Getting kex_exchange_identification: Connection closed by remote host from Github Action

I am able to connect via cloudflared fine on my local environment on PC and Mac but I am getting “kex_exchange_identification: Connection closed by remote host” trying to connect from Github Action. I do not have a zero trust application or access policy created but can confirm the tunnel is working since I am able to access it using ssh on my local environment. The ultimate goal is to use rsync to sync files through cloudflared tunnel but it is not working. I also checked the /var/log/auth.log on the host and do not see the failed connection attempt so know the issue is either cloudflare blocking it or ssh configuration issue on the Github Action environment.

my Github Action workflow:

name: test cloudflared

      - main
    types: [opened, synchronize, reopened]

    name: test cloudflared
    runs-on: ubuntu-latest
    timeout-minutes: 15

        shell: bash

      - name: Checkout
        uses: actions/checkout@v3
          fetch-depth: 0

      - name: install cloudflared
        run: |
          curl -L | sudo tee /usr/share/keyrings/cloudflare-archive-keyring.gpg >/dev/null
          echo "deb [signed-by=/usr/share/keyrings/cloudflare-archive-keyring.gpg] $(lsb_release -cs) main" | sudo tee  /etc/apt/sources.list.d/cloudflared.list
          sudo apt update
          sudo apt-get install cloudflared

      - name: test cloudflared
        run: |
          which cloudflared
          whereis cloudflared
          /usr/local/bin/cloudflared --version

      - name: install-ssh-key
        uses: shimataro/ssh-key-action@v2
          key: ${{ secrets.SSH_PRIVATE_KEY }}
          name: id_rsa
          known_hosts: ${{ secrets.KNOWN_HOSTS }}
          config: |
            Host testhost
              HostName ${{ vars.HOST }}
              User ${{ vars.USER }}
              KexAlgorithms +diffie-hellman-group1-sha1
              IdentityFile ~/.ssh/id_rsa
              ProxyCommand /usr/local/bin/cloudflared access ssh --hostname %h

      - name: test ssh
        run: ssh -vvv testhost 'whoami'

Githug Action output:

Run ssh -vvv testhost 'whoami'
  ssh -vvv testhost 'whoami'
  shell: /usr/bin/bash --noprofile --norc -e -o pipefail {0}
OpenSSH_8.9p1 Ubuntu-3ubuntu0.4, OpenSSL 3.0.2 15 Mar 2022
debug1: Reading configuration data /home/runner/.ssh/config
debug1: /home/runner/.ssh/config line 2: Applying options for testhost
debug3: kex names ok: [diffie-hellman-group1-sha1]
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 19: include /etc/ssh/ssh_config.d/*.conf matched no files
debug1: /etc/ssh/ssh_config line 21: Applying options for *
debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts' -> '/home/runner/.ssh/known_hosts'
debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts2' -> '/home/runner/.ssh/known_hosts2'
debug1: Executing proxy command: exec /usr/local/bin/cloudflared access ssh --hostname
debug1: identity file /home/runner/.ssh/id_rsa type 0
debug1: identity file /home/runner/.ssh/id_rsa-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.4
kex_exchange_identification: Connection closed by remote host
Connection closed by UNKNOWN port 65535
Error: Process completed with exit code 255.