C12s/c12s-kubespray
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Add documentation about bastion hosts

Browse source
This commit is contained in:
Alexander Block 2016-12-09 10:57:50 +01:00
parent 433eb1dc53
commit e2dc876d77
2 changed files with 15 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
docs/ansible.md
View file

@ -119,3 +119,17 @@ ansible-playbook -i inventory/inventory.ini cluster.yaml \
```
Note: use `--tags` and `--skip-tags` wise and only if you're 100% sure what you're doing.
Bastion host
--------------
If you prefer to not make your nodes publicly accessible (nodes with private IPs only),
you can use a so called *bastion* host to connect to your nodes. To specify and use a bastion,
simply add a line to your inventory, where you have to replace x.x.x.x with the public IP of the
bastion host.
```
bastion ansible_ssh_host=x.x.x.x
```
For more information about Ansible and bastion hosts, read
[Running Ansible Through an SSH Bastion Host](http://blog.scottlowe.org/2015/12/24/running-ansible-through-ssh-bastion-host/)

2
inventory/inventory.example
View file

@ -8,7 +8,7 @@
# node6 ansible_ssh_host=95.54.0.17 # ip=10.3.0.6
# ## configure a bastion host if your nodes are not publicly reachable
# bastion ansible_ssh_host=xxx.xxx.xxx.xxx
# bastion ansible_ssh_host=x.x.x.x
# [kube-master]
# node1