Before this commit, the bastion entry in the inventary was not honored, so machines behind firewalls or with unrouted addresses were not reachable for ansible.