all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    ubuntu-noble-large:
      ansible_connection: ssh
      ansible_host: 2a13:1a81:8000:3124:f816:3eff:fe62:e973
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      kubernetes_version: v1.33
      nodepool:
        az: nova
        cloud: regiocloud-a-ci
        external_id: 1ae9047d-bb4e-4181-8845-30a9c2a825f3
        host_id: 4ba4344415ca7057d9956ea5de826bbc0b830981e82c0e0f191fa07b
        interface_ip: 2a13:1a81:8000:3124:f816:3eff:fe62:e973
        label: ubuntu-noble-large
        node_properties: {}
        private_ipv4: 10.128.0.101
        private_ipv6: null
        provider: regiocloud-a
        public_ipv4: 81.163.193.1
        public_ipv6: 2a13:1a81:8000:3124:f816:3eff:fe62:e973
        region: null
        slot: null
      upload_image: false
      variant: ''
  vars:
    kubernetes_version: v1.33
    upload_image: false
    variant: ''
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-config/zuul.d/jobs.yaml@main#2>'
      - '<Job abstract-k8s-capi-images-build explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/k8s-capi-images/.zuul.yaml@main#28>'
      - '<Job k8s-capi-images-build-v1.33 explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/k8s-capi-images/.zuul.yaml@main#50>'
      - '<Job k8s-capi-images-build-v1.33 explicit: None implied: None source: osism/k8s-capi-images/.zuul.yaml@main#250>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: 0ae3a63d6a7148cc8b92135258e617a8
      build_refs:
      - branch: main
        change: '344'
        change_message: "Arm the v1.36 publish pipeline and make publishing trigger
          and idempotent\n\n## Summary\n\n- Uncomment the `k8s-capi-images-publish-v1.36`
          job and its post-pipeline entry, completing the arming started with the
          gardener variant in 5e88ee2.\n- Add `^\\.zuul\\.yaml$` to every files matcher
          (publish jobs inherit it through the anchors), so changing the pipeline
          itself \u2014 like this PR \u2014 actually triggers the builds and publishes.
          Previously, arming a publish job was a pure `.zuul.yaml` change that no
          files matcher matched, so the post pipeline never ran the newly armed jobs.\n-
          Make publishing create-once per image version: a publish job first HEADs
          the public `\u2026/<image_dir>/<image>.qcow2.CHECKSUM` URL and skips build
          and upload when it already exists (403/404 both mean \"not published yet\",
          since the bucket grants no list permission). This keeps the new `.zuul.yaml`
          trigger idempotent. Check builds are not guarded \u2014 they validate the
          change under test and always build.\n- Arm the two rclone upload tasks in
          `playbooks/build.yml` that were still commented out from 39fefbe \u2014
          without them, even the armed gardener publish job built its image and then
          published nothing.\n\n## Expected effect on merge\n\nThe post pipeline runs
          `k8s-capi-images-publish-v1.36` and `k8s-capi-images-publish-v1.36-gardener`;
          neither image is published yet, so both build and upload `ubuntu-2404-kube-v1.36.2`
          (plain and `-gardener`) plus their CHECKSUM and `last-1.36*` files.\n\nNote:
          since `^playbooks/.*` matches everywhere, the check pipeline of this PR
          runs all eight build jobs, and any future `.zuul.yaml` change does the same
          (check builds always build fully; the CHECKSUM guard only applies to publish
          jobs).\n\n\U0001F916 Generated with [Claude Code](https://claude.com/claude-code)"
        change_url: https://github.com/osism/k8s-capi-images/pull/344
        commit_id: 0ef6ec9048f1f016c735d9bd747144e930c9c57f
        patchset: 0ef6ec9048f1f016c735d9bd747144e930c9c57f
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/k8s-capi-images
          name: osism/k8s-capi-images
          short_name: k8s-capi-images
        src_dir: src/github.com/osism/k8s-capi-images
        topic: null
      buildset: 4bffc426e5ac4f53b9eee50e97a28930
      buildset_refs:
      - branch: main
        change: '344'
        change_message: "Arm the v1.36 publish pipeline and make publishing trigger
          and idempotent\n\n## Summary\n\n- Uncomment the `k8s-capi-images-publish-v1.36`
          job and its post-pipeline entry, completing the arming started with the
          gardener variant in 5e88ee2.\n- Add `^\\.zuul\\.yaml$` to every files matcher
          (publish jobs inherit it through the anchors), so changing the pipeline
          itself \u2014 like this PR \u2014 actually triggers the builds and publishes.
          Previously, arming a publish job was a pure `.zuul.yaml` change that no
          files matcher matched, so the post pipeline never ran the newly armed jobs.\n-
          Make publishing create-once per image version: a publish job first HEADs
          the public `\u2026/<image_dir>/<image>.qcow2.CHECKSUM` URL and skips build
          and upload when it already exists (403/404 both mean \"not published yet\",
          since the bucket grants no list permission). This keeps the new `.zuul.yaml`
          trigger idempotent. Check builds are not guarded \u2014 they validate the
          change under test and always build.\n- Arm the two rclone upload tasks in
          `playbooks/build.yml` that were still commented out from 39fefbe \u2014
          without them, even the armed gardener publish job built its image and then
          published nothing.\n\n## Expected effect on merge\n\nThe post pipeline runs
          `k8s-capi-images-publish-v1.36` and `k8s-capi-images-publish-v1.36-gardener`;
          neither image is published yet, so both build and upload `ubuntu-2404-kube-v1.36.2`
          (plain and `-gardener`) plus their CHECKSUM and `last-1.36*` files.\n\nNote:
          since `^playbooks/.*` matches everywhere, the check pipeline of this PR
          runs all eight build jobs, and any future `.zuul.yaml` change does the same
          (check builds always build fully; the CHECKSUM guard only applies to publish
          jobs).\n\n\U0001F916 Generated with [Claude Code](https://claude.com/claude-code)"
        change_url: https://github.com/osism/k8s-capi-images/pull/344
        commit_id: 0ef6ec9048f1f016c735d9bd747144e930c9c57f
        patchset: 0ef6ec9048f1f016c735d9bd747144e930c9c57f
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/k8s-capi-images
          name: osism/k8s-capi-images
          short_name: k8s-capi-images
        src_dir: src/github.com/osism/k8s-capi-images
        topic: null
      change: '344'
      change_message: "Arm the v1.36 publish pipeline and make publishing trigger
        and idempotent\n\n## Summary\n\n- Uncomment the `k8s-capi-images-publish-v1.36`
        job and its post-pipeline entry, completing the arming started with the gardener
        variant in 5e88ee2.\n- Add `^\\.zuul\\.yaml$` to every files matcher (publish
        jobs inherit it through the anchors), so changing the pipeline itself \u2014
        like this PR \u2014 actually triggers the builds and publishes. Previously,
        arming a publish job was a pure `.zuul.yaml` change that no files matcher
        matched, so the post pipeline never ran the newly armed jobs.\n- Make publishing
        create-once per image version: a publish job first HEADs the public `\u2026/<image_dir>/<image>.qcow2.CHECKSUM`
        URL and skips build and upload when it already exists (403/404 both mean \"not
        published yet\", since the bucket grants no list permission). This keeps the
        new `.zuul.yaml` trigger idempotent. Check builds are not guarded \u2014 they
        validate the change under test and always build.\n- Arm the two rclone upload
        tasks in `playbooks/build.yml` that were still commented out from 39fefbe
        \u2014 without them, even the armed gardener publish job built its image and
        then published nothing.\n\n## Expected effect on merge\n\nThe post pipeline
        runs `k8s-capi-images-publish-v1.36` and `k8s-capi-images-publish-v1.36-gardener`;
        neither image is published yet, so both build and upload `ubuntu-2404-kube-v1.36.2`
        (plain and `-gardener`) plus their CHECKSUM and `last-1.36*` files.\n\nNote:
        since `^playbooks/.*` matches everywhere, the check pipeline of this PR runs
        all eight build jobs, and any future `.zuul.yaml` change does the same (check
        builds always build fully; the CHECKSUM guard only applies to publish jobs).\n\n\U0001F916
        Generated with [Claude Code](https://claude.com/claude-code)"
      change_url: https://github.com/osism/k8s-capi-images/pull/344
      child_jobs: []
      commit_id: 0ef6ec9048f1f016c735d9bd747144e930c9c57f
      event_id: aed420f0-7ea4-11f1-8751-5577f7929ba4
      executor:
        hostname: 521e9411259a
        inventory_file: /var/lib/zuul/builds/0ae3a63d6a7148cc8b92135258e617a8/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/0ae3a63d6a7148cc8b92135258e617a8/work/logs
        result_data_file: /var/lib/zuul/builds/0ae3a63d6a7148cc8b92135258e617a8/work/results.json
        src_root: /var/lib/zuul/builds/0ae3a63d6a7148cc8b92135258e617a8/work/src
        work_root: /var/lib/zuul/builds/0ae3a63d6a7148cc8b92135258e617a8/work
      include_vars: []
      items:
      - branch: main
        change: '344'
        change_message: "Arm the v1.36 publish pipeline and make publishing trigger
          and idempotent\n\n## Summary\n\n- Uncomment the `k8s-capi-images-publish-v1.36`
          job and its post-pipeline entry, completing the arming started with the
          gardener variant in 5e88ee2.\n- Add `^\\.zuul\\.yaml$` to every files matcher
          (publish jobs inherit it through the anchors), so changing the pipeline
          itself \u2014 like this PR \u2014 actually triggers the builds and publishes.
          Previously, arming a publish job was a pure `.zuul.yaml` change that no
          files matcher matched, so the post pipeline never ran the newly armed jobs.\n-
          Make publishing create-once per image version: a publish job first HEADs
          the public `\u2026/<image_dir>/<image>.qcow2.CHECKSUM` URL and skips build
          and upload when it already exists (403/404 both mean \"not published yet\",
          since the bucket grants no list permission). This keeps the new `.zuul.yaml`
          trigger idempotent. Check builds are not guarded \u2014 they validate the
          change under test and always build.\n- Arm the two rclone upload tasks in
          `playbooks/build.yml` that were still commented out from 39fefbe \u2014
          without them, even the armed gardener publish job built its image and then
          published nothing.\n\n## Expected effect on merge\n\nThe post pipeline runs
          `k8s-capi-images-publish-v1.36` and `k8s-capi-images-publish-v1.36-gardener`;
          neither image is published yet, so both build and upload `ubuntu-2404-kube-v1.36.2`
          (plain and `-gardener`) plus their CHECKSUM and `last-1.36*` files.\n\nNote:
          since `^playbooks/.*` matches everywhere, the check pipeline of this PR
          runs all eight build jobs, and any future `.zuul.yaml` change does the same
          (check builds always build fully; the CHECKSUM guard only applies to publish
          jobs).\n\n\U0001F916 Generated with [Claude Code](https://claude.com/claude-code)"
        change_url: https://github.com/osism/k8s-capi-images/pull/344
        commit_id: 0ef6ec9048f1f016c735d9bd747144e930c9c57f
        patchset: 0ef6ec9048f1f016c735d9bd747144e930c9c57f
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/k8s-capi-images
          name: osism/k8s-capi-images
          short_name: k8s-capi-images
          src_dir: src/github.com/osism/k8s-capi-images
        topic: null
      job: k8s-capi-images-build-v1.33
      jobtags: []
      max_attempts: 3
      message: QXJtIHRoZSB2MS4zNiBwdWJsaXNoIHBpcGVsaW5lIGFuZCBtYWtlIHB1Ymxpc2hpbmcgdHJpZ2dlciBhbmQgaWRlbXBvdGVudAoKIyMgU3VtbWFyeQoKLSBVbmNvbW1lbnQgdGhlIGBrOHMtY2FwaS1pbWFnZXMtcHVibGlzaC12MS4zNmAgam9iIGFuZCBpdHMgcG9zdC1waXBlbGluZSBlbnRyeSwgY29tcGxldGluZyB0aGUgYXJtaW5nIHN0YXJ0ZWQgd2l0aCB0aGUgZ2FyZGVuZXIgdmFyaWFudCBpbiA1ZTg4ZWUyLgotIEFkZCBgXlwuenV1bFwueWFtbCRgIHRvIGV2ZXJ5IGZpbGVzIG1hdGNoZXIgKHB1Ymxpc2ggam9icyBpbmhlcml0IGl0IHRocm91Z2ggdGhlIGFuY2hvcnMpLCBzbyBjaGFuZ2luZyB0aGUgcGlwZWxpbmUgaXRzZWxmIOKAlCBsaWtlIHRoaXMgUFIg4oCUIGFjdHVhbGx5IHRyaWdnZXJzIHRoZSBidWlsZHMgYW5kIHB1Ymxpc2hlcy4gUHJldmlvdXNseSwgYXJtaW5nIGEgcHVibGlzaCBqb2Igd2FzIGEgcHVyZSBgLnp1dWwueWFtbGAgY2hhbmdlIHRoYXQgbm8gZmlsZXMgbWF0Y2hlciBtYXRjaGVkLCBzbyB0aGUgcG9zdCBwaXBlbGluZSBuZXZlciByYW4gdGhlIG5ld2x5IGFybWVkIGpvYnMuCi0gTWFrZSBwdWJsaXNoaW5nIGNyZWF0ZS1vbmNlIHBlciBpbWFnZSB2ZXJzaW9uOiBhIHB1Ymxpc2ggam9iIGZpcnN0IEhFQURzIHRoZSBwdWJsaWMgYOKApi88aW1hZ2VfZGlyPi88aW1hZ2U+LnFjb3cyLkNIRUNLU1VNYCBVUkwgYW5kIHNraXBzIGJ1aWxkIGFuZCB1cGxvYWQgd2hlbiBpdCBhbHJlYWR5IGV4aXN0cyAoNDAzLzQwNCBib3RoIG1lYW4gIm5vdCBwdWJsaXNoZWQgeWV0Iiwgc2luY2UgdGhlIGJ1Y2tldCBncmFudHMgbm8gbGlzdCBwZXJtaXNzaW9uKS4gVGhpcyBrZWVwcyB0aGUgbmV3IGAuenV1bC55YW1sYCB0cmlnZ2VyIGlkZW1wb3RlbnQuIENoZWNrIGJ1aWxkcyBhcmUgbm90IGd1YXJkZWQg4oCUIHRoZXkgdmFsaWRhdGUgdGhlIGNoYW5nZSB1bmRlciB0ZXN0IGFuZCBhbHdheXMgYnVpbGQuCi0gQXJtIHRoZSB0d28gcmNsb25lIHVwbG9hZCB0YXNrcyBpbiBgcGxheWJvb2tzL2J1aWxkLnltbGAgdGhhdCB3ZXJlIHN0aWxsIGNvbW1lbnRlZCBvdXQgZnJvbSAzOWZlZmJlIOKAlCB3aXRob3V0IHRoZW0sIGV2ZW4gdGhlIGFybWVkIGdhcmRlbmVyIHB1Ymxpc2ggam9iIGJ1aWx0IGl0cyBpbWFnZSBhbmQgdGhlbiBwdWJsaXNoZWQgbm90aGluZy4KCiMjIEV4cGVjdGVkIGVmZmVjdCBvbiBtZXJnZQoKVGhlIHBvc3QgcGlwZWxpbmUgcnVucyBgazhzLWNhcGktaW1hZ2VzLXB1Ymxpc2gtdjEuMzZgIGFuZCBgazhzLWNhcGktaW1hZ2VzLXB1Ymxpc2gtdjEuMzYtZ2FyZGVuZXJgOyBuZWl0aGVyIGltYWdlIGlzIHB1Ymxpc2hlZCB5ZXQsIHNvIGJvdGggYnVpbGQgYW5kIHVwbG9hZCBgdWJ1bnR1LTI0MDQta3ViZS12MS4zNi4yYCAocGxhaW4gYW5kIGAtZ2FyZGVuZXJgKSBwbHVzIHRoZWlyIENIRUNLU1VNIGFuZCBgbGFzdC0xLjM2KmAgZmlsZXMuCgpOb3RlOiBzaW5jZSBgXnBsYXlib29rcy8uKmAgbWF0Y2hlcyBldmVyeXdoZXJlLCB0aGUgY2hlY2sgcGlwZWxpbmUgb2YgdGhpcyBQUiBydW5zIGFsbCBlaWdodCBidWlsZCBqb2JzLCBhbmQgYW55IGZ1dHVyZSBgLnp1dWwueWFtbGAgY2hhbmdlIGRvZXMgdGhlIHNhbWUgKGNoZWNrIGJ1aWxkcyBhbHdheXMgYnVpbGQgZnVsbHk7IHRoZSBDSEVDS1NVTSBndWFyZCBvbmx5IGFwcGxpZXMgdG8gcHVibGlzaCBqb2JzKS4KCvCfpJYgR2VuZXJhdGVkIHdpdGggW0NsYXVkZSBDb2RlXShodHRwczovL2NsYXVkZS5jb20vY2xhdWRlLWNvZGUp
      patchset: 0ef6ec9048f1f016c735d9bd747144e930c9c57f
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 71b711c422c10c242a8f785dc6d41ed9d12e9cd3
          trusted/project_1/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 242732586e2cba04d04867d3e302888c766bc231
          trusted/project_2/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 1d71e58c93442038e695a5d883d57a603182c7ae
          untrusted/project_0/github.com/osism/k8s-capi-images:
            canonical_name: github.com/osism/k8s-capi-images
            checkout: main
            commit: 1ae255187ec7dd23e908c7e13f1e3a81b32ebcba
          untrusted/project_1/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 71b711c422c10c242a8f785dc6d41ed9d12e9cd3
          untrusted/project_2/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 242732586e2cba04d04867d3e302888c766bc231
          untrusted/project_3/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 1d71e58c93442038e695a5d883d57a603182c7ae
        playbooks:
        - path: untrusted/project_0/github.com/osism/k8s-capi-images/playbooks/build.yml
          roles:
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_1/zuul-config
            link_target: untrusted/project_1/github.com/osism/zuul-config
            role_path: ansible/playbook_0/role_1/zuul-config/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_2/openinfra-zuul-jobs
            link_target: untrusted/project_2/github.com/osism/openinfra-zuul-jobs
            role_path: ansible/playbook_0/role_2/openinfra-zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_3/zuul-jobs
            link_target: untrusted/project_3/github.com/osism/zuul-jobs
            role_path: ansible/playbook_0/role_3/zuul-jobs/roles
      post_review: false
      post_timeout: 1800
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/osism/k8s-capi-images
        name: osism/k8s-capi-images
        short_name: k8s-capi-images
        src_dir: src/github.com/osism/k8s-capi-images
      projects:
        github.com/osism/k8s-capi-images:
          canonical_hostname: github.com
          canonical_name: github.com/osism/k8s-capi-images
          checkout: main
          checkout_description: zuul branch
          commit: 1ae255187ec7dd23e908c7e13f1e3a81b32ebcba
          name: osism/k8s-capi-images
          required: false
          short_name: k8s-capi-images
          src_dir: src/github.com/osism/k8s-capi-images
      ref: refs/pull/344/head
      resources: {}
      tenant: osism
      timeout: 7200
      topic: null
      voting: true
