Infrastructure/infra-docs-fpo
1
0
Fork 0
Code Issues 100 Pull requests 6 Projects Releases Packages Wiki Activity Actions

sshaccess: provide separate config for batcave01

Browse source 
This has the benefit of making `ssh user@batcave01` get resolved
to batcave01.iad2.fedoraproject.org which will make the known_hosts
@cert-authority *.iad2.fedoraproject.org configuration apply.
This commit is contained in:
Dusty Mabe 2023-07-28 12:22:43 -04:00
parent eca2f0961f
commit 5b7e5834a9
No known key found for this signature in database
GPG key ID: 3302DBD73952E671
1 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
modules/sysadmin_guide/pages/sshaccess.adoc
View file

@ -65,8 +65,10 @@ Host bastion.fedoraproject.org
User FAS_USERNAME (all lowercase) User FAS_USERNAME (all lowercase)
ProxyCommand none ProxyCommand none
ForwardAgent no ForwardAgent no
Host *.iad2.fedoraproject.org *.qa.fedoraproject.org 10.3.160.* 10.3.161.* 10.3.163.* 10.3.165.* 10.3.167.* 10.3.171.* *.vpn.fedoraproject.org batcave01 Host *.iad2.fedoraproject.org *.qa.fedoraproject.org 10.3.160.* 10.3.161.* 10.3.163.* 10.3.165.* 10.3.167.* 10.3.171.* *.vpn.fedoraproject.org
ProxyCommand ssh -W %h:%p bastion.fedoraproject.org ProxyCommand ssh -W %h:%p bastion.fedoraproject.org
Host batcave01
HostName %h.iad2.fedoraproject.org
.... ....
Note that there are 2 bastion servers: bastion01.fedoraproject.org Note that there are 2 bastion servers: bastion01.fedoraproject.org