RCA-2026-03-09-001: Analysis

Root Cause

5 Whys Analysis

Why #	Question and Answer
1	Why was DNS HA broken? Because: resolv.conf only had one nameserver
2	Why only one nameserver? Because: NetworkManager connection only had one DNS configured
3	Why only one DNS? Because: Static IP configuration wasn’t properly saved
4	Why wasn’t static config preserved? Because: No runbook exists for EAP-TLS connection creation
5	Why no runbook? Because: EAP-TLS setup was done ad-hoc without documentation

Root Cause Statement: The EAP-TLS connection was missing static IP and dual DNS configuration, likely reset during system update or never fully configured.