I understand.

The question is how far back, if at all, should we backport the change. Provided that it is merged into master of course.

On Mon, Apr 4, 2022 at 2:21 PM Jeremy Stanley <fungi@yuggoth.org> wrote:

On 2022-04-04 09:35:39 +0300 (+0300), Marios Andreou wrote:
[...]
> In this particular case, we can get away with installing the
> ansible galaxy collections because we have 'nested' ansible so
> something like zuul (ansible) calling bash (tripleo-quickstart)
> calling ansible.  There are other cases (zuul/ansible 'native',
> not nested) where we have to install such dependencies as python
> utilities because of the security concerns around allowing
> collections to be installed on the ansible controller (e.g. see
> http://lists.zuul-ci.org/pipermail/zuul-discuss/2021-November/001752.html).
[...]

We hope this will get simpler soon as we work toward Zuul v6:

https://zuul-ci.org/docs/zuul/latest/developer/specs/unrestricted-ansible.html

--
Jeremy Stanley