- Passwords, not keys are used for ssh
- The target is accessed via the bastion host (ssh -> bastion -> target)
- The password is kept in an encrypted file that is accessed based on the
ansible_user
name - When decrypted, the password is
bastion
$ ansible -i ./inventory/debug -m debug -a 'var=foo' -kKu ansible all