I set up k8s with Kubespray, Terraform and Openstack. It works in general, but…
…for deployments with a bastion host the documentation tells:
“if you chose to create a bastion host, this script will create
contrib/terraform/openstack/k8s-cluster.yml with an ssh command for Ansible to be able to access your machines tunneling through the bastion’s IP address.”
This file does not exist. There is another one with a (I guess) similar content at ./terraform/group_vars/no-floating.yml. This file got the ansible_ssh_common_args line containing my bastion host IP.
But it seems that this file is not used anywhere in the playbook as my hosts behind the bastion are not reachable for Ansible. I can use a workaround and go on by configuring the ssh tunnel setup in my global .ssh/config, but this feels dirty and seems not to be the way it’s designed.
Did I miss a info, misunderstand the documentation or was this process altered and the documentation was not updated?