security-envelopes/docker-compose.jepsen.yml at main · SentinelOps-CI/security-envelopes · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
version: "3.8"

services:
  # Jepsen control node
  jepsen-control:
    image: jepsen/jepsen:latest
    container_name: jepsen-control
    hostname: jepsen-control
    environment:
      - SSH_AUTH_SOCK=/ssh-agent
    volumes:
      - ~/.ssh:/root/.ssh:ro
      - ./jepsen-results:/jepsen-results
      - ./jepsen-tests:/jepsen-tests
    working_dir: /jepsen
    command: tail -f /dev/null
    networks:
      - jepsen-net

  # Security Envelopes nodes for testing
  se-node1:
    image: security-envelopes:latest
    container_name: se-node1
    hostname: se-node1
    ports:
      - "8081:8080"
    environment:
      - POLICYENGINE_LOG_LEVEL=info
      - POLICYENGINE_TENANT_MODE=multi
    volumes:
      - ./examples/02_multi_tenant:/app/examples
    networks:
      - jepsen-net
    depends_on:
      - redis

  se-node2:
    image: security-envelopes:latest
    container_name: se-node2
    hostname: se-node2
    ports:
      - "8082:8080"
    environment:
      - POLICYENGINE_LOG_LEVEL=info
      - POLICYENGINE_TENANT_MODE=multi
    volumes:
      - ./examples/02_multi_tenant:/app/examples
    networks:
      - jepsen-net
    depends_on:
      - redis

  se-node3:
    image: security-envelopes:latest
    container_name: se-node3
    hostname: se-node3
    ports:
      - "8083:8080"
    environment:
      - POLICYENGINE_LOG_LEVEL=info
      - POLICYENGINE_TENANT_MODE=multi
    volumes:
      - ./examples/02_multi_tenant:/app/examples
    networks:
      - jepsen-net
    depends_on:
      - redis

  se-node4:
    image: security-envelopes:latest
    container_name: se-node4
    hostname: se-node4
    ports:
      - "8084:8080"
    environment:
      - POLICYENGINE_LOG_LEVEL=info
      - POLICYENGINE_TENANT_MODE=multi
    volumes:
      - ./examples/02_multi_tenant:/app/examples
    networks:
      - jepsen-net
    depends_on:
      - redis

  se-node5:
    image: security-envelopes:latest
    container_name: se-node5
    hostname: se-node5
    ports:
      - "8085:8080"
    environment:
      - POLICYENGINE_LOG_LEVEL=info
      - POLICYENGINE_TENANT_MODE=multi
    volumes:
      - ./examples/02_multi_tenant:/app/examples
    networks:
      - jepsen-net
    depends_on:
      - redis

  # Redis for shared state
  redis:
    image: redis:7-alpine
    container_name: jepsen-redis
    hostname: jepsen-redis
    ports:
      - "6379:6379"
    networks:
      - jepsen-net
    command: redis-server --appendonly yes

  # Chaos monkey for network partitions
  chaos-monkey:
    image: alpine:latest
    container_name: chaos-monkey
    hostname: chaos-monkey
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ./chaos-scripts:/chaos-scripts
    working_dir: /chaos-scripts
    networks:
      - jepsen-net
    command: tail -f /dev/null

networks:
  jepsen-net:
    driver: bridge
    ipam:
      config:
        - subnet: 172.20.0.0/16