add themis to docker-compose cluster (#24)

deploy/docker-compose/deploy.sh

@@ -21,6 +21,7 @@ TR1D1UM_VERSION=${TR1D1UM_VERSION:-0.1.5} \
 SCYTALE_VERSION=${SCYTALE_VERSION:-0.1.5} \
 PETASOS_VERSION=${PETASOS_VERSION:-0.1.4} \
 TALARIA_VERSION=${TALARIA_VERSION:-0.1.3} \
+THEMIS_VERSION=${THEMIS_VERSION:-0.4.0} \
 SIMULATOR_VERSION=${SIMULATOR_VERSION:-local} \
 docker-compose -f $ROOT_DIR/deploy/docker-compose/docker-compose.yml up -d $@
 

deploy/docker-compose/docFiles/talaria-0.yaml

@@ -54,6 +54,14 @@
   eventMap:
     default: http://caduceus:6000/api/v3/notify
 
+  jwtValidators:
+    -
+      keys:
+        Factory:
+            uri: "http://themis:6500/keys/{keyId}"
+        purpose: 0
+        updateInterval: 604800000000000
+
   service:
     defaultScheme: http
     consul:

deploy/docker-compose/docFiles/talaria-1.yaml

@@ -54,6 +54,14 @@
   eventMap:
     default: http://caduceus:6000/api/v3/notify
 
+  jwtValidators:
+    -
+      keys:
+        Factory:
+            uri: "http://themis:6500/keys/{keyId}"
+        purpose: 0
+        updateInterval: 604800000000000
+
   service:
     defaultScheme: http
     consul:

deploy/docker-compose/docFiles/talaria-2.yaml

@@ -54,6 +54,14 @@
   eventMap:
     default: http://caduceus:6000/api/v3/notify
 
+  jwtValidators:
+    -
+      keys:
+        Factory:
+            uri: "http://themis:6500/keys/{keyId}"
+        purpose: 0
+        updateInterval: 604800000000000
+
   service:
     defaultScheme: http
     consul:

deploy/docker-compose/docFiles/themis.yaml

@@ -0,0 +1,46 @@
+---
+  servers:
+    key:
+      address: :6500
+
+    issuer:
+      address: :6501
+    
+    metrics:
+      address: :6502
+
+    health:
+      address: :6503
+
+  health:
+    disableLogging: false
+    custom:
+      server: "themis" 
+
+  prometheus:
+    defaultNamespace: xmidt
+    defaultSubsystem: themis
+
+  token:
+    alg: RS256
+    nonce: true
+    notBeforeDelta: -15s
+    duration: 2h
+    claims:
+      iss:
+        value: "themis"
+      trust:
+        value: 1000
+      partner-id: 
+        value: "comcast"
+      capabilities:
+        value:
+          - xmidt:issuer:test:.*:all
+    key:
+      kid: local
+      type: rsa
+      bits: 2048
+      
+  log:
+    file: "stdout"
+    level: "DEBUG"

deploy/docker-compose/docker-compose.yml

@@ -28,6 +28,43 @@ services:
     networks:
       - xmidt
 
+# Mark Talaria Services
+  talaria-0: &talaria
+    image: xmidt/talaria:${TALARIA_VERSION}
+    ports:
+      - 6200:6200
+      - 6201:6201
+      - 6202:6202
+      - 6203:6203
+      - 6204:6204
+    depends_on:
+      - consul0
+      - themis
+    volumes:
+      - ./docFiles/talaria-0.yaml:/etc/talaria/talaria.yaml
+    networks:
+      - xmidt
+  talaria-1:
+    <<: *talaria
+    ports:
+      - 6210:6210
+      - 6211:6211
+      - 6212:6212
+      - 6213:6213
+      - 6214:6214
+    volumes:
+      - ./docFiles/talaria-1.yaml:/etc/talaria/talaria.yaml
+  talaria-2:
+    <<: *talaria
+    ports:
+      - 6220:6220
+      - 6221:6221
+      - 6222:6222
+      - 6223:6223
+      - 6224:6224
+    volumes:
+      - ./docFiles/talaria-2.yaml:/etc/talaria/talaria.yaml
+
   scytale:
     image: xmidt/scytale:${SCYTALE_VERSION}
     ports:
@@ -43,6 +80,34 @@ services:
     networks:
       - xmidt
 
+# Mark petasos Services
+  petasos: &petasos
+    image: xmidt/petasos:${PETASOS_VERSION}
+    ports:
+      - 6400:6400
+      - 6401:6401
+      - 6402:6402
+      - 6403:6403
+      - 6404:6404
+    depends_on:
+      - consul0
+    volumes:
+      - ./docFiles/petasos.yaml:/etc/petasos/petasos.yaml
+    networks:
+      - xmidt
+
+  themis:
+    image: xmidt/themis:${THEMIS_VERSION}
+    ports:
+      - 6500:6500
+      - 6501:6501
+      - 6502:6502
+      - 6503:6503
+    volumes:
+      - ./docFiles/themis.yaml:/themis.yaml
+    networks:
+      - xmidt
+
   goaws:
     image: goaws:local
     container_name: goaws
@@ -66,57 +131,6 @@ services:
       - ./docFiles/prometheus.yml:/prometheus-data/prometheus.yml
     command:  --log.level=debug --config.file=/prometheus-data/prometheus.yml
 
-# Mark petasos Services
-  petasos: &petasos
-    image: xmidt/petasos:${PETASOS_VERSION}
-    ports:
-      - 6400:6400
-      - 6401:6401
-      - 6402:6402
-      - 6403:6403
-      - 6404:6404
-    depends_on:
-      - consul0
-    volumes:
-      - ./docFiles/petasos.yaml:/etc/petasos/petasos.yaml
-    networks:
-      - xmidt
-
-# Mark Talaria Services
-  talaria-0: &talaria
-    image: xmidt/talaria:${TALARIA_VERSION}
-    ports:
-      - 6200:6200
-      - 6201:6201
-      - 6202:6202
-      - 6203:6203
-      - 6204:6204
-    depends_on:
-      - consul0
-    volumes:
-      - ./docFiles/talaria-0.yaml:/etc/talaria/talaria.yaml
-    networks:
-      - xmidt
-  talaria-1:
-    <<: *talaria
-    ports:
-      - 6210:6210
-      - 6211:6211
-      - 6212:6212
-      - 6213:6213
-      - 6214:6214
-    volumes:
-      - ./docFiles/talaria-1.yaml:/etc/talaria/talaria.yaml
-  talaria-2:
-    <<: *talaria
-    ports:
-      - 6220:6220
-      - 6221:6221
-      - 6222:6222
-      - 6223:6223
-      - 6224:6224
-    volumes:
-      - ./docFiles/talaria-2.yaml:/etc/talaria/talaria.yaml
 
 # Mark rdkb-simulator Services
   simulator: &simulator
@@ -126,6 +140,7 @@ services:
       - talaria-1
       - talaria-2
       - petasos
+      - themis
     networks:
       - xmidt