You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository was archived by the owner on Jul 19, 2019. It is now read-only.
When templates deploy replacement instances, the host SSH keys are not persisted across instantiations. This causes clients using SSH for push/pull to pop a MITM attack-alert
Severity
Completely Broken (No work-around evident)
Severely Broken (Work-around possible but difficult)
Moderately Broken (Trivial work-around)
Nuisance (Functions but untrapped errors can slip through)
To Reproduce
Use either the Standalone templates to deploy a new stack-set for migration or use the Autoscale templates to do automated rebuilds. Whenever the new instance(s) are made "live", SSH clients pop host-key errors
Expected behavior
Reprovision events are transparent to service-consumers
Fix Suggestions
Add logic to check config-bucket for service host-key files: if present download them in place of the ones generated at instance-launch; if absent, copy-up the host-key files to the config-bucket.
The text was updated successfully, but these errors were encountered:
Describe the bug
When templates deploy replacement instances, the host SSH keys are not persisted across instantiations. This causes clients using SSH for push/pull to pop a MITM attack-alert
Severity
To Reproduce
Use either the Standalone templates to deploy a new stack-set for migration or use the Autoscale templates to do automated rebuilds. Whenever the new instance(s) are made "live", SSH clients pop host-key errors
Expected behavior
Reprovision events are transparent to service-consumers
Fix Suggestions
Add logic to check config-bucket for service host-key files: if present download them in place of the ones generated at instance-launch; if absent, copy-up the host-key files to the config-bucket.
The text was updated successfully, but these errors were encountered: