all: children: cephs: hosts: instance: null computes: hosts: instance: null controllers: hosts: instance: null zuul_unreachable: hosts: {} hosts: instance: ansible_connection: ssh ansible_host: 199.204.45.141 ansible_port: 22 ansible_python_interpreter: auto ansible_user: zuul atmosphere_image_prefix: harbor.atmosphere.dev/ ceph_conf_overrides: - option: mon allow pool size one section: global value: true - option: osd crush chooseleaf type section: global value: 0 - option: auth allow insecure global id reclaim section: mon value: false ceph_csi_rbd_helm_values: provisioner: replicaCount: 1 ceph_fsid: 4837cbf8-4f90-4300-b3f6-726c9b9f89b4 ceph_osd_devices: - /dev/ceph-{{ inventory_hostname_short }}-osd0/data - /dev/ceph-{{ inventory_hostname_short }}-osd1/data - /dev/ceph-{{ inventory_hostname_short }}-osd2/data cilium_helm_values: operator: replicas: 1 csi_driver: rbd kube_vip_address: 172.17.0.100 kube_vip_interface: '{{ ansible_facts[''default_ipv4''].interface }}' kubernetes_hostname: '{{ ansible_facts[''default_ipv4''].address }}' molecule_scenario: csi nodepool: az: nova cloud: public external_id: a5f9bca3-9f78-4120-9125-db68e677a09a host_id: 86d6bbee9a590b753878988beec61ed4d37fe4ff9ff09e01cc4e099b interface_ip: 199.204.45.141 label: ubuntu-jammy node_properties: {} private_ipv4: 199.204.45.141 private_ipv6: null provider: yul1 public_ipv4: 199.204.45.141 public_ipv6: 2604:e100:1:0:f816:3eff:fe1e:12a4 region: ca-ymq-1 slot: null zuul_node: az: nova cloud: public external_id: a5f9bca3-9f78-4120-9125-db68e677a09a host_id: 86d6bbee9a590b753878988beec61ed4d37fe4ff9ff09e01cc4e099b interface_ip: 199.204.45.141 label: ubuntu-jammy node_properties: {} private_ipv4: 199.204.45.141 private_ipv6: null provider: yul1 public_ipv4: 199.204.45.141 public_ipv6: 2604:e100:1:0:f816:3eff:fe1e:12a4 region: ca-ymq-1 slot: null uuid: null vars: atmosphere_image_prefix: harbor.atmosphere.dev/ ceph_conf_overrides: - option: mon allow pool size one section: global value: true - option: osd crush chooseleaf type section: global value: 0 - option: auth allow insecure global id reclaim section: mon value: false ceph_csi_rbd_helm_values: provisioner: replicaCount: 1 ceph_fsid: 4837cbf8-4f90-4300-b3f6-726c9b9f89b4 ceph_osd_devices: - /dev/ceph-{{ inventory_hostname_short }}-osd0/data - /dev/ceph-{{ inventory_hostname_short }}-osd1/data - /dev/ceph-{{ inventory_hostname_short }}-osd2/data cilium_helm_values: operator: replicas: 1 csi_driver: rbd kube_vip_address: 172.17.0.100 kube_vip_interface: '{{ ansible_facts[''default_ipv4''].interface }}' kubernetes_hostname: '{{ ansible_facts[''default_ipv4''].address }}' molecule_scenario: csi zuul: _inheritance_path: - '' - '' - '' - '' - '' - '' ansible_version: '9' attempts: 1 branch: main build: c5da724187404a29b1f15fa7ca7bbe7e build_refs: - branch: main change: '3811' change_message: 'feat(ironic): add novncproxy deployment for baremetal VNC console ## Summary Add support for the ironic-novncproxy service introduced in ironic 2025.1 for VNC console access to baremetal nodes. ## Changes ### Helm chart (5 new files, 2 modified) - `deployment-novncproxy.yaml`: Deployment with TCP health checks on port 6090 - `service-novncproxy.yaml`: Service for `baremetal_vnc_proxy` endpoint - `bin/_ironic-novncproxy.sh.tpl`: Startup script - `role-console-pods.yaml`: RBAC Role for managing console pods/secrets - `rolebinding-console-pods.yaml`: RoleBinding for ironic-conductor SA - `configmap-bin.yaml`: Added novncproxy script entry - `values.yaml`: novncproxy labels, image, network, endpoints, pod config ### Ansible role (3 modified + 1 image config) - `ironic_vnc_enabled` flag (disabled by default) - `[vnc]` config section in ironic.conf (kubernetes container provider) - Conditional VNC Proxy Ingress with WebSocket annotations (3600s timeouts) - `ironic_novncproxy` image tag in defaults ## How to enable Set `ironic_vnc_enabled: true` in your inventory. All manifests are disabled by default for backward compatibility. ## Dependencies - vexxhost/docker-ironic#713 (adds `novnc` package to the ironic image) - Upstream: https://review.opendev.org/c/openstack/openstack-helm/+/983954 Closes #3748 ' change_url: https://github.com/vexxhost/atmosphere/pull/3811 commit_id: 9dd425173b81b004b23df6f9f3e7e19a2e098caa patchset: 9dd425173b81b004b23df6f9f3e7e19a2e098caa project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere name: vexxhost/atmosphere short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere src_dir: src/github.com/vexxhost/atmosphere topic: null buildset: 4b595347b4ea47339c5f597a22f59e6b buildset_refs: - branch: main change: '3811' change_message: 'feat(ironic): add novncproxy deployment for baremetal VNC console ## Summary Add support for the ironic-novncproxy service introduced in ironic 2025.1 for VNC console access to baremetal nodes. ## Changes ### Helm chart (5 new files, 2 modified) - `deployment-novncproxy.yaml`: Deployment with TCP health checks on port 6090 - `service-novncproxy.yaml`: Service for `baremetal_vnc_proxy` endpoint - `bin/_ironic-novncproxy.sh.tpl`: Startup script - `role-console-pods.yaml`: RBAC Role for managing console pods/secrets - `rolebinding-console-pods.yaml`: RoleBinding for ironic-conductor SA - `configmap-bin.yaml`: Added novncproxy script entry - `values.yaml`: novncproxy labels, image, network, endpoints, pod config ### Ansible role (3 modified + 1 image config) - `ironic_vnc_enabled` flag (disabled by default) - `[vnc]` config section in ironic.conf (kubernetes container provider) - Conditional VNC Proxy Ingress with WebSocket annotations (3600s timeouts) - `ironic_novncproxy` image tag in defaults ## How to enable Set `ironic_vnc_enabled: true` in your inventory. All manifests are disabled by default for backward compatibility. ## Dependencies - vexxhost/docker-ironic#713 (adds `novnc` package to the ironic image) - Upstream: https://review.opendev.org/c/openstack/openstack-helm/+/983954 Closes #3748 ' change_url: https://github.com/vexxhost/atmosphere/pull/3811 commit_id: 9dd425173b81b004b23df6f9f3e7e19a2e098caa patchset: 9dd425173b81b004b23df6f9f3e7e19a2e098caa project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere name: vexxhost/atmosphere short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere src_dir: src/github.com/vexxhost/atmosphere topic: null change: '3811' change_message: 'feat(ironic): add novncproxy deployment for baremetal VNC console ## Summary Add support for the ironic-novncproxy service introduced in ironic 2025.1 for VNC console access to baremetal nodes. ## Changes ### Helm chart (5 new files, 2 modified) - `deployment-novncproxy.yaml`: Deployment with TCP health checks on port 6090 - `service-novncproxy.yaml`: Service for `baremetal_vnc_proxy` endpoint - `bin/_ironic-novncproxy.sh.tpl`: Startup script - `role-console-pods.yaml`: RBAC Role for managing console pods/secrets - `rolebinding-console-pods.yaml`: RoleBinding for ironic-conductor SA - `configmap-bin.yaml`: Added novncproxy script entry - `values.yaml`: novncproxy labels, image, network, endpoints, pod config ### Ansible role (3 modified + 1 image config) - `ironic_vnc_enabled` flag (disabled by default) - `[vnc]` config section in ironic.conf (kubernetes container provider) - Conditional VNC Proxy Ingress with WebSocket annotations (3600s timeouts) - `ironic_novncproxy` image tag in defaults ## How to enable Set `ironic_vnc_enabled: true` in your inventory. All manifests are disabled by default for backward compatibility. ## Dependencies - vexxhost/docker-ironic#713 (adds `novnc` package to the ironic image) - Upstream: https://review.opendev.org/c/openstack/openstack-helm/+/983954 Closes #3748 ' change_url: https://github.com/vexxhost/atmosphere/pull/3811 child_jobs: [] commit_id: 9dd425173b81b004b23df6f9f3e7e19a2e098caa event_id: 8c333fd0-3ad5-11f1-9a27-75a08b1690ba executor: hostname: 0a8996d2b663 inventory_file: /var/lib/zuul/builds/c5da724187404a29b1f15fa7ca7bbe7e/ansible/inventory.yaml log_root: /var/lib/zuul/builds/c5da724187404a29b1f15fa7ca7bbe7e/work/logs result_data_file: /var/lib/zuul/builds/c5da724187404a29b1f15fa7ca7bbe7e/work/results.json src_root: /var/lib/zuul/builds/c5da724187404a29b1f15fa7ca7bbe7e/work/src work_root: /var/lib/zuul/builds/c5da724187404a29b1f15fa7ca7bbe7e/work include_vars: [] items: - branch: main change: '3811' change_message: 'feat(ironic): add novncproxy deployment for baremetal VNC console ## Summary Add support for the ironic-novncproxy service introduced in ironic 2025.1 for VNC console access to baremetal nodes. ## Changes ### Helm chart (5 new files, 2 modified) - `deployment-novncproxy.yaml`: Deployment with TCP health checks on port 6090 - `service-novncproxy.yaml`: Service for `baremetal_vnc_proxy` endpoint - `bin/_ironic-novncproxy.sh.tpl`: Startup script - `role-console-pods.yaml`: RBAC Role for managing console pods/secrets - `rolebinding-console-pods.yaml`: RoleBinding for ironic-conductor SA - `configmap-bin.yaml`: Added novncproxy script entry - `values.yaml`: novncproxy labels, image, network, endpoints, pod config ### Ansible role (3 modified + 1 image config) - `ironic_vnc_enabled` flag (disabled by default) - `[vnc]` config section in ironic.conf (kubernetes container provider) - Conditional VNC Proxy Ingress with WebSocket annotations (3600s timeouts) - `ironic_novncproxy` image tag in defaults ## How to enable Set `ironic_vnc_enabled: true` in your inventory. All manifests are disabled by default for backward compatibility. ## Dependencies - vexxhost/docker-ironic#713 (adds `novnc` package to the ironic image) - Upstream: https://review.opendev.org/c/openstack/openstack-helm/+/983954 Closes #3748 ' change_url: https://github.com/vexxhost/atmosphere/pull/3811 commit_id: 9dd425173b81b004b23df6f9f3e7e19a2e098caa patchset: 9dd425173b81b004b23df6f9f3e7e19a2e098caa project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere name: vexxhost/atmosphere short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere topic: null job: atmosphere-molecule-csi-rbd jobtags: [] max_attempts: 3 message: ZmVhdChpcm9uaWMpOiBhZGQgbm92bmNwcm94eSBkZXBsb3ltZW50IGZvciBiYXJlbWV0YWwgVk5DIGNvbnNvbGUKCiMjIFN1bW1hcnkKCkFkZCBzdXBwb3J0IGZvciB0aGUgaXJvbmljLW5vdm5jcHJveHkgc2VydmljZSBpbnRyb2R1Y2VkIGluIGlyb25pYyAyMDI1LjEgZm9yIFZOQyBjb25zb2xlIGFjY2VzcyB0byBiYXJlbWV0YWwgbm9kZXMuCgojIyBDaGFuZ2VzCgojIyMgSGVsbSBjaGFydCAoNSBuZXcgZmlsZXMsIDIgbW9kaWZpZWQpCi0gYGRlcGxveW1lbnQtbm92bmNwcm94eS55YW1sYDogRGVwbG95bWVudCB3aXRoIFRDUCBoZWFsdGggY2hlY2tzIG9uIHBvcnQgNjA5MAotIGBzZXJ2aWNlLW5vdm5jcHJveHkueWFtbGA6IFNlcnZpY2UgZm9yIGBiYXJlbWV0YWxfdm5jX3Byb3h5YCBlbmRwb2ludAotIGBiaW4vX2lyb25pYy1ub3ZuY3Byb3h5LnNoLnRwbGA6IFN0YXJ0dXAgc2NyaXB0Ci0gYHJvbGUtY29uc29sZS1wb2RzLnlhbWxgOiBSQkFDIFJvbGUgZm9yIG1hbmFnaW5nIGNvbnNvbGUgcG9kcy9zZWNyZXRzCi0gYHJvbGViaW5kaW5nLWNvbnNvbGUtcG9kcy55YW1sYDogUm9sZUJpbmRpbmcgZm9yIGlyb25pYy1jb25kdWN0b3IgU0EKLSBgY29uZmlnbWFwLWJpbi55YW1sYDogQWRkZWQgbm92bmNwcm94eSBzY3JpcHQgZW50cnkKLSBgdmFsdWVzLnlhbWxgOiBub3ZuY3Byb3h5IGxhYmVscywgaW1hZ2UsIG5ldHdvcmssIGVuZHBvaW50cywgcG9kIGNvbmZpZwoKIyMjIEFuc2libGUgcm9sZSAoMyBtb2RpZmllZCArIDEgaW1hZ2UgY29uZmlnKQotIGBpcm9uaWNfdm5jX2VuYWJsZWRgIGZsYWcgKGRpc2FibGVkIGJ5IGRlZmF1bHQpCi0gYFt2bmNdYCBjb25maWcgc2VjdGlvbiBpbiBpcm9uaWMuY29uZiAoa3ViZXJuZXRlcyBjb250YWluZXIgcHJvdmlkZXIpCi0gQ29uZGl0aW9uYWwgVk5DIFByb3h5IEluZ3Jlc3Mgd2l0aCBXZWJTb2NrZXQgYW5ub3RhdGlvbnMgKDM2MDBzIHRpbWVvdXRzKQotIGBpcm9uaWNfbm92bmNwcm94eWAgaW1hZ2UgdGFnIGluIGRlZmF1bHRzCgojIyBIb3cgdG8gZW5hYmxlCgpTZXQgYGlyb25pY192bmNfZW5hYmxlZDogdHJ1ZWAgaW4geW91ciBpbnZlbnRvcnkuIEFsbCBtYW5pZmVzdHMgYXJlIGRpc2FibGVkIGJ5IGRlZmF1bHQgZm9yIGJhY2t3YXJkIGNvbXBhdGliaWxpdHkuCgojIyBEZXBlbmRlbmNpZXMKCi0gdmV4eGhvc3QvZG9ja2VyLWlyb25pYyM3MTMgKGFkZHMgYG5vdm5jYCBwYWNrYWdlIHRvIHRoZSBpcm9uaWMgaW1hZ2UpCi0gVXBzdHJlYW06IGh0dHBzOi8vcmV2aWV3Lm9wZW5kZXYub3JnL2Mvb3BlbnN0YWNrL29wZW5zdGFjay1oZWxtLysvOTgzOTU0CgpDbG9zZXMgIzM3NDgK patchset: 9dd425173b81b004b23df6f9f3e7e19a2e098caa pipeline: check playbook_context: playbook_projects: trusted/project_0/github.com/vexxhost/zuul-config: canonical_name: github.com/vexxhost/zuul-config checkout: main commit: 298983cd1253e6833abdb49d87d912527e0e6597 trusted/project_1/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: fc4af6d44718d2e648cf6396f3e96bb46a55117a trusted/project_2/github.com/vexxhost/zuul-jobs: canonical_name: github.com/vexxhost/zuul-jobs checkout: main commit: a6e68243e02ef030ce5e75f8b67630880c475f33 untrusted/project_0/github.com/vexxhost/zuul-jobs: canonical_name: github.com/vexxhost/zuul-jobs checkout: main commit: a6e68243e02ef030ce5e75f8b67630880c475f33 untrusted/project_1/github.com/vexxhost/zuul-config: canonical_name: github.com/vexxhost/zuul-config checkout: main commit: 298983cd1253e6833abdb49d87d912527e0e6597 untrusted/project_2/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: fc4af6d44718d2e648cf6396f3e96bb46a55117a untrusted/project_3/github.com/vexxhost/atmosphere: canonical_name: github.com/vexxhost/atmosphere checkout: main commit: e95482d1a3afbaeaa33ac1e3867c77576c83c123 untrusted/project_4/opendev.org/openstack/openstack-helm: canonical_name: opendev.org/openstack/openstack-helm checkout: master commit: 0494b8d8afbbc333a5651fce0c6e44e6aa8fbee1 playbooks: - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/molecule/run.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/playbook_0/role_1/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/playbook_0/role_1/zuul-jobs/roles - checkout: main checkout_description: playbook branch link_name: ansible/playbook_0/role_2/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/playbook_0/role_2/zuul-jobs/roles post_playbooks: - path: untrusted/project_3/github.com/vexxhost/atmosphere/test-playbooks/molecule/post.yml roles: - checkout: main checkout_description: playbook branch link_name: ansible/post_playbook_0/role_0/atmosphere link_target: untrusted/project_3/github.com/vexxhost/atmosphere role_path: ansible/post_playbook_0/role_0/atmosphere/roles - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_0/role_1/openstack-helm link_target: untrusted/project_4/opendev.org/openstack/openstack-helm role_path: ansible/post_playbook_0/role_1/openstack-helm/roles - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_0/role_3/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_0/role_3/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_0/role_4/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_0/role_4/zuul-jobs/roles - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_1/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_1/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_1/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_1/role_2/zuul-jobs/roles - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post-logs.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_2/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_2/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_2/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_2/role_2/zuul-jobs/roles pre_playbooks: - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/pre.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_0/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_0/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/pre_playbook_0/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_0/role_2/zuul-jobs/roles - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/molecule/pre.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_1/role_1/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_1/role_1/zuul-jobs/roles - checkout: main checkout_description: playbook branch link_name: ansible/pre_playbook_1/role_2/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_1/role_2/zuul-jobs/roles - path: untrusted/project_3/github.com/vexxhost/atmosphere/test-playbooks/molecule/pre.yml roles: - checkout: main checkout_description: playbook branch link_name: ansible/pre_playbook_2/role_0/atmosphere link_target: untrusted/project_3/github.com/vexxhost/atmosphere role_path: ansible/pre_playbook_2/role_0/atmosphere/roles - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_2/role_1/openstack-helm link_target: untrusted/project_4/opendev.org/openstack/openstack-helm role_path: ansible/pre_playbook_2/role_1/openstack-helm/roles - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_2/role_3/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_2/role_3/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/pre_playbook_2/role_4/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_2/role_4/zuul-jobs/roles post_review: false post_timeout: null pre_timeout: null project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere name: vexxhost/atmosphere short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere projects: github.com/vexxhost/atmosphere: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere checkout: main checkout_description: zuul branch commit: e95482d1a3afbaeaa33ac1e3867c77576c83c123 name: vexxhost/atmosphere required: false short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere ref: refs/pull/3811/head resources: {} tenant: oss timeout: 1800 topic: null voting: true