@@ -18,25 +18,24 @@ jobs:
18
18
runs-on : ubuntu-22.04
19
19
container : golang:1.22
20
20
steps :
21
- - name : Configure jetstack/venafi-connection-lib repo pull access
21
+ -
run :
git config --global [email protected] :jetstack/venafi-connection-lib.insteadOf https://github.com/jetstack/venafi-connection-lib
22
+ # The only reason we need to configure ~/.ssh/known_hosts is because we are
23
+ # using a container-based runner. Non-container runners already have the
24
+ # github.com fingerprints in their known_hosts file. We could use `curl
25
+ # --silent https://api.github.com/meta` to fetch it but golang:1.22 does not
26
+ # have jq installed.
27
+ - name : " Add GitHub to the SSH known hosts file"
22
28
run : |
23
- mkdir ~/.ssh
24
- chmod 700 ~/.ssh
25
-
26
- echo "${{ secrets.DEPLOY_KEY_READ_VENAFI_CONNECTION_LIB }}" > ~/.ssh/venafi_connection_lib_id
27
- chmod 600 ~/.ssh/venafi_connection_lib_id
28
-
29
- cat <<EOT >> ~/.ssh/config
30
- Host venafi-connection-lib.github.com
31
- HostName github.com
32
- IdentityFile ~/.ssh/venafi_connection_lib_id
33
- IdentitiesOnly yes
34
- EOT
35
-
36
- cat <<EOT >> ~/.gitconfig
37
- [url "[email protected] :jetstack/venafi-connection-lib"]
38
- insteadOf = https://github.com/jetstack/venafi-connection-lib
39
- EOT
29
+ mkdir -p -m 0700 ~/.ssh
30
+ cat <<EOF >~/.ssh/known_hosts
31
+ github.com ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMqqnkVzrm0SdG6UOoqKLsabgH5C9okWi0dh2l9GKJl
32
+ github.com ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBEmKSENjQEezOmxkZMy7opKgwFB9nkt5YRrYMjNuG5N87uRgg6CLrbo5wAdT/y6v0mKV0U2w0WZ2YB/++Tpockg=
33
+ github.com ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCj7ndNxQowgcQnjshcLrqPEiiphnt+VTTvDP6mHBL9j1aNUkY4Ue1gvwnGLVlOhGeYrnZaMgRK6+PKCUXaDbC7qtbW8gIkhL7aGCsOr/C56SJMy/BCZfxd1nWzAOxSDPgVsmerOBYfNqltV9/hWCqBywINIR+5dIg6JTJ72pcEpEjcYgXkE2YEFXV1JHnsKgbLWNlhScqb2UmyRkQyytRLtL+38TGxkxCflmO+5Z8CSSNY7GidjMIZ7Q4zMjA2n1nGrlTDkzwDCsw+wqFPGQA179cnfGWOWRVruj16z6XyvxvjJwbz0wQZ75XK5tKSb7FNyeIEs4TT4jk+S4dhPeAUC5y+bDYirYgM4GC7uEnztnZyaVWQ7B381AK4Qdrwt51ZqExKbQpTUNn+EjqoTwvqNj4kqx5QUCI0ThS/YkOxJCXmPUWZbhjpCg56i+2aB6CmK2JGhn57K5mj0MNdBXA4/WnwH6XoPWJzK5Nyu2zB3nAZp+S5hpQs+p1vN1/wsjk=
34
+ EOF
35
+ chmod 600 ~/.ssh/known_hosts
36
+ -
uses :
webfactory/[email protected]
37
+ with :
38
+ ssh-private-key : ${{ secrets.DEPLOY_KEY_READ_VENAFI_CONNECTION_LIB }}
40
39
- uses : actions/checkout@v4
41
40
- run : make vet
42
41
shell : bash
@@ -45,25 +44,20 @@ jobs:
45
44
runs-on : ubuntu-22.04
46
45
container : golang:1.22
47
46
steps :
48
- - name : Configure jetstack/venafi-connection-lib repo pull access
47
+ -
run :
git config --global [email protected] :jetstack/venafi-connection-lib.insteadOf https://github.com/jetstack/venafi-connection-lib
48
+ - name : " Add GitHub to the SSH known hosts file"
49
49
run : |
50
- mkdir ~/.ssh
51
- chmod 700 ~/.ssh
52
-
53
- echo "${{ secrets.DEPLOY_KEY_READ_VENAFI_CONNECTION_LIB }}" > ~/.ssh/venafi_connection_lib_id
54
- chmod 600 ~/.ssh/venafi_connection_lib_id
55
-
56
- cat <<EOT >> ~/.ssh/config
57
- Host venafi-connection-lib.github.com
58
- HostName github.com
59
- IdentityFile ~/.ssh/venafi_connection_lib_id
60
- IdentitiesOnly yes
61
- EOT
62
-
63
- cat <<EOT >> ~/.gitconfig
64
- [url "[email protected] :jetstack/venafi-connection-lib"]
65
- insteadOf = https://github.com/jetstack/venafi-connection-lib
66
- EOT
50
+ mkdir -p -m 0700 ~/.ssh
51
+ cat <<EOF >~/.ssh/known_hosts
52
+ github.com ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMqqnkVzrm0SdG6UOoqKLsabgH5C9okWi0dh2l9GKJl
53
+ github.com ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBEmKSENjQEezOmxkZMy7opKgwFB9nkt5YRrYMjNuG5N87uRgg6CLrbo5wAdT/y6v0mKV0U2w0WZ2YB/++Tpockg=
54
+ github.com ssh-rsa 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
55
+ EOF
56
+ chmod 600 ~/.ssh/known_hosts
57
+ - run : curl --silent https://api.github.com/meta | jq --raw-output '"github.com "+.ssh_keys[]' >> ~/.ssh/known_hosts
58
+ -
uses :
webfactory/[email protected]
59
+ with :
60
+ ssh-private-key : ${{ secrets.DEPLOY_KEY_READ_VENAFI_CONNECTION_LIB }}
67
61
- uses : actions/checkout@v4
68
62
- run : make test
69
63
docker_build :
@@ -80,25 +74,19 @@ jobs:
80
74
DOCKER_DRIVER : overlay
81
75
DOCKER_HOST : tcp://localhost:2375
82
76
steps :
83
- - name : Configure jetstack/venafi-connection-lib repo pull access
77
+ -
run :
git config --global [email protected] :jetstack/venafi-connection-lib.insteadOf https://github.com/jetstack/venafi-connection-lib
78
+ - name : " Add GitHub to the SSH known hosts file"
84
79
run : |
85
- mkdir ~/.ssh
86
- chmod 700 ~/.ssh
87
-
88
- echo "${{ secrets.DEPLOY_KEY_READ_VENAFI_CONNECTION_LIB }}" > ~/.ssh/venafi_connection_lib_id
89
- chmod 600 ~/.ssh/venafi_connection_lib_id
90
-
91
- cat <<EOT >> ~/.ssh/config
92
- Host venafi-connection-lib.github.com
93
- HostName github.com
94
- IdentityFile ~/.ssh/venafi_connection_lib_id
95
- IdentitiesOnly yes
96
- EOT
97
-
98
- cat <<EOT >> ~/.gitconfig
99
- [url "[email protected] :jetstack/venafi-connection-lib"]
100
- insteadOf = https://github.com/jetstack/venafi-connection-lib
101
- EOT
80
+ mkdir -p -m 0700 ~/.ssh
81
+ cat <<EOF >~/.ssh/known_hosts
82
+ github.com ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMqqnkVzrm0SdG6UOoqKLsabgH5C9okWi0dh2l9GKJl
83
+ github.com ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBEmKSENjQEezOmxkZMy7opKgwFB9nkt5YRrYMjNuG5N87uRgg6CLrbo5wAdT/y6v0mKV0U2w0WZ2YB/++Tpockg=
84
+ github.com ssh-rsa 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
85
+ EOF
86
+ chmod 600 ~/.ssh/known_hosts
87
+ -
uses :
webfactory/[email protected]
88
+ with :
89
+ ssh-private-key : ${{ secrets.DEPLOY_KEY_READ_VENAFI_CONNECTION_LIB }}
102
90
- name : Install Tools
103
91
run : apk add --update make git jq rsync curl
104
92
- name : Adding github workspace as safe directory
0 commit comments