From 3ac3ec1dcbc058cc164dbe665fff405764a8dabe Mon Sep 17 00:00:00 2001 From: Ken Dreyer Date: Fri, 6 Nov 2015 10:33:39 -0700 Subject: [PATCH] ansible: do not pre-populate an SSH key for docs.ceph.com The new docs VM is moving behind a firewall / reverse-proxy, so it will not be directly accessible from the internet. We will to run the documentation jobs directly on the docs VM as a Jenkins slave, and we will stop using rsync over SSH for publishing the docs. Since there's no direct SSH access to the docs VM any more, remove the SSH host key from the slaves. (My Ansible syntax in slave.yml.j2 was broken anyway.) --- ansible/slave.yml | 8 -------- ansible/slave.yml.j2 | 7 ------- 2 files changed, 15 deletions(-) diff --git a/ansible/slave.yml b/ansible/slave.yml index 9917a33b..2bdc3ada 100644 --- a/ansible/slave.yml +++ b/ansible/slave.yml @@ -83,14 +83,6 @@ sudo: true pip: name=python-jenkins - - name: add docs.ceph.com host key - sudo: true - known_hosts: - path: '/etc/ssh/ssh_known_hosts' - name: 'docs.ceph.com' - # docs.ceph.com.pub is the output of `ssh-keyscan docs.ceph.com` - key: "{{ lookup('file', 'ssh/hostkeys/docs.ceph.com.pub') }}" - - name: add github.com host key sudo: true known_hosts: diff --git a/ansible/slave.yml.j2 b/ansible/slave.yml.j2 index 629a0bfc..8ad7e2c0 100644 --- a/ansible/slave.yml.j2 +++ b/ansible/slave.yml.j2 @@ -117,13 +117,6 @@ # https://bugs.launchpad.net/python-jenkins/+bug/1500898 pip: name=python-jenkins version=0.4.7 - - name: add docs.ceph.com host key - sudo: true - known_hosts: path='/etc/ssh/ssh_known_hosts' - name='docs.ceph.com' - # docs.ceph.com.pub is the output of `ssh-keyscan docs.ceph.com` - key="{{ lookup('file', 'ssh/hostkeys/docs.ceph.com.pub') }}" - - name: add github.com host key sudo: true known_hosts: -- 2.39.5