From 0a15a87d36ef6ac175f9a3770045f76a517b2d1b Mon Sep 17 00:00:00 2001 From: Alexandre Pires Date: Tue, 24 Sep 2024 19:05:46 +0200 Subject: [PATCH] Refactor SSH configuration and test SSH connection in ansible-apply.yaml --- .github/workflows/ansible-apply.yaml | 13 +++++++++++-- 1 file changed, 11 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ansible-apply.yaml b/.github/workflows/ansible-apply.yaml index 0effa83..b87d2ab 100644 --- a/.github/workflows/ansible-apply.yaml +++ b/.github/workflows/ansible-apply.yaml @@ -40,8 +40,8 @@ jobs: TRUSTED_HOSTS: ${{ secrets.TRUSTED_HOSTS }} run: | mkdir -p ~/.ssh - for host in $TRUSTED_HOSTS; do - ssh-keyscan $host >> ~/.ssh/known_hosts + for HOST in $TRUSTED_HOSTS; do + ssh-keyscan $HOST >> ~/.ssh/known_hosts done chmod 600 ~/.ssh/known_hosts @@ -51,6 +51,15 @@ jobs: echo " HostKeyAlgorithms +sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com" chmod 600 ~/.ssh/config + - name: Check SSH Connection + env: + VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }} + ANSIBLE_USER: ${{ secrets.ANSIBLE_USER }} + run: | + for HOST in $TRUSTED_HOSTS; do + ssh -vvvv -i ~/.ssh/id_ecdsa $ANSIBLE_USER@$HOST echo "SSH connection to $HOST successful" + done + - name: Apply Ansible Playbook env: VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }}