Refactor SSH configuration and test SSH connection in ansible-apply.yaml
This commit is contained in:
@@ -40,8 +40,8 @@ jobs:
|
|||||||
TRUSTED_HOSTS: ${{ secrets.TRUSTED_HOSTS }}
|
TRUSTED_HOSTS: ${{ secrets.TRUSTED_HOSTS }}
|
||||||
run: |
|
run: |
|
||||||
mkdir -p ~/.ssh
|
mkdir -p ~/.ssh
|
||||||
for host in $TRUSTED_HOSTS; do
|
for HOST in $TRUSTED_HOSTS; do
|
||||||
ssh-keyscan $host >> ~/.ssh/known_hosts
|
ssh-keyscan $HOST >> ~/.ssh/known_hosts
|
||||||
done
|
done
|
||||||
chmod 600 ~/.ssh/known_hosts
|
chmod 600 ~/.ssh/known_hosts
|
||||||
|
|
||||||
@@ -51,6 +51,15 @@ jobs:
|
|||||||
echo " HostKeyAlgorithms +sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com"
|
echo " HostKeyAlgorithms +sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com"
|
||||||
chmod 600 ~/.ssh/config
|
chmod 600 ~/.ssh/config
|
||||||
|
|
||||||
|
- name: Check SSH Connection
|
||||||
|
env:
|
||||||
|
VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }}
|
||||||
|
ANSIBLE_USER: ${{ secrets.ANSIBLE_USER }}
|
||||||
|
run: |
|
||||||
|
for HOST in $TRUSTED_HOSTS; do
|
||||||
|
ssh -vvvv -i ~/.ssh/id_ecdsa $ANSIBLE_USER@$HOST echo "SSH connection to $HOST successful"
|
||||||
|
done
|
||||||
|
|
||||||
- name: Apply Ansible Playbook
|
- name: Apply Ansible Playbook
|
||||||
env:
|
env:
|
||||||
VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }}
|
VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }}
|
||||||
|
|||||||
Reference in New Issue
Block a user