[TECH] Fix Mongo dev generation and start (#26)

Co-authored-by: Makhtar DIAGNE <[email protected]>
ProgrammeVitam · Apr 15, 2020 · 84bb165 · 84bb165
1 parent 5cdf513
commit 84bb165
Show file tree

Hide file tree

Showing 59 changed files with 2,454 additions and 18 deletions.
diff --git a/tools/docker/mongo/ansible.cfg b/tools/docker/mongo/ansible.cfg
@@ -0,0 +1,13 @@
+
+[defaults]
+hash_behaviour = merge
+roles_path     = ../../../deployment/roles/
+filter_plugins =  ./../../../deployment/filter_plugins/
+#fact_caching_connection = ./tmp/facts_cache
+#fact_caching = jsonfile
+# The timeout is defined in seconds
+# This is 2 hours
+fact_caching_timeout = 7200
+
+[ssh_connection]
+pipelining = True
diff --git a/tools/docker/mongo/database_scripts/iam/1.0.0/security.populate_certificates_dev.js.j2 b/tools/docker/mongo/database_scripts/iam/1.0.0/security.populate_certificates_dev.js.j2
@@ -18,8 +18,8 @@ db.certificates.insert({
 
 {%- endmacro %}
 
-{{ insertCertififcate('{{playbook_dir}}/../pki/dev/certs/ui-identity/ui-identity.pem', 'ui_admin_identity_context') }}
-{{ insertCertififcate('{{playbook_dir}}/../pki/dev/certs/ui-portal/ui-portal.pem', 'ui_portal_context') }}
-{{ insertCertififcate('{{playbook_dir}}/../pki/dev/certs/cas-server/cas-server.pem', 'cas_context') }}
+{{ insertCertififcate('{{playbook_dir}}/pki/dev/certs/ui-identity/ui-identity.pem', 'ui_admin_identity_context') }}
+{{ insertCertififcate('{{playbook_dir}}/pki/dev/certs/ui-portal/ui-portal.pem', 'ui_portal_context') }}
+{{ insertCertififcate('{{playbook_dir}}/pki/dev/certs/cas-server/cas-server.pem', 'cas_context') }}
 
 print("END security.populate_certificates_ref.js");
diff --git a/tools/docker/mongo/database_scripts/iam/1.0.0/security.populate_certificates_ref.js.j2 b/tools/docker/mongo/database_scripts/iam/1.0.0/security.populate_certificates_ref.js.j2
@@ -18,9 +18,9 @@ db.certificates.insert({
 
 {%- endmacro %}
 
-{{ insertCertififcate('{{playbook_dir}}/pki/certs/ui-identity/ui-identity.pem', 'ui_identity_context') }}
-{{ insertCertififcate('{{playbook_dir}}/pki/certs/ui-portal/ui-portal.pem', 'ui_portal_context') }}
-{{ insertCertififcate('{{playbook_dir}}/pki/certs/cas-server/cas-server.pem', 'cas_context') }}
-{{ insertCertififcate('{{playbook_dir}}/pki/certs/ui-identity-admin/ui-identity-admin.pem', 'ui_admin_identity_context') }}
+{{ insertCertififcate('{{playbook_dir}}/certs/ui-identity/ui-identity.pem', 'ui_identity_context') }}
+{{ insertCertififcate('{{playbook_dir}}/certs/ui-portal/ui-portal.pem', 'ui_portal_context') }}
+{{ insertCertififcate('{{playbook_dir}}/certs/cas-server/cas-server.pem', 'cas_context') }}
+{{ insertCertififcate('{{playbook_dir}}/certs/ui-identity-admin/ui-identity-admin.pem', 'ui_admin_identity_context') }}
 
 print("END security.populate_certificates_ref.js");
diff --git a/tools/docker/mongo/database_scripts_templater.yml b/tools/docker/mongo/database_scripts_templater.yml
@@ -0,0 +1,16 @@
+#
+#
+#
+
+- hosts: localhost
+  gather_facts: false
+  vars:
+    deployLocalhost: true
+    compute_templates: true
+    mongod_source_template_dir_current: "{{ mongod_source_template_dir }}"
+    mongod_output_dir_entry_point_current: "{{ mongod_output_dir_entry_point }}"
+    docker_data_path: "/vitamui/scripts/mongo/data/last/" # script path inside Docker image (special usecase)
+  roles:
+    - vitamui-database-scripts-templater
+
+
diff --git a/tools/docker/mongo/hosts b/tools/docker/mongo/hosts
@@ -0,0 +1,6 @@
+#
+# Host file for vitamui deployement
+#
+
+# VITAMUI Hosts
+localhost           ansible_host=127.0.0.1      ip_admin=127.0.0.1   ip_service=127.0.0.1   ansible_connection=local    ansible_become=false
diff --git a/tools/docker/mongo/mongo_vars_dev.yml b/tools/docker/mongo/mongo_vars_dev.yml
@@ -4,7 +4,8 @@ mongodb_vitamuiScripts_version:
   - "1.0.0"
   - "1.0.1"
 
-mongod_source_template_dir:  "{{lookup('env','PWD')}}/../tools/docker/mongo/database_scripts/"
+mongod_source_template_dir:  "{{lookup('env','PWD')}}/database_scripts/"
+mongod_output_dir_entry_point: "{{lookup('env','PWD')}}/mongo-entrypoint"
 
 # New way with templating
 # Scripts load order. Mandatory for templating. Any files that don't match the pattern won't
@@ -30,6 +31,52 @@ mongo_files_excluded:
 
 # Variables for users
 
+vitamui_platform_informations:
+  name: "system_customer"
+  description: "System Customer"
+  company_name: "system company"
+  default_email_domain: "change-it.fr"
+  email_domains: "change-it.fr"
+  default_password: '$2a$10$5X2kf8hP52sA6HKe2t2vm.ulwx9bs3HI/QT/tg1k5/fQu0WFtSoUW' # Change-it0!
+  address:
+    street: change-it
+    zip_code: change-it
+    city: change-it
+    country: change-it
+  proof_tenant: 3
+  cas_tenant: -1
+  first_customer_tenant: 9
+
+
+# Mongo database creation:
+mongod_databases:
+  mongo_db_admin:
+    db: admin
+    user: "{{ mongod_dbuser_admin }}"
+    pwd:  "{{ mongod_dbpwd_admin }}"
+    roles:  [{ role: "userAdminAnyDatabase", db: "admin" }, { role: "backup", db: "admin" }, { role: "restore", db: "admin" }, { role: "dbAdminAnyDatabase", db: "admin" }, { role: "readWriteAnyDatabase", db: "admin" }]
+
+  mongo_db_security:
+    db: security
+    user: "{{ mongod_dbuser_security }}"
+    # defined in vault
+    pwd:  "{{ mongod_dbpwd_security }}"
+    roles: [{ role: "readWrite", db: "security" }]
+
+  mongo_db_iam:
+    db: iam
+    # defined in vault
+    user: "{{ mongod_dbuser_iam }}"
+    # defined in vault
+    pwd: "{{ mongod_dbpwd_iam }}"
+    roles: [{ role: "readWrite", db: "iam" }]
+
+  mongo_db_cas:
+    db: cas
+    user: "{{ mongod_dbuser_cas }}"
+    # defined in vault
+    pwd: "{{ mongod_dbpwd_cas }}"
+    roles: [{ role: "readWrite", db: "cas" }]
 
 # DATABASES USERS
 mongod_dbuser_admin: mongod_dbuser_admin
@@ -66,15 +113,21 @@ vitamui_security_contexts:
 cas_services_configs:
 
   ui_portal:
+    name: "Portal Application"
     serviceId: "^https://.*.vitamui.com:9000.*"
+    logoutType : "FRONT_CHANNEL"
     logoutUrl: "https://dev.vitamui.com:9000/logout"
 
   ui_identity:
+    name: "Identity Access Management Application"
     serviceId: "^https://.*.vitamui.com:9001.*"
+    logoutType : "FRONT_CHANNEL"
     logoutUrl: "https://dev.vitamui.com:9001/logout"
 
   ui_identity_admin:
+    name: "Identity Admin Access Management Application"
     serviceId: "^https://.*.vitamui.com:9001.*"
+    logoutType : "FRONT_CHANNEL"
     logoutUrl: "https://dev.vitamui.com:9001/logout"
 
   mobile:

diff --git a/tools/docker/mongo/pki/dev/certs/cas-server/cas-server.crt b/tools/docker/mongo/pki/dev/certs/cas-server/cas-server.crt
@@ -0,0 +1,132 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            0c:cb:fc:c3:a6:3f:21:c5:68:83:e3:fd:5d:2a:ab:17
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=fr, ST=idf, L=paris, O=vitamui, OU=authorities, CN=ca_root_vitamui
+        Validity
+            Not Before: Jan 14 14:01:48 2020 GMT
+            Not After : Jan 13 14:01:48 2023 GMT
+        Subject: C=fr, ST=idf, L=paris, O=vitamui, CN=dev.vitamui.com
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                RSA Public-Key: (4096 bit)
+                Modulus:
+                    00:b6:0e:97:ae:f5:54:8a:0c:a6:bd:2a:55:d1:53:
+                    9f:33:96:0b:06:f1:ed:56:e9:7d:2c:9c:7b:4b:7f:
+                    bf:e9:61:06:9f:e2:de:c2:a0:24:e5:f8:5d:8b:0b:
+                    78:a2:3f:e1:36:20:42:24:6e:83:d0:26:e2:b4:4d:
+                    42:05:fe:25:0f:5c:08:e7:98:34:25:c7:bb:85:72:
+                    ef:4e:c9:7a:7e:45:36:90:6a:59:6c:79:20:53:61:
+                    04:fb:d5:df:3f:6a:9a:be:e1:64:c9:80:41:d0:b1:
+                    75:ec:2e:ef:e9:1f:77:af:53:8d:6b:31:07:e5:b5:
+                    8d:d1:ec:a2:56:d3:db:04:2a:92:70:ef:e2:32:b5:
+                    eb:13:fd:63:5a:5e:f5:48:24:8c:e4:bd:ab:aa:10:
+                    09:dc:b0:ab:c3:98:8f:7b:2c:47:b7:8a:47:4a:16:
+                    75:72:33:99:80:3b:f6:c9:e4:88:ff:12:c4:9e:1d:
+                    f2:e9:00:a5:91:1c:ac:77:fa:89:42:74:6c:42:8e:
+                    34:77:98:a9:a2:2c:60:76:3b:5a:76:be:61:96:e7:
+                    39:1f:85:91:09:53:f2:28:70:e1:fe:25:fb:42:22:
+                    b3:6c:c2:51:b0:1c:31:7f:cb:cf:d8:e7:9c:89:0f:
+                    a4:3f:d8:87:7f:a3:8c:f3:3d:6c:62:70:6b:85:9e:
+                    0f:d9:72:fc:6d:65:67:7c:c2:c4:52:97:ef:97:ff:
+                    c0:e4:af:9b:47:20:52:77:93:4b:e6:a0:cb:8b:46:
+                    97:31:2e:9a:29:98:35:90:b4:26:11:78:df:84:61:
+                    73:ce:3b:68:6d:7d:84:54:51:53:1f:29:e6:b8:9d:
+                    87:f4:27:d1:71:fd:c3:bb:cd:64:a9:e2:d7:17:aa:
+                    6f:bb:2e:65:6a:4f:0d:3c:e0:3e:b2:2e:18:9e:1c:
+                    b6:5e:3c:99:4d:5c:66:d6:60:4a:b9:31:c9:59:08:
+                    bb:ae:4a:07:29:9b:68:d7:db:65:16:d4:76:8c:51:
+                    71:f1:11:9e:e4:21:f0:e5:99:ac:88:5c:64:ca:a4:
+                    b4:ea:b3:76:bf:06:03:3c:37:7a:12:12:5a:fe:fd:
+                    4a:5e:b6:30:f4:ef:53:ec:a0:6b:5e:fa:e4:fa:b1:
+                    26:29:c4:49:2b:6d:1b:d8:47:ae:19:8d:a3:35:08:
+                    d2:69:d6:8e:38:cf:d8:bb:b7:64:f7:ab:b0:a7:49:
+                    74:6f:4b:f3:3f:f5:f6:94:bb:3d:8f:6d:2a:d4:f7:
+                    c2:ea:23:c0:1e:dd:f4:04:bf:ca:ff:a1:40:4d:5e:
+                    bc:f8:bb:3f:fe:cf:bb:b8:f8:0a:cf:35:db:c2:f6:
+                    c3:83:84:44:9f:5c:74:40:82:93:5e:15:4f:e3:ac:
+                    47:da:d9
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            Netscape Comment: 
+                Certificat SSL VITAMUI
+            X509v3 Subject Key Identifier: 
+                B0:F6:E9:18:BB:B3:00:CE:99:BF:7D:0F:F3:DB:59:54:80:EC:1B:8F
+            X509v3 Authority Key Identifier: 
+                keyid:0D:42:D1:01:69:B1:6B:65:E1:AF:B4:00:37:89:2E:62:1C:5D:C3:FC
+                DirName:/C=fr/ST=idf/L=paris/O=vitamui/OU=authorities/CN=ca_root_vitamui
+                serial:0C:CB:FC:C3:A6:3F:21:C5:68:83:E3:FD:5D:2A:AB:16
+
+            X509v3 Issuer Alternative Name: 
+                <EMPTY>
+
+            X509v3 Basic Constraints: critical
+                CA:FALSE
+    Signature Algorithm: sha256WithRSAEncryption
+         79:3d:b6:fc:7f:40:b4:37:b8:47:cb:7a:ea:00:40:39:60:3f:
+         14:a3:55:42:bb:83:19:01:90:4d:44:18:f3:33:26:59:fe:66:
+         4e:90:88:f5:ec:2d:9f:ab:3d:53:9b:59:54:e6:d2:f7:7e:ae:
+         ae:e1:05:90:6b:14:8b:dc:1a:d4:eb:4a:b8:9b:48:2f:e9:a0:
+         bb:95:ac:38:88:7f:2d:32:c5:62:8e:37:66:21:3d:d2:ad:9f:
+         f3:d7:8f:b0:22:d1:fc:70:c3:65:71:79:58:b1:25:7f:15:bc:
+         58:d6:e5:6e:a9:52:d5:ab:36:5b:b5:a2:e2:04:3c:9a:df:14:
+         2e:bb:69:55:3c:43:41:98:1c:a3:13:7e:87:9e:fd:4c:53:9a:
+         fb:81:c7:65:8a:71:c1:15:f2:12:4b:6f:9f:55:bc:1d:5c:fa:
+         e0:02:24:d8:c0:b2:49:87:35:4f:5d:20:e4:5e:c2:dc:f0:0f:
+         78:c7:72:df:9d:4a:0e:65:a7:73:c2:d4:84:27:52:54:25:0c:
+         6d:1f:39:55:57:2e:89:e9:ad:60:a3:b3:71:2d:a7:83:b3:d8:
+         d6:b6:6e:4e:b8:91:fe:92:27:ff:99:19:78:55:be:e1:9b:e5:
+         2f:0a:e2:6e:67:08:15:a0:33:5a:66:79:3d:b4:0d:d4:7a:fb:
+         73:5f:6f:5a:9f:8e:40:c3:80:79:03:4d:54:fc:d1:8b:52:2e:
+         9b:80:c4:5a:16:96:77:f4:06:3a:20:f4:91:6f:29:c7:17:1b:
+         70:45:7e:4b:a0:0d:22:91:db:bd:57:04:a9:c8:c4:11:55:8c:
+         8d:63:7b:09:06:67:ce:01:10:3f:54:73:d4:d8:df:fe:92:6a:
+         23:f7:92:2f:0a:4d:8c:6a:5e:8a:e8:f2:f3:59:d1:2c:8c:e0:
+         51:94:50:f5:ba:7d:48:06:62:d3:e6:29:ff:b7:4f:19:44:0d:
+         88:64:7e:ff:14:ab:73:7a:12:61:bc:dd:0e:3b:78:3e:da:b7:
+         74:a3:85:f4:31:b9:72:07:ae:98:2d:f6:93:75:bb:33:d4:fc:
+         e4:cf:1c:51:68:e1:09:eb:c5:8c:0e:d4:dd:b3:79:dc:f2:63:
+         a8:28:ca:b3:3b:46:18:03:86:3f:37:06:12:db:d0:d8:6a:f8:
+         85:56:fb:ff:50:ae:66:c2:b8:ab:54:2c:0a:4c:42:a5:d5:8f:
+         2b:02:b8:e1:f4:eb:f0:a1:d2:37:83:2e:a8:94:a7:fa:be:36:
+         ce:76:1f:02:9b:c6:02:3d:db:e1:70:e1:77:49:b5:eb:b9:ec:
+         37:30:7c:42:d6:f2:b6:ea:f3:eb:cb:ca:14:3e:4c:19:80:c6:
+         25:b5:31:47:ce:4b:7e:db
+-----BEGIN CERTIFICATE-----
+MIIGXDCCBESgAwIBAgIQDMv8w6Y/IcVog+P9XSqrFzANBgkqhkiG9w0BAQsFADBt
+MQswCQYDVQQGEwJmcjEMMAoGA1UECAwDaWRmMQ4wDAYDVQQHDAVwYXJpczEQMA4G
+A1UECgwHdml0YW11aTEUMBIGA1UECwwLYXV0aG9yaXRpZXMxGDAWBgNVBAMMD2Nh
+X3Jvb3Rfdml0YW11aTAeFw0yMDAxMTQxNDAxNDhaFw0yMzAxMTMxNDAxNDhaMFcx
+CzAJBgNVBAYTAmZyMQwwCgYDVQQIDANpZGYxDjAMBgNVBAcMBXBhcmlzMRAwDgYD
+VQQKDAd2aXRhbXVpMRgwFgYDVQQDDA9kZXYudml0YW11aS5jb20wggIiMA0GCSqG
+SIb3DQEBAQUAA4ICDwAwggIKAoICAQC2Dpeu9VSKDKa9KlXRU58zlgsG8e1W6X0s
+nHtLf7/pYQaf4t7CoCTl+F2LC3iiP+E2IEIkboPQJuK0TUIF/iUPXAjnmDQlx7uF
+cu9OyXp+RTaQallseSBTYQT71d8/apq+4WTJgEHQsXXsLu/pH3evU41rMQfltY3R
+7KJW09sEKpJw7+IytesT/WNaXvVIJIzkvauqEAncsKvDmI97LEe3ikdKFnVyM5mA
+O/bJ5Ij/EsSeHfLpAKWRHKx3+olCdGxCjjR3mKmiLGB2O1p2vmGW5zkfhZEJU/Io
+cOH+JftCIrNswlGwHDF/y8/Y55yJD6Q/2Id/o4zzPWxicGuFng/ZcvxtZWd8wsRS
+l++X/8Dkr5tHIFJ3k0vmoMuLRpcxLpopmDWQtCYReN+EYXPOO2htfYRUUVMfKea4
+nYf0J9Fx/cO7zWSp4tcXqm+7LmVqTw084D6yLhieHLZePJlNXGbWYEq5MclZCLuu
+Sgcpm2jX22UW1HaMUXHxEZ7kIfDlmayIXGTKpLTqs3a/BgM8N3oSElr+/UpetjD0
+71PsoGte+uT6sSYpxEkrbRvYR64ZjaM1CNJp1o44z9i7t2T3q7CnSXRvS/M/9faU
+uz2PbSrU98LqI8Ae3fQEv8r/oUBNXrz4uz/+z7u4+ArPNdvC9sODhESfXHRAgpNe
+FU/jrEfa2QIDAQABo4IBDDCCAQgwJQYJYIZIAYb4QgENBBgWFkNlcnRpZmljYXQg
+U1NMIFZJVEFNVUkwHQYDVR0OBBYEFLD26Ri7swDOmb99D/PbWVSA7BuPMIGmBgNV
+HSMEgZ4wgZuAFA1C0QFpsWtl4a+0ADeJLmIcXcP8oXGkbzBtMQswCQYDVQQGEwJm
+cjEMMAoGA1UECAwDaWRmMQ4wDAYDVQQHDAVwYXJpczEQMA4GA1UECgwHdml0YW11
+aTEUMBIGA1UECwwLYXV0aG9yaXRpZXMxGDAWBgNVBAMMD2NhX3Jvb3Rfdml0YW11
+aYIQDMv8w6Y/IcVog+P9XSqrFjAJBgNVHRIEAjAAMAwGA1UdEwEB/wQCMAAwDQYJ
+KoZIhvcNAQELBQADggIBAHk9tvx/QLQ3uEfLeuoAQDlgPxSjVUK7gxkBkE1EGPMz
+Jln+Zk6QiPXsLZ+rPVObWVTm0vd+rq7hBZBrFIvcGtTrSribSC/poLuVrDiIfy0y
+xWKON2YhPdKtn/PXj7Ai0fxww2VxeVixJX8VvFjW5W6pUtWrNlu1ouIEPJrfFC67
+aVU8Q0GYHKMTfoee/UxTmvuBx2WKccEV8hJLb59VvB1c+uACJNjAskmHNU9dIORe
+wtzwD3jHct+dSg5lp3PC1IQnUlQlDG0fOVVXLonprWCjs3Etp4Oz2Na2bk64kf6S
+J/+ZGXhVvuGb5S8K4m5nCBWgM1pmeT20DdR6+3Nfb1qfjkDDgHkDTVT80YtSLpuA
+xFoWlnf0Bjog9JFvKccXG3BFfkugDSKR271XBKnIxBFVjI1jewkGZ84BED9Uc9TY
+3/6SaiP3ki8KTYxqXoro8vNZ0SyM4FGUUPW6fUgGYtPmKf+3TxlEDYhkfv8Uq3N6
+EmG83Q47eD7at3SjhfQxuXIHrpgt9pN1uzPU/OTPHFFo4QnrxYwO1N2zedzyY6go
+yrM7RhgDhj83BhLb0Nhq+IVW+/9QrmbCuKtULApMQqXVjysCuOH06/Ch0jeDLqiU
+p/q+Ns52HwKbxgI92+Fw4XdJteu57DcwfELW8rbq8+vLyhQ+TBmAxiW1MUfOS37b
+-----END CERTIFICATE-----
diff --git a/tools/docker/mongo/pki/dev/certs/cas-server/cas-server.jks b/tools/docker/mongo/pki/dev/certs/cas-server/cas-server.jks
diff --git a/tools/docker/mongo/pki/dev/certs/cas-server/cas-server.key b/tools/docker/mongo/pki/dev/certs/cas-server/cas-server.key
@@ -0,0 +1,54 @@
+-----BEGIN ENCRYPTED PRIVATE KEY-----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+-----END ENCRYPTED PRIVATE KEY-----
diff --git a/tools/docker/mongo/pki/dev/certs/cas-server/cas-server.pem b/tools/docker/mongo/pki/dev/certs/cas-server/cas-server.pem
@@ -0,0 +1,36 @@
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
diff --git a/tools/docker/mongo/pki/dev/certs/cas-server/truststore.jks b/tools/docker/mongo/pki/dev/certs/cas-server/truststore.jks