From: Ken Dreyer <kdreyer@redhat.com>
Date: Wed, 28 Oct 2015 16:55:26 +0000 (-0600)
Subject: ansible: add github.com host key on slaves
X-Git-Url: http://git.apps.os.sepia.ceph.com/?a=commitdiff_plain;h=refs%2Fpull%2F177%2Fhead;p=ceph-build.git

ansible: add github.com host key on slaves

This prevents "Host key verification failed" errors when operating with
GitHub over SSH.
---

diff --git a/ansible/files/ssh/hostkeys/github.com.pub b/ansible/files/ssh/hostkeys/github.com.pub
new file mode 100644
index 00000000..1bae52b8
--- /dev/null
+++ b/ansible/files/ssh/hostkeys/github.com.pub
@@ -0,0 +1 @@
+github.com ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGmdnm9tUDbO9IDSwBK6TbQa+PXYPCPy6rbTrTtw7PHkccKrpp0yVhp5HdEIcKr6pLlVDBfOLX9QUsyCOV0wzfjIJNlGEYsdlLJizHhbn2mUjvSAHQqZETYP81eFzLQNnPHt4EVVUh7VfDESU84KezmD5QlWpXLmvU31/yMf+Se8xhHTvKSCZIFImWwoG6mbUoWf9nzpIoaSjB+weqqUUmpaaasXVal72J+UX2B+2RPW3RcT0eOzQgqlJL3RKrTJvdsjE3JEAvGq3lGHSZXy28G3skua2SmVi/w4yCE6gbODqnTWlg7+wC604ydGXA8VJiS5ap43JXiUFFAaQ==
diff --git a/ansible/slave.yml b/ansible/slave.yml
index 6f4df684..9917a33b 100644
--- a/ansible/slave.yml
+++ b/ansible/slave.yml
@@ -91,6 +91,14 @@
         # docs.ceph.com.pub is the output of `ssh-keyscan docs.ceph.com`
         key: "{{ lookup('file', 'ssh/hostkeys/docs.ceph.com.pub') }}"
 
+    - name: add github.com host key
+      sudo: true
+      known_hosts:
+        path: '/etc/ssh/ssh_known_hosts'
+        name: 'github.com'
+        # github.com.pub is the output of `ssh-keyscan github.com`
+        key: "{{ lookup('file', 'ssh/hostkeys/github.com.pub') }}"
+
     - name: register the new slave to jenkins master
       jenkins-node:
         username: "{{ api_user }}"
diff --git a/ansible/slave.yml.j2 b/ansible/slave.yml.j2
index 49682c4c..629a0bfc 100644
--- a/ansible/slave.yml.j2
+++ b/ansible/slave.yml.j2
@@ -124,6 +124,14 @@
       # docs.ceph.com.pub is the output of `ssh-keyscan docs.ceph.com`
       key="{{ lookup('file', 'ssh/hostkeys/docs.ceph.com.pub') }}"
 
+    - name: add github.com host key
+      sudo: true
+      known_hosts:
+        path: '/etc/ssh/ssh_known_hosts'
+        name: 'github.com'
+        # github.com.pub is the output of `ssh-keyscan github.com`
+        key: "{{ lookup('file', 'ssh/hostkeys/github.com.pub') }}"
+
     - name: register the new slave to jenkins master
       jenkins-node:
         username: "{{ api_user }}"