Harden Jenkins jobs

[releng.git] / jjb / global / releng-macros.yaml

diff --git a/jjb/global/releng-macros.yaml b/jjb/global/releng-macros.yaml
index 031e240..ddf2a73 100644 (file)
--- a/jjb/global/releng-macros.yaml
+++ b/jjb/global/releng-macros.yaml
@@ -358,7 +358,8 @@
               echo
               cat gerrit_comment.txt
               echo
-              ssh -p 29418 gerrit.opnfv.org \
+              ssh -o 'PubkeyAcceptedKeyTypes +ssh-rsa' \
+                  -p 29418 jenkins-ci@gerrit.opnfv.org \
                   "gerrit review -p $GERRIT_PROJECT \
                    -m '$(cat gerrit_comment.txt)' \
                    $GERRIT_PATCHSET_REVISION \
@@ -419,7 +420,7 @@
               msg="Found syntax error and/or coding style violation(s) in the files modified by your patchset."
               sed -i -e "1s#^#${msg}\n\n#" violation.log
               cmd="gerrit review -p $GERRIT_PROJECT -m \"$(cat violation.log)\" $GERRIT_PATCHSET_REVISION --notify NONE"
-              ssh -p 29418 gerrit.opnfv.org "$cmd"
+              ssh -o 'PubkeyAcceptedKeyTypes +ssh-rsa' -p 29418 jenkins-ci@gerrit.opnfv.org "$cmd"
 
               # Make sure the caller job failed
               exit 1