docker-compose-federation.yaml

---
version: "3.3"
services:
  # Sensu Gateway Backend
  #
  # Includes embedded database, API, event processor, and web app.
  #
  # See: https://docs.sensu.io/sensu-go/latest/reference/backend/
  sensu-gateway-backend:
    image: ${WORKSHOP_DOCKER_IMAGE}:${WORKSHOP_DOCKER_TAG}
    deploy:
      resources:
        limits:
          cpus: "1.0"
          memory: "2048M"
    labels:
    - sensu.io/workshop/role=sensu-backend
    ports:
    - 3000:3000
    - 8080:8080
    - 8081:8081
    environment:
    - SENSU_INTERNAL_ENVIRONMENT
    - SENSU_BACKEND_CLUSTER_ADMIN_USERNAME
    - SENSU_BACKEND_CLUSTER_ADMIN_PASSWORD
    - SENSU_BACKEND_CLUSTER_ADMIN_API_KEY
    - SENSU_WORKSHOP_ENV_SECRET
    - SUMOLOGIC_HTTP_SOURCE_URL
    - SENSU_BACKEND_JWT_PRIVATE_KEY_FILE=/etc/sensu/certs/jwt_private.pem
    - SENSU_BACKEND_JWT_PUBLIC_KEY_FILE=/etc/sensu/certs/jwt_public.pem
    volumes:
    - type: bind
      source: ./config/sensu/cluster/federated/certs/jwt_private.pem
      target: /etc/sensu/certs/jwt_private.pem
    - type: bind
      source: ./config/sensu/cluster/federated/certs/jwt_public.pem
      target: /etc/sensu/certs/jwt_public.pem
    - type: volume
      source: sensu_gateway_data
      target: /var/lib/sensu
    healthcheck:
      test: wget -q -O- http://127.0.0.1:8080/health
      interval: 10s
      timeout: 5s
      retries: 6
    command: >-
      sensu-backend start
      --log-level=warn
      --debug=false
  # Sensu Alpha Backend
  #
  # Includes embedded database, API, event processor, and web app.
  #
  # See: https://docs.sensu.io/sensu-go/latest/reference/backend/
  sensu-alpha-backend:
    image: ${WORKSHOP_DOCKER_IMAGE}:${WORKSHOP_DOCKER_TAG}
    deploy:
      resources:
        limits:
          cpus: "1.0"
          memory: "2048M"
    labels:
    - sensu.io/workshop/role=sensu-backend
    ports:
    - 3100:3000
    - 8180:8080
    - 8181:8081
    environment:
    - SENSU_INTERNAL_ENVIRONMENT
    - SENSU_BACKEND_CLUSTER_ADMIN_USERNAME
    - SENSU_BACKEND_CLUSTER_ADMIN_PASSWORD
    - SENSU_BACKEND_CLUSTER_ADMIN_API_KEY
    - SENSU_WORKSHOP_ENV_SECRET
    - SUMOLOGIC_HTTP_SOURCE_URL
    - SENSU_BACKEND_JWT_PRIVATE_KEY_FILE=/etc/sensu/certs/jwt_private.pem
    - SENSU_BACKEND_JWT_PUBLIC_KEY_FILE=/etc/sensu/certs/jwt_public.pem
    volumes:
    - type: bind
      source: ./config/sensu/cluster/federated/certs/jwt_private.pem
      target: /etc/sensu/certs/jwt_private.pem
    - type: bind
      source: ./config/sensu/cluster/federated/certs/jwt_public.pem
      target: /etc/sensu/certs/jwt_public.pem
    - type: volume
      source: sensu_alpha_data
      target: /var/lib/sensu
    healthcheck:
      test: wget -q -O- http://127.0.0.1:8080/health
      interval: 10s
      timeout: 5s
      retries: 6
    command: >-
      sensu-backend start
      --log-level=warn
      --debug=false
  # Sensu Beta Backend
  #
  # Includes embedded database, API, event processor, and web app.
  #
  # See: https://docs.sensu.io/sensu-go/latest/reference/backend/
  sensu-beta-backend:
    image: ${WORKSHOP_DOCKER_IMAGE}:${WORKSHOP_DOCKER_TAG}
    deploy:
      resources:
        limits:
          cpus: "1.0"
          memory: "2048M"
    labels:
    - sensu.io/workshop/role=sensu-backend
    ports:
    - 3200:3000
    - 8280:8080
    - 8281:8081
    environment:
    - SENSU_INTERNAL_ENVIRONMENT
    - SENSU_BACKEND_CLUSTER_ADMIN_USERNAME
    - SENSU_BACKEND_CLUSTER_ADMIN_PASSWORD
    - SENSU_BACKEND_CLUSTER_ADMIN_API_KEY
    - SENSU_WORKSHOP_ENV_SECRET
    - SUMOLOGIC_HTTP_SOURCE_URL
    - SENSU_BACKEND_JWT_PRIVATE_KEY_FILE=/etc/sensu/certs/jwt_private.pem
    - SENSU_BACKEND_JWT_PUBLIC_KEY_FILE=/etc/sensu/certs/jwt_public.pem
    volumes:
    - type: bind
      source: ./config/sensu/cluster/federated/certs/jwt_private.pem
      target: /etc/sensu/certs/jwt_private.pem
    - type: bind
      source: ./config/sensu/cluster/federated/certs/jwt_public.pem
      target: /etc/sensu/certs/jwt_public.pem
    - type: volume
      source: sensu_beta_data
      target: /var/lib/sensu
    healthcheck:
      test: wget -q -O- http://127.0.0.1:8080/health
      interval: 10s
      timeout: 5s
      retries: 6
    command: >-
      sensu-backend start
      --log-level=warn
      --debug=false



  # Sensu Agent
  #
  # Includes monitoring agent, local API, and local StatsD socket.
  #
  # See: https://docs.sensu.io/sensu-go/latest/reference/agent/
  sensu-beta-agent:
    image: ${WORKSHOP_DOCKER_IMAGE}:${WORKSHOP_DOCKER_TAG}
    deploy:
      resources:
        limits:
          memory: 256M
    labels:
    - sensu.io/workshop/role=sensu-agent
    ports:
    - ${SENSU_API_PORT}/tcp
    - ${SENSU_STATSD_METRICS_PORT}/udp
    environment:
    - SENSU_BACKEND_URL=ws://sensu-beta-backend:8081
    - SENSU_AGENT_PASSWORD
    - SENSU_NAMESPACE
    - SENSU_SUBSCRIPTIONS
    - SENSU_KEEPALIVE_INTERVAL=5
    - SENSU_KEEPALIVE_WARNING_THRESHOLD=10
    - SENSU_KEEPALIVE_CRITICAL_THRESHOLD=20
    - SENSU_API_HOST
    - SENSU_API_PORT
    - SENSU_STATSD_METRICS_HOST
    - SENSU_STATSD_METRICS_PORT
    volumes:
    - type: tmpfs
      target: /var/lib/sensu
    healthcheck:
      test: wget -q -O- http://127.0.0.1:3031/healthz
      interval: 10s
      timeout: 5s
      retries: 6
    command: >-
      sensu-agent start
      --name=beta-agent
      --log-level=warn
      --deregister=true
      --detect-cloud-provider
      --labels="environment=training,workshop_version=${WORKSHOP_SENSU_VERSION}"
      --statsd-event-handlers sumologic-metrics
      --password ${SENSU_AGENT_PASSWORD}
  # Sensu Alpha Agent
  #
  # Includes monitoring agent, local API, and local StatsD socket.
  #
  # See: https://docs.sensu.io/sensu-go/latest/reference/agent/
  sensu-alpha-agent:
    image: ${WORKSHOP_DOCKER_IMAGE}:${WORKSHOP_DOCKER_TAG}
    deploy:
      resources:
        limits:
          memory: 256M
    labels:
    - sensu.io/workshop/role=sensu-agent
    ports:
    - ${SENSU_API_PORT}/tcp
    - ${SENSU_STATSD_METRICS_PORT}/udp
    environment:
    - SENSU_BACKEND_URL=ws://sensu-alpha-backend:8081
    - SENSU_AGENT_PASSWORD
    - SENSU_NAMESPACE
    - SENSU_SUBSCRIPTIONS
    - SENSU_KEEPALIVE_INTERVAL=5
    - SENSU_KEEPALIVE_WARNING_THRESHOLD=10
    - SENSU_KEEPALIVE_CRITICAL_THRESHOLD=20
    - SENSU_API_HOST
    - SENSU_API_PORT
    - SENSU_STATSD_METRICS_HOST
    - SENSU_STATSD_METRICS_PORT
    volumes:
    - type: tmpfs
      target: /var/lib/sensu
    healthcheck:
      test: wget -q -O- http://127.0.0.1:3031/healthz
      interval: 10s
      timeout: 5s
      retries: 6
    command: >-
      sensu-agent start
      --name=alpha-agent
      --log-level=warn
      --deregister=true
      --detect-cloud-provider
      --labels="environment=training,workshop_version=${WORKSHOP_SENSU_VERSION}"
      --statsd-event-handlers sumologic-metrics
      --password ${SENSU_AGENT_PASSWORD}

  # Postgres Gateway
  #
  # Sensu Postgres data store.
  #
  # See: https://www.postgresql.org/docs/
  postgres:
    image: postgres:${POSTGRES_VERSION}
    deploy:
      resources:
        limits:
          memory: 1024M
    labels:
    - sensu.io/workshop/role=postgres
    ports:
    - 5432
    environment:
    - POSTGRES_USER
    - POSTGRES_PASSWORD
    - POSTGRES_DB
    - PGDATA=/var/lib/postgresql/data
    - SENSU_BACKEND_CLUSTER_ADMIN_USERNAME
    - SENSU_BACKEND_CLUSTER_ADMIN_PASSWORD
    - APP_DB_USERNAME
    - APP_DB_PASSWORD
    - APP_DB_NAME
    - MATTERMOST_DB
    - MATTERMOST_DB_USER
    - MATTERMOST_DB_PASSWORD
    volumes:
    - type: bind
      source: ./config/postgres/postgresql.conf
      target: /etc/postgresql/postgresql.conf
    - type: bind
      source: ./config/postgres/scripts/
      target: /docker-entrypoint-initdb.d/
    - type: volume
      source: postgres_data
      target: /var/lib/postgresql/data
    healthcheck:
      test: pg_isready -U ${POSTGRES_USER} -d ${POSTGRES_DB}
      interval: 10s
      timeout: 5s
      retries: 6

  # Sensu Asset Server
  #
  # Serve Sensu Assets over HTTP using NGINX.
  #
  # See: https://nginx.org/en/docs/
  sensu-assets:
    image: "nginx:${NGINX_VERSION}"
    deploy:
      resources:
        limits:
          memory: 64M
    labels:
    - sensu.io/workshop/role=asset-server
    ports:
    - 8000:80
    environment: []
    volumes:
    - type: bind
      source: ./config/nginx/nginx.conf
      target: /etc/nginx/nginx.conf
    - type: bind
      source: ./assets
      target: /usr/share/nginx/html/assets
    - type: volume
      source: user_data
      target: /usr/share/nginx/html/users
    healthcheck:
      test: curl -s -I -A "Docker health check (curl)" http://127.0.0.1:80/
      interval: 10s
      timeout: 5s
      retries: 6

  # Vault
  #
  # Includes a Vault "devmode" server for secrets management.
  #
  # See: https://www.vaultproject.io/docs
  vault:
    image: vault:${VAULT_VERSION}
    deploy:
      resources:
        limits:
          memory: 256M
    labels:
    - sensu.io/workshop/role=secrets-manager
    ports:
    - 8200:8200
    environment:
    - VAULT_DEV_ROOT_TOKEN_ID
    - VAULT_DEV_LISTEN_ADDRESS
    volumes:
      - type: volume
        source: workshop_data
        target: /vault/logs
        consistency: consistent
      - type: volume
        source: workshop_data
        target: /vault/file
        consistency: consistent
    healthcheck:
      test: wget -q -O- http://127.0.0.1:8200/v1/sys/health
      interval: 10s
      timeout: 5s
      retries: 6
    command: >-
      vault server -dev -log-level debug

  # Mattermost
  #
  # Includes a Mattermost deployment for workshop alerts and workshop chat.
  #
  # See: https://mattermost.com
  mattermost:
    image: mattermost/mattermost-team-edition:${MATTERMOST_VERSION}
    deploy:
      resources:
        limits:
          memory: 512M
    labels:
    - sensu.io/workshop/role=chat
    ports:
    - ${MATTERMOST_PORT}:8065
    extra_hosts:
    - "dockerhost:127.0.0.1"
    environment:
    - MATTERMOST_DB
    - MATTERMOST_DB_USER
    - MATTERMOST_DB_PASSWORD
    - MM_SQLSETTINGS_DRIVERNAME=postgres
    - MM_SQLSETTINGS_DATASOURCE=postgres://${MATTERMOST_DB_USER}:${MATTERMOST_DB_PASSWORD}@postgres/${MATTERMOST_DB}?sslmode=disable&connect_timeout=10
    - MM_TEAMSETTINGS_ENABLEOPENSERVER=false
    - MM_PASSWORDSETTINGS_MINIMUMLENGTH=5
    - MM_PASSWORDSETTINGS_LOWERCASE=true
    - MM_PASSWORDSETTINGS_UPPERCASE=false
    - MM_PASSWORDSETTINGS_NUMBER=false
    - MM_PASSWORDSETTINGS_SYMBOL=false
    volumes:
    - type: volume
      source: mattermost_config
      target: /mattermost/config
      consistency: consistent
    - type: volume
      source: mattermost_data
      target: /mattermost/data
      consistency: consistent
    - type: bind
      source: ./config/mattermost/profile.jpg
      target: /mattermost/profile.jpg
      consistency: consistent
    - type: volume
      source: mattermost_logs
      target: /mattermost/logs
      consistency: consistent
    - type: volume
      source: mattermost_plugins
      target: /mattermost/plugins
      consistency: consistent
    - type: volume
      source: mattermost_plugins_extra
      target: /mattermost/client/plugins
      consistency: consistent
    healthcheck:
      test: wget -q -O- http://127.0.0.1:8065/api/v4/system/ping
      interval: 10s
      timeout: 5s
      retries: 6

  # Demo App
  #
  # See: https://github.com/portertech/demo-app
  app:
    image: portertech/demo-app:latest
    deploy:
      resources:
        limits:
          memory: 64M
    labels:
    - sensu.io/workshop/role=app
    ports:
    - 9001-9005:8080/tcp
    environment:
    - DB_HOST=postgres
    - DB_PORT=${APP_DB_PORT}
    - DB_USER=${APP_DB_USERNAME}
    - DB_PASS=${APP_DB_PASSWORD}
    - DB_NAME=${APP_DB_NAME}
    volumes: []
    healthcheck:
      test: curl -XGET -I http://127.0.0.1:8080/healthz
      interval: 10s
      timeout: 5s
      retries: 6
    command: >-
      /usr/bin/demo-app

  # Configurator
  #
  # Configuration automation for user profile generation, using
  # a super light-weight "configuration management" stack:
  #
  # - curl
  # - jq
  # - envsubst (part of the gettext package)
  # - sensuctl
  # - docker & docker-compose
  #
  # See: ./scripts/
  configurator:
    build:
      context: ./
      dockerfile: Dockerfile
      args:
      - WORKSHOP_DOCKER_IMAGE
      - WORKSHOP_DOCKER_TAG
      - SENSU_CLI_VERSION
      - VAULT_VERSION
      - MATTERMOST_VERSION
    image: workshop:${SENSU_CLI_VERSION}-${WORKSHOP_VERSION}
    deploy:
      resources:
        limits:
          memory: 64M
      restart_policy:
        condition: on-failure
        max_attempts: ${WORKSHOP_SETUP_RETRIES}
    labels:
    - sensu.io/workshop/role=configurator
    ports: []
    environment:
    - SENSU_BACKEND_CLUSTER_ADMIN_USERNAME
    - SENSU_BACKEND_CLUSTER_ADMIN_PASSWORD
    - SENSU_BACKEND_CLUSTER_ADMIN_API_KEY
    - VAULT_ADDR
    - VAULT_TOKEN
    - WORKSHOP_HOSTNAME
    - WORKSHOP_SENSU_VERSION
    - WORKSHOP_SENSU_BUILD
    - WORKSHOP_DEFAULT_TRAINEE_PASSWORD
    - MATTERMOST_PORT
    - MATTERMOST_DB_USER
    - MATTERMOST_DB_PASSWORD
    - MATTERMOST_ADMIN_USER
    - MATTERMOST_ADMIN_PASSWORD
    volumes:
    - type: bind
      source: /var/run/docker.sock
      target: /var/run/docker.sock
    - type: bind
      source: ./.env
      target: /workshop/.env
    - type: bind
      source: ./${COMPOSE_FILE}
      target: /workshop/${COMPOSE_FILE}
    - type: bind
      source: ./docker
      target: /workshop/docker
    - type: bind
      source: ./scripts
      target: /usr/local/bin/scripts
    - type: bind
      source: ./users
      target: /workshop/users
    - type: bind
      source: ./config
      target: /workshop/config
      consistency: consistent
    - type: volume
      source: user_data
      target: /users
    command: |-
      init-federated-workshop

volumes:
  workshop_data:
    driver: local
  sensu_gateway_data:
    driver: local
  sensu_alpha_data:
    driver: local
  sensu_beta_data:
    driver: local
  etcd_data:
    driver: local
  postgres_data:
    driver: local
  user_data:
    driver: local
  elasticsearch_data:
    driver: local
  mattermost_config:
    driver: local
  mattermost_data:
    driver: local
  mattermost_logs:
    driver: local
  mattermost_plugins:
    driver: local
  mattermost_plugins_extra:
    driver: local