Adding question for ldap bind uid
This commit is contained in:
Kevin Broadwater
parent
f12fa22603
commit
18cf663bda
107
templates/registry/3/docker-compose.yml
Normal file
107
templates/registry/3/docker-compose.yml
Normal file
@ -0,0 +1,107 @@
|
|||||||
|
db:
|
||||||
|
image: mysql:5.7.10
|
||||||
|
environment:
|
||||||
|
MYSQL_DATABASE: portus
|
||||||
|
MYSQL_ROOT_PASSWORD: ${ROOTPASSWORD}
|
||||||
|
MYSQL_USER: portus
|
||||||
|
MYSQL_PASSWORD: ${DBPASSWORD}
|
||||||
|
tty: true
|
||||||
|
stdin_open: true
|
||||||
|
volumes:
|
||||||
|
- ${DIR}/db:/var/lib/mysql
|
||||||
|
labels:
|
||||||
|
registry.portus.db: 1
|
||||||
|
sslproxy:
|
||||||
|
image: nginx:1.9.9
|
||||||
|
tty: true
|
||||||
|
stdin_open: true
|
||||||
|
links:
|
||||||
|
- portus:portus
|
||||||
|
volumes:
|
||||||
|
- ${DIR}/certs:/etc/nginx/certs:ro
|
||||||
|
- ${DIR}/proxy:/etc/nginx/conf.d:ro
|
||||||
|
labels:
|
||||||
|
io.rancher.scheduler.affinity:container_label_soft: registry.portus.db=1
|
||||||
|
registry:
|
||||||
|
image: registry:2.3.1
|
||||||
|
environment:
|
||||||
|
REGISTRY_LOG_LEVEL: warn
|
||||||
|
REGISTRY_STORAGE_DELETE_ENABLED: true
|
||||||
|
REGISTRY_AUTH: token
|
||||||
|
REGISTRY_AUTH_TOKEN_REALM: https://${DOMAIN}:${PPORT}/v2/token
|
||||||
|
REGISTRY_AUTH_TOKEN_SERVICE: ${DOMAIN}:${RPORT}
|
||||||
|
REGISTRY_AUTH_TOKEN_ISSUER: ${DOMAIN}
|
||||||
|
REGISTRY_AUTH_TOKEN_ROOTCERTBUNDLE: /certs/registry.crt
|
||||||
|
REGISTRY_HTTP_TLS_CERTIFICATE: /certs/registry.crt
|
||||||
|
REGISTRY_HTTP_TLS_KEY: /certs/registry.key
|
||||||
|
REGISTRY_HTTP_SECRET: httpsecret
|
||||||
|
REGISTRY_NOTIFICATIONS_ENDPOINTS: >
|
||||||
|
- name: portus
|
||||||
|
url: http://portus:3000/v2/webhooks/events
|
||||||
|
timeout: 500
|
||||||
|
threshold: 5
|
||||||
|
backoff: 1
|
||||||
|
tty: true
|
||||||
|
stdin_open: true
|
||||||
|
links:
|
||||||
|
- portus:portus
|
||||||
|
volumes:
|
||||||
|
- ${DIR}/certs:/certs
|
||||||
|
- ${DIR}/data:/var/lib/registry
|
||||||
|
lb:
|
||||||
|
image: rancher/load-balancer-service
|
||||||
|
tty: true
|
||||||
|
stdin_open: true
|
||||||
|
ports:
|
||||||
|
- ${RPORT}:5000/tcp
|
||||||
|
- ${PPORT}:443/tcp
|
||||||
|
labels:
|
||||||
|
io.rancher.loadbalancer.target.sslproxy: ${PPORT}=443
|
||||||
|
io.rancher.loadbalancer.target.registry: ${RPORT}=5000
|
||||||
|
io.rancher.scheduler.global: 'true'
|
||||||
|
io.rancher.scheduler.affinity:not_host_label: lb=0
|
||||||
|
io.rancher.scheduler.affinity:not_host_label: registry.enabled=false
|
||||||
|
links:
|
||||||
|
- registry:registry
|
||||||
|
- sslproxy:sslproxy
|
||||||
|
portus:
|
||||||
|
image: sshipway/portus:2.0.5
|
||||||
|
environment:
|
||||||
|
PORTUS_MACHINE_FQDN: ${DOMAIN}
|
||||||
|
PORTUS_PRODUCTION_HOST: db
|
||||||
|
PORTUS_PRODUCTION_DATABASE: portus
|
||||||
|
PORTUS_PRODUCTION_USERNAME: portus
|
||||||
|
PORTUS_PRODUCTION_PASSWORD: ${DBPASSWORD}
|
||||||
|
PORTUS_GRAVATAR_ENABLED: true
|
||||||
|
PORTUS_KEY_PATH: /certs/registry.key
|
||||||
|
PORTUS_PASSWORD: ${DBPASSWORD}
|
||||||
|
PORTUS_SECRET_KEY_BASE: ${ROOTPASSWORD}
|
||||||
|
PORTUS_CHECK_SSL_USAGE_ENABLED: true
|
||||||
|
PORTUS_SMTP_ENABLED: false
|
||||||
|
PORTUS_LDAP_ENABLED: ${LDAP}
|
||||||
|
PORTUS_LDAP_HOSTNAME: ${LDAPHOST}
|
||||||
|
PORTUS_LDAP_PORT: ${LDAPPORT}
|
||||||
|
PORTUS_LDAP_METHOD: ${LDAPTLS}
|
||||||
|
PORTUS_LDAP_BASE: ${LDAPBASE}
|
||||||
|
PORTUS_LDAP_UID: ${LDAPBINDUID}
|
||||||
|
PORTUS_LDAP_AUTHENTICATION_ENABLED: ${LDAPBIND}
|
||||||
|
PORTUS_LDAP_AUTHENTICATION_BIND_DN: ${LDAPBINDDN}
|
||||||
|
PORTUS_LDAP_AUTHENTICATION_PASSWORD: ${LDAPBINDPASS}
|
||||||
|
PORTUS_LDAP_GUESS_EMAIL_ENABLED: true
|
||||||
|
PORTUS_LDAP_GUESS_EMAIL_ATTR: mail
|
||||||
|
PORTUS_PORT: ${PPORT}
|
||||||
|
REGISTRY_SSL_ENABLED: true
|
||||||
|
REGISTRY_HOSTNAME: ${DOMAIN}
|
||||||
|
REGISTRY_PORT: ${RPORT}
|
||||||
|
REGISTRY_NAME: Registry
|
||||||
|
tty: true
|
||||||
|
stdin_open: true
|
||||||
|
volumes:
|
||||||
|
- ${DIR}/certs:/certs
|
||||||
|
- ${DIR}/proxy:/etc/nginx/conf.d
|
||||||
|
links:
|
||||||
|
- db:db
|
||||||
|
labels:
|
||||||
|
io.rancher.container.pull_image: always
|
||||||
|
io.rancher.scheduler.affinity:container_label_soft: registry.portus.db=1
|
||||||
|
registry.portus.app: 1
|
||||||
118
templates/registry/3/rancher-compose.yml
Normal file
118
templates/registry/3/rancher-compose.yml
Normal file
@ -0,0 +1,118 @@
|
|||||||
|
.catalog:
|
||||||
|
name: "Registry"
|
||||||
|
version: "v2.3.1-3.1"
|
||||||
|
description: "Docker Registry"
|
||||||
|
uuid: registry-3
|
||||||
|
questions:
|
||||||
|
- variable: "RPORT"
|
||||||
|
label: "Registry Port"
|
||||||
|
description: "Port on which to run the registry service"
|
||||||
|
default: 5000
|
||||||
|
required: true
|
||||||
|
type: "int"
|
||||||
|
- variable: "PPORT"
|
||||||
|
label: "Admin Port"
|
||||||
|
description: "Port on which to run the SSL Portus administration service and API"
|
||||||
|
default: 443
|
||||||
|
required: true
|
||||||
|
type: "int"
|
||||||
|
- variable: "DBPASSWORD"
|
||||||
|
label: "DB Password"
|
||||||
|
description: "Password for Portus database access, must be 8 characters or longer"
|
||||||
|
required: true
|
||||||
|
default: password
|
||||||
|
type: "password"
|
||||||
|
- variable: "ROOTPASSWORD"
|
||||||
|
label: "DB Root Password"
|
||||||
|
description: "Root Password for MySQL database, must be 8 characters or longer. This is not normally used."
|
||||||
|
required: true
|
||||||
|
default: password
|
||||||
|
type: "password"
|
||||||
|
- variable: "DIR"
|
||||||
|
label: "Storage directory"
|
||||||
|
description: "Path of shared storage to use for registry, database, and certificates. This should be available on all hosts"
|
||||||
|
required: true
|
||||||
|
type: "string"
|
||||||
|
- variable: "DOMAIN"
|
||||||
|
label: "FQDN"
|
||||||
|
description: "FQDN of server. This should be the CN in the certificates and will be the URL to contact the Registry and Web interface"
|
||||||
|
required: true
|
||||||
|
type: "string"
|
||||||
|
- variable: "LDAP"
|
||||||
|
label: "LDAP Enabled"
|
||||||
|
description: "Enable LDAP authentication"
|
||||||
|
required: true
|
||||||
|
default: false
|
||||||
|
type: "boolean"
|
||||||
|
- variable: "LDAPHOST"
|
||||||
|
label: "LDAP Server"
|
||||||
|
description: "The FQDN of the LDAP server (if LDAP authentication is being used)"
|
||||||
|
required: false
|
||||||
|
default: "ldap.company.com"
|
||||||
|
type: "string"
|
||||||
|
- variable: "LDAPPORT"
|
||||||
|
label: "LDAP Server port"
|
||||||
|
description: "The port number on the LDAP server (if LDAP authentication is being used)"
|
||||||
|
required: false
|
||||||
|
default: 389
|
||||||
|
type: "int"
|
||||||
|
- variable: "LDAPTLS"
|
||||||
|
label: "LDAP TLS"
|
||||||
|
description: "The TLS option for the LDAP server (if LDAP authentication is being used)"
|
||||||
|
required: false
|
||||||
|
default: "starttls"
|
||||||
|
type: "enum"
|
||||||
|
options:
|
||||||
|
- starttls
|
||||||
|
- simple_tls
|
||||||
|
- plain
|
||||||
|
- variable: "LDAPBASE"
|
||||||
|
label: "LDAP Base DN"
|
||||||
|
description: "The Base DN for User lookups on the LDAP server (if LDAP authentication is being used)"
|
||||||
|
required: false
|
||||||
|
default: "ou=People,dc=company,dc=com"
|
||||||
|
type: "string"
|
||||||
|
- variable: "LDAPBIND"
|
||||||
|
label: "LDAP Bind enabled"
|
||||||
|
description: "Should an authenticated Bind be used to access LDAP (if LDAP authentication is being used)"
|
||||||
|
required: false
|
||||||
|
default: false
|
||||||
|
type: "boolean"
|
||||||
|
- variable: "LDAPBINDDN"
|
||||||
|
label: "LDAP Bind DN"
|
||||||
|
description: "The DN to use for binding to the LDAP server (if LDAP authentication is being used with Bind enabled)"
|
||||||
|
required: false
|
||||||
|
default: "ou=portus,dc=company,dc=com"
|
||||||
|
type: "string"
|
||||||
|
- variable: "LDAPBINDPASS"
|
||||||
|
label: "LDAP Bind Password"
|
||||||
|
description: "The password to use for binding to the LDAP server (if LDAP authentication is being used with Bind enabled)"
|
||||||
|
required: false
|
||||||
|
default: "password"
|
||||||
|
type: "password"
|
||||||
|
- variable: "LDAPBINDUID"
|
||||||
|
label: "LDAP Bind UID"
|
||||||
|
description: "The method of defining the user (if LDAP authentication is being used with Bind enabled)"
|
||||||
|
required: false
|
||||||
|
default: "cn"
|
||||||
|
type: "enum"
|
||||||
|
options:
|
||||||
|
- cn
|
||||||
|
- sAMAccountName
|
||||||
|
db:
|
||||||
|
scale: 1
|
||||||
|
sslproxy:
|
||||||
|
scale: 1
|
||||||
|
lb:
|
||||||
|
load_balancer_config:
|
||||||
|
haproxy_config: {}
|
||||||
|
health_check:
|
||||||
|
port: 42
|
||||||
|
interval: 2000
|
||||||
|
unhealthy_threshold: 3
|
||||||
|
healthy_threshold: 2
|
||||||
|
response_timeout: 2000
|
||||||
|
registry:
|
||||||
|
scale: 1
|
||||||
|
portus:
|
||||||
|
scale: 1
|
||||||
Loading…
x
Reference in New Issue
Block a user