nicklhw / boundary-enterprise-docker

Boundary Ansible Integration

Ansible can use Boundary as a proxy to create a private SSH tunnel to the target machine. This can be done using the ProxyCommand in the .ssh/ssh_config file.

Quick Start

# 1. setup your SSH public key for the ssh-target
cp ~/.ssh/id_rsa.pub ./docker-compose/ssh-target

# 2. update docker-compose.yml file to point to your SSH username, i.e. SSH_USERNAME: nicholaswong

# 3. update ~/.ssh/config
Host *.boundary.lab
  ProxyCommand sh -c "boundary connect %n -exec nc -- {{boundary.ip}} {{boundary.port}}"

# 4. setup boundary controller and worker
export BOUNDARY_LICENSE=<your boundary enterprise license>

make all

# 3. grab boundary worker auth token from terraform/boundary/worker/data and set it in terraform.auto.tfvars

# 4. setup boundary
make tf-apply

# 5. grab the auth method id and target id from the output

# 6. authenticate to boundary
export BOUNDARY_ADDR=http://localhost:9200
boundary authenticate password -auth-method-id=<auth_method_id>

# 7. connect to the target with ansible
ansible all -i ./ansible/inventory -m ping

# 8. execute playbook
ansible-playbook ./ansible/playbook.yml -i ./ansible/inventory

Notes

Resources

• Boundary Enterprise Docker
• Boundary Reference Architecture
• How to SSH into Docker containers
• Automating Docker with Ansible