all: children: cephs: hosts: instance: null computes: hosts: instance: null controllers: hosts: instance: null zuul_unreachable: hosts: {} hosts: instance: ansible_connection: ssh ansible_host: 199.204.45.113 ansible_port: 22 ansible_python_interpreter: auto ansible_user: zuul atmosphere_image_prefix: harbor.atmosphere.dev/ atmosphere_network_backend: ovn barbican_helm_values: pod: replicas: api: 1 ceph_conf_overrides: - option: mon allow pool size one section: global value: true - option: osd crush chooseleaf type section: global value: 0 - option: auth allow insecure global id reclaim section: mon value: false ceph_csi_rbd_helm_values: provisioner: replicaCount: 1 ceph_fsid: 4837cbf8-4f90-4300-b3f6-726c9b9f89b4 ceph_osd_devices: - /dev/ceph-{{ inventory_hostname_short }}-osd0/data - /dev/ceph-{{ inventory_hostname_short }}-osd1/data - /dev/ceph-{{ inventory_hostname_short }}-osd2/data ceph_public_network: '{{ ansible_facts[''default_ipv4''][''network''] + ''/'' + (ansible_facts[''default_ipv4''][''prefix''] | string) }}' ceph_version: 18.2.7 cilium_helm_values: operator: replicas: 1 cinder_helm_values: conf: ceph: pools: backup: replication: 1 cinder.volumes: replication: 1 cinder: DEFAULT: osapi_volume_workers: 2 pod: replicas: api: 1 scheduler: 1 cluster_issuer_type: self-signed coredns_helm_values: replicaCount: 1 csi_driver: local-path-provisioner glance_helm_values: conf: glance: DEFAULT: workers: 2 glance_store: rbd_store_replication: 1 pod: replicas: api: 1 glance_images: - container_format: bare disk_format: raw is_public: true min_disk: 1 name: cirros url: http://download.cirros-cloud.net/0.6.2/cirros-0.6.2-x86_64-disk.img heat_helm_values: conf: heat: DEFAULT: num_engine_workers: 2 heat_api: workers: 2 heat_api_cfn: workers: 2 heat_api_cloudwatch: workers: 2 pod: replicas: api: 1 cfn: 1 cloudwatch: 1 engine: 1 horizon_helm_values: pod: replicas: server: 1 ingress_nginx_helm_values: controller: config: worker-processes: 2 keystone_helm_values: pod: replicas: api: 1 kube_vip_address: 172.17.0.100 kube_vip_interface: '{{ ansible_facts[''default_ipv4''].interface }}' kubernetes_hostname: '{{ ansible_facts[''default_ipv4''].address }}' kubernetes_keepalived_interface: br-mgmt magnum_helm_values: conf: magnum: api: workers: 2 conductor: workers: 2 pod: replicas: api: 1 conductor: 1 magnum_image_disk_format: qcow2 magnum_images: '[ {{ _magnum_images[-1] }} ]' manila_helm_values: conf: manila: DEFAULT: osapi_share_workers: 2 pod: replicas: api: 1 scheduler: 1 molecule_scenario: aio neutron_helm_values: conf: neutron: DEFAULT: api_workers: 2 metadata_workers: 2 rpc_workers: 2 pod: replicas: rpc_server: 1 server: 1 nodepool: az: nova cloud: public external_id: fe63467e-5e5e-417a-ac46-455189f1917c host_id: 46a3119b92b21b95fc3b5fbffd17c6ebf9fffaf9848b0a50b2d8d56a interface_ip: 199.204.45.113 label: ubuntu-jammy-16 node_properties: {} private_ipv4: 199.204.45.113 private_ipv6: null provider: yul1 public_ipv4: 199.204.45.113 public_ipv6: 2604:e100:1:0:f816:3eff:fe92:949c region: ca-ymq-1 slot: null nova_helm_values: conf: nova: DEFAULT: metadata_workers: 2 osapi_compute_workers: 2 conductor: workers: 2 scheduler: workers: 2 pod: replicas: api_metadata: 1 conductor: 1 novncproxy: 1 osapi: 1 scheduler: 1 spiceproxy: 1 octavia_helm_values: conf: octavia: controller_worker: workers: 2 octavia_api_uwsgi: uwsgi: processes: 2 pod: replicas: api: 1 housekeeping: 1 worker: 1 ovn_helm_values: conf: auto_bridge_add: br-ex: null pod: replicas: ovn_northd: 1 ovn_ovsdb_nb: 1 ovn_ovsdb_sb: 1 percona_xtradb_cluster_spec: allowUnsafeConfigurations: true haproxy: size: 1 pxc: size: 1 placement_helm_values: conf: placement_api_uwsgi: uwsgi: processes: 2 pod: replicas: api: 1 rook_ceph_cluster_radosgw_spec: dataPool: failureDomain: osd gateway: instances: 1 metadataPool: failureDomain: osd staffeln_helm_values: pod: replicas: api: 1 conductor: 1 valkey_helm_values: replica: replicaCount: 1 zuul_node: az: nova cloud: public external_id: fe63467e-5e5e-417a-ac46-455189f1917c host_id: 46a3119b92b21b95fc3b5fbffd17c6ebf9fffaf9848b0a50b2d8d56a interface_ip: 199.204.45.113 label: ubuntu-jammy-16 node_properties: {} private_ipv4: 199.204.45.113 private_ipv6: null provider: yul1 public_ipv4: 199.204.45.113 public_ipv6: 2604:e100:1:0:f816:3eff:fe92:949c region: ca-ymq-1 slot: null uuid: null vars: atmosphere_image_prefix: harbor.atmosphere.dev/ atmosphere_network_backend: ovn barbican_helm_values: pod: replicas: api: 1 ceph_conf_overrides: - option: mon allow pool size one section: global value: true - option: osd crush chooseleaf type section: global value: 0 - option: auth allow insecure global id reclaim section: mon value: false ceph_csi_rbd_helm_values: provisioner: replicaCount: 1 ceph_fsid: 4837cbf8-4f90-4300-b3f6-726c9b9f89b4 ceph_osd_devices: - /dev/ceph-{{ inventory_hostname_short }}-osd0/data - /dev/ceph-{{ inventory_hostname_short }}-osd1/data - /dev/ceph-{{ inventory_hostname_short }}-osd2/data ceph_public_network: '{{ ansible_facts[''default_ipv4''][''network''] + ''/'' + (ansible_facts[''default_ipv4''][''prefix''] | string) }}' ceph_version: 18.2.7 cilium_helm_values: operator: replicas: 1 cinder_helm_values: conf: ceph: pools: backup: replication: 1 cinder.volumes: replication: 1 cinder: DEFAULT: osapi_volume_workers: 2 pod: replicas: api: 1 scheduler: 1 cluster_issuer_type: self-signed coredns_helm_values: replicaCount: 1 csi_driver: local-path-provisioner glance_helm_values: conf: glance: DEFAULT: workers: 2 glance_store: rbd_store_replication: 1 pod: replicas: api: 1 glance_images: - container_format: bare disk_format: raw is_public: true min_disk: 1 name: cirros url: http://download.cirros-cloud.net/0.6.2/cirros-0.6.2-x86_64-disk.img heat_helm_values: conf: heat: DEFAULT: num_engine_workers: 2 heat_api: workers: 2 heat_api_cfn: workers: 2 heat_api_cloudwatch: workers: 2 pod: replicas: api: 1 cfn: 1 cloudwatch: 1 engine: 1 horizon_helm_values: pod: replicas: server: 1 ingress_nginx_helm_values: controller: config: worker-processes: 2 keystone_helm_values: pod: replicas: api: 1 kube_vip_address: 172.17.0.100 kube_vip_interface: '{{ ansible_facts[''default_ipv4''].interface }}' kubernetes_hostname: '{{ ansible_facts[''default_ipv4''].address }}' kubernetes_keepalived_interface: br-mgmt magnum_helm_values: conf: magnum: api: workers: 2 conductor: workers: 2 pod: replicas: api: 1 conductor: 1 magnum_image_disk_format: qcow2 magnum_images: '[ {{ _magnum_images[-1] }} ]' manila_helm_values: conf: manila: DEFAULT: osapi_share_workers: 2 pod: replicas: api: 1 scheduler: 1 molecule_scenario: aio neutron_helm_values: conf: neutron: DEFAULT: api_workers: 2 metadata_workers: 2 rpc_workers: 2 pod: replicas: rpc_server: 1 server: 1 nova_helm_values: conf: nova: DEFAULT: metadata_workers: 2 osapi_compute_workers: 2 conductor: workers: 2 scheduler: workers: 2 pod: replicas: api_metadata: 1 conductor: 1 novncproxy: 1 osapi: 1 scheduler: 1 spiceproxy: 1 octavia_helm_values: conf: octavia: controller_worker: workers: 2 octavia_api_uwsgi: uwsgi: processes: 2 pod: replicas: api: 1 housekeeping: 1 worker: 1 ovn_helm_values: conf: auto_bridge_add: br-ex: null pod: replicas: ovn_northd: 1 ovn_ovsdb_nb: 1 ovn_ovsdb_sb: 1 percona_xtradb_cluster_spec: allowUnsafeConfigurations: true haproxy: size: 1 pxc: size: 1 placement_helm_values: conf: placement_api_uwsgi: uwsgi: processes: 2 pod: replicas: api: 1 rook_ceph_cluster_radosgw_spec: dataPool: failureDomain: osd gateway: instances: 1 metadataPool: failureDomain: osd staffeln_helm_values: pod: replicas: api: 1 conductor: 1 valkey_helm_values: replica: replicaCount: 1 zuul: _inheritance_path: - '' - '' - '' - '' - '' - '' ansible_version: '9' attempts: 1 branch: main build: fe0323265d37410584896a6bc1b0f5c1 build_refs: - branch: main change: '3835' change_message: "ci: simulate pre-baking CI dependencies to measure timing improvement\n\nSimulates moving expensive CI setup work into the Nodepool diskimage by front-loading all dependency installs into a new pre-run playbook. Structured as two commits so CI timing can be compared before/after without actually modifying the diskimage.\n\n## Commit 1 \u2014 pre-install dependencies early in CI\n\nNew playbook `test-playbooks/molecule/pre-install-deps.yml` runs before all other CI work via a new pre-run entry in `.zuul.yaml`:\n\n```yaml\npre-run:\n \ - test-playbooks/molecule/pre-install-deps.yml\n - test-playbooks/molecule/pre.yml\n```\n\nInstalls 4 dependency categories up front:\n\n- **System packages** \u2014 `open-iscsi`, `multipath-tools`, `sg3-utils`, `openssh-server`, `dirmngr`, `jq`, `gpg`, `gpg-agent`, `socat`, `conntrack`, `ipset`, `ethtool`, `ebtables`, `python3-venv`, `python3-pip`; enables `iscsid` and `multipathd` via `ansible.builtin.systemd`\n- **Helm 3.14.4** \u2014 extracted to `/usr/local/bin/helm`\n- **Go 1.24.2** \u2014 extracted to `/usr/local`\n- **Python venv** \u2014 `/opt/atmosphere-venv` with `openstacksdk` and `python-openstackclient`\n\n## Commit 2 \u2014 remove redundant installs\n\n- `test-playbooks/molecule/pre.yml` \u2014 tasks emptied (`jq` now pre-installed)\n- `molecule/aio/prepare.yml` \u2014 removes `dirmngr` install task\n- `.github/actions/molecule/action.yaml` \u2014 two changes:\n \ - `openssh-server` install skipped if already present (`dpkg -s` check)\n \ - Helm removal is now conditional: only removes if installed version is not `v3.14.x`\n\n\n\n\n\n
\n\nOriginal prompt\n\n\n## Goal\n\nSimulate the effect of pre-baking CI dependencies into the Nodepool diskimage, so we can measure the time improvement before actually modifying the diskimage. This PR should have **two commits**:\n\n### Commit 1: \"Simulate PR1 \u2014 pre-install dependencies early in CI\"\n\nAdd a new pre-run playbook `test-playbooks/molecule/pre-install-deps.yml` that installs all 4 categories of dependencies **before** any other CI work happens. Wire it into `.zuul.yaml` as an additional `pre-run` step that runs before the existing `test-playbooks/molecule/pre.yml`.\n\nThe new playbook `test-playbooks/molecule/pre-install-deps.yml` should:\n\n1. **System packages** \u2014 install all of these in a single `apt-get install` call with `update_cache: true`:\n - `open-iscsi`, `multipath-tools`, `sg3-utils`\n - `openssh-server`, `dirmngr`, `jq`\n - `gpg`, `gpg-agent`, `socat`, `conntrack`, `ipset`, `ethtool`, `ebtables`\n - Then enable `iscsid` and `multipathd` services via `systemctl enable`\n\n2. **Helm binary** \u2014 download and install Helm 3.14.4 to `/usr/local/bin/helm`:\n ```\n curl -fsSL https://get.helm.sh/helm-v3.14.4-linux-amd64.tar.gz | tar -xz -C /usr/local/bin --strip-components=1 linux-amd64/helm\n ```\n\n3. **Go toolchain** \u2014 download and install Go 1.24.2 to `/usr/local`:\n ```\n curl -fsSL https://go.dev/dl/go1.24.2.linux-amd64.tar.gz | tar -xz -C /usr/local\n ```\n\n4. **Python venv with openstacksdk** \u2014 create a venv at `/opt/atmosphere-venv` and install `openstacksdk` and `python-openstackclient`:\n ```\n python3 -m venv /opt/atmosphere-venv\n \ /opt/atmosphere-venv/bin/pip install --no-cache-dir openstacksdk python-openstackclient\n \ ```\n (Make sure `python3-venv` and `python3-pip` are installed via apt first \u2014 add them to the system packages list above.)\n\nThe playbook should target `hosts: all` with `become: true`. Use `ansible.builtin.apt` for packages, `ansible.builtin.shell` or `ansible.builtin.command` for the binary downloads, and `ansible.builtin.pip` for the Python packages. Add the `SPDX-License-Identifier: Apache-2.0` copyright header matching the style of the existing `test-playbooks/molecule/pre.yml`.\n\nIn `.zuul.yaml`, add the new playbook as a pre-run **before** the existing `pre-run: test-playbooks/molecule/pre.yml` in the `atmosphere-molecule` job definition. The `.zuul.yaml` job currently has:\n```yaml\npre-run: test-playbooks/molecule/pre.yml\n```\nChange it to a list:\n```yaml\npre-run:\n - test-playbooks/molecule/pre-install-deps.yml\n \ - test-playbooks/molecule/pre.yml\n```\n\n### Commit 2: \"Simulate PR2 \u2014 remove redundant installs\"\n\nNow that the dependencies are pre-installed, remove the redundant install steps:\n\n1. **`test-playbooks/molecule/pre.yml`** \u2014 Remove the \"Install jq for log collection\" task entirely (jq is now pre-installed). The file should still exist as a valid playbook but with an empty tasks list:\n ```yaml\n # Copyright (c) 2025 VEXXHOST, Inc.\n # SPDX-License-Identifier: Apache-2.0\n\n - hosts: all\n become: true\n tasks: []\n ```\n\n2. **`molecule/aio/prepare.yml`** \u2014 Remove only the \"Install dirmngr for GPG keyserver operations\" task (lines 19-22). Keep everything else (hostname workaround, snapd purge, networking, ceph, neutron) exactly as-is.\n\n3. **`.github/actions/molecule/action.yaml`** \u2014 Make two changes:\n - Replace the `openssh-server` install step (lines 25-27) with a conditional that skips if already installed:\n ```yaml\n \ - shell: bash\n run: |\n if ! dpkg -s openssh-server &>/dev/null; then\n sudo apt-get update\n sudo apt-get install -y openssh-server\n fi\n ```\n - Replace the unconditional Helm removal (line 61) with a version check:\n ```yaml\n - shell: bash\n run: |\n if ! helm version --short 2>/dev/null | grep -q \"v3.14\"; then\n rm -rfv /usr/local/bin/helm || true\n fi\n \ ```\n\n## Important Notes\n\n- Do NOT change any Ansible roles, playbooks under `roles/`, `playbooks/`, or the `molecule/aio/converge.yml`\n- Do NOT change any Helm charts or values files\n- The purpose is purely to measure timing improvement in CI \u2014 this simulates what a diskimage pre-bake would achieve\n\n\nThe following is the prior conversation context from the user's chat exploration (may be truncated):\n\nUser: what's my Remaining reqs\n\nAssistant: \n\nI don't have access to check your remaining API requests, rate limits, or usage quotas. That information isn't available through any of the tools I have.\n\nIf you're asking about **GitHub API rate limits**, you can check them yourself:\n\n```bash\ncurl -H \"Authorization: Bearer YOUR_TOKEN\" https://api.github.com/rate_limit\n```\n\nOr if you're asking about **Copilot Chat usage limits**, you can check your plan details at **github.com/settings/copilot**.\n\nWhat specifically are you trying to check?\n\nUser: analysis time in https://zuul.oss.vexxhost.dev/stream/19c9e1d14aa648ae8e0322607a286ec4 like https://github.\ncom/vexxhost/atmosphere/pull/3818#issuecomment-4245094888 \n...\n\n
\n\n\n\n\n\n*This pull request was created from Copilot chat.*\n>" change_url: https://github.com/vexxhost/atmosphere/pull/3835 commit_id: c179c6c7c4a6b0ca2ccb661161b8b306d6b42322 patchset: c179c6c7c4a6b0ca2ccb661161b8b306d6b42322 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere name: vexxhost/atmosphere short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere src_dir: src/github.com/vexxhost/atmosphere topic: null buildset: af8e84a6f6934ec8ba34731fba14f02a buildset_refs: - branch: main change: '3835' change_message: "ci: simulate pre-baking CI dependencies to measure timing improvement\n\nSimulates moving expensive CI setup work into the Nodepool diskimage by front-loading all dependency installs into a new pre-run playbook. Structured as two commits so CI timing can be compared before/after without actually modifying the diskimage.\n\n## Commit 1 \u2014 pre-install dependencies early in CI\n\nNew playbook `test-playbooks/molecule/pre-install-deps.yml` runs before all other CI work via a new pre-run entry in `.zuul.yaml`:\n\n```yaml\npre-run:\n \ - test-playbooks/molecule/pre-install-deps.yml\n - test-playbooks/molecule/pre.yml\n```\n\nInstalls 4 dependency categories up front:\n\n- **System packages** \u2014 `open-iscsi`, `multipath-tools`, `sg3-utils`, `openssh-server`, `dirmngr`, `jq`, `gpg`, `gpg-agent`, `socat`, `conntrack`, `ipset`, `ethtool`, `ebtables`, `python3-venv`, `python3-pip`; enables `iscsid` and `multipathd` via `ansible.builtin.systemd`\n- **Helm 3.14.4** \u2014 extracted to `/usr/local/bin/helm`\n- **Go 1.24.2** \u2014 extracted to `/usr/local`\n- **Python venv** \u2014 `/opt/atmosphere-venv` with `openstacksdk` and `python-openstackclient`\n\n## Commit 2 \u2014 remove redundant installs\n\n- `test-playbooks/molecule/pre.yml` \u2014 tasks emptied (`jq` now pre-installed)\n- `molecule/aio/prepare.yml` \u2014 removes `dirmngr` install task\n- `.github/actions/molecule/action.yaml` \u2014 two changes:\n \ - `openssh-server` install skipped if already present (`dpkg -s` check)\n \ - Helm removal is now conditional: only removes if installed version is not `v3.14.x`\n\n\n\n\n\n
\n\nOriginal prompt\n\n\n## Goal\n\nSimulate the effect of pre-baking CI dependencies into the Nodepool diskimage, so we can measure the time improvement before actually modifying the diskimage. This PR should have **two commits**:\n\n### Commit 1: \"Simulate PR1 \u2014 pre-install dependencies early in CI\"\n\nAdd a new pre-run playbook `test-playbooks/molecule/pre-install-deps.yml` that installs all 4 categories of dependencies **before** any other CI work happens. Wire it into `.zuul.yaml` as an additional `pre-run` step that runs before the existing `test-playbooks/molecule/pre.yml`.\n\nThe new playbook `test-playbooks/molecule/pre-install-deps.yml` should:\n\n1. **System packages** \u2014 install all of these in a single `apt-get install` call with `update_cache: true`:\n - `open-iscsi`, `multipath-tools`, `sg3-utils`\n - `openssh-server`, `dirmngr`, `jq`\n - `gpg`, `gpg-agent`, `socat`, `conntrack`, `ipset`, `ethtool`, `ebtables`\n - Then enable `iscsid` and `multipathd` services via `systemctl enable`\n\n2. **Helm binary** \u2014 download and install Helm 3.14.4 to `/usr/local/bin/helm`:\n ```\n curl -fsSL https://get.helm.sh/helm-v3.14.4-linux-amd64.tar.gz | tar -xz -C /usr/local/bin --strip-components=1 linux-amd64/helm\n ```\n\n3. **Go toolchain** \u2014 download and install Go 1.24.2 to `/usr/local`:\n ```\n curl -fsSL https://go.dev/dl/go1.24.2.linux-amd64.tar.gz | tar -xz -C /usr/local\n ```\n\n4. **Python venv with openstacksdk** \u2014 create a venv at `/opt/atmosphere-venv` and install `openstacksdk` and `python-openstackclient`:\n ```\n python3 -m venv /opt/atmosphere-venv\n \ /opt/atmosphere-venv/bin/pip install --no-cache-dir openstacksdk python-openstackclient\n \ ```\n (Make sure `python3-venv` and `python3-pip` are installed via apt first \u2014 add them to the system packages list above.)\n\nThe playbook should target `hosts: all` with `become: true`. Use `ansible.builtin.apt` for packages, `ansible.builtin.shell` or `ansible.builtin.command` for the binary downloads, and `ansible.builtin.pip` for the Python packages. Add the `SPDX-License-Identifier: Apache-2.0` copyright header matching the style of the existing `test-playbooks/molecule/pre.yml`.\n\nIn `.zuul.yaml`, add the new playbook as a pre-run **before** the existing `pre-run: test-playbooks/molecule/pre.yml` in the `atmosphere-molecule` job definition. The `.zuul.yaml` job currently has:\n```yaml\npre-run: test-playbooks/molecule/pre.yml\n```\nChange it to a list:\n```yaml\npre-run:\n - test-playbooks/molecule/pre-install-deps.yml\n \ - test-playbooks/molecule/pre.yml\n```\n\n### Commit 2: \"Simulate PR2 \u2014 remove redundant installs\"\n\nNow that the dependencies are pre-installed, remove the redundant install steps:\n\n1. **`test-playbooks/molecule/pre.yml`** \u2014 Remove the \"Install jq for log collection\" task entirely (jq is now pre-installed). The file should still exist as a valid playbook but with an empty tasks list:\n ```yaml\n # Copyright (c) 2025 VEXXHOST, Inc.\n # SPDX-License-Identifier: Apache-2.0\n\n - hosts: all\n become: true\n tasks: []\n ```\n\n2. **`molecule/aio/prepare.yml`** \u2014 Remove only the \"Install dirmngr for GPG keyserver operations\" task (lines 19-22). Keep everything else (hostname workaround, snapd purge, networking, ceph, neutron) exactly as-is.\n\n3. **`.github/actions/molecule/action.yaml`** \u2014 Make two changes:\n - Replace the `openssh-server` install step (lines 25-27) with a conditional that skips if already installed:\n ```yaml\n \ - shell: bash\n run: |\n if ! dpkg -s openssh-server &>/dev/null; then\n sudo apt-get update\n sudo apt-get install -y openssh-server\n fi\n ```\n - Replace the unconditional Helm removal (line 61) with a version check:\n ```yaml\n - shell: bash\n run: |\n if ! helm version --short 2>/dev/null | grep -q \"v3.14\"; then\n rm -rfv /usr/local/bin/helm || true\n fi\n \ ```\n\n## Important Notes\n\n- Do NOT change any Ansible roles, playbooks under `roles/`, `playbooks/`, or the `molecule/aio/converge.yml`\n- Do NOT change any Helm charts or values files\n- The purpose is purely to measure timing improvement in CI \u2014 this simulates what a diskimage pre-bake would achieve\n\n\nThe following is the prior conversation context from the user's chat exploration (may be truncated):\n\nUser: what's my Remaining reqs\n\nAssistant: \n\nI don't have access to check your remaining API requests, rate limits, or usage quotas. That information isn't available through any of the tools I have.\n\nIf you're asking about **GitHub API rate limits**, you can check them yourself:\n\n```bash\ncurl -H \"Authorization: Bearer YOUR_TOKEN\" https://api.github.com/rate_limit\n```\n\nOr if you're asking about **Copilot Chat usage limits**, you can check your plan details at **github.com/settings/copilot**.\n\nWhat specifically are you trying to check?\n\nUser: analysis time in https://zuul.oss.vexxhost.dev/stream/19c9e1d14aa648ae8e0322607a286ec4 like https://github.\ncom/vexxhost/atmosphere/pull/3818#issuecomment-4245094888 \n...\n\n
\n\n\n\n\n\n*This pull request was created from Copilot chat.*\n>" change_url: https://github.com/vexxhost/atmosphere/pull/3835 commit_id: c179c6c7c4a6b0ca2ccb661161b8b306d6b42322 patchset: c179c6c7c4a6b0ca2ccb661161b8b306d6b42322 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere name: vexxhost/atmosphere short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere src_dir: src/github.com/vexxhost/atmosphere topic: null change: '3835' change_message: "ci: simulate pre-baking CI dependencies to measure timing improvement\n\nSimulates moving expensive CI setup work into the Nodepool diskimage by front-loading all dependency installs into a new pre-run playbook. Structured as two commits so CI timing can be compared before/after without actually modifying the diskimage.\n\n## Commit 1 \u2014 pre-install dependencies early in CI\n\nNew playbook `test-playbooks/molecule/pre-install-deps.yml` runs before all other CI work via a new pre-run entry in `.zuul.yaml`:\n\n```yaml\npre-run:\n \ - test-playbooks/molecule/pre-install-deps.yml\n - test-playbooks/molecule/pre.yml\n```\n\nInstalls 4 dependency categories up front:\n\n- **System packages** \u2014 `open-iscsi`, `multipath-tools`, `sg3-utils`, `openssh-server`, `dirmngr`, `jq`, `gpg`, `gpg-agent`, `socat`, `conntrack`, `ipset`, `ethtool`, `ebtables`, `python3-venv`, `python3-pip`; enables `iscsid` and `multipathd` via `ansible.builtin.systemd`\n- **Helm 3.14.4** \u2014 extracted to `/usr/local/bin/helm`\n- **Go 1.24.2** \u2014 extracted to `/usr/local`\n- **Python venv** \u2014 `/opt/atmosphere-venv` with `openstacksdk` and `python-openstackclient`\n\n## Commit 2 \u2014 remove redundant installs\n\n- `test-playbooks/molecule/pre.yml` \u2014 tasks emptied (`jq` now pre-installed)\n- `molecule/aio/prepare.yml` \u2014 removes `dirmngr` install task\n- `.github/actions/molecule/action.yaml` \u2014 two changes:\n \ - `openssh-server` install skipped if already present (`dpkg -s` check)\n \ - Helm removal is now conditional: only removes if installed version is not `v3.14.x`\n\n\n\n\n\n
\n\nOriginal prompt\n\n\n## Goal\n\nSimulate the effect of pre-baking CI dependencies into the Nodepool diskimage, so we can measure the time improvement before actually modifying the diskimage. This PR should have **two commits**:\n\n### Commit 1: \"Simulate PR1 \u2014 pre-install dependencies early in CI\"\n\nAdd a new pre-run playbook `test-playbooks/molecule/pre-install-deps.yml` that installs all 4 categories of dependencies **before** any other CI work happens. Wire it into `.zuul.yaml` as an additional `pre-run` step that runs before the existing `test-playbooks/molecule/pre.yml`.\n\nThe new playbook `test-playbooks/molecule/pre-install-deps.yml` should:\n\n1. **System packages** \u2014 install all of these in a single `apt-get install` call with `update_cache: true`:\n - `open-iscsi`, `multipath-tools`, `sg3-utils`\n - `openssh-server`, `dirmngr`, `jq`\n - `gpg`, `gpg-agent`, `socat`, `conntrack`, `ipset`, `ethtool`, `ebtables`\n - Then enable `iscsid` and `multipathd` services via `systemctl enable`\n\n2. **Helm binary** \u2014 download and install Helm 3.14.4 to `/usr/local/bin/helm`:\n ```\n curl -fsSL https://get.helm.sh/helm-v3.14.4-linux-amd64.tar.gz | tar -xz -C /usr/local/bin --strip-components=1 linux-amd64/helm\n ```\n\n3. **Go toolchain** \u2014 download and install Go 1.24.2 to `/usr/local`:\n ```\n curl -fsSL https://go.dev/dl/go1.24.2.linux-amd64.tar.gz | tar -xz -C /usr/local\n ```\n\n4. **Python venv with openstacksdk** \u2014 create a venv at `/opt/atmosphere-venv` and install `openstacksdk` and `python-openstackclient`:\n \ ```\n python3 -m venv /opt/atmosphere-venv\n /opt/atmosphere-venv/bin/pip install --no-cache-dir openstacksdk python-openstackclient\n ```\n (Make sure `python3-venv` and `python3-pip` are installed via apt first \u2014 add them to the system packages list above.)\n\nThe playbook should target `hosts: all` with `become: true`. Use `ansible.builtin.apt` for packages, `ansible.builtin.shell` or `ansible.builtin.command` for the binary downloads, and `ansible.builtin.pip` for the Python packages. Add the `SPDX-License-Identifier: Apache-2.0` copyright header matching the style of the existing `test-playbooks/molecule/pre.yml`.\n\nIn `.zuul.yaml`, add the new playbook as a pre-run **before** the existing `pre-run: test-playbooks/molecule/pre.yml` in the `atmosphere-molecule` job definition. The `.zuul.yaml` job currently has:\n```yaml\npre-run: test-playbooks/molecule/pre.yml\n```\nChange it to a list:\n```yaml\npre-run:\n - test-playbooks/molecule/pre-install-deps.yml\n \ - test-playbooks/molecule/pre.yml\n```\n\n### Commit 2: \"Simulate PR2 \u2014 remove redundant installs\"\n\nNow that the dependencies are pre-installed, remove the redundant install steps:\n\n1. **`test-playbooks/molecule/pre.yml`** \u2014 Remove the \"Install jq for log collection\" task entirely (jq is now pre-installed). The file should still exist as a valid playbook but with an empty tasks list:\n ```yaml\n # Copyright (c) 2025 VEXXHOST, Inc.\n # SPDX-License-Identifier: Apache-2.0\n\n - hosts: all\n become: true\n \ tasks: []\n ```\n\n2. **`molecule/aio/prepare.yml`** \u2014 Remove only the \"Install dirmngr for GPG keyserver operations\" task (lines 19-22). Keep everything else (hostname workaround, snapd purge, networking, ceph, neutron) exactly as-is.\n\n3. **`.github/actions/molecule/action.yaml`** \u2014 Make two changes:\n - Replace the `openssh-server` install step (lines 25-27) with a conditional that skips if already installed:\n ```yaml\n - shell: bash\n run: |\n if ! dpkg -s openssh-server &>/dev/null; then\n sudo apt-get update\n sudo apt-get install -y openssh-server\n \ fi\n ```\n - Replace the unconditional Helm removal (line 61) with a version check:\n ```yaml\n - shell: bash\n run: |\n if ! helm version --short 2>/dev/null | grep -q \"v3.14\"; then\n rm -rfv /usr/local/bin/helm || true\n fi\n ```\n\n## Important Notes\n\n- Do NOT change any Ansible roles, playbooks under `roles/`, `playbooks/`, or the `molecule/aio/converge.yml`\n- Do NOT change any Helm charts or values files\n- The purpose is purely to measure timing improvement in CI \u2014 this simulates what a diskimage pre-bake would achieve\n\n\nThe following is the prior conversation context from the user's chat exploration (may be truncated):\n\nUser: what's my Remaining reqs\n\nAssistant: \n\nI don't have access to check your remaining API requests, rate limits, or usage quotas. That information isn't available through any of the tools I have.\n\nIf you're asking about **GitHub API rate limits**, you can check them yourself:\n\n```bash\ncurl -H \"Authorization: Bearer YOUR_TOKEN\" https://api.github.com/rate_limit\n```\n\nOr if you're asking about **Copilot Chat usage limits**, you can check your plan details at **github.com/settings/copilot**.\n\nWhat specifically are you trying to check?\n\nUser: analysis time in https://zuul.oss.vexxhost.dev/stream/19c9e1d14aa648ae8e0322607a286ec4 like https://github.\ncom/vexxhost/atmosphere/pull/3818#issuecomment-4245094888 \n...\n\n
\n\n\n\n\n\n*This pull request was created from Copilot chat.*\n>" change_url: https://github.com/vexxhost/atmosphere/pull/3835 child_jobs: [] commit_id: c179c6c7c4a6b0ca2ccb661161b8b306d6b42322 event_id: 69329484-3929-11f1-806c-0c126485a0af executor: hostname: 0a8996d2b663 inventory_file: /var/lib/zuul/builds/fe0323265d37410584896a6bc1b0f5c1/ansible/inventory.yaml log_root: /var/lib/zuul/builds/fe0323265d37410584896a6bc1b0f5c1/work/logs result_data_file: /var/lib/zuul/builds/fe0323265d37410584896a6bc1b0f5c1/work/results.json src_root: /var/lib/zuul/builds/fe0323265d37410584896a6bc1b0f5c1/work/src work_root: /var/lib/zuul/builds/fe0323265d37410584896a6bc1b0f5c1/work include_vars: [] items: - branch: main change: '3835' change_message: "ci: simulate pre-baking CI dependencies to measure timing improvement\n\nSimulates moving expensive CI setup work into the Nodepool diskimage by front-loading all dependency installs into a new pre-run playbook. Structured as two commits so CI timing can be compared before/after without actually modifying the diskimage.\n\n## Commit 1 \u2014 pre-install dependencies early in CI\n\nNew playbook `test-playbooks/molecule/pre-install-deps.yml` runs before all other CI work via a new pre-run entry in `.zuul.yaml`:\n\n```yaml\npre-run:\n \ - test-playbooks/molecule/pre-install-deps.yml\n - test-playbooks/molecule/pre.yml\n```\n\nInstalls 4 dependency categories up front:\n\n- **System packages** \u2014 `open-iscsi`, `multipath-tools`, `sg3-utils`, `openssh-server`, `dirmngr`, `jq`, `gpg`, `gpg-agent`, `socat`, `conntrack`, `ipset`, `ethtool`, `ebtables`, `python3-venv`, `python3-pip`; enables `iscsid` and `multipathd` via `ansible.builtin.systemd`\n- **Helm 3.14.4** \u2014 extracted to `/usr/local/bin/helm`\n- **Go 1.24.2** \u2014 extracted to `/usr/local`\n- **Python venv** \u2014 `/opt/atmosphere-venv` with `openstacksdk` and `python-openstackclient`\n\n## Commit 2 \u2014 remove redundant installs\n\n- `test-playbooks/molecule/pre.yml` \u2014 tasks emptied (`jq` now pre-installed)\n- `molecule/aio/prepare.yml` \u2014 removes `dirmngr` install task\n- `.github/actions/molecule/action.yaml` \u2014 two changes:\n \ - `openssh-server` install skipped if already present (`dpkg -s` check)\n \ - Helm removal is now conditional: only removes if installed version is not `v3.14.x`\n\n\n\n\n\n
\n\nOriginal prompt\n\n\n## Goal\n\nSimulate the effect of pre-baking CI dependencies into the Nodepool diskimage, so we can measure the time improvement before actually modifying the diskimage. This PR should have **two commits**:\n\n### Commit 1: \"Simulate PR1 \u2014 pre-install dependencies early in CI\"\n\nAdd a new pre-run playbook `test-playbooks/molecule/pre-install-deps.yml` that installs all 4 categories of dependencies **before** any other CI work happens. Wire it into `.zuul.yaml` as an additional `pre-run` step that runs before the existing `test-playbooks/molecule/pre.yml`.\n\nThe new playbook `test-playbooks/molecule/pre-install-deps.yml` should:\n\n1. **System packages** \u2014 install all of these in a single `apt-get install` call with `update_cache: true`:\n - `open-iscsi`, `multipath-tools`, `sg3-utils`\n - `openssh-server`, `dirmngr`, `jq`\n - `gpg`, `gpg-agent`, `socat`, `conntrack`, `ipset`, `ethtool`, `ebtables`\n - Then enable `iscsid` and `multipathd` services via `systemctl enable`\n\n2. **Helm binary** \u2014 download and install Helm 3.14.4 to `/usr/local/bin/helm`:\n ```\n curl -fsSL https://get.helm.sh/helm-v3.14.4-linux-amd64.tar.gz | tar -xz -C /usr/local/bin --strip-components=1 linux-amd64/helm\n ```\n\n3. **Go toolchain** \u2014 download and install Go 1.24.2 to `/usr/local`:\n ```\n curl -fsSL https://go.dev/dl/go1.24.2.linux-amd64.tar.gz | tar -xz -C /usr/local\n ```\n\n4. **Python venv with openstacksdk** \u2014 create a venv at `/opt/atmosphere-venv` and install `openstacksdk` and `python-openstackclient`:\n ```\n python3 -m venv /opt/atmosphere-venv\n \ /opt/atmosphere-venv/bin/pip install --no-cache-dir openstacksdk python-openstackclient\n \ ```\n (Make sure `python3-venv` and `python3-pip` are installed via apt first \u2014 add them to the system packages list above.)\n\nThe playbook should target `hosts: all` with `become: true`. Use `ansible.builtin.apt` for packages, `ansible.builtin.shell` or `ansible.builtin.command` for the binary downloads, and `ansible.builtin.pip` for the Python packages. Add the `SPDX-License-Identifier: Apache-2.0` copyright header matching the style of the existing `test-playbooks/molecule/pre.yml`.\n\nIn `.zuul.yaml`, add the new playbook as a pre-run **before** the existing `pre-run: test-playbooks/molecule/pre.yml` in the `atmosphere-molecule` job definition. The `.zuul.yaml` job currently has:\n```yaml\npre-run: test-playbooks/molecule/pre.yml\n```\nChange it to a list:\n```yaml\npre-run:\n - test-playbooks/molecule/pre-install-deps.yml\n \ - test-playbooks/molecule/pre.yml\n```\n\n### Commit 2: \"Simulate PR2 \u2014 remove redundant installs\"\n\nNow that the dependencies are pre-installed, remove the redundant install steps:\n\n1. **`test-playbooks/molecule/pre.yml`** \u2014 Remove the \"Install jq for log collection\" task entirely (jq is now pre-installed). The file should still exist as a valid playbook but with an empty tasks list:\n ```yaml\n # Copyright (c) 2025 VEXXHOST, Inc.\n # SPDX-License-Identifier: Apache-2.0\n\n - hosts: all\n become: true\n tasks: []\n ```\n\n2. **`molecule/aio/prepare.yml`** \u2014 Remove only the \"Install dirmngr for GPG keyserver operations\" task (lines 19-22). Keep everything else (hostname workaround, snapd purge, networking, ceph, neutron) exactly as-is.\n\n3. **`.github/actions/molecule/action.yaml`** \u2014 Make two changes:\n - Replace the `openssh-server` install step (lines 25-27) with a conditional that skips if already installed:\n ```yaml\n \ - shell: bash\n run: |\n if ! dpkg -s openssh-server &>/dev/null; then\n sudo apt-get update\n sudo apt-get install -y openssh-server\n fi\n ```\n - Replace the unconditional Helm removal (line 61) with a version check:\n ```yaml\n - shell: bash\n run: |\n if ! helm version --short 2>/dev/null | grep -q \"v3.14\"; then\n rm -rfv /usr/local/bin/helm || true\n fi\n \ ```\n\n## Important Notes\n\n- Do NOT change any Ansible roles, playbooks under `roles/`, `playbooks/`, or the `molecule/aio/converge.yml`\n- Do NOT change any Helm charts or values files\n- The purpose is purely to measure timing improvement in CI \u2014 this simulates what a diskimage pre-bake would achieve\n\n\nThe following is the prior conversation context from the user's chat exploration (may be truncated):\n\nUser: what's my Remaining reqs\n\nAssistant: \n\nI don't have access to check your remaining API requests, rate limits, or usage quotas. That information isn't available through any of the tools I have.\n\nIf you're asking about **GitHub API rate limits**, you can check them yourself:\n\n```bash\ncurl -H \"Authorization: Bearer YOUR_TOKEN\" https://api.github.com/rate_limit\n```\n\nOr if you're asking about **Copilot Chat usage limits**, you can check your plan details at **github.com/settings/copilot**.\n\nWhat specifically are you trying to check?\n\nUser: analysis time in https://zuul.oss.vexxhost.dev/stream/19c9e1d14aa648ae8e0322607a286ec4 like https://github.\ncom/vexxhost/atmosphere/pull/3818#issuecomment-4245094888 \n...\n\n
\n\n\n\n\n\n*This pull request was created from Copilot chat.*\n>" change_url: https://github.com/vexxhost/atmosphere/pull/3835 commit_id: c179c6c7c4a6b0ca2ccb661161b8b306d6b42322 patchset: c179c6c7c4a6b0ca2ccb661161b8b306d6b42322 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere name: vexxhost/atmosphere short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere topic: null job: atmosphere-molecule-aio-ovn jobtags: [] max_attempts: 3 message: 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 patchset: c179c6c7c4a6b0ca2ccb661161b8b306d6b42322 pipeline: check playbook_context: playbook_projects: trusted/project_0/github.com/vexxhost/zuul-config: canonical_name: github.com/vexxhost/zuul-config checkout: main commit: 298983cd1253e6833abdb49d87d912527e0e6597 trusted/project_1/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: fc4af6d44718d2e648cf6396f3e96bb46a55117a trusted/project_2/github.com/vexxhost/zuul-jobs: canonical_name: github.com/vexxhost/zuul-jobs checkout: main commit: a6e68243e02ef030ce5e75f8b67630880c475f33 untrusted/project_0/github.com/vexxhost/zuul-jobs: canonical_name: github.com/vexxhost/zuul-jobs checkout: main commit: a6e68243e02ef030ce5e75f8b67630880c475f33 untrusted/project_1/github.com/vexxhost/zuul-config: canonical_name: github.com/vexxhost/zuul-config checkout: main commit: 298983cd1253e6833abdb49d87d912527e0e6597 untrusted/project_2/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: fc4af6d44718d2e648cf6396f3e96bb46a55117a untrusted/project_3/github.com/vexxhost/atmosphere: canonical_name: github.com/vexxhost/atmosphere checkout: main commit: c179c6c7c4a6b0ca2ccb661161b8b306d6b42322 untrusted/project_4/opendev.org/openstack/openstack-helm: canonical_name: opendev.org/openstack/openstack-helm checkout: master commit: c665eedfa3ae1b76a7e8438fffcb62aefaa30a46 playbooks: - path: untrusted/project_3/github.com/vexxhost/atmosphere/molecule/aio/converge.yml roles: - checkout: main checkout_description: playbook branch link_name: ansible/playbook_0/role_0/atmosphere link_target: untrusted/project_3/github.com/vexxhost/atmosphere role_path: ansible/playbook_0/role_0/atmosphere/roles - checkout: master checkout_description: project default branch link_name: ansible/playbook_0/role_1/openstack-helm link_target: untrusted/project_4/opendev.org/openstack/openstack-helm role_path: ansible/playbook_0/role_1/openstack-helm/roles - checkout: master checkout_description: project default branch link_name: ansible/playbook_0/role_3/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/playbook_0/role_3/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/playbook_0/role_4/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/playbook_0/role_4/zuul-jobs/roles - path: untrusted/project_3/github.com/vexxhost/atmosphere/test-playbooks/molecule/run.yml roles: - checkout: main checkout_description: playbook branch link_name: ansible/playbook_1/role_0/atmosphere link_target: untrusted/project_3/github.com/vexxhost/atmosphere role_path: ansible/playbook_1/role_0/atmosphere/roles - checkout: master checkout_description: project default branch link_name: ansible/playbook_1/role_1/openstack-helm link_target: untrusted/project_4/opendev.org/openstack/openstack-helm role_path: ansible/playbook_1/role_1/openstack-helm/roles - checkout: master checkout_description: project default branch link_name: ansible/playbook_1/role_3/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/playbook_1/role_3/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/playbook_1/role_4/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/playbook_1/role_4/zuul-jobs/roles post_playbooks: - path: untrusted/project_3/github.com/vexxhost/atmosphere/test-playbooks/molecule/post.yml roles: - checkout: main checkout_description: playbook branch link_name: ansible/post_playbook_0/role_0/atmosphere link_target: untrusted/project_3/github.com/vexxhost/atmosphere role_path: ansible/post_playbook_0/role_0/atmosphere/roles - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_0/role_1/openstack-helm link_target: untrusted/project_4/opendev.org/openstack/openstack-helm role_path: ansible/post_playbook_0/role_1/openstack-helm/roles - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_0/role_3/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_0/role_3/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_0/role_4/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_0/role_4/zuul-jobs/roles - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_1/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_1/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_1/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_1/role_2/zuul-jobs/roles - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post-logs.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_2/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_2/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_2/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_2/role_2/zuul-jobs/roles pre_playbooks: - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/pre.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_0/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_0/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/pre_playbook_0/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_0/role_2/zuul-jobs/roles - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/molecule/pre.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_1/role_1/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_1/role_1/zuul-jobs/roles - checkout: main checkout_description: playbook branch link_name: ansible/pre_playbook_1/role_2/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_1/role_2/zuul-jobs/roles - path: untrusted/project_3/github.com/vexxhost/atmosphere/test-playbooks/molecule/pre-install-deps.yml roles: - checkout: main checkout_description: playbook branch link_name: ansible/pre_playbook_2/role_0/atmosphere link_target: untrusted/project_3/github.com/vexxhost/atmosphere role_path: ansible/pre_playbook_2/role_0/atmosphere/roles - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_2/role_1/openstack-helm link_target: untrusted/project_4/opendev.org/openstack/openstack-helm role_path: ansible/pre_playbook_2/role_1/openstack-helm/roles - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_2/role_3/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_2/role_3/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/pre_playbook_2/role_4/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_2/role_4/zuul-jobs/roles - path: untrusted/project_3/github.com/vexxhost/atmosphere/test-playbooks/molecule/pre.yml roles: - checkout: main checkout_description: playbook branch link_name: ansible/pre_playbook_3/role_0/atmosphere link_target: untrusted/project_3/github.com/vexxhost/atmosphere role_path: ansible/pre_playbook_3/role_0/atmosphere/roles - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_3/role_1/openstack-helm link_target: untrusted/project_4/opendev.org/openstack/openstack-helm role_path: ansible/pre_playbook_3/role_1/openstack-helm/roles - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_3/role_3/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_3/role_3/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/pre_playbook_3/role_4/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_3/role_4/zuul-jobs/roles post_review: false post_timeout: null pre_timeout: null project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere name: vexxhost/atmosphere short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere projects: github.com/vexxhost/atmosphere: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere checkout: main checkout_description: zuul branch commit: c179c6c7c4a6b0ca2ccb661161b8b306d6b42322 name: vexxhost/atmosphere required: false short_name: atmosphere src_dir: src/github.com/vexxhost/atmosphere ref: refs/pull/3835/head resources: {} tenant: oss timeout: 7200 topic: null voting: true