-
Notifications
You must be signed in to change notification settings - Fork 2
/
Copy pathdocker-compose.yml
84 lines (84 loc) · 3.34 KB
/
docker-compose.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
version: '3'
services:
openldap:
build: ldap
container_name: ldap
ports:
- "10636:636"
- "10389:389"
environment:
- "LDAP_TLS_VERIFY_CLIENT=try"
zookeeper:
#image: confluentinc/cp-zookeeper
build: zookeeper
container_name: zookeeper
environment:
- "ZOOKEEPER_CLIENT_PORT=2181"
- "ZOOKEEPER_AUTH_PROVIDER_1=org.apache.zookeeper.server.auth.SASLAuthenticationProvider"
ports:
- "2181:2181"
kafka:
build: kafka
container_name: kafka
environment:
- "KAFKA_ZOOKEEPER_CONNECT=zookeeper:2181"
- "KAFKA_LISTENERS=DOCKERHOST://0.0.0.0:29092,SASLPLAINTEXT://0.0.0.0:9092,SASLINTERNAL://kafka:9093"
- "KAFKA_LISTENER_SECURITY_PROTOCOL_MAP=DOCKERHOST:SASL_PLAINTEXT,SASLPLAINTEXT:SASL_PLAINTEXT,SASLINTERNAL:SASL_PLAINTEXT"
- "KAFKA_ADVERTISED_LISTENERS=DOCKERHOST://host.docker.internal:29092,SASLPLAINTEXT://localhost:9092,SASLINTERNAL://kafka:9093"
- "KAFKA_PROTOCOL_NAME=DOCKERHOST,SASLPLAINTEXT,SASLINTERNAL"
- "KAFKA_LISTENER_NAME_DOCKERHOST_PLAIN_SASL_SERVER_CALLBACK_HANDLER_CLASS=no.nav.common.security.authentication.SimpleLDAPAuthentication"
- "KAFKA_LISTENER_NAME_SASLPLAINTEXT_PLAIN_SASL_SERVER_CALLBACK_HANDLER_CLASS=no.nav.common.security.authentication.SimpleLDAPAuthentication"
- "KAFKA_LISTENER_NAME_SASLINTERNAL_PLAIN_SASL_SERVER_CALLBACK_HANDLER_CLASS=no.nav.common.security.authentication.SimpleLDAPAuthentication"
- "KAFKA_AUTHORIZER_CLASS_NAME=no.nav.common.security.authorization.SimpleLDAPAuthorizer"
- "KAFKA_SUPER_USERS=User:igroup"
- "KAFKA_INTER_BROKER_LISTENER_NAME=SASLINTERNAL"
- "KAFKA_SASL_MECHANISM_INTER_BROKER_PROTOCOL=PLAIN"
- "KAFKA_SASL_ENABLED_MECHANISMS=PLAIN"
- "KAFKA_DEFAULT_REPLICATION_FACTOR=1"
- "KAFKA_OFFSETS_TOPIC_REPLICATION_FACTOR=1"
- "KAFKA_AUTO_CREATE_TOPICS_ENABLE=false"
ports:
- "9092:9092"
- "29092:29092"
depends_on:
- "zookeeper"
- "openldap"
kafkadminrest:
image: "navikt/kafka-adminrest"
ports:
- "8840:8080"
environment:
- "LDAP_CONNTIMEOUT=2000"
- "LDAP_USERATTRNAME=cn"
- "LDAP_AUTH_HOST=ldap"
- "LDAP_AUTH_PORT=636"
- "LDAP_SRVUSERBASE=OU=ServiceAccounts,DC=test,DC=local"
- "LDAP_GROUPBASE=OU=kafka,OU=AccountGroupNotInRemedy,OU=Groups,OU=NAV,OU=BusinessUnits,DC=test,DC=local"
- "LDAP_GROUPATTRNAME=cn"
- "LDAP_GRPMEMBERATTRNAME=member"
- "LDAP_USER=igroup"
- "LDAP_PASSWORD=itest"
- "KAFKA_BROKERS=kafka:9093"
- "KAFKA_CLIENTID=kafka-adminrest"
- "KAFKA_SECURITY=TRUE"
- "KAFKA_SECPROT=SASL_PLAINTEXT"
- "KAFKA_SASLMEC=PLAIN"
- "KAFKA_USER=igroup"
- "LDAP_HOST=ldap"
- "LDAP_PORT=636"
- "LDAP_AUTH_USERBASE=ou=Users,ou=NAV,dc=test,dc=local"
- "KAFKA_PASSWORD=itest"
schema-registry:
image: "confluentinc/cp-schema-registry:5.0.1"
depends_on:
- "zookeeper"
- "kafka"
ports:
- "8081:8081"
environment:
- "SCHEMA_REGISTRY_KAFKASTORE_BOOTSTRAP_SERVERS=SASL_PLAINTEXT://kafka:9093"
- "SCHEMA_REGISTRY_KAFKASTORE_SASL_MECHANISM=PLAIN"
- "SCHEMA_REGISTRY_KAFKASTORE_SASL_JAAS_CONFIG=org.apache.kafka.common.security.plain.PlainLoginModule required username=\"igroup\" password=\"itest\";"
- "SCHEMA_REGISTRY_KAFKASTORE_SECURITY_PROTOCOL=SASL_PLAINTEXT"
- "SCHEMA_REGISTRY_HOST_NAME=schema-registry"
- "SCHEMA_REGISTRY_LISTENERS=http://0.0.0.0:8081"