On Mon, Apr 4, 2022 at 3:36 PM Jiri Podivin <jpodivin at redhat.com> wrote: > I understand. > The question is how far back, if at all, should we backport the change. > Provided that it is merged into master of course. > > well the proposed fix on our side is in the ci tooling https://review.opendev.org/c/openstack/tripleo-quickstart/+/836104 and that repo is branchless so we should be good > > On Mon, Apr 4, 2022 at 2:21 PM Jeremy Stanley <fungi at yuggoth.org> wrote: > >> On 2022-04-04 09:35:39 +0300 (+0300), Marios Andreou wrote: >> [...] >> > In this particular case, we can get away with installing the >> > ansible galaxy collections because we have 'nested' ansible so >> > something like zuul (ansible) calling bash (tripleo-quickstart) >> > calling ansible. There are other cases (zuul/ansible 'native', >> > not nested) where we have to install such dependencies as python >> > utilities because of the security concerns around allowing >> > collections to be installed on the ansible controller (e.g. see >> > >> http://lists.zuul-ci.org/pipermail/zuul-discuss/2021-November/001752.html >> ). >> [...] >> >> We hope this will get simpler soon as we work toward Zuul v6: >> >> >> https://zuul-ci.org/docs/zuul/latest/developer/specs/unrestricted-ansible.html >> >> -- >> Jeremy Stanley >> > -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20220404/1192748e/attachment.htm>