X-Git-Url: https://gerrit.onap.org/r/gitweb?a=blobdiff_plain;f=docker-compose.yml;h=1b154f4d18e39873f0a791c4f562d8d43907cd2b;hb=5b7535bde830b1e29ebd49b33a92db004a0636a1;hp=851ad317cd5d2e0a80afe9b2bae7de7c7a5b0af0;hpb=4b65b3c32da416ebfecb7eac808d76d89ae4b2a8;p=oom%2Fplatform%2Fcert-service.git diff --git a/docker-compose.yml b/docker-compose.yml index 851ad317..1b154f4d 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -2,14 +2,19 @@ version: "2.1" services: ejbca: - image: primekey/ejbca-ce:6.15.2.5 + image: primekey/ejbca-ce:7.4.3.2 hostname: cahostname - container_name: aafcert-ejbca + container_name: oomcert-ejbca ports: - "80:8080" - "443:8443" + environment: + - INITIAL_ADMIN=;PublicAccessAuthenticationToken:TRANSPORT_ANY; + - NO_CREATE_CA=true volumes: - ./compose-resources/ejbca-configuration.sh:/opt/primekey/scripts/ejbca-configuration.sh + - ./compose-resources/certprofile_CUSTOM_ENDUSER-1834889499.xml:/opt/primekey/custom_profiles/certprofile_CUSTOM_ENDUSER-1834889499.xml + - ./compose-resources/entityprofile_Custom_EndEntity-1356531849.xml:/opt/primekey/custom_profiles/entityprofile_Custom_EndEntity-1356531849.xml healthcheck: test: ["CMD-SHELL", "curl -kI https://localhost:8443/ejbca/publicweb/healthcheck/ejbcahealth"] interval: 10s @@ -18,16 +23,25 @@ services: networks: - certservice - certservice: - image: onap/org.onap.aaf.certservice.aaf-certservice-api:latest - container_name: aafcert-service + oom-cert-service: + image: onap/org.onap.oom.platform.cert-service.oom-certservice-api:latest volumes: - - ./certService/helm/aaf-cert-service/resources/cmpServers.json:/etc/onap/aaf/certservice/cmpServers.json + - ./compose-resources/cmpServers.json:/etc/onap/oom/certservice/cmpServers.json + - ./certs/truststore.jks:/etc/onap/oom/certservice/certs/truststore.jks + - ./certs/root.crt:/etc/onap/oom/certservice/certs/root.crt + - ./certs/certServiceServer-keystore.jks:/etc/onap/oom/certservice/certs/certServiceServer-keystore.jks + - ./certs/certServiceServer-keystore.p12:/etc/onap/oom/certservice/certs/certServiceServer-keystore.p12 + container_name: oomcert-service ports: - - "8080:8080" + - "8443:8443" depends_on: ejbca: condition: service_healthy + healthcheck: + test: ["CMD-SHELL", "curl https://localhost:8443/actuator/health --cacert /etc/onap/oom/certservice/certs/root.crt --cert-type p12 --cert /etc/onap/oom/certservice/certs/certServiceServer-keystore.p12 --pass secret"] + interval: 10s + timeout: 3s + retries: 15 networks: - certservice