Merge pull request #31 from pymma/nicoSolr
Start using Keycloak for SSO authentification for business central
This commit is contained in:
commit
ef933ebee3
14 changed files with 3883 additions and 572 deletions
|
|
@ -16,18 +16,25 @@ services:
|
|||
volumes:
|
||||
- gitdata:/home/niodir
|
||||
- lucenedata:/home/lucene
|
||||
hostname: kie-wb.pymma
|
||||
networks:
|
||||
drools-network-dev:
|
||||
ipv4_address: 172.27.1.5
|
||||
links:
|
||||
- keycloak:keycloak
|
||||
depends_on:
|
||||
- keycloak
|
||||
ports:
|
||||
- 8080:8080
|
||||
- 8001:8001
|
||||
restart: always
|
||||
|
||||
|
||||
|
||||
admin-console:
|
||||
image: runtime-admin-console
|
||||
container_name: "admin-console"
|
||||
hostname: admin.pymma
|
||||
networks:
|
||||
drools-network-dev:
|
||||
ipv4_address: 172.27.1.6
|
||||
|
|
@ -49,6 +56,7 @@ services:
|
|||
container_name: "swimmingpool-web-ui"
|
||||
environment:
|
||||
PYMMA_OPTS: " "
|
||||
hostname: swimmingpool-wb.pymma
|
||||
networks:
|
||||
drools-network-dev:
|
||||
ipv4_address: 172.27.1.15
|
||||
|
|
@ -69,6 +77,7 @@ services:
|
|||
- kieserverdir:/niodir-kieserver
|
||||
environment:
|
||||
PYMMA_OPTS: "-Dorg.kie.server.id=server1 "
|
||||
hostname: proxy1.pymma
|
||||
networks:
|
||||
drools-network-dev:
|
||||
ipv4_address: 172.27.1.22
|
||||
|
|
@ -90,6 +99,7 @@ services:
|
|||
- kieserverdir:/niodir-kieserver
|
||||
environment:
|
||||
PYMMA_OPTS: "-Dorg.kie.server.id=server2"
|
||||
hostname: proxy2.pymma
|
||||
networks:
|
||||
drools-network-dev:
|
||||
ipv4_address: 172.27.1.32
|
||||
|
|
@ -111,6 +121,7 @@ services:
|
|||
- kieserverdir:/niodir-kieserver
|
||||
environment:
|
||||
PYMMA_OPTS: "-Dorg.kie.server.id=server3"
|
||||
hostname: proxy3.pymma
|
||||
networks:
|
||||
drools-network-dev:
|
||||
ipv4_address: 172.27.1.42
|
||||
|
|
@ -132,6 +143,7 @@ services:
|
|||
- kieserverdir:/niodir-kieserver
|
||||
environment:
|
||||
PYMMA_OPTS: "-Dorg.kie.server.id=server4"
|
||||
hostname: proxy4.pymma
|
||||
networks:
|
||||
drools-network-dev:
|
||||
ipv4_address: 172.27.1.52
|
||||
|
|
@ -153,6 +165,7 @@ services:
|
|||
- kieserverdir:/niodir-kieserver
|
||||
environment:
|
||||
PYMMA_OPTS: "-Dorg.kie.server.id=server5"
|
||||
hostname: proxy5.pymma
|
||||
networks:
|
||||
drools-network-dev:
|
||||
ipv4_address: 172.27.1.62
|
||||
|
|
@ -171,6 +184,7 @@ services:
|
|||
runtime-indexer:
|
||||
image: runtime-indexer
|
||||
container_name: "runtime-indexer"
|
||||
hostname: indexer.pymma
|
||||
networks:
|
||||
drools-network-dev:
|
||||
ipv4_address: 172.27.1.23
|
||||
|
|
@ -185,10 +199,10 @@ services:
|
|||
runtime-reverse-proxy:
|
||||
image: runtime-reverse-proxy
|
||||
container_name: "runtime-reverse-proxy"
|
||||
hostname: reverse-proxy.pymma
|
||||
networks:
|
||||
drools-network-dev:
|
||||
ipv4_address: 172.27.1.25
|
||||
|
||||
links:
|
||||
- businessProxyDB:mongodb
|
||||
depends_on:
|
||||
|
|
@ -211,6 +225,7 @@ services:
|
|||
hard: -1
|
||||
volumes:
|
||||
- esdata2:/usr/share/elasticsearch/data
|
||||
hostname: es.pymma
|
||||
networks:
|
||||
drools-network-dev:
|
||||
ipv4_address: 172.27.1.7
|
||||
|
|
@ -226,6 +241,7 @@ services:
|
|||
volumes:
|
||||
- mongodb:/data/db
|
||||
- mongodb_config:/data/configdb
|
||||
hostname: mongo.pymma
|
||||
networks:
|
||||
drools-network-dev:
|
||||
ipv4_address: 172.27.1.3
|
||||
|
|
@ -234,6 +250,58 @@ services:
|
|||
command: mongod
|
||||
restart: always
|
||||
|
||||
postgres:
|
||||
image: keycloak-db
|
||||
volumes:
|
||||
- pgdata1:/var/lib/postgresql/data
|
||||
- pgdata2:/home/pgdata
|
||||
hostname: pg.pymma
|
||||
networks:
|
||||
drools-network-dev:
|
||||
ipv4_address: 172.27.1.200
|
||||
ports:
|
||||
- 6666:5432
|
||||
restart: always
|
||||
|
||||
keycloak:
|
||||
image: jboss/keycloak:5.0.0
|
||||
environment:
|
||||
DB_VENDOR: POSTGRES
|
||||
DB_ADDR: 172.27.1.200
|
||||
DB_DATABASE: keycloakdb
|
||||
DB_USER: keycloak_user
|
||||
DB_SCHEMA: public
|
||||
DB_PASSWORD: keycloak_user
|
||||
KEYCLOAK_USER: admin
|
||||
KEYCLOAK_PASSWORD: admin
|
||||
# Uncomment the line below if you want to specify JDBC parameters. The parameter below is just an example, and it shouldn't be used in production without knowledge. It is highly recommended that you read the PostgreSQL JDBC driver documentation in order to use it.
|
||||
#JDBC_PARAMS: "ssl=true"
|
||||
hostname: keycloak.pymma
|
||||
networks:
|
||||
drools-network-dev:
|
||||
ipv4_address: 172.27.1.201
|
||||
links:
|
||||
- postgres:postgres
|
||||
ports:
|
||||
- 10080:8080
|
||||
depends_on:
|
||||
- postgres
|
||||
|
||||
dps:
|
||||
image: defreitas/dns-proxy-server:2.13.2
|
||||
volumes:
|
||||
- /var/run/docker.sock:/var/run/docker.sock
|
||||
- /etc/resolv.conf:/etc/resolv.conf
|
||||
environment:
|
||||
- MG_LOG_LEVEL=ERROR
|
||||
hostname: dns.pymma
|
||||
networks:
|
||||
drools-network-dev:
|
||||
ipv4_address: 172.27.1.233
|
||||
ports:
|
||||
- 5380:5380
|
||||
|
||||
|
||||
|
||||
volumes:
|
||||
mongodb:
|
||||
|
|
@ -242,3 +310,5 @@ volumes:
|
|||
lucenedata:
|
||||
esdata2:
|
||||
kieserverdir:
|
||||
pgdata1:
|
||||
pgdata2:
|
||||
|
|
@ -1,206 +0,0 @@
|
|||
version: "3"
|
||||
|
||||
|
||||
networks:
|
||||
drools-network-dev:
|
||||
ipam:
|
||||
config:
|
||||
- subnet: 172.27.1.0/24
|
||||
|
||||
|
||||
services:
|
||||
|
||||
kie-wb:
|
||||
image: kie-wb
|
||||
container_name: "businessCentral"
|
||||
volumes:
|
||||
- gitdata:/home/niodir
|
||||
- lucenedata:/home/lucene
|
||||
networks:
|
||||
drools-network-dev:
|
||||
ipv4_address: 172.27.1.5
|
||||
ports:
|
||||
- 8080:8080
|
||||
- 8001:8001
|
||||
|
||||
restart: always
|
||||
|
||||
|
||||
admin-console:
|
||||
image: runtime-admin-console
|
||||
container_name: "admin-console"
|
||||
networks:
|
||||
drools-network-dev:
|
||||
ipv4_address: 172.27.1.6
|
||||
ports:
|
||||
- 8200:8200
|
||||
links:
|
||||
- businessProxyDB:mongodb
|
||||
- elasticsearchhost:elasticdb
|
||||
- kie-wb
|
||||
depends_on:
|
||||
- businessProxyDB
|
||||
- elasticsearchhost
|
||||
- kie-wb
|
||||
restart: always
|
||||
|
||||
runtime-proxy-1:
|
||||
image: runtime-proxy
|
||||
container_name: "runtime-proxy-1"
|
||||
networks:
|
||||
drools-network-dev:
|
||||
ipv4_address: 172.27.1.22
|
||||
ports:
|
||||
- 8090
|
||||
- 9080
|
||||
links:
|
||||
- businessProxyDB:mongodb
|
||||
- kie-wb:kie-wb
|
||||
depends_on:
|
||||
- businessProxyDB
|
||||
- kie-wb
|
||||
restart: always
|
||||
|
||||
runtime-proxy-2:
|
||||
image: runtime-proxy
|
||||
container_name: "runtime-proxy-2"
|
||||
networks:
|
||||
drools-network-dev:
|
||||
ipv4_address: 172.27.1.32
|
||||
ports:
|
||||
- 8090
|
||||
- 9080
|
||||
links:
|
||||
- businessProxyDB:mongodb
|
||||
- kie-wb:kie-wb
|
||||
depends_on:
|
||||
- businessProxyDB
|
||||
- kie-wb
|
||||
restart: always
|
||||
|
||||
runtime-proxy-3:
|
||||
image: runtime-proxy
|
||||
container_name: "runtime-proxy-3"
|
||||
networks:
|
||||
drools-network-dev:
|
||||
ipv4_address: 172.27.1.42
|
||||
ports:
|
||||
- 8090
|
||||
- 9080
|
||||
links:
|
||||
- businessProxyDB:mongodb
|
||||
- kie-wb:kie-wb
|
||||
depends_on:
|
||||
- businessProxyDB
|
||||
- kie-wb
|
||||
restart: always
|
||||
|
||||
runtime-proxy-4:
|
||||
image: runtime-proxy
|
||||
container_name: "runtime-proxy-4"
|
||||
networks:
|
||||
drools-network-dev:
|
||||
ipv4_address: 172.27.1.52
|
||||
ports:
|
||||
- 8090
|
||||
- 9080
|
||||
links:
|
||||
- businessProxyDB:mongodb
|
||||
- kie-wb:kie-wb
|
||||
depends_on:
|
||||
- businessProxyDB
|
||||
- kie-wb
|
||||
restart: always
|
||||
|
||||
runtime-proxy-5:
|
||||
image: runtime-proxy
|
||||
container_name: "runtime-proxy-5"
|
||||
networks:
|
||||
drools-network-dev:
|
||||
ipv4_address: 172.27.1.62
|
||||
ports:
|
||||
- 8090
|
||||
- 9080
|
||||
links:
|
||||
- businessProxyDB:mongodb
|
||||
- kie-wb:kie-wb
|
||||
depends_on:
|
||||
- businessProxyDB
|
||||
- kie-wb
|
||||
restart: always
|
||||
|
||||
|
||||
runtime-indexer:
|
||||
image: runtime-indexer
|
||||
container_name: "runtime-indexer"
|
||||
networks:
|
||||
drools-network-dev:
|
||||
ipv4_address: 172.27.1.23
|
||||
links:
|
||||
- businessProxyDB:mongodb
|
||||
- elasticsearchhost:elasticdb
|
||||
depends_on:
|
||||
- businessProxyDB
|
||||
- elasticsearchhost
|
||||
restart: always
|
||||
|
||||
runtime-reverse-proxy:
|
||||
image: runtime-reverse-proxy
|
||||
container_name: "runtime-reverse-proxy"
|
||||
networks:
|
||||
drools-network-dev:
|
||||
ipv4_address: 172.27.1.25
|
||||
|
||||
links:
|
||||
- businessProxyDB:mongodb
|
||||
depends_on:
|
||||
- businessProxyDB
|
||||
ports:
|
||||
- 9500:9500
|
||||
|
||||
restart: always
|
||||
|
||||
|
||||
|
||||
elasticsearchhost:
|
||||
image: docker.elastic.co/elasticsearch/elasticsearch:6.2.2
|
||||
container_name: "elasticsearchhost"
|
||||
environment:
|
||||
- network.host=0.0.0.0
|
||||
- cluster.name=elasticsearch
|
||||
ulimits:
|
||||
memlock:
|
||||
soft: -1
|
||||
hard: -1
|
||||
volumes:
|
||||
- esdata2:/usr/share/elasticsearch/data
|
||||
networks:
|
||||
drools-network-dev:
|
||||
ipv4_address: 172.27.1.7
|
||||
ports:
|
||||
- 9300:9300
|
||||
- 9200:9200
|
||||
restart: always
|
||||
|
||||
|
||||
businessProxyDB:
|
||||
image: mongo
|
||||
container_name: "businessProxyDB"
|
||||
volumes:
|
||||
- mongodb:/data/db
|
||||
- mongodb_config:/data/configdb
|
||||
networks:
|
||||
drools-network-dev:
|
||||
ipv4_address: 172.27.1.3
|
||||
ports:
|
||||
- 28017:27017
|
||||
command: mongod
|
||||
restart: always
|
||||
|
||||
|
||||
volumes:
|
||||
mongodb:
|
||||
mongodb_config:
|
||||
gitdata:
|
||||
lucenedata:
|
||||
esdata2:
|
||||
|
|
@ -14,6 +14,8 @@
|
|||
<packaging>war</packaging>
|
||||
<name>Pymma platform workbench</name>
|
||||
<description>Pymma Plarform Kie-wb</description>
|
||||
|
||||
|
||||
<dependencies>
|
||||
|
||||
<dependency>
|
||||
|
|
@ -22,6 +24,11 @@
|
|||
<version>${project.version}</version>
|
||||
</dependency>
|
||||
|
||||
<dependency>
|
||||
<groupId>org.training.Leisure</groupId>
|
||||
<artifactId>swimmingpool</artifactId>
|
||||
<version>1.0.1-SNAPSHOT</version>
|
||||
</dependency>
|
||||
<dependency>
|
||||
<groupId>org.kie</groupId>
|
||||
<artifactId>business-central</artifactId>
|
||||
|
|
@ -229,7 +236,9 @@
|
|||
<assembly>
|
||||
<mode>dir</mode>
|
||||
<name>maven/</name>
|
||||
<inline xmlns="http://maven.apache.org/plugins/maven-assembly-plugin/assembly/1.1.2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/plugins/maven-assembly-plugin/assembly/1.1.2 http://maven.apache.org/xsd/assembly-1.1.2.xsd">
|
||||
<inline xmlns="http://maven.apache.org/plugins/maven-assembly-plugin/assembly/1.1.2"
|
||||
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
||||
xsi:schemaLocation="http://maven.apache.org/plugins/maven-assembly-plugin/assembly/1.1.2 http://maven.apache.org/xsd/assembly-1.1.2.xsd">
|
||||
<id>middleware-rest</id>
|
||||
<files>
|
||||
<file>
|
||||
|
|
@ -283,5 +292,4 @@
|
|||
</profiles>
|
||||
|
||||
|
||||
|
||||
</project>
|
||||
|
|
@ -3,7 +3,7 @@
|
|||
###########################################################################
|
||||
|
||||
####### BASE ############
|
||||
FROM jboss/wildfly:14.0.1.Final
|
||||
FROM jboss/keycloak-adapter-wildfly:latest
|
||||
|
||||
####### MAINTAINER ############
|
||||
MAINTAINER "Nicolas Héron" "nicolas.heron@pymma-software.com"
|
||||
|
|
@ -51,8 +51,8 @@ EXPOSE 8001
|
|||
|
||||
####### Drools Workbench CUSTOM CONFIGURATION ############
|
||||
ADD etc/standalone-full-drools.xml $JBOSS_HOME/standalone/configuration/standalone-full-drools.xml
|
||||
ADD etc/application-users.properties $JBOSS_HOME/standalone/configuration/application-users.properties
|
||||
ADD etc/application-roles.properties $JBOSS_HOME/standalone/configuration/application-roles.properties
|
||||
#ADD etc/application-users.properties $JBOSS_HOME/standalone/configuration/application-users.properties
|
||||
#ADD etc/application-roles.properties $JBOSS_HOME/standalone/configuration/application-roles.properties
|
||||
|
||||
# Added files are chowned to root user, change it to the jboss one.
|
||||
USER root
|
||||
|
|
@ -71,8 +71,8 @@ ADD settings.xml /m2_kiewb/settings.xml
|
|||
RUN mkdir /m2_kiewb/repository
|
||||
####### MVN REPO ############
|
||||
# https://bugzilla.redhat.com/show_bug.cgi?id=1263738
|
||||
RUN mkdir -p /m2_kiewb/repository/org/guvnor/guvnor-asset-mgmt-project/$KIE_VERSION && \
|
||||
curl -o /m2_kiewb/repository/org/guvnor/guvnor-asset-mgmt-project/$KIE_VERSION/guvnor-asset-mgmt-project-$KIE_VERSION.jar $KIE_REPOSITORY/org/guvnor/guvnor-asset-mgmt-project/$KIE_VERSION/guvnor-asset-mgmt-project-$KIE_VERSION.jar
|
||||
#RUN mkdir -p /m2_kiewb/repository/org/guvnor/guvnor-asset-mgmt-project/$KIE_VERSION && \
|
||||
#curl -o /m2_kiewb/repository/org/guvnor/guvnor-asset-mgmt-project/$KIE_VERSION/guvnor-asset-mgmt-project-$KIE_VERSION.jar $KIE_REPOSITORY/org/guvnor/guvnor-asset-mgmt-project/$KIE_VERSION/guvnor-asset-mgmt-project-$KIE_VERSION.jar
|
||||
|
||||
|
||||
RUN chown jboss:jboss /home/lucene
|
||||
|
|
|
|||
|
|
@ -1,42 +0,0 @@
|
|||
admin=admin,analyst,kiemgmt,admingroup,rest-all
|
||||
|
||||
kieserver=kie-server,,rest-all
|
||||
workbench=admin,kie-server
|
||||
|
||||
#pymma
|
||||
nheron=admin,analyst,kiemgmt,admingroup,rest-all
|
||||
guillaume=analyst,kiemgmt,pymma,pymma,rest-all
|
||||
maxime=analyst,kiemgmt,pymma,rest-all
|
||||
donatienne=analyst,kiemgmt,pymma,rest-all
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
#auchan
|
||||
igor=analyst,auchan,rest-all
|
||||
florian=analyst,auchan,rest-all
|
||||
|
||||
#oney
|
||||
thomas=analyst,oney,rest-all
|
||||
christopheev=analyst,oney,rest-all
|
||||
|
||||
#probtp
|
||||
pascal=analyst,probtp,rest-all
|
||||
|
||||
|
||||
#training
|
||||
student01=analyst,training,rest-all
|
||||
student02=analyst,training,rest-all
|
||||
student03=analyst,training,rest-all
|
||||
student04=analyst,training,rest-all
|
||||
student05=analyst,training,rest-all
|
||||
student06=analyst,training,rest-all
|
||||
student07=analyst,training,rest-all
|
||||
student08=analyst,training,rest-all
|
||||
student09=analyst,training,rest-all
|
||||
student10=analyst,training,rest-all
|
||||
student11=analyst,training,rest-all
|
||||
student12=analyst,training,rest-all
|
||||
nicolas=admin,analyst,kiemgmt,admingroup,rest-all
|
||||
|
|
@ -1,33 +0,0 @@
|
|||
admin=207b6e0cc556d7084b5e2db7d822555c
|
||||
kieserver=kieserver1!
|
||||
|
||||
#pymma
|
||||
nheron=e4b5d284416d5c804c3a3243e91f7bcb
|
||||
guillaume=hochart
|
||||
maxime=picault
|
||||
donatienne=yovo
|
||||
# auchan
|
||||
igor=auchan
|
||||
florian=auchan
|
||||
# oney
|
||||
thomas=oney
|
||||
christopheev=oney
|
||||
# probtp
|
||||
pascal=probtp
|
||||
#training
|
||||
student01=mybrmspymma01a
|
||||
student02=mybrmspymma02b
|
||||
student03=mybrmspymma03c
|
||||
student04=mybrmspymma04d
|
||||
student05=mybrmspymma05e
|
||||
student06=mybrmspymma06f
|
||||
student07=mybrmspymma07g
|
||||
student08=mybrmspymma08h
|
||||
student09=mybrmspymma09i
|
||||
student10=mybrmspymma10j
|
||||
student11=mybrmspymma11k
|
||||
student12=mybrmspymma12l
|
||||
nicolas=200368d75a475c5adfec0b4615329a68
|
||||
#
|
||||
#$REALM_NAME=ApplicationRealm$ This line is used by the add-user utility to identify the realm name already used in this file.
|
||||
#
|
||||
|
|
@ -20,6 +20,7 @@
|
|||
<extension module="org.jboss.as.security" />
|
||||
<extension module="org.jboss.as.transactions" />
|
||||
<extension module="org.jboss.as.webservices" />
|
||||
<extension module="org.keycloak.keycloak-adapter-subsystem" />
|
||||
<extension module="org.jboss.as.weld" />
|
||||
<extension module="org.wildfly.extension.batch.jberet" />
|
||||
<extension module="org.wildfly.extension.bean-validation" />
|
||||
|
|
@ -279,6 +280,7 @@
|
|||
<realm name="ManagementRealm" role-decoder="groups-to-roles" />
|
||||
<realm name="local" role-mapper="super-user-mapper" />
|
||||
</security-domain>
|
||||
|
||||
</security-domains>
|
||||
<security-realms>
|
||||
<identity-realm name="local" identity="$local" />
|
||||
|
|
@ -430,6 +432,18 @@
|
|||
<jpa default-datasource="" default-extended-persistence-inheritance="DEEP" />
|
||||
</subsystem>
|
||||
<subsystem xmlns="urn:jboss:domain:jsf:1.1" />
|
||||
<subsystem xmlns="urn:jboss:domain:keycloak:1.1">
|
||||
<secure-deployment name="kie-wb.war">
|
||||
<realm>demo</realm>
|
||||
<resource>kie</resource>
|
||||
<enable-basic-auth>true</enable-basic-auth>
|
||||
<realm-public-key>MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQBLWufOyICqNgRYzZZU/RsoosuKCH7gCsP/dOnfb8t3EUcZrt6rKvn9uSyVfCjJ0EhZBsaQQXNuyildY3Nbbs4uVlRUtHGZoqbnMZfdP1kZTrSnVLS+ckP19UoIVMZUykXEih8jmtmvXKCqeuB81GUW0zrUDHR3QCGihp5XyuLKvprXl+m3zUL7HYWlT6gXgWLx4C8P2XOcuj+G7/FHZjEvNWCUMp4EslVxMcmLoYjMs1y8sisXrpFbeE6blvoSNXL1RGanMJt9oVW/sWVw94wILavmiCxtd1VsZbzXTdBM8kX0Ro2So7OJKWBmBdq0M7v5U4A8yhkJt+2QYA3VtwIDAQAB</realm-public-key>
|
||||
<auth-server-url>http://host.docker:10080/auth</auth-server-url>
|
||||
<ssl-required>external</ssl-required>
|
||||
<principal-attribute>preferred_username</principal-attribute>
|
||||
<credential name="secret">dd7fc22d-ba01-4387-b68a-316b12a741e8</credential>
|
||||
</secure-deployment>
|
||||
</subsystem>
|
||||
<subsystem xmlns="urn:jboss:domain:jsr77:1.0" />
|
||||
<subsystem xmlns="urn:jboss:domain:mail:3.0">
|
||||
<mail-session name="default" jndi-name="java:jboss/mail/Default">
|
||||
|
|
@ -507,6 +521,11 @@
|
|||
<policy-module code="Delegating" flag="required" />
|
||||
</authorization>
|
||||
</security-domain>
|
||||
<security-domain name="keycloak">
|
||||
<authentication>
|
||||
<login-module code="org.keycloak.adapters.jboss.KeycloakLoginModule" flag="required" />
|
||||
</authentication>
|
||||
</security-domain>
|
||||
</security-domains>
|
||||
</subsystem>
|
||||
<subsystem xmlns="urn:jboss:domain:security-manager:1.0">
|
||||
|
|
|
|||
139
keycloak-db/pom.xml
Normal file
139
keycloak-db/pom.xml
Normal file
|
|
@ -0,0 +1,139 @@
|
|||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<project xmlns="http://maven.apache.org/POM/4.0.0"
|
||||
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
||||
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
|
||||
<parent>
|
||||
<artifactId>pymma-jbpm-platform-parent</artifactId>
|
||||
<groupId>com.pymmasoftware.jbpm</groupId>
|
||||
<version>1.1-SNAPSHOT</version>
|
||||
</parent>
|
||||
<modelVersion>4.0.0</modelVersion>
|
||||
<packaging>jar</packaging>
|
||||
<artifactId>keycloak-db</artifactId>
|
||||
<build>
|
||||
<plugins>
|
||||
<plugin>
|
||||
<groupId>io.fabric8</groupId>
|
||||
<artifactId>docker-maven-plugin</artifactId>
|
||||
<version>0.28.0</version>
|
||||
|
||||
</plugin>
|
||||
</plugins>
|
||||
</build>
|
||||
<profiles>
|
||||
<profile>
|
||||
<id>docker-build</id>
|
||||
<build>
|
||||
<plugins>
|
||||
<plugin>
|
||||
<groupId>io.fabric8</groupId>
|
||||
<artifactId>docker-maven-plugin</artifactId>
|
||||
<version>0.21.0</version>
|
||||
|
||||
<configuration>
|
||||
<dockerHost>${docker.Host}</dockerHost>
|
||||
|
||||
<verbose>true</verbose>
|
||||
<images>
|
||||
<image>
|
||||
<name>keycloak-db</name>
|
||||
<build>
|
||||
<dockerFileDir>${project.basedir}/src/main/docker</dockerFileDir>
|
||||
|
||||
|
||||
<tags>
|
||||
<tag>latest</tag>
|
||||
</tags>
|
||||
|
||||
</build>
|
||||
|
||||
<run>
|
||||
<extraHosts>
|
||||
<host>mongodb:192.168.43.94</host>
|
||||
<host>elasticsearchhost:192.168.43.94</host>
|
||||
</extraHosts>
|
||||
<ports>
|
||||
<port>6666:5432</port>
|
||||
</ports>
|
||||
</run>
|
||||
</image>
|
||||
</images>
|
||||
</configuration>
|
||||
|
||||
<executions>
|
||||
|
||||
<execution>
|
||||
<phase>package</phase>
|
||||
<goals>
|
||||
<goal>build</goal>
|
||||
</goals>
|
||||
</execution>
|
||||
|
||||
|
||||
</executions>
|
||||
|
||||
</plugin>
|
||||
</plugins>
|
||||
</build>
|
||||
</profile>
|
||||
<profile>
|
||||
<id>docker-deploy</id>
|
||||
<build>
|
||||
<plugins>
|
||||
<plugin>
|
||||
<groupId>io.fabric8</groupId>
|
||||
<artifactId>docker-maven-plugin</artifactId>
|
||||
<version>0.21.0</version>
|
||||
|
||||
<configuration>
|
||||
<registry>registry.hub.docker.com/pymmasoftware</registry>
|
||||
<dockerHost>${docker.Host}</dockerHost>
|
||||
<verbose>true</verbose>
|
||||
<images>
|
||||
<image>
|
||||
<name>keycloak-db</name>
|
||||
<build>
|
||||
<dockerFileDir>${project.basedir}/src/main/docker</dockerFileDir>
|
||||
|
||||
<!--copies Jar to the maven directory (uses Assembly system)-->
|
||||
<assembly>
|
||||
<descriptorRef>artifact</descriptorRef>
|
||||
</assembly>
|
||||
|
||||
</build>
|
||||
|
||||
<run>
|
||||
<extraHosts>
|
||||
<host>mongodb:192.168.1.100</host>
|
||||
</extraHosts>
|
||||
|
||||
</run>
|
||||
</image>
|
||||
</images>
|
||||
<authConfig>
|
||||
<username>pymmasoftwaredeploy</username>
|
||||
<password>pymmalomme</password>
|
||||
</authConfig>
|
||||
<retries>5</retries>
|
||||
</configuration>
|
||||
|
||||
<executions>
|
||||
|
||||
|
||||
<execution>
|
||||
<id>mydeploy</id>
|
||||
<phase>deploy</phase>
|
||||
<goals>
|
||||
<goal>build</goal>
|
||||
<goal>push</goal>
|
||||
</goals>
|
||||
</execution>
|
||||
|
||||
</executions>
|
||||
|
||||
</plugin>
|
||||
</plugins>
|
||||
</build>
|
||||
</profile>
|
||||
</profiles>
|
||||
</project>
|
||||
4
keycloak-db/src/main/docker/01_init.sql
Normal file
4
keycloak-db/src/main/docker/01_init.sql
Normal file
|
|
@ -0,0 +1,4 @@
|
|||
CREATE USER keycloak_user WITH PASSWORD 'keycloak_user';
|
||||
CREATE TABLESPACE keycloak_tablesplace owner keycloak_user location '/home/pgdata/keycloak';
|
||||
create database keycloakdb ENCODING = 'UTF8' TABLESPACE keycloak_tablesplace;
|
||||
GRANT ALL PRIVILEGES ON database keycloakdb to keycloak_user;
|
||||
1564
keycloak-db/src/main/docker/02_Create_table.sql
Normal file
1564
keycloak-db/src/main/docker/02_Create_table.sql
Normal file
File diff suppressed because it is too large
Load diff
1766
keycloak-db/src/main/docker/03_Create_table_content.sql
Normal file
1766
keycloak-db/src/main/docker/03_Create_table_content.sql
Normal file
File diff suppressed because it is too large
Load diff
15
keycloak-db/src/main/docker/Dockerfile
Normal file
15
keycloak-db/src/main/docker/Dockerfile
Normal file
|
|
@ -0,0 +1,15 @@
|
|||
FROM postgres:9.4
|
||||
RUN mkdir /home/pgdata
|
||||
RUN mkdir /home/pgdata/keycloak
|
||||
|
||||
RUN chown -R postgres: /home/pgdata
|
||||
|
||||
|
||||
VOLUME /home/pgdata
|
||||
RUN chown postgres: /home/pgdata
|
||||
ADD 01_init.sql /docker-entrypoint-initdb.d/
|
||||
ADD 02_Create_table.sql /docker-entrypoint-initdb.d/
|
||||
ADD 03_Create_table_content.sql /docker-entrypoint-initdb.d/
|
||||
|
||||
CMD ["postgres"]
|
||||
|
||||
5
pom.xml
5
pom.xml
|
|
@ -15,6 +15,7 @@
|
|||
<module>drools-framework-admin-console-parent</module>
|
||||
<module>drools-framework-business-proxy-parent</module>
|
||||
<module>drools-framework-base-tools-parent</module>
|
||||
<module>keycloak-db</module>
|
||||
</modules>
|
||||
<packaging>pom</packaging>
|
||||
|
||||
|
|
@ -90,11 +91,11 @@
|
|||
<distributionManagement>
|
||||
<snapshotRepository>
|
||||
<id>pymma-snapshot</id>
|
||||
<url>https://nexus.pymma-software.com/nexus/content/repositories/pymma-snapshot</url>
|
||||
<url>https://nexus.pymma-software.com/nexus/content/repositories/chtijbug-snapshot</url>
|
||||
</snapshotRepository>
|
||||
<repository>
|
||||
<id>pymma-release</id>
|
||||
<url>https://nexus.pymma-software.com/nexus/content/repositories/pymma-release</url>
|
||||
<url>https://nexus.pymma-software.com/nexus/content/repositories/chtijbug-release</url>
|
||||
</repository>
|
||||
</distributionManagement>
|
||||
<developers>
|
||||
|
|
|
|||
18
readme.md
18
readme.md
|
|
@ -1,11 +1,17 @@
|
|||
|
||||
configuration du workbench
|
||||
-XX:MaxNewSize=256m -XX:PermSize=256m -XX:MaxPermSize=556m -XX:+DisableExplicitGC -Dorg.kie.example.repositories=/home/nheron/kie-base/example-import -Dorg.kie.example=true -Dorg.uberfire.metadata.index.dir=/home/nheron/kie-base/lucene -Dorg.uberfire.nio.git.daemon.host=0.0.0.0 -Dorg.guvnor.m2repo.dir=/home/nheron/kie-base/M2_REPO -DM2_HOME=/Users/nheron/.m2/repository-Dorg.uberfire.nio.git.dir=/home/nheron/kie-base/niodir-Dorg.kie.demo=false -Dorg.kie.server.controller=http://localhost:8080/kie-wb/rest/controller
|
||||
To run the platform, we ecourage you to use the docker containers build with maven
|
||||
To be able to build the docker container, active the profiles as follow
|
||||
mvn clean install -Pdev,docker-build
|
||||
|
||||
we have a docker-compose file.
|
||||
As we are using sso, you have in your /etc/hosts to add a line :
|
||||
YourHostIPnotLocalhost host.docker
|
||||
|
||||
then on the root
|
||||
docker-compose up -d
|
||||
|
||||
|
||||
the workbench will be at the following url : htto://host.docker:8080/kie-wb
|
||||
|
||||
We need an ip visible from your browser when used as a callback once identified
|
||||
|
||||
|
||||
|
||||
|
||||
configuration du kie-server
|
||||
Loading…
Add table
editor.link_modal.header
Reference in a new issue