From 8c4017ba45def2beed8c882c2aef7eaa7da0d212 Mon Sep 17 00:00:00 2001
From: Alexandre Pires <c.alexandre.pires@gmail.com>
Date: Tue, 24 Sep 2024 17:02:55 +0200
Subject: [PATCH] Refactor SSH configuration in ansible-apply.yaml and add
 trusted hosts

---
 .github/workflows/ansible-apply.yaml | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/ansible-apply.yaml b/.github/workflows/ansible-apply.yaml
index 50e5e85..271ccc1 100644
--- a/.github/workflows/ansible-apply.yaml
+++ b/.github/workflows/ansible-apply.yaml
@@ -35,11 +35,13 @@ jobs:
           chmod 600 ~/.ssh/id_rsa
 
       - name: Configure SSH to Disable Host Key Checking
+        env:
+          TRUSTE_HOSTS: ${{ secrets.TRUSTED_HOSTS }}
         run: |
           mkdir -p ~/.ssh
-          touch ~/.ssh/config
-          echo -e "Host *\n\tStrictHostKeyChecking no\n\tUserKnownHostsFile=/dev/null\n" >> ~/.ssh/config
-          chmod 600 ~/.ssh/config
+          for host in $TRUSTED_HOSTS; do
+            ssh-keyscan -H $host >> ~/.ssh/known_hosts
+          done
 
       - name: Apply Ansible Playbook
         env: