scripts/sdnc/certservice/docker-compose.yml

   1 version: "2.1"
   2
   3 services:
   4   ejbca:
   5     image: primekey/ejbca-ce:6.15.2.5
   6     hostname: cahostname
   7     container_name: aafcert-ejbca
   8     ports:
   9       - "80:8080"
  10       - "443:8443"
  11     volumes:
  12       - $SCRIPTS_PATH:/opt/primekey/scripts
  13       - $CERT_PROFILE:/opt/primekey/certprofile
  14     healthcheck:
  15       test: ["CMD-SHELL", "curl -kI https://localhost:8443/ejbca/publicweb/healthcheck/ejbcahealth"]
  16       interval: 20s
  17       timeout: 3s
  18       retries: 9
  19     networks:
  20       - certservice
  21
  22   aaf-cert-service:
  23     image: nexus3.onap.org:10001/onap/org.onap.aaf.certservice.aaf-certservice-api:latest
  24     volumes:
  25       - $CONFIGURATION_PATH:/etc/onap/aaf/certservice/cmpServers.json
  26       - $AAF_INITIAL_CERTS/truststore.jks:/etc/onap/aaf/certservice/certs/truststore.jks
  27       - $AAF_INITIAL_CERTS/root.crt:/etc/onap/aaf/certservice/certs/root.crt
  28       - $AAF_INITIAL_CERTS/certServiceServer-keystore.jks:/etc/onap/aaf/certservice/certs/certServiceServer-keystore.jks
  29       - $AAF_INITIAL_CERTS/certServiceServer-keystore.p12:/etc/onap/aaf/certservice/certs/certServiceServer-keystore.p12
  30     container_name: aaf-cert-service
  31     ports:
  32       - "8443:8443"
  33     depends_on:
  34       ejbca:
  35         condition: service_healthy
  36     healthcheck:
  37       test: ["CMD-SHELL", "curl https://localhost:8443/actuator/health --cacert /etc/onap/aaf/certservice/certs/root.crt --cert-type p12 --cert /etc/onap/aaf/certservice/certs/certServiceServer-keystore.p12 --pass secret"]
  38       interval: 10s
  39       timeout: 3s
  40       retries: 15
  41     networks:
  42       - certservice
  43
  44 networks:
  45   certservice:
  46     driver: bridge