conjur-service-broker/docker-compose.yml at main · cyberark/conjur-service-broker · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
services:
  pg:
    image: postgres:15
    environment:
      POSTGRES_PASSWORD: pa55w0rd

  conjur_5:
    image: cyberark/conjur:latest
    command: server -a cucumber
    environment:
      DATABASE_URL: postgres://postgres:pa55w0rd@pg/postgres
      CONJUR_DATA_KEY: 'WMfApcDBtocRWV+ZSUP3Tjr5XNU+Z2FdBb6BEezejIs='
    ports:
      - 80:80
    depends_on:
      - pg

  client:
    image: cyberark/conjur-cli:5
    depends_on: [ conjur_5 ]
    environment:
      CONJUR_APPLIANCE_URL: http://conjur_5
      CONJUR_ACCOUNT: cucumber
      CONJUR_AUTHN_API_KEY:
      CONJUR_AUTHN_LOGIN: admin
    volumes:
      - "./:/app"

  conjur-service-broker:
    image: conjur-service-broker
    environment:
      CONJUR_ACCOUNT: cucumber
      CONJUR_AUTHN_LOGIN: host/cf-service-broker
      CONJUR_POLICY: cf
      CONJUR_APPLIANCE_URL:
      CONJUR_FOLLOWER_URL: ""
      SECURITY_USER_NAME: TEST_USER_NAME
      SECURITY_USER_PASSWORD: TEST_USER_PASSWORD
      CONJUR_AUTHN_API_KEY:
      CONJUR_SSL_CERTIFICATE:
      CONJUR_VERSION:
    command: rails s -p 3000 -b 0.0.0.0
    ports:
      - 3000:3000

  service-broker-bad-url:
    image: conjur-service-broker
    environment:
      CONJUR_ACCOUNT: cucumber
      CONJUR_AUTHN_LOGIN: admin
      CONJUR_APPLIANCE_URL: http://badurl.invalid
      CONJUR_FOLLOWER_URL: ""
      SECURITY_USER_NAME: TEST_USER_NAME
      SECURITY_USER_PASSWORD: TEST_USER_PASSWORD
      CONJUR_AUTHN_API_KEY: doesntmatter
      CONJUR_SSL_CERTIFICATE:
      CONJUR_VERSION:
    command: rails s -p 3001 -b 0.0.0.0 -P tmp/pids/server1.pid
    expose:
      - "3001"

  service-broker-bad-key:
    image: conjur-service-broker
    environment:
      CONJUR_ACCOUNT: cucumber
      CONJUR_AUTHN_LOGIN: admin
      CONJUR_APPLIANCE_URL:
      CONJUR_FOLLOWER_URL: ""
      SECURITY_USER_NAME: TEST_USER_NAME
      SECURITY_USER_PASSWORD: TEST_USER_PASSWORD
      CONJUR_AUTHN_API_KEY: 123badconjurkey
      CONJUR_SSL_CERTIFICATE:
      CONJUR_VERSION:
    command: rails s -p 3002 -b 0.0.0.0 -P tmp/pids/server2.pid
    expose:
      - "3002"

  service-broker-alt-policy:
    image: conjur-service-broker
    environment:
      CONJUR_ACCOUNT: cucumber
      CONJUR_AUTHN_LOGIN: host/cf-service-broker
      CONJUR_APPLIANCE_URL:
      CONJUR_FOLLOWER_URL: ""
      SECURITY_USER_NAME: TEST_USER_NAME
      SECURITY_USER_PASSWORD: TEST_USER_PASSWORD
      CONJUR_AUTHN_API_KEY:
      CONJUR_POLICY:
      CONJUR_SSL_CERTIFICATE:
      CONJUR_VERSION:
    command: rails s -p 3003 -b 0.0.0.0 -P tmp/pids/server3.pid
    expose:
      - "3003"

  service-broker-bad-host:
    image: conjur-service-broker
    environment:
      CONJUR_ACCOUNT: cucumber
      CONJUR_AUTHN_LOGIN: host/bad-service-broker
      CONJUR_APPLIANCE_URL:
      CONJUR_FOLLOWER_URL: ""
      SECURITY_USER_NAME: TEST_USER_NAME
      SECURITY_USER_PASSWORD: TEST_USER_PASSWORD
      CONJUR_AUTHN_API_KEY:
      CONJUR_POLICY:
      CONJUR_SSL_CERTIFICATE:
      CONJUR_VERSION:
    command: rails s -p 3004 -b 0.0.0.0 -P tmp/pids/server4.pid
    expose:
      - "3004"

  service-broker-follower-url:
    image: conjur-service-broker
    environment:
      CONJUR_ACCOUNT: cucumber
      CONJUR_AUTHN_LOGIN: admin
      CONJUR_APPLIANCE_URL:
      CONJUR_FOLLOWER_URL:
      SECURITY_USER_NAME: TEST_USER_NAME
      SECURITY_USER_PASSWORD: TEST_USER_PASSWORD
      CONJUR_AUTHN_API_KEY:
      CONJUR_POLICY:
      CONJUR_SSL_CERTIFICATE:
      CONJUR_VERSION:
    command: rails s -p 3005 -b 0.0.0.0 -P tmp/pids/server5.pid
    expose:
      - "3005"

  tests:
    image: conjur-service-broker-test
    build:
      context: ./
      dockerfile: Dockerfile.test
    environment:
      CONJUR_ACCOUNT: cucumber
      CONJUR_AUTHN_LOGIN: admin
      CONJUR_APPLIANCE_URL:
      CONJUR_FOLLOWER_URL:
      SECURITY_USER_NAME: TEST_USER_NAME
      SECURITY_USER_PASSWORD: TEST_USER_PASSWORD
      CONJUR_AUTHN_API_KEY:
      CONJUR_SSL_CERTIFICATE:
      CONJUR_VERSION:
      CF_API_ENDPOINT:
      PCF_CONJUR_APPLIANCE_URL:
      CF_CI_USER:
      CF_CI_PASSWORD:
      CF_ADMIN_PASSWORD:
      PCF_CONJUR_ACCOUNT:
      PCF_CONJUR_USERNAME:
      PCF_CONJUR_API_KEY:
      PCF_CONJUR_SSL_CERT:
    volumes:
      - "./:/app"