From 26ab4e577ffcec941aa34cb70921178df59ec52b Mon Sep 17 00:00:00 2001 From: jorge-perez Date: Fri, 26 Jan 2024 09:22:31 -0600 Subject: [PATCH 1/2] Updated ssh config to use more than /24 network Signed-off-by: jorge-perez --- ansible/playbooks/infra-deploy.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/ansible/playbooks/infra-deploy.yaml b/ansible/playbooks/infra-deploy.yaml index 48bf75906..4e7388c04 100644 --- a/ansible/playbooks/infra-deploy.yaml +++ b/ansible/playbooks/infra-deploy.yaml @@ -345,7 +345,7 @@ - name: Create ssh-config ansible.builtin.copy: content: | - Host 172.31.0.* + Host 172.31.* ProxyJump {{ bastion_ip }} User {{ os_bastion_user }} IdentityFile {{ lookup('env', 'HOME') }}/.ssh/{{ os_keypair_name }}.key @@ -516,7 +516,7 @@ - name: Copy ssh-config to jump host ansible.builtin.copy: content: | - Host 172.31.0.* + Host 172.31.* User {{ os_bastion_user }} Host * IdentityFile /home/{{ os_bastion_user }}/.ssh/{{ ansible_ssh_private_key_file | basename }} From df6a276863af26ea83a29044606f70e263e0a849 Mon Sep 17 00:00:00 2001 From: jorge-perez Date: Fri, 26 Jan 2024 14:00:51 -0600 Subject: [PATCH 2/2] If there is no default gateway on the subnet, we need to specify it when creating the router Signed-off-by: jorge-perez --- ansible/playbooks/infra-deploy.yaml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/ansible/playbooks/infra-deploy.yaml b/ansible/playbooks/infra-deploy.yaml index 4e7388c04..d3bc7575c 100644 --- a/ansible/playbooks/infra-deploy.yaml +++ b/ansible/playbooks/infra-deploy.yaml @@ -240,7 +240,9 @@ network: "{{ (_result_network_external.networks | first).id }}" interfaces: - "{{ os_network_name }}-subnet" - - "{{ os_network_name }}-subnet-internal" + - net: "{{ os_network_name }}-internal" + subnet: "{{ os_network_name }}-subnet-internal" + portip: 192.168.0.1 # NOTE: When using MetalLB, we can not use a security group due to port security blocking address advertisements. # See https://metallb.org/installation/clouds/#metallb-on-openstack for more. # - name: Create (or update) a security group with security group rules