Skip to content

Comments

ci: Fix SSH key leak and connection timeouts#67

Merged
Cfeusier merged 1 commit intomainfrom
cf/e2e-ssh-fix
Feb 13, 2026
Merged

ci: Fix SSH key leak and connection timeouts#67
Cfeusier merged 1 commit intomainfrom
cf/e2e-ssh-fix

Conversation

@Cfeusier
Copy link
Contributor

Summary

  • Pre-generates SSH key quietly to prevent ssh-keygen stdout leak in public logs
  • Sets ConnectTimeout in SSH config so attempts fail fast instead of hanging
  • Both apply globally to all gcloud SSH/SCP calls including harness scripts

Prerequisite

Requires iam.serviceAccountUser role grant (see PR comments)

Test plan

  • Merge after role is granted
  • Trigger workflow and verify no SSH info in logs
  • Verify SSH connects successfully

Pre-generates SSH key quietly to prevent ssh-keygen stdout leak.
Sets ConnectTimeout in SSH config so attempts fail fast instead
of hanging indefinitely. Both apply globally to all gcloud
SSH/SCP calls including harness scripts.
@Cfeusier Cfeusier merged commit a4031a0 into main Feb 13, 2026
1 check passed
@Cfeusier Cfeusier deleted the cf/e2e-ssh-fix branch February 13, 2026 22:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant