Ansible Run Started: 2026-05-14T22:46:53.544514
User: chrisfu
Machine: morgana
Command: /opt/homebrew/bin/ansible-playbook playbooks/site.yml -i inventory/hosts.ini -l ad_dc --tags samba_dns --ask-vault-pass
----------------------------------------

PLAY [Tier 1 - Boot / kernel (cgroups)]
Targets: ['k3s_hosts']

PLAY [Tier 1.5 - Quiesce k3s and detach migrated iSCSI LUNs (myrddin)]
Targets: ['myrddin.prole.org']

PLAY [Tier 2 - Storage (iSCSI auth/login)]
Targets: ['iscsi']

PLAY [Tier 3 - Filesystem mounts (iSCSI)]
Targets: ['iscsi']

PLAY [Tier 4 - OS configuration (Pi-hole DNS and resilience)]
Targets: ['pihole']

PLAY [Tier 4 - OS configuration (Samba AD DNS reverse zones and PTRs)]
Targets: ['ad_dc']
OK: myrddin.prole.org - samba_dns : Assert Samba DNS admin password is set (vault loaded)
OK: myrddin.prole.org - samba_dns : List Samba DNS zones
SKIPPED: myrddin.prole.org - samba_dns : Create DNS zones if missing
OK: myrddin.prole.org - samba_dns : Ensure forward A records (internal RFC1918 hosts and k3s front-door)
OK: myrddin.prole.org - samba_dns : Ensure forward CNAME records

PLAY [Tier 4 - OS configuration (base linux)]
Targets: ['linux_hosts']

PLAY [Tier 4.1 - OS configuration (Prole SSL certs)]
Targets: ['ssl_hosts']

PLAY [Tier 4 - OS configuration (console dashboard)]
Targets: ['k3s_hosts']

PLAY [Tier 4.5 - Database (MariaDB primary)]
Targets: ['mariadb_primary']

PLAY [Tier 4.6 - Database (MariaDB replica)]
Targets: ['mariadb_replica']

PLAY [Tier 5 - OS package installation (k3s)]
Targets: ['k3s_hosts']

PLAY [Tier 5.5 - Kubernetes node operations (labels)]
Targets: ['k3s_servers']

PLAY [Tier 6 - OS package configuration (helm/kubectl apply)]
Targets: ['k3s_hosts']

STATS
myrddin.prole.org: ok=28 changed=0 unreachable=0 failed=0 skipped=1 rescued=0 ignored=0

Ansible Run Ended: 2026-05-14T22:46:55.459098
Duration: 0:00:01.914584