Redeployments of cloud.gov should auto-generate new credentials - Githubissues

cloud-gov / cg-atlas

Repository hosting issues and artifacts related to operations of the cloud.gov platform

Creative Commons Zero v1.0 Universal

3 stars 1 forks source link

Redeployments of cloud.gov should auto-generate new credentials #33

Open mogul opened 8 years ago

mogul commented 8 years ago

In order to ensure we can

cleanly recover from a full platform compromise
redeploy in a new region easily
ensure integration environments are completely isolated

...as an operations engineer I want new deployments of cloud-gov to auto-populate the key platform secrets and credentials.

Acceptance Criteria

[ ] Secrets are automatically generated for bosh manifests
[ ] Equivalent secrets in cloud-gov-varz are transferred to new generation system
[ ] Takes terraform outputs to place secrets in correct location
[ ] Concourse pipeline exists to execute generation job
Implementation Sketch

ghost commented 8 years ago

I can work on this.