Jumphost / Bastion : ssh, ansible examples

inventory.yml

# ansible hosts

all:
  children:
    project-servers:
      hosts:
        ingress:
          ansible_user: ubuntu
          ansible_host: 192.168.9.12 # replace by internal ip
        app:
          ansible_user: ubuntu
          ansible_host: 192.168.20.92 # replace by internal ip
        storage:
          ansible_user: ubuntu
          ansible_host: 192.168.18.165 # replace by internal ip
      vars:
        ansible_ssh_common_args: '-o StrictHostKeyChecking=no -o ProxyCommand="ssh -W %h:%p -q root@xxx.xxx.xxx.xxx"' # replace by user and ip

~_.ssh_config

# peeped https://blog.keyboardinterrupt.com/ansible-jumphost/

Host project-servers-*
    StrictHostKeyChecking no
    User ubuntu
    ProxyCommand ssh -W %h:%p -q root@xxx.xxx.xxx.xxx # replace by user and ip

Host project-servers-ingress
    HostName 192.168.9.12 # replace by internal ip

Host project-servers-app
    HostName 192.168.20.92 # replace by internal ip

Host project-servers-storage
    HostName 192.168.18.165 # replace by internal ip