harbor/make/docker-compose.notary.tpl

version: '2'
services:
  core:
    networks:
      - harbor-notary
  proxy:
    networks:
      - harbor-notary
  postgresql:
    networks:
      harbor-notary:
        aliases:
          - harbor-db
  notary-server:
    image: goharbor/notary-server-photon:__notary_version__
    container_name: notary-server
    restart: always
    cap_drop:
      - ALL
    cap_add:
      - SETGID
      - SETUID
    networks:
      - notary-sig
      - harbor-notary
    dns_search: .
    volumes:
      - ./common/config/notary:/etc/notary:z
    env_file:
      - ./common/config/notary/server_env
    depends_on:
      - postgresql
      - notary-signer
    logging:
      driver: "syslog"
      options:  
        syslog-address: "tcp://127.0.0.1:1514"
        tag: "notary-server"
  notary-signer:
    image: goharbor/notary-signer-photon:__notary_version__
    container_name: notary-signer
    restart: always
    cap_drop:
      - ALL
    cap_add:
      - SETGID
      - SETUID
    networks:
      harbor-notary:
      notary-sig:
        aliases:
          - notarysigner
    dns_search: .
    volumes:
      - ./common/config/notary:/etc/notary:z
    env_file:
      - ./common/config/notary/signer_env
    depends_on:
      - postgresql
    logging:
      driver: "syslog"
      options:  
        syslog-address: "tcp://127.0.0.1:1514"
        tag: "notary-signer"
networks:
  harbor-notary:
    external: false
  notary-sig:
    external: false
deploy notary within Harbor 2017-02-20 11:40:05 +01:00			`version: '2'`
			`services:`
Rename harbor-ui to harbor-core 1. Update the nginx.conf 2. Update Makefile 3. Update docker-compose 4. Update image name 5. Rename folder ui to core 6. Change the harbor-ui's package name to core 7. Remove unused static file on harbor-core 8. Remove unused code for harbor-portal Signed-off-by: Qian Deng <dengq@vmware.com> 2018-09-12 08:38:29 +02:00			`core:`
deploy notary within Harbor 2017-02-20 11:40:05 +01:00			`networks:`
			`- harbor-notary`
			`proxy:`
			`networks:`
			`- harbor-notary`
Fully migrate harbor db to postgresql (#4689) * Merge harbor db to postgres 2018-04-27 11:27:12 +02:00			`postgresql:`
			`networks:`
			`harbor-notary:`
			`aliases:`
			`- harbor-db`
deploy notary within Harbor 2017-02-20 11:40:05 +01:00			`notary-server:`
Batch update docker image namespace to goharbor This commit is to move all the images of harbor from vmware to goharbor 2018-08-10 08:16:59 +02:00			`image: goharbor/notary-server-photon:__notary_version__`
deploy notary within Harbor 2017-02-20 11:40:05 +01:00			`container_name: notary-server`
set restart policy of notary to 'always' 2017-04-27 11:07:38 +02:00			`restart: always`
Drop all capabilities when starting containers Drop all capabilities when starting containers by modifying docker-compose files to avoid security issue Signed-off-by: Wenkai Yin <yinw@vmware.com> 2018-11-22 09:21:04 +01:00			`cap_drop:`
			`- ALL`
			`cap_add:`
			`- SETGID`
			`- SETUID`
deploy notary within Harbor 2017-02-20 11:40:05 +01:00			`networks:`
			`- notary-sig`
			`- harbor-notary`
Use docker official way to unset dns search According docker official document, use 'dns_search= .' in the docker compose file if you don't wish to set the search domain. https://docs.docker.com/v17.09/engine/userguide/networking/default_network/configure-dns/ Signed-off-by: wang yan <wangyan@vmware.com> 2018-10-17 08:27:25 +02:00			`dns_search: .`
deploy notary within Harbor 2017-02-20 11:40:05 +01:00			`volumes:`
Do not call `chown` to config files This commit fixes a recently discovered issue on Kubernetes #4496 It make necessary to avoid calling `chown` to config files during the bootstrap of the containers. 2018-04-08 17:43:45 +02:00			`- ./common/config/notary:/etc/notary:z`
Fully migrate harbor db to postgresql (#4689) * Merge harbor db to postgres 2018-04-27 11:27:12 +02:00			`env_file:`
			`- ./common/config/notary/server_env`
deploy notary within Harbor 2017-02-20 11:40:05 +01:00			`depends_on:`
Fully migrate harbor db to postgresql (#4689) * Merge harbor db to postgres 2018-04-27 11:27:12 +02:00			`- postgresql`
deploy notary within Harbor 2017-02-20 11:40:05 +01:00			`- notary-signer`
notary containers should use syslog as log driver 2017-03-08 10:24:32 +01:00			`logging:`
			`driver: "syslog"`
			`options:`
			`syslog-address: "tcp://127.0.0.1:1514"`
			`tag: "notary-server"`
deploy notary within Harbor 2017-02-20 11:40:05 +01:00			`notary-signer:`
Batch update docker image namespace to goharbor This commit is to move all the images of harbor from vmware to goharbor 2018-08-10 08:16:59 +02:00			`image: goharbor/notary-signer-photon:__notary_version__`
deploy notary within Harbor 2017-02-20 11:40:05 +01:00			`container_name: notary-signer`
set restart policy of notary to 'always' 2017-04-27 11:07:38 +02:00			`restart: always`
Drop all capabilities when starting containers Drop all capabilities when starting containers by modifying docker-compose files to avoid security issue Signed-off-by: Wenkai Yin <yinw@vmware.com> 2018-11-22 09:21:04 +01:00			`cap_drop:`
			`- ALL`
			`cap_add:`
			`- SETGID`
			`- SETUID`
deploy notary within Harbor 2017-02-20 11:40:05 +01:00			`networks:`
Fully migrate harbor db to postgresql (#4689) * Merge harbor db to postgres 2018-04-27 11:27:12 +02:00			`harbor-notary:`
deploy notary within Harbor 2017-02-20 11:40:05 +01:00			`notary-sig:`
			`aliases:`
			`- notarysigner`
Use docker official way to unset dns search According docker official document, use 'dns_search= .' in the docker compose file if you don't wish to set the search domain. https://docs.docker.com/v17.09/engine/userguide/networking/default_network/configure-dns/ Signed-off-by: wang yan <wangyan@vmware.com> 2018-10-17 08:27:25 +02:00			`dns_search: .`
deploy notary within Harbor 2017-02-20 11:40:05 +01:00			`volumes:`
Do not call `chown` to config files This commit fixes a recently discovered issue on Kubernetes #4496 It make necessary to avoid calling `chown` to config files during the bootstrap of the containers. 2018-04-08 17:43:45 +02:00			`- ./common/config/notary:/etc/notary:z`
deploy notary within Harbor 2017-02-20 11:40:05 +01:00			`env_file:`
			`- ./common/config/notary/signer_env`
			`depends_on:`
Fully migrate harbor db to postgresql (#4689) * Merge harbor db to postgres 2018-04-27 11:27:12 +02:00			`- postgresql`
notary containers should use syslog as log driver 2017-03-08 10:24:32 +01:00			`logging:`
			`driver: "syslog"`
			`options:`
			`syslog-address: "tcp://127.0.0.1:1514"`
			`tag: "notary-signer"`
deploy notary within Harbor 2017-02-20 11:40:05 +01:00			`networks:`
			`harbor-notary:`
			`external: false`
			`notary-sig:`
Fully migrate harbor db to postgresql (#4689) * Merge harbor db to postgres 2018-04-27 11:27:12 +02:00			`external: false`