Refactor SSH configuration and test SSH connection in ansible-apply.yaml

This commit is contained in:
2024-09-24 19:05:46 +02:00
parent 53239f9843
commit 0a15a87d36
+11 -2
View File
@@ -40,8 +40,8 @@ jobs:
TRUSTED_HOSTS: ${{ secrets.TRUSTED_HOSTS }} TRUSTED_HOSTS: ${{ secrets.TRUSTED_HOSTS }}
run: | run: |
mkdir -p ~/.ssh mkdir -p ~/.ssh
for host in $TRUSTED_HOSTS; do for HOST in $TRUSTED_HOSTS; do
ssh-keyscan $host >> ~/.ssh/known_hosts ssh-keyscan $HOST >> ~/.ssh/known_hosts
done done
chmod 600 ~/.ssh/known_hosts chmod 600 ~/.ssh/known_hosts
@@ -51,6 +51,15 @@ jobs:
echo " HostKeyAlgorithms +sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com" echo " HostKeyAlgorithms +sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com"
chmod 600 ~/.ssh/config chmod 600 ~/.ssh/config
- name: Check SSH Connection
env:
VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }}
ANSIBLE_USER: ${{ secrets.ANSIBLE_USER }}
run: |
for HOST in $TRUSTED_HOSTS; do
ssh -vvvv -i ~/.ssh/id_ecdsa $ANSIBLE_USER@$HOST echo "SSH connection to $HOST successful"
done
- name: Apply Ansible Playbook - name: Apply Ansible Playbook
env: env:
VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }} VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }}