Merge pull request #10 from codefresh-io/SAAS-6392

SAAS-6392 Add PRIVATE_KEY support

Author: denis-codefresh

.ssh/config

@@ -1,4 +1 @@
-IdentityFile ~/.ssh/codefresh
-
-Host github.com
-    StrictHostKeyChecking no
+IdentityFile ~/.ssh/codefresh

.ssh/known_hosts

@@ -1,3 +0,0 @@
-github.com ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGmdnm9tUDbO9IDSwBK6TbQa+PXYPCPy6rbTrTtw7PHkccKrpp0yVhp5HdEIcKr6pLlVDBfOLX9QUsyCOV0wzfjIJNlGEYsdlLJizHhbn2mUjvSAHQqZETYP81eFzLQNnPHt4EVVUh7VfDESU84KezmD5QlWpXLmvU31/yMf+Se8xhHTvKSCZIFImWwoG6mbUoWf9nzpIoaSjB+weqqUUmpaaasXVal72J+UX2B+2RPW3RcT0eOzQgqlJL3RKrTJvdsjE3JEAvGq3lGHSZXy28G3skua2SmVi/w4yCE6gbODqnTWlg7+wC604ydGXA8VJiS5ap43JXiUFFAaQ==
-bitbucket.com ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAubiN81eDcafrgMeLzaFPsw2kNvEcqTKl/VqLat/MaB33pZy0y3rJZtnqwR2qOOvbwKZYKiEO1O6VqNEBxKvJJelCq0dTXWT5pbO2gDXC6h6QDXCaHo6pOHGPUy+YBaGQRGuSusMEASYiWunYN0vCAI8QaXnWMXNMdFP3jHAJH0eDsoiGnLPBlBp4TNm6rYI74nMzgz3B9IikW4WVK+dc8KZJZWYjAuORU3jc1c/NPskD2ASinf8v3xnfXeukU0sJ5N6m5E8VLjObPEO+mN2t/FZTMZLiFqPWc/ALSqnMnnhwrNi2rbfg/rd/IpL8Le3pSBne8+seeFVBoGqzHM9yXw==
-bitbucket.org ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAubiN81eDcafrgMeLzaFPsw2kNvEcqTKl/VqLat/MaB33pZy0y3rJZtnqwR2qOOvbwKZYKiEO1O6VqNEBxKvJJelCq0dTXWT5pbO2gDXC6h6QDXCaHo6pOHGPUy+YBaGQRGuSusMEASYiWunYN0vCAI8QaXnWMXNMdFP3jHAJH0eDsoiGnLPBlBp4TNm6rYI74nMzgz3B9IikW4WVK+dc8KZJZWYjAuORU3jc1c/NPskD2ASinf8v3xnfXeukU0sJ5N6m5E8VLjObPEO+mN2t/FZTMZLiFqPWc/ALSqnMnnhwrNi2rbfg/rd/IpL8Le3pSBne8+seeFVBoGqzHM9yXw==

Dockerfile

@@ -1,6 +1,6 @@
 FROM alpine:3.10.3
 
-RUN apk add --no-cache git=2.22.2-r0 bash
+RUN apk add --no-cache git~=2.22 bash openssh
 
 # install git-lfs
 RUN apk add --no-cache --virtual deps openssl && \

Dockerfile.aarch64

@@ -1,5 +1,5 @@
 FROM arm64v8/alpine:3.7
-RUN apk add --no-cache git bash
+RUN apk add --no-cache git bash openssh
 
 # install git-lfs
 RUN apk add --no-cache --virtual deps openssl && \

service.yaml

@@ -1 +1 @@
-version: 9.2.0
+version: 10.0.0

start.sh

@@ -34,11 +34,28 @@ git_retry () {
 trap exit_trap EXIT
 set -e
 
+
 [ -z "$REVISION" ] && (echo "missing REVISION var" | tee /dev/stderr) && exit 1
 
-echo "$PRIVATE_KEY" > /root/.ssh/codefresh
-chmod 700 ~/.ssh/
-chmod 600 ~/.ssh/*
+
+if [ "$USE_SSH" = "true" ]; then
+    echo "Cloning using SSH: $REPO"
+
+    [ -z "$PRIVATE_KEY" ] && (echo "missing PRIVATE_KEY var" | tee /dev/stderr) && exit 1
+
+    echo "$PRIVATE_KEY" > /root/.ssh/codefresh
+    chmod 700 ~/.ssh/
+    chmod 600 ~/.ssh/*
+
+    # ssh://git@github.com:username/repo.git
+    # match "github.com" from ssh uri
+    REPO=${REPO#"ssh://"}
+    SSH_HOST=$(echo "$REPO" | cut -d ":" -f 1 | cut -d "@" -f 2)
+    
+    echo "Adding "$SSH_HOST" to known_hosts"
+    ssh-keygen -R $SSH_HOST
+    ssh-keyscan -H $SSH_HOST >> ~/.ssh/known_hosts
+fi
 
 mkdir -p "$WORKING_DIRECTORY"
 cd $WORKING_DIRECTORY