docker-compose.yml

version: '2'
networks:
  back:
services:
  zookeeper:
    image: "alisw/zookeeper"
    ports:
    - "2181:2181"
  master:
    image: "alisw${DEVMODE}/mesos-master:1.0.1"
    environment:
      MESOS_MASTER_ZK: zk://zookeeper:2181/mesos
      MESOS_IP: 0.0.0.0
      LIBPROCESS_SSL_KEY_FILE: /etc/grid-security/hostkey.pem
      LIBPROCESS_SSL_CERT_FILE: /etc/grid-security/hostcert.pem
      LIBPROCESS_SSL_VERIFY_CERT: "false"
      LIBPROCESS_SSL_SUPPORT_DOWNGRADE: "true"
      LIBPROCESS_SSL_ENABLED: "true"
      SSL_KEY_FILE: /etc/grid-security/hostkey.pem
      SSL_CERT_FILE: /etc/grid-security/hostcert.pem
      SSL_VERIFY_CERT: "false"
      SSL_SUPPORT_DOWNGRADE: "true"
      SSL_ENABLED: "true"
    ports:
    - "5050:5050"
    command: sh -ex /run.sh
  slave:
    image: "alisw${DEVMODE}/mesos-slave:1.0.1"
    pid: host
    privileged: true
    volumes:
      - /sys:/sys
      - /var/run/docker.sock:/var/run/docker.sock
      - /var/lib/mesos
    environment:
      MESOS_MASTER_ZK: zk://zookeeper:2181/mesos
#      MESOS_IP: master
      LIBPROCESS_SSL_KEY_FILE: /etc/grid-security/hostkey.pem
      LIBPROCESS_SSL_CERT_FILE: /etc/grid-security/hostcert.pem
      LIBPROCESS_SSL_VERIFY_CERT: "false"
      LIBPROCESS_SSL_SUPPORT_DOWNGRADE: "true"
      LIBPROCESS_SSL_ENABLED: "true"
      SSL_KEY_FILE: /etc/grid-security/hostkey.pem
      SSL_CERT_FILE: /etc/grid-security/hostcert.pem
      SSL_VERIFY_CERT: "false"
      SSL_SUPPORT_DOWNGRADE: "true"
      SSL_ENABLED: "true"
      MESOS_SYSTEMD_ENABLE_SUPPORT: "false"
      MESOS_HOSTNAME: "localhost"
      MESOS_SWITCH_USER: "false"
      MESOS_DOCKER_MESOS_IMAGE: "alisw${DEVMODE}/mesos-slave:1.0.1"
      MESOS_ISOLATION: "posix/cpu,posix/mem,docker/runtime"
      MESOS_IMAGE_PROVIDERS: "docker"
      MESOS_EXTRA_CPUS: "1"
      MESOS_MODULES: "file://etc/mesos-slave/modules"
      MESOS_RESOURCE_ESTIMATOR: "org_apache_mesos_FixedResourceEstimator"
      MESOS_QOS_CONTROLLER: "org_apache_mesos_LoadQoSController"
      MESOS_LOGGING_LEVEL: "WARNING"
#      MESOS_LAUNCHER: posix
    command: sh -ex /run.sh
    ports:
    - "5051:5051"
  marathon:
    image: "alisw${DEVMODE}/marathon:1.3.5"
    environment:
      - MARATHON_ZK=zk://zookeeper:2181/marathon
      - MARATHON_MASTER=zk://zookeeper:2181/mesos
      - MESOS_MASTER=zk://zookeeper:2181/mesos
      - MARATHON_WEBUI_URL=http://marathon:8080
      - MARATHON_MESOS_ROLE=marathon
      - MARATHON_LOGGING_LEVEL=debug
    ports:
    - 8080:8080
    command: bash -ex /run.sh
  marathon-sso:
    image: "alisw${DEVMODE}/marathon:1.3.5"
    environment:
      - MARATHON_ZK=zk://zookeeper:2181/marathon
      - MARATHON_MASTER=zk://zookeeper:2181/mesos
      - MESOS_MASTER=zk://zookeeper:2181/mesos
      - MARATHON_WEBUI_URL=http://marathon:8080
      - MARATHON_MESOS_ROLE=marathon
      - MARATHON_LOGGING_LEVEL=debug
      - MARATHON_PLUGIN_DIR=/plugins
      - MARATHON_PLUGIN_CONF=/plugin-conf.json
      - MARATHON_SSO_ADMIN_GROUP=admins
      - MARATHON_SSO_VALID_GROUP_PREFIX=alice-marathon-
      - MARATHON_SSO_LOGIN_HEADER=ADFS_LOGIN
      - MARATHON_SSO_GROUP_HEADER=ADFS_GROUP
    volumes:
      - $HOME/work/active/marathon-sso/target/marathonsso-1.3.1.jar:/plugins/plugin.jar
    ports:
    - 8080:8080
    command: bash -ex /run.sh
  traefik:
    image: alisw/traefik
    volumes:
      - $PWD/traefik.toml:/etc/traefik/traefik.toml
    network_mode: host
  elasticsearch:
    image: alisw/elasticsearch:1.7
    ports:
    - "9200:9200"
  kibana:
    image: alisw/kibana:4.1.1
    networks:
      - default
    links:
      - elasticsearch
    ports:
      - "5601:5601"
    environment:
      "KIBANA_ES": "http://elasticsearch:9200"
  logstash:
    image: alisw/logstash
    environment:
  #    "MONALISA_HOST": "localhost"
  #    "MONALISA_PORT": "8889"
      "MESOS_HOST": master
      "DEBUG": 1
    volumes:
    - ./logstash:/config-ro/logstash
    networks:
      - back
  vault:
    image: alisw${DEVMODE}/vault:0.6.4
    privileged: true
    environment:
      "ZOOKEEPER_ADDRESS": "zk://zookeeper:2181"
      "DEBUG1": "0"
    network_mode: host
  mesos-dns:
    image: alisw${DEVMODE}/mesos-dns:0.5.2
    environment:
      "MESOS_DNS_ZK": "zk://localhost:2181/mesos"
      "MESOS_DNS_RESOLVERS": "8.8.8.8"
      "MESOS_MASTER_ZK": "localhost:5050"
      "MESOS_DNS_MASTERS": "localhost:5050"
    network_mode: host
    command: "/bin/bash -ex /run.sh"
  aurora-scheduler:
    image: "alisw${DEVMODE}/aurora-scheduler:0.16.0"
    privileged: true
    command: "/bin/bash -ex /run.sh"
    environment:
      "AURORA_MESOS_MASTERS": zk://zookeeper:2181/mesos
      "ZK_ENDPOINTS": zookeeper:2181
#      "AURORA_SHIRO_AFTER_AUTH_FILTER": ch.cern.shirosso.ShibbolethAuthenticationFilter
#      "AURORA_SHIRO_REALM_MODULES": ch.cern.shirosso.CERNSSORealmModule,INI_AUTHNZ
#      "AURORA_SHIRO_INI": /shiro.ini
#      "AURORA_ENABLE_API_SECURITY": "true"
#      "AURORA_HTTP_AUTHENTICATION_MECHANISM": BASIC
      "AURORA_REVOCABLE_RESOURCES": "true"
    volumes:
      - /Users/ktf/work/active/shirosso/target/classes:/usr/lib/aurora/lib/classes
      - ./shiro.ini:/shiro.ini
    ports:
    - 8081:8081
  aurora-observer:
    image: "alisw${DEVMODE}/aurora-executor:0.16.0"
    pid: host
    privileged: true
    command: /usr/bin/thermos_observer --mesos-root=/var/lib/mesos
    ports:
    - 1338:1338
    volumes_from:
    - slave
  jenkins:
    image: alisw/jenkins
    network_mode: host
    environment:
      "LIBPROCESS_IP": 192.168.99.100