all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    debian-bookworm:
      ansible_connection: ssh
      ansible_host: 2a13:1a81:8000:3124:f816:3eff:fe7b:7d1d
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      nodepool:
        az: nova
        cloud: regiocloud-a-ci
        external_id: f29bf7dd-67a7-4dcf-b5f2-a1c182dfe7ef
        host_id: 0d3d02185f810c959252bd1d303ec55040bf5bb0b401cceef814c3a7
        interface_ip: 2a13:1a81:8000:3124:f816:3eff:fe7b:7d1d
        label: debian-bookworm
        node_properties: {}
        private_ipv4: 10.128.7.77
        private_ipv6: null
        provider: regiocloud-a
        public_ipv4: 81.163.193.228
        public_ipv6: 2a13:1a81:8000:3124:f816:3eff:fe7b:7d1d
        region: null
        slot: null
  vars:
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-config/zuul.d/jobs.yaml@main#2>'
      - '<Job ansible-collection-ensure-readme explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-jobs/.zuul.yaml@main#2>'
      - '<Job ansible-collection-ensure-readme explicit: None implied: None source:
        osism/ansible-collection-services/.zuul.yaml@main#498>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: add11bf1d33c4a2587102e564b47d0b8
      build_refs:
      - branch: main
        change: '2110'
        change_message: "stepca: recreate containers after pulling new images\n\n##
          Problem\n\nThe `Pull container images` task in `roles/stepca/tasks/service.yml`
          pulls new images but has no `notify`/`register`. A recreate (`docker compose
          up -d`, via the `Restart stepca service` handler) is only triggered when
          the rendered `docker-compose.yml` changes or the systemd unit changes.\n\nOn
          a rolling-tag update (e.g. `latest` \u2192 `latest`) the compose file text
          is identical and the service is already active, so neither trigger fires
          \u2014 the freshly pulled image is downloaded but the running container
          keeps the old image (which has lost its `:latest` tag) until the next compose/unit
          change or a manual `systemctl restart stepca.service`.\n\n## Fix\n\nNotify
          the existing `Restart stepca service` handler from the pull task:\n\n```yaml\n-
          name: Pull container images\n  community.docker.docker_compose_v2_pull:\n
          \   project_src: \"{{ stepca_docker_compose_directory }}\"\n  when: stepca_pre_pull
          | bool\n  retries: 3\n  delay: 30\n  notify: Restart stepca service\n```\n\nThe
          notify only fires when the pull actually reports `changed`; the handler
          does `systemd_service: state: restarted` \u2192 systemd `ExecStart=docker
          compose up --remove-orphans` \u2192 containers recreated with the new images.
          The handler keeps respecting `stepca_service_allow_restart`, the duplicate
          notify from `Copy docker-compose.yml` still collapses into a single restart,
          and `flush_handlers` at the end of `service.yml` applies the restart before
          the play continues.\n\nThis mirrors the manager-role fix in #2106 (root
          cause #2105).\n\nCloses #2108"
        change_url: https://github.com/osism/ansible-collection-services/pull/2110
        commit_id: 561485f5e6386efc6bb8455829a42823c1635798
        patchset: 561485f5e6386efc6bb8455829a42823c1635798
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/ansible-collection-services
          name: osism/ansible-collection-services
          short_name: ansible-collection-services
        src_dir: src/github.com/osism/ansible-collection-services
        topic: null
      buildset: 3bde291f819c4a2da665071811bc7336
      buildset_refs:
      - branch: main
        change: '2110'
        change_message: "stepca: recreate containers after pulling new images\n\n##
          Problem\n\nThe `Pull container images` task in `roles/stepca/tasks/service.yml`
          pulls new images but has no `notify`/`register`. A recreate (`docker compose
          up -d`, via the `Restart stepca service` handler) is only triggered when
          the rendered `docker-compose.yml` changes or the systemd unit changes.\n\nOn
          a rolling-tag update (e.g. `latest` \u2192 `latest`) the compose file text
          is identical and the service is already active, so neither trigger fires
          \u2014 the freshly pulled image is downloaded but the running container
          keeps the old image (which has lost its `:latest` tag) until the next compose/unit
          change or a manual `systemctl restart stepca.service`.\n\n## Fix\n\nNotify
          the existing `Restart stepca service` handler from the pull task:\n\n```yaml\n-
          name: Pull container images\n  community.docker.docker_compose_v2_pull:\n
          \   project_src: \"{{ stepca_docker_compose_directory }}\"\n  when: stepca_pre_pull
          | bool\n  retries: 3\n  delay: 30\n  notify: Restart stepca service\n```\n\nThe
          notify only fires when the pull actually reports `changed`; the handler
          does `systemd_service: state: restarted` \u2192 systemd `ExecStart=docker
          compose up --remove-orphans` \u2192 containers recreated with the new images.
          The handler keeps respecting `stepca_service_allow_restart`, the duplicate
          notify from `Copy docker-compose.yml` still collapses into a single restart,
          and `flush_handlers` at the end of `service.yml` applies the restart before
          the play continues.\n\nThis mirrors the manager-role fix in #2106 (root
          cause #2105).\n\nCloses #2108"
        change_url: https://github.com/osism/ansible-collection-services/pull/2110
        commit_id: 561485f5e6386efc6bb8455829a42823c1635798
        patchset: 561485f5e6386efc6bb8455829a42823c1635798
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/ansible-collection-services
          name: osism/ansible-collection-services
          short_name: ansible-collection-services
        src_dir: src/github.com/osism/ansible-collection-services
        topic: null
      change: '2110'
      change_message: "stepca: recreate containers after pulling new images\n\n##
        Problem\n\nThe `Pull container images` task in `roles/stepca/tasks/service.yml`
        pulls new images but has no `notify`/`register`. A recreate (`docker compose
        up -d`, via the `Restart stepca service` handler) is only triggered when the
        rendered `docker-compose.yml` changes or the systemd unit changes.\n\nOn a
        rolling-tag update (e.g. `latest` \u2192 `latest`) the compose file text is
        identical and the service is already active, so neither trigger fires \u2014
        the freshly pulled image is downloaded but the running container keeps the
        old image (which has lost its `:latest` tag) until the next compose/unit change
        or a manual `systemctl restart stepca.service`.\n\n## Fix\n\nNotify the existing
        `Restart stepca service` handler from the pull task:\n\n```yaml\n- name: Pull
        container images\n  community.docker.docker_compose_v2_pull:\n    project_src:
        \"{{ stepca_docker_compose_directory }}\"\n  when: stepca_pre_pull | bool\n
        \ retries: 3\n  delay: 30\n  notify: Restart stepca service\n```\n\nThe notify
        only fires when the pull actually reports `changed`; the handler does `systemd_service:
        state: restarted` \u2192 systemd `ExecStart=docker compose up --remove-orphans`
        \u2192 containers recreated with the new images. The handler keeps respecting
        `stepca_service_allow_restart`, the duplicate notify from `Copy docker-compose.yml`
        still collapses into a single restart, and `flush_handlers` at the end of
        `service.yml` applies the restart before the play continues.\n\nThis mirrors
        the manager-role fix in #2106 (root cause #2105).\n\nCloses #2108"
      change_url: https://github.com/osism/ansible-collection-services/pull/2110
      child_jobs: []
      commit_id: 561485f5e6386efc6bb8455829a42823c1635798
      event_id: c30d8260-6a26-11f1-9215-306b4b501b34
      executor:
        hostname: 521e9411259a
        inventory_file: /var/lib/zuul/builds/add11bf1d33c4a2587102e564b47d0b8/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/add11bf1d33c4a2587102e564b47d0b8/work/logs
        result_data_file: /var/lib/zuul/builds/add11bf1d33c4a2587102e564b47d0b8/work/results.json
        src_root: /var/lib/zuul/builds/add11bf1d33c4a2587102e564b47d0b8/work/src
        work_root: /var/lib/zuul/builds/add11bf1d33c4a2587102e564b47d0b8/work
      include_vars: []
      items:
      - branch: main
        change: '2110'
        change_message: "stepca: recreate containers after pulling new images\n\n##
          Problem\n\nThe `Pull container images` task in `roles/stepca/tasks/service.yml`
          pulls new images but has no `notify`/`register`. A recreate (`docker compose
          up -d`, via the `Restart stepca service` handler) is only triggered when
          the rendered `docker-compose.yml` changes or the systemd unit changes.\n\nOn
          a rolling-tag update (e.g. `latest` \u2192 `latest`) the compose file text
          is identical and the service is already active, so neither trigger fires
          \u2014 the freshly pulled image is downloaded but the running container
          keeps the old image (which has lost its `:latest` tag) until the next compose/unit
          change or a manual `systemctl restart stepca.service`.\n\n## Fix\n\nNotify
          the existing `Restart stepca service` handler from the pull task:\n\n```yaml\n-
          name: Pull container images\n  community.docker.docker_compose_v2_pull:\n
          \   project_src: \"{{ stepca_docker_compose_directory }}\"\n  when: stepca_pre_pull
          | bool\n  retries: 3\n  delay: 30\n  notify: Restart stepca service\n```\n\nThe
          notify only fires when the pull actually reports `changed`; the handler
          does `systemd_service: state: restarted` \u2192 systemd `ExecStart=docker
          compose up --remove-orphans` \u2192 containers recreated with the new images.
          The handler keeps respecting `stepca_service_allow_restart`, the duplicate
          notify from `Copy docker-compose.yml` still collapses into a single restart,
          and `flush_handlers` at the end of `service.yml` applies the restart before
          the play continues.\n\nThis mirrors the manager-role fix in #2106 (root
          cause #2105).\n\nCloses #2108"
        change_url: https://github.com/osism/ansible-collection-services/pull/2110
        commit_id: 561485f5e6386efc6bb8455829a42823c1635798
        patchset: 561485f5e6386efc6bb8455829a42823c1635798
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/ansible-collection-services
          name: osism/ansible-collection-services
          short_name: ansible-collection-services
          src_dir: src/github.com/osism/ansible-collection-services
        topic: null
      job: ansible-collection-ensure-readme
      jobtags: []
      max_attempts: 3
      message: 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
      patchset: 561485f5e6386efc6bb8455829a42823c1635798
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 3d5c7b5973754999f7005857a00ce9168944f0f1
          trusted/project_1/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 038dd8b856c62af4433c8477c5cb3d0480847059
          trusted/project_2/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 0c74c57cedff2b36bb37ca68a5338d1c49991496
          untrusted/project_0/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 0c74c57cedff2b36bb37ca68a5338d1c49991496
          untrusted/project_1/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 3d5c7b5973754999f7005857a00ce9168944f0f1
          untrusted/project_2/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 038dd8b856c62af4433c8477c5cb3d0480847059
        playbooks:
        - path: untrusted/project_0/github.com/osism/zuul-jobs/playbooks/ansible-collection-ensure-readme/run.yaml
          roles:
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_0/zuul-config
            link_target: untrusted/project_1/github.com/osism/zuul-config
            role_path: ansible/playbook_0/role_0/zuul-config/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_1/openinfra-zuul-jobs
            link_target: untrusted/project_2/github.com/osism/openinfra-zuul-jobs
            role_path: ansible/playbook_0/role_1/openinfra-zuul-jobs/roles
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_0/role_2/zuul-jobs
            link_target: untrusted/project_0/github.com/osism/zuul-jobs
            role_path: ansible/playbook_0/role_2/zuul-jobs/roles
      post_review: false
      post_timeout: 1800
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/osism/ansible-collection-services
        name: osism/ansible-collection-services
        short_name: ansible-collection-services
        src_dir: src/github.com/osism/ansible-collection-services
      projects:
        github.com/osism/ansible-collection-services:
          canonical_hostname: github.com
          canonical_name: github.com/osism/ansible-collection-services
          checkout: main
          checkout_description: zuul branch
          commit: 23fe024b374b276c5a831bc4965315f4be3de743
          name: osism/ansible-collection-services
          required: false
          short_name: ansible-collection-services
          src_dir: src/github.com/osism/ansible-collection-services
      ref: refs/pull/2110/head
      resources: {}
      tenant: osism
      timeout: 1800
      topic: null
      voting: true
