all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    ubuntu-noble:
      ansible_connection: ssh
      ansible_host: 2a13:1a81:8000:3124:f816:3eff:fe9b:44a2
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      docker_namespace: kolla
      nodepool:
        az: nova
        cloud: regiocloud-a-ci
        external_id: 0f3299f6-263a-45a4-bdc0-d728667c8a84
        host_id: 0d3d02185f810c959252bd1d303ec55040bf5bb0b401cceef814c3a7
        interface_ip: 2a13:1a81:8000:3124:f816:3eff:fe9b:44a2
        label: ubuntu-noble
        node_properties: {}
        private_ipv4: 10.128.7.238
        private_ipv6: null
        provider: regiocloud-a
        public_ipv4: 81.163.192.116
        public_ipv6: 2a13:1a81:8000:3124:f816:3eff:fe9b:44a2
        region: null
        slot: null
      push_images: false
      version_openstack: '2024.1'
  vars:
    docker_namespace: kolla
    push_images: false
    version_openstack: '2024.1'
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-config/zuul.d/jobs.yaml@main#2>'
      - '<Job container-images-kolla-patch explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/container-images-kolla/.zuul.yaml@main#76>'
      - '<Job container-images-kolla-patch-2024.1 explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/container-images-kolla/.zuul.yaml@main#94>'
      - '<Job container-images-kolla-patch-2024.1 explicit: None implied: None source:
        osism/container-images-kolla/.zuul.yaml@main#213>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: 925cf2ebf8fa4ad8bb1c33a542cf9f22
      build_refs:
      - branch: main
        change: '762'
        change_message: "Build 2024.1 from unmaintained sources\n\n> [!IMPORTANT]\n>
          Cross-repo change. **Merge `osism/release#2640` first**, then this PR.\n>
          See [Merge order](#merge-order) \u2014 the reverse order builds successfully\n>
          while silently dropping nine fixes.\n\nOpenStack 2024.1 is in the unmaintained
          phase upstream. `001-prepare.sh`\nalready checks out `origin/unmaintained/2024.1`
          for the kolla repository, but\nthe OpenStack project sources are fetched
          as branch tarballs from\n`tarballs.opendev.org`, and those were still requested
          under their\n`stable-2024.1` names.\n\nopendev keeps serving the `stable-2024.1`
          artifacts but stopped refreshing them\nwhen the branches were renamed, so
          they are frozen at the final\n`stable/2024.1` state. The `wget` succeeds
          and `kolla-build` reports no error,\nso the 2024.1 images were silently
          built from Sep/Oct 2025 sources \u2014 the\n`neutron-server:2024.1` image
          rebuilt on 2026-07-30 still ships\n`neutron-24.2.2.dev23` and is still vulnerable
          to CVE-2026-55707.\n\n- https://osism.tech/docs/appendix/security/ossa-2026-032/\n-
          https://bugs.launchpad.net/neutron/+bug/2152113\n- https://review.opendev.org/c/openstack/neutron/+/999186\n\n##
          Change\n\n**1. Requirements tarball.** `scripts/002-generate.sh` hardcoded\n`requirements-stable-$OPENSTACK_VERSION`.
          It now selects the branch explicitly,\nmirroring the checkout already present
          in `001-prepare.sh`. Verified:\n2024.1 \u2192 `requirements-unmaintained-2024.1.tar.gz`;
          2024.2 and 2025.1\nunchanged on `stable-`.\n\nThe per-project source refs
          live in the release repository and are switched\nthere.\n\n**2. Nine patches
          removed.** These have merged upstream into\n`unmaintained/2024.1` and no
          longer apply once the sources come from that\nbranch. A failing `patch --dry-run`
          aborts `003-patch.sh`, so leaving them in\nwould break the build:\n\n```\nneutron:
          \ 0001-Fix-cross-project-access-to-router-conntrack-helpers\nkeystone: 0002,
          0004, 0005, 0006, 0007, 0008\nnova:     0001-Fix-mutating-global-config-in-websocket-proxy\n
          \         cve-2026-46448-eom-2024.1\n```\n\nThat these nine were already
          upstream is itself the argument for this change:\nthey were re-carried downstream
          by hand while upstream had backported them to\nthe branch we were not reading.\n\n`patches/2024.1/neutron/`
          becomes empty. The CVE-2026-55707 fix now comes from\nupstream instead of
          the downstream patch that was added in #758 and dropped\nagain in #760.\n\n##
          Verification\n\nPatches applied against the unmaintained tarballs the way
          `003-patch.sh` does\nit \u2014 cumulative, `sort` order, `patch --forward
          --batch -p1`:\n\n| Project | patches after this change | result |\n|---|---|---|\n|
          neutron | 0 | \u2014 |\n| keystone | 4 (`0009`\u2013`0012`) | all apply
          |\n| nova | 1 (domain isolation feature patch) | applies |\n| cinder | 1
          | applies |\n| neutron-dynamic-routing | 1 | applies |\n\nAlso confirmed:
          all 21 projects plus `requirements` have an\n`unmaintained-2024.1` artifact,
          and the extracted\n`neutron-unmaintained-2024.1.tar.gz` contains the ownership
          check.\n\n## Merge order\n\nThere is no `gate` pipeline, so the two PRs
          cannot be co-merged.\n\n| Order | Effect in the window between merges |\n|---|---|\n|
          Companion first, then this | New refs while these nine patches are still
          present \u2192 `003-patch.sh` fails loudly on an already-applied patch.
          Nothing bad ships. |\n| **This PR first** | Patches removed while refs are
          still frozen \u2192 builds succeed and **silently drop nine security fixes**.
          Avoid. |\n\n## After merge\n\n`post` fires `container-images-kolla-push-2024.1`.
          Verify the published image\nby content rather than by label or build date:\n\n```sh\ndocker
          run --rm --entrypoint sh registry.osism.tech/kolla/neutron-server:2024.1
          -c \\\n  'sed -n \"/def onboard_network_subnets/,/return onboard_info/p\"
          \\\n   /var/lib/kolla/venv/lib/python3.*/site-packages/neutron/db/db_base_plugin_v2.py'\n```\n\nExpect
          the `context.is_admin` / `project_id != context.project_id` /\n`NotAuthorized`
          block, and the source directory to advance from\n`neutron-24.2.2.dev23`
          to `neutron-24.2.3.dev33` or later.\n\n## Companion PR\n\n- osism/release#2640\n\n\U0001F916
          Generated with [Claude Code](https://claude.com/claude-code)"
        change_url: https://github.com/osism/container-images-kolla/pull/762
        commit_id: b288d349f01c0d3435f7bcf5633557380722a988
        patchset: b288d349f01c0d3435f7bcf5633557380722a988
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/container-images-kolla
          name: osism/container-images-kolla
          short_name: container-images-kolla
        src_dir: src/github.com/osism/container-images-kolla
        topic: null
      buildset: e2168d45a0df4708924c5a706b9917fe
      buildset_refs:
      - branch: main
        change: '762'
        change_message: "Build 2024.1 from unmaintained sources\n\n> [!IMPORTANT]\n>
          Cross-repo change. **Merge `osism/release#2640` first**, then this PR.\n>
          See [Merge order](#merge-order) \u2014 the reverse order builds successfully\n>
          while silently dropping nine fixes.\n\nOpenStack 2024.1 is in the unmaintained
          phase upstream. `001-prepare.sh`\nalready checks out `origin/unmaintained/2024.1`
          for the kolla repository, but\nthe OpenStack project sources are fetched
          as branch tarballs from\n`tarballs.opendev.org`, and those were still requested
          under their\n`stable-2024.1` names.\n\nopendev keeps serving the `stable-2024.1`
          artifacts but stopped refreshing them\nwhen the branches were renamed, so
          they are frozen at the final\n`stable/2024.1` state. The `wget` succeeds
          and `kolla-build` reports no error,\nso the 2024.1 images were silently
          built from Sep/Oct 2025 sources \u2014 the\n`neutron-server:2024.1` image
          rebuilt on 2026-07-30 still ships\n`neutron-24.2.2.dev23` and is still vulnerable
          to CVE-2026-55707.\n\n- https://osism.tech/docs/appendix/security/ossa-2026-032/\n-
          https://bugs.launchpad.net/neutron/+bug/2152113\n- https://review.opendev.org/c/openstack/neutron/+/999186\n\n##
          Change\n\n**1. Requirements tarball.** `scripts/002-generate.sh` hardcoded\n`requirements-stable-$OPENSTACK_VERSION`.
          It now selects the branch explicitly,\nmirroring the checkout already present
          in `001-prepare.sh`. Verified:\n2024.1 \u2192 `requirements-unmaintained-2024.1.tar.gz`;
          2024.2 and 2025.1\nunchanged on `stable-`.\n\nThe per-project source refs
          live in the release repository and are switched\nthere.\n\n**2. Nine patches
          removed.** These have merged upstream into\n`unmaintained/2024.1` and no
          longer apply once the sources come from that\nbranch. A failing `patch --dry-run`
          aborts `003-patch.sh`, so leaving them in\nwould break the build:\n\n```\nneutron:
          \ 0001-Fix-cross-project-access-to-router-conntrack-helpers\nkeystone: 0002,
          0004, 0005, 0006, 0007, 0008\nnova:     0001-Fix-mutating-global-config-in-websocket-proxy\n
          \         cve-2026-46448-eom-2024.1\n```\n\nThat these nine were already
          upstream is itself the argument for this change:\nthey were re-carried downstream
          by hand while upstream had backported them to\nthe branch we were not reading.\n\n`patches/2024.1/neutron/`
          becomes empty. The CVE-2026-55707 fix now comes from\nupstream instead of
          the downstream patch that was added in #758 and dropped\nagain in #760.\n\n##
          Verification\n\nPatches applied against the unmaintained tarballs the way
          `003-patch.sh` does\nit \u2014 cumulative, `sort` order, `patch --forward
          --batch -p1`:\n\n| Project | patches after this change | result |\n|---|---|---|\n|
          neutron | 0 | \u2014 |\n| keystone | 4 (`0009`\u2013`0012`) | all apply
          |\n| nova | 1 (domain isolation feature patch) | applies |\n| cinder | 1
          | applies |\n| neutron-dynamic-routing | 1 | applies |\n\nAlso confirmed:
          all 21 projects plus `requirements` have an\n`unmaintained-2024.1` artifact,
          and the extracted\n`neutron-unmaintained-2024.1.tar.gz` contains the ownership
          check.\n\n## Merge order\n\nThere is no `gate` pipeline, so the two PRs
          cannot be co-merged.\n\n| Order | Effect in the window between merges |\n|---|---|\n|
          Companion first, then this | New refs while these nine patches are still
          present \u2192 `003-patch.sh` fails loudly on an already-applied patch.
          Nothing bad ships. |\n| **This PR first** | Patches removed while refs are
          still frozen \u2192 builds succeed and **silently drop nine security fixes**.
          Avoid. |\n\n## After merge\n\n`post` fires `container-images-kolla-push-2024.1`.
          Verify the published image\nby content rather than by label or build date:\n\n```sh\ndocker
          run --rm --entrypoint sh registry.osism.tech/kolla/neutron-server:2024.1
          -c \\\n  'sed -n \"/def onboard_network_subnets/,/return onboard_info/p\"
          \\\n   /var/lib/kolla/venv/lib/python3.*/site-packages/neutron/db/db_base_plugin_v2.py'\n```\n\nExpect
          the `context.is_admin` / `project_id != context.project_id` /\n`NotAuthorized`
          block, and the source directory to advance from\n`neutron-24.2.2.dev23`
          to `neutron-24.2.3.dev33` or later.\n\n## Companion PR\n\n- osism/release#2640\n\n\U0001F916
          Generated with [Claude Code](https://claude.com/claude-code)"
        change_url: https://github.com/osism/container-images-kolla/pull/762
        commit_id: b288d349f01c0d3435f7bcf5633557380722a988
        patchset: b288d349f01c0d3435f7bcf5633557380722a988
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/container-images-kolla
          name: osism/container-images-kolla
          short_name: container-images-kolla
        src_dir: src/github.com/osism/container-images-kolla
        topic: null
      change: '762'
      change_message: "Build 2024.1 from unmaintained sources\n\n> [!IMPORTANT]\n>
        Cross-repo change. **Merge `osism/release#2640` first**, then this PR.\n>
        See [Merge order](#merge-order) \u2014 the reverse order builds successfully\n>
        while silently dropping nine fixes.\n\nOpenStack 2024.1 is in the unmaintained
        phase upstream. `001-prepare.sh`\nalready checks out `origin/unmaintained/2024.1`
        for the kolla repository, but\nthe OpenStack project sources are fetched as
        branch tarballs from\n`tarballs.opendev.org`, and those were still requested
        under their\n`stable-2024.1` names.\n\nopendev keeps serving the `stable-2024.1`
        artifacts but stopped refreshing them\nwhen the branches were renamed, so
        they are frozen at the final\n`stable/2024.1` state. The `wget` succeeds and
        `kolla-build` reports no error,\nso the 2024.1 images were silently built
        from Sep/Oct 2025 sources \u2014 the\n`neutron-server:2024.1` image rebuilt
        on 2026-07-30 still ships\n`neutron-24.2.2.dev23` and is still vulnerable
        to CVE-2026-55707.\n\n- https://osism.tech/docs/appendix/security/ossa-2026-032/\n-
        https://bugs.launchpad.net/neutron/+bug/2152113\n- https://review.opendev.org/c/openstack/neutron/+/999186\n\n##
        Change\n\n**1. Requirements tarball.** `scripts/002-generate.sh` hardcoded\n`requirements-stable-$OPENSTACK_VERSION`.
        It now selects the branch explicitly,\nmirroring the checkout already present
        in `001-prepare.sh`. Verified:\n2024.1 \u2192 `requirements-unmaintained-2024.1.tar.gz`;
        2024.2 and 2025.1\nunchanged on `stable-`.\n\nThe per-project source refs
        live in the release repository and are switched\nthere.\n\n**2. Nine patches
        removed.** These have merged upstream into\n`unmaintained/2024.1` and no longer
        apply once the sources come from that\nbranch. A failing `patch --dry-run`
        aborts `003-patch.sh`, so leaving them in\nwould break the build:\n\n```\nneutron:
        \ 0001-Fix-cross-project-access-to-router-conntrack-helpers\nkeystone: 0002,
        0004, 0005, 0006, 0007, 0008\nnova:     0001-Fix-mutating-global-config-in-websocket-proxy\n
        \         cve-2026-46448-eom-2024.1\n```\n\nThat these nine were already upstream
        is itself the argument for this change:\nthey were re-carried downstream by
        hand while upstream had backported them to\nthe branch we were not reading.\n\n`patches/2024.1/neutron/`
        becomes empty. The CVE-2026-55707 fix now comes from\nupstream instead of
        the downstream patch that was added in #758 and dropped\nagain in #760.\n\n##
        Verification\n\nPatches applied against the unmaintained tarballs the way
        `003-patch.sh` does\nit \u2014 cumulative, `sort` order, `patch --forward
        --batch -p1`:\n\n| Project | patches after this change | result |\n|---|---|---|\n|
        neutron | 0 | \u2014 |\n| keystone | 4 (`0009`\u2013`0012`) | all apply |\n|
        nova | 1 (domain isolation feature patch) | applies |\n| cinder | 1 | applies
        |\n| neutron-dynamic-routing | 1 | applies |\n\nAlso confirmed: all 21 projects
        plus `requirements` have an\n`unmaintained-2024.1` artifact, and the extracted\n`neutron-unmaintained-2024.1.tar.gz`
        contains the ownership check.\n\n## Merge order\n\nThere is no `gate` pipeline,
        so the two PRs cannot be co-merged.\n\n| Order | Effect in the window between
        merges |\n|---|---|\n| Companion first, then this | New refs while these nine
        patches are still present \u2192 `003-patch.sh` fails loudly on an already-applied
        patch. Nothing bad ships. |\n| **This PR first** | Patches removed while refs
        are still frozen \u2192 builds succeed and **silently drop nine security fixes**.
        Avoid. |\n\n## After merge\n\n`post` fires `container-images-kolla-push-2024.1`.
        Verify the published image\nby content rather than by label or build date:\n\n```sh\ndocker
        run --rm --entrypoint sh registry.osism.tech/kolla/neutron-server:2024.1 -c
        \\\n  'sed -n \"/def onboard_network_subnets/,/return onboard_info/p\" \\\n
        \  /var/lib/kolla/venv/lib/python3.*/site-packages/neutron/db/db_base_plugin_v2.py'\n```\n\nExpect
        the `context.is_admin` / `project_id != context.project_id` /\n`NotAuthorized`
        block, and the source directory to advance from\n`neutron-24.2.2.dev23` to
        `neutron-24.2.3.dev33` or later.\n\n## Companion PR\n\n- osism/release#2640\n\n\U0001F916
        Generated with [Claude Code](https://claude.com/claude-code)"
      change_url: https://github.com/osism/container-images-kolla/pull/762
      child_jobs: []
      commit_id: b288d349f01c0d3435f7bcf5633557380722a988
      event_id: 1630a4b0-8cb2-11f1-90d0-9c49b7deb714
      executor:
        hostname: 521e9411259a
        inventory_file: /var/lib/zuul/builds/925cf2ebf8fa4ad8bb1c33a542cf9f22/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/925cf2ebf8fa4ad8bb1c33a542cf9f22/work/logs
        result_data_file: /var/lib/zuul/builds/925cf2ebf8fa4ad8bb1c33a542cf9f22/work/results.json
        src_root: /var/lib/zuul/builds/925cf2ebf8fa4ad8bb1c33a542cf9f22/work/src
        work_root: /var/lib/zuul/builds/925cf2ebf8fa4ad8bb1c33a542cf9f22/work
      include_vars: []
      items:
      - branch: main
        change: '762'
        change_message: "Build 2024.1 from unmaintained sources\n\n> [!IMPORTANT]\n>
          Cross-repo change. **Merge `osism/release#2640` first**, then this PR.\n>
          See [Merge order](#merge-order) \u2014 the reverse order builds successfully\n>
          while silently dropping nine fixes.\n\nOpenStack 2024.1 is in the unmaintained
          phase upstream. `001-prepare.sh`\nalready checks out `origin/unmaintained/2024.1`
          for the kolla repository, but\nthe OpenStack project sources are fetched
          as branch tarballs from\n`tarballs.opendev.org`, and those were still requested
          under their\n`stable-2024.1` names.\n\nopendev keeps serving the `stable-2024.1`
          artifacts but stopped refreshing them\nwhen the branches were renamed, so
          they are frozen at the final\n`stable/2024.1` state. The `wget` succeeds
          and `kolla-build` reports no error,\nso the 2024.1 images were silently
          built from Sep/Oct 2025 sources \u2014 the\n`neutron-server:2024.1` image
          rebuilt on 2026-07-30 still ships\n`neutron-24.2.2.dev23` and is still vulnerable
          to CVE-2026-55707.\n\n- https://osism.tech/docs/appendix/security/ossa-2026-032/\n-
          https://bugs.launchpad.net/neutron/+bug/2152113\n- https://review.opendev.org/c/openstack/neutron/+/999186\n\n##
          Change\n\n**1. Requirements tarball.** `scripts/002-generate.sh` hardcoded\n`requirements-stable-$OPENSTACK_VERSION`.
          It now selects the branch explicitly,\nmirroring the checkout already present
          in `001-prepare.sh`. Verified:\n2024.1 \u2192 `requirements-unmaintained-2024.1.tar.gz`;
          2024.2 and 2025.1\nunchanged on `stable-`.\n\nThe per-project source refs
          live in the release repository and are switched\nthere.\n\n**2. Nine patches
          removed.** These have merged upstream into\n`unmaintained/2024.1` and no
          longer apply once the sources come from that\nbranch. A failing `patch --dry-run`
          aborts `003-patch.sh`, so leaving them in\nwould break the build:\n\n```\nneutron:
          \ 0001-Fix-cross-project-access-to-router-conntrack-helpers\nkeystone: 0002,
          0004, 0005, 0006, 0007, 0008\nnova:     0001-Fix-mutating-global-config-in-websocket-proxy\n
          \         cve-2026-46448-eom-2024.1\n```\n\nThat these nine were already
          upstream is itself the argument for this change:\nthey were re-carried downstream
          by hand while upstream had backported them to\nthe branch we were not reading.\n\n`patches/2024.1/neutron/`
          becomes empty. The CVE-2026-55707 fix now comes from\nupstream instead of
          the downstream patch that was added in #758 and dropped\nagain in #760.\n\n##
          Verification\n\nPatches applied against the unmaintained tarballs the way
          `003-patch.sh` does\nit \u2014 cumulative, `sort` order, `patch --forward
          --batch -p1`:\n\n| Project | patches after this change | result |\n|---|---|---|\n|
          neutron | 0 | \u2014 |\n| keystone | 4 (`0009`\u2013`0012`) | all apply
          |\n| nova | 1 (domain isolation feature patch) | applies |\n| cinder | 1
          | applies |\n| neutron-dynamic-routing | 1 | applies |\n\nAlso confirmed:
          all 21 projects plus `requirements` have an\n`unmaintained-2024.1` artifact,
          and the extracted\n`neutron-unmaintained-2024.1.tar.gz` contains the ownership
          check.\n\n## Merge order\n\nThere is no `gate` pipeline, so the two PRs
          cannot be co-merged.\n\n| Order | Effect in the window between merges |\n|---|---|\n|
          Companion first, then this | New refs while these nine patches are still
          present \u2192 `003-patch.sh` fails loudly on an already-applied patch.
          Nothing bad ships. |\n| **This PR first** | Patches removed while refs are
          still frozen \u2192 builds succeed and **silently drop nine security fixes**.
          Avoid. |\n\n## After merge\n\n`post` fires `container-images-kolla-push-2024.1`.
          Verify the published image\nby content rather than by label or build date:\n\n```sh\ndocker
          run --rm --entrypoint sh registry.osism.tech/kolla/neutron-server:2024.1
          -c \\\n  'sed -n \"/def onboard_network_subnets/,/return onboard_info/p\"
          \\\n   /var/lib/kolla/venv/lib/python3.*/site-packages/neutron/db/db_base_plugin_v2.py'\n```\n\nExpect
          the `context.is_admin` / `project_id != context.project_id` /\n`NotAuthorized`
          block, and the source directory to advance from\n`neutron-24.2.2.dev23`
          to `neutron-24.2.3.dev33` or later.\n\n## Companion PR\n\n- osism/release#2640\n\n\U0001F916
          Generated with [Claude Code](https://claude.com/claude-code)"
        change_url: https://github.com/osism/container-images-kolla/pull/762
        commit_id: b288d349f01c0d3435f7bcf5633557380722a988
        patchset: b288d349f01c0d3435f7bcf5633557380722a988
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/container-images-kolla
          name: osism/container-images-kolla
          short_name: container-images-kolla
          src_dir: src/github.com/osism/container-images-kolla
        topic: null
      job: container-images-kolla-patch-2024.1
      jobtags: []
      max_attempts: 3
      message: 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
      patchset: b288d349f01c0d3435f7bcf5633557380722a988
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 71b711c422c10c242a8f785dc6d41ed9d12e9cd3
          trusted/project_1/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 242732586e2cba04d04867d3e302888c766bc231
          trusted/project_2/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: dcb06ea8a3ad422cc9d98b376216617b2daa6a02
          untrusted/project_0/github.com/osism/container-images-kolla:
            canonical_name: github.com/osism/container-images-kolla
            checkout: main
            commit: aa17246c27c972fa1a27eaa3488d73d9d05c6586
          untrusted/project_1/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 71b711c422c10c242a8f785dc6d41ed9d12e9cd3
          untrusted/project_2/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 242732586e2cba04d04867d3e302888c766bc231
          untrusted/project_3/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: dcb06ea8a3ad422cc9d98b376216617b2daa6a02
        playbooks:
        - path: untrusted/project_0/github.com/osism/container-images-kolla/playbooks/patch.yml
          roles:
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_1/zuul-config
            link_target: untrusted/project_1/github.com/osism/zuul-config
            role_path: ansible/playbook_0/role_1/zuul-config/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_2/openinfra-zuul-jobs
            link_target: untrusted/project_2/github.com/osism/openinfra-zuul-jobs
            role_path: ansible/playbook_0/role_2/openinfra-zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_3/zuul-jobs
            link_target: untrusted/project_3/github.com/osism/zuul-jobs
            role_path: ansible/playbook_0/role_3/zuul-jobs/roles
      post_review: false
      post_timeout: 1800
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/osism/container-images-kolla
        name: osism/container-images-kolla
        short_name: container-images-kolla
        src_dir: src/github.com/osism/container-images-kolla
      projects:
        github.com/osism/container-images-kolla:
          canonical_hostname: github.com
          canonical_name: github.com/osism/container-images-kolla
          checkout: main
          checkout_description: zuul branch
          commit: aa17246c27c972fa1a27eaa3488d73d9d05c6586
          name: osism/container-images-kolla
          required: false
          short_name: container-images-kolla
          src_dir: src/github.com/osism/container-images-kolla
      ref: refs/pull/762/head
      resources: {}
      tenant: osism
      timeout: 10800
      topic: null
      voting: true
