Fixes #25481 - Manage foreman_proxy's ssh config

[alexjfisher]

This overrides the system wide ssh client config for ProxyCommand
allowing the Ansible plugin to work on systems that have been configured
as IPA clients.

[theforeman-bot]

@alexjfisher, the Redmine ticket used is for a different project than the one associated with this GitHub repository. Please either:

• check #25481: Satellite fails to execute ansible commands when connected to ipa server
  is the correct one
• move ticket #25481 from Ansible to the Installer project
• or file a new ticket in the Installer project

If changing the ticket number used, remember to update the PR title and the commit message (using git commit --amend).

---

This message was auto-generated by Foreman's prprocessor

[alexjfisher]

Ticket was moved to Installer Project. Closing and reopening the PR wasn't enough to trigger the bot. Maybe a new comment, (this comment), will?

[ekohl]

I'm debating what the correct fix is. Should REX add -o ProxyCommand=none to its execution instead? We can do a cherry pick of the plugins. @adamruzicka / @iNecas?

[adamruzicka]

If I recall this only affects ansible runs, so adding properly escaped --ssh-common-args="-o ProxyCommand=none" to its execution (somewhere around here) might do the trick.

[alexjfisher]

@ekohl I think you're probably right. I'll leave this open for now in case you change your mind! :)

[andreamtp]

Any agreement on this? The proposed solution by Alex works well and is easy to inspect: would be nice to have it included in the upcoming 1.22 release, isn't it? ;-)

[ekohl]

How about #511 instead? Feels a bit lighter.

[ekohl]

The alternative has been merged.

[ares]

as per findings in https://projects.theforeman.org/issues/25481#note-10, it seems this was a better option, I'll need to check if this is specific to debian environment though

[alexjfisher]

@ares I've restored the branch, but github still won't let me reopen this PR. Let me know if you want me to open a new one.

[ares]

Thanks, I'm investigating other options to fix this, I'll get back to this if I don't find a better option.