summaryrefslogtreecommitdiffstats
path: root/ansible-server/src/main
diff options
context:
space:
mode:
authorDan Timoney <dtimoney@att.com>2023-08-16 14:06:36 -0400
committerDan Timoney <dtimoney@att.com>2023-11-08 11:18:10 -0500
commit6fbbadb867a69d65761086789a0b411452e8ea3a (patch)
treef94c8d87edca18fac7e62cbffcd57e918a05d66c /ansible-server/src/main
parent1dd9578b9109223a957fd1bfd1ded4f00d072614 (diff)
Update to version 2.6.1 of parent pom
Update to version 2.6.1 of parent pom to pick up Argon SR2 versions and support local build of ansible-server Issue-ID: CCSDK-3944 Signed-off-by: Dan Timoney <dtimoney@att.com> Change-Id: I6d454ecc4ec3d1fecd10bf823ca5b828718e5fea
Diffstat (limited to 'ansible-server/src/main')
-rw-r--r--ansible-server/src/main/Dockerfile25
-rw-r--r--ansible-server/src/main/resources/README-custom-certs.md3
2 files changed, 23 insertions, 5 deletions
diff --git a/ansible-server/src/main/Dockerfile b/ansible-server/src/main/Dockerfile
index 1aeb186f..984333da 100644
--- a/ansible-server/src/main/Dockerfile
+++ b/ansible-server/src/main/Dockerfile
@@ -2,10 +2,17 @@ FROM onap/integration-python:8.0.0
LABEL maintainer="SDN-C Team (sdnc@lists.openecomp.org)"
USER root
-ENV http_proxy ${http_proxy}
-ENV https_proxy ${https_proxy}
+ARG http_proxy
+ARG https_proxy
+ARG no_proxy
+ARG CURL_CA_BUNDLE
+
+ENV http_proxy $http_proxy
+ENV https_proxy $https_proxy
+ENV no_proxy $no_proxy
ENV PIP_EXTRA_OPTS ${https_proxy:+"--trusted-host pypi.org --trusted-host files.pythonhosted.org --proxy=${https_proxy}"}
ENV PIP_EXTRA_OPTS ${PIP_EXTRA_OPTS:-""}
+ENV CURL_CA_BUNDLE=$CURL_CA_BUNDLE
ARG PIP_TAG=18.0
@@ -13,12 +20,20 @@ RUN addgroup -S ansible && adduser -S ansible -G ansible
COPY --chown=ansible:ansible ansible-server /opt/ansible-server
COPY --chown=ansible:ansible configuration/ansible.cfg /etc/ansible/ansible.cfg
+# Copy any certs
+COPY *.md *.pem /etc/ssl/certs/
+
+# Install certs
+RUN update-ca-certificates
+
+RUN echo $CURL_CA_BUNDLE && ls -l $CURL_CA_BUNDLE
+
RUN apk add --no-cache curl iputils bash openssh-client \
- && curl https://sh.rustup.rs -sSf | sh -s -- -y \
+ && curl -k https://sh.rustup.rs -sSf | sh -s -- -y \
&& source $HOME/.cargo/env \
&& apk add --no-cache --virtual .build-deps build-base libffi-dev openssl-dev python3-dev \
- && pip3 install --no-cache-dir --upgrade pip ${PIP_EXTRA_OPTS} \
- && pip3 install --no-cache-dir -r /opt/ansible-server/requirements.txt ${PIP_EXTRA_OPTS} \
+ && pip3 install --no-cache-dir --trusted-host pypi.org --trusted-host files.pythonhosted.org --upgrade pip ${PIP_EXTRA_OPTS} \
+ && pip3 install --no-cache-dir --trusted-host pypi.org --trusted-host files.pythonhosted.org -r /opt/ansible-server/requirements.txt ${PIP_EXTRA_OPTS} \
&& apk del .build-deps \
&& mkdir -p /opt/onap \
&& touch /var/log/ansible-server.log \
diff --git a/ansible-server/src/main/resources/README-custom-certs.md b/ansible-server/src/main/resources/README-custom-certs.md
new file mode 100644
index 00000000..ac414c11
--- /dev/null
+++ b/ansible-server/src/main/resources/README-custom-certs.md
@@ -0,0 +1,3 @@
+Any .pem files in this directory will be copied to /etc/ssl/certs on the
+docker container and installed prior to running apk. This might be needed,
+for example, for docker builds to work properly behind a corporate firewall.