[defaults]
# --- Logging & Output ---
# YAML-formatted terminal output. The old `community.general.yaml` stdout callback
# was removed in community.general 12.0.0; the built-in `default` callback with
# `result_format = yaml` is the supported replacement (ansible-core >=2.13).
stdout_callback = default
result_format = yaml
# No log_path (#6217). A relative `./ansible.log` gave every checkout its own file, which
# nothing truncated or shipped, and a `--diff` run wrote rendered bodies into it. Each run's
# output is kept where its runner keeps it: `deploy.sh --detach` and `land.sh` write per-run
# logs, and the GitOps deployer's goes to its unit's journal.
# Show timing information for tasks (identifies slow tasks)
callbacks_enabled = profile_tasks
inventory = ansible/inventory/hosts.ini
# ansible/roles is last and unqualified role names never resolve inside it (there are no
# roles at that level) — it exists so the k8s workload roles can be addressed as
# `k8s/<service>`. They are not added as a bare directory: roles_path resolves first-match, so
# a k8s role that shared a name with a setup role would silently resolve to the setup role.
roles_path = ansible/roles/setup:ansible/roles
# First entry is cwd-relative and is where every installer writes: the prek ansible-lint
# hook, CI's cached `ansible-galaxy install -p ansible/collections`, and the initial_setup
# role's `initial_setup.yml --tags collections` task. The second is the primary checkout's copy, spelled absolutely as the FALLBACK. ansible/collections
# is gitignored, so a fresh `.claude/worktrees/<name>` checkout resolves the relative entry
# inside itself, finds nothing, and every playbook dies at the secret-load pre_task with
# `couldn't resolve module/action 'community.sops.load_vars'` -- a message that names a module,
# never the worktree. Ansible reads a path list first-match, so the primary checkout's
# collections are used only when the local ones are absent, and CI (where the absolute path
# does not exist) is unaffected.
collections_path = ansible/collections:/home/ubuntu/server/ansible/collections
display_skipped_hosts = false
interpreter_python = auto_silent
# Don't litter the repo with *.retry files on a partially failed run.
retry_files_enabled = false

[ssh_connection]
pipelining = True