c12s-kubespray/roles/bastion-ssh-config/tasks/main.yml

---
- name: set bastion host IP and port
  set_fact:
    bastion_ip: "{{ hostvars[groups['bastion'][0]]['ansible_host'] | d(hostvars[groups['bastion'][0]]['ansible_ssh_host']) }}"
    bastion_port: "{{ hostvars[groups['bastion'][0]]['ansible_port'] | d(hostvars[groups['bastion'][0]]['ansible_ssh_port']) | d(22) }}"
  delegate_to: localhost
  connection: local

# As we are actually running on localhost, the ansible_ssh_user is your local user when you try to use it directly
# To figure out the real ssh user, we delegate this task to the bastion and store the ansible_user in real_user
- name: Store the current ansible_user in the real_user fact
  set_fact:
    real_user: "{{ ansible_user }}"

- name: create ssh bastion conf
  become: false
  delegate_to: localhost
  connection: local
  template:
    src: ssh-bastion.conf
    dest: "{{ playbook_dir }}/ssh-bastion.conf"
Add support for bastion hosts 2016-12-09 09:38:17 +00:00			`---`
Allow connecting to bastion via non-standard SSH port (#7396) * Allow connecting to bastion via non-standard port * Fix bastion connection when ansible_port is not provided 2021-03-26 07:48:43 +00:00			`- name: set bastion host IP and port`
Fix Ansible-lint error [E502] (#4743) 2019-05-16 07:27:43 +00:00			`set_fact:`
Split deploy steps in separate playbooks: part1 (#3451) * Fix bootstrap_os/ubuntu idempotency * Update bastion role * move container_engine in sub-roles * requires ansible 2.5 * ubuntu18 as first CI job 2018-10-10 02:14:33 +00:00			`bastion_ip: "{{ hostvars[groups['bastion'][0]]['ansible_host'] \| d(hostvars[groups['bastion'][0]]['ansible_ssh_host']) }}"`
Allow connecting to bastion via non-standard SSH port (#7396) * Allow connecting to bastion via non-standard port * Fix bastion connection when ansible_port is not provided 2021-03-26 07:48:43 +00:00			`bastion_port: "{{ hostvars[groups['bastion'][0]]['ansible_port'] \| d(hostvars[groups['bastion'][0]]['ansible_ssh_port']) \| d(22) }}"`
Split deploy steps in separate playbooks: part1 (#3451) * Fix bootstrap_os/ubuntu idempotency * Update bastion role * move container_engine in sub-roles * requires ansible 2.5 * ubuntu18 as first CI job 2018-10-10 02:14:33 +00:00			`delegate_to: localhost`
Use `connection: local` when `delegate_to: localhost` (#6322) This will avoid SSH connection on the local host 2020-06-25 15:14:38 +00:00			`connection: local`
Add support for bastion hosts 2016-12-09 09:38:17 +00:00
			`# As we are actually running on localhost, the ansible_ssh_user is your local user when you try to use it directly`
Changre raw execution to use yum module (#1785) * Changre raw execution to use yum module Changed raw exection to use yum module provided by Ansible. * Replace ansible_ssh_* by ansible_* Ansible 2.0 has deprecated the “ssh” from ansible_ssh_user, ansible_ssh_host, and ansible_ssh_port to become ansible_user, ansible_host, and ansible_port. If you are using a version of Ansible prior to 2.0, you should continue using the older style variables (ansible_ssh_*). These shorter variables are ignored, without warning, in older versions of Ansible. I am not sure about the broader impact of this change. But I have seen on the requirements the version required is ansible>=2.4.0. http://docs.ansible.com/ansible/latest/intro_inventory.html 2017-10-14 08:52:40 +00:00			`# To figure out the real ssh user, we delegate this task to the bastion and store the ansible_user in real_user`
Fix Ansible-lint error [E502] (#4743) 2019-05-16 07:27:43 +00:00			`- name: Store the current ansible_user in the real_user fact`
			`set_fact:`
Changre raw execution to use yum module (#1785) * Changre raw execution to use yum module Changed raw exection to use yum module provided by Ansible. * Replace ansible_ssh_* by ansible_* Ansible 2.0 has deprecated the “ssh” from ansible_ssh_user, ansible_ssh_host, and ansible_ssh_port to become ansible_user, ansible_host, and ansible_port. If you are using a version of Ansible prior to 2.0, you should continue using the older style variables (ansible_ssh_*). These shorter variables are ignored, without warning, in older versions of Ansible. I am not sure about the broader impact of this change. But I have seen on the requirements the version required is ansible>=2.4.0. http://docs.ansible.com/ansible/latest/intro_inventory.html 2017-10-14 08:52:40 +00:00			`real_user: "{{ ansible_user }}"`
Add support for bastion hosts 2016-12-09 09:38:17 +00:00
			`- name: create ssh bastion conf`
			`become: false`
Split deploy steps in separate playbooks: part1 (#3451) * Fix bootstrap_os/ubuntu idempotency * Update bastion role * move container_engine in sub-roles * requires ansible 2.5 * ubuntu18 as first CI job 2018-10-10 02:14:33 +00:00			`delegate_to: localhost`
Use `connection: local` when `delegate_to: localhost` (#6322) This will avoid SSH connection on the local host 2020-06-25 15:14:38 +00:00			`connection: local`
Cleanup legacy syntax, spacing, files all to yml Migrate older inline= syntax to pure yml syntax for module args as to be consistant with most of the rest of the tasks Cleanup some spacing in various files Rename some files named yaml to yml for consistancy 2017-02-17 21:22:34 +00:00			`template:`
			`src: ssh-bastion.conf`
			`dest: "{{ playbook_dir }}/ssh-bastion.conf"`