879347 - Add a bunch of host keys to puppet

Status: RESOLVED FIXED

(Infrastructure & Operations :: RelOps: General, task)

Description

[Dustin J. Mitchell [:dustin] (he/him)]

At least github and people.m.o.  Add your other suggestions here!

A missing host key is not a security mechanism.  If a particular user/host should not have access to some other user/host, SSH auth should be preventing that, not the nonexistence of a host key.

Comment 1

[Dustin J. Mitchell [:dustin] (he/him)]

Also, all of the puppet masters

Comment 2

[Dustin J. Mitchell [:dustin] (he/him)]

Attachment: bug879347.patch

This puts known hosts in the system global file, but *also* in root and builder's ~/.ssh, since ~builder/.ssh/known_hosts is required for mock builds.

I tested the puppetsync crontask, and it still works fine.

Comment 3

[Justin Wood (:Callek)]

Comment on attachment 759258 [details] [diff] [review]
bug879347.patch

I'm curious why people.m.{o,c} was added, since it is blocked flow-wise from all the hosts that I know of in the buildVPN

Comment 4

[Dustin J. Mitchell [:dustin] (he/him)]

Not all - I often send puppet patches there for upload to bugzilla.