all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    debian-bookworm:
      ansible_connection: ssh
      ansible_host: 2a13:1a81:8000:3124:f816:3eff:fe4b:4231
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      docker_namespace: osism
      docker_registry: osism.harbor.regio.digital
      nodepool:
        az: nova
        cloud: regiocloud-a-ci
        external_id: c4d45f1d-c905-40f7-93cd-cfe93a33ed20
        host_id: 82101243836454d7401d5893feae9e2c5df7cc291646d8a99b33b53b
        interface_ip: 2a13:1a81:8000:3124:f816:3eff:fe4b:4231
        label: debian-bookworm
        node_properties: {}
        private_ipv4: 10.128.7.93
        private_ipv6: null
        provider: regiocloud-a
        public_ipv4: 81.163.192.57
        public_ipv6: 2a13:1a81:8000:3124:f816:3eff:fe4b:4231
        region: null
        slot: null
      version_openstack: '2025.2'
  vars:
    docker_namespace: osism
    docker_registry: osism.harbor.regio.digital
    version_openstack: '2025.2'
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-config/zuul.d/jobs.yaml@main#2>'
      - '<Job container-image-kolla-ansible-build explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/container-image-kolla-ansible/.zuul.yaml@main#83>'
      - '<Job container-image-kolla-ansible-build-2025.2 explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/container-image-kolla-ansible/.zuul.yaml@main#103>'
      - '<Job container-image-kolla-ansible-build-2025.2 explicit: None implied: None
        source: osism/container-image-kolla-ansible/.zuul.yaml@main#162>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: e87c6ed79c8048fb967e4991b2dd25c1
      build_refs:
      - branch: main
        change: '903'
        change_message: "2025.1: fix NVMe and qemu-wrapper patch context\n\n## Summary\n\nTwo
          OSISM patches for `stable/2025.1` broke when upstream commit\n[`197d1a08e`](https://github.com/openstack/kolla-ansible/commit/197d1a08e)\n(\"Fix
          for overly restrictive permissions on ca-certificates directory\")\nmerged
          on 2026-05-13, changing `\"perm\": \"0600\"` \u2192 `\"0644\"` for the\nca-cert
          `config_files` entry in 135 service templates.\n\nBoth patches used `\"perm\":
          \"0600\"` as a hunk context line:\n\n- `add-glance-NVMe-NQN-and-ID.patch`
          \u2014 `glance-api.json.j2` hunk `@@ -42,6`\n- `add-option-to-deploy-qemu-wrapper-script.patch`
          \u2014 `nova-libvirt.json.j2` hunk `@@ -73,6`\n\nThis caused `Hunk #1 FAILED`
          for both patches, breaking the\n`container-image-kolla-ansible-push-2025.1`
          build since 2026-05-14.\n\nThe same upstream commit renders\n`fix-for-overly-restrictive-permissions-on-ca-certifi.patch`
          entirely\nredundant for `2025.1` (all its changes are now upstream), so
          it is\ndropped here as well.\n\n## Fix\n\n**Commit 1:** Update the context
          line in both broken hunks from\n`\"perm\": \"0600\"` to `\"perm\": \"0644\"`
          and update the `index` blob\nhashes accordingly.\n\n**Commit 2:** Remove
          `fix-for-overly-restrictive-permissions-on-ca-certifi.patch`\nfor `2025.1`
          and clear the now-stale `NOTES.md`. The equivalent patch\nfor `2025.2` is
          untouched \u2014 upstream `stable/2025.2` still has\n`\"perm\": \"0600\"`
          and needs it.\n\n## Test plan\n\n- [ ] Reproduced both hunk failures in
          a Debian Bookworm container (patch 2.7.6, fresh clone of upstream `stable/2025.1`)\n-
          [ ] Verified all 23 remaining `patches/2025.1/` patches apply cleanly after
          both commits (same container environment)\n- [ ] Verified all 21 `patches/2025.2/`
          patches apply cleanly against upstream `stable/2025.2` (fix-for still OK
          there)"
        change_url: https://github.com/osism/container-image-kolla-ansible/pull/903
        commit_id: 7a3113bd25b343095ad0b2995753e6e3588c5ec6
        patchset: 7a3113bd25b343095ad0b2995753e6e3588c5ec6
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/container-image-kolla-ansible
          name: osism/container-image-kolla-ansible
          short_name: container-image-kolla-ansible
        src_dir: src/github.com/osism/container-image-kolla-ansible
        topic: null
      buildset: d8c5095f804d4abd8f3d922a681a9228
      buildset_refs:
      - branch: main
        change: '903'
        change_message: "2025.1: fix NVMe and qemu-wrapper patch context\n\n## Summary\n\nTwo
          OSISM patches for `stable/2025.1` broke when upstream commit\n[`197d1a08e`](https://github.com/openstack/kolla-ansible/commit/197d1a08e)\n(\"Fix
          for overly restrictive permissions on ca-certificates directory\")\nmerged
          on 2026-05-13, changing `\"perm\": \"0600\"` \u2192 `\"0644\"` for the\nca-cert
          `config_files` entry in 135 service templates.\n\nBoth patches used `\"perm\":
          \"0600\"` as a hunk context line:\n\n- `add-glance-NVMe-NQN-and-ID.patch`
          \u2014 `glance-api.json.j2` hunk `@@ -42,6`\n- `add-option-to-deploy-qemu-wrapper-script.patch`
          \u2014 `nova-libvirt.json.j2` hunk `@@ -73,6`\n\nThis caused `Hunk #1 FAILED`
          for both patches, breaking the\n`container-image-kolla-ansible-push-2025.1`
          build since 2026-05-14.\n\nThe same upstream commit renders\n`fix-for-overly-restrictive-permissions-on-ca-certifi.patch`
          entirely\nredundant for `2025.1` (all its changes are now upstream), so
          it is\ndropped here as well.\n\n## Fix\n\n**Commit 1:** Update the context
          line in both broken hunks from\n`\"perm\": \"0600\"` to `\"perm\": \"0644\"`
          and update the `index` blob\nhashes accordingly.\n\n**Commit 2:** Remove
          `fix-for-overly-restrictive-permissions-on-ca-certifi.patch`\nfor `2025.1`
          and clear the now-stale `NOTES.md`. The equivalent patch\nfor `2025.2` is
          untouched \u2014 upstream `stable/2025.2` still has\n`\"perm\": \"0600\"`
          and needs it.\n\n## Test plan\n\n- [ ] Reproduced both hunk failures in
          a Debian Bookworm container (patch 2.7.6, fresh clone of upstream `stable/2025.1`)\n-
          [ ] Verified all 23 remaining `patches/2025.1/` patches apply cleanly after
          both commits (same container environment)\n- [ ] Verified all 21 `patches/2025.2/`
          patches apply cleanly against upstream `stable/2025.2` (fix-for still OK
          there)"
        change_url: https://github.com/osism/container-image-kolla-ansible/pull/903
        commit_id: 7a3113bd25b343095ad0b2995753e6e3588c5ec6
        patchset: 7a3113bd25b343095ad0b2995753e6e3588c5ec6
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/container-image-kolla-ansible
          name: osism/container-image-kolla-ansible
          short_name: container-image-kolla-ansible
        src_dir: src/github.com/osism/container-image-kolla-ansible
        topic: null
      change: '903'
      change_message: "2025.1: fix NVMe and qemu-wrapper patch context\n\n## Summary\n\nTwo
        OSISM patches for `stable/2025.1` broke when upstream commit\n[`197d1a08e`](https://github.com/openstack/kolla-ansible/commit/197d1a08e)\n(\"Fix
        for overly restrictive permissions on ca-certificates directory\")\nmerged
        on 2026-05-13, changing `\"perm\": \"0600\"` \u2192 `\"0644\"` for the\nca-cert
        `config_files` entry in 135 service templates.\n\nBoth patches used `\"perm\":
        \"0600\"` as a hunk context line:\n\n- `add-glance-NVMe-NQN-and-ID.patch`
        \u2014 `glance-api.json.j2` hunk `@@ -42,6`\n- `add-option-to-deploy-qemu-wrapper-script.patch`
        \u2014 `nova-libvirt.json.j2` hunk `@@ -73,6`\n\nThis caused `Hunk #1 FAILED`
        for both patches, breaking the\n`container-image-kolla-ansible-push-2025.1`
        build since 2026-05-14.\n\nThe same upstream commit renders\n`fix-for-overly-restrictive-permissions-on-ca-certifi.patch`
        entirely\nredundant for `2025.1` (all its changes are now upstream), so it
        is\ndropped here as well.\n\n## Fix\n\n**Commit 1:** Update the context line
        in both broken hunks from\n`\"perm\": \"0600\"` to `\"perm\": \"0644\"` and
        update the `index` blob\nhashes accordingly.\n\n**Commit 2:** Remove `fix-for-overly-restrictive-permissions-on-ca-certifi.patch`\nfor
        `2025.1` and clear the now-stale `NOTES.md`. The equivalent patch\nfor `2025.2`
        is untouched \u2014 upstream `stable/2025.2` still has\n`\"perm\": \"0600\"`
        and needs it.\n\n## Test plan\n\n- [ ] Reproduced both hunk failures in a
        Debian Bookworm container (patch 2.7.6, fresh clone of upstream `stable/2025.1`)\n-
        [ ] Verified all 23 remaining `patches/2025.1/` patches apply cleanly after
        both commits (same container environment)\n- [ ] Verified all 21 `patches/2025.2/`
        patches apply cleanly against upstream `stable/2025.2` (fix-for still OK there)"
      change_url: https://github.com/osism/container-image-kolla-ansible/pull/903
      child_jobs: []
      commit_id: 7a3113bd25b343095ad0b2995753e6e3588c5ec6
      event_id: 7138a560-4fc7-11f1-8bd3-ede62960d818
      executor:
        hostname: 521e9411259a
        inventory_file: /var/lib/zuul/builds/e87c6ed79c8048fb967e4991b2dd25c1/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/e87c6ed79c8048fb967e4991b2dd25c1/work/logs
        result_data_file: /var/lib/zuul/builds/e87c6ed79c8048fb967e4991b2dd25c1/work/results.json
        src_root: /var/lib/zuul/builds/e87c6ed79c8048fb967e4991b2dd25c1/work/src
        work_root: /var/lib/zuul/builds/e87c6ed79c8048fb967e4991b2dd25c1/work
      include_vars: []
      items:
      - branch: main
        change: '903'
        change_message: "2025.1: fix NVMe and qemu-wrapper patch context\n\n## Summary\n\nTwo
          OSISM patches for `stable/2025.1` broke when upstream commit\n[`197d1a08e`](https://github.com/openstack/kolla-ansible/commit/197d1a08e)\n(\"Fix
          for overly restrictive permissions on ca-certificates directory\")\nmerged
          on 2026-05-13, changing `\"perm\": \"0600\"` \u2192 `\"0644\"` for the\nca-cert
          `config_files` entry in 135 service templates.\n\nBoth patches used `\"perm\":
          \"0600\"` as a hunk context line:\n\n- `add-glance-NVMe-NQN-and-ID.patch`
          \u2014 `glance-api.json.j2` hunk `@@ -42,6`\n- `add-option-to-deploy-qemu-wrapper-script.patch`
          \u2014 `nova-libvirt.json.j2` hunk `@@ -73,6`\n\nThis caused `Hunk #1 FAILED`
          for both patches, breaking the\n`container-image-kolla-ansible-push-2025.1`
          build since 2026-05-14.\n\nThe same upstream commit renders\n`fix-for-overly-restrictive-permissions-on-ca-certifi.patch`
          entirely\nredundant for `2025.1` (all its changes are now upstream), so
          it is\ndropped here as well.\n\n## Fix\n\n**Commit 1:** Update the context
          line in both broken hunks from\n`\"perm\": \"0600\"` to `\"perm\": \"0644\"`
          and update the `index` blob\nhashes accordingly.\n\n**Commit 2:** Remove
          `fix-for-overly-restrictive-permissions-on-ca-certifi.patch`\nfor `2025.1`
          and clear the now-stale `NOTES.md`. The equivalent patch\nfor `2025.2` is
          untouched \u2014 upstream `stable/2025.2` still has\n`\"perm\": \"0600\"`
          and needs it.\n\n## Test plan\n\n- [ ] Reproduced both hunk failures in
          a Debian Bookworm container (patch 2.7.6, fresh clone of upstream `stable/2025.1`)\n-
          [ ] Verified all 23 remaining `patches/2025.1/` patches apply cleanly after
          both commits (same container environment)\n- [ ] Verified all 21 `patches/2025.2/`
          patches apply cleanly against upstream `stable/2025.2` (fix-for still OK
          there)"
        change_url: https://github.com/osism/container-image-kolla-ansible/pull/903
        commit_id: 7a3113bd25b343095ad0b2995753e6e3588c5ec6
        patchset: 7a3113bd25b343095ad0b2995753e6e3588c5ec6
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/container-image-kolla-ansible
          name: osism/container-image-kolla-ansible
          short_name: container-image-kolla-ansible
          src_dir: src/github.com/osism/container-image-kolla-ansible
        topic: null
      job: container-image-kolla-ansible-build-2025.2
      jobtags: []
      max_attempts: 3
      message: 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
      patchset: 7a3113bd25b343095ad0b2995753e6e3588c5ec6
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 58f24f5b479e15eb2d520850d27e3b1b6fc66aa6
          trusted/project_1/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 038dd8b856c62af4433c8477c5cb3d0480847059
          trusted/project_2/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 0c74c57cedff2b36bb37ca68a5338d1c49991496
          untrusted/project_0/github.com/osism/container-image-kolla-ansible:
            canonical_name: github.com/osism/container-image-kolla-ansible
            checkout: main
            commit: bd544eee650d76d8cf048c6053253949925161f4
          untrusted/project_1/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 58f24f5b479e15eb2d520850d27e3b1b6fc66aa6
          untrusted/project_2/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 038dd8b856c62af4433c8477c5cb3d0480847059
          untrusted/project_3/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 0c74c57cedff2b36bb37ca68a5338d1c49991496
        playbooks:
        - path: untrusted/project_0/github.com/osism/container-image-kolla-ansible/playbooks/build.yml
          roles:
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_1/zuul-config
            link_target: untrusted/project_1/github.com/osism/zuul-config
            role_path: ansible/playbook_0/role_1/zuul-config/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_2/openinfra-zuul-jobs
            link_target: untrusted/project_2/github.com/osism/openinfra-zuul-jobs
            role_path: ansible/playbook_0/role_2/openinfra-zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_3/zuul-jobs
            link_target: untrusted/project_3/github.com/osism/zuul-jobs
            role_path: ansible/playbook_0/role_3/zuul-jobs/roles
      post_review: false
      post_timeout: null
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/osism/container-image-kolla-ansible
        name: osism/container-image-kolla-ansible
        short_name: container-image-kolla-ansible
        src_dir: src/github.com/osism/container-image-kolla-ansible
      projects:
        github.com/osism/container-image-kolla-ansible:
          canonical_hostname: github.com
          canonical_name: github.com/osism/container-image-kolla-ansible
          checkout: main
          checkout_description: zuul branch
          commit: bd544eee650d76d8cf048c6053253949925161f4
          name: osism/container-image-kolla-ansible
          required: false
          short_name: container-image-kolla-ansible
          src_dir: src/github.com/osism/container-image-kolla-ansible
      ref: refs/pull/903/head
      resources: {}
      tenant: osism
      timeout: 1800
      topic: null
      voting: true
