Skip to content

Add sshKnownHosts support - #843

Open
mbaldessari wants to merge 1 commit into
validatedpatterns:mainfrom
mbaldessari:rfe1
Open

mbaldessari wants to merge 1 commit into
validatedpatterns:mainfrom
mbaldessari:rfe1

Conversation

@mbaldessari

Copy link
Copy Markdown
Contributor

Now you can add the following to your values-secrets-.yaml file:

bootstrap_secrets:
  - name: private-repo
    targetNamespaces:
      - openshift-operators
    labels:
      argocd.argoproj.io/secret-type: repository
    fields:
      - name: type
        value: git
      - name: url
        value: git@github.com:mbaldessari/mcg-private.git
      - name: sshPrivateKey
        value: |
          -----BEGIN OPENSSH PRIVATE KEY-----
          ...
          -----END OPENSSH PRIVATE KEY-----
      - name: sshKnownHosts
        value: |
          foo.bar ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMqqnkVzrm0SdG6UOoqKLsabgH5C9okWi0dh2l9GKJl

And deploy the pattern via ./pattern.sh make TOKEN_SECRET=private-repo TOKEN_NAMESPACE=openshift-operators install

Verify that Argo's configmap has our added sshknownhosts:

oc get cm -n vp-gitops argocd-ssh-known-hosts-cm -o yaml |grep foo.bar
foo.bar ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMqqnkVzrm0SdG6UOoqKLsabgH5C9okWi0dh2l9GKJl

Closes: #839

Now you can add the following to your values-secrets-<project>.yaml file:

    bootstrap_secrets:
      - name: private-repo
        targetNamespaces:
          - openshift-operators
        labels:
          argocd.argoproj.io/secret-type: repository
        fields:
          - name: type
            value: git
          - name: url
            value: git@github.com:mbaldessari/mcg-private.git
          - name: sshPrivateKey
            value: |
              -----BEGIN OPENSSH PRIVATE KEY-----
              ...
              -----END OPENSSH PRIVATE KEY-----
          - name: sshKnownHosts
            value: |
              foo.bar ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMqqnkVzrm0SdG6UOoqKLsabgH5C9okWi0dh2l9GKJl

And deploy the pattern via `./pattern.sh make TOKEN_SECRET=private-repo TOKEN_NAMESPACE=openshift-operators install`

Verify that Argo's configmap has our added sshknownhosts:

    oc get cm -n vp-gitops argocd-ssh-known-hosts-cm -o yaml |grep foo.bar
    foo.bar ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMqqnkVzrm0SdG6UOoqKLsabgH5C9okWi0dh2l9GKJl

Closes: validatedpatterns#839
@openshift-ci

openshift-ci Bot commented Sep 29, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: mbaldessari

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

mbaldessari added a commit to mbaldessari/docs that referenced this pull request Sep 29, 2026
Depends on
validatedpatterns/patterns-operator#843 being
merged and an operator released with it
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

RFE: Seed ArgoCD ssh_known_hosts for private SSH remotes (self-hosted Git)

1 participant