Skip to content

Commit 2884bf8

Browse files
Klemens Hollinetz-SchneckKlemens Hollinetz-Schneck
Klemens Hollinetz-Schneck
authored and
Klemens Hollinetz-Schneck
committed
Update to camunda 8.7.2
1 parent 57fa791 commit 2884bf8

12 files changed

+1723
-0
lines changed

‎docker-compose-8.7-kafka/.env‎

Lines changed: 43 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,43 @@
1+
## Image versions ##
2+
# renovate: datasource=docker depName=camunda/connectors-bundle
3+
CAMUNDA_CONNECTORS_VERSION=8.7.2
4+
# renovate: datasource=docker depName=camunda/zeebe
5+
CAMUNDA_ZEEBE_VERSION=8.7.2
6+
# renovate: datasource=docker depName=camunda/identity
7+
CAMUNDA_IDENTITY_VERSION=8.7.1
8+
# renovate: datasource=docker depName=camunda/operate
9+
CAMUNDA_OPERATE_VERSION=8.7.2
10+
# renovate: datasource=docker depName=camunda/tasklist
11+
CAMUNDA_TASKLIST_VERSION=8.7.2
12+
# renovate: datasource=docker depName=camunda/optimize
13+
CAMUNDA_OPTIMIZE_VERSION=8.7.1
14+
# renovate: datasource=docker depName=camunda/web-modeler-restapi
15+
CAMUNDA_WEB_MODELER_VERSION=8.7.1
16+
# renovate: datasource=docker depName=elasticsearch
17+
ELASTIC_VERSION=8.17.4
18+
KEYCLOAK_SERVER_VERSION=26.1.4
19+
### KEYCLOAK_SERVER_VERSION=24.0.5
20+
21+
# renovate: datasource=docker depName=axllent/mailpit
22+
MAILPIT_VERSION=v1.20.7
23+
POSTGRES_VERSION=14.5-alpine
24+
HOST=localhost
25+
KEYCLOAK_HOST=localhost
26+
27+
## Configuration ##
28+
# By default the zeebe api is public, when setting this to `identity` a valid zeebe client token is required
29+
ZEEBE_AUTHENTICATION_MODE=identity
30+
ZEEBE_CLIENT_ID=zeebe
31+
ZEEBE_CLIENT_SECRET=zecret
32+
33+
# Set to 'true' to enable resource based authorizations for users and groups
34+
# This can be used to limit access for users or groups to view/update specific
35+
# processes and decisions in Operate and Tasklist
36+
RESOURCE_AUTHORIZATIONS_ENABLED=false
37+
38+
# Set to 'true' to enable multi-tenancy across all components
39+
# This requires use of identity for authentication
40+
#
41+
# ZEEBE_AUTHENTICATION_MODE=identity
42+
#
43+
MULTI_TENANCY_ENABLED=true

‎docker-compose-8.7-kafka/.optimize/environment-config.yaml‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
es:
2+
settings:
3+
index:
4+
number_of_replicas: 0
5+

‎docker-compose-8.7-kafka/.web-modeler/cluster-config-authentication-mode-identity.env‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
CAMUNDA_MODELER_CLUSTERS_0_AUTHENTICATION: oauth

‎docker-compose-8.7-kafka/.web-modeler/cluster-config-authentication-mode-none.env‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
CAMUNDA_MODELER_CLUSTERS_0_AUTHENTICATION: none

‎docker-compose-8.7-kafka/README.md‎

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
# Camunda 8 Self-Managed - Docker Compose
2+
3+
## Usage
4+
5+
For end user usage, please check the offical documentation of [Camunda 8 Self-Managed Docker Compose](https://docs.camunda.io/docs/8.7/self-managed/setup/deploy/local/docker-compose/).
6+
7+
## Changes
8+
9+
In this copy of Camunda platform 8.7.2 these changes have been applied:
10+
11+
1. All containers restart policy is set to `no`.
12+
1. Tenants enabled.
13+
1. Kafka 3.7.2 added, configured to listen on localhost:9092.
14+
1. Kafka exporter added to Zeebe.<br>
15+
For topic configuration see [exporter.yml](./exporters/exporter.yml).

‎docker-compose-8.7-kafka/connector-secrets.txt‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
# add secrets per line in the format NAME=VALUE
2+
# WARNING: ensure not to commit changes to this file

‎docker-compose-8.7-kafka/docker-compose-core.yaml‎

Lines changed: 167 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,167 @@
1+
# While the Docker images themselves are supported for production usage,
2+
# this docker-compose.yaml is designed to be used by developers to run
3+
# an environment locally. It is not designed to be used in production.
4+
# We recommend to use Kubernetes in production with our Helm Charts:
5+
# https://docs.camunda.io/docs/self-managed/platform-deployment/kubernetes-helm/
6+
# For local development, we recommend using KIND instead of `docker-compose`:
7+
# https://docs.camunda.io/docs/self-managed/platform-deployment/helm-kubernetes/guides/local-kubernetes-cluster/
8+
9+
# This is a lightweight configuration with Zeebe, Operate, Tasklist, and Elasticsearch
10+
# See docker-compose.yml for a configuration that also includes Optimize, Identity, and Keycloak.
11+
12+
services:
13+
14+
zeebe: # https://docs.camunda.io/docs/self-managed/platform-deployment/docker/#zeebe
15+
image: camunda/zeebe:${CAMUNDA_ZEEBE_VERSION}
16+
container_name: zeebe
17+
ports:
18+
- "26500:26500"
19+
- "9600:9600"
20+
- "8088:8080"
21+
environment: # https://docs.camunda.io/docs/self-managed/zeebe-deployment/configuration/environment-variables/
22+
- ZEEBE_BROKER_EXPORTERS_ELASTICSEARCH_CLASSNAME=io.camunda.zeebe.exporter.ElasticsearchExporter
23+
- ZEEBE_BROKER_EXPORTERS_ELASTICSEARCH_ARGS_URL=http://elasticsearch:9200
24+
# default is 1000, see here: https://github.com/camunda/zeebe/blob/main/exporters/elasticsearch-exporter/src/main/java/io/camunda/zeebe/exporter/ElasticsearchExporterConfiguration.java#L259
25+
- ZEEBE_BROKER_EXPORTERS_ELASTICSEARCH_ARGS_BULK_SIZE=1
26+
# allow running with low disk space
27+
- ZEEBE_BROKER_DATA_DISKUSAGECOMMANDWATERMARK=0.998
28+
- ZEEBE_BROKER_DATA_DISKUSAGEREPLICATIONWATERMARK=0.999
29+
- "JAVA_TOOL_OPTIONS=-Xms512m -Xmx512m"
30+
restart: unless-stopped
31+
healthcheck:
32+
test: [ "CMD-SHELL", "timeout 10s bash -c ':> /dev/tcp/127.0.0.1/9600' || exit 1" ]
33+
interval: 30s
34+
timeout: 5s
35+
retries: 5
36+
start_period: 30s
37+
volumes:
38+
- zeebe:/usr/local/zeebe/data
39+
networks:
40+
- camunda-platform
41+
depends_on:
42+
- elasticsearch
43+
44+
operate: # https://docs.camunda.io/docs/self-managed/platform-deployment/docker/#operate
45+
image: camunda/operate:${CAMUNDA_OPERATE_VERSION}
46+
container_name: operate
47+
ports:
48+
- "8081:8080"
49+
environment: # https://docs.camunda.io/docs/self-managed/operate-deployment/configuration/
50+
- CAMUNDA_OPERATE_ZEEBE_GATEWAYADDRESS=zeebe:26500
51+
- CAMUNDA_OPERATE_ELASTICSEARCH_URL=http://elasticsearch:9200
52+
- CAMUNDA_OPERATE_ZEEBEELASTICSEARCH_URL=http://elasticsearch:9200
53+
- CAMUNDA_OPERATE_CSRFPREVENTIONENABLED=false
54+
- management.endpoints.web.exposure.include=health
55+
- management.endpoint.health.probes.enabled=true
56+
healthcheck:
57+
test: [ "CMD-SHELL", "wget -O - -q 'http://localhost:9600/actuator/health/readiness'" ]
58+
interval: 30s
59+
timeout: 1s
60+
retries: 5
61+
start_period: 30s
62+
networks:
63+
- camunda-platform
64+
depends_on:
65+
- zeebe
66+
- elasticsearch
67+
68+
tasklist: # https://docs.camunda.io/docs/self-managed/platform-deployment/docker/#tasklist
69+
image: camunda/tasklist:${CAMUNDA_TASKLIST_VERSION}
70+
container_name: tasklist
71+
ports:
72+
- "8082:8080"
73+
environment: # https://docs.camunda.io/docs/self-managed/tasklist-deployment/configuration/
74+
- CAMUNDA_TASKLIST_ZEEBE_GATEWAYADDRESS=zeebe:26500
75+
- CAMUNDA_TASKLIST_ZEEBE_RESTADDRESS=http://zeebe:8080
76+
- CAMUNDA_TASKLIST_ELASTICSEARCH_URL=http://elasticsearch:9200
77+
- CAMUNDA_TASKLIST_ZEEBEELASTICSEARCH_URL=http://elasticsearch:9200
78+
- CAMUNDA_TASKLIST_CSRFPREVENTIONENABLED=false
79+
- management.endpoints.web.exposure.include=health
80+
- management.endpoint.health.probes.enabled=true
81+
healthcheck:
82+
test: [ "CMD-SHELL", "wget -O - -q 'http://localhost:9600/actuator/health/readiness'" ]
83+
interval: 30s
84+
timeout: 1s
85+
retries: 5
86+
start_period: 30s
87+
networks:
88+
- camunda-platform
89+
depends_on:
90+
- zeebe
91+
- elasticsearch
92+
93+
connectors: # https://docs.camunda.io/docs/components/integration-framework/connectors/out-of-the-box-connectors/available-connectors-overview/
94+
image: camunda/connectors-bundle:${CAMUNDA_CONNECTORS_VERSION}
95+
container_name: connectors
96+
ports:
97+
- "8085:8080"
98+
environment:
99+
- ZEEBE_CLIENT_BROKER_GATEWAY-ADDRESS=zeebe:26500
100+
- ZEEBE_CLIENT_SECURITY_PLAINTEXT=true
101+
- CAMUNDA_OPERATE_CLIENT_URL=http://operate:8080
102+
- CAMUNDA_OPERATE_CLIENT_USERNAME=demo
103+
- CAMUNDA_OPERATE_CLIENT_PASSWORD=demo
104+
- management.endpoints.web.exposure.include=health
105+
- management.endpoint.health.probes.enabled=true
106+
healthcheck:
107+
test: [ "CMD-SHELL", "curl -f http://localhost:8080/actuator/health/readiness" ]
108+
interval: 30s
109+
timeout: 1s
110+
retries: 5
111+
start_period: 30s
112+
env_file: connector-secrets.txt
113+
networks:
114+
- camunda-platform
115+
depends_on:
116+
- zeebe
117+
- operate
118+
119+
elasticsearch: # https://hub.docker.com/_/elasticsearch
120+
image: docker.elastic.co/elasticsearch/elasticsearch:${ELASTIC_VERSION}
121+
container_name: elasticsearch
122+
ports:
123+
- "9200:9200"
124+
- "9300:9300"
125+
environment:
126+
- bootstrap.memory_lock=true
127+
- discovery.type=single-node
128+
- xpack.security.enabled=false
129+
# allow running with low disk space
130+
- cluster.routing.allocation.disk.threshold_enabled=false
131+
- "ES_JAVA_OPTS=-Xms512m -Xmx512m"
132+
ulimits:
133+
memlock:
134+
soft: -1
135+
hard: -1
136+
restart: unless-stopped
137+
healthcheck:
138+
test: [ "CMD-SHELL", "curl -f http://localhost:9200/_cat/health | grep -q green" ]
139+
interval: 30s
140+
timeout: 5s
141+
retries: 3
142+
volumes:
143+
- elastic:/usr/share/elasticsearch/data
144+
networks:
145+
- camunda-platform
146+
147+
kibana:
148+
image: docker.elastic.co/kibana/kibana:${ELASTIC_VERSION}
149+
container_name: kibana
150+
ports:
151+
- 5601:5601
152+
volumes:
153+
- kibana:/usr/share/kibana/data
154+
networks:
155+
- camunda-platform
156+
depends_on:
157+
- elasticsearch
158+
profiles:
159+
- kibana
160+
161+
volumes:
162+
zeebe:
163+
elastic:
164+
kibana:
165+
166+
networks:
167+
camunda-platform:

‎docker-compose-8.7-kafka/docker-compose-web-modeler.yaml‎

Lines changed: 156 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,156 @@
1+
# Docker Compose file for Web Modeler Self-Managed. This file is not intended to be used stand-alone.
2+
# Use it in combination with docker-compose.yaml:
3+
#
4+
# docker-compose -f docker-compose.yaml -f docker-compose-web-modeler.yaml up -d
5+
#
6+
# Note: this file is using Mailpit to simulate a mail server
7+
8+
services:
9+
10+
modeler-db:
11+
container_name: modeler-db
12+
image: postgres:${POSTGRES_VERSION}
13+
healthcheck:
14+
test: pg_isready -d modeler-db -U modeler-db-user
15+
interval: 5s
16+
timeout: 15s
17+
retries: 30
18+
environment:
19+
POSTGRES_DB: modeler-db
20+
POSTGRES_USER: modeler-db-user
21+
POSTGRES_PASSWORD: modeler-db-password
22+
networks:
23+
- modeler
24+
volumes:
25+
- postgres-web:/var/lib/postgresql/data
26+
profiles:
27+
- ''
28+
- web-modeler-standalone
29+
30+
modeler-websockets:
31+
container_name: modeler-websockets
32+
image: camunda/web-modeler-websockets:${CAMUNDA_WEB_MODELER_VERSION}
33+
ports:
34+
- "8060:8060"
35+
healthcheck:
36+
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://127.0.0.1:8060/up"]
37+
interval: 5s
38+
timeout: 15s
39+
retries: 30
40+
environment:
41+
APP_NAME: "Web Modeler Self-Managed WebSockets"
42+
APP_DEBUG: "true"
43+
PUSHER_APP_ID: modeler-app
44+
PUSHER_APP_KEY: modeler-app-key
45+
PUSHER_APP_SECRET: modeler-app-secret
46+
networks:
47+
- modeler
48+
profiles:
49+
- ''
50+
- web-modeler-standalone
51+
52+
modeler-mailpit:
53+
# If you want to use your own SMTP server, you can remove this container
54+
# and configure RESTAPI_MAIL_HOST, RESTAPI_MAIL_PORT, REST_API_MAIL_USER,
55+
# REST_API_MAIL_PASSWORD and RESTAPI_MAIL_ENABLE_TLS in modeler-restapi
56+
container_name: modeler-mailpit
57+
image: axllent/mailpit:${MAILPIT_VERSION}
58+
ports:
59+
- "1025:1025"
60+
- "8075:8025"
61+
healthcheck:
62+
test: /usr/bin/nc -v localhost 1025
63+
interval: 30s
64+
networks:
65+
- modeler
66+
profiles:
67+
- ''
68+
- web-modeler-standalone
69+
70+
# Modeler containers
71+
modeler-restapi:
72+
container_name: modeler-restapi
73+
image: camunda/web-modeler-restapi:${CAMUNDA_WEB_MODELER_VERSION}
74+
command: /bin/sh -c "java $JAVA_OPTIONS org.springframework.boot.loader.JarLauncher"
75+
depends_on:
76+
modeler-db:
77+
condition: service_healthy
78+
modeler-mailpit:
79+
condition: service_started
80+
healthcheck:
81+
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:8091/health/readiness"]
82+
interval: 5s
83+
timeout: 15s
84+
retries: 30
85+
environment:
86+
JAVA_OPTIONS: -Xmx128m
87+
LOGGING_LEVEL_IO_CAMUNDA_MODELER: DEBUG
88+
CAMUNDA_IDENTITY_BASEURL: http://identity:8084/
89+
SPRING_DATASOURCE_URL: jdbc:postgresql://modeler-db:5432/modeler-db
90+
SPRING_DATASOURCE_USERNAME: modeler-db-user
91+
SPRING_DATASOURCE_PASSWORD: modeler-db-password
92+
SPRING_PROFILES_INCLUDE: default-logging
93+
RESTAPI_PUSHER_HOST: modeler-websockets
94+
RESTAPI_PUSHER_PORT: "8060"
95+
RESTAPI_PUSHER_APP_ID: modeler-app
96+
RESTAPI_PUSHER_KEY: modeler-app-key
97+
RESTAPI_PUSHER_SECRET: modeler-app-secret
98+
RESTAPI_OAUTH2_TOKEN_ISSUER: http://${KEYCLOAK_HOST}:18080/auth/realms/camunda-platform
99+
RESTAPI_OAUTH2_TOKEN_ISSUER_BACKEND_URL: http://keycloak:18080/auth/realms/camunda-platform
100+
RESTAPI_SERVER_URL: http://localhost:8070
101+
RESTAPI_MAIL_HOST: modeler-mailpit
102+
RESTAPI_MAIL_PORT: 1025
103+
RESTAPI_MAIL_ENABLE_TLS: "false"
104+
RESTAPI_MAIL_FROM_ADDRESS: "[email protected]"
105+
networks:
106+
- modeler
107+
- camunda-platform
108+
profiles:
109+
- ''
110+
- web-modeler-standalone
111+
112+
modeler-webapp:
113+
container_name: modeler-webapp
114+
image: camunda/web-modeler-webapp:${CAMUNDA_WEB_MODELER_VERSION}
115+
ports:
116+
- "8070:8070"
117+
depends_on:
118+
modeler-restapi:
119+
condition: service_healthy
120+
healthcheck:
121+
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:8071/health/readiness"]
122+
interval: 5s
123+
timeout: 15s
124+
retries: 30
125+
environment:
126+
RESTAPI_HOST: modeler-restapi
127+
SERVER_HTTPS_ONLY: "false"
128+
SERVER_URL: http://localhost:8070
129+
PUSHER_APP_ID: modeler-app
130+
PUSHER_KEY: modeler-app-key
131+
PUSHER_SECRET: modeler-app-secret
132+
PUSHER_HOST: modeler-websockets
133+
PUSHER_PORT: "8060"
134+
CLIENT_PUSHER_HOST: localhost
135+
CLIENT_PUSHER_PORT: "8060"
136+
CLIENT_PUSHER_FORCE_TLS: "false"
137+
CLIENT_PUSHER_KEY: modeler-app-key
138+
OAUTH2_CLIENT_ID: web-modeler
139+
OAUTH2_JWKS_URL: http://keycloak:18080/auth/realms/camunda-platform/protocol/openid-connect/certs
140+
OAUTH2_TOKEN_AUDIENCE: web-modeler
141+
OAUTH2_TOKEN_ISSUER: http://${KEYCLOAK_HOST}:18080/auth/realms/camunda-platform
142+
IDENTITY_BASE_URL: http://identity:8084/
143+
PLAY_ENABLED: "true"
144+
networks:
145+
- modeler
146+
- camunda-platform
147+
profiles:
148+
- ''
149+
- web-modeler-standalone
150+
151+
networks:
152+
camunda-platform:
153+
modeler:
154+
155+
volumes:
156+
postgres-web:

0 commit comments

Comments
 (0)