good policies is needed but using jump server is a better choice. Imagine:
1. You can use local network server to build all ansible scripts, playbooks
and only allow this server can access jump server.
All ansible playbook, scripts protected by ansible vault.
Playbook send scripts to jump server to execute wanted tasks then make
1 more task to remove all run scripts, clearing logs on jump server after
process done.
2. Jump server contain nothing after running scripts --> more safety
@Raj: why does packet drop? It belong to your network is stable or not.
On Thursday, May 16, 2019 at 4:26:45 PM UTC+7, Jonathan Lozada De La Matta
wrote:
>
> No, is not. Usually is required by organizations but, is not required with
> ansible.
>
> Jonathan Lozada De La Matta on mobile
>
> ------------------------------
> *From:* [email protected] <javascript:> on behalf of
> rajthecomputerguy <[email protected] <javascript:>>
> *Sent:* Thursday, May 16, 2019 5:24 AM
> *To:* Ansible Project
> *Subject:* Re: [ansible-project] Is Jump host advisable ?
>
> Hi Jon,
>
> You mean Jump is not necessary ?
>
> thanks,
>
> On Thursday, May 16, 2019 at 2:43:04 PM UTC+5:30, Jonathan Lozada De La
> Matta wrote:
>>
>> This isn't necessary best practices but, more security policies.
>>
>> Jonathan Lozada De La Matta on mobile
>>
>> ------------------------------
>> *From:* [email protected] on behalf of rajthecomputerguy <
>> [email protected]>
>> *Sent:* Thursday, May 16, 2019 2:57 AM
>> *To:* Ansible Project
>> *Subject:* [ansible-project] Is Jump host advisable ?
>>
>> Hi Team,
>>
>> Which is one is followed as best practice in Ansible?
>>
>> Using jump server to connect devices ? or having direct access to devices.
>>
>> thanks
>>
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "Ansible Project" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to [email protected].
>> To post to this group, send email to [email protected].
>> To view this discussion on the web visit
>> https://groups.google.com/d/msgid/ansible-project/43b3995d-cad4-4eca-9153-1378fd136481%40googlegroups.com
>>
>> <https://groups.google.com/d/msgid/ansible-project/43b3995d-cad4-4eca-9153-1378fd136481%40googlegroups.com?utm_medium=email&utm_source=footer>
>> .
>> For more options, visit https://groups.google.com/d/optout.
>>
> --
> You received this message because you are subscribed to the Google Groups
> "Ansible Project" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected] <javascript:>.
> To post to this group, send email to [email protected]
> <javascript:>.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/ansible-project/f728a391-ef04-4c26-88ef-6d6de95082fc%40googlegroups.com
>
> <https://groups.google.com/d/msgid/ansible-project/f728a391-ef04-4c26-88ef-6d6de95082fc%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
> For more options, visit https://groups.google.com/d/optout.
>
--
You received this message because you are subscribed to the Google Groups
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/ansible-project/285c6d95-7e9b-4c17-98d5-3bd6b5be10d9%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
