diff --git a/examples/run/README.md b/examples/run/README.md index 4ced3fe4..c694c5d5 100644 --- a/examples/run/README.md +++ b/examples/run/README.md @@ -59,9 +59,9 @@ Within the subdirectory `docker` you'll find a basic sample consisting of: Usage: -1. ``docker-compose build`` -2. ``docker-compose up -d`` +1. ``docker compose build`` +2. ``docker compose up -d`` 3. Login at ``http://localhost:8080`` using ``camunda`` / ``camunda1!`` and use Cockpit / Tasklist / Admin. -4. Keycloak is available under ``https://localhost:9001``. Login with ``keycloak`` / ``keycloak1!``. +4. Keycloak is available under ``https://localhost:9001/auth``. Login with ``keycloak`` / ``keycloak1!``. **Beware**: This is not production ready, still using a H2 database for each of the instances, but might help you to understand the configuration basics. \ No newline at end of file diff --git a/examples/run/docker/Dockerfile b/examples/run/docker/Dockerfile index b6f4cb9b..e1780cd7 100644 --- a/examples/run/docker/Dockerfile +++ b/examples/run/docker/Dockerfile @@ -1,8 +1,8 @@ # Get Camunda-run as base image -FROM camunda/camunda-bpm-platform:run-7.18.0 +FROM camunda/camunda-bpm-platform:run-7.19.0 # The Version of the Keycloak Identity Provider to use -ENV IDENTITY_PROVIDER_VERSION=7.18.0 +ENV IDENTITY_PROVIDER_VERSION=7.19.0 # Add Keycloak Identity Provider USER camunda diff --git a/examples/run/docker/docker-compose.yml b/examples/run/docker/docker-compose.yml index 2da6a8c7..6703febf 100644 --- a/examples/run/docker/docker-compose.yml +++ b/examples/run/docker/docker-compose.yml @@ -3,13 +3,21 @@ version: '3.9' services: keycloak: - image: gunnaraccso/keycloak.server:14.0.0 + image: gunnaraccso/keycloak.server:21.1.1 restart: always env_file: - ./env/keycloak.env ports: - "9001:8443" - "9000:8080" + command: + - start-dev + - --features admin-fine-grained-authz + - --https-certificate-file=/keycloak/config/ssl/cert.pem + - --https-certificate-key-file=/keycloak/config/ssl/key.pem + volumes: + - ./ssl/cert.pem:/keycloak/config/ssl/cert.pem + - ./ssl/key.pem:/keycloak/config/ssl/key.pem camunda: build: . diff --git a/examples/run/docker/env/camunda.env b/examples/run/docker/env/camunda.env index a55b04f9..7ec815fc 100644 --- a/examples/run/docker/env/camunda.env +++ b/examples/run/docker/env/camunda.env @@ -1,6 +1,6 @@ KEYCLOAK_HOST=https://keycloak:8443 KEYCLOAK_REALM=camunda KEYCLOAK_CLIENT_ID=camunda-identity-service -KEYCLOAK_CLIENT_SECRET=cbee1434-7e4d-4d85-bab6-5944b427a3c0 +KEYCLOAK_CLIENT_SECRET=GBLb9KSRxmmo81SIGH2BWu3GEtrofvWo WAIT_FOR=keycloak:8080 WAIT_FOR_TIMEOUT=60 \ No newline at end of file diff --git a/examples/run/docker/env/keycloak.env b/examples/run/docker/env/keycloak.env index 6201d425..2d46f210 100644 --- a/examples/run/docker/env/keycloak.env +++ b/examples/run/docker/env/keycloak.env @@ -1,3 +1,5 @@ TZ=Europe/Berlin -KEYCLOAK_USER=keycloak -KEYCLOAK_PASSWORD=keycloak1! \ No newline at end of file +DB_VENDOR=h2 +KEYCLOAK_ADMIN=keycloak +KEYCLOAK_ADMIN_PASSWORD=keycloak1! +KC_HTTP_RELATIVE_PATH=/auth \ No newline at end of file diff --git a/examples/run/docker/ssl/cert.pem b/examples/run/docker/ssl/cert.pem new file mode 100644 index 00000000..538dddff --- /dev/null +++ b/examples/run/docker/ssl/cert.pem @@ -0,0 +1,22 @@ +-----BEGIN CERTIFICATE----- +MIIDmzCCAoOgAwIBAgIUZTfTJB+dQDYuGHPzKvzNSR2dc/IwDQYJKoZIhvcNAQEL +BQAwXDELMAkGA1UEBhMCREUxDzANBgNVBAgMBkhlc3NlbjESMBAGA1UEBwwJRGFy +bXN0YWR0MSgwJgYDVQQKDB9LZXljbG9hayBJZGVudGl0eSBQcm92aWRlciBUZXN0 +MCAXDTIzMDgyODEyMzcxNVoYDzIwNTEwMTEzMTIzNzE1WjBcMQswCQYDVQQGEwJE +RTEPMA0GA1UECAwGSGVzc2VuMRIwEAYDVQQHDAlEYXJtc3RhZHQxKDAmBgNVBAoM +H0tleWNsb2FrIElkZW50aXR5IFByb3ZpZGVyIFRlc3QwggEiMA0GCSqGSIb3DQEB +AQUAA4IBDwAwggEKAoIBAQDELUQ/KvLjskGsVFzXQouwmQnKLOv2IPHo74nGPpsn ++K3f1sD1NM429pGrXDC2BBXQxvhDhThHbeylXDgi4z0WSEbRWQVdcbB0ilCRe2ph +fgdqVyTherRNciYX8tujWhSH6wp9uCgcPO072syewxYkshwQEduzSUUIVwHcWrEM +l4R2Dr6EpYrb8bAm64YJ0xd91lKyLnFntTKegLkM+JpObK0cptWbhdObFn36HzEz +Uw41T57sYwCSlSjqr4wU3yyXXyJLrcVqtYJsaVQr293ktt0lsVSJAkVfj2qQBaQI +2XgRCETXNhJbm0AsYokPGugK9OFJom1v52LzaS7rUXM9AgMBAAGjUzBRMB0GA1Ud +DgQWBBQhkuIPoPbRRHnHJzgnaDFb5MjB1jAfBgNVHSMEGDAWgBQhkuIPoPbRRHnH +JzgnaDFb5MjB1jAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAz +Kl7yNaJswWDspdGEObd2U1Q1C3oD60Rit4Mg5VZD21frUbmcf0oyfFaF+Dpbvv1P +2ZwajGH+TcOUMyZiJgpaEQHCaGPS976AcjGmnuLoKuKSTV9CerEvbKEVj8hWSvbx +QsNQc586Gx63zKbStWS6u+hmwarSYXeD9qfcTELmRbMHIkCf/QjSlB2gNXCBcMs1 +KGgZVnv22W2MLE4kr/vphq3390CZNuukZS+dMQAJLfrFn1RzVmGyFLnEk68iXdlc +0E+Pa1DSTXVxBflhYlcdxtQn16xjewxOPHc7oY1k0N8J4CsEEAZgZ4iCptA8pyzz +FVZTAzOo/Ah0VJjgPOdh +-----END CERTIFICATE----- diff --git a/examples/run/docker/ssl/key.pem b/examples/run/docker/ssl/key.pem new file mode 100644 index 00000000..6e1bb3b3 --- /dev/null +++ b/examples/run/docker/ssl/key.pem @@ -0,0 +1,28 @@ +-----BEGIN PRIVATE KEY----- +MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQDELUQ/KvLjskGs +VFzXQouwmQnKLOv2IPHo74nGPpsn+K3f1sD1NM429pGrXDC2BBXQxvhDhThHbeyl +XDgi4z0WSEbRWQVdcbB0ilCRe2phfgdqVyTherRNciYX8tujWhSH6wp9uCgcPO07 +2syewxYkshwQEduzSUUIVwHcWrEMl4R2Dr6EpYrb8bAm64YJ0xd91lKyLnFntTKe +gLkM+JpObK0cptWbhdObFn36HzEzUw41T57sYwCSlSjqr4wU3yyXXyJLrcVqtYJs +aVQr293ktt0lsVSJAkVfj2qQBaQI2XgRCETXNhJbm0AsYokPGugK9OFJom1v52Lz +aS7rUXM9AgMBAAECggEAXI1aoE6b7u6fazUV4/yiOLvK0ZZl8GXUm2e/YUcSHkaF +iZAg0s6J54ZmbSj+VjERNcFZSUmlppVmyxD57wO0QznwJz5PeKl1bVX/8tL9+mbi +Crp4TOR+AfeznyLVmniaLRGnjm5+hev8pHtyhAhX/xIEiVRTiX8s0WVzHEmxM9XH +/5P4jcvtvk+8hFDYhGKH4GndRNaHDkBN2OmNEVOHwp9YZF1ZoNXRvZZ9PZw+u2Sj +ZQSrytgC3KRcujXSnCn2q9Tdc7ImcTjd1/0tE2X6njdkiV7LIR7kr0nF5okeXrRY +TtYzPMBw3pa8e+NAf7cZbr/BqHjOYnEvYtSaJWcjoQKBgQDxX9nDAu4ZEhf3mC4G +2gyk68iRsIw6OsjV5sqZnr3uBEcQvHYG7KhaWTS4kAlFlCykMnuuLwxu7tsBZtKz +ZcdhVbjbpMgS9/tLt4ZD9h6dP4qUC/mKf2YJsuOHhCSH9HbnqkQKOyu4KI7wBERr +RZ+PR9e0mdiSRouv59aTGfw0BQKBgQDQEFICjf3K6L8PzOJ3kUBuH/Hv0GEhM/dh +s0DunU+WORTiv09Z6bapdVi8OzwtlKxU6s7VWJnHFGD+2UefdovPexTS/PnudvBv +2JKCdOvTYFw+XRhq3PUqvbLwjEwb6D+Q0FyRBm/uSjOO64EQV1D+rigPGfaoowPv +no3SvKXf2QKBgHEnUQulnP7tx4SPt8wIfnL2AdGipSpLEomMJyA7Fai2IqaK4v2+ +BfJM7XU0ONSAcSkMbYSrk7WRjeOrU008gmpz6DQ3nH+f9xN41p2XjKSE/C8JKhOu +Q6R6U0XdQc7mYLOb00fEk2tCwDdumLB9NB7UPB/zG17/aU6ubZ4KSXwNAoGBAI0H +Yu9EW5Cb7lXBZIfzNp7unEkXD5834CijHhIfIwEKM/P2BM1HM37tgXYlGIc0zRLK +DeRip+lfENftYzTdX6sFHHpe6vIOQK8vNy+iHO8r05qZ86ELoEqWRqHyFuyboeqA +sR3EJT55oTTwwIzZApd+aLzDtoNb66ER8cO0ByMRAoGARLSQWHkAlN6O4iM+Aan6 +dK7yoVW513PM26HVa45HSAN4YTa8r20UKOogRD5ELSheu0tnTKo+nFfXQyLXVVyf +uRlng7BDm16BMOW7mo90XeHXR3Tuvh/tbzcPCEty+ztaoa5xJ3kkW/ewXH+pJpjP +OCu7oeRfUMFxVy4fpGTu1/k= +-----END PRIVATE KEY-----