I have no idea myself, but what the serverfault thread says about man-in-the-middle makes sense. However this also prohibits an automatic solution except for a shared known_hosts file I guess.

Okay, thanks for the info! I am currently not using k8s, but may be good to know for the future.

it woudl be the same with a docker container and -v then 🙂 np

so if you are using k8s, you can generate a configMap with the relevant info and mount it

Thank you. Seems like this is not the best solution: https://serverfault.com/questions/132970/can-i-automatically-add-a-new-host-to-known-hosts#comment622492_132973

Hi ReassuredTiger98
I think DefiantCrab67 solved it 🙂
https://clearml.slack.com/archives/CTK20V944/p1617746462341100?thread_ts=1617703517.320700&cid=CTK20V944

https://clearml.slack.com/archives/CTK20V944/p1617746640342900?thread_ts=1617703517.320700&cid=CTK20V944

you can actually inject a known_hosts file to your docker container/k8s pod through a volume

I was wondering whether some solution is builtin in clearml, so I do not have to configure each server manually. However, from your answer I take that this is not the case.

You can either use the StrictHostKeyChecking=no or generate a known_hosts file. I don't know about other options

Seems like this is not the best solution:

why not?

oh yea, that is true regarding mitm attacks

that would be a great solution

Yea, something like this seems to be the best solution.