blob: cd5773464b3a0b276074395fe11639ceecfc5133 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
|
version: "2.1"
services:
ejbca:
image: primekey/ejbca-ce:6.15.2.5
hostname: cahostname
container_name: aafcert-ejbca
ports:
- "80:8080"
- "443:8443"
volumes:
- $SCRIPTS_PATH:/opt/primekey/scripts
healthcheck:
test: ["CMD-SHELL", "curl -kI https://localhost:8443/ejbca/publicweb/healthcheck/ejbcahealth"]
interval: 20s
timeout: 3s
retries: 9
networks:
- certservice
aaf-cert-service:
image: nexus3.onap.org:10001/onap/org.onap.aaf.certservice.aaf-certservice-api:frankfurt-latest
volumes:
- $CONFIGURATION_PATH:/etc/onap/aaf/certservice/cmpServers.json
- ./certs/truststore.jks:/etc/onap/aaf/certservice/certs/truststore.jks
- ./certs/root.crt:/etc/onap/aaf/certservice/certs/root.crt
- ./certs/certServiceServer-keystore.jks:/etc/onap/aaf/certservice/certs/certServiceServer-keystore.jks
- ./certs/certServiceServer-keystore.p12:/etc/onap/aaf/certservice/certs/certServiceServer-keystore.p12
container_name: aafcert-service
ports:
- "8443:8443"
depends_on:
ejbca:
condition: service_healthy
healthcheck:
test: ["CMD-SHELL", "curl https://localhost:8443/actuator/health --cacert /etc/onap/aaf/certservice/certs/root.crt --cert-type p12 --cert /etc/onap/aaf/certservice/certs/certServiceServer-keystore.p12 --pass secret"]
interval: 10s
timeout: 3s
retries: 15
networks:
- certservice
networks:
certservice:
driver: bridge
|
