all: children: zuul_unreachable: hosts: {} hosts: container: ansible_connection: kubectl ansible_host: pod-centos-9-stream-0000069676 ansible_kubectl_context: main:zuul-worker/38-102-83-49:9023 ansible_port: null ansible_python_interpreter: /bin/python3 ansible_ssh_common_args: -o StrictHostKeyChecking=false ansible_user: zuul ara_report_path: '{{ zuul.executor.log_root }}/ara-report' ara_report_type: database nodepool: az: null cloud: /k1s-k1s06/ external_id: main-pod-centos-9-stream-0000069676 host_id: null interface_ip: pod-centos-9-stream-0000069676 label: pod-centos-9-stream node_properties: {} private_ipv4: null private_ipv6: null provider: k1s06 public_ipv4: null public_ipv6: null region: null slot: null run_test: check_zuul_files zuul_node: az: null cloud: /k1s-k1s06/ external_id: main-pod-centos-9-stream-0000069676 host_id: null interface_ip: pod-centos-9-stream-0000069676 label: pod-centos-9-stream node_properties: {} private_ipv4: null private_ipv6: null provider: k1s06 public_ipv4: null public_ipv6: null region: null slot: null uuid: null vars: ara_report_path: '{{ zuul.executor.log_root }}/ara-report' ara_report_type: database run_test: check_zuul_files zuul: _inheritance_path: - '' - '' - '' - '' - '' - '' - '' ansible_version: '9' attempts: 1 branch: main build: f4ea22b43ef44a46b7aebb2fbdcb18be build_refs: - branch: main change: '3980' change_message: "[DNM] [env_op_images] Improve CRI-O image origin verification accuracy\n\nCRI-O always reports the canonical source registry (e.g. registry.redhat.io) in \"Pulled image\" log lines, even when the image was actually fetched from a mirror. This made node_verified_image_origin unreliable -- it nearly always reported \"source\" for mirrored images.\r\n\r\nThis MR switches to using \"Trying to access\" log lines as the authoritative evidence for determining image origin, since those show the actual registry CRI-O contacted.\r\n\r\nAdditionally, the pulled-images report now aligns with PR #3865 which replaced deprecated ImageContentSourcePolicy (ICSP) with ImageDigestMirrorSet (IDMS) and ImageTagMirrorSet (ITMS) in the openshift_setup role:\r\n\r\nRemoved ICSP lookup (oc get imagecontentsourcepolicy)\r\nAdded ITMS lookup (oc get imagetagmirrorset)\r\nMirror mapping builder now flattens IDMS imageDigestMirrors and ITMS imageTagMirrors (no more ICSP repositoryDigestMirrors)\r\nUnit tests were added covering mirror-override, fallback, and pull_failed scenarios." change_url: https://github.com/openstack-k8s-operators/ci-framework/pull/3980 commit_id: 29ba0e61f6d79bb51308b27e69b398ca77abe18c patchset: 29ba0e61f6d79bb51308b27e69b398ca77abe18c project: canonical_hostname: github.com canonical_name: github.com/openstack-k8s-operators/ci-framework name: openstack-k8s-operators/ci-framework short_name: ci-framework src_dir: src/github.com/openstack-k8s-operators/ci-framework src_dir: src/github.com/openstack-k8s-operators/ci-framework topic: null buildset: 888bd9bea6304957b5d027053d045f48 buildset_refs: - branch: main change: '3980' change_message: "[DNM] [env_op_images] Improve CRI-O image origin verification accuracy\n\nCRI-O always reports the canonical source registry (e.g. registry.redhat.io) in \"Pulled image\" log lines, even when the image was actually fetched from a mirror. This made node_verified_image_origin unreliable -- it nearly always reported \"source\" for mirrored images.\r\n\r\nThis MR switches to using \"Trying to access\" log lines as the authoritative evidence for determining image origin, since those show the actual registry CRI-O contacted.\r\n\r\nAdditionally, the pulled-images report now aligns with PR #3865 which replaced deprecated ImageContentSourcePolicy (ICSP) with ImageDigestMirrorSet (IDMS) and ImageTagMirrorSet (ITMS) in the openshift_setup role:\r\n\r\nRemoved ICSP lookup (oc get imagecontentsourcepolicy)\r\nAdded ITMS lookup (oc get imagetagmirrorset)\r\nMirror mapping builder now flattens IDMS imageDigestMirrors and ITMS imageTagMirrors (no more ICSP repositoryDigestMirrors)\r\nUnit tests were added covering mirror-override, fallback, and pull_failed scenarios." change_url: https://github.com/openstack-k8s-operators/ci-framework/pull/3980 commit_id: 29ba0e61f6d79bb51308b27e69b398ca77abe18c patchset: 29ba0e61f6d79bb51308b27e69b398ca77abe18c project: canonical_hostname: github.com canonical_name: github.com/openstack-k8s-operators/ci-framework name: openstack-k8s-operators/ci-framework short_name: ci-framework src_dir: src/github.com/openstack-k8s-operators/ci-framework src_dir: src/github.com/openstack-k8s-operators/ci-framework topic: null change: '3980' change_message: "[DNM] [env_op_images] Improve CRI-O image origin verification accuracy\n\nCRI-O always reports the canonical source registry (e.g. registry.redhat.io) in \"Pulled image\" log lines, even when the image was actually fetched from a mirror. This made node_verified_image_origin unreliable -- it nearly always reported \"source\" for mirrored images.\r\n\r\nThis MR switches to using \"Trying to access\" log lines as the authoritative evidence for determining image origin, since those show the actual registry CRI-O contacted.\r\n\r\nAdditionally, the pulled-images report now aligns with PR #3865 which replaced deprecated ImageContentSourcePolicy (ICSP) with ImageDigestMirrorSet (IDMS) and ImageTagMirrorSet (ITMS) in the openshift_setup role:\r\n\r\nRemoved ICSP lookup (oc get imagecontentsourcepolicy)\r\nAdded ITMS lookup (oc get imagetagmirrorset)\r\nMirror mapping builder now flattens IDMS imageDigestMirrors and ITMS imageTagMirrors (no more ICSP repositoryDigestMirrors)\r\nUnit tests were added covering mirror-override, fallback, and pull_failed scenarios." change_url: https://github.com/openstack-k8s-operators/ci-framework/pull/3980 child_jobs: [] commit_id: 29ba0e61f6d79bb51308b27e69b398ca77abe18c event_id: 48f668d0-64c1-11f1-9fb0-53025171c098 executor: hostname: 38.102.83.40 inventory_file: /var/lib/zuul/builds/f4ea22b43ef44a46b7aebb2fbdcb18be/ansible/inventory.yaml log_root: /var/lib/zuul/builds/f4ea22b43ef44a46b7aebb2fbdcb18be/work/logs result_data_file: /var/lib/zuul/builds/f4ea22b43ef44a46b7aebb2fbdcb18be/work/results.json src_root: /var/lib/zuul/builds/f4ea22b43ef44a46b7aebb2fbdcb18be/work/src work_root: /var/lib/zuul/builds/f4ea22b43ef44a46b7aebb2fbdcb18be/work include_vars: [] items: - branch: main change: '3980' change_message: "[DNM] [env_op_images] Improve CRI-O image origin verification accuracy\n\nCRI-O always reports the canonical source registry (e.g. registry.redhat.io) in \"Pulled image\" log lines, even when the image was actually fetched from a mirror. This made node_verified_image_origin unreliable -- it nearly always reported \"source\" for mirrored images.\r\n\r\nThis MR switches to using \"Trying to access\" log lines as the authoritative evidence for determining image origin, since those show the actual registry CRI-O contacted.\r\n\r\nAdditionally, the pulled-images report now aligns with PR #3865 which replaced deprecated ImageContentSourcePolicy (ICSP) with ImageDigestMirrorSet (IDMS) and ImageTagMirrorSet (ITMS) in the openshift_setup role:\r\n\r\nRemoved ICSP lookup (oc get imagecontentsourcepolicy)\r\nAdded ITMS lookup (oc get imagetagmirrorset)\r\nMirror mapping builder now flattens IDMS imageDigestMirrors and ITMS imageTagMirrors (no more ICSP repositoryDigestMirrors)\r\nUnit tests were added covering mirror-override, fallback, and pull_failed scenarios." change_url: https://github.com/openstack-k8s-operators/ci-framework/pull/3980 commit_id: 29ba0e61f6d79bb51308b27e69b398ca77abe18c patchset: 29ba0e61f6d79bb51308b27e69b398ca77abe18c project: canonical_hostname: github.com canonical_name: github.com/openstack-k8s-operators/ci-framework name: openstack-k8s-operators/ci-framework short_name: ci-framework src_dir: src/github.com/openstack-k8s-operators/ci-framework topic: null job: cifmw-pod-zuul-files jobtags: [] max_attempts: 3 message: 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 patchset: 29ba0e61f6d79bb51308b27e69b398ca77abe18c pipeline: github-check playbook_context: playbook_projects: trusted/project_0/review.rdoproject.org/config: canonical_name: review.rdoproject.org/config checkout: master commit: 4605eaf5fa5cd3f351940ab9df8f9f0ea6b97ad5 trusted/project_1/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: 82e3e8b1292a25e38235bb92b157992d326531d1 trusted/project_2/review.rdoproject.org/rdo-jobs: canonical_name: review.rdoproject.org/rdo-jobs checkout: master commit: ae3f884c6c8c32b779dc61f758c0f6a43ade6877 untrusted/project_0/review.rdoproject.org/rdo-jobs: canonical_name: review.rdoproject.org/rdo-jobs checkout: master commit: ae3f884c6c8c32b779dc61f758c0f6a43ade6877 untrusted/project_1/review.rdoproject.org/config: canonical_name: review.rdoproject.org/config checkout: master commit: 4605eaf5fa5cd3f351940ab9df8f9f0ea6b97ad5 untrusted/project_2/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: 82e3e8b1292a25e38235bb92b157992d326531d1 untrusted/project_3/github.com/openstack-k8s-operators/ci-framework: canonical_name: github.com/openstack-k8s-operators/ci-framework checkout: main commit: 29ba0e61f6d79bb51308b27e69b398ca77abe18c playbooks: - path: untrusted/project_3/github.com/openstack-k8s-operators/ci-framework/ci/playbooks/pod-jobs.yml roles: - checkout: main checkout_description: playbook branch link_name: ansible/playbook_0/role_0/ci-framework link_target: untrusted/project_3/github.com/openstack-k8s-operators/ci-framework role_path: ansible/playbook_0/role_0/ci-framework/roles - checkout: master checkout_description: project default branch link_name: ansible/playbook_0/role_1/config link_target: untrusted/project_1/review.rdoproject.org/config role_path: ansible/playbook_0/role_1/config/roles - checkout: master checkout_description: project default branch link_name: ansible/playbook_0/role_2/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/playbook_0/role_2/zuul-jobs/roles - checkout: master checkout_description: project default branch link_name: ansible/playbook_0/role_3/rdo-jobs link_target: untrusted/project_0/review.rdoproject.org/rdo-jobs role_path: ansible/playbook_0/role_3/rdo-jobs/roles post_playbooks: - path: trusted/project_0/review.rdoproject.org/config/playbooks/base-minimal/post-ssh.yaml roles: - checkout: master checkout_description: playbook branch link_name: ansible/post_playbook_0/role_0/config link_target: trusted/project_0/review.rdoproject.org/config role_path: ansible/post_playbook_0/role_0/config/roles - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_0/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_0/role_1/zuul-jobs/roles - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_0/role_2/rdo-jobs link_target: trusted/project_2/review.rdoproject.org/rdo-jobs role_path: ansible/post_playbook_0/role_2/rdo-jobs/roles - path: trusted/project_0/review.rdoproject.org/config/playbooks/base-minimal/post-logs.yaml roles: - checkout: master checkout_description: playbook branch link_name: ansible/post_playbook_1/role_0/config link_target: trusted/project_0/review.rdoproject.org/config role_path: ansible/post_playbook_1/role_0/config/roles - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_1/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_1/role_1/zuul-jobs/roles - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_1/role_2/rdo-jobs link_target: trusted/project_2/review.rdoproject.org/rdo-jobs role_path: ansible/post_playbook_1/role_2/rdo-jobs/roles pre_playbooks: - path: trusted/project_0/review.rdoproject.org/config/playbooks/base-minimal/pre.yaml roles: - checkout: master checkout_description: playbook branch link_name: ansible/pre_playbook_0/role_0/config link_target: trusted/project_0/review.rdoproject.org/config role_path: ansible/pre_playbook_0/role_0/config/roles - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_0/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_0/role_1/zuul-jobs/roles - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_0/role_2/rdo-jobs link_target: trusted/project_2/review.rdoproject.org/rdo-jobs role_path: ansible/pre_playbook_0/role_2/rdo-jobs/roles - path: untrusted/project_0/review.rdoproject.org/rdo-jobs/playbooks/base/pre.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_1/role_0/config link_target: untrusted/project_1/review.rdoproject.org/config role_path: ansible/pre_playbook_1/role_0/config/roles - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_1/role_1/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_1/role_1/zuul-jobs/roles - checkout: master checkout_description: playbook branch link_name: ansible/pre_playbook_1/role_2/rdo-jobs link_target: untrusted/project_0/review.rdoproject.org/rdo-jobs role_path: ansible/pre_playbook_1/role_2/rdo-jobs/roles post_review: false post_timeout: 5400 pre_timeout: null project: canonical_hostname: github.com canonical_name: github.com/openstack-k8s-operators/ci-framework name: openstack-k8s-operators/ci-framework short_name: ci-framework src_dir: src/github.com/openstack-k8s-operators/ci-framework projects: github.com/openstack-k8s-operators/ci-framework: canonical_hostname: github.com canonical_name: github.com/openstack-k8s-operators/ci-framework checkout: main checkout_description: zuul branch commit: 29ba0e61f6d79bb51308b27e69b398ca77abe18c name: openstack-k8s-operators/ci-framework required: true short_name: ci-framework src_dir: src/github.com/openstack-k8s-operators/ci-framework ref: refs/pull/3980/head resources: container: context: main:zuul-worker/38-102-83-49:9023 namespace: main pod: pod-centos-9-stream-0000069676 resources: cores: 0 instances: 1 ram: 0 stream_port1: 35025 stream_port2: 37377 tenant: rdoproject.org timeout: 1800 topic: null voting: true