docker-compose.yml

version: "2"

services:
  simple-secrets:
    build:
      context: .
      dockerfile: ./server/Dockerfile
    networks:
      envoymesh: {}
    ports:
      - 3000:3000
      - 10000:10000
    environment:
      ETCD_CLUSTER_MEMBERS: "http://etcd0:2379,http://etcd1:2379,http://etcd2:2379"
      FLUENTD_FORWARD_ADDR: "127.0.0.1:24224"
    volumes:
      - "./server/envoy.yaml:/etc/envoy.yaml"
    depends_on:
      - spire-server
      - fluentd-proxy

  spire-server:
    build:
      context: ./spire
      dockerfile: Dockerfile
    networks:
      envoymesh: {}
    expose:
      - "8080"
      - "8081"
    tty: true

  etcd0:
    image: quay.io/coreos/etcd
    networks:
      envoymesh: {}
    ports:
      - 2379:2379
    volumes:
      - etcd0:/etcd_data
    command:
      - /usr/local/bin/etcd
      - -name
      - etcd0
      - --data-dir
      - /etcd_data
      - -advertise-client-urls
      - http://etcd0:2379
      - -listen-client-urls
      - http://0.0.0.0:2379
      - -initial-advertise-peer-urls
      - http://etcd0:2380
      - -listen-peer-urls
      - http://0.0.0.0:2380
      - -initial-cluster
      - etcd0=http://etcd0:2380,etcd1=http://etcd1:2380,etcd2=http://etcd2:2380

  etcd1:
    image: quay.io/coreos/etcd
    networks:
      envoymesh: {}
    ports:
      - 2379
    volumes:
      - etcd1:/etcd_data
    command:
      - /usr/local/bin/etcd
      - -name
      - etcd1
      - --data-dir
      - /etcd_data
      - -advertise-client-urls
      - http://etcd1:2379
      - -listen-client-urls
      - http://0.0.0.0:2379
      - -initial-advertise-peer-urls
      - http://etcd1:2380
      - -listen-peer-urls
      - http://0.0.0.0:2380
      - -initial-cluster
      - etcd0=http://etcd0:2380,etcd1=http://etcd1:2380,etcd2=http://etcd2:2380

  etcd2:
    image: quay.io/coreos/etcd
    networks:
      envoymesh: {}
    ports:
      - 2379
    volumes:
      - etcd2:/etcd_data
    command:
      - /usr/local/bin/etcd
      - -name
      - etcd2
      - --data-dir
      - /etcd_data
      - -advertise-client-urls
      - http://etcd2:2379
      - -listen-client-urls
      - http://0.0.0.0:2379
      - -initial-advertise-peer-urls
      - http://etcd2:2380
      - -listen-peer-urls
      - http://0.0.0.0:2380
      - -initial-cluster
      - etcd0=http://etcd0:2380,etcd1=http://etcd1:2380,etcd2=http://etcd2:2380

  etcd-browser:
    build: ./etcd-browser
    networks:
      envoymesh: {}
    ports:
      - 8000:8000
    environment:
      ETCD_HOST: etcd0
      ETCD_PORT: 2379
    depends_on:
      - etcd0

  fluentd:
    image: fluent/fluentd
    networks:
      fluentd: {}
    volumes:
      - ./log:/fluentd/log

  fluentd-proxy:
    build:
      context: .
      dockerfile: ./proxy/Dockerfile
    expose:
      - 24224
    networks:
      envoymesh: {}
      fluentd: {}
    volumes:
      - "./fluentd-proxy/envoy.yaml:/etc/envoy.yaml"
    tty: true

  prometheus:
    image: quay.io/prometheus/prometheus
    networks:
      prometheus: {}
    ports:
      - "9090:9090"
    volumes:
      - "./prometheus/prometheus.yml:/etc/prometheus/prometheus.yml"
      - "./prometheus/secrets-server.rules:/etc/prometheus/secrets-server.rules"
    entrypoint:
      - "prometheus"
      - "--config.file=/etc/prometheus/prometheus.yml"
      - "--web.external-url=http://localhost:9090"

  prometheus-proxy:
    build:
      context: .
      dockerfile: ./proxy/Dockerfile
    networks:
      envoymesh: {}
      prometheus: {}
    volumes:
      - "./prometheus-proxy/envoy.yaml:/etc/envoy.yaml"
    tty: true

  alertmanager:
    image: quay.io/prometheus/alertmanager
    ports:
      - "9093:9093"
    volumes:
      - "./prometheus/alertmanager.yml:/etc/alertmanager.yml"
    entrypoint:
      - "alertmanager"
      - "--config.file"
      - "/etc/alertmanager.yml"
      - "--web.external-url=http://localhost:9093"

volumes:
  etcd0: {}
  etcd1: {}
  etcd2: {}
  audit_log: {}

networks:
  envoymesh: {}
  prometheus: {}
  fluentd: {}