{"action":"created","issue":{"url":"https://api.github.com/repos/taskcluster/docker-worker/issues/164","labels_url":"https://api.github.com/repos/taskcluster/docker-worker/issues/164/labels{/name}","comments_url":"https://api.github.com/repos/taskcluster/docker-worker/issues/164/comments","events_url":"https://api.github.com/repos/taskcluster/docker-worker/issues/164/events","html_url":"https://github.com/taskcluster/docker-worker/pull/164","id":104392444,"number":164,"title":"Move ssl cert and keys to base AMI creation","user":{"login":"gregarndt","id":2592630,"avatar_url":"https://avatars.githubusercontent.com/u/2592630?v=3","gravatar_id":"","url":"https://api.github.com/users/gregarndt","html_url":"https://github.com/gregarndt","followers_url":"https://api.github.com/users/gregarndt/followers","following_url":"https://api.github.com/users/gregarndt/following{/other_user}","gists_url":"https://api.github.com/users/gregarndt/gists{/gist_id}","starred_url":"https://api.github.com/users/gregarndt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gregarndt/subscriptions","organizations_url":"https://api.github.com/users/gregarndt/orgs","repos_url":"https://api.github.com/users/gregarndt/repos","events_url":"https://api.github.com/users/gregarndt/events{/privacy}","received_events_url":"https://api.github.com/users/gregarndt/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":{"login":"jonasfj","id":149732,"avatar_url":"https://avatars.githubusercontent.com/u/149732?v=3","gravatar_id":"","url":"https://api.github.com/users/jonasfj","html_url":"https://github.com/jonasfj","followers_url":"https://api.github.com/users/jonasfj/followers","following_url":"https://api.github.com/users/jonasfj/following{/other_user}","gists_url":"https://api.github.com/users/jonasfj/gists{/gist_id}","starred_url":"https://api.github.com/users/jonasfj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jonasfj/subscriptions","organizations_url":"https://api.github.com/users/jonasfj/orgs","repos_url":"https://api.github.com/users/jonasfj/repos","events_url":"https://api.github.com/users/jonasfj/events{/privacy}","received_events_url":"https://api.github.com/users/jonasfj/received_events","type":"User","site_admin":false},"milestone":null,"comments":5,"created_at":"2015-09-02T02:55:35Z","updated_at":"2015-09-02T15:48:39Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/taskcluster/docker-worker/pulls/164","html_url":"https://github.com/taskcluster/docker-worker/pull/164","diff_url":"https://github.com/taskcluster/docker-worker/pull/164.diff","patch_url":"https://github.com/taskcluster/docker-worker/pull/164.patch"},"body":"Goal here is to move the certificates and papertrail setup to the base image so regenerating the app ami does not require any secrets.  \r\n\r\nSome options for some of the secret storing involved:\r\n1. using something like blackbox that hasn't been proven for our uses and no other team uses it\r\n2. storing encoded string in provisioner UI (this would be preferred as it's the source of all secrets for a worker, but makes the worker definition extremely long when 3 keys need to be in there)\r\n3. papertrail logging endpoint needs to be setup before anything else so we don't lose syslog messages in papertrail\r\n\r\nMoving these pieces that do not change often at all (private key and papertrail endpoint hasn't changed since first introduced) to the base image frees up the work that needs to be done to create an app ami and anyone now with access to our account can generate an app ami easily."},"comment":{"url":"https://api.github.com/repos/taskcluster/docker-worker/issues/comments/137140168","html_url":"https://github.com/taskcluster/docker-worker/pull/164#issuecomment-137140168","issue_url":"https://api.github.com/repos/taskcluster/docker-worker/issues/164","id":137140168,"user":{"login":"taskcluster-ci","id":11618123,"avatar_url":"https://avatars.githubusercontent.com/u/11618123?v=3","gravatar_id":"","url":"https://api.github.com/users/taskcluster-ci","html_url":"https://github.com/taskcluster-ci","followers_url":"https://api.github.com/users/taskcluster-ci/followers","following_url":"https://api.github.com/users/taskcluster-ci/following{/other_user}","gists_url":"https://api.github.com/users/taskcluster-ci/gists{/gist_id}","starred_url":"https://api.github.com/users/taskcluster-ci/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/taskcluster-ci/subscriptions","organizations_url":"https://api.github.com/users/taskcluster-ci/orgs","repos_url":"https://api.github.com/users/taskcluster-ci/repos","events_url":"https://api.github.com/users/taskcluster-ci/events{/privacy}","received_events_url":"https://api.github.com/users/taskcluster-ci/received_events","type":"User","site_admin":false},"created_at":"2015-09-02T15:48:39Z","updated_at":"2015-09-02T15:48:39Z","body":"Taskcluster graph created. https://tools.taskcluster.net/task-graph-inspector/#ulEVif2kRZa50_b27K9wXg"}}