Skip to content

Commit 4e15f69

Browse files
committed
fix(skills-init): install openssh-client so ssh-keyscan is available
the skills-init image runs ssh-keyscan to populate ~/.ssh/known_hosts when an agent uses ssh-based git auth (gitAuthSecretRef -> kubernetes.io/ssh-auth). the alpine base only had git, so the binary was missing and the init container exited with 'ssh-keyscan: not found' under set -e, leaving the agent pod in crashloopbackoff. add openssh-client to the apk install list and verify ssh-keyscan resolves at build time so the same regression cannot ship silently again. closes #1770 Signed-off-by: SarthakB11 <sarthak.bhardwaj21b@iiitg.ac.in>
1 parent 2a5210f commit 4e15f69

1 file changed

Lines changed: 7 additions & 1 deletion

File tree

docker/skills-init/Dockerfile

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,13 @@ FROM alpine:3.23
1717
ARG PYTHON_UID=1001
1818
ARG PYTHON_GID=1001
1919

20-
RUN apk upgrade --no-cache && apk add --no-cache git
20+
RUN apk upgrade --no-cache && apk add --no-cache git openssh-client
21+
22+
# ssh-keyscan is required by skills-init.sh when an Agent uses SSH-based git
23+
# auth (gitAuthSecretRef -> kubernetes.io/ssh-auth). Verify it is on PATH so a
24+
# future package change cannot silently reintroduce the missing-binary regression.
25+
RUN command -v ssh-keyscan >/dev/null
26+
2127
COPY --from=krane-builder /build/krane /usr/local/bin/krane
2228

2329
# Run as the same UID/GID as the main agent container (python user) so that

0 commit comments

Comments
 (0)