The one thing we could do better here is:
a) better docs around how to handle if your SSH server keys have changed
b) better error messages if trying to SSH is failing because the host keys the client is seeing don't match the expected host keys (as it is functionally a sign of a person-in-the-middle attack).
However, as the workaround works (restarting the machine agent), we probably won't schedule this work in the next 6 months.
The one thing we could do better here is: in-the- middle attack).
a) better docs around how to handle if your SSH server keys have changed
b) better error messages if trying to SSH is failing because the host keys the client is seeing don't match the expected host keys (as it is functionally a sign of a person-
However, as the workaround works (restarting the machine agent), we probably won't schedule this work in the next 6 months.