docker-compose-gpdb.yml

version: "2"
services:
  # This service MUST have the name "kdc-kadmin" otherwise every kerberos client won't be able to talk with the KDC.
  # If you would like to change the name edit the file configureKerberosClient.sh and change the configurations
  # "kdc" and "admin_server" in the /etc/krb5.conf section.
  kdc-kadmin:
    build: ./kdc-kadmin
    hostname: kdc-kadmin.example.com
    container_name: kdc-kadmin # predefined name, instead of auto-generated by docker-compose
    env_file: kerberos.env
    volumes:
      # This is needed otherwise there won't be enough entropy to generate a new kerberos realm
      - /dev/urandom:/dev/random
      - .:/code   # shared folder
  kerberos-client:
    hostname: kerberos-client.example.com
    container_name: kerberos-client
    build: ./kerberos-client
    env_file: kerberos.env
    depends_on:
      - kdc-kadmin
    links:
        - kdc-kadmin:kdc-kadmin.example.com
    volumes:
      - .:/code # shared folder
  gpdb5:
      build:
          context: .
          dockerfile: ./gpdb/Dockerfile
      #command: bin/bash #./kerberos-client/configureKerberosClient.sh
      hostname: "gpdbsne.example.com"
      container_name: gpdbsne
      env_file: kerberos.env
      ports:
         - "5432:5432"
         - "5005:5005"
         - "5010:5010"
         - "9022:22"
         - "40000:40000"
         - "40001:40001"
         - "40002:40002"
      expose:
         - "5432"
      volumes:
         - .:/code
      links:
        - kdc-kadmin:kdc-kadmin.example.com
      tty: true

# NOTE:
#  "env_file: kerberos.env" is optional.
#  In case no .env file is supplied, nor any environment variable is set, the following values will be used:
#   REALM=EXAMPLE.COM
#   SUPPORTED_ENCRYPTION_TYPES=aes256-cts-hmac-sha1-96:normal
#   KADMIN_PRINCIPAL=kadmin/admin
#   KADMIN_PASSWORD=MITiys4K5