all: children: zuul_unreachable: hosts: {} hosts: container: ansible_connection: kubectl ansible_host: pod-centos-9-stream-0000069740 ansible_kubectl_context: main:zuul-worker/38-102-83-186:9023 ansible_port: null ansible_python_interpreter: /bin/python3 ansible_ssh_common_args: -o StrictHostKeyChecking=false ansible_user: zuul ara_report_path: '{{ zuul.executor.log_root }}/ara-report' ara_report_type: database nodepool: az: null cloud: /k1s05/ external_id: main-pod-centos-9-stream-0000069740 host_id: null interface_ip: pod-centos-9-stream-0000069740 label: pod-centos-9-stream node_properties: {} private_ipv4: null private_ipv6: null provider: k1s05 public_ipv4: null public_ipv6: null region: null slot: null run_test: ansible_test_nodeps zuul_node: az: null cloud: /k1s05/ external_id: main-pod-centos-9-stream-0000069740 host_id: null interface_ip: pod-centos-9-stream-0000069740 label: pod-centos-9-stream node_properties: {} private_ipv4: null private_ipv6: null provider: k1s05 public_ipv4: null public_ipv6: null region: null slot: null uuid: null vars: ara_report_path: '{{ zuul.executor.log_root }}/ara-report' ara_report_type: database run_test: ansible_test_nodeps zuul: _inheritance_path: - '' - '' - '' - '' - '' ansible_version: '9' attempts: 1 branch: main build: 0609d00c3bdc46c2b2f86f09ce9c01a2 build_refs: - branch: main change: '3980' change_message: "[DNM] [env_op_images] Improve CRI-O image origin verification accuracy\n\nCRI-O always reports the canonical source registry (e.g. registry.redhat.io) in \"Pulled image\" log lines, even when the image was actually fetched from a mirror. This made node_verified_image_origin unreliable -- it nearly always reported \"source\" for mirrored images.\r\n\r\nThis MR switches to using \"Trying to access\" log lines as the authoritative evidence for determining image origin, since those show the actual registry CRI-O contacted.\r\n\r\nAdditionally, the pulled-images report now aligns with PR #3865 which replaced deprecated ImageContentSourcePolicy (ICSP) with ImageDigestMirrorSet (IDMS) and ImageTagMirrorSet (ITMS) in the openshift_setup role:\r\n\r\nRemoved ICSP lookup (oc get imagecontentsourcepolicy)\r\nAdded ITMS lookup (oc get imagetagmirrorset)\r\nMirror mapping builder now flattens IDMS imageDigestMirrors and ITMS imageTagMirrors (no more ICSP repositoryDigestMirrors)\r\nUnit tests were added covering mirror-override, fallback, and pull_failed scenarios." change_url: https://github.com/openstack-k8s-operators/ci-framework/pull/3980 commit_id: 29ba0e61f6d79bb51308b27e69b398ca77abe18c patchset: 29ba0e61f6d79bb51308b27e69b398ca77abe18c project: canonical_hostname: github.com canonical_name: github.com/openstack-k8s-operators/ci-framework name: openstack-k8s-operators/ci-framework short_name: ci-framework src_dir: src/github.com/openstack-k8s-operators/ci-framework src_dir: src/github.com/openstack-k8s-operators/ci-framework topic: null buildset: db7e73bebc06487d92854d2eccad70da buildset_refs: - branch: main change: '3980' change_message: "[DNM] [env_op_images] Improve CRI-O image origin verification accuracy\n\nCRI-O always reports the canonical source registry (e.g. registry.redhat.io) in \"Pulled image\" log lines, even when the image was actually fetched from a mirror. This made node_verified_image_origin unreliable -- it nearly always reported \"source\" for mirrored images.\r\n\r\nThis MR switches to using \"Trying to access\" log lines as the authoritative evidence for determining image origin, since those show the actual registry CRI-O contacted.\r\n\r\nAdditionally, the pulled-images report now aligns with PR #3865 which replaced deprecated ImageContentSourcePolicy (ICSP) with ImageDigestMirrorSet (IDMS) and ImageTagMirrorSet (ITMS) in the openshift_setup role:\r\n\r\nRemoved ICSP lookup (oc get imagecontentsourcepolicy)\r\nAdded ITMS lookup (oc get imagetagmirrorset)\r\nMirror mapping builder now flattens IDMS imageDigestMirrors and ITMS imageTagMirrors (no more ICSP repositoryDigestMirrors)\r\nUnit tests were added covering mirror-override, fallback, and pull_failed scenarios." change_url: https://github.com/openstack-k8s-operators/ci-framework/pull/3980 commit_id: 29ba0e61f6d79bb51308b27e69b398ca77abe18c patchset: 29ba0e61f6d79bb51308b27e69b398ca77abe18c project: canonical_hostname: github.com canonical_name: github.com/openstack-k8s-operators/ci-framework name: openstack-k8s-operators/ci-framework short_name: ci-framework src_dir: src/github.com/openstack-k8s-operators/ci-framework src_dir: src/github.com/openstack-k8s-operators/ci-framework topic: null change: '3980' change_message: "[DNM] [env_op_images] Improve CRI-O image origin verification accuracy\n\nCRI-O always reports the canonical source registry (e.g. registry.redhat.io) in \"Pulled image\" log lines, even when the image was actually fetched from a mirror. This made node_verified_image_origin unreliable -- it nearly always reported \"source\" for mirrored images.\r\n\r\nThis MR switches to using \"Trying to access\" log lines as the authoritative evidence for determining image origin, since those show the actual registry CRI-O contacted.\r\n\r\nAdditionally, the pulled-images report now aligns with PR #3865 which replaced deprecated ImageContentSourcePolicy (ICSP) with ImageDigestMirrorSet (IDMS) and ImageTagMirrorSet (ITMS) in the openshift_setup role:\r\n\r\nRemoved ICSP lookup (oc get imagecontentsourcepolicy)\r\nAdded ITMS lookup (oc get imagetagmirrorset)\r\nMirror mapping builder now flattens IDMS imageDigestMirrors and ITMS imageTagMirrors (no more ICSP repositoryDigestMirrors)\r\nUnit tests were added covering mirror-override, fallback, and pull_failed scenarios." change_url: https://github.com/openstack-k8s-operators/ci-framework/pull/3980 child_jobs: [] commit_id: 29ba0e61f6d79bb51308b27e69b398ca77abe18c event_id: 3561a120-64cd-11f1-9b27-4bb150d82b53 executor: hostname: 38.102.83.47 inventory_file: /var/lib/zuul/builds/0609d00c3bdc46c2b2f86f09ce9c01a2/ansible/inventory.yaml log_root: /var/lib/zuul/builds/0609d00c3bdc46c2b2f86f09ce9c01a2/work/logs result_data_file: /var/lib/zuul/builds/0609d00c3bdc46c2b2f86f09ce9c01a2/work/results.json src_root: /var/lib/zuul/builds/0609d00c3bdc46c2b2f86f09ce9c01a2/work/src work_root: /var/lib/zuul/builds/0609d00c3bdc46c2b2f86f09ce9c01a2/work include_vars: [] items: - branch: main change: '3980' change_message: "[DNM] [env_op_images] Improve CRI-O image origin verification accuracy\n\nCRI-O always reports the canonical source registry (e.g. registry.redhat.io) in \"Pulled image\" log lines, even when the image was actually fetched from a mirror. This made node_verified_image_origin unreliable -- it nearly always reported \"source\" for mirrored images.\r\n\r\nThis MR switches to using \"Trying to access\" log lines as the authoritative evidence for determining image origin, since those show the actual registry CRI-O contacted.\r\n\r\nAdditionally, the pulled-images report now aligns with PR #3865 which replaced deprecated ImageContentSourcePolicy (ICSP) with ImageDigestMirrorSet (IDMS) and ImageTagMirrorSet (ITMS) in the openshift_setup role:\r\n\r\nRemoved ICSP lookup (oc get imagecontentsourcepolicy)\r\nAdded ITMS lookup (oc get imagetagmirrorset)\r\nMirror mapping builder now flattens IDMS imageDigestMirrors and ITMS imageTagMirrors (no more ICSP repositoryDigestMirrors)\r\nUnit tests were added covering mirror-override, fallback, and pull_failed scenarios." change_url: https://github.com/openstack-k8s-operators/ci-framework/pull/3980 commit_id: 29ba0e61f6d79bb51308b27e69b398ca77abe18c patchset: 29ba0e61f6d79bb51308b27e69b398ca77abe18c project: canonical_hostname: github.com canonical_name: github.com/openstack-k8s-operators/ci-framework name: openstack-k8s-operators/ci-framework short_name: ci-framework src_dir: src/github.com/openstack-k8s-operators/ci-framework topic: null job: cifmw-pod-ansible-test jobtags: [] max_attempts: 3 message: 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 patchset: 29ba0e61f6d79bb51308b27e69b398ca77abe18c pipeline: github-check playbook_context: playbook_projects: trusted/project_0/review.rdoproject.org/config: canonical_name: review.rdoproject.org/config checkout: master commit: 4605eaf5fa5cd3f351940ab9df8f9f0ea6b97ad5 trusted/project_1/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: 82e3e8b1292a25e38235bb92b157992d326531d1 trusted/project_2/review.rdoproject.org/rdo-jobs: canonical_name: review.rdoproject.org/rdo-jobs checkout: master commit: ae3f884c6c8c32b779dc61f758c0f6a43ade6877 untrusted/project_0/review.rdoproject.org/rdo-jobs: canonical_name: review.rdoproject.org/rdo-jobs checkout: master commit: ae3f884c6c8c32b779dc61f758c0f6a43ade6877 untrusted/project_1/review.rdoproject.org/config: canonical_name: review.rdoproject.org/config checkout: master commit: 4605eaf5fa5cd3f351940ab9df8f9f0ea6b97ad5 untrusted/project_2/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: 82e3e8b1292a25e38235bb92b157992d326531d1 untrusted/project_3/github.com/openstack-k8s-operators/ci-framework: canonical_name: github.com/openstack-k8s-operators/ci-framework checkout: main commit: 6e8a17846a944b3555c2f721b1328576e8e9bca1 playbooks: - path: untrusted/project_3/github.com/openstack-k8s-operators/ci-framework/ci/playbooks/pod-jobs.yml roles: - checkout: main checkout_description: playbook branch link_name: ansible/playbook_0/role_0/ci-framework link_target: untrusted/project_3/github.com/openstack-k8s-operators/ci-framework role_path: ansible/playbook_0/role_0/ci-framework/roles - checkout: master checkout_description: project default branch link_name: ansible/playbook_0/role_1/config link_target: untrusted/project_1/review.rdoproject.org/config role_path: ansible/playbook_0/role_1/config/roles - checkout: master checkout_description: project default branch link_name: ansible/playbook_0/role_2/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/playbook_0/role_2/zuul-jobs/roles - checkout: master checkout_description: project default branch link_name: ansible/playbook_0/role_3/rdo-jobs link_target: untrusted/project_0/review.rdoproject.org/rdo-jobs role_path: ansible/playbook_0/role_3/rdo-jobs/roles post_playbooks: - path: trusted/project_0/review.rdoproject.org/config/playbooks/base-minimal/post-ssh.yaml roles: - checkout: master checkout_description: playbook branch link_name: ansible/post_playbook_0/role_0/config link_target: trusted/project_0/review.rdoproject.org/config role_path: ansible/post_playbook_0/role_0/config/roles - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_0/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_0/role_1/zuul-jobs/roles - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_0/role_2/rdo-jobs link_target: trusted/project_2/review.rdoproject.org/rdo-jobs role_path: ansible/post_playbook_0/role_2/rdo-jobs/roles - path: trusted/project_0/review.rdoproject.org/config/playbooks/base-minimal/post-logs.yaml roles: - checkout: master checkout_description: playbook branch link_name: ansible/post_playbook_1/role_0/config link_target: trusted/project_0/review.rdoproject.org/config role_path: ansible/post_playbook_1/role_0/config/roles - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_1/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_1/role_1/zuul-jobs/roles - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_1/role_2/rdo-jobs link_target: trusted/project_2/review.rdoproject.org/rdo-jobs role_path: ansible/post_playbook_1/role_2/rdo-jobs/roles pre_playbooks: - path: trusted/project_0/review.rdoproject.org/config/playbooks/base-minimal/pre.yaml roles: - checkout: master checkout_description: playbook branch link_name: ansible/pre_playbook_0/role_0/config link_target: trusted/project_0/review.rdoproject.org/config role_path: ansible/pre_playbook_0/role_0/config/roles - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_0/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_0/role_1/zuul-jobs/roles - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_0/role_2/rdo-jobs link_target: trusted/project_2/review.rdoproject.org/rdo-jobs role_path: ansible/pre_playbook_0/role_2/rdo-jobs/roles - path: untrusted/project_0/review.rdoproject.org/rdo-jobs/playbooks/base/pre.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_1/role_0/config link_target: untrusted/project_1/review.rdoproject.org/config role_path: ansible/pre_playbook_1/role_0/config/roles - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_1/role_1/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_1/role_1/zuul-jobs/roles - checkout: master checkout_description: playbook branch link_name: ansible/pre_playbook_1/role_2/rdo-jobs link_target: untrusted/project_0/review.rdoproject.org/rdo-jobs role_path: ansible/pre_playbook_1/role_2/rdo-jobs/roles post_review: false post_timeout: 5400 pre_timeout: null project: canonical_hostname: github.com canonical_name: github.com/openstack-k8s-operators/ci-framework name: openstack-k8s-operators/ci-framework short_name: ci-framework src_dir: src/github.com/openstack-k8s-operators/ci-framework projects: github.com/openstack-k8s-operators/ci-framework: canonical_hostname: github.com canonical_name: github.com/openstack-k8s-operators/ci-framework checkout: main checkout_description: zuul branch commit: 6e8a17846a944b3555c2f721b1328576e8e9bca1 name: openstack-k8s-operators/ci-framework required: true short_name: ci-framework src_dir: src/github.com/openstack-k8s-operators/ci-framework ref: refs/pull/3980/head resources: container: context: main:zuul-worker/38-102-83-186:9023 namespace: main pod: pod-centos-9-stream-0000069740 resources: cores: 0 instances: 1 ram: 0 stream_port1: 39535 stream_port2: 46443 tenant: rdoproject.org timeout: 1800 topic: null voting: true