all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    ubuntu-noble:
      ansible_connection: ssh
      ansible_host: 199.204.45.25
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      nodepool:
        az: yul2
        cloud: public
        external_id: 44fa924a-62e9-44eb-b3a6-c1d021cd8c29
        host_id: 3cc3064f3f299d3d37bf8eb0728708985d63c3ec9e6e6eb729dd744b
        interface_ip: 199.204.45.25
        label: ubuntu-noble
        node_properties: {}
        private_ipv4: 199.204.45.25
        private_ipv6: null
        provider: yul1
        public_ipv4: 199.204.45.25
        public_ipv6: 2604:e100:1:0:f816:3eff:fe7d:591e
        region: ca-ymq-1
        slot: null
      zuul_node:
        az: yul2
        cloud: public
        external_id: 44fa924a-62e9-44eb-b3a6-c1d021cd8c29
        host_id: 3cc3064f3f299d3d37bf8eb0728708985d63c3ec9e6e6eb729dd744b
        interface_ip: 199.204.45.25
        label: ubuntu-noble
        node_properties: {}
        private_ipv4: 199.204.45.25
        private_ipv6: null
        provider: yul1
        public_ipv4: 199.204.45.25
        public_ipv6: 2604:e100:1:0:f816:3eff:fe7d:591e
        region: ca-ymq-1
        slot: null
        uuid: null
  vars:
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: vexxhost/zuul-config/zuul.d/jobs.yaml@main#1>'
      - '<Job ansible-test explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: vexxhost/zuul-jobs/zuul.d/ansible-jobs.yaml@main#25>'
      - '<Job ansible-test explicit: None implied: None source: vexxhost/ansible-collection-kubernetes/.zuul.yaml@main#197>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: d9401075ba4e4050a8042e0588a873e3
      build_refs:
      - branch: main
        change: '305'
        change_message: "fix(kubernetes_upgrade_check): guard worker-only runs and
          downgrades\n\nRunning the `kubernetes` role with `--limit` set to worker
          nodes skipped every upgrade safety check. The `kubernetes_upgrade_check`
          role read the `kubeadm-config` ConfigMap from whichever host ran first.
          On a worker that host has no admin kubeconfig, so the lookup failed, `ignore_errors`
          swallowed it, and the version checks never ran. A worker could then be upgraded
          to a kubelet newer than the control plane, which Kubernetes' version skew
          policy doesn't allow.\n\nThis PR:\n\n- reads `kubeadm-config` from the first
          control plane node using `/etc/kubernetes/admin.conf`;\n- fails when a worker
          targets a version newer than the cluster unless every control plane node
          is in the play;\n- fails when the target is older than the cluster version.
          The existing check only caught minor downgrades, so a patch downgrade like
          1.30.14 \u2192 1.30.10 went through.\n\nValidation: ran the role against
          a stubbed `k8s_info` reporting a 1.30.14 cluster, with two control plane
          nodes and one worker:\n\n| Run | Result |\n|---|---|\n| Full play, target
          1.30.14 | passes, no upgrade |\n| Full play, target 1.31.14 | passes, upgrade
          required |\n| `--limit w1`, target 1.30.14 | passes |\n| `--limit w1`, target
          1.31.14 | fails: control plane not upgraded yet |\n| Target 1.30.10 | fails:
          downgrade |\n| Target 1.32.0 | fails: more than one minor version |\n\nUnit
          tests and pre-commit pass. Split out of the in-place upgrade work.\n"
        change_url: https://github.com/vexxhost/ansible-collection-kubernetes/pull/305
        commit_id: 3b856b665f8ce9d3966e31c95dbc25d605c881bb
        patchset: 3b856b665f8ce9d3966e31c95dbc25d605c881bb
        project:
          canonical_hostname: github.com
          canonical_name: github.com/vexxhost/ansible-collection-kubernetes
          name: vexxhost/ansible-collection-kubernetes
          short_name: ansible-collection-kubernetes
          src_dir: src/github.com/vexxhost/ansible-collection-kubernetes
        src_dir: src/github.com/vexxhost/ansible-collection-kubernetes
        topic: null
      buildset: 5967b014c4e54d51a4104a80f857843a
      buildset_refs:
      - branch: main
        change: '305'
        change_message: "fix(kubernetes_upgrade_check): guard worker-only runs and
          downgrades\n\nRunning the `kubernetes` role with `--limit` set to worker
          nodes skipped every upgrade safety check. The `kubernetes_upgrade_check`
          role read the `kubeadm-config` ConfigMap from whichever host ran first.
          On a worker that host has no admin kubeconfig, so the lookup failed, `ignore_errors`
          swallowed it, and the version checks never ran. A worker could then be upgraded
          to a kubelet newer than the control plane, which Kubernetes' version skew
          policy doesn't allow.\n\nThis PR:\n\n- reads `kubeadm-config` from the first
          control plane node using `/etc/kubernetes/admin.conf`;\n- fails when a worker
          targets a version newer than the cluster unless every control plane node
          is in the play;\n- fails when the target is older than the cluster version.
          The existing check only caught minor downgrades, so a patch downgrade like
          1.30.14 \u2192 1.30.10 went through.\n\nValidation: ran the role against
          a stubbed `k8s_info` reporting a 1.30.14 cluster, with two control plane
          nodes and one worker:\n\n| Run | Result |\n|---|---|\n| Full play, target
          1.30.14 | passes, no upgrade |\n| Full play, target 1.31.14 | passes, upgrade
          required |\n| `--limit w1`, target 1.30.14 | passes |\n| `--limit w1`, target
          1.31.14 | fails: control plane not upgraded yet |\n| Target 1.30.10 | fails:
          downgrade |\n| Target 1.32.0 | fails: more than one minor version |\n\nUnit
          tests and pre-commit pass. Split out of the in-place upgrade work.\n"
        change_url: https://github.com/vexxhost/ansible-collection-kubernetes/pull/305
        commit_id: 3b856b665f8ce9d3966e31c95dbc25d605c881bb
        patchset: 3b856b665f8ce9d3966e31c95dbc25d605c881bb
        project:
          canonical_hostname: github.com
          canonical_name: github.com/vexxhost/ansible-collection-kubernetes
          name: vexxhost/ansible-collection-kubernetes
          short_name: ansible-collection-kubernetes
          src_dir: src/github.com/vexxhost/ansible-collection-kubernetes
        src_dir: src/github.com/vexxhost/ansible-collection-kubernetes
        topic: null
      change: '305'
      change_message: "fix(kubernetes_upgrade_check): guard worker-only runs and downgrades\n\nRunning
        the `kubernetes` role with `--limit` set to worker nodes skipped every upgrade
        safety check. The `kubernetes_upgrade_check` role read the `kubeadm-config`
        ConfigMap from whichever host ran first. On a worker that host has no admin
        kubeconfig, so the lookup failed, `ignore_errors` swallowed it, and the version
        checks never ran. A worker could then be upgraded to a kubelet newer than
        the control plane, which Kubernetes' version skew policy doesn't allow.\n\nThis
        PR:\n\n- reads `kubeadm-config` from the first control plane node using `/etc/kubernetes/admin.conf`;\n-
        fails when a worker targets a version newer than the cluster unless every
        control plane node is in the play;\n- fails when the target is older than
        the cluster version. The existing check only caught minor downgrades, so a
        patch downgrade like 1.30.14 \u2192 1.30.10 went through.\n\nValidation: ran
        the role against a stubbed `k8s_info` reporting a 1.30.14 cluster, with two
        control plane nodes and one worker:\n\n| Run | Result |\n|---|---|\n| Full
        play, target 1.30.14 | passes, no upgrade |\n| Full play, target 1.31.14 |
        passes, upgrade required |\n| `--limit w1`, target 1.30.14 | passes |\n| `--limit
        w1`, target 1.31.14 | fails: control plane not upgraded yet |\n| Target 1.30.10
        | fails: downgrade |\n| Target 1.32.0 | fails: more than one minor version
        |\n\nUnit tests and pre-commit pass. Split out of the in-place upgrade work.\n"
      change_url: https://github.com/vexxhost/ansible-collection-kubernetes/pull/305
      child_jobs: []
      commit_id: 3b856b665f8ce9d3966e31c95dbc25d605c881bb
      event_id: fb16a790-d218-11f1-9e7a-818ff5bde3f6
      executor:
        hostname: 2d72f0692154
        inventory_file: /var/lib/zuul/builds/d9401075ba4e4050a8042e0588a873e3/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/d9401075ba4e4050a8042e0588a873e3/work/logs
        result_data_file: /var/lib/zuul/builds/d9401075ba4e4050a8042e0588a873e3/work/results.json
        src_root: /var/lib/zuul/builds/d9401075ba4e4050a8042e0588a873e3/work/src
        work_root: /var/lib/zuul/builds/d9401075ba4e4050a8042e0588a873e3/work
      include_vars: []
      items:
      - branch: main
        change: '305'
        change_message: "fix(kubernetes_upgrade_check): guard worker-only runs and
          downgrades\n\nRunning the `kubernetes` role with `--limit` set to worker
          nodes skipped every upgrade safety check. The `kubernetes_upgrade_check`
          role read the `kubeadm-config` ConfigMap from whichever host ran first.
          On a worker that host has no admin kubeconfig, so the lookup failed, `ignore_errors`
          swallowed it, and the version checks never ran. A worker could then be upgraded
          to a kubelet newer than the control plane, which Kubernetes' version skew
          policy doesn't allow.\n\nThis PR:\n\n- reads `kubeadm-config` from the first
          control plane node using `/etc/kubernetes/admin.conf`;\n- fails when a worker
          targets a version newer than the cluster unless every control plane node
          is in the play;\n- fails when the target is older than the cluster version.
          The existing check only caught minor downgrades, so a patch downgrade like
          1.30.14 \u2192 1.30.10 went through.\n\nValidation: ran the role against
          a stubbed `k8s_info` reporting a 1.30.14 cluster, with two control plane
          nodes and one worker:\n\n| Run | Result |\n|---|---|\n| Full play, target
          1.30.14 | passes, no upgrade |\n| Full play, target 1.31.14 | passes, upgrade
          required |\n| `--limit w1`, target 1.30.14 | passes |\n| `--limit w1`, target
          1.31.14 | fails: control plane not upgraded yet |\n| Target 1.30.10 | fails:
          downgrade |\n| Target 1.32.0 | fails: more than one minor version |\n\nUnit
          tests and pre-commit pass. Split out of the in-place upgrade work.\n"
        change_url: https://github.com/vexxhost/ansible-collection-kubernetes/pull/305
        commit_id: 3b856b665f8ce9d3966e31c95dbc25d605c881bb
        patchset: 3b856b665f8ce9d3966e31c95dbc25d605c881bb
        project:
          canonical_hostname: github.com
          canonical_name: github.com/vexxhost/ansible-collection-kubernetes
          name: vexxhost/ansible-collection-kubernetes
          short_name: ansible-collection-kubernetes
          src_dir: src/github.com/vexxhost/ansible-collection-kubernetes
        topic: null
      job: ansible-test
      jobtags: []
      max_attempts: 3
      message: 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
      patchset: 3b856b665f8ce9d3966e31c95dbc25d605c881bb
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/vexxhost/zuul-config:
            canonical_name: github.com/vexxhost/zuul-config
            checkout: main
            commit: 298983cd1253e6833abdb49d87d912527e0e6597
          trusted/project_1/opendev.org/zuul/zuul-jobs:
            canonical_name: opendev.org/zuul/zuul-jobs
            checkout: master
            commit: be52461cd48abccbf95b13a58b2551ac673d8ad7
          trusted/project_2/github.com/vexxhost/zuul-jobs:
            canonical_name: github.com/vexxhost/zuul-jobs
            checkout: main
            commit: 4fd48825891421af0774bdd500fee36e111d80a6
          untrusted/project_0/github.com/vexxhost/zuul-jobs:
            canonical_name: github.com/vexxhost/zuul-jobs
            checkout: main
            commit: 4fd48825891421af0774bdd500fee36e111d80a6
          untrusted/project_1/github.com/vexxhost/zuul-config:
            canonical_name: github.com/vexxhost/zuul-config
            checkout: main
            commit: 298983cd1253e6833abdb49d87d912527e0e6597
          untrusted/project_2/opendev.org/zuul/zuul-jobs:
            canonical_name: opendev.org/zuul/zuul-jobs
            checkout: master
            commit: be52461cd48abccbf95b13a58b2551ac673d8ad7
        playbooks:
        - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/ansible-test/run.yaml
          roles:
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_1/zuul-jobs
            link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs
            role_path: ansible/playbook_0/role_1/zuul-jobs/roles
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_0/role_2/zuul-jobs
            link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs
            role_path: ansible/playbook_0/role_2/zuul-jobs/roles
        post_playbooks:
        - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post.yaml
          roles:
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/post_playbook_0/role_1/zuul-jobs
            link_target: trusted/project_1/opendev.org/zuul/zuul-jobs
            role_path: ansible/post_playbook_0/role_1/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/post_playbook_0/role_2/zuul-jobs
            link_target: trusted/project_2/github.com/vexxhost/zuul-jobs
            role_path: ansible/post_playbook_0/role_2/zuul-jobs/roles
        - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post-logs.yaml
          roles:
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/post_playbook_1/role_1/zuul-jobs
            link_target: trusted/project_1/opendev.org/zuul/zuul-jobs
            role_path: ansible/post_playbook_1/role_1/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/post_playbook_1/role_2/zuul-jobs
            link_target: trusted/project_2/github.com/vexxhost/zuul-jobs
            role_path: ansible/post_playbook_1/role_2/zuul-jobs/roles
        pre_playbooks:
        - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/pre.yaml
          roles:
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/pre_playbook_0/role_1/zuul-jobs
            link_target: trusted/project_1/opendev.org/zuul/zuul-jobs
            role_path: ansible/pre_playbook_0/role_1/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/pre_playbook_0/role_2/zuul-jobs
            link_target: trusted/project_2/github.com/vexxhost/zuul-jobs
            role_path: ansible/pre_playbook_0/role_2/zuul-jobs/roles
        - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/ansible-test/pre.yaml
          roles:
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/pre_playbook_1/role_1/zuul-jobs
            link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs
            role_path: ansible/pre_playbook_1/role_1/zuul-jobs/roles
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/pre_playbook_1/role_2/zuul-jobs
            link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs
            role_path: ansible/pre_playbook_1/role_2/zuul-jobs/roles
      post_review: false
      post_timeout: null
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/vexxhost/ansible-collection-kubernetes
        name: vexxhost/ansible-collection-kubernetes
        short_name: ansible-collection-kubernetes
        src_dir: src/github.com/vexxhost/ansible-collection-kubernetes
      projects:
        github.com/vexxhost/ansible-collection-kubernetes:
          canonical_hostname: github.com
          canonical_name: github.com/vexxhost/ansible-collection-kubernetes
          checkout: main
          checkout_description: zuul branch
          commit: 8e10f3111394d141d44ebed032e8e98a6631a458
          name: vexxhost/ansible-collection-kubernetes
          required: false
          short_name: ansible-collection-kubernetes
          src_dir: src/github.com/vexxhost/ansible-collection-kubernetes
      ref: refs/pull/305/head
      resources: {}
      tenant: oss
      timeout: 1800
      topic: null
      voting: true