This commit addresses the OWASP security audit by enforcing strict host key verification and resolves persistent CI issues. Security Changes: - Replaced StrictHostKeyChecking=accept-new with yes in pkg/container and devops. - Removed insecure host key verification from pkg/ansible. - Implemented synchronous host key discovery using ssh-keyscan during VM boot. - Updated Boot lifecycle to wait for host key verification. - Handled missing known_hosts file in pkg/ansible. - Refactored hardcoded SSH port to DefaultSSHPort constant. CI and Maintenance: - Fixed auto-merge.yml by inlining the script and adding repository context to 'gh' command, resolving the "not a git repository" error in CI. - Resolved merge conflicts in .github/workflows/auto-merge.yml with dev branch. - Added pkg/ansible/ssh_test.go for SSH client verification. - Fixed formatting in pkg/io/local/client.go to pass QA checks.
46 lines
1.2 KiB
Go
46 lines
1.2 KiB
Go
// Package unifi provides CLI commands for managing a UniFi network controller.
|
|
//
|
|
// Commands:
|
|
// - config: Configure UniFi connection (URL, credentials)
|
|
// - clients: List connected clients
|
|
// - devices: List infrastructure devices
|
|
// - sites: List controller sites
|
|
// - networks: List network segments and VLANs
|
|
// - routes: List gateway routing table
|
|
package unifi
|
|
|
|
import (
|
|
"github.com/host-uk/core/pkg/cli"
|
|
)
|
|
|
|
func init() {
|
|
cli.RegisterCommands(AddUniFiCommands)
|
|
}
|
|
|
|
// Style aliases from shared package.
|
|
var (
|
|
successStyle = cli.SuccessStyle
|
|
errorStyle = cli.ErrorStyle
|
|
warningStyle = cli.WarningStyle
|
|
dimStyle = cli.DimStyle
|
|
valueStyle = cli.ValueStyle
|
|
numberStyle = cli.NumberStyle
|
|
infoStyle = cli.InfoStyle
|
|
)
|
|
|
|
// AddUniFiCommands registers the 'unifi' command and all subcommands.
|
|
func AddUniFiCommands(root *cli.Command) {
|
|
unifiCmd := &cli.Command{
|
|
Use: "unifi",
|
|
Short: "UniFi network management",
|
|
Long: "Manage sites, devices, and connected clients on your UniFi controller.",
|
|
}
|
|
root.AddCommand(unifiCmd)
|
|
|
|
addConfigCommand(unifiCmd)
|
|
addClientsCommand(unifiCmd)
|
|
addDevicesCommand(unifiCmd)
|
|
addNetworksCommand(unifiCmd)
|
|
addRoutesCommand(unifiCmd)
|
|
addSitesCommand(unifiCmd)
|
|
}
|