diff --git a/ansible/apparmor-libvirt.yml b/ansible/apparmor-libvirt.yml
index 59cc6f392d71b6fa50824bd731702800fc77fafd..b514605767ac9280d46fe86ebb30d0c9331024e9 100644
--- a/ansible/apparmor-libvirt.yml
+++ b/ansible/apparmor-libvirt.yml
@@ -1,6 +1,11 @@
 ---
 - name: Ensure AppArmor is disabled for containerised libvirt
   hosts: compute
+  max_fail_percentage: >-
+    {{ apparmor_libvirt_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - apparmor-libvirt
   vars:
diff --git a/ansible/apt.yml b/ansible/apt.yml
index 08146bce6a7613cb735fc0f8bb53953b307b05c5..0172249e05849a37fbbc6676dcb40e483f07d24d 100644
--- a/ansible/apt.yml
+++ b/ansible/apt.yml
@@ -1,6 +1,11 @@
 ---
 - name: Ensure APT is configured
   hosts: seed-hypervisor:seed:overcloud:infra-vms
+  max_fail_percentage: >-
+    {{ apt_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   vars:
     ansible_python_interpreter: /usr/bin/python3
   tags:
diff --git a/ansible/baremetal-compute-inspect.yml b/ansible/baremetal-compute-inspect.yml
index 87e3eb580ff02c93d8febb33593bf4321612cb55..c6ec15581883d47cd766756872c638caa0dba082 100644
--- a/ansible/baremetal-compute-inspect.yml
+++ b/ansible/baremetal-compute-inspect.yml
@@ -20,6 +20,11 @@
 - name: Ensure baremetal compute nodes are inspected in ironic
   hosts: baremetal-compute
   gather_facts: False
+  max_fail_percentage: >-
+    {{ baremetal_compute_inspect_max_fail_percentage |
+       default(baremetal_compute_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   vars:
     controller_host: "{{ groups['controllers'][0] }}"
     venv: "{{ virtualenv_path }}/openstacksdk"
diff --git a/ansible/baremetal-compute-introspection-data-save.yml b/ansible/baremetal-compute-introspection-data-save.yml
index 4c63d10c8be8f3b34403bb7174009cd4e7c3f22c..85f17ce31fc2b5d956e57c659efd4d9529977f57 100644
--- a/ansible/baremetal-compute-introspection-data-save.yml
+++ b/ansible/baremetal-compute-introspection-data-save.yml
@@ -18,6 +18,11 @@
 - name: Ensure the baremetal compute nodes' hardware introspection data is saved
   hosts: baremetal-compute
   gather_facts: False
+  max_fail_percentage: >-
+    {{ baremetal_compute_introspection_data_save_max_fail_percentage |
+       default(baremetal_compute_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   vars:
     venv: "{{ virtualenv_path }}/openstack-cli"
     controller_host: "{{ groups['controllers'][0] }}"
diff --git a/ansible/baremetal-compute-manage.yml b/ansible/baremetal-compute-manage.yml
index 66eb05a741afea1780e2408f2e122845e5d0ea3e..265f964e74dac2ea67c0a7e5890bef044b1429b1 100644
--- a/ansible/baremetal-compute-manage.yml
+++ b/ansible/baremetal-compute-manage.yml
@@ -20,6 +20,11 @@
 - name: Ensure baremetal compute nodes are manageable in ironic
   hosts: baremetal-compute
   gather_facts: False
+  max_fail_percentage: >-
+    {{ baremetal_compute_manage_max_fail_percentage |
+       default(baremetal_compute_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   vars:
     venv: "{{ virtualenv_path }}/openstacksdk"
     ansible_python_interpreter: "{{ venv }}/bin/python"
diff --git a/ansible/baremetal-compute-provide.yml b/ansible/baremetal-compute-provide.yml
index 5fb1d801cc618f4a07456d6a95e7b9de9e13b5e2..e69a3d4d67f624df90341764349c72fde90a4eaf 100644
--- a/ansible/baremetal-compute-provide.yml
+++ b/ansible/baremetal-compute-provide.yml
@@ -20,6 +20,11 @@
 - name: Ensure baremetal compute nodes are available in ironic
   hosts: baremetal-compute
   gather_facts: False
+  max_fail_percentage: >-
+    {{ baremetal_compute_provide_max_fail_percentage |
+       default(baremetal_compute_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   vars:
     venv: "{{ virtualenv_path }}/openstacksdk"
     ansible_python_interpreter: "{{ venv }}/bin/python"
diff --git a/ansible/baremetal-compute-register.yml b/ansible/baremetal-compute-register.yml
index f233e09baf36da27d4d96fd71fc69132cb09a509..0dedfe52745e9dace940d5fd1bcfa1ba4c15b1c2 100644
--- a/ansible/baremetal-compute-register.yml
+++ b/ansible/baremetal-compute-register.yml
@@ -18,6 +18,11 @@
 - name: Ensure baremetal compute nodes are registered in ironic
   hosts: baremetal-compute
   gather_facts: false
+  max_fail_percentage: >-
+    {{ baremetal_compute_register_max_fail_percentage |
+       default(baremetal_compute_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - baremetal
   vars:
diff --git a/ansible/baremetal-compute-rename.yml b/ansible/baremetal-compute-rename.yml
index 3184fa2577e981e6a148457042c54cff1561bc66..d1ec5ddf8da2a26af686767308e814e2d9f29369 100644
--- a/ansible/baremetal-compute-rename.yml
+++ b/ansible/baremetal-compute-rename.yml
@@ -21,6 +21,11 @@
 - name: Rename baremetal compute nodes
   hosts: baremetal-compute
   gather_facts: False
+  max_fail_percentage: >-
+    {{ baremetal_compute_rename_max_fail_percentage |
+       default(baremetal_compute_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   vars:
     venv: "{{ virtualenv_path }}/openstack-cli"
     controller_host: "{{ groups['controllers'][0] }}"
diff --git a/ansible/baremetal-compute-serial-console.yml b/ansible/baremetal-compute-serial-console.yml
index 9b5e1abce85f7ab2b65ce81ab1ebc92548f0c4de..d6fedccb0b7b3337e066699d5fc843168fa802d6 100644
--- a/ansible/baremetal-compute-serial-console.yml
+++ b/ansible/baremetal-compute-serial-console.yml
@@ -53,6 +53,11 @@
 - name: Enable serial console
   hosts: "{{ console_compute_node_limit | default('baremetal-compute') }}"
   gather_facts: False
+  max_fail_percentage: >-
+    {{ baremetal_compute_serial_console_max_fail_percentage |
+       default(baremetal_compute_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   vars:
     venv: "{{ virtualenv_path }}/openstack-cli"
     controller_host: "{{ groups['controllers'][0] }}"
diff --git a/ansible/compute-libvirt-host.yml b/ansible/compute-libvirt-host.yml
index 9b3900c22078d44e890c494c613dc3c9f34fa351..99f8988eda240af2a009a7c392195f627ba3f73c 100644
--- a/ansible/compute-libvirt-host.yml
+++ b/ansible/compute-libvirt-host.yml
@@ -1,6 +1,11 @@
 ---
 - name: Ensure the libvirt daemon is configured
   hosts: compute
+  max_fail_percentage: >-
+    {{ compute_libvirt_host_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - libvirt-host
   tasks:
diff --git a/ansible/compute-node-discovery.yml b/ansible/compute-node-discovery.yml
index 539d6ae4a308f457517382deb52e636dd0e97f0e..84f8bca35114d5b6f062defb3d0d4b748cc9fa41 100644
--- a/ansible/compute-node-discovery.yml
+++ b/ansible/compute-node-discovery.yml
@@ -4,6 +4,11 @@
 - name: Ensure baremetal compute nodes are PXE booted
   hosts: baremetal-compute
   gather_facts: no
+  max_fail_percentage: >-
+    {{ compute_node_discovery_max_fail_percentage |
+       default(baremetal_compute_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   vars:
     controller_host: "{{ groups['controllers'][0] }}"
   tasks:
diff --git a/ansible/dell-compute-node-boot-mode.yml b/ansible/dell-compute-node-boot-mode.yml
index 67152a37d613d72cf399aa528eceb2838a0107e6..89a0d098b70795fe0327ef388dab44d4d4d4280b 100644
--- a/ansible/dell-compute-node-boot-mode.yml
+++ b/ansible/dell-compute-node-boot-mode.yml
@@ -7,6 +7,11 @@
 - name: Ensure Dell baremetal compute nodes boot mode is set
   hosts: baremetal-compute
   gather_facts: no
+  max_fail_percentage: >-
+    {{ dell_compute_node_boot_mode_max_fail_percentage |
+       default(baremetal_compute_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   vars:
     # Set this to the required boot mode. One of 'bios' or 'uefi'.
     drac_boot_mode: "bios"
diff --git a/ansible/dell-compute-node-discovery.yml b/ansible/dell-compute-node-discovery.yml
index 683659444499c763a73c64457ea6564d327cf260..dbd12549a70cca9e35a57571e51c895a3a80b74f 100644
--- a/ansible/dell-compute-node-discovery.yml
+++ b/ansible/dell-compute-node-discovery.yml
@@ -7,6 +7,11 @@
 - name: Ensure Dell baremetal compute nodes are PXE booted
   hosts: baremetal-compute
   gather_facts: no
+  max_fail_percentage: >-
+    {{ dell_compute_node_discovery_max_fail_percentage |
+       default(baremetal_compute_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   vars:
     # Set this to the index of the inteface on which to enable PXE.
     drac_pxe_interface: 1
diff --git a/ansible/dell-compute-node-inventory.yml b/ansible/dell-compute-node-inventory.yml
index bc6f852d5d832f924d4b4d1a19c22c680ad6e5e3..68423d1c7d46e0988ceba5e4c0619099e768d6aa 100644
--- a/ansible/dell-compute-node-inventory.yml
+++ b/ansible/dell-compute-node-inventory.yml
@@ -28,6 +28,11 @@
 - name: Ensure Dell baremetal compute nodes are present in the Ansible inventory
   hosts: baremetal-compute
   gather_facts: no
+  max_fail_percentage: >-
+    {{ dell_compute_node_inventory_fail_percentage |
+       default(baremetal_compute_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   vars:
     compute_node_limit: ""
     compute_node_limit_list: "{{ compute_node_limit.split(':') }}"
diff --git a/ansible/dev-tools.yml b/ansible/dev-tools.yml
index 88617af11d7e14f33ba1d77365a3ff3ffb157edd..5f6f3ed32ad2d2e30ded379d9a216d8f22d1e46a 100644
--- a/ansible/dev-tools.yml
+++ b/ansible/dev-tools.yml
@@ -1,6 +1,11 @@
 ---
 - name: Ensure development tools are installed
   hosts: seed-hypervisor:seed:overcloud:infra-vms
+  max_fail_percentage: >-
+    {{ dev_tools_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - dev-tools
   roles:
diff --git a/ansible/disable-cloud-init.yml b/ansible/disable-cloud-init.yml
index 033c7a602448d001d53daadce66dc89e9dfc68ba..7b5bf8537b3555b6bcfe37b317a737729553b1c2 100644
--- a/ansible/disable-cloud-init.yml
+++ b/ansible/disable-cloud-init.yml
@@ -5,6 +5,11 @@
 # and cause some issues in network configuration
 - name: Disable Cloud-init service
   hosts: overcloud:infra-vms
+  max_fail_percentage: >-
+    {{ disable_cloud_init_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - disable-cloud-init
   roles:
diff --git a/ansible/disable-glean.yml b/ansible/disable-glean.yml
index bf583ebdca02b3a5e64bf8a41f8ec88b81a48bc0..e2f35181095485488265fb374a149c2a3d4c0e8f 100644
--- a/ansible/disable-glean.yml
+++ b/ansible/disable-glean.yml
@@ -4,6 +4,11 @@
 # interfaces. In some cases this can lead to timeouts.
 - name: Ensure Glean is disabled and its artifacts are removed
   hosts: seed:overcloud:infra-vms
+  max_fail_percentage: >-
+    {{ disable_glean_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - disable-glean
   roles:
diff --git a/ansible/dnf.yml b/ansible/dnf.yml
index bb5aafb3f5527ab66b6a8d6f11686b5df8d4af4b..73999b9113c9c393493dc2d069215d305721ed74 100644
--- a/ansible/dnf.yml
+++ b/ansible/dnf.yml
@@ -1,6 +1,11 @@
 ---
 - name: Ensure DNF repos are configured
   hosts: seed-hypervisor:seed:overcloud:infra-vms
+  max_fail_percentage: >-
+    {{ dnf_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   vars:
     ansible_python_interpreter: /usr/bin/python3
   tags:
diff --git a/ansible/docker.yml b/ansible/docker.yml
index efcdd3f8649a2141f9f8572fe916559e0c2e9630..3ebffde90f0b65cb8f36853efd25e84a09f6585a 100644
--- a/ansible/docker.yml
+++ b/ansible/docker.yml
@@ -1,6 +1,11 @@
 ---
 - name: Ensure docker is configured
   hosts: docker
+  max_fail_percentage: >-
+    {{ docker_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - docker
   tasks:
diff --git a/ansible/drac-bios.yml b/ansible/drac-bios.yml
index a832f2eaf06c7bb1bd280dde3d38910b1c79417b..e7ce85e945b6ad3f5be2166d101093ae35bf69f9 100644
--- a/ansible/drac-bios.yml
+++ b/ansible/drac-bios.yml
@@ -2,6 +2,10 @@
 - name: Ensure that overcloud nodes' BIOS are configured
   hosts: overcloud
   gather_facts: no
+  max_fail_percentage: >-
+    {{ drac_bios_max_fail_percentage |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   vars:
     bios_config:
       OneTimeBootMode: "OneTimeBootSeq"
diff --git a/ansible/drac-boot-order.yml b/ansible/drac-boot-order.yml
index 52d12ba1a2cf557ffb1bdf9f8c6bd0be8380735e..2ba5118255c643482900cb2920c49b570aa7eef6 100644
--- a/ansible/drac-boot-order.yml
+++ b/ansible/drac-boot-order.yml
@@ -2,6 +2,10 @@
 - name: Ensure that overcloud nodes' boot order is configured
   hosts: overcloud
   gather_facts: no
+  max_fail_percentage: >-
+    {{ drac_boot_order_max_fail_percentage |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   vars:
     ansible_host: "{{ ipmi_address }}"
     ansible_user: "{{ ipmi_username }}"
diff --git a/ansible/drac-facts.yml b/ansible/drac-facts.yml
index 235079513db656831c70d468ddef6e12d6eb5039..41bf7e486c83dd0e94f888e2e3cd947426095976 100644
--- a/ansible/drac-facts.yml
+++ b/ansible/drac-facts.yml
@@ -2,6 +2,10 @@
 - name: Gather and display BIOS and RAID facts from iDRACs
   hosts: overcloud
   gather_facts: no
+  max_fail_percentage: >-
+    {{ drac_facts_max_fail_percentage |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   roles:
     # The role simply pulls in the drac_facts module.
     - role: stackhpc.drac-facts
diff --git a/ansible/dump-config.yml b/ansible/dump-config.yml
index 94d134ad9d125b591acf5ad5b51cd5428d5e8b6e..46ebc089fd7260137ee2635e143d51bd4a91324c 100644
--- a/ansible/dump-config.yml
+++ b/ansible/dump-config.yml
@@ -8,6 +8,10 @@
 - name: Dump configuration from one or more hosts
   hosts: "{{ dump_hosts }}"
   gather_facts: "{{ dump_facts }}"
+  max_fail_percentage: >-
+    {{ dump_config_max_fail_percentage |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - dump-config
   vars:
diff --git a/ansible/etc-hosts.yml b/ansible/etc-hosts.yml
index 270ac64d19c50ac3dfb428f6a0d9c1483da3bc2e..941e6c4724e7dd5660978321554f16b259d97ef9 100644
--- a/ansible/etc-hosts.yml
+++ b/ansible/etc-hosts.yml
@@ -1,6 +1,11 @@
 ---
 - name: Ensure /etc/hosts is configured
   hosts: overcloud
+  max_fail_percentage: >-
+    {{ etc_hosts_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - etc-hosts
   tasks:
diff --git a/ansible/firewall.yml b/ansible/firewall.yml
index fd51e38365d661f425636d90f1f52b205df0077f..8455d05f222d750518128d5633f5314ccb423b70 100644
--- a/ansible/firewall.yml
+++ b/ansible/firewall.yml
@@ -1,6 +1,11 @@
 ---
 - name: Ensure firewall is configured
   hosts: seed-hypervisor:seed:overcloud:infra-vms
+  max_fail_percentage: >-
+    {{ firewall_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - config
     - firewall
diff --git a/ansible/host-command-run.yml b/ansible/host-command-run.yml
index b074ca1ed35483753008aae0923da70e01adde97..ba5497db6520a071b4247232b4e0a0a5c2cff033 100644
--- a/ansible/host-command-run.yml
+++ b/ansible/host-command-run.yml
@@ -1,7 +1,11 @@
 ---
 - name: Run a command
-  gather_facts: False
   hosts: seed-hypervisor:seed:overcloud:infra-vms
+  gather_facts: False
+  max_fail_percentage: >-
+    {{ host_command_run_max_fail_percentage |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tasks:
     - name: Run a command
       shell: "{{ host_command_to_run }}"
diff --git a/ansible/host-package-update.yml b/ansible/host-package-update.yml
index 06bc730770e4c5665456d94a3a956d125848803d..94b014ba186d960cceee81eaae7fbccffc095fb9 100644
--- a/ansible/host-package-update.yml
+++ b/ansible/host-package-update.yml
@@ -1,6 +1,10 @@
 ---
 - name: Update host packages
   hosts: seed-hypervisor:seed:overcloud:infra-vms
+  max_fail_percentage: >-
+    {{ host_package_update_max_fail_percentage |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   vars:
     # Optionally set this to a list of packages to update. Default behaviour is
     # to update all packages.
diff --git a/ansible/infra-vm-deprovision.yml b/ansible/infra-vm-deprovision.yml
index f350f9e0dc90559904c6e1778c4e923e5c0632d1..b0f978e43826d9b82952ee508f0faf1b4ae7a90d 100644
--- a/ansible/infra-vm-deprovision.yml
+++ b/ansible/infra-vm-deprovision.yml
@@ -15,6 +15,10 @@
 
 - name: Ensure defined infra VMs are destroyed
   hosts: hypervisors
+  max_fail_percentage: >-
+    {{ infra_vm_deprovision_max_fail_percentage |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - infra-vm-deprovision
   tasks:
@@ -27,6 +31,10 @@
 - name: Set facts about infra VMs
   gather_facts: false
   hosts: "{{ infra_vm_limit | default('infra-vms') }}"
+  max_fail_percentage: >-
+    {{ infra_vm_deprovision_max_fail_percentage |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - infra-vm-deprovision
   tasks:
diff --git a/ansible/infra-vm-provision.yml b/ansible/infra-vm-provision.yml
index 28d4e325360eb741734aed9fabb38aacf2453dce..d1375472508ed6523b0bbdba5fd666d9843600ee 100644
--- a/ansible/infra-vm-provision.yml
+++ b/ansible/infra-vm-provision.yml
@@ -15,6 +15,10 @@
 
 - name: Ensure defined infra VMs are deployed
   hosts: hypervisors
+  max_fail_percentage: >-
+    {{ infra_vm_provision_max_fail_percentage |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - infra-vm-provision
   tasks:
@@ -26,6 +30,10 @@
 - name: Wait for infra VMs to be accessible
   hosts: "{{ infra_vm_limit | default('infra-vms') }}"
   gather_facts: false
+  max_fail_percentage: >-
+    {{ infra_vm_provision_max_fail_percentage |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - infra-vm-provision
   tasks:
diff --git a/ansible/ip-allocation.yml b/ansible/ip-allocation.yml
index 81038ed5f2ec09a7cd13c8201d51d0ba1c8673b3..b82d934a865c73979bdb78c909c564283d71aa09 100644
--- a/ansible/ip-allocation.yml
+++ b/ansible/ip-allocation.yml
@@ -1,6 +1,11 @@
 ---
 - name: Ensure IP addresses are allocated
   hosts: seed-hypervisor:seed:overcloud:infra-vms
+  max_fail_percentage: >-
+    {{ ip_allocation_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - ip-allocation
   gather_facts: no
diff --git a/ansible/ip-routing.yml b/ansible/ip-routing.yml
index 452914cc520a94c6b45c73fb24a2a462e87ba0f9..9aee6ba228361b54f4153ab19d4125922bdeb6d8 100644
--- a/ansible/ip-routing.yml
+++ b/ansible/ip-routing.yml
@@ -3,6 +3,11 @@
 
 - name: Ensure IP routing is enabled
   hosts: seed-hypervisor:seed
+  max_fail_percentage: >-
+    {{ ip_routing_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - ip-routing
   roles:
diff --git a/ansible/kayobe-ansible-user.yml b/ansible/kayobe-ansible-user.yml
index deb15f35e43cc737090b26135907caf7f700ff29..4f9895f0c23373addc6e809ca00b8df693d9e791 100644
--- a/ansible/kayobe-ansible-user.yml
+++ b/ansible/kayobe-ansible-user.yml
@@ -9,6 +9,11 @@
 - name: Determine whether user bootstrapping is required
   hosts: seed-hypervisor:seed:overcloud:infra-vms
   gather_facts: false
+  max_fail_percentage: >-
+    {{ kayobe_ansible_user_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - kayobe-ansible-user
   tasks:
@@ -31,15 +36,24 @@
           attempting bootstrap
       when: ssh_result.unreachable | default(false)
 
-- name: Ensure python is installed
+- name: Ensure python is installed and the Kayobe Ansible user account exists
   hosts: kayobe_user_bootstrap_required_True
   gather_facts: no
+  max_fail_percentage: >-
+    {{ kayobe_ansible_user_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   vars:
     ansible_user: "{{ bootstrap_user }}"
+    # We can't assume that a virtualenv exists at this point, so use the system
+    # python interpreter.
+    ansible_python_interpreter: /usr/bin/python3
     dnf_options:
       - "-y"
       - "{% if 'proxy' in dnf_config %}--setopt=proxy={{ dnf_config['proxy'] }}{% endif %}"
   tags:
+    - kayobe-ansible-user
     - ensure-python
   tasks:
     - name: Check if python is installed
@@ -53,29 +67,19 @@
       raw: "test -e /usr/bin/apt && (sudo apt -y update && sudo apt install -y python3-minimal) || (sudo dnf {{ dnf_options | select | join(' ') }} install python3)"
       when: check_python.rc != 0
 
-- name: Ensure the Kayobe Ansible user account exists
-  hosts: kayobe_user_bootstrap_required_True
-  gather_facts: false
-  tags:
-    - kayobe-ansible-user
-  vars:
-    ansible_user: "{{ bootstrap_user }}"
-    # We can't assume that a virtualenv exists at this point, so use the system
-    # python interpreter.
-    ansible_python_interpreter: /usr/bin/python3
-  roles:
-    - role: singleplatform-eng.users
-      groups_to_create: "{{ [{'name': 'docker'}] if 'docker' in group_names else [] }}"
-      users:
-        - username: "{{ kayobe_ansible_user }}"
-          name: Kayobe deployment user
-          groups: "{{ ['docker'] if 'docker' in group_names else [] }}"
-          append: True
-          ssh_key:
-            - "{{ lookup('file', ssh_public_key_path) }}"
+    - import_role:
+        name: singleplatform-eng.users
+      vars:
+        groups_to_create: "{{ [{'name': 'docker'}] if 'docker' in group_names else [] }}"
+        users:
+          - username: "{{ kayobe_ansible_user }}"
+            name: Kayobe deployment user
+            groups: "{{ ['docker'] if 'docker' in group_names else [] }}"
+            append: True
+            ssh_key:
+              - "{{ lookup('file', ssh_public_key_path) }}"
       become: True
 
-  post_tasks:
     - name: Ensure the Kayobe Ansible user has passwordless sudo
       copy:
         content: "{{ kayobe_ansible_user }} ALL=(ALL) NOPASSWD: ALL"
@@ -86,6 +90,11 @@
 - name: Verify that the Kayobe Ansible user account is accessible
   hosts: seed-hypervisor:seed:overcloud:infra-vms
   gather_facts: false
+  max_fail_percentage: >-
+    {{ kayobe_ansible_user_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - kayobe-ansible-user
   vars:
diff --git a/ansible/kayobe-target-venv.yml b/ansible/kayobe-target-venv.yml
index 8d51ee44885fe0847e408ea480d29b328fbe48ce..2fc5a942175e090f242998ca0df786de7f582939 100644
--- a/ansible/kayobe-target-venv.yml
+++ b/ansible/kayobe-target-venv.yml
@@ -5,6 +5,11 @@
 - name: Ensure a virtualenv exists for kayobe
   hosts: seed:seed-hypervisor:overcloud:infra-vms
   gather_facts: False
+  max_fail_percentage: >-
+    {{ kayobe_target_venv_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - kayobe-target-venv
   tasks:
diff --git a/ansible/kolla-ansible-user.yml b/ansible/kolla-ansible-user.yml
index e9802d87242ac1cb2523f06ad7ba3251853d80f2..90c87b1f3754c77902716ea568785c539d7ef4a0 100644
--- a/ansible/kolla-ansible-user.yml
+++ b/ansible/kolla-ansible-user.yml
@@ -2,6 +2,11 @@
 - name: Ensure the Kolla Ansible user account exists
   hosts: seed:overcloud
   gather_facts: false
+  max_fail_percentage: >-
+    {{ kolla_ansible_user_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - kolla-ansible
     - kolla-ansible-user
diff --git a/ansible/kolla-bifrost-hostvars.yml b/ansible/kolla-bifrost-hostvars.yml
index b4ab4fb486ab847a2cf345a6ae6e53b432207ec3..9fbed026da50e4ccfcac6070086cc4675a904c52 100644
--- a/ansible/kolla-bifrost-hostvars.yml
+++ b/ansible/kolla-bifrost-hostvars.yml
@@ -4,6 +4,10 @@
 - name: Ensure the Bifrost overcloud inventory is populated
   hosts: overcloud
   gather_facts: no
+  max_fail_percentage: >-
+    {{ kolla_bifrost_hostvars_max_fail_percentage |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - kolla-bifrost-hostvars
   become: true
diff --git a/ansible/kolla-packages.yml b/ansible/kolla-packages.yml
index 9b7469981c5b3b21b61afbc396cd4c065171b263..54425e095aefbf83b213a9fcd327c629f0a9e381 100644
--- a/ansible/kolla-packages.yml
+++ b/ansible/kolla-packages.yml
@@ -1,6 +1,11 @@
 ---
 - name: Ensure Kolla Ansible packages are installed
   hosts: overcloud
+  max_fail_percentage: >-
+    {{ kolla_packages_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - kolla-packages
   vars:
diff --git a/ansible/kolla-pip.yml b/ansible/kolla-pip.yml
index 35a338051fdbe11cbb366e26e9dabc697693aa24..e6c74c38fa572086ea112c66799ea87a0617febd 100644
--- a/ansible/kolla-pip.yml
+++ b/ansible/kolla-pip.yml
@@ -2,6 +2,11 @@
 - name: Configure local PyPi mirror for Kolla Ansible
   hosts: seed:overcloud
   gather_facts: false
+  max_fail_percentage: >-
+    {{ kolla_pip_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - kolla-ansible
     - kolla-pip
diff --git a/ansible/kolla-target-venv.yml b/ansible/kolla-target-venv.yml
index 37305d3aaf13755f4ca60fe079c9979842f52594..760813f27cb8c3110da67dd79a9ae9d5b1b187d8 100644
--- a/ansible/kolla-target-venv.yml
+++ b/ansible/kolla-target-venv.yml
@@ -5,6 +5,11 @@
 - name: Ensure a virtualenv exists for kolla-ansible
   hosts: seed:overcloud
   gather_facts: False
+  max_fail_percentage: >-
+    {{ kolla_target_venv_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   vars:
     # kolla_overcloud_inventory_top_level_group_map looks like:
     # kolla_overcloud_inventory_top_level_group_map:
diff --git a/ansible/logging.yml b/ansible/logging.yml
index ddc584af891db54d5d5198beb2044962429ac0ba..326fe66d822de3d771850808c87b6354803b78b0 100644
--- a/ansible/logging.yml
+++ b/ansible/logging.yml
@@ -1,6 +1,11 @@
 ---
 - name: Ensure Logging configuration is applied
   hosts: seed-hypervisor:seed:overcloud:infra-vms
+  max_fail_percentage: >-
+    {{ logging_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   gather_facts: false
   vars:
     # NOTE(wszumski): Kayobe target env does not yet exist.
diff --git a/ansible/luks.yml b/ansible/luks.yml
index 8dea1146a83a2334d50cba0ccb08f2b67cee9a3f..57e4796f1290b3c7dc76903aca8d6cb1819a490b 100644
--- a/ansible/luks.yml
+++ b/ansible/luks.yml
@@ -1,6 +1,11 @@
 ---
 - name: Ensure encryption configuration is applied
   hosts: seed-hypervisor:seed:overcloud:infra-vms
+  max_fail_percentage: >-
+    {{ luks_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - luks
   tasks:
diff --git a/ansible/lvm.yml b/ansible/lvm.yml
index 53a176eda9b13a1980cb38218e19d024e84ded1a..3d46edaddf47ae034bddd56a2aa2eeb51bd07c23 100644
--- a/ansible/lvm.yml
+++ b/ansible/lvm.yml
@@ -1,6 +1,11 @@
 ---
 - name: Ensure LVM configuration is applied
   hosts: seed-hypervisor:seed:overcloud:infra-vms
+  max_fail_percentage: >-
+    {{ lvm_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - lvm
     - upgrade-check
diff --git a/ansible/mdadm.yml b/ansible/mdadm.yml
index 6b907777e596ec7097ce9e1db9ff0d1d18f1225b..14338dd0a18a9596551ce09e3e6f9fd10d7d23cf 100644
--- a/ansible/mdadm.yml
+++ b/ansible/mdadm.yml
@@ -1,6 +1,11 @@
 ---
 - name: Ensure software RAID configuration is applied
   hosts: seed-hypervisor:seed:overcloud:infra-vms
+  max_fail_percentage: >-
+    {{ mdadm_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - mdadm
   roles:
diff --git a/ansible/network-connectivity.yml b/ansible/network-connectivity.yml
index ccd95230e5b601093a4f9dd8bd7293f869a2be03..745032aa4ac0727318654bd73d462ff58876ddee 100644
--- a/ansible/network-connectivity.yml
+++ b/ansible/network-connectivity.yml
@@ -1,6 +1,10 @@
 ---
 - name: Check network connectivity between hosts
   hosts: seed:seed-hypervisor:overcloud:infra-vms
+  max_fail_percentage: >-
+    {{ network_connectivity_max_fail_percentage |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   vars:
     # Set this to an external IP address to check.
     nc_external_ip: 8.8.8.8
diff --git a/ansible/network.yml b/ansible/network.yml
index 51d93b91ea15d34873034df2b4fd952a39775799..c5b99ad0c757eb4693b89a7374ce7bdf4e890eff 100644
--- a/ansible/network.yml
+++ b/ansible/network.yml
@@ -1,6 +1,11 @@
 ---
 - name: Ensure networking is configured
   hosts: seed-hypervisor:seed:overcloud:infra-vms
+  max_fail_percentage: >-
+    {{ network_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - config
     - network
diff --git a/ansible/overcloud-bios-raid.yml b/ansible/overcloud-bios-raid.yml
index efa25ad428a499f6d6402fea13250f90ab0a502b..4f4199e1b51c517f3c9a0bb864731a713b526ea2 100644
--- a/ansible/overcloud-bios-raid.yml
+++ b/ansible/overcloud-bios-raid.yml
@@ -9,6 +9,10 @@
 - name: Group overcloud nodes by their BMC type
   hosts: overcloud
   gather_facts: no
+  max_fail_percentage: >-
+    {{ overcloud_bios_raid_max_fail_percentage |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - bios
     - raid
@@ -35,6 +39,10 @@
 - name: Check whether any changes to nodes' BIOS and RAID configuration are required
   hosts: overcloud_with_bmcs_of_type_idrac
   gather_facts: no
+  max_fail_percentage: >-
+    {{ overcloud_bios_raid_max_fail_percentage |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - bios
     - raid
@@ -57,6 +65,10 @@
 - name: Ensure that overcloud BIOS and RAID volumes are configured
   hosts: overcloud_with_bmcs_of_type_idrac
   gather_facts: no
+  max_fail_percentage: >-
+    {{ overcloud_bios_raid_max_fail_percentage |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - bios
     - raid
diff --git a/ansible/overcloud-deprovision.yml b/ansible/overcloud-deprovision.yml
index 824f8ccbba5a869d4885dcb5f08a54b0c1317d96..40e467f9a5ead55ead4a9c0168a4f57cdce916ce 100644
--- a/ansible/overcloud-deprovision.yml
+++ b/ansible/overcloud-deprovision.yml
@@ -3,6 +3,10 @@
 
 - name: Ensure the overcloud nodes are deprovisioned
   hosts: overcloud
+  max_fail_percentage: >-
+    {{ overcloud_deprovision_max_fail_percentage |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - deprovision
   vars:
diff --git a/ansible/overcloud-etc-hosts-fixup.yml b/ansible/overcloud-etc-hosts-fixup.yml
index 49b0bb3b0a38e74b02286db655912ca57cb2dd5b..c20ffab77a1585da4f41179dc842141956b0b3ce 100644
--- a/ansible/overcloud-etc-hosts-fixup.yml
+++ b/ansible/overcloud-etc-hosts-fixup.yml
@@ -9,6 +9,10 @@
 
 - name: Ensure overcloud hosts' /etc/hosts does not contain incorrect IPs
   hosts: overcloud
+  max_fail_percentage: >-
+    {{ overcloud_etc_hosts_fixup_max_fail_percentage |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - etc-hosts-fixup
   tasks:
@@ -25,6 +29,10 @@
 
 - name: Ensure rabbitmq containers' /etc/hosts does not contain incorrect IPs
   hosts: overcloud
+  max_fail_percentage: >-
+    {{ overcloud_etc_hosts_fixup_max_fail_percentage |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - etc-hosts-fixup
   vars:
diff --git a/ansible/overcloud-facts-gather.yml b/ansible/overcloud-facts-gather.yml
index a8f101afe29068fbbaf4385c914da22a4f9bbef5..98beb7d61195e97e0a36e32033a726200523624f 100644
--- a/ansible/overcloud-facts-gather.yml
+++ b/ansible/overcloud-facts-gather.yml
@@ -1,6 +1,10 @@
 ---
 - name: Gather facts
   hosts: overcloud
+  max_fail_percentage: >-
+    {{ overcloud_facts_gather_max_fail_percentage |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   gather_facts: false
   tasks:
     - name: Gather facts
diff --git a/ansible/overcloud-hardware-inspect.yml b/ansible/overcloud-hardware-inspect.yml
index 3477b7c15e3b78496ca3b2e87f6345a69a1d15f3..dd38341170e2597afa8acb07da3b1122187ca435 100644
--- a/ansible/overcloud-hardware-inspect.yml
+++ b/ansible/overcloud-hardware-inspect.yml
@@ -3,6 +3,10 @@
 
 - name: Ensure the overcloud nodes' hardware is inspected
   hosts: overcloud
+  max_fail_percentage: >-
+    {{ overcloud_hardware_inspect_max_fail_percentage |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - hardware-inspect
   vars:
diff --git a/ansible/overcloud-introspection-data-save.yml b/ansible/overcloud-introspection-data-save.yml
index 945567b8af1c14767e5b387ee2a37bf327ab071c..1a95752dd6ac438ad4a57b0e7d813f6e5f485df9 100644
--- a/ansible/overcloud-introspection-data-save.yml
+++ b/ansible/overcloud-introspection-data-save.yml
@@ -1,6 +1,10 @@
 ---
 - name: Ensure the overcloud nodes' hardware introspection data is saved
   hosts: overcloud
+  max_fail_percentage: >-
+    {{ overcloud_introspection_data_save_max_fail_percentage |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   vars:
     seed_host: "{{ groups['seed'][0] }}"
     # Override this to save results to another location.
diff --git a/ansible/overcloud-provision.yml b/ansible/overcloud-provision.yml
index 20ef8be935bb7bdc57843bfd6fdab2a8b33ffdd3..72a5461394bebeccc11770b789c6c70a66f30104 100644
--- a/ansible/overcloud-provision.yml
+++ b/ansible/overcloud-provision.yml
@@ -3,6 +3,10 @@
 
 - name: Ensure the overcloud nodes are provisioned
   hosts: overcloud
+  max_fail_percentage: >-
+    {{ overcloud_provision_max_fail_percentage |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - provision
   vars:
diff --git a/ansible/overcloud-service-config-save.yml b/ansible/overcloud-service-config-save.yml
index 3062fcdbef67e3845d03af41f8299723ed63fb05..7b1772da8961f4955786228820b1c58011f1b53d 100644
--- a/ansible/overcloud-service-config-save.yml
+++ b/ansible/overcloud-service-config-save.yml
@@ -1,6 +1,10 @@
 ---
 - name: Save overcloud service configuration
   hosts: overcloud
+  max_fail_percentage: >-
+    {{ overcloud_service_config_save_max_fail_percentage |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - service-config-save
   vars:
diff --git a/ansible/physical-network.yml b/ansible/physical-network.yml
index fed798576091eb5cdf54c14601777efe7e551183..45600e5d0b54a5377763dad11741b647b98f2402 100644
--- a/ansible/physical-network.yml
+++ b/ansible/physical-network.yml
@@ -5,6 +5,10 @@
 - name: Group hosts by their switch type and apply configuration filters
   hosts: switches
   gather_facts: no
+  max_fail_percentage: >-
+    {{ physical_network_max_fail_percentage |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   vars:
     # Set this variable to True to configure the network for hardware
     # discovery.
@@ -90,6 +94,10 @@
 - name: Display switch configuration
   hosts: switches_in_display_mode_True
   gather_facts: no
+  max_fail_percentage: >-
+    {{ physical_network_max_fail_percentage |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tasks:
     - name: Display the candidate global switch configuration
       debug:
@@ -102,6 +110,10 @@
 - name: Ensure Arista physical switches are configured
   hosts: switches_of_type_arista:&switches_in_display_mode_False
   gather_facts: no
+  max_fail_percentage: >-
+    {{ physical_network_max_fail_percentage |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   roles:
     - role: ssh-known-host
 
@@ -114,6 +126,10 @@
 - name: Ensure DellOS physical switches are configured
   hosts: switches_of_type_dellos6:switches_of_type_dellos9:switches_of_type_dellos10:&switches_in_display_mode_False
   gather_facts: no
+  max_fail_percentage: >-
+    {{ physical_network_max_fail_percentage |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   roles:
     - role: ssh-known-host
 
@@ -127,6 +143,10 @@
 - name: Ensure Dell PowerConnect physical switches are configured
   hosts: switches_of_type_dell-powerconnect:&switches_in_display_mode_False
   gather_facts: no
+  max_fail_percentage: >-
+    {{ physical_network_max_fail_percentage |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   roles:
     - role: ssh-known-host
 
@@ -139,6 +159,10 @@
 - name: Ensure Juniper physical switches are configured
   hosts: switches_of_type_junos:&switches_in_display_mode_False
   gather_facts: no
+  max_fail_percentage: >-
+    {{ physical_network_max_fail_percentage |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   roles:
     - role: ssh-known-host
 
@@ -152,6 +176,10 @@
 - name: Ensure Mellanox physical switches are configured
   hosts: switches_of_type_mellanox:&switches_in_display_mode_False
   gather_facts: no
+  max_fail_percentage: >-
+    {{ physical_network_max_fail_percentage |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   roles:
     - role: ssh-known-host
 
@@ -164,6 +192,10 @@
 - name: Ensure Cumulus physical switches are configured with NCLU
   hosts: switches_of_type_nclu:&switches_in_display_mode_False
   gather_facts: no
+  max_fail_percentage: >-
+    {{ physical_network_max_fail_percentage |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   roles:
     - role: ssh-known-host
 
diff --git a/ansible/pip.yml b/ansible/pip.yml
index f9ca037755c3119a1bc9f12fb5fccfbe8c894b81..3bea4a70d35cdc106b70abe58bc65e54bb38fd4b 100644
--- a/ansible/pip.yml
+++ b/ansible/pip.yml
@@ -1,6 +1,11 @@
 ---
 - name: Configure local PyPi mirror
   hosts: seed-hypervisor:seed:overcloud:infra-vms
+  max_fail_percentage: >-
+    {{ pip_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - pip
   vars:
diff --git a/ansible/proxy.yml b/ansible/proxy.yml
index e618b9c0d5e0f9724fb613491f161fe44f806413..1f39eb6d1af33837a106d3d3f99d661cfa3bf83e 100644
--- a/ansible/proxy.yml
+++ b/ansible/proxy.yml
@@ -1,5 +1,10 @@
 - name: Configure HTTP(S) proxy settings
   hosts: seed-hypervisor:seed:overcloud:infra-vms
+  max_fail_percentage: >-
+    {{ proxy_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   vars:
     ansible_python_interpreter: /usr/bin/python3
   tags:
diff --git a/ansible/selinux.yml b/ansible/selinux.yml
index a03e67a27d465cb5088879b72e5b76b83d9702e9..aa00d4ce4a514253fef72add114edb0fa69d6249 100644
--- a/ansible/selinux.yml
+++ b/ansible/selinux.yml
@@ -1,6 +1,11 @@
 ---
 - name: Configure SELinux state and reboot if required
   hosts: seed:seed-hypervisor:overcloud:infra-vms
+  max_fail_percentage: >-
+    {{ selinux_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - selinux
   roles:
diff --git a/ansible/ssh-known-host.yml b/ansible/ssh-known-host.yml
index bb4ae311fb24fb82fd5ce9e84e28a6c4dfb32dd6..a13ffba3abd75fc06ab1e01284062aa3838e6977 100644
--- a/ansible/ssh-known-host.yml
+++ b/ansible/ssh-known-host.yml
@@ -2,6 +2,11 @@
 - name: Ensure known hosts are configured
   hosts: all
   gather_facts: no
+  max_fail_percentage: >-
+    {{ ssh_known_host_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - ssh-known-host
   roles:
diff --git a/ansible/swap.yml b/ansible/swap.yml
index 5402e38ef23a5c35ffcc59542a061624015b9edb..82ccbba85658971fe35cead41c22c5ce274c0fdd 100644
--- a/ansible/swap.yml
+++ b/ansible/swap.yml
@@ -2,6 +2,11 @@
 - name: Configure swap
   hosts: seed-hypervisor:seed:overcloud:infra-vms
   become: true
+  max_fail_percentage: >-
+    {{ swap_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - swap
   tasks:
diff --git a/ansible/swift-block-devices.yml b/ansible/swift-block-devices.yml
index c476a7e30c2494e528330dcbf05b57de6dc86478..306a13d1bcbc3971692b9a7f5d1bda55b2a4f138 100644
--- a/ansible/swift-block-devices.yml
+++ b/ansible/swift-block-devices.yml
@@ -1,6 +1,10 @@
 ---
 - name: Ensure Swift block devices are prepared
   hosts: "{{ swift_hosts }}"
+  max_fail_percentage: >-
+    {{ swift_block_devices_max_fail_percentage |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   vars:
     swift_hosts: storage
   tags:
diff --git a/ansible/sysctl.yml b/ansible/sysctl.yml
index 0f4ad743586100dac9cdc8cf34dd23d2863fd0e2..cf2a2793ef7156abee9a69547a922bcccf63f9ea 100644
--- a/ansible/sysctl.yml
+++ b/ansible/sysctl.yml
@@ -1,6 +1,11 @@
 ---
 - name: Ensure sysctl parameters are configured
   hosts: seed:seed-hypervisor:overcloud:infra-vms
+  max_fail_percentage: >-
+    {{ sysctl_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - sysctl
   roles:
diff --git a/ansible/time.yml b/ansible/time.yml
index 18a18d9421eb1858134c2ea6994996ef6e571ccc..2c02e5bbe4b95c1eee84b11e0a946febdafc5990 100644
--- a/ansible/time.yml
+++ b/ansible/time.yml
@@ -1,6 +1,11 @@
 ---
 - name: Ensure timezone is configured
   hosts: seed-hypervisor:seed:overcloud:infra-vms
+  max_fail_percentage: >-
+    {{ time_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - timezone
   tasks:
@@ -24,6 +29,11 @@
 
 - name: Ensure Chrony is installed and configured
   hosts: ntp
+  max_fail_percentage: >-
+    {{ time_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - ntp
   tasks:
diff --git a/ansible/tuned.yml b/ansible/tuned.yml
index 9553da7c7c95f059db92b22ac50b57fee4cb7946..69c5ba8d6db68e7eee05dcd202d112bd76f5b23c 100644
--- a/ansible/tuned.yml
+++ b/ansible/tuned.yml
@@ -1,6 +1,11 @@
 ---
 - name: Configure tuned profile
   hosts: seed:seed-hypervisor:overcloud:infra-vms
+  max_fail_percentage: >-
+    {{ tuned_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - tuned
   roles:
diff --git a/ansible/users.yml b/ansible/users.yml
index 6a89b769782614a5d050fff4feb71c665108146e..6afc1fd53a8c40831af1a3bc6b61bd72d509d16f 100644
--- a/ansible/users.yml
+++ b/ansible/users.yml
@@ -1,6 +1,11 @@
 ---
 - name: Ensure users exist
   hosts: seed:seed-hypervisor:overcloud:infra-vms
+  max_fail_percentage: >-
+    {{ users_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - users
   roles:
diff --git a/ansible/vgpu.yml b/ansible/vgpu.yml
index ebda83fa67d656de1e91ac4808facac3395d689e..58a424eb70265cd7bbe59897c241e0a2b2d492b6 100644
--- a/ansible/vgpu.yml
+++ b/ansible/vgpu.yml
@@ -1,6 +1,11 @@
 ---
 - name: Configure IOMMU
   hosts: iommu
+  max_fail_percentage: >-
+    {{ vgpu_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - iommu
     - vgpu
@@ -15,6 +20,11 @@
 
 - name: Configure NVIDIA VGPUs
   hosts: vgpu
+  max_fail_percentage: >-
+    {{ vgpu_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - vgpu
   tasks:
@@ -28,6 +38,11 @@
 
 - name: Reboot when required
   hosts: iommu:vgpu
+  max_fail_percentage: >-
+    {{ vgpu_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - reboot
     - iommu
diff --git a/ansible/wipe-disks.yml b/ansible/wipe-disks.yml
index a833f3c17f847aa8649531b768530ce4a8f09be3..79fe2edf1e3c2ce0072c0523dc4578706efe5674 100644
--- a/ansible/wipe-disks.yml
+++ b/ansible/wipe-disks.yml
@@ -9,6 +9,11 @@
 
 - name: Ensure that all unmounted block devices are wiped
   hosts: seed-hypervisor:seed:overcloud:infra-vms
+  max_fail_percentage: >-
+    {{ wipe_disks_max_fail_percentage |
+       default(host_configure_max_fail_percentage) |
+       default(kayobe_max_fail_percentage) |
+       default(100) }}
   tags:
     - wipe-disks
   tasks:
diff --git a/doc/source/configuration/reference/ansible.rst b/doc/source/configuration/reference/ansible.rst
index 49372428d8468c8a0fea319e3f9e237404897c5e..1d8a652170e22bac042cc26faf69b4d7ef2ebb3f 100644
--- a/doc/source/configuration/reference/ansible.rst
+++ b/doc/source/configuration/reference/ansible.rst
@@ -146,3 +146,30 @@ Similarly, for Kolla Ansible (notice the similar but different file names):
    :caption: ``$KAYOBE_CONFIG_PATH/kolla/globals.yml``
 
    kolla_ansible_setup_gather_subset: "all,!facter"
+
+Max failure percentage
+======================
+
+It is possible to specify a `maximum failure percentage
+<https://docs.ansible.com/ansible/latest/playbook_guide/playbooks_error_handling.html#setting-a-maximum-failure-percentage>`__
+using ``kayobe_max_fail_percentage``. By default this is undefined, which is
+equivalent to a value of 100, meaning that Ansible will continue execution
+until all hosts have failed or completed. For example:
+
+.. code-block:: yaml
+   :caption: ``$KAYOBE_CONFIG_PATH/globals.yml``
+
+   kayobe_max_fail_percentage: 50
+
+A max fail percentage may be set for the ``kayobe * host configure`` commands
+using ``host_configure_max_fail_percentage``, or for a specific playbook using
+``<playbook>_max_fail_percentage`` where ``<playbook>`` is the playbook name
+with dashes replaced with underscores and without the ``.yml`` extension. For
+example:
+
+.. code-block:: yaml
+   :caption: ``$KAYOBE_CONFIG_PATH/globals.yml``
+
+   kayobe_max_fail_percentage: 50
+   host_configure_max_fail_percentage: 25
+   time_max_fail_percentage: 100
diff --git a/etc/kayobe/globals.yml b/etc/kayobe/globals.yml
index 50af1cb14f23d4751dca8b83389bd263a10e9ddd..a97f74d1a9d96f87ddb6a7e71bff85a95fb164cd 100644
--- a/etc/kayobe/globals.yml
+++ b/etc/kayobe/globals.yml
@@ -64,6 +64,10 @@
 # to not specify a gather subset.
 #kayobe_ansible_setup_gather_subset:
 
+# Global maximum failure percentage. By default this is undefined, which is
+# equivalent to a value of 100.
+#kayobe_max_fail_percentage:
+
 ###############################################################################
 # Dummy variable to allow Ansible to accept this file.
 workaround_ansible_issue_8743: yes
diff --git a/releasenotes/notes/max-fail-percentage-5f1d21bdcd138695.yaml b/releasenotes/notes/max-fail-percentage-5f1d21bdcd138695.yaml
new file mode 100644
index 0000000000000000000000000000000000000000..c0768f2ca29b5b26a5854fa96028ccf25b26fa04
--- /dev/null
+++ b/releasenotes/notes/max-fail-percentage-5f1d21bdcd138695.yaml
@@ -0,0 +1,6 @@
+---
+features:
+  - |
+    Adds support for setting the max fail percentage for Ansible plays via
+    ``kayobe_max_fail_percentage``. It can also be set on a per-playbook basis,
+    e.g. ``time_max_fail_percentage``.