test: added CRLs directory

Author: fstagni

tests/CI/docker-compose.yml

@@ -1,6 +1,8 @@
 volumes:
   # Volume used to store the certificates of dirac
   certs_data:
+  # Volume used to store the crls of dirac
+  crls_data:
   # Volume used to store the config of diracx
   diracx-cs-store:
   # Volume used to store the pair of keys to sign the tokens
@@ -18,7 +20,13 @@ services:
     ports:
       - 3306:3306
     healthcheck:
-      test: ["CMD", "sh", "-c", "${MYSQL_ADMIN_COMMAND} ping -h localhost > /tmp/health.log 2>&1;"]
+      test:
+        [
+          "CMD",
+          "sh",
+          "-c",
+          "${MYSQL_ADMIN_COMMAND} ping -h localhost > /tmp/health.log 2>&1;",
+        ]
       timeout: 20s
       retries: 10
       start_period: 60s
@@ -33,7 +41,8 @@ services:
       - 9200:9200
     env_file: "${ES_VER}.env"
     healthcheck:
-      test: ["CMD", "curl", "-f", "-u", "elastic:changeme", "http://localhost:9200"]
+      test:
+        ["CMD", "curl", "-f", "-u", "elastic:changeme", "http://localhost:9200"]
       interval: 5s
       timeout: 2s
       retries: 15
@@ -53,7 +62,13 @@ services:
     depends_on:
       - iam-init-keystore
     healthcheck:
-      test: ["CMD", "curl", "-f", "http://localhost:8080/.well-known/openid-configuration"]
+      test:
+        [
+          "CMD",
+          "curl",
+          "-f",
+          "http://localhost:8080/.well-known/openid-configuration",
+        ]
       interval: 5s
       timeout: 2s
       retries: 15
@@ -116,6 +131,7 @@ services:
     container_name: dirac-init-certificates
     volumes:
       - certs_data:/ca/certs/
+      - crls_data:/ca/crl/
     entrypoint: |
       /entrypoint.sh
     pull_policy: always
@@ -146,6 +162,7 @@ services:
       nofile: 8192
     volumes:
       - certs_data:/ca/certs
+      - crls_data:/ca/crl/
       - diracx-cs-store:/cs_store
       - diracx-key-store:/keystore
     environment:
@@ -154,7 +171,6 @@ services:
     command: ["sleep", "infinity"] # This is necessary because of the issue described in https://github.com/moby/moby/issues/42275. What is added here is a hack/workaround.
     pull_policy: always
 
-
   dirac-client:
     platform: linux/amd64
     image: ${CI_REGISTRY_IMAGE}/${HOST_OS}-dirac
@@ -165,6 +181,7 @@ services:
       - dirac-server
     volumes:
       - certs_data:/ca/certs
+      - crls_data:/ca/crl/
     ulimits:
       nofile: 8192
     command: ["sleep", "infinity"] # This is necessary because of the issue described in https://github.com/moby/moby/issues/42275. What is added here is a hack/workaround.
@@ -180,6 +197,7 @@ services:
       - dirac-server
     volumes:
       - certs_data:/ca/certs
+      - crls_data:/ca/crl/
       - type: bind
         source: ${CVMFS_DIR}
         target: /cvmfs
@@ -195,7 +213,6 @@ services:
       start_period: 60s
     command: ["sleep", "infinity"] # This is necessary because of the issue described in https://github.com/moby/moby/issues/42275. What is added here is a hack/workaround.
 
-
   diracx-chmod:
     platform: linux/amd64
     image: ghcr.io/diracgrid/diracx/secret-generation:latest
@@ -210,7 +227,6 @@ services:
       bash -xc 'chmod -R o=u /keystore && chmod -R o=u /cs_store'
     pull_policy: always
 
-
   diracx-init-keystore:
     platform: linux/amd64
     image: ghcr.io/diracgrid/diracx/services:dev
@@ -308,7 +324,14 @@ services:
       /entrypoint.sh bash -xc 'uvicorn --factory diracx.routers:create_app --host=0.0.0.0'
 
     healthcheck:
-      test: ["CMD", "/entrypoint.sh", "python", "-c", "import requests; requests.get('http://localhost:8000/.well-known/openid-configuration').raise_for_status()"]
+      test:
+        [
+          "CMD",
+          "/entrypoint.sh",
+          "python",
+          "-c",
+          "import requests; requests.get('http://localhost:8000/.well-known/openid-configuration').raise_for_status()",
+        ]
       interval: 5s
       timeout: 2s
       retries: 15