75 lines
2.1 KiB
YAML
75 lines
2.1 KiB
YAML
version: '3'
|
|
services:
|
|
ansible:
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile
|
|
command: /bin/sleep 1d
|
|
environment:
|
|
CONJUR_APPLIANCE_URL: http://conjur:3000
|
|
CONJUR_ACCOUNT: cucumber
|
|
CONJUR_AUTHN_LOGIN: host/ansible/ansible-master
|
|
CONJUR_AUTHN_API_KEY: ${ANSIBLE_CONJUR_AUTHN_API_KEY}
|
|
CONJUR_CUSTOM_AUTHN_API_KEY: ${CUSTOM_CONJUR_AUTHN_API_KEY}
|
|
COMPOSE_PROJECT_NAME: ${COMPOSE_PROJECT_NAME}
|
|
# NOTE: Explicitly setting the ANSIBLE_CONFIG envvar avoids Ansible ignoring
|
|
# the configuration because it is in a world-writable working directory,
|
|
# see https://docs.ansible.com/ansible/latest/reference_appendices/config.html#avoiding-security-risks-with-ansible-cfg-in-the-current-directory.
|
|
ANSIBLE_CONFIG: ./ansible.cfg
|
|
volumes:
|
|
- ../roles/conjur_host_identity:/cyberark/cyberark.conjur.conjur-host-identity/
|
|
- .:/cyberark/dev/
|
|
- /var/run/docker.sock:/var/run/docker.sock
|
|
|
|
pg:
|
|
image: postgres:9.3
|
|
|
|
conjur:
|
|
image: cyberark/conjur
|
|
command: server -a cucumber -p 3000
|
|
environment:
|
|
CONJUR_APPLIANCE_URL: http://localhost:3000
|
|
DATABASE_URL: postgres://postgres@pg/postgres
|
|
CONJUR_DATA_KEY: "W0BuL8iTr/7QvtjIluJbrb5LDAnmXzmcpxkqihO3dXA="
|
|
networks:
|
|
- default
|
|
links:
|
|
- pg
|
|
|
|
conjur_cli:
|
|
image: cyberark/conjur-cli:5-latest
|
|
entrypoint: []
|
|
command: sleep infinity
|
|
environment:
|
|
CONJUR_APPLIANCE_URL: http://conjur:3000
|
|
CONJUR_ACCOUNT: cucumber
|
|
CONJUR_AUTHN_LOGIN: admin
|
|
CONJUR_AUTHN_API_KEY: ${CLI_CONJUR_AUTHN_API_KEY}
|
|
volumes:
|
|
- ./policy:/policy
|
|
networks:
|
|
- default
|
|
links:
|
|
- conjur
|
|
|
|
test_app_ubuntu:
|
|
build: ./test_app_ubuntu
|
|
entrypoint: sleep
|
|
command: infinity
|
|
|
|
test_app_centos:
|
|
build: ./test_app_centos
|
|
entrypoint: sleep
|
|
command: infinity
|
|
|
|
conjur-proxy-nginx:
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile_nginx
|
|
entrypoint: nginx-debug -g 'daemon off;'
|
|
environment:
|
|
TERM: xterm
|
|
depends_on:
|
|
- conjur
|
|
- conjur_cli
|