host_key_checking: true host_key_checking_option: "{{ (host_key_checking == true) | ternary('','-o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no') }}" bastion_host: false bastion_user: "{{ lookup('env', 'USER') }}" bastion_ssh_arg: -o ProxyCommand='ssh {{host_key_checking_option}} -W %h:%p -q {{bastion_user}}@{{bastion_host}}' {{host_key_checking_option}} ansible_ssh_extra_args: "{{ bastion_host | ternary(bastion_ssh_arg, '') }}"