Add vendor stack

Author: YuryHrytsuk

services/vendors/Makefile

@@ -0,0 +1,35 @@
+.DEFAULT_GOAL := help
+
+# Internal VARIABLES ------------------------------------------------
+# STACK_NAME defaults to name of the current directory. Should not to be changed if you follow GitOps operating procedures.
+STACK_NAME = $(notdir $(shell pwd))
+TEMP_COMPOSE=.stack.${STACK_NAME}.yaml
+REPO_BASE_DIR := $(shell git rev-parse --show-toplevel)
+
+# TARGETS --------------------------------------------------
+include ${REPO_BASE_DIR}/scripts/common.Makefile
+
+.PHONY: up ## Deploys registry stack
+up: ${TEMP_COMPOSE} .init .env
+	docker stack deploy --with-registry-auth --prune --compose-file $< ${STACK_NAME}
+
+.PHONY: up-dalco ## Deploys registry stack for Dalco Cluster
+up-dalco: up
+
+.PHONY: up-aws
+up-aws: up
+
+.PHONY: up-master ## Deploys registry on master cluster
+up-master: up
+
+.PHONY: up-public ## Deploys registry on public cluster
+up-public: up
+
+.PHONY: up-local ## Deploys registry on local deployment
+up-local: up
+
+# Helpers -------------------------------------------------
+
+.PHONY: ${TEMP_COMPOSE}
+${TEMP_COMPOSE}: docker-compose.yml .env
+	${REPO_BASE_DIR}/scripts/docker-stack-config.bash -e .env $< > $@

services/vendors/docker-compose.yml

@@ -0,0 +1,35 @@
+
+# NOTE: this stack is only for development and testing of vendor services.
+# the actualy code is deployed inside the ops repository.
+
+services:
+
+  manual:
+    image: containous/whoami
+    init: true
+    hostname: "{{.Node.Hostname}}-{{.Task.Slot}}"
+    deploy:
+      replicas: ${VENDOR_MANUAL_REPLICAS}
+      labels:
+        - traefik.enable=true
+        - traefik.docker.network=${PUBLIC_NETWORK}
+        # auth: https://doc.traefik.io/traefik/middlewares/http/forwardauth
+        - traefik.http.middlewares.vendor_manual_auth.forwardauth.address=http://${WEBSERVER_HOST}:${WEBSERVER_PORT}/v0/auth:check
+        - traefik.http.middlewares.vendor_manual_auth.forwardauth.trustForwardHeader=true
+        - traefik.http.middlewares.vendor_manual_auth.forwardauth.authResponseHeaders=Set-Cookie,osparc-sc2
+        # routing
+        - traefik.http.services.vendor_manual.loadbalancer.server.port=80
+        - traefik.http.routers.vendor_manual.entrypoints=https
+        - traefik.http.routers.vendor_manual.rule=Host(`${VENDOR_MANUAL_DOMAIN}`)
+        - traefik.http.routers.vendor_manual.middlewares=ops_gzip@swarm, vendor_manual_auth
+    networks:
+      - simcore_default
+      - public
+
+networks:
+  simcore_default:
+    name: ${SIMCORE_NETWORK}
+    external: true
+  public:
+    external: true
+    name: ${PUBLIC_NETWORK}

services/vendors/template.env

@@ -0,0 +1,6 @@
+VENDOR_MANUAL_REPLICAS=${VENDOR_MANUAL_REPLICAS}
+VENDOR_MANUAL_DOMAIN=${VENDOR_MANUAL_DOMAIN}
+PUBLIC_NETWORK=${PUBLIC_NETWORK}
+WEBSERVER_HOST=${WEBSERVER_HOST}
+WEBSERVER_PORT=${WEBSERVER_PORT}
+SIMCORE_NETWORK=${SIMCORE_NETWORK}