Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/adamsbytes/ansible-ovhbastion
Ansible role to deploy OVH Cloud's Bastion service
https://github.com/adamsbytes/ansible-ovhbastion
ansible-role ansible-roles bastion bastion-host bastion-server jumpbox ovh-bastion ovhcloud security ssh
Last synced: 4 months ago
JSON representation
Ansible role to deploy OVH Cloud's Bastion service
- Host: GitHub
- URL: https://github.com/adamsbytes/ansible-ovhbastion
- Owner: adamsbytes
- License: gpl-3.0
- Created: 2020-10-31T02:56:39.000Z (over 4 years ago)
- Default Branch: main
- Last Pushed: 2022-07-01T13:13:17.000Z (over 2 years ago)
- Last Synced: 2024-09-30T23:05:07.209Z (4 months ago)
- Topics: ansible-role, ansible-roles, bastion, bastion-host, bastion-server, jumpbox, ovh-bastion, ovhcloud, security, ssh
- Language: Shell
- Homepage: https://galaxy.ansible.com/adamsbytes/ovhbastion
- Size: 74.2 KB
- Stars: 7
- Watchers: 1
- Forks: 5
- Open Issues: 3
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
ansible-ovhbastion
=========
[](https://travis-ci.com/adamsbytes/ansible-ovhbastion)
This role installs and configures [OVH Cloud](https://www.ovh.com/world/)'s [the Bastion](https://github.com/ovh/the-bastion) secured jump host server. The ovhbastion role is based on the [official Bastion installation instructions](https://ovh.github.io/the-bastion/installation/basic.html). Please visit [the official Bastion documentation](https://ovh.github.io/the-bastion/index.html) for more information.
Once you run this role, [click here](https://ovh.github.io/the-bastion/using/basics.html) to view the next steps in configuring the Bastion.
Tested On
------------
- Debian 8+
- Ubuntu 18+
Role Variables
--------------
#### Required
`ssh_key`: string with public ssh key for access to initial admin account
#### Recommended
`bastion_name`: string with name of bastion host. the system's actual hostname is _not_ recommended\
`bastion_create_admin`: toggle creation of the superadmin account\
`bastion_superadmin_uname`: string with username for the bastion superadmin (if enabled)
See `defaults/main.yml` for optional variables that can be set.
Role Installation
------------
```bash
$ ansible-galaxy install adamsbytes.ovhbastion
```
Example Playbook
----------------
```yaml
- hosts: all
become: yes
gather_facts: yes
roles:
- role: adamsbytes.ovhbastion
vars:
ssh_key: "YOUR_PUBLIC_SSH_KEY_HERE"
```
License
-------
GPLv3
Author Information
------------------
https://github.com/adamsbytes