#ansible (2019-04)

ansible

Discussions related to ansible configuration management

2019-04-16

oscarsullivan_old avatar
oscarsullivan_old

Thoughts on skipping host checking in Ansible / SSH?

Inventories have host names which are on R53. Host checking adds a chance to see the hosts have maybe ‘maliciously’ changed IP in DNS… however with IaC the IPs change regularly so how could you tell the change was malicious.

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)

Yea it’s impractical to use host checking on dynamic infrastructure

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)

Best to disable it in SSH config

1

2019-04-19

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)
adammck/terraform-inventory

Terraform State → Ansible Dynamic Inventory. Contribute to adammck/terraform-inventory development by creating an account on GitHub.

2
EdBizarro avatar
EdBizarro

I use this on my projects, very useful

adammck/terraform-inventory

Terraform State → Ansible Dynamic Inventory. Contribute to adammck/terraform-inventory development by creating an account on GitHub.

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)

@oscarsullivan_old stumbled across this by accident

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)
radekg/terraform-provisioner-ansible

Marrying Ansible with Terraform 0.11+. Contribute to radekg/terraform-provisioner-ansible development by creating an account on GitHub.

2019-04-23

    keyboard_arrow_up