c12s-kubespray/roles/bastion-ssh-config/tasks/main.yml

---
- set_fact:
    has_bastion: "{{ 'bastion' in groups['all'] }}"

- set_fact:
    bastion_ip: "{{ hostvars['bastion']['ansible_host'] }}"
  when: has_bastion

# As we are actually running on localhost, the ansible_ssh_user is your local user when you try to use it directly
# To figure out the real ssh user, we delegate this task to the bastion and store the ansible_user in real_user
- set_fact:
    real_user: "{{ ansible_user }}"
  delegate_to: bastion
  when: has_bastion

- name: create ssh bastion conf
  become: false
  template:
    src: ssh-bastion.conf
    dest: "{{ playbook_dir }}/ssh-bastion.conf"
  when: has_bastion
Add support for bastion hosts 2016-12-09 09:38:17 +00:00			`---`
			`- set_fact:`
			`has_bastion: "{{ 'bastion' in groups['all'] }}"`

			`- set_fact:`
Changre raw execution to use yum module (#1785) * Changre raw execution to use yum module Changed raw exection to use yum module provided by Ansible. * Replace ansible_ssh_* by ansible_* Ansible 2.0 has deprecated the “ssh” from ansible_ssh_user, ansible_ssh_host, and ansible_ssh_port to become ansible_user, ansible_host, and ansible_port. If you are using a version of Ansible prior to 2.0, you should continue using the older style variables (ansible_ssh_*). These shorter variables are ignored, without warning, in older versions of Ansible. I am not sure about the broader impact of this change. But I have seen on the requirements the version required is ansible>=2.4.0. http://docs.ansible.com/ansible/latest/intro_inventory.html 2017-10-14 08:52:40 +00:00			`bastion_ip: "{{ hostvars['bastion']['ansible_host'] }}"`
Add support for bastion hosts 2016-12-09 09:38:17 +00:00			`when: has_bastion`

			`# As we are actually running on localhost, the ansible_ssh_user is your local user when you try to use it directly`
Changre raw execution to use yum module (#1785) * Changre raw execution to use yum module Changed raw exection to use yum module provided by Ansible. * Replace ansible_ssh_* by ansible_* Ansible 2.0 has deprecated the “ssh” from ansible_ssh_user, ansible_ssh_host, and ansible_ssh_port to become ansible_user, ansible_host, and ansible_port. If you are using a version of Ansible prior to 2.0, you should continue using the older style variables (ansible_ssh_*). These shorter variables are ignored, without warning, in older versions of Ansible. I am not sure about the broader impact of this change. But I have seen on the requirements the version required is ansible>=2.4.0. http://docs.ansible.com/ansible/latest/intro_inventory.html 2017-10-14 08:52:40 +00:00			`# To figure out the real ssh user, we delegate this task to the bastion and store the ansible_user in real_user`
Add support for bastion hosts 2016-12-09 09:38:17 +00:00			`- set_fact:`
Changre raw execution to use yum module (#1785) * Changre raw execution to use yum module Changed raw exection to use yum module provided by Ansible. * Replace ansible_ssh_* by ansible_* Ansible 2.0 has deprecated the “ssh” from ansible_ssh_user, ansible_ssh_host, and ansible_ssh_port to become ansible_user, ansible_host, and ansible_port. If you are using a version of Ansible prior to 2.0, you should continue using the older style variables (ansible_ssh_*). These shorter variables are ignored, without warning, in older versions of Ansible. I am not sure about the broader impact of this change. But I have seen on the requirements the version required is ansible>=2.4.0. http://docs.ansible.com/ansible/latest/intro_inventory.html 2017-10-14 08:52:40 +00:00			`real_user: "{{ ansible_user }}"`
Add support for bastion hosts 2016-12-09 09:38:17 +00:00			`delegate_to: bastion`
			`when: has_bastion`

			`- name: create ssh bastion conf`
			`become: false`
Cleanup legacy syntax, spacing, files all to yml Migrate older inline= syntax to pure yml syntax for module args as to be consistant with most of the rest of the tasks Cleanup some spacing in various files Rename some files named yaml to yml for consistancy 2017-02-17 21:22:34 +00:00			`template:`
			`src: ssh-bastion.conf`
			`dest: "{{ playbook_dir }}/ssh-bastion.conf"`
Only write bastion ssh config when needed (#1810) This will allow running Kubespray when the user who runs it doesn't have write permissions to the Kubespray dir, at least when not using bastion. 2017-10-17 09:28:45 +00:00			`when: has_bastion`