aboutsummaryrefslogtreecommitdiffstats
path: root/sanitycheck/pnfsimulator-secured/docker-compose-certservice.yml
blob: 4548f04d36ca0cba38aeb1ded4c6b5dda945eff4 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
version: "2.1"

networks:
  certservice-network:
    driver: bridge
    name: certservice-network
  pnf-simulator-network:
    driver: bridge
    name: pnf-simulator-network

services:

  aaf-cert-service:
    image: nexus3.onap.org:10003/onap/org.onap.aaf.certservice.aaf-certservice-api:latest
    volumes:
      - ./certservice/certservice-resources/cmpServers.json:/etc/onap/aaf/certservice/cmpServers.json
      - ./certservice/certs/truststore.jks:/etc/onap/aaf/certservice/certs/truststore.jks
      - ./certservice/certs/root.crt:/etc/onap/aaf/certservice/certs/root.crt
      - ./certservice/certs/certServiceServer-keystore.jks:/etc/onap/aaf/certservice/certs/certServiceServer-keystore.jks
      - ./certservice/certs/certServiceServer-keystore.p12:/etc/onap/aaf/certservice/certs/certServiceServer-keystore.p12
    container_name: aafcert-service
    ports:
      - "8443:8443"
    healthcheck:
      test: ["CMD-SHELL", "curl https://localhost:8443/actuator/health --cacert /etc/onap/aaf/certservice/certs/root.crt --cert-type p12 --cert /etc/onap/aaf/certservice/certs/certServiceServer-keystore.p12 --pass secret"]
      interval: 10s
      timeout: 3s
      retries: 15
    networks:
      - certservice-network

  aaf-cert-client:
    image: nexus3.onap.org:10003/onap/org.onap.aaf.certservice.aaf-certservice-client:latest
    container_name: aafcert-client
    env_file: ./certservice/client-resources/client-configuration.env
    networks:
      - certservice-network
    volumes:
    - ./certservice/client-resources/client-volume:/var/certs:rw
    - ./certservice/certs/truststore.jks:/etc/onap/aaf/certservice/certs/truststore.jks
    - ./certservice/certs/certServiceClient-keystore.jks:/etc/onap/aaf/certservice/certs/certServiceClient-keystore.jks
    depends_on:
      aaf-cert-service:
        condition: service_healthy

  mongo:
    image: mongo
    restart: always
    networks:
      - pnf-simulator-network
    environment:
      MONGO_INITDB_ROOT_USERNAME: root
      MONGO_INITDB_ROOT_PASSWORD: zXcVbN123!
      MONGO_INITDB_DATABASE: pnf_simulator
    volumes:
      - ../../pnfsimulator/db:/docker-entrypoint-initdb.d
    ports:
      - "27017:27017"

  mongo-express:
    image: mongo-express
    restart: always
    networks:
      - pnf-simulator-network
    ports:
      - 8081:8081
    environment:
      ME_CONFIG_MONGODB_ADMINUSERNAME: root
      ME_CONFIG_MONGODB_ADMINPASSWORD: zXcVbN123!

  pnf-simulator:
    image: nexus3.onap.org:10003/onap/org.onap.integration.simulators.pnfsimulator
    ports:
      - "5000:5000"
    networks:
      - pnf-simulator-network
    command: bash -c "
      while [[ $$(ls -1 /app/store | wc -l) != '4' ]]; do echo 'Waiting for certs...'; sleep 3; done
      && mv /app/store/truststore.jks /app/store/trust.jks
      && mv /app/store/keystore.jks /app/store/cert.p12
      && export CLIENT_CERT_PASS=$$(cat /app/store/keystore.pass)
      && export TRUST_CERT_PASS=$$(cat /app/store/truststore.pass)
      && java -Dspring.config.location=file:/app/application.properties  -cp /app/libs/*:/app/pnf-simulator.jar org.onap.pnfsimulator.Main
      "
    volumes:
      - ../../pnfsimulator/logs:/var/log
      - ../../pnfsimulator/templates:/app/templates
      - ../../pnfsimulator/src/main/resources/application.properties:/app/application.properties
      - ./certservice/client-resources/client-volume/:/app/store/
    restart: on-failure
    depends_on:
      - mongo
      - mongo-express