-
Notifications
You must be signed in to change notification settings - Fork 191
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add new flag --ssh-hostkey-algos
#711
Conversation
@@ -124,8 +123,10 @@ func main() { | |||
"The TTL of an index in the cache. Valid time units are ns, us (or µs), ms, s, m, h.") | |||
flag.StringVar(&helmCachePurgeInterval, "helm-cache-purge-interval", "1m", | |||
"The interval at which the cache is purged. Valid time units are ns, us (or µs), ms, s, m, h.") | |||
flag.StringSliceVar(&kexAlgos, "ssh-kex-algos", []string{}, | |||
flag.StringSliceVar(&git.KexAlgos, "ssh-kex-algos", []string{}, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Although is technically alright, I wonder if it'd be better to have all the flag vars organized in the same place. This is honestly very trivial, so if you feel like your current change is fine, it's okay by me.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
That was the one thing I wasn't too sure about as well. The motivation for taking this approach was that both vars are not used within main.go
, so I did not see much benefit for declaring them there - specially considering that in the feature we may add another one/two similar flags (i.e. --ssh-macs
and --ssh-ciphers
).
But I am happy to declare the vars within main.go
if anyone feels strongly about it.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We really need to get these flags into docs, like we do for the Flux CLI with https://github.com/fluxcd/flux2/blob/main/cmd/flux/docgen.go
The more flags we add, the harder it gets for users to comprehend Flux global config.
The new flag allow users to set the list of hostkey algorithms to use for ssh connections, enabling them to ensure specific are/aren't used. Signed-off-by: Paulo Gomes <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
The new flag allow users to set the list of hostkey algorithms to use for ssh connections, enabling them to ensure specific are/aren't used.
Fixes #397