ssh_config.j2

ControlMaster auto
ControlPath ssh_mux_%h_%p
ControlPersist 3600

{% for host in groups['ssh_bastion_hosts'] %}
Host {{ hostvars[host].inventory_hostname }}
    User {{ ssh_bastion_user }}
    StrictHostKeyChecking no
    ForwardAgent yes
    IdentitiesOnly no
{% endfor %}

{# just pick one bastion host for proxying through #}
{% set proxy_host = groups['ssh_bastion_hosts'][0] %}
Host 192.168.*
{# probably should be User {{ ssh_docker_user }} #}
    User {{ training_node_user }}
    ProxyCommand ssh {{ ssh_bastion_user }}@{{ hostvars[proxy_host].inventory_hostname }} -W %h:%p
    StrictHostKeyChecking no
    ForwardAgent yes
    IdentitiesOnly no