all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    debian-bookworm:
      ansible_connection: ssh
      ansible_host: 2a13:1a81:8000:3124:f816:3eff:fe91:fab3
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      nodepool:
        az: nova
        cloud: regiocloud-a-ci
        external_id: 088c66a1-68d1-4dbb-8082-f8b8415a59a8
        host_id: 25afcdcd4b24cc9d1766f11f81549380a3029030a455889bb61ec093
        interface_ip: 2a13:1a81:8000:3124:f816:3eff:fe91:fab3
        label: debian-bookworm
        node_properties: {}
        private_ipv4: 10.128.0.107
        private_ipv6: null
        provider: regiocloud-a
        public_ipv4: 81.163.193.111
        public_ipv6: 2a13:1a81:8000:3124:f816:3eff:fe91:fab3
        region: null
        slot: null
  vars:
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-config/zuul.d/jobs.yaml@main#2>'
      - '<Job mypy explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-jobs/.zuul.yaml@main#42>'
      - '<Job mypy explicit: None implied: None source: osism/python-osism/.zuul.yaml@main#133>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: f258bf46f8eb4dc0933b923681fa8b8f
      build_refs:
      - branch: main
        change: '2120'
        change_message: "Fix masking of ironic_osism_* secrets in kernel_append_params\n\nWhen
          ironic_osism_* values in the Netbox secrets custom field are vault-encrypted
          and decryption fails in the API context, deep_decrypt silently removes the
          keys, so no secret values are collected for string replacement. This leaves
          passwords exposed in the API response.\r\n\r\nAdd a regex-based fallback:
          before decryption, collect ironic_osism_* key names and derive kernel parameter
          names (ironic_osism_aa -> osism-aa). After value-based replacement, also
          mask param=value patterns by name, ensuring secrets are masked even when
          vault decryption is unavailable.\r\n\r\nAI-assisted: Claude Code"
        change_url: https://github.com/osism/python-osism/pull/2120
        commit_id: 9c0d537cc2f45617ac787c8554ec1ba3f03983fe
        patchset: 9c0d537cc2f45617ac787c8554ec1ba3f03983fe
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/python-osism
          name: osism/python-osism
          short_name: python-osism
        src_dir: src/github.com/osism/python-osism
        topic: null
      buildset: b19b7783355f445b8d87a2d2efb7542e
      buildset_refs:
      - branch: main
        change: '2120'
        change_message: "Fix masking of ironic_osism_* secrets in kernel_append_params\n\nWhen
          ironic_osism_* values in the Netbox secrets custom field are vault-encrypted
          and decryption fails in the API context, deep_decrypt silently removes the
          keys, so no secret values are collected for string replacement. This leaves
          passwords exposed in the API response.\r\n\r\nAdd a regex-based fallback:
          before decryption, collect ironic_osism_* key names and derive kernel parameter
          names (ironic_osism_aa -> osism-aa). After value-based replacement, also
          mask param=value patterns by name, ensuring secrets are masked even when
          vault decryption is unavailable.\r\n\r\nAI-assisted: Claude Code"
        change_url: https://github.com/osism/python-osism/pull/2120
        commit_id: 9c0d537cc2f45617ac787c8554ec1ba3f03983fe
        patchset: 9c0d537cc2f45617ac787c8554ec1ba3f03983fe
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/python-osism
          name: osism/python-osism
          short_name: python-osism
        src_dir: src/github.com/osism/python-osism
        topic: null
      change: '2120'
      change_message: "Fix masking of ironic_osism_* secrets in kernel_append_params\n\nWhen
        ironic_osism_* values in the Netbox secrets custom field are vault-encrypted
        and decryption fails in the API context, deep_decrypt silently removes the
        keys, so no secret values are collected for string replacement. This leaves
        passwords exposed in the API response.\r\n\r\nAdd a regex-based fallback:
        before decryption, collect ironic_osism_* key names and derive kernel parameter
        names (ironic_osism_aa -> osism-aa). After value-based replacement, also mask
        param=value patterns by name, ensuring secrets are masked even when vault
        decryption is unavailable.\r\n\r\nAI-assisted: Claude Code"
      change_url: https://github.com/osism/python-osism/pull/2120
      child_jobs: []
      commit_id: 9c0d537cc2f45617ac787c8554ec1ba3f03983fe
      event_id: 8bd090a0-1eed-11f1-9eeb-15d392637e89
      executor:
        hostname: 521e9411259a
        inventory_file: /var/lib/zuul/builds/f258bf46f8eb4dc0933b923681fa8b8f/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/f258bf46f8eb4dc0933b923681fa8b8f/work/logs
        result_data_file: /var/lib/zuul/builds/f258bf46f8eb4dc0933b923681fa8b8f/work/results.json
        src_root: /var/lib/zuul/builds/f258bf46f8eb4dc0933b923681fa8b8f/work/src
        work_root: /var/lib/zuul/builds/f258bf46f8eb4dc0933b923681fa8b8f/work
      include_vars: []
      items:
      - branch: main
        change: '2120'
        change_message: "Fix masking of ironic_osism_* secrets in kernel_append_params\n\nWhen
          ironic_osism_* values in the Netbox secrets custom field are vault-encrypted
          and decryption fails in the API context, deep_decrypt silently removes the
          keys, so no secret values are collected for string replacement. This leaves
          passwords exposed in the API response.\r\n\r\nAdd a regex-based fallback:
          before decryption, collect ironic_osism_* key names and derive kernel parameter
          names (ironic_osism_aa -> osism-aa). After value-based replacement, also
          mask param=value patterns by name, ensuring secrets are masked even when
          vault decryption is unavailable.\r\n\r\nAI-assisted: Claude Code"
        change_url: https://github.com/osism/python-osism/pull/2120
        commit_id: 9c0d537cc2f45617ac787c8554ec1ba3f03983fe
        patchset: 9c0d537cc2f45617ac787c8554ec1ba3f03983fe
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/python-osism
          name: osism/python-osism
          short_name: python-osism
          src_dir: src/github.com/osism/python-osism
        topic: null
      job: mypy
      jobtags: []
      max_attempts: 3
      message: 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
      patchset: 9c0d537cc2f45617ac787c8554ec1ba3f03983fe
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 4f450aa36c28b035ce97359a888edbd7599eaf31
          trusted/project_1/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 397240f42127868e42e86e6aeb120c2cb092d117
          untrusted/project_0/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: a01eed06dffe368c1d01819193bfadccb137414d
          untrusted/project_1/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 4f450aa36c28b035ce97359a888edbd7599eaf31
          untrusted/project_2/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 397240f42127868e42e86e6aeb120c2cb092d117
        playbooks:
        - path: untrusted/project_0/github.com/osism/zuul-jobs/playbooks/mypy/run.yaml
          roles:
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_0/role_0/zuul-jobs
            link_target: untrusted/project_0/github.com/osism/zuul-jobs
            role_path: ansible/playbook_0/role_0/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_1/zuul-config
            link_target: untrusted/project_1/github.com/osism/zuul-config
            role_path: ansible/playbook_0/role_1/zuul-config/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_2/openinfra-zuul-jobs
            link_target: untrusted/project_2/github.com/osism/openinfra-zuul-jobs
            role_path: ansible/playbook_0/role_2/openinfra-zuul-jobs/roles
      post_review: false
      post_timeout: null
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/osism/python-osism
        name: osism/python-osism
        short_name: python-osism
        src_dir: src/github.com/osism/python-osism
      projects:
        github.com/osism/python-osism:
          canonical_hostname: github.com
          canonical_name: github.com/osism/python-osism
          checkout: main
          checkout_description: zuul branch
          commit: 06b543704713250d053b36052ae1c08f4ee6f194
          name: osism/python-osism
          required: false
          short_name: python-osism
          src_dir: src/github.com/osism/python-osism
      ref: refs/pull/2120/head
      resources: {}
      tenant: osism
      timeout: 1800
      topic: null
      voting: true
