Skip to content

fix: add SSH-to-HTTPS git insteadOf config for terraform module pulls (CSVDIES-10219) #5

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

arnol377
Copy link
Contributor

Description

Add SSH-to-HTTPS git insteadOf rewrite config to fix terraform init failing with "Host key verification failed" on GitHub Actions runners.

Purpose

GitHub Actions runners have no SSH keys for github.e.it.census.gov. Terraform normalizes SCP-style SSH module source URLs to ssh://git@... before invoking git, causing terraform init to fail.

The fix adds two git config --global url.insteadOf rules that transparently rewrite both git@github.e.it.census.gov: and ssh://git@github.e.it.census.gov/ to authenticated HTTPS using a short-lived GitHub App token via CSVD/gh-auth@main.

New optional inputs (backward compatible — steps skipped when github_app_pem_file is not provided):

  • github_app_pem_file
  • github_app_installation_id
  • github_app_id (default: "6")

Jira

CSVDIES-10219

tf-plan output

N/A — composite action, not a Terraform configuration.

@arnol377 arnol377 force-pushed the fix/CSVDIES-10219-ssh-module-pull branch from d8aebe3 to bb87df3 Compare June 24, 2026 17:11
Sign in to join this conversation on GitHub.
Labels
None yet
Projects
None yet
1 participant