github.com/argoproj/argo-cd@v1.8.7/examples/known-hosts/README.md (about)

     1  # Argo CD ssh_known_hosts file customization
     2  
     3  The directory contains sample kustomize application which customizes `/etc/ssh/ssh_known_hosts` file in Argo CD. This is useful if you want to disable SSL cert validation
     4  for Git repositories connected using SSL urls:
     5  
     6  - `argocd-known-hosts-mounts.yaml` - define merge patches which inject `/etc/ssh/ssh_known_hosts` file mount into all Argo CD deployments.
     7  - `argocd-known-hosts.yaml` - defines `ConfigMap` which includes `/etc/ssh/ssh_known_hosts` file content.
     8  - `kustomization.yaml` - Kustomize application which bundles stable version of Argo CD and apply `argocd-known-hosts-mounts.yaml` patches on top.
     9  
    10  !!! note
    11      The `/etc/ssh/ssh_known_hosts` should include Git host on each Argo CD deployment as well as on a computer where `argocd repo add` is executed. After resolving issue
    12      [#1514](https://github.com/argoproj/argo-cd/issues/1514) only `argocd-repo-server` deployment has to be customized.
    13  
    14  For the known_hosts file to work with custom repository port you have to obtain the public key using `ssh-keyscan` and hash the file before adding it to configmap, i.e.:
    15  ```
    16      ssh-keyscan -p 1234 git.repo.com > known_hosts
    17      ssh-keygen -Hf known_hosts
    18      cat known_hosts
    19  ```