{"action":"created","issue":{"url":"https://api.github.com/repos/cf-tm-bot/diego/issues/38","repository_url":"https://api.github.com/repos/cf-tm-bot/diego","labels_url":"https://api.github.com/repos/cf-tm-bot/diego/issues/38/labels{/name}","comments_url":"https://api.github.com/repos/cf-tm-bot/diego/issues/38/comments","events_url":"https://api.github.com/repos/cf-tm-bot/diego/issues/38/events","html_url":"https://github.com/cf-tm-bot/diego/issues/38","id":177360796,"number":38,"title":"As a Diego operator, I expect the DesiredLRP routes data to be encrypted in the Diego relational database - Story Id: 129994707","user":{"login":"cf-tm-bot","id":20690070,"avatar_url":"https://avatars.githubusercontent.com/u/20690070?v=3","gravatar_id":"","url":"https://api.github.com/users/cf-tm-bot","html_url":"https://github.com/cf-tm-bot","followers_url":"https://api.github.com/users/cf-tm-bot/followers","following_url":"https://api.github.com/users/cf-tm-bot/following{/other_user}","gists_url":"https://api.github.com/users/cf-tm-bot/gists{/gist_id}","starred_url":"https://api.github.com/users/cf-tm-bot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cf-tm-bot/subscriptions","organizations_url":"https://api.github.com/users/cf-tm-bot/orgs","repos_url":"https://api.github.com/users/cf-tm-bot/repos","events_url":"https://api.github.com/users/cf-tm-bot/events{/privacy}","received_events_url":"https://api.github.com/users/cf-tm-bot/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/cf-tm-bot/diego/labels/bbs","name":"bbs","color":"ededed"},{"url":"https://api.github.com/repos/cf-tm-bot/diego/labels/bbs:relational","name":"bbs:relational","color":"ededed"},{"url":"https://api.github.com/repos/cf-tm-bot/diego/labels/feature","name":"feature","color":"ededed"},{"url":"https://api.github.com/repos/cf-tm-bot/diego/labels/finished","name":"finished","color":"172c51"},{"url":"https://api.github.com/repos/cf-tm-bot/diego/labels/security","name":"security","color":"ededed"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":7,"created_at":"2016-09-16T07:24:58Z","updated_at":"2016-10-03T15:14:43Z","closed_at":null,"body":"It's currently JSON-encoded cleartext, but it can contain sensitive information such as the diego-ssh key. It should instead be encrypted with the active BBS encryption key.\n\n### Acceptance\n\nI can inspect the diego database in either MySQL or Postgres and observe that the entries in the DesiredLRP routes column are suitably encrypted in each of the 3 scenarios:\n\n- new Diego deployment backed by a relational store\n- existing Diego deployment migrated from etcd\n- existing Diego deployment migrated from a relational store at a previous definition\n\n---\n\nMirrors: [story 129994707](https://www.pivotaltracker.com/story/show/129994707) submitted on Sep 8, 2016 UTC\n- **Requester**: Eric Malm\n- **Owners**: Andrew Edgar\n- **Estimate**: 1.0"},"comment":{"url":"https://api.github.com/repos/cf-tm-bot/diego/issues/comments/251134243","html_url":"https://github.com/cf-tm-bot/diego/issues/38#issuecomment-251134243","issue_url":"https://api.github.com/repos/cf-tm-bot/diego/issues/38","id":251134243,"user":{"login":"cf-tm-bot","id":20690070,"avatar_url":"https://avatars.githubusercontent.com/u/20690070?v=3","gravatar_id":"","url":"https://api.github.com/users/cf-tm-bot","html_url":"https://github.com/cf-tm-bot","followers_url":"https://api.github.com/users/cf-tm-bot/followers","following_url":"https://api.github.com/users/cf-tm-bot/following{/other_user}","gists_url":"https://api.github.com/users/cf-tm-bot/gists{/gist_id}","starred_url":"https://api.github.com/users/cf-tm-bot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cf-tm-bot/subscriptions","organizations_url":"https://api.github.com/users/cf-tm-bot/orgs","repos_url":"https://api.github.com/users/cf-tm-bot/repos","events_url":"https://api.github.com/users/cf-tm-bot/events{/privacy}","received_events_url":"https://api.github.com/users/cf-tm-bot/received_events","type":"User","site_admin":false},"created_at":"2016-10-03T15:14:43Z","updated_at":"2016-10-03T15:14:43Z","body":"Andrew Edgar [commented](https://www.pivotaltracker.com/n/projects/1003146/stories/129994707/comments/151319995) on Oct 3, 2016, 1.43 PM UTC:\n\nCommit by Andrew Edgar\nhttps://github.com/cloudfoundry/bbs/commit/956926cd551687866db9cbc689a9cbe8bf0132ab\n\nRemove extra debug line and not required Domain\n\n[#129994707]\n\n<!--\nComment Id: 151319995\n-->"}}
{"actor":{"display_login":"cf-tm-bot"}}