Merge branch 'master' of https://github.com/rancher/community-catalog
This commit is contained in:
Jêrome Rx
@@ -2,7 +2,7 @@ mongo-cluster:
|
||||
restart: always
|
||||
environment:
|
||||
MONGO_SERVICE_NAME: mongo-cluster
|
||||
tty: true
|
||||
CATTLE_SCRIPT_DEBUG: ${debug}
|
||||
entrypoint: /opt/rancher/bin/entrypoint.sh
|
||||
command:
|
||||
- --replSet
|
||||
@@ -17,11 +17,10 @@ mongo-cluster:
|
||||
mongo-base:
|
||||
restart: always
|
||||
net: none
|
||||
tty: true
|
||||
labels:
|
||||
io.rancher.container.hostname_override: container_name
|
||||
io.rancher.container.start_once: true
|
||||
image: rancher/mongodb-conf:v0.1.0
|
||||
image: rancher/mongodb-conf:v0.1.1
|
||||
stdin_open: true
|
||||
entrypoint: /bin/true
|
||||
mongo-datavolume:
|
||||
|
||||
@@ -11,6 +11,12 @@
|
||||
type: "string"
|
||||
required: true
|
||||
default: "rs0"
|
||||
- variable: debug
|
||||
description: "Enable Debug log for Mongo containers"
|
||||
label: "Debug"
|
||||
type: "string"
|
||||
required: false
|
||||
default: ""
|
||||
mongo-cluster:
|
||||
scale: 3
|
||||
retain_ip: true
|
||||
|
||||
@@ -2,7 +2,7 @@ mongo-cluster:
|
||||
restart: always
|
||||
environment:
|
||||
MONGO_SERVICE_NAME: mongo-cluster
|
||||
tty: true
|
||||
CATTLE_SCRIPT_DEBUG: ${debug}
|
||||
entrypoint: /opt/rancher/bin/entrypoint.sh
|
||||
command:
|
||||
- --replSet
|
||||
@@ -17,11 +17,10 @@ mongo-cluster:
|
||||
mongo-base:
|
||||
restart: always
|
||||
net: none
|
||||
tty: true
|
||||
labels:
|
||||
io.rancher.container.hostname_override: container_name
|
||||
io.rancher.container.start_once: true
|
||||
image: rancher/mongodb-conf:v0.1.0
|
||||
image: rancher/mongodb-conf:v0.1.1
|
||||
stdin_open: true
|
||||
entrypoint: /bin/true
|
||||
mongo-datavolume:
|
||||
|
||||
@@ -11,6 +11,12 @@
|
||||
type: "string"
|
||||
required: true
|
||||
default: "rs0"
|
||||
- variable: debug
|
||||
description: "Enable Debug log for Mongo containers"
|
||||
label: "Debug"
|
||||
type: "string"
|
||||
required: false
|
||||
default: ""
|
||||
mongo-cluster:
|
||||
scale: 3
|
||||
retain_ip: true
|
||||
|
||||
@@ -2,7 +2,7 @@ mongo-cluster:
|
||||
restart: always
|
||||
environment:
|
||||
MONGO_SERVICE_NAME: mongo-cluster
|
||||
tty: true
|
||||
CATTLE_SCRIPT_DEBUG: ${debug}
|
||||
entrypoint: /opt/rancher/bin/entrypoint.sh
|
||||
command:
|
||||
- --replSet
|
||||
@@ -18,12 +18,11 @@ mongo-cluster:
|
||||
mongo-base:
|
||||
restart: always
|
||||
net: none
|
||||
tty: true
|
||||
labels:
|
||||
io.rancher.scheduler.affinity:host_label: ${host_label}
|
||||
io.rancher.container.hostname_override: container_name
|
||||
io.rancher.container.start_once: true
|
||||
image: rancher/mongodb-conf:v0.1.0
|
||||
image: rancher/mongodb-conf:v0.1.1
|
||||
stdin_open: true
|
||||
entrypoint: /bin/true
|
||||
mongo-datavolume:
|
||||
|
||||
@@ -18,6 +18,12 @@
|
||||
Example: 'database'
|
||||
required: false
|
||||
type: "string"
|
||||
- variable: debug
|
||||
description: "Enable Debug log for Mongo containers"
|
||||
label: "Debug"
|
||||
type: "string"
|
||||
required: false
|
||||
default: ""
|
||||
mongo-cluster:
|
||||
scale: 3
|
||||
retain_ip: true
|
||||
|
||||
@@ -19,7 +19,7 @@
|
||||
type: "int"
|
||||
- variable: ssh_port
|
||||
description: "ssh port to access gogs cli"
|
||||
label: "Ssh Port"
|
||||
label: "SSH Port"
|
||||
required: true
|
||||
default: "222"
|
||||
type: "int"
|
||||
@@ -27,7 +27,7 @@
|
||||
description: "mysql root password"
|
||||
label: "Mysql Password"
|
||||
required: true
|
||||
default: "password"
|
||||
type: "string"
|
||||
default: ""
|
||||
type: "password"
|
||||
|
||||
gogs:
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
# NeuVector
|
||||
|
||||
### Info:
|
||||
|
||||
NeuVector provides continuous network security for application containers.
|
||||
|
||||
Deploy the NeuVector containers to protect running containers from violations, threats, and vulnerabilities. NeuVector also detects host and container privilege escalations / break outs.
|
||||
|
||||
NeuVector can be deployed on greenfield or brownfield (already running) application environments.
|
||||
|
||||
|
||||
### Usage:
|
||||
|
||||
Contact <a style="color:red;font-weight:bold" href="mailto:info@neuvector.com?Subject=Rancher%20Catalog" target="_top">info@neuvector.com</a> with your Docker Hub Id so we can add you to our private registry.
|
||||
After we confirm that you have been added, you can select the NeuVector catalog to deploy the Allinone and Enforcer containers.
|
||||
|
||||
The Manager default port is 8443 using HTTPS for logging in to the console.
|
||||
The default username is admin and password is admin. After successful login, the admin user should update the account with a more secure password.
|
||||
@@ -0,0 +1,35 @@
|
||||
allinone:
|
||||
image: neuvector/allinone:0.9
|
||||
container_name: neuvector.allinone
|
||||
restart: always
|
||||
privileged: true
|
||||
environment:
|
||||
- affinity:com.myself.name!=neuvector
|
||||
- CLUSTER_JOIN_ADDR=allinone
|
||||
ports:
|
||||
- 8443:8443
|
||||
volumes:
|
||||
- /var/run/docker.sock:/var/run/docker.sock
|
||||
- /proc:/host/proc:ro
|
||||
- /sys/fs/cgroup:/host/cgroup:ro
|
||||
labels:
|
||||
com.myself.name: "neuvector"
|
||||
io.rancher.scheduler.affinity:host_label: ${NV_ALLINONE_LABEL}
|
||||
io.rancher.container.hostname_override: container_name
|
||||
enforcer:
|
||||
image: neuvector/enforcer:0.9
|
||||
container_name: neuvector.enforcer
|
||||
restart: always
|
||||
privileged: true
|
||||
environment:
|
||||
- affinity:com.myself.name!=neuvector
|
||||
- CLUSTER_JOIN_ADDR=allinone
|
||||
volumes:
|
||||
- /var/run/docker.sock:/var/run/docker.sock
|
||||
- /proc:/host/proc:ro
|
||||
- /sys/fs/cgroup/:/host/cgroup/:ro
|
||||
labels:
|
||||
com.myself.name: "neuvector"
|
||||
io.rancher.scheduler.global: true
|
||||
io.rancher.scheduler.affinity:host_label_ne: ${NV_ALLINONE_LABEL}
|
||||
io.rancher.container.hostname_override: container_name
|
||||
@@ -0,0 +1,11 @@
|
||||
.catalog:
|
||||
name: "NeuVector"
|
||||
version: "v0.9"
|
||||
description: "Container Security Solution"
|
||||
questions:
|
||||
- variable: "NV_ALLINONE_LABEL"
|
||||
label: "Allinone Host label"
|
||||
description: "Specify a host label here that can be used to deploy the NeuVector AllInOne container, the NeuVector enforcer container will be deployed on any other hosts. Eg: neuvector.allinone_node=true (you could then add the label 'neuvector.allinone_node=true' to one host to use as management node)."
|
||||
type: "string"
|
||||
default: "neuvector.allinone_node=true"
|
||||
required: true
|
||||
Binary file not shown.
|
After Width: | Height: | Size: 7.1 KiB |
@@ -0,0 +1,6 @@
|
||||
name: NeuVector
|
||||
description: |
|
||||
Container Application Security
|
||||
version: v0.9
|
||||
category: Security
|
||||
maintainer: neuvector support <support@neuvector.com>
|
||||
@@ -1,9 +1,15 @@
|
||||
# [1.1.2-GA Documentation](http://docs.portworx.com)
|
||||
# [1.1.6-GA Documentation](http://docs.portworx.com)
|
||||
|
||||
This catalog will spin up Portworx on your hosts.
|
||||
There are 2 configuration variables required:
|
||||
1. **cluster_id**: Arbitrary Cluster ID, common to all nodes in PX cluster. (Can use https://www.uuidgenerator.net for example)
|
||||
2. **kvdb**: A Key-value database that is accessible to all nodes in the PX cluster. (Ex: etcd://10.0.0.42:4001)
|
||||
3. **header_dir**: The directory where kernel headers can be found. Default is "/usr/src". For CoreOS use "/lib/modules"
|
||||
4. **use_disks**: The list of devices to use as part of the cluster fabric. (Ex: '-a' for all disks, or '-s /dev/sdX' for each individual disk)
|
||||
|
||||
**NOTE**: px-dev requires at least one non-root disk be attached to the running image (i.e local disk or iscsi).
|
||||
|
||||
**NOTE**: If using Docker prior to 1.12, then you **MUST** remove 'MOUNT=shared' from the docker.service file and restart the docker service.
|
||||
|
||||
For detailed documentation, please visit [docs.portworx.com](http://docs.portworx.com)
|
||||
|
||||
|
||||
@@ -3,7 +3,7 @@ portworx:
|
||||
io.rancher.container.create_agent: 'true'
|
||||
io.rancher.scheduler.global: 'true'
|
||||
io.rancher.container.pull_image: 'always'
|
||||
image: portworx/px-dev
|
||||
image: portworx/px-dev:edge
|
||||
container_name: px
|
||||
ipc: host
|
||||
net: host
|
||||
@@ -11,13 +11,15 @@ portworx:
|
||||
environment:
|
||||
CLUSTER_ID: ${cluster_id}
|
||||
KVDB: ${kvdb}
|
||||
HDR_DIR: ${header_dir}
|
||||
USE_DISKS: ${use_disks}
|
||||
volumes:
|
||||
- /dev:/dev
|
||||
- /usr/src:/usr/src
|
||||
- ${header_dir}:${header_dir}
|
||||
- /run/docker/plugins:/run/docker/plugins
|
||||
- /var/lib/osd:/var/lib/osd:shared
|
||||
- /etc/pwx:/etc/pwx
|
||||
- /opt/pwx/bin:/export_bin:shared
|
||||
- /var/run/docker.sock:/var/run/docker.sock
|
||||
- /var/cores:/var/cores
|
||||
command: -c ${cluster_id} -k ${kvdb} -a -z -f
|
||||
command: -c ${cluster_id} -k ${kvdb} ${use_disks}
|
||||
|
||||
@@ -1,8 +1,8 @@
|
||||
.catalog:
|
||||
name: "Portworx"
|
||||
version: "1.1.2-2017-01-06-GA"
|
||||
version: "1.1.6-2017-02-08-GA"
|
||||
description: "Container Defined Storage for Docker"
|
||||
uuid: 352669-pwx-1.1.2
|
||||
uuid: 352669-pwx-1.1.6
|
||||
minimum_rancher_version: v0.56.0
|
||||
questions:
|
||||
- variable: cluster_id
|
||||
@@ -17,3 +17,15 @@
|
||||
type: "string"
|
||||
required: true
|
||||
default: ""
|
||||
- variable: use_disks
|
||||
description: "Cmdline args for disks to use. Ex: '-a' for all available, or '-s /dev/sdX' for each individual disk"
|
||||
label: "Use Disks"
|
||||
type: "string"
|
||||
required: true
|
||||
default: "-s /dev/xvdb"
|
||||
- variable: header_dir
|
||||
description: "Directory where kernel headers can be found. Default is '/usr/src'. For CoreOS use '/lib/modules'"
|
||||
label: "Headers Directory"
|
||||
type: "string"
|
||||
required: true
|
||||
default: "/usr/src"
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
name: px-dev
|
||||
description: |
|
||||
Software defined enterprise storage for Linux Containers.
|
||||
version: 1.1.2-2017-01-06-GA
|
||||
version: 1.1.6-2017-02-08-GA
|
||||
category: Storage
|
||||
|
||||
@@ -4,4 +4,4 @@
|
||||
|
||||
## Info
|
||||
* Easy setup with all needed data: `database_name`, `user`, `password`
|
||||
* Load Balancer used to forroward Postgress port for the external services.
|
||||
* Load Balancer used to forward Postgres port for the external services.
|
||||
|
||||
@@ -33,7 +33,9 @@ Traefik labels has to be added in your services, in order to get included in tra
|
||||
- false: the service will not be published
|
||||
- traefik.priority = <priority> # Override for frontend priority. 5 by default
|
||||
- traefik.protocol = < http | https > # Override the default http protocol
|
||||
- traefik.alias = < alias > # Alternate names to route rule. Multiple values separated by ",". WARNING: You could have collisions BE CAREFULL
|
||||
- traefik.sticky = < true | false > # Enable/disable sticky sessions to the backend
|
||||
- traefik.alias = < alias > # Alternate names to route rule. Multiple values separated by ",". traefik.domain is appended. WARNING: You could have collisions BE CAREFULL
|
||||
- traefik.alias.fqdn = < alias fqdn > # Alternate names to route rule. Multiple values separated by ",". traefik.domain must be defined but is not appended here.
|
||||
- traefik.domain = < domain.name > # Domain names to route rules. Multiple domains separated by ","
|
||||
- traefik.domain.regexp = < domain.regexp > # Domain name regexp rule. Multiple domains separated by ","
|
||||
- traefik.port = < port > # Port to expose throught traefik
|
||||
|
||||
@@ -33,7 +33,7 @@ traefik-conf:
|
||||
io.rancher.container.start_once: 'true'
|
||||
tty: true
|
||||
log_opt: {}
|
||||
image: rawmind/rancher-traefik:0.3.4-18
|
||||
image: rawmind/rancher-traefik:0.3.4-19
|
||||
net: none
|
||||
volumes:
|
||||
- /opt/tools
|
||||
|
||||
Reference in New Issue
Block a user