keep/docker-compose.yml at main · evalops/keep · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
version: "3.9"

services:
  postgres:
    image: postgres:16
    environment:
      POSTGRES_USER: postgres
      POSTGRES_PASSWORD: postgres
      POSTGRES_DB: keep
    ports:
      - "5432:5432"
    volumes:
      - postgres-data:/var/lib/postgresql/data

  inventory:
    build:
      context: .
      dockerfile: services/inventory/Dockerfile
    environment:
      INVENTORY_DSN: postgres://postgres:postgres@postgres:5432/keep?sslmode=disable
    depends_on:
      - postgres

  opa:
    image: openpolicyagent/opa:latest
    command:
      - "run"
      - "--server"
      - "--config-file=/policies/config.yaml"
    volumes:
      - ./policies:/policies

  envoy:
    build:
      context: .
      dockerfile: envoy/Dockerfile
    ports:
      - "8080:8080"
    depends_on:
      - authz
      - app

  authz:
    build:
      context: .
      dockerfile: services/authz/Dockerfile
    environment:
      GOOGLE_CLIENT_ID: ${GOOGLE_CLIENT_ID}
      OPA_URL: http://opa:8181
      INVENTORY_API: http://inventory:8080
    depends_on:
      - opa
      - inventory

  app:
    build:
      context: .
      dockerfile: app/Dockerfile

volumes:
  postgres-data: {}