CI: place the packer key on disk via create-aws-stemcell/run

This replaces a separate create-packer-ci-key task to make `fly execute`
easier.

Author: aramprice

ci/pipelines/stemcells-windows.yml

@@ -1371,11 +1371,6 @@ jobs:
     params:
       pre: build
     tags: [*worker_tag]
-  - task: create-packer-ci-key
-    image: bosh-windows-stemcell-builder-ci-image
-    file: bosh-windows-stemcell-builder-ci/ci/tasks/create-packer-ci-key/task.yml
-    params:
-      PACKER_CI: ((bosh_windows_aws_packer_ci_private_key.private_key))
   - task: create-aws-stemcell
     attempts: 3
     timeout: 2h
@@ -1387,6 +1382,7 @@ jobs:
       PACKER_AWS_ACCESS_KEY: ((aws-stemcells_aws_access_key.username))
       PACKER_AWS_SECRET_KEY: ((aws-stemcells_aws_access_key.password))
       PACKER_REGION: ((AWS_PACKER_REGION))
+      PACKER_CI_PRIVATE_KEY: ((bosh_windows_aws_packer_ci_private_key.private_key))
       OS_VERSION: windows((BASE_OS_VERSION))
       OUTPUT_BUCKET_NAME: aws-regional-stemcells-((BASE_OS_VERSION))
       VM_PREFIX: packer-prod-((BASE_OS_VERSION))
@@ -1549,11 +1545,6 @@ jobs:
       - get: blobstore-gcs-cli
       - get: windows-bsdtar
       - get: windows-winsw
-  - task: create-packer-ci-key
-    image: bosh-windows-stemcell-builder-ci-image
-    file: bosh-windows-stemcell-builder-ci/ci/tasks/create-packer-ci-key/task.yml
-    params:
-      PACKER_CI: ((bosh_windows_aws_govcloud_packer_ci_private_key.private_key))
   - task: create-aws-govcloud-stemcell
     attempts: 3
     timeout: 1h30m
@@ -1564,6 +1555,7 @@ jobs:
       AWS_REGION: us-gov-west-1
       PACKER_AWS_SECRET_KEY: ((packer_user_gov_aws_access_key.password))
       PACKER_REGION: ((AWS_GOVCLOUD_PACKER_REGION))
+      PACKER_CI_PRIVATE_KEY: ((bosh_windows_aws_packer_ci_private_key.private_key))
       OS_VERSION: windows((BASE_OS_VERSION))
       OUTPUT_BUCKET_NAME: aws-regional-stemcells-((BASE_OS_VERSION))
       VM_PREFIX: packer-prod-((BASE_OS_VERSION))

ci/tasks/create-aws-stemcell/run

@@ -2,6 +2,8 @@
 set -eu -o pipefail
 set -x
 
+CONCOURSE_ROOT="$(pwd)"
+
 if [ -n "${AWS_ROLE_ARN}" ]; then
   aws configure --profile creds_account set aws_access_key_id "${PACKER_AWS_ACCESS_KEY}"
   set +x
@@ -18,13 +20,15 @@ else
   export AWS_SECRET_KEY="${PACKER_AWS_SECRET_KEY}"
   set -x
 fi
+export PACKER_CI_PRIVATE_KEY_LOCATION="${CONCOURSE_ROOT}/packer-ci-private-key/packer_key"
+mkdir -p "$(dirname "${PACKER_CI_PRIVATE_KEY_LOCATION}")"
+echo "${PACKER_CI_PRIVATE_KEY}" > "${PACKER_CI_PRIVATE_KEY_LOCATION}"
+chmod 600 "${PACKER_CI_PRIVATE_KEY_LOCATION}"
 
 pushd lgpo-binary
   unzip LGPO.zip
 popd
 
-CONCOURSE_ROOT="$(pwd)"
-
 "${CONCOURSE_ROOT}/bosh-windows-stemcell-builder-ci/ci/tasks/build-agent-zip/run.sh"
 "${CONCOURSE_ROOT}/bosh-windows-stemcell-builder-ci/ci/tasks/build-psmodules-zip/run.sh"
 

ci/tasks/create-aws-stemcell/task.yml

@@ -7,7 +7,6 @@ inputs:
   - name: base-amis
   - name: version
   - name: lgpo-binary
-  - name: packer-ci-private-key
   - name: bosh-agent-release
   - name: blobstore-dav-cli
   - name: blobstore-s3-cli