The ssh config override for the nodes in ansible here should probably be configurable. In the event someone runs this playbook locally with the orchestration host setup as their local machine it will overwrite their local root user's ssh config which is not necessarily desirable.
As an alternative, we could provide a separate ssh config you just invoke with: ssh -F $ssh_config hostname. I do absolutely like the convenience of the modified ssh config when debugging. For the playbook itself I think an in-memory ProxyCommand setup for each node would be less confusing as well. (Though ultimately any ssh proxying can add some confusion)
The ssh config override for the nodes in ansible here should probably be configurable. In the event someone runs this playbook locally with the orchestration host setup as their local machine it will overwrite their local root user's ssh config which is not necessarily desirable.
As an alternative, we could provide a separate ssh config you just invoke with:
ssh -F $ssh_config hostname. I do absolutely like the convenience of the modified ssh config when debugging. For the playbook itself I think an in-memory ProxyCommand setup for each node would be less confusing as well. (Though ultimately any ssh proxying can add some confusion)