all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    debian-bookworm:
      ansible_connection: ssh
      ansible_host: 2a13:1a81:8000:3124:f816:3eff:fe2e:1ba
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      nodepool:
        az: nova
        cloud: regiocloud-a-ci
        external_id: 3ebf38aa-bc20-488f-ac49-7a0a1f5756f6
        host_id: 5afd8fc909abddfe2ce3a956a91bbe56629648b7209fd0acfa541862
        interface_ip: 2a13:1a81:8000:3124:f816:3eff:fe2e:1ba
        label: debian-bookworm
        node_properties: {}
        private_ipv4: 10.128.0.108
        private_ipv6: null
        provider: regiocloud-a
        public_ipv4: 81.163.192.234
        public_ipv6: 2a13:1a81:8000:3124:f816:3eff:fe2e:1ba
        region: null
        slot: null
  vars:
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-config/zuul.d/jobs.yaml@main#2>'
      - '<Job yamllint explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-jobs/.zuul.yaml@main#59>'
      - '<Job yamllint explicit: None implied: None source: osism/container-images/.zuul.yaml@main#2>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: 5197631ea975443185ea7db7927ababf
      build_refs:
      - branch: main
        change: '942'
        change_message: "ara-server: revision-suffix the version tag\n\n## Problem\n\n`osism/ara-server`'s
          version tag is derived from the upstream `ara --version` and\npushed with
          a skip-if-exists guard, which makes it effectively **write-once**: once\n`osism/ara-server:1.7.5`
          exists, no rebuild ever re-pushes it. But the image bundles\nOSISM-specific
          content \u2014 a patched `0018` migration and `run.sh` \u2014 that changes\n**without**
          an upstream ARA version bump.\n\nThe result: a fix merged here (the history-preserving
          `0018` migration, `7c62552`)\nnever reaches a version-pinned deployment.
          The nightly build only refreshes\n`:latest`, while `:1.7.5` stays frozen
          at its first build (2026-02-26). OSISM 9\u219210\nupgrades with existing
          ARA history then fail the manager-upgrade health gate on the\ndata-lossy
          stock `0018`.\n\n## Change\n\nTag ara-server as `<ara version>-r<osism revision>`
          (Bitnami-style), e.g.\n`1.7.5-r1`, with the revision read from a new `ara-server/osism-revision`
          file.\nBump `osism-revision` in the same change that touches the ara-server
          image layer; a\nnew immutable tag is then minted instead of going stale.
          Existing tags are never\nmutated and `:latest` keeps tracking `main`.\n\nA
          `-rN` suffix is used, not a 4th dotted segment (`1.7.5.1`), because a dotted\nsegment
          is itself a legal upstream version and would collide the day upstream ships\none.
          `-rN` keeps the OSISM revision in a namespace upstream cannot reach (as
          Debian\ndoes with an upstream-revision). A `+` build-metadata separator
          is unavailable \u2014\nOCI tags forbid `+`.\n\n## Requires (must land together)\n\nFor
          Renovate to track `-rN` instead of treating it as an opaque variant suffix\n(like
          `-alpine`), this needs the companion regex-versioning rule:\n\n- osism/renovate-config#COMPANION\n\n##
          Draft\n\nDraft until the companion rule is in place and both can merge together.\n\n\U0001F916
          Generated with [Claude Code](https://claude.com/claude-code)\n"
        change_url: https://github.com/osism/container-images/pull/942
        commit_id: e1323a0fa3d4d74267f7f6c3f384267af985c0c6
        patchset: e1323a0fa3d4d74267f7f6c3f384267af985c0c6
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/container-images
          name: osism/container-images
          short_name: container-images
        src_dir: src/github.com/osism/container-images
        topic: null
      buildset: 2068a5ca63a646048433b8f5d9573b0a
      buildset_refs:
      - branch: main
        change: '942'
        change_message: "ara-server: revision-suffix the version tag\n\n## Problem\n\n`osism/ara-server`'s
          version tag is derived from the upstream `ara --version` and\npushed with
          a skip-if-exists guard, which makes it effectively **write-once**: once\n`osism/ara-server:1.7.5`
          exists, no rebuild ever re-pushes it. But the image bundles\nOSISM-specific
          content \u2014 a patched `0018` migration and `run.sh` \u2014 that changes\n**without**
          an upstream ARA version bump.\n\nThe result: a fix merged here (the history-preserving
          `0018` migration, `7c62552`)\nnever reaches a version-pinned deployment.
          The nightly build only refreshes\n`:latest`, while `:1.7.5` stays frozen
          at its first build (2026-02-26). OSISM 9\u219210\nupgrades with existing
          ARA history then fail the manager-upgrade health gate on the\ndata-lossy
          stock `0018`.\n\n## Change\n\nTag ara-server as `<ara version>-r<osism revision>`
          (Bitnami-style), e.g.\n`1.7.5-r1`, with the revision read from a new `ara-server/osism-revision`
          file.\nBump `osism-revision` in the same change that touches the ara-server
          image layer; a\nnew immutable tag is then minted instead of going stale.
          Existing tags are never\nmutated and `:latest` keeps tracking `main`.\n\nA
          `-rN` suffix is used, not a 4th dotted segment (`1.7.5.1`), because a dotted\nsegment
          is itself a legal upstream version and would collide the day upstream ships\none.
          `-rN` keeps the OSISM revision in a namespace upstream cannot reach (as
          Debian\ndoes with an upstream-revision). A `+` build-metadata separator
          is unavailable \u2014\nOCI tags forbid `+`.\n\n## Requires (must land together)\n\nFor
          Renovate to track `-rN` instead of treating it as an opaque variant suffix\n(like
          `-alpine`), this needs the companion regex-versioning rule:\n\n- osism/renovate-config#COMPANION\n\n##
          Draft\n\nDraft until the companion rule is in place and both can merge together.\n\n\U0001F916
          Generated with [Claude Code](https://claude.com/claude-code)\n"
        change_url: https://github.com/osism/container-images/pull/942
        commit_id: e1323a0fa3d4d74267f7f6c3f384267af985c0c6
        patchset: e1323a0fa3d4d74267f7f6c3f384267af985c0c6
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/container-images
          name: osism/container-images
          short_name: container-images
        src_dir: src/github.com/osism/container-images
        topic: null
      change: '942'
      change_message: "ara-server: revision-suffix the version tag\n\n## Problem\n\n`osism/ara-server`'s
        version tag is derived from the upstream `ara --version` and\npushed with
        a skip-if-exists guard, which makes it effectively **write-once**: once\n`osism/ara-server:1.7.5`
        exists, no rebuild ever re-pushes it. But the image bundles\nOSISM-specific
        content \u2014 a patched `0018` migration and `run.sh` \u2014 that changes\n**without**
        an upstream ARA version bump.\n\nThe result: a fix merged here (the history-preserving
        `0018` migration, `7c62552`)\nnever reaches a version-pinned deployment. The
        nightly build only refreshes\n`:latest`, while `:1.7.5` stays frozen at its
        first build (2026-02-26). OSISM 9\u219210\nupgrades with existing ARA history
        then fail the manager-upgrade health gate on the\ndata-lossy stock `0018`.\n\n##
        Change\n\nTag ara-server as `<ara version>-r<osism revision>` (Bitnami-style),
        e.g.\n`1.7.5-r1`, with the revision read from a new `ara-server/osism-revision`
        file.\nBump `osism-revision` in the same change that touches the ara-server
        image layer; a\nnew immutable tag is then minted instead of going stale. Existing
        tags are never\nmutated and `:latest` keeps tracking `main`.\n\nA `-rN` suffix
        is used, not a 4th dotted segment (`1.7.5.1`), because a dotted\nsegment is
        itself a legal upstream version and would collide the day upstream ships\none.
        `-rN` keeps the OSISM revision in a namespace upstream cannot reach (as Debian\ndoes
        with an upstream-revision). A `+` build-metadata separator is unavailable
        \u2014\nOCI tags forbid `+`.\n\n## Requires (must land together)\n\nFor Renovate
        to track `-rN` instead of treating it as an opaque variant suffix\n(like `-alpine`),
        this needs the companion regex-versioning rule:\n\n- osism/renovate-config#COMPANION\n\n##
        Draft\n\nDraft until the companion rule is in place and both can merge together.\n\n\U0001F916
        Generated with [Claude Code](https://claude.com/claude-code)\n"
      change_url: https://github.com/osism/container-images/pull/942
      child_jobs: []
      commit_id: e1323a0fa3d4d74267f7f6c3f384267af985c0c6
      event_id: 64c8acd0-7335-11f1-89fc-c0514583cf2c
      executor:
        hostname: 521e9411259a
        inventory_file: /var/lib/zuul/builds/5197631ea975443185ea7db7927ababf/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/5197631ea975443185ea7db7927ababf/work/logs
        result_data_file: /var/lib/zuul/builds/5197631ea975443185ea7db7927ababf/work/results.json
        src_root: /var/lib/zuul/builds/5197631ea975443185ea7db7927ababf/work/src
        work_root: /var/lib/zuul/builds/5197631ea975443185ea7db7927ababf/work
      include_vars: []
      items:
      - branch: main
        change: '942'
        change_message: "ara-server: revision-suffix the version tag\n\n## Problem\n\n`osism/ara-server`'s
          version tag is derived from the upstream `ara --version` and\npushed with
          a skip-if-exists guard, which makes it effectively **write-once**: once\n`osism/ara-server:1.7.5`
          exists, no rebuild ever re-pushes it. But the image bundles\nOSISM-specific
          content \u2014 a patched `0018` migration and `run.sh` \u2014 that changes\n**without**
          an upstream ARA version bump.\n\nThe result: a fix merged here (the history-preserving
          `0018` migration, `7c62552`)\nnever reaches a version-pinned deployment.
          The nightly build only refreshes\n`:latest`, while `:1.7.5` stays frozen
          at its first build (2026-02-26). OSISM 9\u219210\nupgrades with existing
          ARA history then fail the manager-upgrade health gate on the\ndata-lossy
          stock `0018`.\n\n## Change\n\nTag ara-server as `<ara version>-r<osism revision>`
          (Bitnami-style), e.g.\n`1.7.5-r1`, with the revision read from a new `ara-server/osism-revision`
          file.\nBump `osism-revision` in the same change that touches the ara-server
          image layer; a\nnew immutable tag is then minted instead of going stale.
          Existing tags are never\nmutated and `:latest` keeps tracking `main`.\n\nA
          `-rN` suffix is used, not a 4th dotted segment (`1.7.5.1`), because a dotted\nsegment
          is itself a legal upstream version and would collide the day upstream ships\none.
          `-rN` keeps the OSISM revision in a namespace upstream cannot reach (as
          Debian\ndoes with an upstream-revision). A `+` build-metadata separator
          is unavailable \u2014\nOCI tags forbid `+`.\n\n## Requires (must land together)\n\nFor
          Renovate to track `-rN` instead of treating it as an opaque variant suffix\n(like
          `-alpine`), this needs the companion regex-versioning rule:\n\n- osism/renovate-config#COMPANION\n\n##
          Draft\n\nDraft until the companion rule is in place and both can merge together.\n\n\U0001F916
          Generated with [Claude Code](https://claude.com/claude-code)\n"
        change_url: https://github.com/osism/container-images/pull/942
        commit_id: e1323a0fa3d4d74267f7f6c3f384267af985c0c6
        patchset: e1323a0fa3d4d74267f7f6c3f384267af985c0c6
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/container-images
          name: osism/container-images
          short_name: container-images
          src_dir: src/github.com/osism/container-images
        topic: null
      job: yamllint
      jobtags: []
      max_attempts: 3
      message: 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
      patchset: e1323a0fa3d4d74267f7f6c3f384267af985c0c6
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 71b711c422c10c242a8f785dc6d41ed9d12e9cd3
          trusted/project_1/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 242732586e2cba04d04867d3e302888c766bc231
          trusted/project_2/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 1d71e58c93442038e695a5d883d57a603182c7ae
          untrusted/project_0/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 1d71e58c93442038e695a5d883d57a603182c7ae
          untrusted/project_1/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 71b711c422c10c242a8f785dc6d41ed9d12e9cd3
          untrusted/project_2/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 242732586e2cba04d04867d3e302888c766bc231
        playbooks:
        - path: untrusted/project_0/github.com/osism/zuul-jobs/playbooks/yamllint/run.yaml
          roles:
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_0/zuul-config
            link_target: untrusted/project_1/github.com/osism/zuul-config
            role_path: ansible/playbook_0/role_0/zuul-config/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_1/openinfra-zuul-jobs
            link_target: untrusted/project_2/github.com/osism/openinfra-zuul-jobs
            role_path: ansible/playbook_0/role_1/openinfra-zuul-jobs/roles
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_0/role_2/zuul-jobs
            link_target: untrusted/project_0/github.com/osism/zuul-jobs
            role_path: ansible/playbook_0/role_2/zuul-jobs/roles
      post_review: false
      post_timeout: 1800
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/osism/container-images
        name: osism/container-images
        short_name: container-images
        src_dir: src/github.com/osism/container-images
      projects:
        github.com/osism/container-images:
          canonical_hostname: github.com
          canonical_name: github.com/osism/container-images
          checkout: main
          checkout_description: zuul branch
          commit: c24900963a5ca2b677a6f557cbe5892b757b9864
          name: osism/container-images
          required: false
          short_name: container-images
          src_dir: src/github.com/osism/container-images
      ref: refs/pull/942/head
      resources: {}
      tenant: osism
      timeout: 1800
      topic: null
      voting: true
