all: children: zuul_unreachable: hosts: {} hosts: container: ansible_connection: kubectl ansible_host: zuul-worker-fedora-stable-0000078297 ansible_kubectl_context: main:zuul-worker/38-102-83-49:9023 ansible_port: null ansible_python_interpreter: /bin/python3 ansible_ssh_common_args: -o StrictHostKeyChecking=false ansible_user: zuul nodepool: az: null cloud: /k1s-k1s06/ external_id: main-zuul-worker-fedora-stable-0000078297 host_id: null interface_ip: zuul-worker-fedora-stable-0000078297 label: zuul-worker-fedora-stable node_properties: {} private_ipv4: null private_ipv6: null provider: k1s06 public_ipv4: null public_ipv6: null region: null slot: null render_command: bash -c "source scripts/ansible_fqcn_fixer.sh && main" zuul_node: az: null cloud: /k1s-k1s06/ external_id: main-zuul-worker-fedora-stable-0000078297 host_id: null interface_ip: zuul-worker-fedora-stable-0000078297 label: zuul-worker-fedora-stable node_properties: {} private_ipv4: null private_ipv6: null provider: k1s06 public_ipv4: null public_ipv6: null region: null slot: null uuid: null zuul_use_fetch_output: true vars: render_command: bash -c "source scripts/ansible_fqcn_fixer.sh && main" zuul: _inheritance_path: - '' - '' - '' - '' ansible_version: '9' attempts: 1 branch: master build: a00e2a71a7b54241a8c9794233bbb463 build_refs: - branch: master change: '35229' change_message: 'Use rotate-ansible-vault-password.py to rotate vault password, secrets Change-Id: Ic70220ac209b56f7e12dbc560d09513bc60b6482 ' change_url: https://softwarefactory-project.io/r/c/software-factory/sf-infra/+/35229 commit_id: a6601a0c7b2c28dfcfa8f7f6e41943c1338260d6 patchset: '6' project: canonical_hostname: softwarefactory-project.io canonical_name: softwarefactory-project.io/software-factory/sf-infra name: software-factory/sf-infra short_name: sf-infra src_dir: src/softwarefactory-project.io/software-factory/sf-infra src_dir: src/softwarefactory-project.io/software-factory/sf-infra topic: rotate_ansible_vault buildset: 3a1cf2ad0d0e4a2894bcdc89a70eccf7 buildset_refs: - branch: master change: '35229' change_message: 'Use rotate-ansible-vault-password.py to rotate vault password, secrets Change-Id: Ic70220ac209b56f7e12dbc560d09513bc60b6482 ' change_url: https://softwarefactory-project.io/r/c/software-factory/sf-infra/+/35229 commit_id: a6601a0c7b2c28dfcfa8f7f6e41943c1338260d6 patchset: '6' project: canonical_hostname: softwarefactory-project.io canonical_name: softwarefactory-project.io/software-factory/sf-infra name: software-factory/sf-infra short_name: sf-infra src_dir: src/softwarefactory-project.io/software-factory/sf-infra src_dir: src/softwarefactory-project.io/software-factory/sf-infra topic: rotate_ansible_vault change: '35229' change_message: 'Use rotate-ansible-vault-password.py to rotate vault password, secrets Change-Id: Ic70220ac209b56f7e12dbc560d09513bc60b6482 ' change_url: https://softwarefactory-project.io/r/c/software-factory/sf-infra/+/35229 child_jobs: [] commit_id: a6601a0c7b2c28dfcfa8f7f6e41943c1338260d6 event_id: 0e443f15e17f4185835a8968550e0d90 executor: hostname: 38.102.83.47 inventory_file: /var/lib/zuul/builds/a00e2a71a7b54241a8c9794233bbb463/ansible/inventory.yaml log_root: /var/lib/zuul/builds/a00e2a71a7b54241a8c9794233bbb463/work/logs result_data_file: /var/lib/zuul/builds/a00e2a71a7b54241a8c9794233bbb463/work/results.json src_root: /var/lib/zuul/builds/a00e2a71a7b54241a8c9794233bbb463/work/src work_root: /var/lib/zuul/builds/a00e2a71a7b54241a8c9794233bbb463/work include_vars: [] items: - branch: master change: '35228' change_message: 'Add rotate-ansible-vault-password.py Add a new tool that can validate ansible-vault-encrypted secrets (in dry-run mode); and also rotate the vault password, re-encrypt all secrets, and update the vault zuul secret. Add extra carriage returns in some secret files to make it easier for the script to handle data. Add a gate job to validate secrets early. Change-Id: I62a98d5004e8720c51a418feae8bbae4b373586d ' change_url: https://softwarefactory-project.io/r/c/software-factory/sf-infra/+/35228 commit_id: fb81ae438c5fac783af28b53afeccebdbb25a838 patchset: '7' project: canonical_hostname: softwarefactory-project.io canonical_name: softwarefactory-project.io/software-factory/sf-infra name: software-factory/sf-infra short_name: sf-infra src_dir: src/softwarefactory-project.io/software-factory/sf-infra topic: rotate_ansible_vault - branch: master change: '35229' change_message: 'Use rotate-ansible-vault-password.py to rotate vault password, secrets Change-Id: Ic70220ac209b56f7e12dbc560d09513bc60b6482 ' change_url: https://softwarefactory-project.io/r/c/software-factory/sf-infra/+/35229 commit_id: a6601a0c7b2c28dfcfa8f7f6e41943c1338260d6 patchset: '6' project: canonical_hostname: softwarefactory-project.io canonical_name: softwarefactory-project.io/software-factory/sf-infra name: software-factory/sf-infra short_name: sf-infra src_dir: src/softwarefactory-project.io/software-factory/sf-infra topic: rotate_ansible_vault job: sf-infra-ensure-fqcn jobtags: [] max_attempts: 3 message: VXNlIHJvdGF0ZS1hbnNpYmxlLXZhdWx0LXBhc3N3b3JkLnB5IHRvIHJvdGF0ZSB2YXVsdCBwYXNzd29yZCwgc2VjcmV0cwoKQ2hhbmdlLUlkOiBJYzcwMjIwYWMyMDliNTZmN2UxMmRiYzU2MGQwOTUxM2JjNjBiNjQ4Mgo= patchset: '6' pipeline: check playbook_context: playbook_projects: trusted/project_0/softwarefactory-project.io/config: canonical_name: softwarefactory-project.io/config checkout: master commit: f1e60a108533e276fb02e4f0701db6cbd5d19b16 trusted/project_1/softwarefactory-project.io/sf-jobs: canonical_name: softwarefactory-project.io/sf-jobs checkout: master commit: 464cf862d4834b5e0b94faf2ba2ee60d040b6d9a trusted/project_2/softwarefactory-project.io/zuul-jobs: canonical_name: softwarefactory-project.io/zuul-jobs checkout: master commit: c75fe6ef19c05b98349573c971950c51bbf24758 untrusted/project_0/softwarefactory-project.io/zuul-jobs: canonical_name: softwarefactory-project.io/zuul-jobs checkout: master commit: c75fe6ef19c05b98349573c971950c51bbf24758 untrusted/project_1/softwarefactory-project.io/config: canonical_name: softwarefactory-project.io/config checkout: master commit: f1e60a108533e276fb02e4f0701db6cbd5d19b16 untrusted/project_2/softwarefactory-project.io/sf-jobs: canonical_name: softwarefactory-project.io/sf-jobs checkout: master commit: 464cf862d4834b5e0b94faf2ba2ee60d040b6d9a playbooks: - path: untrusted/project_0/softwarefactory-project.io/zuul-jobs/playbooks/dhall/diff.yaml roles: - checkout: master checkout_description: zuul branch link_name: ansible/playbook_0/role_0/config link_target: untrusted/project_1/softwarefactory-project.io/config role_path: ansible/playbook_0/role_0/config/roles - checkout: master checkout_description: zuul branch link_name: ansible/playbook_0/role_1/sf-jobs link_target: untrusted/project_2/softwarefactory-project.io/sf-jobs role_path: ansible/playbook_0/role_1/sf-jobs/roles - checkout: master checkout_description: playbook branch link_name: ansible/playbook_0/role_2/zuul-jobs link_target: untrusted/project_0/softwarefactory-project.io/zuul-jobs role_path: ansible/playbook_0/role_2/zuul-jobs/roles post_playbooks: - path: trusted/project_0/softwarefactory-project.io/config/playbooks/base/post.yaml roles: - checkout: master checkout_description: playbook branch link_name: ansible/post_playbook_0/role_0/config link_target: trusted/project_0/softwarefactory-project.io/config role_path: ansible/post_playbook_0/role_0/config/roles - checkout: master checkout_description: zuul branch link_name: ansible/post_playbook_0/role_1/sf-jobs link_target: trusted/project_1/softwarefactory-project.io/sf-jobs role_path: ansible/post_playbook_0/role_1/sf-jobs/roles - checkout: master checkout_description: zuul branch link_name: ansible/post_playbook_0/role_2/zuul-jobs link_target: trusted/project_2/softwarefactory-project.io/zuul-jobs role_path: ansible/post_playbook_0/role_2/zuul-jobs/roles pre_playbooks: - path: trusted/project_0/softwarefactory-project.io/config/playbooks/base/pre.yaml roles: - checkout: master checkout_description: playbook branch link_name: ansible/pre_playbook_0/role_0/config link_target: trusted/project_0/softwarefactory-project.io/config role_path: ansible/pre_playbook_0/role_0/config/roles - checkout: master checkout_description: zuul branch link_name: ansible/pre_playbook_0/role_1/sf-jobs link_target: trusted/project_1/softwarefactory-project.io/sf-jobs role_path: ansible/pre_playbook_0/role_1/sf-jobs/roles - checkout: master checkout_description: zuul branch link_name: ansible/pre_playbook_0/role_2/zuul-jobs link_target: trusted/project_2/softwarefactory-project.io/zuul-jobs role_path: ansible/pre_playbook_0/role_2/zuul-jobs/roles - path: untrusted/project_0/softwarefactory-project.io/zuul-jobs/playbooks/dhall/prepare.yaml roles: - checkout: master checkout_description: zuul branch link_name: ansible/pre_playbook_1/role_0/config link_target: untrusted/project_1/softwarefactory-project.io/config role_path: ansible/pre_playbook_1/role_0/config/roles - checkout: master checkout_description: zuul branch link_name: ansible/pre_playbook_1/role_1/sf-jobs link_target: untrusted/project_2/softwarefactory-project.io/sf-jobs role_path: ansible/pre_playbook_1/role_1/sf-jobs/roles - checkout: master checkout_description: playbook branch link_name: ansible/pre_playbook_1/role_2/zuul-jobs link_target: untrusted/project_0/softwarefactory-project.io/zuul-jobs role_path: ansible/pre_playbook_1/role_2/zuul-jobs/roles post_review: false post_timeout: null pre_timeout: null project: canonical_hostname: softwarefactory-project.io canonical_name: softwarefactory-project.io/software-factory/sf-infra name: software-factory/sf-infra short_name: sf-infra src_dir: src/softwarefactory-project.io/software-factory/sf-infra projects: softwarefactory-project.io/software-factory/sf-infra: canonical_hostname: softwarefactory-project.io canonical_name: softwarefactory-project.io/software-factory/sf-infra checkout: master checkout_description: zuul branch commit: 826c2bf96ac2af717ad35e2821930c4a2e156a17 name: software-factory/sf-infra required: false short_name: sf-infra src_dir: src/softwarefactory-project.io/software-factory/sf-infra ref: refs/changes/29/35229/6 resources: container: context: main:zuul-worker/38-102-83-49:9023 namespace: main pod: zuul-worker-fedora-stable-0000078297 resources: cores: 0 instances: 1 ram: 0 stream_port1: 41609 stream_port2: 43885 tenant: local timeout: 1800 topic: rotate_ansible_vault voting: true zuul_use_fetch_output: true