Discussions related to ansible configuration management
Thoughts on skipping host checking in Ansible / SSH?
Inventories have host names which are on R53. Host checking adds a chance to see the hosts have maybe ‘maliciously’ changed IP in DNS… however with IaC the IPs change regularly so how could you tell the change was malicious.
Yea it’s impractical to use host checking on dynamic infrastructure
Best to disable it in SSH config
@oscarsullivan_old stumbled across this by accident
Marrying Ansible with Terraform 0.11+. Contribute to radekg/terraform-provisioner-ansible development by creating an account on GitHub.