{"push_id":933760793,"size":4,"distinct_size":4,"ref":"refs/heads/109897246_bosh_init_stop_using_insecure_deployer","head":"006d903fc2fd3bab17a1e18b13640ce7bec6a41b","before":"2ec9de44a98e1f90178d0258106a9a65aced0ce6","commits":[{"sha":"8fc1a33c0f9822597a3eb70d8504e945e771430b","author":{"email":"23fd7f9af1666396a2ae0c81fe1568dd52b6809d@gmail.com","name":"Timothy Mower"},"message":"Remove insecure deployer for bosh-init\n\nBosh init needs ssh to create a tunnel for the agent on the stemcell\nbosh init create to connect to the director running on bosh init. To do\nthis it requires a keypair. However, it only requires this keypair\nduring the initial deploy, as a redeploy will recreate the instance. So\nit is safe to generate a new keypair each time we run a deployment. It\nis also safe to run terraform without saving the state file between runs\n- due to the dummy state file, terraform will see the resource as\nrequiring changes and destroy and recreate it.\n\nFor the case that we need to ssh to the bosh init director without\nredeploying, we upload the key to s3 so it can be retrieved if needed.\nThe role given to the concourse vm running bosh init should only allow\nwrite access to the bucket.","distinct":true,"url":"https://api.github.com/repos/alphagov/paas-cf/commits/8fc1a33c0f9822597a3eb70d8504e945e771430b"},{"sha":"320b8194e8d59dbb19492b0c195a88a7b1fbe01e","author":{"email":"88e4a720afd4e9effa713a3d0b41296f9bee9689@gmail.com","name":"Michal Tekel"},"message":"s3put: use AWS_DEFAULT_REGION\n\nEither get it from environment or if not set, from instance metadata.\nThis is still hardcoded in s3get.sh and s3init.sh, however as we are\nintroducing a new file we fix it here.","distinct":true,"url":"https://api.github.com/repos/alphagov/paas-cf/commits/320b8194e8d59dbb19492b0c195a88a7b1fbe01e"},{"sha":"4af0c58f1db7e3af54018de12be252d4c988d896","author":{"email":"88e4a720afd4e9effa713a3d0b41296f9bee9689@gmail.com","name":"Michal Tekel"},"message":"Cleanup: Remove -x from Vagrant SG terraform\n\nWe don't use -x anywhere in the pipeline. Remove the two occurrences,\nseemingly forgotten from development of the pipeline.","distinct":true,"url":"https://api.github.com/repos/alphagov/paas-cf/commits/4af0c58f1db7e3af54018de12be252d4c988d896"},{"sha":"006d903fc2fd3bab17a1e18b13640ce7bec6a41b","author":{"email":"23fd7f9af1666396a2ae0c81fe1568dd52b6809d@gmail.com","name":"Timothy Mower"},"message":"Document how to ssh into deployed concourse","distinct":true,"url":"https://api.github.com/repos/alphagov/paas-cf/commits/006d903fc2fd3bab17a1e18b13640ce7bec6a41b"}]}