{"action":"created","issue":{"url":"https://api.github.com/repos/dwmkerr/terraform-aws-openshift/issues/67","repository_url":"https://api.github.com/repos/dwmkerr/terraform-aws-openshift","labels_url":"https://api.github.com/repos/dwmkerr/terraform-aws-openshift/issues/67/labels{/name}","comments_url":"https://api.github.com/repos/dwmkerr/terraform-aws-openshift/issues/67/comments","events_url":"https://api.github.com/repos/dwmkerr/terraform-aws-openshift/issues/67/events","html_url":"https://github.com/dwmkerr/terraform-aws-openshift/issues/67","id":377894867,"node_id":"MDU6SXNzdWUzNzc4OTQ4Njc=","number":67,"title":"Use a templated sshconfig using SSH ProxyJump instead?","user":{"login":"zoobab","id":60872,"node_id":"MDQ6VXNlcjYwODcy","avatar_url":"https://avatars3.githubusercontent.com/u/60872?v=4","gravatar_id":"","url":"https://api.github.com/users/zoobab","html_url":"https://github.com/zoobab","followers_url":"https://api.github.com/users/zoobab/followers","following_url":"https://api.github.com/users/zoobab/following{/other_user}","gists_url":"https://api.github.com/users/zoobab/gists{/gist_id}","starred_url":"https://api.github.com/users/zoobab/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/zoobab/subscriptions","organizations_url":"https://api.github.com/users/zoobab/orgs","repos_url":"https://api.github.com/users/zoobab/repos","events_url":"https://api.github.com/users/zoobab/events{/privacy}","received_events_url":"https://api.github.com/users/zoobab/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":4,"created_at":"2018-11-06T15:20:37Z","updated_at":"2018-11-22T14:53:16Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"Hi,\r\n\r\nI just make a simple sshconfig file from a template which uses the ProxyJump feature of SSH:\r\n\r\nhttps://wiki.gentoo.org/wiki/SSH_jump_host\r\n\r\nThe hardcoded sshconfig file looks like this:\r\n```\r\n$ cat sshconfig\r\nHost *\r\n    StrictHostKeyChecking no\r\n    UserKnownHostsFile=/dev/null\r\n    LogLevel QUIET\r\n\r\nHost bastion\r\n    Hostname 100.24.1.3\r\n    User ec2-user\r\n    IdentityFile /home/centos/.ssh/id_rsa\r\n    ForwardAgent yes\r\n\r\nHost master\r\n    Hostname master.openshift.local\r\n    ProxyJump bastion\r\n    User ec2-user\r\n\r\nHost node1\r\n    Hostname node1.openshift.local\r\n    ProxyJump bastion\r\n    User ec2-user\r\n\r\nHost node2\r\n    Hostname node2.openshift.local\r\n    ProxyJump bastion\r\n    User ec2-user\r\n```\r\n\r\nTo ssh to the master, bastion, node1, node2:\r\n\r\n```\r\n$ ssh -F sshconfig master\r\n$ ssh -F sshconfig bastion\r\n$ ssh -F sshconfig node1\r\n$ ssh -F sshconfig node2\r\n```\r\n\r\nTo what I can figure out, the \"ForwardAgent yes\" seems to do the job to add automatically the key to the ssh-agent, which I found fragile right now.\r\n\r\nThe 2 items to template are the Hostname and the location of the SSH key.\r\n\r\nWhat do you think?\r\n\r\nCan I make a PR to template that dynamically and replace parts of the makefile?"},"comment":{"url":"https://api.github.com/repos/dwmkerr/terraform-aws-openshift/issues/comments/441053461","html_url":"https://github.com/dwmkerr/terraform-aws-openshift/issues/67#issuecomment-441053461","issue_url":"https://api.github.com/repos/dwmkerr/terraform-aws-openshift/issues/67","id":441053461,"node_id":"MDEyOklzc3VlQ29tbWVudDQ0MTA1MzQ2MQ==","user":{"login":"zoobab","id":60872,"node_id":"MDQ6VXNlcjYwODcy","avatar_url":"https://avatars3.githubusercontent.com/u/60872?v=4","gravatar_id":"","url":"https://api.github.com/users/zoobab","html_url":"https://github.com/zoobab","followers_url":"https://api.github.com/users/zoobab/followers","following_url":"https://api.github.com/users/zoobab/following{/other_user}","gists_url":"https://api.github.com/users/zoobab/gists{/gist_id}","starred_url":"https://api.github.com/users/zoobab/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/zoobab/subscriptions","organizations_url":"https://api.github.com/users/zoobab/orgs","repos_url":"https://api.github.com/users/zoobab/repos","events_url":"https://api.github.com/users/zoobab/events{/privacy}","received_events_url":"https://api.github.com/users/zoobab/received_events","type":"User","site_admin":false},"created_at":"2018-11-22T14:53:16Z","updated_at":"2018-11-22T14:53:16Z","author_association":"CONTRIBUTOR","body":"I have made some notes here:\r\n\r\nhttps://github.com/zoobab/terraform-aws-openshift/blob/master/sshjump.md\r\n\r\nWill try to make a branch with a demo, but I need to find time as I am on the release-3.9 branch. I have to solve the sudo problem, probably by exporting the ssh-agent file between the ec2-user and root."}}
{"actor":{"display_login":"zoobab"}}