From bf0374ec70230c80ab55c63f0f0f8278e9e498be Mon Sep 17 00:00:00 2001
From: "Dustin C. Hatch" <dustin@hatch.name>
Date: Tue, 26 Aug 2025 08:02:15 -0500
Subject: [PATCH] ci: Mount ssh_known_hosts in rsync container

The problem with having stages that only run in some situations is that
they don't get tested.

Need to mount the SSH host key database file in the _rsync_ container so
the host key of the web server can be verified when publishing.
---
 ci/podTemplate.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/ci/podTemplate.yaml b/ci/podTemplate.yaml
index 6c814c5..ede9d09 100644
--- a/ci/podTemplate.yaml
+++ b/ci/podTemplate.yaml
@@ -16,3 +16,8 @@ spec:
       signal.pause()
   - name: rsync
     image: git.pyrocufflink.net/containerimages/rsync
+    volumeMounts:
+    - mountPath: /etc/ssh/ssh_known_hosts
+      name: volume-0
+      subPath: ssh_known_hosts
+      readOnly: true