docker-compose.yml

version: '2'
services:
  openssl:
    image: svagi/openssl:latest
    container_name: openssl_test
    entrypoint:
      - openssl
      - req
      - -newkey
      - rsa:2048
      - -days
      - "365"
      - -nodes
      - -x509
      - -config
      - /tmp/conf/tls.conf
      - -extensions
      - v3_ca
      - -keyout
      - /tmp/conf/test_nginx.key
      - -out
      - /tmp/conf/test_nginx.crt
    volumes:
      - ${PWD}/test/test_config/https/:/tmp/conf

  pg:
    image: postgres:9.4
    environment:
      POSTGRES_HOST_AUTH_METHOD: trust

  conjur:
    image: cyberark/conjur:latest
    command: server -a dev -f /policy/initial_policy.yml
    environment:
      CONJUR_DATA_KEY: 'OyXV68Mip14xj33huGaQKewmmS+gKtDlp6ECZ2iATpU='
      DATABASE_URL: postgres://postgres@pg/postgres
      RAILS_ENV: development
      CONJUR_AUTHENTICATORS: authn-ldap/test-service,authn
      LDAP_URI: ldap://ldap-server:389
      LDAP_BASE: dc=conjur,dc=net
      LDAP_BINDDN: cn=admin,dc=conjur,dc=net
      LDAP_BINDPW: ldapsecret
      LDAP_FILTER: (uid=%s)
    ports:
      - 80
    volumes:
      - ${PWD}/test/test_config:/policy:ro
    depends_on:
      - pg
      - ldap-server

  conjur-https:
    image: nginx:alpine
    ports:
      - 443
      - "443:443"
    volumes:
      - ${PWD}/test/test_config/https/:/tmp/conf
      - ${PWD}/test/test_config/https/:/etc/nginx/tls/:ro
      - ${PWD}/test/test_config/https/nginx.conf:/etc/nginx/nginx.conf:ro
      - ${PWD}/test/test_config/https/conjur.conf:/etc/nginx/sites-enabled/conjur.conf:ro
      - ${PWD}/test/test_config/https/dhparams.pem:/etc/nginx/dhparams.pem:ro
    depends_on:
      - conjur

  conjur-cli:
    image: cyberark/conjur-cli:5
    entrypoint: [ "bash", "-c" ]
    command: [ "sleep 999d" ]
    depends_on:
      - conjur
      - conjur-https

  ldap-server:
    image: osixia/openldap
    command: --copy-service --loglevel debug
    hostname: ldap-server
    environment:
      LDAP_ORGANIZATION: CyberArk
      LDAP_DOMAIN: conjur.net
      LDAP_ADMIN_PASSWORD: ldapsecret
      LDAP_TLS_CA_CRT_FILENAME: "ca-chain.cert.pem"
      LDAP_TLS_CRT_FILENAME: "ldap-server.cert.pem"
      LDAP_TLS_KEY_FILENAME: "ldap-server.key.pem"
      LDAP_TLS_DH_PARAM_FILENAME: 'dhparam.pem'
      LDAP_TLS_VERIFY_CLIENT: try
    ports:
      - "389:389"
    volumes:
      - ${PWD}/test/test_config/ldap:/container/service/slapd/assets/config/bootstrap/ldif/custom
      - ${PWD}/test/test_config/ldap/certs:/container/service/slapd/assets/certs:ro

  test:
    privileged: true
    build:
      context: .
      dockerfile: Dockerfile.test
    command: ['sleep', '999d']
    environment:
      CONJUR_AUTHN_API_KEY: Null
      DEBUG: Null
      TEST_ENV: "True"
    depends_on:
      - conjur
      - conjur-https
    volumes:
      - ${PWD}:/opt/cyberark-conjur-cli

  conjur-appliance:
    image: registry2.itci.conjur.net/conjur-appliance:5.0-stable
    environment:
      CONJUR_AUTHENTICATORS: authn-ldap/test-service,authn
      LDAP_URI: ldap://ldap-server:389
      LDAP_BASE: dc=conjur,dc=net
      LDAP_BINDDN: cn=admin,dc=conjur,dc=net
      LDAP_BINDPW: ldapsecret
      LDAP_FILTER: (uid=%s)
    ports:
      - "444:443"
    expose:
      - "443"
      - "444"
      - "1999"
      - "5432"
    security_opt:
        - "seccomp:unconfined"
    depends_on:
      - ldap-server

  rhel8:
    privileged: true
    build:
      context: .
      dockerfile: Dockerfile.test.rhel8
    command: ['sleep', '999d']
    environment:
      CONJUR_AUTHN_API_KEY: Null
      PYTHON_KEYRING_BACKEND: Null
      DEBUG: Null
      TEST_ENV: "True"
      SERVER_MODE: Null
      LOGIN: Null
      ADMIN_PASSWORD: Null
      TEST_HOSTNAME: Null
      ACCOUNT: Null
    depends_on:
      - conjur-appliance
    volumes:
      - ${PWD}:/opt/cyberark-conjur-cli

  rhel7:
    privileged: true
    build:
      context: .
      dockerfile: Dockerfile.test.rhel7
    command: ['sleep', '999d']
    environment:
      CONJUR_AUTHN_API_KEY: Null
      PYTHON_KEYRING_BACKEND: Null
      DEBUG: Null
      TEST_ENV: "True"
      SERVER_MODE: Null
      LOGIN: Null
      ADMIN_PASSWORD: Null
      TEST_HOSTNAME: Null
      ACCOUNT: Null
    depends_on:
      - conjur-appliance
    volumes:
      - ${PWD}:/opt/cyberark-conjur-cli