Support `accept-new` as value for `host_key_checking` · Issue #77318 · ansible/ansible

link管理

链接快照平台

输入网页链接，自动生成快照
标签化管理网页链接

Summary

During initial setup it is common to have many new hosts. For each of these one has to manually accept their keys. Currently it is possible to set ansible_ssh_common_args to -o StrictHostKeyChecking=accept-new . However as there is an explicit option for this it would be better if that accepted it.

Issue Type

Feature Idea

Component Name

Additional Information

Currently:

- hosts: rpis
  vars:
    ansible_password: foobar
    ansible_ssh_common_args: -o StrictHostKeyChecking=accept-new
    # more portable, less secure:
    host_key_checking: no
  tasks:
    - name: Bootstrapping...

Proposed:

- hosts: rpis
  vars:
    ansible_password: foobar
    host_key_checking: accept-new
  tasks:
    - name: Bootstrapping...

Code of Conduct

I agree to follow the Ansible Code of Conduct


     lib/ansible/plugins/connection/ssh.py

If these files are incorrect, please update the component name section of the description or use the !component bot command.

click here for bot help


     lib/ansible/plugins/connection/ssh.py

If these files are incorrect, please update the component name section of the description or use the !component bot command.

click here for bot help

There are two issues with this proposal:

not all SSH clients (old versions, other SSH systems than openssh) would accept the value


    host_key_checking

is currently of type boolean, allowing for


    accept-new

would violate that

If you have further questions please stop by IRC or the mailing list:

IRC: #ansible on irc.libera.chat

mailing list: https://groups.google.com/forum/#!forum/ansible-project