多段SSHã‚’Ansibleã§è¨å®šã™ã‚‹ | DevelopersIO渡辺ã§ã™ã€‚ ã‚»ã‚ュリティを高ã‚ã‚‹ãªã©ã®ç†ç”±ã§å¯¾è±¡ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã«EIPを付与ã—ãªã„å ´åˆã€SSHã¯è¸ã¿å°ï¼ˆBastion）経由ã¨ãªã‚Šã¾ã™ï¼ˆå‚考： Amazon VPC環境ã«ãƒ¡ãƒ³ãƒ†ãƒŠãƒ³ã‚¹ç”¨ã®è¸ã¿å°ã‚µãƒ¼ãƒã‚’構築ã™ã‚‹ï¼‰ã€‚ è¸ã¿å°ã‚µãƒ¼ãƒã®ã‚る構æˆã§Ansibleを利用ã™ã‚‹å ´åˆã€ansible.cnfã®ssh_connectionã§ssh_argsã‚’è¨å®šã—ã¾ã—ょã†ã€‚ ssh_configã®æº–å‚™ ã¯ã˜ã‚ã«sshã®configファイルを作æˆã—ã¾ã™ã€‚ ã“ã‚Œã¯ã€~/.ssh/configã«è¨å®šã™ã‚‹ãƒ•ã‚¡ã‚¤ãƒ«ã®ä¸€éƒ¨ã¨è€ƒãˆã¦è‰¯ã„ã§ã—ょã†ã€‚ Ansibleã®ãƒ•ã‚¡ã‚¤ãƒ«ã¨ä¸€ç·’ã«ãƒãƒ¼ã‚¸ãƒ§ãƒ³ç®¡ç†ã™ã‚‹æ–¹ãŒè‰¯ã„ã¨æ€ã†ã®ã§ã€Ansibleã®ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆãƒ«ãƒ¼ãƒˆã«ãŠãã“ã¨ã‚’ãŠã™ã™ã‚ã—ã¾ã™ã€‚ Host bastion HostName 52.52.xxx.xxx User ec2-user IdentityFile ~/.ssh/prd.
RHEL6ç³»ã§ansibleを使ã†ãªã‚‰record_host_keysã‚’Falseã«ã™ã‚‹ã¨é€Ÿããªã‚‹ - still deeper
{{#tags}}- {{label}}
{{/tags}}