summaryrefslogtreecommitdiff
path: root/README.mdwn
diff options
context:
space:
mode:
authorSam Thursfield <sam.thursfield@codethink.co.uk>2014-12-09 18:22:33 +0000
committerSam Thursfield <sam.thursfield@codethink.co.uk>2014-12-09 18:24:07 +0000
commit7983e10564ff73c4587a7ca4ad25ef90c3b94098 (patch)
treec505a04560165c1610394411e8a0426e0800516b /README.mdwn
parent9ad39f3398d3f436b4d7f8ee057b3aea7e2d2c1b (diff)
downloadinfrastructure-7983e10564ff73c4587a7ca4ad25ef90c3b94098.tar.gz
Add standard cloud-config script for baserock.org infrastructure
This contains the public keys of the Baserock Ops team, who are collectively reponsible for maintainance and security updates for the baserock.org instances. I added a note to the README.mdwn too.
Diffstat (limited to 'README.mdwn')
-rw-r--r--README.mdwn14
1 files changed, 10 insertions, 4 deletions
diff --git a/README.mdwn b/README.mdwn
index 119f89a3..cc32a371 100644
--- a/README.mdwn
+++ b/README.mdwn
@@ -160,7 +160,13 @@ To deploy the production version:
Deployment to DataCentred
-------------------------
-The Packer tool requires a floating IP to be available at the time a system is
-being deployed to OpenStack. Currently 85.199.252.152 should be used for this.
-If you specify a floating IP that is in use by an existing instance, you will
-steal it for your own instance and probably break one of our web services.
+When instantiating a machine that will be public, remember that all operators
+who are responsible for security updates and maintenance must be given access
+to the machine. This can be done using a post-creation customisation script
+that injecting all of their SSH keys: the Baserock Ops team use the file
+`baserock-ops-team.cloud-config` from this repo.
+
+The the Packer tool requires a floating IP to be available at the time a system
+is being deployed to OpenStack. Currently 85.199.252.152 should be used for
+this. If you specify a floating IP that is in use by an existing instance, you
+will steal it for your own instance and probably break one of our web services.