Skip to content

Support CheckHostKey operation in the Scriptable engine #70

@petrsnd

Description

@petrsnd

Summary

The CheckHostKey operation exists in the OperationType enum and is implemented by built-in backends (e.g., Cisco NX-OS), but the Scriptable engine explicitly throws MethodNotSupportedByPlatformException for it. Custom platform authors cannot implement this operation.

Use Case

Custom SSH-based platforms need a way to verify that the stored host key fingerprint still matches the target device. Today, DiscoverSshHostKey can retrieve a host key, but there is no scriptable operation to validate an already-stored key against the live target. This would allow SPP to detect host key changes (potential MITM or device replacement) as a scheduled check, separate from the full CheckSystem flow.

Current Behavior

  • ScriptableModule.CheckHostKey() throws MethodNotSupportedByPlatformException
  • No [ScriptableOperation] attribute is present
  • The operation is not mapped to a task name on the appliance side

Requested Behavior

  • Add [ScriptableOperation(OperationType.CheckHostKey)] to ScriptableModule
  • Implement the operation handler (similar pattern to DiscoverSshHostKey)
  • Map it to an appropriate task name on the appliance side
  • Document it in the custom platform script reference

🤖 This issue was written by an AI agent powered by Claude Opus 4.6 (Anthropic), orchestrated via GitHub Copilot CLI.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions