@@ -18,25 +18,24 @@ jobs:
1818 runs-on : ubuntu-22.04
1919 container : golang:1.22
2020 steps :
21- - name : Configure jetstack/venafi-connection-lib repo pull access
21+ -
run :
git config --global [email protected] :jetstack/venafi-connection-lib.insteadOf https://github.com/jetstack/venafi-connection-lib 22+ # The only reason we need to configure ~/.ssh/known_hosts is because we are
23+ # using a container-based runner. Non-container runners already have the
24+ # github.com fingerprints in their known_hosts file. We could use `curl
25+ # --silent https://api.github.com/meta` to fetch it but golang:1.22 does not
26+ # have jq installed.
27+ - name : " Add GitHub to the SSH known hosts file"
2228 run : |
23- mkdir ~/.ssh
24- chmod 700 ~/.ssh
25-
26- echo "${{ secrets.DEPLOY_KEY_READ_VENAFI_CONNECTION_LIB }}" > ~/.ssh/venafi_connection_lib_id
27- chmod 600 ~/.ssh/venafi_connection_lib_id
28-
29- cat <<EOT >> ~/.ssh/config
30- Host venafi-connection-lib.github.com
31- HostName github.com
32- IdentityFile ~/.ssh/venafi_connection_lib_id
33- IdentitiesOnly yes
34- EOT
35-
36- cat <<EOT >> ~/.gitconfig
37- [url "[email protected] :jetstack/venafi-connection-lib"] 38- insteadOf = https://github.com/jetstack/venafi-connection-lib
39- EOT
29+ mkdir -p -m 0700 ~/.ssh
30+ cat <<EOF >~/.ssh/known_hosts
31+ github.com ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMqqnkVzrm0SdG6UOoqKLsabgH5C9okWi0dh2l9GKJl
32+ github.com ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBEmKSENjQEezOmxkZMy7opKgwFB9nkt5YRrYMjNuG5N87uRgg6CLrbo5wAdT/y6v0mKV0U2w0WZ2YB/++Tpockg=
33+ github.com ssh-rsa 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
34+ EOF
35+ chmod 600 ~/.ssh/known_hosts
36+ -
uses :
webfactory/[email protected] 37+ with :
38+ ssh-private-key : ${{ secrets.DEPLOY_KEY_READ_VENAFI_CONNECTION_LIB }}
4039 - uses : actions/checkout@v4
4140 - run : make vet
4241 shell : bash
@@ -45,25 +44,20 @@ jobs:
4544 runs-on : ubuntu-22.04
4645 container : golang:1.22
4746 steps :
48- - name : Configure jetstack/venafi-connection-lib repo pull access
47+ -
run :
git config --global [email protected] :jetstack/venafi-connection-lib.insteadOf https://github.com/jetstack/venafi-connection-lib 48+ - name : " Add GitHub to the SSH known hosts file"
4949 run : |
50- mkdir ~/.ssh
51- chmod 700 ~/.ssh
52-
53- echo "${{ secrets.DEPLOY_KEY_READ_VENAFI_CONNECTION_LIB }}" > ~/.ssh/venafi_connection_lib_id
54- chmod 600 ~/.ssh/venafi_connection_lib_id
55-
56- cat <<EOT >> ~/.ssh/config
57- Host venafi-connection-lib.github.com
58- HostName github.com
59- IdentityFile ~/.ssh/venafi_connection_lib_id
60- IdentitiesOnly yes
61- EOT
62-
63- cat <<EOT >> ~/.gitconfig
64- [url "[email protected] :jetstack/venafi-connection-lib"] 65- insteadOf = https://github.com/jetstack/venafi-connection-lib
66- EOT
50+ mkdir -p -m 0700 ~/.ssh
51+ cat <<EOF >~/.ssh/known_hosts
52+ github.com ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMqqnkVzrm0SdG6UOoqKLsabgH5C9okWi0dh2l9GKJl
53+ github.com ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBEmKSENjQEezOmxkZMy7opKgwFB9nkt5YRrYMjNuG5N87uRgg6CLrbo5wAdT/y6v0mKV0U2w0WZ2YB/++Tpockg=
54+ github.com ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCj7ndNxQowgcQnjshcLrqPEiiphnt+VTTvDP6mHBL9j1aNUkY4Ue1gvwnGLVlOhGeYrnZaMgRK6+PKCUXaDbC7qtbW8gIkhL7aGCsOr/C56SJMy/BCZfxd1nWzAOxSDPgVsmerOBYfNqltV9/hWCqBywINIR+5dIg6JTJ72pcEpEjcYgXkE2YEFXV1JHnsKgbLWNlhScqb2UmyRkQyytRLtL+38TGxkxCflmO+5Z8CSSNY7GidjMIZ7Q4zMjA2n1nGrlTDkzwDCsw+wqFPGQA179cnfGWOWRVruj16z6XyvxvjJwbz0wQZ75XK5tKSb7FNyeIEs4TT4jk+S4dhPeAUC5y+bDYirYgM4GC7uEnztnZyaVWQ7B381AK4Qdrwt51ZqExKbQpTUNn+EjqoTwvqNj4kqx5QUCI0ThS/YkOxJCXmPUWZbhjpCg56i+2aB6CmK2JGhn57K5mj0MNdBXA4/WnwH6XoPWJzK5Nyu2zB3nAZp+S5hpQs+p1vN1/wsjk=
55+ EOF
56+ chmod 600 ~/.ssh/known_hosts
57+ - run : curl --silent https://api.github.com/meta | jq --raw-output '"github.com "+.ssh_keys[]' >> ~/.ssh/known_hosts
58+ -
uses :
webfactory/[email protected] 59+ with :
60+ ssh-private-key : ${{ secrets.DEPLOY_KEY_READ_VENAFI_CONNECTION_LIB }}
6761 - uses : actions/checkout@v4
6862 - run : make test
6963 docker_build :
@@ -80,25 +74,19 @@ jobs:
8074 DOCKER_DRIVER : overlay
8175 DOCKER_HOST : tcp://localhost:2375
8276 steps :
83- - name : Configure jetstack/venafi-connection-lib repo pull access
77+ -
run :
git config --global [email protected] :jetstack/venafi-connection-lib.insteadOf https://github.com/jetstack/venafi-connection-lib 78+ - name : " Add GitHub to the SSH known hosts file"
8479 run : |
85- mkdir ~/.ssh
86- chmod 700 ~/.ssh
87-
88- echo "${{ secrets.DEPLOY_KEY_READ_VENAFI_CONNECTION_LIB }}" > ~/.ssh/venafi_connection_lib_id
89- chmod 600 ~/.ssh/venafi_connection_lib_id
90-
91- cat <<EOT >> ~/.ssh/config
92- Host venafi-connection-lib.github.com
93- HostName github.com
94- IdentityFile ~/.ssh/venafi_connection_lib_id
95- IdentitiesOnly yes
96- EOT
97-
98- cat <<EOT >> ~/.gitconfig
99- [url "[email protected] :jetstack/venafi-connection-lib"] 100- insteadOf = https://github.com/jetstack/venafi-connection-lib
101- EOT
80+ mkdir -p -m 0700 ~/.ssh
81+ cat <<EOF >~/.ssh/known_hosts
82+ github.com ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMqqnkVzrm0SdG6UOoqKLsabgH5C9okWi0dh2l9GKJl
83+ github.com ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBEmKSENjQEezOmxkZMy7opKgwFB9nkt5YRrYMjNuG5N87uRgg6CLrbo5wAdT/y6v0mKV0U2w0WZ2YB/++Tpockg=
84+ github.com ssh-rsa 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
85+ EOF
86+ chmod 600 ~/.ssh/known_hosts
87+ -
uses :
webfactory/[email protected] 88+ with :
89+ ssh-private-key : ${{ secrets.DEPLOY_KEY_READ_VENAFI_CONNECTION_LIB }}
10290 - name : Install Tools
10391 run : apk add --update make git jq rsync curl
10492 - name : Adding github workspace as safe directory
0 commit comments