Add ISCIII Beacon Podman deployment

Author: magdasmat

.env.example

@@ -0,0 +1,93 @@
+# =============================================================================
+# Beacon v2 deployment
+# =============================================================================
+
+APP_NAME=beacon
+
+# Repository and persistent bind mounts
+APP_ROOT=/opt/containers_apps/beacon/beacon2-pi-api
+BIND_ROOT=/srv/containers/bind/beacon
+
+# Logs
+APP_LOG_DIR=/var/log/local/beacon/apps
+APACHE_LOG_DIR=/var/log/local/beacon/apache
+
+# Public endpoint
+PUBLIC_SCHEME=http
+PUBLIC_HOST=beaconaf-isciiiciber.isciiides.es
+PUBLIC_PORT=8443
+
+# Published ports
+BEACON_API_PORT=5050
+ADMIN_UI_PORT=3001
+TEMPLATE_UI_PORT=3000
+KEYCLOAK_PORT=8082
+KEYCLOAK_HTTPS_PORT=9991
+MONGO_PORT=8085
+MONGO_EXPRESS_PORT=8081
+
+# Container images
+TEMPLATE_UI_IMAGE=ghcr.io/ega-archive/beacon-template-ui:main
+MONGO_IMAGE=docker.io/library/mongo:8.2.3
+POSTGRES_IMAGE=docker.io/library/postgres:15
+KEYCLOAK_IMAGE=quay.io/keycloak/keycloak:18.0.0
+MONGO_EXPRESS_IMAGE=docker.io/library/mongo-express
+APACHE_IMAGE=registry.access.redhat.com/ubi9/httpd-24
+
+# Container names
+BEACON_CONTAINER=beaconprod
+ADMIN_UI_CONTAINER=admin-ui
+TEMPLATE_UI_CONTAINER=template-ui
+MONGO_CONTAINER=mongoprod
+POSTGRES_CONTAINER=idp-db
+KEYCLOAK_CONTAINER=idp
+MONGO_EXPRESS_CONTAINER=mongo-express
+APACHE_CONTAINER=apache-beacon
+
+# Rootless container users
+MONGO_UID=999
+MONGO_GID=999
+POSTGRES_UID=999
+POSTGRES_GID=999
+BEACON_UID=10001
+BEACON_GID=0
+APACHE_UID=1001
+APACHE_GID=0
+
+# MongoDB
+MONGO_DATABASE=beacon
+MONGO_AUTH_SOURCE=admin
+MONGO_ROOT_USERNAME=root
+MONGO_ROOT_PASSWORD=CHANGE_ME
+
+# PostgreSQL
+POSTGRES_DB=keycloak
+POSTGRES_USER=admin
+POSTGRES_PASSWORD=CHANGE_ME
+
+# Keycloak
+KEYCLOAK_ADMIN=admin
+KEYCLOAK_ADMIN_PASSWORD=CHANGE_ME
+KEYCLOAK_RELATIVE_PATH=/auth
+
+# Admin UI / Django
+SECRET_KEY=CHANGE_ME_GENERATE_A_STABLE_SECRET
+SQL_DATABASE=/data/db.sqlite3
+
+# Mongo seed data inside the MongoDB container
+
+# MongoDB connection used by Beacon API
+MONGO_HOST=mongo
+MONGO_INTERNAL_PORT=27017
+MONGO_CERTIFICATE=
+MONGO_CAFILE=
+MONGO_CLUSTER=false
+
+# Admin UI container user
+ADMIN_UI_UID=100
+ADMIN_UI_GID=101
+
+# Mongo Express web authentication
+
+# Public hostname for the API-only virtual host
+API_PUBLIC_HOST=apibeacon-isciiiciber.isciiides.es

.gitignore

@@ -13,4 +13,9 @@ beacon/connections/mongo/data/db/*
 adminui/adminclient/migrations/*
 adminui/node_modules
 *.vcf.bgz
-beacon/conf/conf.py
+beacon/conf/conf.py
+# Local certificates and persistent container data
+certs/
+beacon/connections/mongo/data/db/
+beacon/connections/mongo/data/configdb/
+postgres/data/

adminui/Dockerfile

@@ -1,54 +1,75 @@
-FROM python:3.13-slim-bookworm as builder
+FROM python:3.13-slim-bookworm AS builder
 
 RUN apt-get update \
-  && apt-get -y install g++ ca-certificates curl gnupg \
-  && apt-get clean
+    && apt-get install -y --no-install-recommends \
+        g++ \
+        ca-certificates \
+        curl \
+        gnupg \
+    && rm -rf /var/lib/apt/lists/*
 
 ENV NODE_MAJOR=20
-RUN mkdir -p /etc/apt/keyrings && \
-    curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg && \
-    echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_$NODE_MAJOR.x nodistro main" | tee /etc/apt/sources.list.d/nodesource.list && \
-    apt-get update && apt-get install nodejs -y
+
+RUN mkdir -p /etc/apt/keyrings \
+    && curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key \
+        | gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg \
+    && echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_${NODE_MAJOR}.x nodistro main" \
+        > /etc/apt/sources.list.d/nodesource.list \
+    && apt-get update \
+    && apt-get install -y nodejs \
+    && rm -rf /var/lib/apt/lists/*
 
 WORKDIR /usr/src/app
 
-ENV PYTHONDONTWRITEBYTECODE 1
-ENV PYTHONUNBUFFERED 1
+ENV PYTHONDONTWRITEBYTECODE=1
+ENV PYTHONUNBUFFERED=1
 
-COPY . .
-RUN pip install --upgrade pip && pip wheel --no-cache-dir --wheel-dir /usr/src/app/wheels -r requirements.txt
+COPY requirements.txt .
+
+RUN pip install --upgrade pip \
+    && pip wheel --wheel-dir /wheels -r requirements.txt
+
+RUN pip install --no-cache-dir /wheels/*
 
 COPY package.json package-lock.json ./
-RUN npm install
 
-RUN pip install -r requirements.txt && npm run tailwind:build && python manage.py collectstatic --noinput
+RUN npm ci
 
-FROM python:3.13-slim-bookworm
+COPY . .
 
-RUN apt-get update && apt-get upgrade -y && apt-get clean
+RUN npm run tailwind:build
 
-RUN mkdir -p /home/app
+RUN python manage.py collectstatic --noinput
 
-RUN addgroup --system app && adduser --system --group app
+FROM python:3.13-slim-bookworm
+
+RUN apt-get update \
+    && apt-get upgrade -y \
+    && rm -rf /var/lib/apt/lists/*
+
+RUN addgroup --system app \
+    && adduser --system --group app
 
 ENV HOME=/home/app
 ENV APP_HOME=/home/app/web
-RUN mkdir $APP_HOME
+
+RUN mkdir -p $APP_HOME
+
 WORKDIR $APP_HOME
 
-ENV PYTHONDONTWRITEBYTECODE 1
-ENV PYTHONUNBUFFERED 1
-ENV ENVIRONMENT prod
-ENV TESTING 0
-ENV PYTHONPATH $APP_HOME
+ENV PYTHONDONTWRITEBYTECODE=1
+ENV PYTHONUNBUFFERED=1
+ENV ENVIRONMENT=prod
+ENV TESTING=0
+ENV PYTHONPATH=$APP_HOME
 
-COPY --from=builder /usr/src/app/wheels /wheels
+COPY --from=builder /wheels /wheels
 COPY --from=builder /usr/src/app/requirements.txt .
-COPY --from=builder /usr/src/app/media $APP_HOME/media
-RUN pip install --upgrade pip
-RUN pip install --no-cache /wheels/*
 
-COPY . $APP_HOME
+RUN pip install --upgrade pip \
+    && pip install --no-cache-dir /wheels/*
+
+COPY --from=builder /usr/src/app $APP_HOME
 
 RUN chown -R app:app $HOME
 

adminui/adminbackend/forms/admin_settings.py

@@ -33,8 +33,9 @@ def __init__(self, *args, **kwargs):
         super(AdminForm, self).__init__(*args, **kwargs)
         # assign a (computed, I assume) default value to the choice field
         self.fields['Email'].widget.attrs['readonly'] = True
+
+        groups = Group.objects.all()
+        self.fields['Groups'].choices = [(group.name, group.name) for group in groups]
 
     Email = forms.EmailField()
-    groups = Group.objects.all()
-    groups_choices=[(group.name,group.name) for group in groups]
-    Groups = forms.ChoiceField(choices=groups_choices)
+    Groups = forms.ChoiceField(choices=[])