In my current environment, I have all my Linux servers only accessible through a bastion host, which has MFA enabled.
I've managed to get Ansible to successfully talk to servers through the bastion, the only problem is that it establishes a new connection to the bastion for each host, meaning I have to enter as many MFA keys as I have servers. Bad times. :(
I've tried messing around with stuff like this in my ssh config to try to get multiplexing working:
Host bastion ControlMaster auto ControlPath ~/.ssh/ansible-%r@%h:%p ControlPersist 5m
Unfortunately it doesn't seem to do it. Anyone got some tips on how I can stop Ansible re-establishing its connection through my bastion host for every host it touches?