ansible: add github.com host key on slaves

This prevents "Host key verification failed" errors when operating with
GitHub over SSH.

diff --git a/ansible/files/ssh/hostkeys/github.com.pub b/ansible/files/ssh/hostkeys/github.com.pub
new file mode 100644 (file)
index 0000000..1bae52b
--- /dev/null
+++ b/ansible/files/ssh/hostkeys/github.com.pub
@@ -0,0 +1 @@
+github.com ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGmdnm9tUDbO9IDSwBK6TbQa+PXYPCPy6rbTrTtw7PHkccKrpp0yVhp5HdEIcKr6pLlVDBfOLX9QUsyCOV0wzfjIJNlGEYsdlLJizHhbn2mUjvSAHQqZETYP81eFzLQNnPHt4EVVUh7VfDESU84KezmD5QlWpXLmvU31/yMf+Se8xhHTvKSCZIFImWwoG6mbUoWf9nzpIoaSjB+weqqUUmpaaasXVal72J+UX2B+2RPW3RcT0eOzQgqlJL3RKrTJvdsjE3JEAvGq3lGHSZXy28G3skua2SmVi/w4yCE6gbODqnTWlg7+wC604ydGXA8VJiS5ap43JXiUFFAaQ==

diff --git a/ansible/slave.yml b/ansible/slave.yml
index 6f4df684189cfbbbb5ee8ef653ae9391b6312c22..9917a33b3dec76041c2754b1cecae98c7113425f 100644 (file)
--- a/ansible/slave.yml
+++ b/ansible/slave.yml
@@ -91,6 +91,14 @@
         # docs.ceph.com.pub is the output of `ssh-keyscan docs.ceph.com`
         key: "{{ lookup('file', 'ssh/hostkeys/docs.ceph.com.pub') }}"
 
+    - name: add github.com host key
+      sudo: true
+      known_hosts:
+        path: '/etc/ssh/ssh_known_hosts'
+        name: 'github.com'
+        # github.com.pub is the output of `ssh-keyscan github.com`
+        key: "{{ lookup('file', 'ssh/hostkeys/github.com.pub') }}"
+
     - name: register the new slave to jenkins master
       jenkins-node:
         username: "{{ api_user }}"

diff --git a/ansible/slave.yml.j2 b/ansible/slave.yml.j2
index 49682c4cb6d96f55861eeccc0d2bdacb044f724a..629a0bfccba7846638028fae1de820cf0884cbcd 100644 (file)
--- a/ansible/slave.yml.j2
+++ b/ansible/slave.yml.j2
@@ -124,6 +124,14 @@
       # docs.ceph.com.pub is the output of `ssh-keyscan docs.ceph.com`
       key="{{ lookup('file', 'ssh/hostkeys/docs.ceph.com.pub') }}"
 
+    - name: add github.com host key
+      sudo: true
+      known_hosts:
+        path: '/etc/ssh/ssh_known_hosts'
+        name: 'github.com'
+        # github.com.pub is the output of `ssh-keyscan github.com`
+        key: "{{ lookup('file', 'ssh/hostkeys/github.com.pub') }}"
+
     - name: register the new slave to jenkins master
       jenkins-node:
         username: "{{ api_user }}"