onsdigital / paas-bootstrap Goto Github PK

In order to use s3 blobstore, Bosh uses AWS credentials to do this instead of IAM profile.
These credentials get stored on every VM managed by Bosh, which is very undesirable.
This branch MUST NOT be used until this gets fixed.

When running make concourse (on environment that previously existed but has been torn down), gets the following error:

Error: Error refreshing state: 1 error(s) occurred:

* data.aws_route53_zone.child_zone: 1 error(s) occurred:

* data.aws_route53_zone.child_zone: data.aws_route53_zone.child_zone: multiple Route53Zone found please use vpc_id option to filter

Possibly due to Route53 records not being fully torn down by destruction

When initially running a fresh pipeline, the terraform-cf job initially will fail complaining about Error putting S3 versioning: AccessDenied: Access Denied

This seems to be a general terraform timing issue when the bucket is created and encryption is applied.

Workaround

Re-running the job step succeeds (as buckets now exist so merely need to be amended)