From 869faf720ae0deea1c76703f97c720d79c0f5b21 Mon Sep 17 00:00:00 2001
From: Vezpi <etienne.girault@gmail.com>
Date: Tue, 23 Jun 2026 19:27:26 +0000
Subject: [PATCH] add: any_errors_fatal for phase 2 and 3

---
 ansible/opnsense/update_opnsense_ha_cluster.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/ansible/opnsense/update_opnsense_ha_cluster.yml b/ansible/opnsense/update_opnsense_ha_cluster.yml
index 497119b..e7d5429 100644
--- a/ansible/opnsense/update_opnsense_ha_cluster.yml
+++ b/ansible/opnsense/update_opnsense_ha_cluster.yml
@@ -123,6 +123,7 @@
 
 - name: "Phase 2 | Update backup node (TrueNAS, no snapshot)"
   hosts: opnsense_backup
+  any_errors_fatal: true
   gather_facts: false
   tasks:
 
@@ -189,7 +190,7 @@
           until: _post_firmware_status.json.product_version | default('unknown') == firmware_new_version
           retries: 240
           delay: 15
-          
+
         - name: Check VIP status 
           ansible.builtin.uri:
             url: "https://{{ opnsense_host }}/api/diagnostics/interface/get_vip_status"
@@ -235,6 +236,7 @@
 
 - name: "Phase 3 | Update master node (Proxmox, with snapshot)"
   hosts: opnsense_master
+  any_errors_fatal: true
   gather_facts: false
   vars:
     proxmox_snap_name: "preupdate-{{ now().strftime('%Y%m%d') }}"