all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    debian-bookworm:
      ansible_connection: ssh
      ansible_host: 2a13:1a81:8000:3124:f816:3eff:fea5:6d3c
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      nodepool:
        az: nova
        cloud: regiocloud-a-ci
        external_id: 2424cc1f-1a9f-4d37-9fec-f5e9a8b3cada
        host_id: 4667d18e0398acd2fb730ad41ba32e35789c4ac8cd4c0875d25b316b
        interface_ip: 2a13:1a81:8000:3124:f816:3eff:fea5:6d3c
        label: debian-bookworm
        node_properties: {}
        private_ipv4: 10.128.0.101
        private_ipv6: null
        provider: regiocloud-a
        public_ipv4: 81.163.192.157
        public_ipv6: 2a13:1a81:8000:3124:f816:3eff:fea5:6d3c
        region: null
        slot: null
  vars:
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-config/zuul.d/jobs.yaml@main#2>'
      - '<Job python-black explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-jobs/.zuul.yaml@main#54>'
      - '<Job python-black explicit: None implied: None source: osism/python-osism/.zuul.yaml@main#133>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: 5c1e08ce8263484c821460b73df17167
      build_refs:
      - branch: main
        change: '2120'
        change_message: "Fix masking of ironic_osism_* secrets in kernel_append_params\n\nWhen
          ironic_osism_* values in the Netbox secrets custom field are vault-encrypted
          and decryption fails in the API context, deep_decrypt silently removes the
          keys, so no secret values are collected for string replacement. This leaves
          passwords exposed in the API response.\r\n\r\nAdd a regex-based fallback:
          before decryption, collect ironic_osism_* key names and derive kernel parameter
          names (ironic_osism_aa -> osism-aa). After value-based replacement, also
          mask param=value patterns by name, ensuring secrets are masked even when
          vault decryption is unavailable.\r\n\r\nAI-assisted: Claude Code"
        change_url: https://github.com/osism/python-osism/pull/2120
        commit_id: 7a11fbb1d2a28ce61c7838725581c4fffebd2bf7
        patchset: 7a11fbb1d2a28ce61c7838725581c4fffebd2bf7
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/python-osism
          name: osism/python-osism
          short_name: python-osism
        src_dir: src/github.com/osism/python-osism
        topic: null
      buildset: b7a2ccab454944b7af38b21c1302c43b
      buildset_refs:
      - branch: main
        change: '2120'
        change_message: "Fix masking of ironic_osism_* secrets in kernel_append_params\n\nWhen
          ironic_osism_* values in the Netbox secrets custom field are vault-encrypted
          and decryption fails in the API context, deep_decrypt silently removes the
          keys, so no secret values are collected for string replacement. This leaves
          passwords exposed in the API response.\r\n\r\nAdd a regex-based fallback:
          before decryption, collect ironic_osism_* key names and derive kernel parameter
          names (ironic_osism_aa -> osism-aa). After value-based replacement, also
          mask param=value patterns by name, ensuring secrets are masked even when
          vault decryption is unavailable.\r\n\r\nAI-assisted: Claude Code"
        change_url: https://github.com/osism/python-osism/pull/2120
        commit_id: 7a11fbb1d2a28ce61c7838725581c4fffebd2bf7
        patchset: 7a11fbb1d2a28ce61c7838725581c4fffebd2bf7
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/python-osism
          name: osism/python-osism
          short_name: python-osism
        src_dir: src/github.com/osism/python-osism
        topic: null
      change: '2120'
      change_message: "Fix masking of ironic_osism_* secrets in kernel_append_params\n\nWhen
        ironic_osism_* values in the Netbox secrets custom field are vault-encrypted
        and decryption fails in the API context, deep_decrypt silently removes the
        keys, so no secret values are collected for string replacement. This leaves
        passwords exposed in the API response.\r\n\r\nAdd a regex-based fallback:
        before decryption, collect ironic_osism_* key names and derive kernel parameter
        names (ironic_osism_aa -> osism-aa). After value-based replacement, also mask
        param=value patterns by name, ensuring secrets are masked even when vault
        decryption is unavailable.\r\n\r\nAI-assisted: Claude Code"
      change_url: https://github.com/osism/python-osism/pull/2120
      child_jobs: []
      commit_id: 7a11fbb1d2a28ce61c7838725581c4fffebd2bf7
      event_id: cf2e0500-1ef0-11f1-9d81-a98c24984db8
      executor:
        hostname: 521e9411259a
        inventory_file: /var/lib/zuul/builds/5c1e08ce8263484c821460b73df17167/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/5c1e08ce8263484c821460b73df17167/work/logs
        result_data_file: /var/lib/zuul/builds/5c1e08ce8263484c821460b73df17167/work/results.json
        src_root: /var/lib/zuul/builds/5c1e08ce8263484c821460b73df17167/work/src
        work_root: /var/lib/zuul/builds/5c1e08ce8263484c821460b73df17167/work
      include_vars: []
      items:
      - branch: main
        change: '2120'
        change_message: "Fix masking of ironic_osism_* secrets in kernel_append_params\n\nWhen
          ironic_osism_* values in the Netbox secrets custom field are vault-encrypted
          and decryption fails in the API context, deep_decrypt silently removes the
          keys, so no secret values are collected for string replacement. This leaves
          passwords exposed in the API response.\r\n\r\nAdd a regex-based fallback:
          before decryption, collect ironic_osism_* key names and derive kernel parameter
          names (ironic_osism_aa -> osism-aa). After value-based replacement, also
          mask param=value patterns by name, ensuring secrets are masked even when
          vault decryption is unavailable.\r\n\r\nAI-assisted: Claude Code"
        change_url: https://github.com/osism/python-osism/pull/2120
        commit_id: 7a11fbb1d2a28ce61c7838725581c4fffebd2bf7
        patchset: 7a11fbb1d2a28ce61c7838725581c4fffebd2bf7
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/python-osism
          name: osism/python-osism
          short_name: python-osism
          src_dir: src/github.com/osism/python-osism
        topic: null
      job: python-black
      jobtags: []
      max_attempts: 3
      message: Rml4IG1hc2tpbmcgb2YgaXJvbmljX29zaXNtXyogc2VjcmV0cyBpbiBrZXJuZWxfYXBwZW5kX3BhcmFtcwoKV2hlbiBpcm9uaWNfb3Npc21fKiB2YWx1ZXMgaW4gdGhlIE5ldGJveCBzZWNyZXRzIGN1c3RvbSBmaWVsZCBhcmUgdmF1bHQtZW5jcnlwdGVkIGFuZCBkZWNyeXB0aW9uIGZhaWxzIGluIHRoZSBBUEkgY29udGV4dCwgZGVlcF9kZWNyeXB0IHNpbGVudGx5IHJlbW92ZXMgdGhlIGtleXMsIHNvIG5vIHNlY3JldCB2YWx1ZXMgYXJlIGNvbGxlY3RlZCBmb3Igc3RyaW5nIHJlcGxhY2VtZW50LiBUaGlzIGxlYXZlcyBwYXNzd29yZHMgZXhwb3NlZCBpbiB0aGUgQVBJIHJlc3BvbnNlLg0KDQpBZGQgYSByZWdleC1iYXNlZCBmYWxsYmFjazogYmVmb3JlIGRlY3J5cHRpb24sIGNvbGxlY3QgaXJvbmljX29zaXNtXyoga2V5IG5hbWVzIGFuZCBkZXJpdmUga2VybmVsIHBhcmFtZXRlciBuYW1lcyAoaXJvbmljX29zaXNtX2FhIC0+IG9zaXNtLWFhKS4gQWZ0ZXIgdmFsdWUtYmFzZWQgcmVwbGFjZW1lbnQsIGFsc28gbWFzayBwYXJhbT12YWx1ZSBwYXR0ZXJucyBieSBuYW1lLCBlbnN1cmluZyBzZWNyZXRzIGFyZSBtYXNrZWQgZXZlbiB3aGVuIHZhdWx0IGRlY3J5cHRpb24gaXMgdW5hdmFpbGFibGUuDQoNCkFJLWFzc2lzdGVkOiBDbGF1ZGUgQ29kZQ==
      patchset: 7a11fbb1d2a28ce61c7838725581c4fffebd2bf7
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 4f450aa36c28b035ce97359a888edbd7599eaf31
          trusted/project_1/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 397240f42127868e42e86e6aeb120c2cb092d117
          untrusted/project_0/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: a01eed06dffe368c1d01819193bfadccb137414d
          untrusted/project_1/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 4f450aa36c28b035ce97359a888edbd7599eaf31
          untrusted/project_2/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 397240f42127868e42e86e6aeb120c2cb092d117
        playbooks:
        - path: untrusted/project_0/github.com/osism/zuul-jobs/playbooks/python-black/run.yml
          roles:
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_0/role_0/zuul-jobs
            link_target: untrusted/project_0/github.com/osism/zuul-jobs
            role_path: ansible/playbook_0/role_0/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_1/zuul-config
            link_target: untrusted/project_1/github.com/osism/zuul-config
            role_path: ansible/playbook_0/role_1/zuul-config/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_2/openinfra-zuul-jobs
            link_target: untrusted/project_2/github.com/osism/openinfra-zuul-jobs
            role_path: ansible/playbook_0/role_2/openinfra-zuul-jobs/roles
      post_review: false
      post_timeout: null
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/osism/python-osism
        name: osism/python-osism
        short_name: python-osism
        src_dir: src/github.com/osism/python-osism
      projects:
        github.com/osism/python-osism:
          canonical_hostname: github.com
          canonical_name: github.com/osism/python-osism
          checkout: main
          checkout_description: zuul branch
          commit: 1269202678ebbbcddced507637da461ed02d480e
          name: osism/python-osism
          required: false
          short_name: python-osism
          src_dir: src/github.com/osism/python-osism
      ref: refs/pull/2120/head
      resources: {}
      tenant: osism
      timeout: 1800
      topic: null
      voting: true
