ci: try with new 8.9 config

Author: vobu

assets/c8/8.9/docker-compose.yml

@@ -1,135 +1,63 @@
-networks:
-  zeebe_network: {}
-
 services:
-  postgres:
-    container_name: postgres
-    image: postgres:17.5-alpine
-    ports:
-      - '5432:5432'
-    environment:
-      POSTGRES_DB: identity
-      POSTGRES_USER: identity
-      POSTGRES_PASSWORD: 't2L@!AqSMg8%I%NmHM'
-    networks:
-      - zeebe_network
-
-  elasticsearch:
-    image: docker.elastic.co/elasticsearch/elasticsearch:8.18.4
-    container_name: elasticsearch
-    profiles: ['elasticsearch']
-    environment:
-      - discovery.type=single-node
-      - cluster.name=elasticsearch
-      - bootstrap.memory_lock=true
-      - xpack.security.enabled=false
-      - 'ES_JAVA_OPTS=-Xms1024m -Xmx1024m'
-      - path.repo=/usr/local/els-snapshots
-    ulimits:
-      memlock:
-        soft: -1
-        hard: -1
-    ports:
-      - 9200:9200
-      - 9300:9300
-    networks:
-      - zeebe_network
-    restart: always
-    volumes:
-      - ./els-snapshots:/usr/local/els-snapshots
-
-  opensearch:
-    image: opensearchproject/opensearch:2.17.0
-    container_name: opensearch
-    profiles: ['opensearch']
-    environment:
-      - cluster.name=opensearch-cluster
-      - discovery.type=single-node
-      - plugins.security.disabled=true
-      - bootstrap.memory_lock=true # along with the memlock settings below, disables swapping
-      - 'OPENSEARCH_JAVA_OPTS=-Xms1024m -Xmx1024m' # minimum and maximum Java heap size, recommend setting both to 50% of system RAM
-      - OPENSEARCH_INITIAL_ADMIN_PASSWORD=yourStrongPassword123!
-    ulimits:
-      memlock:
-        soft: -1
-        hard: -1
-      nofile:
-        soft: 65536 # maximum number of open files for the OpenSearch user, set to at least 65536 on modern systems
-        hard: 65536
-    ports:
-      - 9200:9200
-      - 9605:9605 # required for Performance Analyzer
-    networks:
-      - zeebe_network
-
-  kibana:
-    image: docker.elastic.co/kibana/kibana:8.18.4
-    profiles: ['elasticsearch']
-    ports:
-      - 5601:5601
+  camunda:
+    image: camunda/camunda:${CAMUNDA_VERSION}
+    # If you want to override via env like the framework: set CAMUNDA_VERSION externally
+    container_name: camunda-engine
+    profiles: ['elasticsearch'] # only there for gh workflow
     environment:
-      - elasticsearch.hosts=http://elasticsearch:9200
-    depends_on:
-      - elasticsearch
-    networks:
-      - zeebe_network
-
-  keycloak:
-    depends_on:
-      - postgres
-    container_name: keycloak
-    image: quay.io/keycloak/keycloak:26.0
-    command: start-dev --http-relative-path=/auth
+      SPRING_PROFILES_ACTIVE: 'broker,consolidated-auth'
+      ZEEBE_CLOCK_CONTROLLED: 'true'
+      ZEEBE_LOG_APPENDER: 'Stackdriver'
+      CAMUNDA_SECURITY_AUTHENTICATION_UNPROTECTEDAPI: 'true'
+      CAMUNDA_SECURITY_AUTHORIZATIONS_ENABLED: 'false'
+      # H2 / in-memory config (mirrors H2Configuration)
+      CAMUNDA_DATABASE_URL: 'jdbc:h2:mem:cpt;DB_CLOSE_DELAY=-1;MODE=PostgreSQL'
+      CAMUNDA_DATABASE_TYPE: 'rdbms'
+      CAMUNDA_DATABASE_USERNAME: 'sa'
+      CAMUNDA_DATABASE_PASSWORD: ''
+      CAMUNDA_DATA_SECONDARY_STORAGE_TYPE: 'rdbms'
+      ZEEBE_BROKER_EXPORTERS_RDBMS_CLASSNAME: 'io.camunda.exporter.rdbms.RdbmsExporter'
+      ZEEBE_BROKER_EXPORTERS_RDBMS_ARGS_FLUSH_INTERVAL: 'PT0S'
+      ZEEBE_BROKER_EXPORTERS_RDBMS_ARGS_DEFAULT_HISTORY_TTL: 'PT2S'
+      ZEEBE_BROKER_EXPORTERS_RDBMS_ARGS_MIN_HISTORY_CLEANUP_INTERVAL: 'PT2S'
+      ZEEBE_BROKER_EXPORTERS_RDBMS_ARGS_MAX_HISTORY_CLEANUP_INTERVAL: 'PT5S'
+      LOGGING_LEVEL_IO_CAMUNDA_DB_RDBMS: 'INFO'
+      LOGGING_LEVEL_ORG_MYBATIS: 'INFO'
     ports:
-      - '18080:8080'
-    environment:
-      KC_DB: postgres
-      KC_DB_URL: jdbc:postgresql://postgres:5432/identity
-      KC_DB_USERNAME: identity
-      KC_DB_PASSWORD: 't2L@!AqSMg8%I%NmHM'
-      KEYCLOAK_ADMIN: admin
-      KEYCLOAK_ADMIN_PASSWORD: admin
+      - '8080:8080' # REST API (ZEEBE_REST_ADDRESS -> http://localhost:8080)
+      - '26500:26500' # gRPC Gateway
+      - '9600:9600' # Monitoring / actuator / test time control
+      # Uncomment if you need direct access to internal broker ports:
+      # - "26501:26501" # Command API (internal)
+      # - "26502:26502" # Internal API (internal)
     healthcheck:
-      test: ['CMD-SHELL', 'exec 3<>/dev/tcp/localhost/8080 && echo -e "GET /auth/health/ready HTTP/1.1\nhost: localhost:8080\n" >&3 && timeout 1 cat <&3 | grep "200 OK"']
-      interval: 30s
-      timeout: 15s
-      retries: 8
-      start_period: 30s
+      # Mimic readiness checks: uses monitoring port + health endpoint
+      test: ['CMD', 'wget', '-qO', '-', 'http://localhost:9600/actuator/health/status']
+      interval: 5s
+      timeout: 3s
+      retries: 30
     networks:
-      - zeebe_network
+      - camunda-net
 
-  camunda:
-    container_name: camunda
-    image: camunda/camunda:SNAPSHOT
-    environment:
-      - 'JAVA_TOOL_OPTIONS=-Xms512m -Xmx1g'
-      - ZEEBE_BROKER_NETWORK_HOST=camunda
-      - SPRING_PROFILES_ACTIVE=e2e-test,consolidated-auth,tasklist,broker,operate,identity
-      - CAMUNDA_SECURITY_AUTHENTICATION_UNPROTECTEDAPI=false
-      - CAMUNDA_SECURITY_AUTHORIZATIONS_ENABLED=true
-      - CAMUNDA_SECURITY_AUTHENTICATION_METHOD=BASIC
-      - CAMUNDA_SECURITY_MULTITENANCY_CHECKSENABLED=false
-      - CAMUNDA_SECURITY_INITIALIZATION_USERS_0_USERNAME=demo
-      - CAMUNDA_SECURITY_INITIALIZATION_USERS_0_PASSWORD=demo
-      - CAMUNDA_SECURITY_INITIALIZATION_USERS_0_NAME=Demo
-      - CAMUNDA_SECURITY_INITIALIZATION_USERS_0_EMAIL=demo@example.com
-      - CAMUNDA_SECURITY_INITIALIZATION_DEFAULTROLES_ADMIN_USERS_0=demo
-      - CAMUNDA_SECURITY_INITIALIZATION_USERS_1_USERNAME=lisa
-      - CAMUNDA_SECURITY_INITIALIZATION_USERS_1_PASSWORD=lisa
-      - CAMUNDA_SECURITY_INITIALIZATION_USERS_1_NAME=lisa
-      - CAMUNDA_SECURITY_INITIALIZATION_USERS_1_EMAIL=lisa@example.com
-      - CAMUNDA_SECURITY_INITIALIZATION_DEFAULTROLES_ADMIN_USERS_1=lisa
-      - CAMUNDA_DATA_SECONDARY_STORAGE_TYPE=elasticsearch
-      - CAMUNDA_DATA_SECONDARY_STORAGE_ELASTICSEARCH_URL=http://elasticsearch:9200
-      - CAMUNDA_DATA_SECONDARYSTORAGE_ELASTICSEARCH_WAITFORIMPORTERS=false
-      - CAMUNDA_TASKLIST_V2_MODE_ENABLED=${CAMUNDA_TASKLIST_V2_MODE_ENABLED:-true}
-    ports:
-      - 26500:26500
-      - 9600:9600
-      - 8080:8080
-    depends_on:
-      - ${DATABASE}
-    networks:
-      - zeebe_network
-    env_file:
-      - envs/.env.database.${DATABASE}
+  # connectors:
+  #   image: camunda/connectors-bundle:SNAPSHOT
+  #   container_name: camunda-connectors
+  #   depends_on:
+  #     camunda:
+  #       condition: service_healthy
+  #   environment:
+  #     # Adapted from runtime: service name + internal port
+  #     ZEEBE_CLIENT_BROKER_GATEWAY-ADDRESS: "camunda:26500"
+  #     ZEEBE_CLIENT_SECURITY_PLAINTEXT: "true"
+  #     # Optional additional env you might pass via framework (placeholders):
+  #     # CONNECTORS_LOG_APPENDER: "Stackdriver"
+  #     # CAMUNDA_CLIENT_GRPC-ADDRESS: "camunda:26500"
+  #     # CAMUNDA_CLIENT_REST-ADDRESS: "http://camunda:8080"
+  #   ports:
+  #     - "8085:8080" # Expose connectors runtime (external 8085 -> internal 8080)
+  #   networks:
+  # - camunda-net
+
+networks:
+  camunda-net:
+    name: camunda-net