all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    debian-bookworm:
      ansible_connection: ssh
      ansible_host: 2a13:1a81:8000:3124:f816:3eff:fed5:a1e4
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      docker_namespace: osism
      docker_registry: osism.harbor.regio.digital
      nodepool:
        az: nova
        cloud: regiocloud-a-ci
        external_id: 8718288f-ded7-4b20-a047-0d51aa630f4f
        host_id: 0d3d02185f810c959252bd1d303ec55040bf5bb0b401cceef814c3a7
        interface_ip: 2a13:1a81:8000:3124:f816:3eff:fed5:a1e4
        label: debian-bookworm
        node_properties: {}
        private_ipv4: 10.128.7.213
        private_ipv6: null
        provider: regiocloud-a
        public_ipv4: 81.163.192.107
        public_ipv6: 2a13:1a81:8000:3124:f816:3eff:fed5:a1e4
        region: null
        slot: null
  vars:
    docker_namespace: osism
    docker_registry: osism.harbor.regio.digital
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-config/zuul.d/jobs.yaml@main#2>'
      - '<Job osism-kubernetes-build explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/osism-kubernetes/.zuul.yaml@main#75>'
      - '<Job osism-kubernetes-build explicit: None implied: None source: osism/osism-kubernetes/.zuul.yaml@main#104>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: 322fbf3daf5a490d8082d75e557610fd
      build_refs:
      - branch: main
        change: '323'
        change_message: 'Sync charts


          Refresh the vendored Helm charts to the latest upstream versions via `scripts/update-charts.py`.


          | Chart | From | To |

          | --- | --- | --- |

          | argo-cd | 9.0.5 | 10.3.2 |

          | cert-manager | 1.19.1 | 1.21.1 |

          | cert-manager-crds | 1.19.1 | 1.20.0 |

          | cloudnative-pg | 0.26.1 | 0.29.0 |

          | headlamp | 0.37.0 | 0.44.0 |

          | kube-prometheus-stack | 79.1.0 | 88.2.0 |

          | mariadb-operator | 25.10.2 | 26.6.0 |

          | mariadb-operator-crds | 25.10.2 | 26.6.0 |

          | memcached | 8.1.1 | 8.7.5 |

          | node-feature-discovery | 0.18.2 | 0.19.0 |

          | opensearch | 3.3.2 | 3.8.0 |

          | prometheus-operator-crds | 24.0.1 | 31.0.1 |

          | prometheus-pushgateway | 3.4.2 | 3.8.0 |

          | pxc-operator | 1.18.0 | 1.20.0 |

          | redis-operator | 0.22.2 | 0.25.0 |

          | teleport-cluster | 18.3.0 | 18.10.4 |

          | teleport-kube-agent | 18.3.0 | 18.10.4 |


          `keycloak` and `rabbitmq-cluster-operator` stay at their current pins.


          ## Notable structural changes


          Several of these are major bumps that move templates around:


          * **argo-cd 9 -> 10** renames `templates/crds/crd-project.yaml` to `crd-appproject.yaml`
          and adds VPA templates for most components plus Gateway API `listenerset`
          resources.

          * **cert-manager-crds 1.19 -> 1.20** drops the `crd-` filename prefix from
          all six CRD templates.

          * **cert-manager 1.19 -> 1.21** replaces `networkpolicy-egress.yaml` with
          separate `networkpolicy-cainjector.yaml` and `networkpolicy-cert-manager.yaml`.

          * **teleport-kube-agent 18.3 -> 18.10** moves the updater out of `templates/updater/`
          into a `teleport-kube-updater` subchart.


          ## Note on `.charts.yml`


          `scripts/update-charts.py` round-trips the file through `yaml.dump`, which
          drops comments, so it removed the Renovate note added in 5a5de9a. I restored
          the comment by hand in this commit. The script should probably patch the
          version lines in place instead, but that fix is out of scope here.


          ## Not verified


          `helm template` / `helm lint` were not run against the updated charts. The
          major bumps above deserve a check that the deployment playbooks still render.'
        change_url: https://github.com/osism/osism-kubernetes/pull/323
        commit_id: 5c0037e1df39776091ed8ba875e51a2f1e7ed887
        patchset: 5c0037e1df39776091ed8ba875e51a2f1e7ed887
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/osism-kubernetes
          name: osism/osism-kubernetes
          short_name: osism-kubernetes
        src_dir: src/github.com/osism/osism-kubernetes
        topic: null
      buildset: 0c92063d6d7743dc9810c5c767e13cff
      buildset_refs:
      - branch: main
        change: '323'
        change_message: 'Sync charts


          Refresh the vendored Helm charts to the latest upstream versions via `scripts/update-charts.py`.


          | Chart | From | To |

          | --- | --- | --- |

          | argo-cd | 9.0.5 | 10.3.2 |

          | cert-manager | 1.19.1 | 1.21.1 |

          | cert-manager-crds | 1.19.1 | 1.20.0 |

          | cloudnative-pg | 0.26.1 | 0.29.0 |

          | headlamp | 0.37.0 | 0.44.0 |

          | kube-prometheus-stack | 79.1.0 | 88.2.0 |

          | mariadb-operator | 25.10.2 | 26.6.0 |

          | mariadb-operator-crds | 25.10.2 | 26.6.0 |

          | memcached | 8.1.1 | 8.7.5 |

          | node-feature-discovery | 0.18.2 | 0.19.0 |

          | opensearch | 3.3.2 | 3.8.0 |

          | prometheus-operator-crds | 24.0.1 | 31.0.1 |

          | prometheus-pushgateway | 3.4.2 | 3.8.0 |

          | pxc-operator | 1.18.0 | 1.20.0 |

          | redis-operator | 0.22.2 | 0.25.0 |

          | teleport-cluster | 18.3.0 | 18.10.4 |

          | teleport-kube-agent | 18.3.0 | 18.10.4 |


          `keycloak` and `rabbitmq-cluster-operator` stay at their current pins.


          ## Notable structural changes


          Several of these are major bumps that move templates around:


          * **argo-cd 9 -> 10** renames `templates/crds/crd-project.yaml` to `crd-appproject.yaml`
          and adds VPA templates for most components plus Gateway API `listenerset`
          resources.

          * **cert-manager-crds 1.19 -> 1.20** drops the `crd-` filename prefix from
          all six CRD templates.

          * **cert-manager 1.19 -> 1.21** replaces `networkpolicy-egress.yaml` with
          separate `networkpolicy-cainjector.yaml` and `networkpolicy-cert-manager.yaml`.

          * **teleport-kube-agent 18.3 -> 18.10** moves the updater out of `templates/updater/`
          into a `teleport-kube-updater` subchart.


          ## Note on `.charts.yml`


          `scripts/update-charts.py` round-trips the file through `yaml.dump`, which
          drops comments, so it removed the Renovate note added in 5a5de9a. I restored
          the comment by hand in this commit. The script should probably patch the
          version lines in place instead, but that fix is out of scope here.


          ## Not verified


          `helm template` / `helm lint` were not run against the updated charts. The
          major bumps above deserve a check that the deployment playbooks still render.'
        change_url: https://github.com/osism/osism-kubernetes/pull/323
        commit_id: 5c0037e1df39776091ed8ba875e51a2f1e7ed887
        patchset: 5c0037e1df39776091ed8ba875e51a2f1e7ed887
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/osism-kubernetes
          name: osism/osism-kubernetes
          short_name: osism-kubernetes
        src_dir: src/github.com/osism/osism-kubernetes
        topic: null
      change: '323'
      change_message: 'Sync charts


        Refresh the vendored Helm charts to the latest upstream versions via `scripts/update-charts.py`.


        | Chart | From | To |

        | --- | --- | --- |

        | argo-cd | 9.0.5 | 10.3.2 |

        | cert-manager | 1.19.1 | 1.21.1 |

        | cert-manager-crds | 1.19.1 | 1.20.0 |

        | cloudnative-pg | 0.26.1 | 0.29.0 |

        | headlamp | 0.37.0 | 0.44.0 |

        | kube-prometheus-stack | 79.1.0 | 88.2.0 |

        | mariadb-operator | 25.10.2 | 26.6.0 |

        | mariadb-operator-crds | 25.10.2 | 26.6.0 |

        | memcached | 8.1.1 | 8.7.5 |

        | node-feature-discovery | 0.18.2 | 0.19.0 |

        | opensearch | 3.3.2 | 3.8.0 |

        | prometheus-operator-crds | 24.0.1 | 31.0.1 |

        | prometheus-pushgateway | 3.4.2 | 3.8.0 |

        | pxc-operator | 1.18.0 | 1.20.0 |

        | redis-operator | 0.22.2 | 0.25.0 |

        | teleport-cluster | 18.3.0 | 18.10.4 |

        | teleport-kube-agent | 18.3.0 | 18.10.4 |


        `keycloak` and `rabbitmq-cluster-operator` stay at their current pins.


        ## Notable structural changes


        Several of these are major bumps that move templates around:


        * **argo-cd 9 -> 10** renames `templates/crds/crd-project.yaml` to `crd-appproject.yaml`
        and adds VPA templates for most components plus Gateway API `listenerset`
        resources.

        * **cert-manager-crds 1.19 -> 1.20** drops the `crd-` filename prefix from
        all six CRD templates.

        * **cert-manager 1.19 -> 1.21** replaces `networkpolicy-egress.yaml` with
        separate `networkpolicy-cainjector.yaml` and `networkpolicy-cert-manager.yaml`.

        * **teleport-kube-agent 18.3 -> 18.10** moves the updater out of `templates/updater/`
        into a `teleport-kube-updater` subchart.


        ## Note on `.charts.yml`


        `scripts/update-charts.py` round-trips the file through `yaml.dump`, which
        drops comments, so it removed the Renovate note added in 5a5de9a. I restored
        the comment by hand in this commit. The script should probably patch the version
        lines in place instead, but that fix is out of scope here.


        ## Not verified


        `helm template` / `helm lint` were not run against the updated charts. The
        major bumps above deserve a check that the deployment playbooks still render.'
      change_url: https://github.com/osism/osism-kubernetes/pull/323
      child_jobs: []
      commit_id: 5c0037e1df39776091ed8ba875e51a2f1e7ed887
      event_id: 77cf5c20-9595-11f1-867e-00706bc83e51
      executor:
        hostname: 521e9411259a
        inventory_file: /var/lib/zuul/builds/322fbf3daf5a490d8082d75e557610fd/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/322fbf3daf5a490d8082d75e557610fd/work/logs
        result_data_file: /var/lib/zuul/builds/322fbf3daf5a490d8082d75e557610fd/work/results.json
        src_root: /var/lib/zuul/builds/322fbf3daf5a490d8082d75e557610fd/work/src
        work_root: /var/lib/zuul/builds/322fbf3daf5a490d8082d75e557610fd/work
      include_vars: []
      items:
      - branch: main
        change: '323'
        change_message: 'Sync charts


          Refresh the vendored Helm charts to the latest upstream versions via `scripts/update-charts.py`.


          | Chart | From | To |

          | --- | --- | --- |

          | argo-cd | 9.0.5 | 10.3.2 |

          | cert-manager | 1.19.1 | 1.21.1 |

          | cert-manager-crds | 1.19.1 | 1.20.0 |

          | cloudnative-pg | 0.26.1 | 0.29.0 |

          | headlamp | 0.37.0 | 0.44.0 |

          | kube-prometheus-stack | 79.1.0 | 88.2.0 |

          | mariadb-operator | 25.10.2 | 26.6.0 |

          | mariadb-operator-crds | 25.10.2 | 26.6.0 |

          | memcached | 8.1.1 | 8.7.5 |

          | node-feature-discovery | 0.18.2 | 0.19.0 |

          | opensearch | 3.3.2 | 3.8.0 |

          | prometheus-operator-crds | 24.0.1 | 31.0.1 |

          | prometheus-pushgateway | 3.4.2 | 3.8.0 |

          | pxc-operator | 1.18.0 | 1.20.0 |

          | redis-operator | 0.22.2 | 0.25.0 |

          | teleport-cluster | 18.3.0 | 18.10.4 |

          | teleport-kube-agent | 18.3.0 | 18.10.4 |


          `keycloak` and `rabbitmq-cluster-operator` stay at their current pins.


          ## Notable structural changes


          Several of these are major bumps that move templates around:


          * **argo-cd 9 -> 10** renames `templates/crds/crd-project.yaml` to `crd-appproject.yaml`
          and adds VPA templates for most components plus Gateway API `listenerset`
          resources.

          * **cert-manager-crds 1.19 -> 1.20** drops the `crd-` filename prefix from
          all six CRD templates.

          * **cert-manager 1.19 -> 1.21** replaces `networkpolicy-egress.yaml` with
          separate `networkpolicy-cainjector.yaml` and `networkpolicy-cert-manager.yaml`.

          * **teleport-kube-agent 18.3 -> 18.10** moves the updater out of `templates/updater/`
          into a `teleport-kube-updater` subchart.


          ## Note on `.charts.yml`


          `scripts/update-charts.py` round-trips the file through `yaml.dump`, which
          drops comments, so it removed the Renovate note added in 5a5de9a. I restored
          the comment by hand in this commit. The script should probably patch the
          version lines in place instead, but that fix is out of scope here.


          ## Not verified


          `helm template` / `helm lint` were not run against the updated charts. The
          major bumps above deserve a check that the deployment playbooks still render.'
        change_url: https://github.com/osism/osism-kubernetes/pull/323
        commit_id: 5c0037e1df39776091ed8ba875e51a2f1e7ed887
        patchset: 5c0037e1df39776091ed8ba875e51a2f1e7ed887
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/osism-kubernetes
          name: osism/osism-kubernetes
          short_name: osism-kubernetes
          src_dir: src/github.com/osism/osism-kubernetes
        topic: null
      job: osism-kubernetes-build
      jobtags: []
      max_attempts: 3
      message: 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
      patchset: 5c0037e1df39776091ed8ba875e51a2f1e7ed887
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 71b711c422c10c242a8f785dc6d41ed9d12e9cd3
          trusted/project_1/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 242732586e2cba04d04867d3e302888c766bc231
          trusted/project_2/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: b7c70f39598a39998dbbc6f833779355630f3a39
          untrusted/project_0/github.com/osism/osism-kubernetes:
            canonical_name: github.com/osism/osism-kubernetes
            checkout: main
            commit: e5527d25a5327886950d5382590655d3f3f91509
          untrusted/project_1/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 71b711c422c10c242a8f785dc6d41ed9d12e9cd3
          untrusted/project_2/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 242732586e2cba04d04867d3e302888c766bc231
          untrusted/project_3/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: b7c70f39598a39998dbbc6f833779355630f3a39
        playbooks:
        - path: untrusted/project_0/github.com/osism/osism-kubernetes/zuul-playbooks/build.yml
          roles:
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_0/role_0/osism-kubernetes
            link_target: untrusted/project_0/github.com/osism/osism-kubernetes
            role_path: ansible/playbook_0/role_0/osism-kubernetes/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_1/zuul-config
            link_target: untrusted/project_1/github.com/osism/zuul-config
            role_path: ansible/playbook_0/role_1/zuul-config/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_2/openinfra-zuul-jobs
            link_target: untrusted/project_2/github.com/osism/openinfra-zuul-jobs
            role_path: ansible/playbook_0/role_2/openinfra-zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_3/zuul-jobs
            link_target: untrusted/project_3/github.com/osism/zuul-jobs
            role_path: ansible/playbook_0/role_3/zuul-jobs/roles
      post_review: false
      post_timeout: 1800
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/osism/osism-kubernetes
        name: osism/osism-kubernetes
        short_name: osism-kubernetes
        src_dir: src/github.com/osism/osism-kubernetes
      projects:
        github.com/osism/osism-kubernetes:
          canonical_hostname: github.com
          canonical_name: github.com/osism/osism-kubernetes
          checkout: main
          checkout_description: zuul branch
          commit: e5527d25a5327886950d5382590655d3f3f91509
          name: osism/osism-kubernetes
          required: false
          short_name: osism-kubernetes
          src_dir: src/github.com/osism/osism-kubernetes
      ref: refs/pull/323/head
      resources: {}
      tenant: osism
      timeout: 1800
      topic: null
      voting: true
