single-vm.patch

diff --git a/manifests/single-vm.yml b/manifests/single-vm.yml
index 89b589ab..84557788 100644
--- a/manifests/single-vm.yml
+++ b/manifests/single-vm.yml
@@ -30,13 +32,19 @@ instance_groups:
         database: atc
         role:
           name: atc
           password: dummy-password
 
       no_really_i_dont_want_any_auth: true
 
+      token_signing_key: ((token_signing_key))
+
   - release: concourse
     name: tsa
-    properties: {log_level: debug}
+    properties:
+      log_level: debug
+      host_key: ((tsa_host_key))
+      token_signing_key: ((token_signing_key))
+      authorized_keys: [((worker_key.public_key))]
 
   - release: postgres
     name: postgres
@@ -47,15 +55,18 @@ instance_groups:
         - name: atc
         roles:
         - name: atc
           password: dummy-password
 
   - release: concourse
     name: groundcrew
-    properties: {drain_timeout: 10m}
+    properties:
+      drain_timeout: 10m
+      tsa: {worker_key: ((worker_key))}
 
   - release: concourse
     name: baggageclaim
     properties: {log_level: debug}
 
   - release: garden-runc
     name: garden
@@ -65,6 +76,16 @@ instance_groups:
         listen_address: 0.0.0.0:7777
         allow_host_access: true
 
+variables:
+- name: token_signing_key
+  type: rsa
+- name: tsa_host_key
+  type: ssh
+- name: worker_key
+  type: ssh
+
 stemcells:
 - alias: trusty
   os: ubuntu-trusty