Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Add VPN host names as alt names for batcave SSH certs

Browse source 
Useful when you need to SSH into batcave through VPN, like from
bastion in a different DC.
This commit is contained in:
Mikolaj Izdebski 2018-08-14 18:24:48 +00:00
parent 36357599cf
commit 7745cc084b
2 changed files with 9 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
inventory/host_vars/batcave01.phx2.fedoraproject.org
View file

@ -28,3 +28,7 @@ sar_script: /usr/local/bin/koji_sar.py
sar_script_user: root
sar_output_file: koji.json
# Add VPN host name as alt name for SSH cert. Useful when you need to
# SSH into batcave through VPN, like from bastion in a different DC.
ssh_hostnames:
- batcave01.vpn.fedoraproject.org

5
inventory/host_vars/batcave13.rdu2.fedoraproject.org
View file

@ -40,3 +40,8 @@ num_cpus: 8
ansible_ssh_common_args: '-o ProxyCommand="ssh -W %h:%p -q root@bastion13.fedoraproject.org"'
fas_client_groups: sysadmin-main
# Add VPN host name as alt namefor SSH cert. Useful when you need to
# SSH into batcave through VPN, like from bastion in a different DC.
ssh_hostnames:
- batcave13.vpn.fedoraproject.org