Break out testing into its own triple-parallelized flow

.gitlab-ci.yml

@@ -39,6 +39,7 @@ after_script:
     [ -n "$ZEROTIER_NETWORK_ID" ] && \
     zerotier-cli leave "$ZEROTIER_NETWORK_ID"
 
+## HOUSEKEEPING
 Lint:
   stage: lint
   allow_failure: yes
@@ -50,31 +51,45 @@ Lint:
     - ansible-lint --version
     - ansible-lint site.yml
 
-Test:
+## TEST
+.test:
   stage: test
   interruptible: yes
   except:
     - pipelines
-  script:
-    - ansible-playbook --skip-tags no-test -C site.yml --vault-password-file /vaultpw || error="$?"
-    - if [ "$error" -eq 4 ]; then echo "Some hosts were unreachable; masking error"; unset error; fi
-    - if [ -n "$error" ]; then echo "Return code $error"; false; fi
+  allow_failure:
+    exit_codes:
+      - 4
 
-Play_Against_Pis:
-  stage: play
+pis:test:
+  extends: .test
   script:
-    - ansible-playbook -l tags_pis site.yml --vault-password-file /vaultpw || error="$?"
-    - if [ "$error" -eq 4 ]; then echo "Some hosts were unreachable; masking error"; unset error; fi
-    - if [ -n "$error" ]; then echo "Return code $error"; false; fi
-Play_Against_Desktops:
-  stage: play
+    - ansible-playbook -l tags_pis --skip-tags no-test -C site.yml --vault-password-file /vaultpw
+desktop:test:
+  extends: .test
   script:
-    - ansible-playbook -l tags_desktop site.yml --vault-password-file /vaultpw || error="$?"
-    - if [ "$error" -eq 4 ]; then echo "Some hosts were unreachable; masking error"; unset error; fi
-    - if [ -n "$error" ]; then echo "Return code $error"; false; fi
-Play_Against_Production:
-  stage: play
+    - ansible-playbook -l tags_desktop --skip-tags no-test -C site.yml --vault-password-file /vaultpw
+prod:test:
+  extends: .test
   script:
-    - ansible-playbook -l tags_prod site.yml --vault-password-file /vaultpw || error="$?"
-    - if [ "$error" -eq 4 ]; then echo "Some hosts were unreachable; masking error"; unset error; fi
-    - if [ -n "$error" ]; then echo "Return code $error"; false; fi
+    - ansible-playbook -l tags_prod --skip-tags no-test -C site.yml --vault-password-file /vaultpw
+
+## PLAY
+.play:
+  stage: play
+  allow_failure:
+    exit_codes:
+      - 4
+
+pis:play:
+  extends: .play
+  script:
+    - ansible-playbook -l tags_pis site.yml --vault-password-file /vaultpw
+desktop:play:
+  extends: .play
+  script:
+    - ansible-playbook -l tags_desktop site.yml --vault-password-file /vaultpw
+prod:play:
+  extends: .play
+  script:
+    - ansible-playbook -l tags_prod site.yml --vault-password-file /vaultpw