Ansible Tutorial 08 - Privilege Escalation with Ansible Become

Поділитися
Вставка
  • Опубліковано 19 жов 2024

КОМЕНТАРІ • 3

  • @RobertFabiano
    @RobertFabiano 5 місяців тому

    What do you recommend doing in production to overcome the accept key prompt? 12:15

    • @sysengquick
      @sysengquick  5 місяців тому +1

      Most ideas involve verifying the key in some manner other than just saying 'yes' and adding that to your known hosts file.
      You could have someone login to the console and verify manually and then accept the keys.
      The server could register its generated keys with a central keyserver and that could be the place known_hosts is pulled from.
      The deployment could generate the key instead of letting the server create one.
      There are probably other solutions.

    • @RobertFabiano
      @RobertFabiano 5 місяців тому

      Gotcha, ​I figured it was worth asking since the name of the game is production. 😂 @@sysengquick