-node`. |\n| `kubelet_reserved_cpus` | `0-1` | Sets kubelet `reservedSystemCPUs`. |\n\nExplicit labels win over profile defaults.\n\nWhen a profile or any kubelet label is set, mcapi passes a `kubeletConfig` ClusterClass topology variable and renders `/etc/kubernetes/patches/kubeletconfiguration+merge.yaml` into both control-plane and worker kubeadm configs. The feature also sets the kubeadm patches directory to `/etc/kubernetes/patches` for init/join paths.\n\nmcapi validates the requested profile before creating the cluster. If the ConfigMap is missing, the profile name is unknown, the profile YAML is invalid, or the profile contains unsupported/invalid fields, cluster creation fails before CAPI resources are rendered.\n\nThe driver also merges any missing cluster-template labels into the sparse `cluster.labels` value that Magnum stores when users pass `--labels`, so required template labels such as `kube_tag` remain available to the Rust driver and later monitor/delete paths.\n\n## Usage\n\n```bash\nopenstack coe cluster create bm-gpu \\\n \ --cluster-template k8s-bm \\\n --labels kubelet_max_pods=250 \\\n --labels kubelet_cpu_manager_policy=static \\\n --labels kubelet_topology_manager_policy=single-numa-node \\\n --labels kubelet_reserved_cpus=0-1 \\\n --labels kubelet_config_profile=profile-gpu\n```\n\nTo verify rendering before nodes are Ready, inspect the generated CAPI/bootstrap resources for:\n\n```yaml\npath: /etc/kubernetes/patches/kubeletconfiguration+merge.yaml\ncontent: |\n apiVersion: kubelet.config.k8s.io/v1beta1\n kind: KubeletConfiguration\n \ cpuManagerPolicy: static\n topologyManagerPolicy: single-numa-node\n \ reservedSystemCPUs: 0-1\n maxPods: 250\n```\n\nOnce nodes are Ready, verify the merged kubelet config on a node:\n\n```bash\nsudo grep -E 'cpuManagerPolicy|topologyManagerPolicy|reservedSystemCPUs|maxPods' /var/lib/kubelet/config.yaml\n```\n\n## Why profiles instead of arbitrary kubelet config labels?\n\nProfiles avoid turning Magnum labels into a large untyped config transport. Operators own the reusable kubelet policy in the management cluster, while users get a small and validated label surface for selecting a profile and overriding the fields mcapi intentionally supports.\n\nThis also avoids hardcoding deployment-specific profiles in mcapi config. The source of truth is a normal Kubernetes resource in the management cluster, so operators can update profile definitions without changing mcapi code or oslo configuration.\n\n## Tests\n\nLocal validation:\n\n```bash\nuv run --python 3.10 pytest magnum_cluster_api/tests/unit/test_utils.py::TestKubeletConfigLabels magnum_cluster_api/tests/unit/test_utils.py::TestFillMissingLabelsFromTemplate magnum_cluster_api/tests/unit/test_resources.py magnum_cluster_api/tests/unit/test_driver.py::TestDriver::test_create_cluster\ncargo test kubelet_config\ncargo test test_convert_values_to_cluster_topology_variables\nuvx pre-commit run --all-files\nuvx --with mkdocs-material --with mkdocs-literate-nav mkdocs build --strict\ngit diff --cached --check\nrustfmt --check src/features/kubelet_config.rs\nuv run --python 3.10 python -m compileall -q magnum_cluster_api\n```\n\nResults: all passed.\n\nAIO OVN validation on `38.108.68.110`:\n\n- Rolled Magnum API, conductor, and `magnum-cluster-api-proxy` to a temporary local image built from this PR commit.\n- Created `ConfigMap/mcapi-kubelet-config-profiles` in `magnum-system` with `profile-gpu`.\n- Created a test cluster with `kubelet_config_profile=profile-gpu` plus explicit `kubelet_*` labels.\n- Confirmed the profile code loaded in the conductor and the ClusterClass rendered the `kubeletConfig` patch and schema.\n- Found and fixed the sparse-label live-path issue where user `--labels` replaced template labels and left the Rust driver without `kube_tag`.\n- Full CAPI Cluster creation is currently blocked by existing AIO OpenStackSDK compatibility issues outside this PR path, first in Magnum API validation and then in conductor helper calls such as `osc.cinder().volume_types`.\n" change_url: https://github.com/vexxhost/magnum-cluster-api/pull/1013 commit_id: 3fe8744b5568f8f38e2c76b94f637d299d11a6e5 patchset: 3fe8744b5568f8f38e2c76b94f637d299d11a6e5 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/magnum-cluster-api name: vexxhost/magnum-cluster-api short_name: magnum-cluster-api src_dir: src/github.com/vexxhost/magnum-cluster-api topic: null job: magnum-cluster-api-hydrophone-v1.33.11-cilium jobtags: [] max_attempts: 3 message: ZmVhdDogY29uZmlndXJlIGt1YmVsZXQgdmlhIGt1YmVhZG0gY29uZmlnIHBhdGNoZXMKCiMjIFByb2JsZW0KCkJhcmVtZXRhbCBhbmQgR1BVLW9yaWVudGVkIEt1YmVybmV0ZXMgY2x1c3RlcnMgbmVlZCBrdWJlbGV0IENQVSwgdG9wb2xvZ3ksIGFuZCBwb2QtZGVuc2l0eSB0dW5pbmcgdGhyb3VnaCBNYWdudW0gbGFiZWxzIHNvIHRoZSBzZXR0aW5ncyBzdXJ2aXZlIG5vZGUgcmVwbGFjZW1lbnQsIHNjYWxlLXVwLCBhbmQgcm9sbGluZyB1cGdyYWRlcy4gVGhlIG9sZCBhbHRlcm5hdGl2ZXMgYXJlIHdlYWsgZm9yIHByb2R1Y3Rpb246CgotIHBvc3QtY3JlYXRlIFNTSCBlZGl0cyB0byBgL3Zhci9saWIva3ViZWxldC9jb25maWcueWFtbGAgYXJlIG5vdCBkZWNsYXJhdGl2ZSBhbmQgZG8gbm90IHN1cnZpdmUgcmVwbGFjZW1lbnQ7Ci0gYGt1YmVsZXRFeHRyYUFyZ3NgIGZvcndhcmRzIGNvbW1hbmQtbGluZSBmbGFncywgYnV0IGt1YmVsZXQgaXMgbW92aW5nIHRoZXNlIHNldHRpbmdzIHRvIHN0cnVjdHVyZWQgY29uZmlndXJhdGlvbiBhbmQgdGhlIGVxdWl2YWxlbnQgQ0xJIGZsYWdzIGFyZSBkZXByZWNhdGVkOwotIGFjY2VwdGluZyBhcmJpdHJhcnkgSlNPTi9ZQU1MIGZyb20gYSBNYWdudW0gbGFiZWwgd291bGQgbWFrZSBsYWJlbHMgY2FycnkgdG9vIG11Y2ggc3RydWN0dXJlZCBjb25maWd1cmF0aW9uIGFuZCB3b3VsZCBiZSBoYXJkIHRvIHZhbGlkYXRlIHNhZmVseS4KCiMjIFNvbHV0aW9uCgpQUiAjMTAxMyBub3cgZXhwb3NlcyBhIHN0cnVjdHVyZWQga3ViZWxldCBjb25maWd1cmF0aW9uIHBhdGggYmFja2VkIGJ5IG9wZXJhdG9yLW1hbmFnZWQgcHJvZmlsZXMuCgpPcGVyYXRvcnMgZGVmaW5lIHJldXNhYmxlIGt1YmVsZXQgcHJvZmlsZXMgaW4gdGhlIG1hbmFnZW1lbnQgS3ViZXJuZXRlcyBjbHVzdGVyIHdpdGggdGhpcyBDb25maWdNYXA6CgpgYGB5YW1sCmFwaVZlcnNpb246IHYxCmtpbmQ6IENvbmZpZ01hcAptZXRhZGF0YToKICBuYW1lOiBtY2FwaS1rdWJlbGV0LWNvbmZpZy1wcm9maWxlcwogIG5hbWVzcGFjZTogbWFnbnVtLXN5c3RlbQpkYXRhOgogIHByb2ZpbGUtZ3B1OiB8CiAgICBjcHVNYW5hZ2VyUG9saWN5OiBzdGF0aWMKICAgIHRvcG9sb2d5TWFuYWdlclBvbGljeTogc2luZ2xlLW51bWEtbm9kZQogICAgcmVzZXJ2ZWRTeXN0ZW1DUFVzOiAwLTEKICAgIG1heFBvZHM6IDI1MApgYGAKClVzZXJzIHNlbGVjdCBhIHByZWRlZmluZWQgcHJvZmlsZSB3aXRoIGBrdWJlbGV0X2NvbmZpZ19wcm9maWxlPTxuYW1lPmAsIHRoZW4gbWF5IG92ZXJyaWRlIGluZGl2aWR1YWwgc3VwcG9ydGVkIGZpZWxkcyB3aXRoIHR5cGVkIGxhYmVsczoKCnwgTGFiZWwgfCBFeGFtcGxlIHwgRWZmZWN0IHwKfC0tLXwtLS18LS0tfAp8IGBrdWJlbGV0X2NvbmZpZ19wcm9maWxlYCB8IGBwcm9maWxlLWdwdWAgfCBMb2FkcyBvcGVyYXRvci1kZWZpbmVkIGRlZmF1bHRzIGZyb20gYENvbmZpZ01hcC9tY2FwaS1rdWJlbGV0LWNvbmZpZy1wcm9maWxlc2AuIHwKfCBga3ViZWxldF9tYXhfcG9kc2AgfCBgMjUwYCB8IFNldHMga3ViZWxldCBgbWF4UG9kc2AuIHwKfCBga3ViZWxldF9jcHVfbWFuYWdlcl9wb2xpY3lgIHwgYHN0YXRpY2AgfCBTZXRzIGt1YmVsZXQgYGNwdU1hbmFnZXJQb2xpY3lgLiBBY2NlcHRlZCB2YWx1ZXM6IGBub25lYCwgYHN0YXRpY2AuIHwKfCBga3ViZWxldF90b3BvbG9neV9tYW5hZ2VyX3BvbGljeWAgfCBgc2luZ2xlLW51bWEtbm9kZWAgfCBTZXRzIGt1YmVsZXQgYHRvcG9sb2d5TWFuYWdlclBvbGljeWAuIEFjY2VwdGVkIHZhbHVlczogYG5vbmVgLCBgYmVzdC1lZmZvcnRgLCBgcmVzdHJpY3RlZGAsIGBzaW5nbGUtbnVtYS1ub2RlYC4gfAp8IGBrdWJlbGV0X3Jlc2VydmVkX2NwdXNgIHwgYDAtMWAgfCBTZXRzIGt1YmVsZXQgYHJlc2VydmVkU3lzdGVtQ1BVc2AuIHwKCkV4cGxpY2l0IGxhYmVscyB3aW4gb3ZlciBwcm9maWxlIGRlZmF1bHRzLgoKV2hlbiBhIHByb2ZpbGUgb3IgYW55IGt1YmVsZXQgbGFiZWwgaXMgc2V0LCBtY2FwaSBwYXNzZXMgYSBga3ViZWxldENvbmZpZ2AgQ2x1c3RlckNsYXNzIHRvcG9sb2d5IHZhcmlhYmxlIGFuZCByZW5kZXJzIGAvZXRjL2t1YmVybmV0ZXMvcGF0Y2hlcy9rdWJlbGV0Y29uZmlndXJhdGlvbittZXJnZS55YW1sYCBpbnRvIGJvdGggY29udHJvbC1wbGFuZSBhbmQgd29ya2VyIGt1YmVhZG0gY29uZmlncy4gVGhlIGZlYXR1cmUgYWxzbyBzZXRzIHRoZSBrdWJlYWRtIHBhdGNoZXMgZGlyZWN0b3J5IHRvIGAvZXRjL2t1YmVybmV0ZXMvcGF0Y2hlc2AgZm9yIGluaXQvam9pbiBwYXRocy4KCm1jYXBpIHZhbGlkYXRlcyB0aGUgcmVxdWVzdGVkIHByb2ZpbGUgYmVmb3JlIGNyZWF0aW5nIHRoZSBjbHVzdGVyLiBJZiB0aGUgQ29uZmlnTWFwIGlzIG1pc3NpbmcsIHRoZSBwcm9maWxlIG5hbWUgaXMgdW5rbm93biwgdGhlIHByb2ZpbGUgWUFNTCBpcyBpbnZhbGlkLCBvciB0aGUgcHJvZmlsZSBjb250YWlucyB1bnN1cHBvcnRlZC9pbnZhbGlkIGZpZWxkcywgY2x1c3RlciBjcmVhdGlvbiBmYWlscyBiZWZvcmUgQ0FQSSByZXNvdXJjZXMgYXJlIHJlbmRlcmVkLgoKVGhlIGRyaXZlciBhbHNvIG1lcmdlcyBhbnkgbWlzc2luZyBjbHVzdGVyLXRlbXBsYXRlIGxhYmVscyBpbnRvIHRoZSBzcGFyc2UgYGNsdXN0ZXIubGFiZWxzYCB2YWx1ZSB0aGF0IE1hZ251bSBzdG9yZXMgd2hlbiB1c2VycyBwYXNzIGAtLWxhYmVsc2AsIHNvIHJlcXVpcmVkIHRlbXBsYXRlIGxhYmVscyBzdWNoIGFzIGBrdWJlX3RhZ2AgcmVtYWluIGF2YWlsYWJsZSB0byB0aGUgUnVzdCBkcml2ZXIgYW5kIGxhdGVyIG1vbml0b3IvZGVsZXRlIHBhdGhzLgoKIyMgVXNhZ2UKCmBgYGJhc2gKb3BlbnN0YWNrIGNvZSBjbHVzdGVyIGNyZWF0ZSBibS1ncHUgXAogIC0tY2x1c3Rlci10ZW1wbGF0ZSBrOHMtYm0gXAogIC0tbGFiZWxzIGt1YmVsZXRfbWF4X3BvZHM9MjUwIFwKICAtLWxhYmVscyBrdWJlbGV0X2NwdV9tYW5hZ2VyX3BvbGljeT1zdGF0aWMgXAogIC0tbGFiZWxzIGt1YmVsZXRfdG9wb2xvZ3lfbWFuYWdlcl9wb2xpY3k9c2luZ2xlLW51bWEtbm9kZSBcCiAgLS1sYWJlbHMga3ViZWxldF9yZXNlcnZlZF9jcHVzPTAtMSBcCiAgLS1sYWJlbHMga3ViZWxldF9jb25maWdfcHJvZmlsZT1wcm9maWxlLWdwdQpgYGAKClRvIHZlcmlmeSByZW5kZXJpbmcgYmVmb3JlIG5vZGVzIGFyZSBSZWFkeSwgaW5zcGVjdCB0aGUgZ2VuZXJhdGVkIENBUEkvYm9vdHN0cmFwIHJlc291cmNlcyBmb3I6CgpgYGB5YW1sCnBhdGg6IC9ldGMva3ViZXJuZXRlcy9wYXRjaGVzL2t1YmVsZXRjb25maWd1cmF0aW9uK21lcmdlLnlhbWwKY29udGVudDogfAogIGFwaVZlcnNpb246IGt1YmVsZXQuY29uZmlnLms4cy5pby92MWJldGExCiAga2luZDogS3ViZWxldENvbmZpZ3VyYXRpb24KICBjcHVNYW5hZ2VyUG9saWN5OiBzdGF0aWMKICB0b3BvbG9neU1hbmFnZXJQb2xpY3k6IHNpbmdsZS1udW1hLW5vZGUKICByZXNlcnZlZFN5c3RlbUNQVXM6IDAtMQogIG1heFBvZHM6IDI1MApgYGAKCk9uY2Ugbm9kZXMgYXJlIFJlYWR5LCB2ZXJpZnkgdGhlIG1lcmdlZCBrdWJlbGV0IGNvbmZpZyBvbiBhIG5vZGU6CgpgYGBiYXNoCnN1ZG8gZ3JlcCAtRSAnY3B1TWFuYWdlclBvbGljeXx0b3BvbG9neU1hbmFnZXJQb2xpY3l8cmVzZXJ2ZWRTeXN0ZW1DUFVzfG1heFBvZHMnIC92YXIvbGliL2t1YmVsZXQvY29uZmlnLnlhbWwKYGBgCgojIyBXaHkgcHJvZmlsZXMgaW5zdGVhZCBvZiBhcmJpdHJhcnkga3ViZWxldCBjb25maWcgbGFiZWxzPwoKUHJvZmlsZXMgYXZvaWQgdHVybmluZyBNYWdudW0gbGFiZWxzIGludG8gYSBsYXJnZSB1bnR5cGVkIGNvbmZpZyB0cmFuc3BvcnQuIE9wZXJhdG9ycyBvd24gdGhlIHJldXNhYmxlIGt1YmVsZXQgcG9saWN5IGluIHRoZSBtYW5hZ2VtZW50IGNsdXN0ZXIsIHdoaWxlIHVzZXJzIGdldCBhIHNtYWxsIGFuZCB2YWxpZGF0ZWQgbGFiZWwgc3VyZmFjZSBmb3Igc2VsZWN0aW5nIGEgcHJvZmlsZSBhbmQgb3ZlcnJpZGluZyB0aGUgZmllbGRzIG1jYXBpIGludGVudGlvbmFsbHkgc3VwcG9ydHMuCgpUaGlzIGFsc28gYXZvaWRzIGhhcmRjb2RpbmcgZGVwbG95bWVudC1zcGVjaWZpYyBwcm9maWxlcyBpbiBtY2FwaSBjb25maWcuIFRoZSBzb3VyY2Ugb2YgdHJ1dGggaXMgYSBub3JtYWwgS3ViZXJuZXRlcyByZXNvdXJjZSBpbiB0aGUgbWFuYWdlbWVudCBjbHVzdGVyLCBzbyBvcGVyYXRvcnMgY2FuIHVwZGF0ZSBwcm9maWxlIGRlZmluaXRpb25zIHdpdGhvdXQgY2hhbmdpbmcgbWNhcGkgY29kZSBvciBvc2xvIGNvbmZpZ3VyYXRpb24uCgojIyBUZXN0cwoKTG9jYWwgdmFsaWRhdGlvbjoKCmBgYGJhc2gKdXYgcnVuIC0tcHl0aG9uIDMuMTAgcHl0ZXN0IG1hZ251bV9jbHVzdGVyX2FwaS90ZXN0cy91bml0L3Rlc3RfdXRpbHMucHk6OlRlc3RLdWJlbGV0Q29uZmlnTGFiZWxzIG1hZ251bV9jbHVzdGVyX2FwaS90ZXN0cy91bml0L3Rlc3RfdXRpbHMucHk6OlRlc3RGaWxsTWlzc2luZ0xhYmVsc0Zyb21UZW1wbGF0ZSBtYWdudW1fY2x1c3Rlcl9hcGkvdGVzdHMvdW5pdC90ZXN0X3Jlc291cmNlcy5weSBtYWdudW1fY2x1c3Rlcl9hcGkvdGVzdHMvdW5pdC90ZXN0X2RyaXZlci5weTo6VGVzdERyaXZlcjo6dGVzdF9jcmVhdGVfY2x1c3RlcgpjYXJnbyB0ZXN0IGt1YmVsZXRfY29uZmlnCmNhcmdvIHRlc3QgdGVzdF9jb252ZXJ0X3ZhbHVlc190b19jbHVzdGVyX3RvcG9sb2d5X3ZhcmlhYmxlcwp1dnggcHJlLWNvbW1pdCBydW4gLS1hbGwtZmlsZXMKdXZ4IC0td2l0aCBta2RvY3MtbWF0ZXJpYWwgLS13aXRoIG1rZG9jcy1saXRlcmF0ZS1uYXYgbWtkb2NzIGJ1aWxkIC0tc3RyaWN0CmdpdCBkaWZmIC0tY2FjaGVkIC0tY2hlY2sKcnVzdGZtdCAtLWNoZWNrIHNyYy9mZWF0dXJlcy9rdWJlbGV0X2NvbmZpZy5ycwp1diBydW4gLS1weXRob24gMy4xMCBweXRob24gLW0gY29tcGlsZWFsbCAtcSBtYWdudW1fY2x1c3Rlcl9hcGkKYGBgCgpSZXN1bHRzOiBhbGwgcGFzc2VkLgoKQUlPIE9WTiB2YWxpZGF0aW9uIG9uIGAzOC4xMDguNjguMTEwYDoKCi0gUm9sbGVkIE1hZ251bSBBUEksIGNvbmR1Y3RvciwgYW5kIGBtYWdudW0tY2x1c3Rlci1hcGktcHJveHlgIHRvIGEgdGVtcG9yYXJ5IGxvY2FsIGltYWdlIGJ1aWx0IGZyb20gdGhpcyBQUiBjb21taXQuCi0gQ3JlYXRlZCBgQ29uZmlnTWFwL21jYXBpLWt1YmVsZXQtY29uZmlnLXByb2ZpbGVzYCBpbiBgbWFnbnVtLXN5c3RlbWAgd2l0aCBgcHJvZmlsZS1ncHVgLgotIENyZWF0ZWQgYSB0ZXN0IGNsdXN0ZXIgd2l0aCBga3ViZWxldF9jb25maWdfcHJvZmlsZT1wcm9maWxlLWdwdWAgcGx1cyBleHBsaWNpdCBga3ViZWxldF8qYCBsYWJlbHMuCi0gQ29uZmlybWVkIHRoZSBwcm9maWxlIGNvZGUgbG9hZGVkIGluIHRoZSBjb25kdWN0b3IgYW5kIHRoZSBDbHVzdGVyQ2xhc3MgcmVuZGVyZWQgdGhlIGBrdWJlbGV0Q29uZmlnYCBwYXRjaCBhbmQgc2NoZW1hLgotIEZvdW5kIGFuZCBmaXhlZCB0aGUgc3BhcnNlLWxhYmVsIGxpdmUtcGF0aCBpc3N1ZSB3aGVyZSB1c2VyIGAtLWxhYmVsc2AgcmVwbGFjZWQgdGVtcGxhdGUgbGFiZWxzIGFuZCBsZWZ0IHRoZSBSdXN0IGRyaXZlciB3aXRob3V0IGBrdWJlX3RhZ2AuCi0gRnVsbCBDQVBJIENsdXN0ZXIgY3JlYXRpb24gaXMgY3VycmVudGx5IGJsb2NrZWQgYnkgZXhpc3RpbmcgQUlPIE9wZW5TdGFja1NESyBjb21wYXRpYmlsaXR5IGlzc3VlcyBvdXRzaWRlIHRoaXMgUFIgcGF0aCwgZmlyc3QgaW4gTWFnbnVtIEFQSSB2YWxpZGF0aW9uIGFuZCB0aGVuIGluIGNvbmR1Y3RvciBoZWxwZXIgY2FsbHMgc3VjaCBhcyBgb3NjLmNpbmRlcigpLnZvbHVtZV90eXBlc2AuCg== override_checkout: master patchset: 3fe8744b5568f8f38e2c76b94f637d299d11a6e5 pipeline: check playbook_context: playbook_projects: trusted/project_0/github.com/vexxhost/zuul-config: canonical_name: github.com/vexxhost/zuul-config checkout: main commit: 298983cd1253e6833abdb49d87d912527e0e6597 trusted/project_1/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: 79fe3eb1d01f8ac5739b0b7bc4759c407b6e248d trusted/project_2/github.com/vexxhost/zuul-jobs: canonical_name: github.com/vexxhost/zuul-jobs checkout: main commit: a6e68243e02ef030ce5e75f8b67630880c475f33 untrusted/project_0/opendev.org/openstack/devstack: canonical_name: opendev.org/openstack/devstack checkout: master commit: bdfe1d9ac44cfa26e74db40bfbac03bafc45c98c untrusted/project_1/opendev.org/openstack/openstack-zuul-jobs: canonical_name: opendev.org/openstack/openstack-zuul-jobs checkout: master commit: ba53fab8bc8ef6b74b6306d0e31b6f4fd578362d untrusted/project_2/github.com/vexxhost/zuul-config: canonical_name: github.com/vexxhost/zuul-config checkout: main commit: 298983cd1253e6833abdb49d87d912527e0e6597 untrusted/project_3/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: 79fe3eb1d01f8ac5739b0b7bc4759c407b6e248d untrusted/project_4/github.com/vexxhost/zuul-jobs: canonical_name: github.com/vexxhost/zuul-jobs checkout: main commit: a6e68243e02ef030ce5e75f8b67630880c475f33 untrusted/project_5/github.com/vexxhost/magnum-cluster-api: canonical_name: github.com/vexxhost/magnum-cluster-api checkout: main commit: 3fe8744b5568f8f38e2c76b94f637d299d11a6e5 playbooks: - path: untrusted/project_5/github.com/vexxhost/magnum-cluster-api/zuul.d/playbooks/hydrophone/run.yml roles: - checkout: master checkout_description: job override ref link_name: ansible/playbook_0/role_1/devstack link_target: untrusted/project_0/opendev.org/openstack/devstack role_path: ansible/playbook_0/role_1/devstack/roles - checkout: master checkout_description: job override ref link_name: ansible/playbook_0/role_2/openstack-zuul-jobs link_target: untrusted/project_1/opendev.org/openstack/openstack-zuul-jobs role_path: ansible/playbook_0/role_2/openstack-zuul-jobs/roles - checkout: master checkout_description: job override ref link_name: ansible/playbook_0/role_4/zuul-jobs link_target: untrusted/project_3/opendev.org/zuul/zuul-jobs role_path: ansible/playbook_0/role_4/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/playbook_0/role_5/zuul-jobs link_target: untrusted/project_4/github.com/vexxhost/zuul-jobs role_path: ansible/playbook_0/role_5/zuul-jobs/roles post_playbooks: - path: untrusted/project_5/github.com/vexxhost/magnum-cluster-api/zuul.d/playbooks/hydrophone/post.yml roles: - checkout: master checkout_description: job override ref link_name: ansible/post_playbook_0/role_1/devstack link_target: untrusted/project_0/opendev.org/openstack/devstack role_path: ansible/post_playbook_0/role_1/devstack/roles - checkout: master checkout_description: job override ref link_name: ansible/post_playbook_0/role_2/openstack-zuul-jobs link_target: untrusted/project_1/opendev.org/openstack/openstack-zuul-jobs role_path: ansible/post_playbook_0/role_2/openstack-zuul-jobs/roles - checkout: master checkout_description: job override ref link_name: ansible/post_playbook_0/role_4/zuul-jobs link_target: untrusted/project_3/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_0/role_4/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_0/role_5/zuul-jobs link_target: untrusted/project_4/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_0/role_5/zuul-jobs/roles - path: untrusted/project_0/opendev.org/openstack/devstack/playbooks/post.yaml roles: - checkout: master checkout_description: playbook branch link_name: ansible/post_playbook_1/role_0/devstack link_target: untrusted/project_0/opendev.org/openstack/devstack role_path: ansible/post_playbook_1/role_0/devstack/roles - checkout: master checkout_description: job override ref link_name: ansible/post_playbook_1/role_1/openstack-zuul-jobs link_target: untrusted/project_1/opendev.org/openstack/openstack-zuul-jobs role_path: ansible/post_playbook_1/role_1/openstack-zuul-jobs/roles - checkout: master checkout_description: job override ref link_name: ansible/post_playbook_1/role_3/zuul-jobs link_target: untrusted/project_3/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_1/role_3/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_1/role_4/zuul-jobs link_target: untrusted/project_4/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_1/role_4/zuul-jobs/roles - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post.yaml roles: - checkout: master checkout_description: job override ref link_name: ansible/post_playbook_2/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_2/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_2/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_2/role_2/zuul-jobs/roles - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post-logs.yaml roles: - checkout: master checkout_description: job override ref link_name: ansible/post_playbook_3/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_3/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_3/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_3/role_2/zuul-jobs/roles pre_playbooks: - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/pre.yaml roles: - checkout: master checkout_description: job override ref link_name: ansible/pre_playbook_0/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_0/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/pre_playbook_0/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_0/role_2/zuul-jobs/roles - path: untrusted/project_0/opendev.org/openstack/devstack/playbooks/pre.yaml roles: - checkout: master checkout_description: playbook branch link_name: ansible/pre_playbook_1/role_0/devstack link_target: untrusted/project_0/opendev.org/openstack/devstack role_path: ansible/pre_playbook_1/role_0/devstack/roles - checkout: master checkout_description: job override ref link_name: ansible/pre_playbook_1/role_1/openstack-zuul-jobs link_target: untrusted/project_1/opendev.org/openstack/openstack-zuul-jobs role_path: ansible/pre_playbook_1/role_1/openstack-zuul-jobs/roles - checkout: master checkout_description: job override ref link_name: ansible/pre_playbook_1/role_3/zuul-jobs link_target: untrusted/project_3/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_1/role_3/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/pre_playbook_1/role_4/zuul-jobs link_target: untrusted/project_4/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_1/role_4/zuul-jobs/roles - path: untrusted/project_5/github.com/vexxhost/magnum-cluster-api/zuul.d/playbooks/hydrophone/pre.yml roles: - checkout: master checkout_description: job override ref link_name: ansible/pre_playbook_2/role_1/devstack link_target: untrusted/project_0/opendev.org/openstack/devstack role_path: ansible/pre_playbook_2/role_1/devstack/roles - checkout: master checkout_description: job override ref link_name: ansible/pre_playbook_2/role_2/openstack-zuul-jobs link_target: untrusted/project_1/opendev.org/openstack/openstack-zuul-jobs role_path: ansible/pre_playbook_2/role_2/openstack-zuul-jobs/roles - checkout: master checkout_description: job override ref link_name: ansible/pre_playbook_2/role_4/zuul-jobs link_target: untrusted/project_3/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_2/role_4/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/pre_playbook_2/role_5/zuul-jobs link_target: untrusted/project_4/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_2/role_5/zuul-jobs/roles post_review: false post_timeout: null pre_timeout: null project: canonical_hostname: github.com canonical_name: github.com/vexxhost/magnum-cluster-api name: vexxhost/magnum-cluster-api short_name: magnum-cluster-api src_dir: src/github.com/vexxhost/magnum-cluster-api projects: github.com/novnc/novnc: canonical_hostname: github.com canonical_name: github.com/novnc/novnc checkout: master checkout_description: job override ref commit: 8e1ebdffba02e651c399dacef841f8941f6ad6e4 name: novnc/novnc required: true short_name: novnc src_dir: src/github.com/novnc/novnc github.com/vexxhost/magnum-cluster-api: canonical_hostname: github.com canonical_name: github.com/vexxhost/magnum-cluster-api checkout: main checkout_description: zuul branch commit: 3fe8744b5568f8f38e2c76b94f637d299d11a6e5 name: vexxhost/magnum-cluster-api required: false short_name: magnum-cluster-api src_dir: src/github.com/vexxhost/magnum-cluster-api opendev.org/openstack/barbican: canonical_hostname: opendev.org canonical_name: opendev.org/openstack/barbican checkout: master checkout_description: job override ref commit: 2d1ea8606784cb7e1147e869a79f6be7e8466236 name: openstack/barbican required: true short_name: barbican src_dir: src/opendev.org/openstack/barbican opendev.org/openstack/cinder: canonical_hostname: opendev.org canonical_name: opendev.org/openstack/cinder checkout: master checkout_description: job override ref commit: 7f6a196c65cbf3cc4952a9e80c1a1965c6699aad name: openstack/cinder required: true short_name: cinder src_dir: src/opendev.org/openstack/cinder opendev.org/openstack/devstack: canonical_hostname: opendev.org canonical_name: opendev.org/openstack/devstack checkout: master checkout_description: job override ref commit: bdfe1d9ac44cfa26e74db40bfbac03bafc45c98c name: openstack/devstack required: true short_name: devstack src_dir: src/opendev.org/openstack/devstack opendev.org/openstack/glance: canonical_hostname: opendev.org canonical_name: opendev.org/openstack/glance checkout: master checkout_description: job override ref commit: eac2fa47f26da3515c7a1e8c91226750517c52d4 name: openstack/glance required: true short_name: glance src_dir: src/opendev.org/openstack/glance opendev.org/openstack/keystone: canonical_hostname: opendev.org canonical_name: opendev.org/openstack/keystone checkout: master checkout_description: job override ref commit: 2230026f77a8ed50493d2d58be9120910ceb2089 name: openstack/keystone required: true short_name: keystone src_dir: src/opendev.org/openstack/keystone opendev.org/openstack/magnum: canonical_hostname: opendev.org canonical_name: opendev.org/openstack/magnum checkout: master checkout_description: job override ref commit: 7fd60564d726e129098b3ba4270ce3b7c22893d1 name: openstack/magnum required: true short_name: magnum src_dir: src/opendev.org/openstack/magnum opendev.org/openstack/manila: canonical_hostname: opendev.org canonical_name: opendev.org/openstack/manila checkout: master checkout_description: job override ref commit: fb6f4c98ff30204e26d1a926eaa3fab4da07a088 name: openstack/manila required: true short_name: manila src_dir: src/opendev.org/openstack/manila opendev.org/openstack/neutron: canonical_hostname: opendev.org canonical_name: opendev.org/openstack/neutron checkout: master checkout_description: job override ref commit: 30374afe1ee08f3f6d3d7507310a6ffd3551e215 name: openstack/neutron required: true short_name: neutron src_dir: src/opendev.org/openstack/neutron opendev.org/openstack/nova: canonical_hostname: opendev.org canonical_name: opendev.org/openstack/nova checkout: master checkout_description: job override ref commit: 2123019e83f897a201f899fc0a458c6736fa5cef name: openstack/nova required: true short_name: nova src_dir: src/opendev.org/openstack/nova opendev.org/openstack/octavia: canonical_hostname: opendev.org canonical_name: opendev.org/openstack/octavia checkout: master checkout_description: job override ref commit: d16fa5e723701c95cf97a3e9ea57b3856e09aaa7 name: openstack/octavia required: true short_name: octavia src_dir: src/opendev.org/openstack/octavia opendev.org/openstack/os-test-images: canonical_hostname: opendev.org canonical_name: opendev.org/openstack/os-test-images checkout: master checkout_description: job override ref commit: 5d0367e03788764f41da8effffa14e3eac513201 name: openstack/os-test-images required: true short_name: os-test-images src_dir: src/opendev.org/openstack/os-test-images opendev.org/openstack/ovn-octavia-provider: canonical_hostname: opendev.org canonical_name: opendev.org/openstack/ovn-octavia-provider checkout: master checkout_description: job override ref commit: d0a7783cd02566847600d5db1c330e6865594331 name: openstack/ovn-octavia-provider required: true short_name: ovn-octavia-provider src_dir: src/opendev.org/openstack/ovn-octavia-provider opendev.org/openstack/placement: canonical_hostname: opendev.org canonical_name: opendev.org/openstack/placement checkout: master checkout_description: job override ref commit: d2727844011a8f144c818556ed7e8d43f756576f name: openstack/placement required: true short_name: placement src_dir: src/opendev.org/openstack/placement opendev.org/openstack/python-magnumclient: canonical_hostname: opendev.org canonical_name: opendev.org/openstack/python-magnumclient checkout: master checkout_description: job override ref commit: b80aea157f95e9fa6ed14a2d44f9d0cf6ff9332d name: openstack/python-magnumclient required: true short_name: python-magnumclient src_dir: src/opendev.org/openstack/python-magnumclient opendev.org/openstack/requirements: canonical_hostname: opendev.org canonical_name: opendev.org/openstack/requirements checkout: master checkout_description: job override ref commit: 26a2f84e07ec86fed7cafcd53e1ff5e180e8736b name: openstack/requirements required: true short_name: requirements src_dir: src/opendev.org/openstack/requirements opendev.org/openstack/swift: canonical_hostname: opendev.org canonical_name: opendev.org/openstack/swift checkout: master checkout_description: job override ref commit: 0d356332512bb576b7813860f0df69304161a5b7 name: openstack/swift required: true short_name: swift src_dir: src/opendev.org/openstack/swift ref: refs/pull/1013/head resources: {} tenant: oss timeout: 7200 topic: null voting: true zuul_copy_output: /etc/ceph: logs /etc/glusterfs/glusterd.vol: logs /etc/libvirt: logs /etc/lvm: logs /etc/resolv.conf: logs /etc/sudoers: logs /etc/sudoers.d: logs /var/log/ceph: logs /var/log/glusterfs: logs /var/log/libvirt: logs /var/log/mysql: logs /var/log/openvswitch: logs /var/log/postgresql: logs /var/log/rabbitmq: logs /var/log/unbound.log: logs '{{ devstack_conf_dir }}/.localrc.auto': logs '{{ devstack_conf_dir }}/.stackenv': logs '{{ devstack_conf_dir }}/local.conf': logs '{{ devstack_conf_dir }}/localrc': logs '{{ devstack_full_log}}': logs '{{ devstack_log_dir }}/atop': logs '{{ devstack_log_dir }}/devstacklog.txt': logs '{{ devstack_log_dir }}/devstacklog.txt.summary': logs '{{ devstack_log_dir }}/dstat-csv.log': logs '{{ devstack_log_dir }}/qemu.coredump': logs '{{ devstack_log_dir }}/tcpdump.pcap': logs '{{ devstack_log_dir }}/worlddump-latest.txt': logs '{{ stage_dir }}/apache': logs '{{ stage_dir }}/apache_config': logs '{{ stage_dir }}/audit.log': logs '{{ stage_dir }}/core': logs '{{ stage_dir }}/deprecations.log': logs '{{ stage_dir }}/df.txt': logs '{{ stage_dir }}/dpkg-l.txt': logs '{{ stage_dir }}/etc': logs '{{ stage_dir }}/iptables.txt': logs '{{ stage_dir }}/listen53.txt': logs '{{ stage_dir }}/mount.txt': logs '{{ stage_dir }}/performance.json': logs '{{ stage_dir }}/pip2-freeze.txt': logs '{{ stage_dir }}/pip3-freeze.txt': logs '{{ stage_dir }}/rpm-qa.txt': logs '{{ stage_dir }}/services.txt': logs '{{ stage_dir }}/verify_tempest_conf.log': logs