c22cfa255b
* Added private key file to ssh bastion conf * Used regular if condition insted of inline conditional
21 lines
662 B
Text
21 lines
662 B
Text
{% if has_bastion %}
|
|
{% set vars={'hosts': ''} %}
|
|
{% set user='' %}
|
|
|
|
{% for h in groups['all'] %}
|
|
{% if h != 'bastion' %}
|
|
{% if vars.update({'hosts': vars['hosts'] + ' ' + (hostvars[h].get('ansible_ssh_host') or hostvars[h]['ansible_host'])}) %}{% endif %}
|
|
{% endif %}
|
|
{% endfor %}
|
|
|
|
Host {{ bastion_ip }}
|
|
Hostname {{ bastion_ip }}
|
|
StrictHostKeyChecking no
|
|
ControlMaster auto
|
|
ControlPath ~/.ssh/ansible-%r@%h:%p
|
|
ControlPersist 5m
|
|
|
|
Host {{ vars['hosts'] }}
|
|
ProxyCommand ssh -W %h:%p {{ real_user }}@{{ bastion_ip }} {% if ansible_ssh_private_key_file is defined %}-i {{ ansible_ssh_private_key_file }}{% endif %}
|
|
StrictHostKeyChecking no
|
|
{% endif %}
|