Ansible: ssh-extra-args ProxyCommand host_key_checking=False . को निष्क्रिय कर देता है

विषय वर्ग:

• बग रिपोर्ट
  

  उत्तरदायी संस्करण:

ansible 2.0.1.0
  config file = /Users/tpai/src/cm/ansible.cfg
  configured module search path = Default w/o overrides

उत्तरदायी विन्यास:

[defaults]

host_key_checking=False
timeout=20
forks=20

force_handlers = True
roles_path = ./roles
callback_whitelist=profile_tasks
filter_plugins = ./filter_plugins

[ssh_connection]
pipelining = True
control_path = /tmp/ansible-ssh-%%h-%%p-%%r

वातावरण:

उत्तरदायी मेजबान : ओएस एक्स 10.11.3
लक्ष्य : उबंटू 14.04.02

सारांश:

ssh-extra-args ProxyCommand host_key_checking=False को तोड़ता है।

जब ssh-extra-args host_key_checking=False साथ या तो ansible.cfg या स्वयं ssh-extra-args में किया जाता है, तब भी मुझे उस होस्ट के लिए कुंजी स्वीकार करने के लिए कहा जाता है जिसे मैंने कनेक्ट नहीं किया है से पहले।

प्रजनन के चरण:

ansible-playbook provision_envs/configure-sid.yml -i inventory/sid --limit=tag_build_5 --vault-password-file ../vault_key --ssh-extra-args='-o ProxyCommand="ssh -W %h:%p [email protected]"' -vvvvv

अपेक्षित परिणाम:

नए होस्ट के खिलाफ प्लेबुक चलाता है।

वास्तविक परिणाम:

आपको कुंजी स्वीकार करने के लिए कहा जाता है जैसे कि StrictHostKeyChecking सक्षम किया गया था।

$ ansible-playbook provision_envs/configure-sid.yml -i inventory/sid --limit=tag_build_5 --vault-password-file ../vault_key --ssh-extra-args='-o ProxyCommand="ssh -W %h:%p [email protected]"' -vvvvv
Using /Users/tpai/src/cm/ansible.cfg as config file
Loaded callback default of type stdout, v2.0
Loaded callback profile_tasks of type aggregate, v2.0
2 plays in provision_envs/configure-sid.yml

PLAY ***************************************************************************
skipping: no hosts matched

PLAY ***************************************************************************

TASK [setup] *******************************************************************
Friday 11 March 2016  12:40:12 +0000 (0:00:00.122)       0:00:00.122 **********
<10.0.251.222> ESTABLISH SSH CONNECTION FOR USER: user
<10.0.251.222> SSH: ansible.cfg set ssh_args: (-o)(ControlMaster=auto)(-o)(ControlPersist=60s)
<10.0.251.222> SSH: ANSIBLE_HOST_KEY_CHECKING/host_key_checking disabled: (-o)(StrictHostKeyChecking=no)
<10.0.251.222> SSH: ansible_password/ansible_ssh_pass not set: (-o)(KbdInteractiveAuthentication=no)(-o)(PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey)(-o)(PasswordAuthentication=no)
<10.0.251.222> SSH: ANSIBLE_REMOTE_USER/remote_user/ansible_user/user/-u set: (-o)(User=user)
<10.0.251.222> SSH: ANSIBLE_TIMEOUT/timeout set: (-o)(ConnectTimeout=20)
<10.0.251.222> SSH: PlayContext set ssh_common_args: ()
<10.0.251.222> SSH: PlayContext set ssh_extra_args: (-o)(ProxyCommand=ssh -W %h:%p [email protected])
<10.0.251.222> SSH: found only ControlPersist; added ControlPath: (-o)(ControlPath=/tmp/ansible-ssh-%h-%p-%r)
<10.0.251.222> SSH: EXEC ssh -C -vvv -o ControlMaster=auto -o ControlPersist=60s -o StrictHostKeyChecking=no -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=user -o ConnectTimeout=20 -o 'ProxyCommand=ssh -W %h:%p [email protected]' -o ControlPath=/tmp/ansible-ssh-%h-%p-%r 10.0.251.222 '/bin/sh -c '"'"'LANG=en_GB.UTF-8 LC_ALL=en_GB.UTF-8 LC_MESSAGES=en_GB.UTF-8 /usr/bin/python'"'"''
The authenticity of host 'host.com (1.2.3.4)' can't be established.
ECDSA key fingerprint is SHA256:kjghdfjkghdkfjghkdjfgdfgdfjghdkjfg.
Are you sure you want to continue connecting (yes/no)? 

**ssh connection times out**

fatal: [7.8.9.0]: UNREACHABLE! => {"changed": false, "msg": "SSH Error: data could not be sent to the remote host. Make sure this host can be reached over ssh", "unreachable": true}
        to retry, use: --limit @provision_envs/configure-sid.retry

PLAY RECAP *********************************************************************
7.8.9.0               : ok=0    changed=0    unreachable=1    failed=0