- hosts: localhost
  name: Create job header and inventory
  roles:
    - role: emit-job-header
      zuul_log_path_shard_build: true
    - log-inventory

# NOTE(ianw) 2022-02-09 : centos8 had a hard shutdown at upstream EOL
# that some were not prepared for.  We can't remove the node-type
# because that gives a Zuul error, preventing projects merging changes
# to update their node types (see
# 2c05c44c32db895d2a793265fb86b6bf662c32d0).  We've removed all the
# CentOS 8 builds in nodepool and the centos-8 node label is pointing
# at centos-8-stream.  But to get people moving off this, we fail jobs
# explicitly using the default nodeset with a name of "centos-8" that
# points to a image of type "centos-8-stream".
#
# This way people can set their jobs non-voting as they merge changes
# to explicitly move away from centos-8 node type.  We obviously hope
# to remove this hack ASAP.
- hosts: all
  name: Hard fail CentOS 8 nodes
  tasks:
    - name: Fail CentOS 8 nodes
      fail:
        msg: "The centos-8 node type is no longer supported.  You need to switch this job to use a centos-8-stream node type."
      when:
        - item == 'centos-8'
        - hostvars[item]['nodepool']['label'] == 'centos-8-stream'
      loop: "{{ query('inventory_hostnames', 'all,!localhost') }}"

- hosts: all
  name: Setup Zuul environment
  pre_tasks:
    # NOTE(pabelanger): Until we hit the validate-host role, we have a minimal
    # set of ansible variables collected by zuul-executor. This doesn't include
    # network variables (ansible_default_ipv4 / ansible_default_ipv6) so gather
    # these variables as they are important to the configure-unbound role.
    - name: Gather network facts
      setup:
        gather_subset: 'network'

  roles:
    - add-build-sshkey
    - start-zuul-console
    - ensure-output-dirs

- hosts: all
  name: Configure unbound
  roles:
    # NOTE(pabelanger): We run this role in its own play to ensure unbound is
    # restarted before proceeding with any other role. This is because we use
    # notify / handler to restart the unbound service. With ansible notify
    # actions are triggered at the end of each block of tasks in a play.
    - configure-unbound

- hosts: all
  name: Prepare workspace and configure mirrors
  roles:
    - validate-host
    - prepare-workspace-git
    - mirror-info
    - role: configure-mirrors
      set_apt_mirrors_trusted: True
      mirror_use_ssl: True
      configure_mirrors_components_9_stream:
        'baseos': true
        'baseos-debug': false
        'baseos-source': false
        'appstream': true
        'appstream-debug': false
        'appstream-source': false
        'crb': true
        'crb-debug': false
        'crb-source': false
        'highavailability': true
        'highavailability-debug': false
        'highavailability-source': false
        'nfv': true
        'nfv-debug': false
        'nfv-source': false
        'rt': true
        'rt-debug': false
        'rt-source': false
        'resilientstorage': true
        'resilientstorage-debug': false
        'resilientstorage-source': false
        'extras-common': true
        'extras-common-source': false