fix: restore InsecureIgnoreHostKey fallback when known_hosts is missing

creydr · creydr · commit 079edc129ef7 · 2026-05-20T15:14:50.000+02:00
The previous commit removed the InsecureIgnoreHostKey fallback when
an SSH key is provided without known_hosts data, causing E2E failures
with "knownhosts: key is unknown".
diff --git a/internal/git/manager.go b/internal/git/manager.go
@@ -172,6 +172,7 @@ func (m *managerImpl) getSSHClientOptions(ctx context.Context, authSecret map[st
 		}
 	} else {
 		logger.Info("SSH host key verification is disabled, provide known_hosts in auth secret to enable verification")
+		auth.HostKeyCallback = gossh.InsecureIgnoreHostKey()
 	}
 
 	return []client.Option{client.WithSSHAuth(auth)}, tempFilePath, nil

Original file line number	Diff line number	Diff line change
`@@ -172,6 +172,7 @@ func (m *managerImpl) getSSHClientOptions(ctx context.Context, authSecret map[st`
`172`	`172`	`}`
`173`	`173`	`} else {`
`174`	`174`	`logger.Info("SSH host key verification is disabled, provide known_hosts in auth secret to enable verification")`
	`175`	`+ auth.HostKeyCallback = gossh.InsecureIgnoreHostKey()`
`175`	`176`	`}`
`176`	`177`
`177`	`178`	`return []client.Option{client.WithSSHAuth(auth)}, tempFilePath, nil`