From 141940d1ad6552c05d29141191a1a6a2e4df4aea Mon Sep 17 00:00:00 2001 From: Kevin Fenzi Date: Fri, 29 May 2026 10:41:46 -0700 Subject: [PATCH] basessh: allow tcp forwarding on noc as well as bastion. We sometimes use forwarding here to access mgmt devices. Signed-off-by: Kevin Fenzi --- roles/basessh/templates/sshd_config.j2 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/roles/basessh/templates/sshd_config.j2 b/roles/basessh/templates/sshd_config.j2 index 3bb3d5f71e..fdb4eca656 100644 --- a/roles/basessh/templates/sshd_config.j2 +++ b/roles/basessh/templates/sshd_config.j2 @@ -40,8 +40,8 @@ UsePAM yes AllowAgentForwarding no X11Forwarding no PermitTunnel no -{% if ansible_hostname.startswith(('bastion')) %} -# This is a bastion host, we need tcp forwarding here. +{% if ansible_hostname.startswith(('bastion')) or ansible_hostname.startswith(('noc')) %} +# This is a bastion or noc host, we need tcp forwarding there. AllowTcpForwarding yes {% else %} AllowTcpForwarding no