kahkhang / kube-linode

:whale: Provision a Kubernetes/CoreOS cluster on Linode
MIT License
212 stars 31 forks source link

Validate SSH host keys #76

Open thefinn93 opened 6 years ago

thefinn93 commented 6 years ago

A number of ssh commands specify -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no. It would be far better to retrieve the host's SSH keys from the provider (not sure if that's possible with Linode's API, Digital Ocean and AWS both allow access to the system's startup messages, which include the host's public SSH keys)