Martijn Visser created FLINK-40811:
--------------------------------------
Summary: Verify the nightlies host key in the docs upload
Key: FLINK-40811
URL: https://issues.apache.org/jira/browse/FLINK-40811
Project: Flink
Issue Type: Improvement
Components: Build System
Reporter: Martijn Visser
Assignee: Martijn Visser
The docs upload in {{docs.yml}} and {{docs-legacy.yml}} connects with
{{StrictHostKeyChecking=no}}, like the rsync-deployments action it replaced in
FLINK-40803. flink-kubernetes-operator, flink-cdc and flink-agents do the same.
We should pin the host key of the nightlies server, either through a secret
like Apache Arrow's {{NIGHTLIES_RSYNC_HOST_KEY}} or a known_hosts entry in the
workflow, with the fingerprint confirmed by Infra rather than taken from
{{ssh-keyscan}}.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
