Are the worker nodes purposely configured to prevent SSH access when using Docker for AWS?

You don’t, you use agent forwarding.

eval `ssh-agent`
ssh-add yourkeyfile
ssh -A your-manager-node
ssh workernode1

Or, if you’re staring from windows, add your key to pageant, then putty with agent forwarding turned on works the same way.

then you don’t copy keys anywhere.

If you don’t want to use the agent, you can use multi hop with ProxyCommand

1 Like