Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-73797

Git Host Key Verification setting is no longer honored on Kubernetes Agents

Find on a boardRank to TopRank to Bottom
Attach filesAttach Screenshot
Remove voteStop watching
Create linked issueMoveLinkCloneLabelsCreate test session
XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Minor Minor
    • git-client-plugin
    • None
    • Kubernetes
      GIT-Plugin 5.5.0

      Since release 5.5.0 of the Git-Client the "security" → "Git Host Key Verification Configuration" setting is ignored (at least on Kubernetes Agents).

      Workaround is manual downgrade to 5.4.1

      Using anything other than "Known hosts files" causes "stderr: Host key verification failed." followed by "fatal: Could not read from remote repository."

      Checking out the pipeline repos beforehand is still working, seems to be a problem on kubernetes agents builds only.

        Drop files to attach, or

            [JENKINS-73797] Git Host Key Verification setting is no longer honored on Kubernetes Agents

            Yoerg added a comment -

            Right, sorry: Jenkins LTS 2.462.2 on Java 21.0.4+7-Ubuntu-1ubuntu222.04

            I didn't change anything besides the Git plugin.

            Working configuration:

            • Git client plugin 5.0.0
            • Git plugin 5.4.1

            Failing configuration:

            • Git client plugin 5.0.0
            • Git plugin 5.5.0

            Git client plugin 6 requires Jenkins 2.463 so it's not available for the current LTS

            Edit Delete

            Yoerg added a comment - Right, sorry: Jenkins LTS 2.462.2 on Java 21.0.4+7-Ubuntu-1ubuntu222.04 I didn't change anything besides the Git plugin . Working configuration: Git client plugin 5.0.0 Git plugin 5.4.1 Failing configuration: Git client plugin 5.0.0 Git plugin 5.5.0 Git client plugin 6 requires Jenkins 2.463 so it's not available for the current LTS

            Mark Waite added a comment -

            Thanks Yoerg. Same questions apply to your comment. Can you provide the detailed list of plugins installed before the problem was seen and after the problem was seen?

            Mark Waite added a comment - Thanks Yoerg . Same questions apply to your comment. Can you provide the detailed list of plugins installed before the problem was seen and after the problem was seen?

            Mark Waite added a comment -

            Thanks for reporting the issue Ruby Paasche.

            Can you confirm that when you upgraded to git plugin 5.5.0 that you also upgraded git client plugin? The git client plugin handles the host key verification configuration. There were host key verification changes in git client plugin 5.0.0 If you were running git client plugin 4.7.0 before and upgraded to git client plugin 5.0.0, that would narrow the search range for my investigation.

            You mention that it is specific to kubernetes agents. Can you share the other agent types that you have tried?

            Can you share the list of installed plugins before the problem and the list of installed plugins after the problem appeared? "How to report an issue" includes a script that generates the list of installed plugins on a running system.

            Mark Waite added a comment - Thanks for reporting the issue Ruby Paasche . Can you confirm that when you upgraded to git plugin 5.5.0 that you also upgraded git client plugin? The git client plugin handles the host key verification configuration. There were host key verification changes in git client plugin 5.0.0 If you were running git client plugin 4.7.0 before and upgraded to git client plugin 5.0.0, that would narrow the search range for my investigation. You mention that it is specific to kubernetes agents. Can you share the other agent types that you have tried? Can you share the list of installed plugins before the problem and the list of installed plugins after the problem appeared? "How to report an issue" includes a script that generates the list of installed plugins on a running system.

            Yoerg added a comment -

            Same here, with OpenStack cloud agent and "Manually provided keys" strategy. Regression in 5.5.0, downgrade to 5.4.1 fixes the issue.

            Edit Delete

            Yoerg added a comment - Same here, with OpenStack cloud agent and "Manually provided keys" strategy. Regression in 5.5.0, downgrade to 5.4.1 fixes the issue.

              markewaite Mark Waite Assign to me
              rpaasche Ruby Paasche
              Votes:
              2 Remove vote for this issue
              Watchers:
              4 Stop watching this issue

                Created:
                Updated:

                  Find on a board

                  Drop files to attach them to the issue