Grab host keys in the tasks not from the secret like before.

generic-tasks/j7s-ansible-build.yaml

@@ -19,6 +19,8 @@ spec:
       cp -r $(workspaces.ssh-directory.path) ~/.ssh
       chmod 700 ~/.ssh
       chmod -R 400 ~/.ssh/*
+      ssh-keyscan -H -p 2222 git.jpace121.net >> ~/.ssh/known_hosts
+      ssh-keyscan -H         packages.jpace121.net >> ~/.ssh/known_hosts
 
       cd $(workspaces.source.path)
       ansible-playbook -vvvv --skip-tags deploy -i $(params.ansible-file-path)/inventory.yaml $(params.ansible-file-path)/build.yaml

generic-tasks/j7s-git-clone-hash.yaml

@@ -16,6 +16,7 @@ spec:
       cp -r $(workspaces.ssh-directory.path) ~/.ssh
       chmod 700 ~/.ssh
       chmod -R 400 ~/.ssh/*
+      ssh-keyscan -H -p 2222 git.jpace121.net >> ~/.ssh/known_hosts
 
       git clone $(params.url) $(workspaces.output.path)
       cd $(workspaces.output.path)

generic-tasks/j7s-git-clone.yaml

@@ -16,5 +16,6 @@ spec:
       cp -r $(workspaces.ssh-directory.path) ~/.ssh
       chmod 700 ~/.ssh
       chmod -R 400 ~/.ssh/*
+      ssh-keyscan -H -p 2222 git.jpace121.net >> ~/.ssh/known_hosts
 
       git clone --single-branch --branch $(params.branch) $(params.url) $(workspaces.output.path)

generic-tasks/j7s-ros-clone.yaml

@@ -17,6 +17,7 @@ spec:
       cp -r $(workspaces.ssh-directory.path) ~/.ssh
       chmod 700 ~/.ssh
       chmod -R 400 ~/.ssh/*
+      ssh-keyscan -H -p 2222 git.jpace121.net >> ~/.ssh/known_hosts
 
       git clone --single-branch --branch $(params.branch) $(params.url) $(workspaces.output.path)
       cd $(workspaces.output.path)

j7s-os/j7s-os-k8s-deploy.yaml

@@ -19,6 +19,7 @@ spec:
         cp -r $(workspaces.ssh-directory.path) ~/.ssh
         chmod 700 ~/.ssh
         chmod -R 400 ~/.ssh/*
+        ssh-keyscan -H -p 2222 git.jpace121.net >> ~/.ssh/known_hosts
         git config --global user.name tekton
         git config --global user.email tekton@internal.jpace121.net