docker-compose.yml

   1 version: "2.1"
   2
   3 services:
   4   ejbca:
   5     image: primekey/ejbca-ce:7.4.3.2
   6     hostname: cahostname
   7     container_name: oomcert-ejbca
   8     ports:
   9       - "80:8080"
  10       - "443:8443"
  11     environment:
  12       - INITIAL_ADMIN=;PublicAccessAuthenticationToken:TRANSPORT_ANY;
  13       - NO_CREATE_CA=true
  14     volumes:
  15       - ./compose-resources/ejbca-configuration.sh:/opt/primekey/scripts/ejbca-configuration.sh
  16       - ./compose-resources/certprofile_CUSTOM_ENDUSER-1834889499.xml:/opt/primekey/custom_profiles/certprofile_CUSTOM_ENDUSER-1834889499.xml
  17       - ./compose-resources/entityprofile_Custom_EndEntity-1356531849.xml:/opt/primekey/custom_profiles/entityprofile_Custom_EndEntity-1356531849.xml
  18     healthcheck:
  19       test: ["CMD-SHELL", "curl -kI https://localhost:8443/ejbca/publicweb/healthcheck/ejbcahealth"]
  20       interval: 10s
  21       timeout: 3s
  22       retries: 15
  23     networks:
  24       - certservice
  25
  26   oom-cert-service:
  27     image: onap/org.onap.oom.platform.cert-service.oom-certservice-api:latest
  28     volumes:
  29       - ./compose-resources/cmpServers.json:/etc/onap/oom/certservice/cmpServers.json
  30       - ./certs/truststore.jks:/etc/onap/oom/certservice/certs/truststore.jks
  31       - ./certs/root.crt:/etc/onap/oom/certservice/certs/root.crt
  32       - ./certs/certServiceServer-keystore.jks:/etc/onap/oom/certservice/certs/certServiceServer-keystore.jks
  33       - ./certs/certServiceServer-keystore.p12:/etc/onap/oom/certservice/certs/certServiceServer-keystore.p12
  34     container_name: oomcert-service
  35     ports:
  36       - "8443:8443"
  37     depends_on:
  38       ejbca:
  39         condition: service_healthy
  40     healthcheck:
  41       test: ["CMD-SHELL", "curl https://localhost:8443/actuator/health --cacert /etc/onap/oom/certservice/certs/root.crt --cert-type p12 --cert /etc/onap/oom/certservice/certs/certServiceServer-keystore.p12 --pass secret"]
  42       interval: 10s
  43       timeout: 3s
  44       retries: 15
  45     networks:
  46       - certservice
  47
  48
  49 networks:
  50   certservice:
  51     driver: bridge