)]}'
{"id":"openstack%2Fopenstack-helm~1003093","triplet_id":"openstack%2Fopenstack-helm~master~Ib790df44db91d5f21f5f9b11cc7f621ddb8bd91f","project":"openstack/openstack-helm","branch":"master","attention_set":{},"removed_from_attention_set":{"3009":{"account":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"last_update":"2026-08-31 22:00:40.000000000","reason":"Change was submitted"}},"hashtags":[],"change_id":"Ib790df44db91d5f21f5f9b11cc7f621ddb8bd91f","subject":"deploy: pin the kubeadm control plane version","status":"MERGED","created":"2026-08-31 17:53:22.000000000","updated":"2026-08-31 22:01:45.000000000","submitted":"2026-08-31 22:00:40.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"1003093","meta_rev_id":"e59b04137bc18cf56670948609ad84670b707f17","_number":1003093,"virtual_id_number":1003093,"owner":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":29974,"name":"Stephen Taylor","email":"stephen.taylor.1@att.com","username":"st053q"},{"value":0,"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2026-08-31 22:00:39.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":29974,"name":"Stephen Taylor","email":"stephen.taylor.1@att.com","username":"st053q"},"all":[{"value":2,"date":"2026-08-31 20:38:26.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":29974,"name":"Stephen Taylor","email":"stephen.taylor.1@att.com","username":"st053q"},{"value":2,"date":"2026-08-31 20:39:04.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"all":[{"value":0,"_account_id":29974,"name":"Stephen Taylor","email":"stephen.taylor.1@att.com","username":"st053q"},{"value":1,"date":"2026-08-31 20:39:04.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":29974,"name":"Stephen Taylor","email":"stephen.taylor.1@att.com","username":"st053q"},{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-08-31 19:51:14.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2026-08-31 20:38:26.000000000","updated_by":{"_account_id":29974,"name":"Stephen Taylor","email":"stephen.taylor.1@att.com","username":"st053q"},"reviewer":{"_account_id":29974,"name":"Stephen Taylor","email":"stephen.taylor.1@att.com","username":"st053q"},"state":"REVIEWER"},{"updated":"2026-08-31 20:39:04.000000000","updated_by":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"reviewer":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"state":"REVIEWER"}],"messages":[{"id":"fe13fa41b1cf436b22398dab9ce99e1127448eb3","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"date":"2026-08-31 17:53:22.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"f69ce57a44048ee13c2c41de1bd15817a3e8647f","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-08-31 19:51:14.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/1c4cd822639b45a1adfb137786e6a1d4\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/541e1ace1bdc49b58f7f067474a9ce77 : SUCCESS in 3m 41s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/fab632bc184645eb8f648acb3738e91b : SUCCESS in 3m 41s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/ae5e0f49e5184082aaed4a6882fb3f2b : SUCCESS in 3m 31s\n- openstack-helm-mariadb-crd-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/fd8b466ab2d14150a88a85126ee9d682 : SUCCESS in 1h 42m 22s\n- openstack-helm-mariadb-operator-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/24f96ae848a444c380585a9b3ef2dbe7 : SUCCESS in 1h 44m 12s\n- openstack-helm-rabbitmq-crd-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/b0835559b2714e3eb5220ee4916ba592 : SUCCESS in 45m 46s\n- openstack-helm-pre-commit https://zuul.opendev.org/t/openstack/build/fed1bc7674d34930b2a7960d6a411001 : SUCCESS in 2m 37s\n- openstack-helm-build-charts https://zuul.opendev.org/t/openstack/build/a106338c780843289ea905ce10564bac : SUCCESS in 2m 42s\n- openstack-helm-cinder-2025-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/f0c68ecdaa3147f4ba9533143b61810a : SUCCESS in 35m 45s\n- openstack-helm-compute-kit-2025-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/4b68cbc4bf4b47e9b8a3f6f899de2721 : SUCCESS in 1h 12m 54s\n- openstack-helm-cinder-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/fa46cf6e8480478f8c382c6c19e980af : SUCCESS in 46m 57s\n- openstack-helm-compute-kit-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/dd5550dd358347eb9137fefe32b6a54b : SUCCESS in 1h 09m 15s\n- openstack-helm-cinder-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/7d2db072664b4e00a079f79988eabfe2 : SUCCESS in 43m 39s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/6126c7b398c74cc88823c6f976bc62c8 : SUCCESS in 1h 15m 12s\n- openstack-helm-tls-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/c0a7ab33baa148faab78fe852117a63b : SUCCESS in 1h 50m 17s\n- openstack-helm-compute-kit-dpdk-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/38beb2c42df244949dca7324561b58bc : SUCCESS in 56m 27s\n- openstack-helm-octavia-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/354634858d4e49c1908351cd7bd01742 : SUCCESS in 43m 53s\n- openstack-helm-logging https://zuul.opendev.org/t/openstack/build/f3f8b76135c541998082aa67cf6a1d51 : SUCCESS in 44m 27s\n- openstack-helm-monitoring https://zuul.opendev.org/t/openstack/build/86864c5deed34ee89c89301aa8b2a69c : SUCCESS in 23m 18s","accounts_in_message":[],"_revision_number":1},{"id":"fdee7dc16d8137dee0d60aa53a17deb456edea23","author":{"_account_id":29974,"name":"Stephen Taylor","email":"stephen.taylor.1@att.com","username":"st053q"},"date":"2026-08-31 20:38:26.000000000","message":"Patch Set 1: Code-Review+2","accounts_in_message":[],"_revision_number":1},{"id":"1f8a4767847525d97676b444f06a0012c8d6641b","author":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"date":"2026-08-31 20:39:04.000000000","message":"Patch Set 1: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":1},{"id":"435bdb0c684c34c23bf2ae751e32d347ce55cb2c","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-08-31 20:39:51.000000000","message":"Patch Set 1: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":1},{"id":"3b22b26cab3bf5cc85cb853be322ad51ae580e43","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-08-31 22:00:39.000000000","message":"Patch Set 1: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/957ff677651d49ffa3a131c87b11ceba\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/ad23aed7930e4329a27b672fc7c427cc : SUCCESS in 3m 27s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/76915a99acdf4f8ca52d7c7516cb51fc : SUCCESS in 3m 39s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/3ee9d88fdc8e4deea47236c61e7b0b87 : SUCCESS in 3m 29s\n- openstack-helm-cinder-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/711529a4df7241fe8c4b45605463f3bb : SUCCESS in 45m 50s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/296d5d473ec346939b6d8c143e5d3c20 : SUCCESS in 1h 15m 22s\n- openstack-helm-logging https://zuul.opendev.org/t/openstack/build/2b848c53d0504aa7a884b0dce11bf8a9 : SUCCESS in 24m 43s\n- openstack-helm-monitoring https://zuul.opendev.org/t/openstack/build/89ec9570ace5451e8fee65c64e222e42 : SUCCESS in 28m 20s","accounts_in_message":[],"_revision_number":1},{"id":"65b79087e01d03fdccfeb3079fe86d77f9809fee","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-08-31 22:00:40.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":1},{"id":"e59b04137bc18cf56670948609ad84670b707f17","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-08-31 22:01:45.000000000","message":"Patch Set 1:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/0b166aae24e04061add9a33d55c0f6ba\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/bf3b459ec8944222b95e2ecca11704b3 : SUCCESS in 46s","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"1175e017929d06eb3c997377dea3b24f82a179b2","revisions":{"1175e017929d06eb3c997377dea3b24f82a179b2":{"kind":"REWORK","_number":1,"created":"2026-08-31 17:53:22.000000000","uploader":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"ref":"refs/changes/93/1003093/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/93/1003093/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/93/1003093/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/93/1003093/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/93/1003093/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/93/1003093/1"}}},"commit":{"parents":[{"commit":"0ee5adeffcaefb6f7a78bb23bf845414672e6827","subject":"Merge \"Migrate to RabbitMQ 4.x by default\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/0ee5adeffcaefb6f7a78bb23bf845414672e6827"}]}],"author":{"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","date":"2026-08-31 17:37:44.000000000","tz":-300},"committer":{"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","date":"2026-08-31 17:53:21.000000000","tz":-300},"subject":"deploy: pin the kubeadm control plane version","message":"deploy: pin the kubeadm control plane version\n\nClusterConfiguration never set kubernetesVersion, so kubeadm fell back\nto its \"stable-1\" default and resolved the control plane from\ndl.k8s.io at run time, ignoring kube_version entirely. The nodes get\nkubeadm, kubelet and kubectl 1.35.0 from the v1.35 package repo, but\nthe control plane images are whatever upstream currently publishes.\n\nThe resolved version moved on its own:\n\n  2026-08-20  [init] Using Kubernetes version: v1.35.7\n  2026-08-27  [init] Using Kubernetes version: v1.36.4\n\nso since 2026-08-27 every job has run kube-apiserver,\nkube-controller-manager and kube-scheduler one minor ahead of the\nkubeadm that configured them. kubeadm supports a control plane at its\nown version or one minor older, never newer, so this is skew in the\nunsupported direction, and it appeared without a single change to the\nrepo.\n\nThe visible symptom is workers failing to join:\n\n  error execution phase preflight: couldn\u0027t validate the identity of\n  the API Server: could not find a JWS signature in the cluster-info\n  ConfigMap for token ID \"xxxxxx\"\n\nThis is the failure the signature wait added in\nI3558527c3862536ef8669a5a45fd7b146215fea4 was meant to remove, and it\ncame back on 2026-08-31 in a form that wait cannot explain. The wait\npassed on the control plane, confirming jws-kubeconfig-rcoesh was in\nthe ConfigMap before any worker started, and two of the four workers\njoined with that token within a second. The other two polled the same\nConfigMap for the full five minute discovery timeout and never saw the\nsignature. The bootstrap-signer that publishes it runs in\nkube-controller-manager, which is one of the components running ahead\nof kubeadm.\n\nPin kubernetesVersion to the packages that are actually installed.\nThat is correct on its own terms whatever the join failure turns out\nto be: the control plane version of a CI environment should be a\nproperty of the repo, not of the day the job runs.\n\nSigned-off-by: Vladimir Kozhukalov \u003ckozhukalov@gmail.com\u003e\nChange-Id: Ib790df44db91d5f21f5f9b11cc7f621ddb8bd91f\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/1175e017929d06eb3c997377dea3b24f82a179b2"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/1175e017929d06eb3c997377dea3b24f82a179b2"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":29974,"name":"Stephen Taylor","email":"stephen.taylor.1@att.com","username":"st053q"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"}}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}