[UI] Encrypt passwords in db

[validation.git] / docker / ui / deploy.sh

diff --git a/docker/ui/deploy.sh b/docker/ui/deploy.sh
index 6b77dd9..43bd5bc 100755 (executable)
--- a/docker/ui/deploy.sh
+++ b/docker/ui/deploy.sh
@@ -14,6 +14,8 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
+set -ex
+
 # Container name
 CONTAINER_NAME="akraino-validation-ui"
 # Image data
@@ -22,14 +24,16 @@ NAME=validation
 TAG_PRE=ui
 TAG_VER=latest
 # Container input parameters
-MARIADB_ROOT_PASSWORD=""
-JENKINS_URL=""
-JENKINS_USERNAME=""
-JENKINS_USER_PASSWORD=""
-JENKINS_JOB_NAME=""
-DB_CONNECTION_URL=""
+MARIADB_AKRAINO_PASSWORD=""
+JENKINS_URL="https://jenkins.akraino.org/"
+JENKINS_USERNAME="demo"
+JENKINS_USER_PASSWORD="demo"
+JENKINS_JOB_NAME="validation"
+DB_IP_PORT=""
 NEXUS_PROXY=""
 JENKINS_PROXY=""
+CERTDIR=$(pwd)
+ENCRYPTION_KEY=""
 
 for ARGUMENT in "$@"
 do
@@ -40,55 +44,39 @@ do
             NAME)    NAME=${VALUE} ;;
             TAG_PRE)    TAG_PRE=${VALUE} ;;
             TAG_VER)    TAG_VER=${VALUE} ;;
-            MARIADB_ROOT_PASSWORD)    MARIADB_ROOT_PASSWORD=${VALUE} ;;
+            MARIADB_AKRAINO_PASSWORD)    MARIADB_AKRAINO_PASSWORD=${VALUE} ;;
             JENKINS_URL)    JENKINS_URL=${VALUE} ;;
             JENKINS_USERNAME)    JENKINS_USERNAME=${VALUE} ;;
             JENKINS_USER_PASSWORD)    JENKINS_USER_PASSWORD=${VALUE} ;;
             JENKINS_JOB_NAME)    JENKINS_JOB_NAME=${VALUE} ;;
-            DB_CONNECTION_URL)    DB_CONNECTION_URL=${VALUE} ;;
+            DB_IP_PORT)    DB_IP_PORT=${VALUE} ;;
             CONTAINER_NAME)    CONTAINER_NAME=${VALUE} ;;
             NEXUS_PROXY) NEXUS_PROXY=${VALUE} ;;
             JENKINS_PROXY) JENKINS_PROXY=${VALUE} ;;
+            CERTDIR) CERTDIR=${VALUE} ;;
+            ENCRYPTION_KEY) ENCRYPTION_KEY=${VALUE} ;;
             *)
     esac
 done
 
-if [ -z "$DB_CONNECTION_URL" ]
-  then
-    echo "ERROR: You must specify the database connection url"
-    exit 1
-fi
-
-if [ -z "$MARIADB_ROOT_PASSWORD" ]
-  then
-    echo "ERROR: You must specify the mariadb root user password"
-    exit 1
-fi
-
-if [ -z "$JENKINS_URL" ]
-  then
-    echo "ERROR: You must specify the Jenkins Url"
-    exit 1
-fi
-
-if [ -z "$JENKINS_USERNAME" ]
+if [ -z "$DB_IP_PORT" ]
   then
-    echo "ERROR: You must specify the Jenkins username"
+    echo "ERROR: You must specify the database IP and port"
     exit 1
 fi
 
-if [ -z "$JENKINS_USER_PASSWORD" ]
+if [ -z "$MARIADB_AKRAINO_PASSWORD" ]
   then
-    echo "ERROR: You must specify the Jenkins user password"
+    echo "ERROR: You must specify the mariadb akraino user password"
     exit 1
 fi
 
-if [ -z "$JENKINS_JOB_NAME" ]
+if [ -z "$ENCRYPTION_KEY" ]
   then
-    echo "ERROR: You must specify the Jenkins job name"
+    echo "ERROR: You must specify the encryption key"
     exit 1
 fi
 
 IMAGE="$REGISTRY"/"$NAME":"$TAG_PRE"-"$TAG_VER"
-docker run --name $CONTAINER_NAME --network="host" -it --rm -e DB_CONNECTION_URL="$DB_CONNECTION_URL" -e MARIADB_ROOT_PASSWORD="$MARIADB_ROOT_PASSWORD" -e JENKINS_URL="$JENKINS_URL" -e JENKINS_USERNAME="$JENKINS_USERNAME" -e JENKINS_USER_PASSWORD="$JENKINS_USER_PASSWORD" -e JENKINS_JOB_NAME="$JENKINS_JOB_NAME" -e NEXUS_PROXY="$NEXUS_PROXY" -e JENKINS_PROXY="$JENKINS_PROXY" $IMAGE
+docker run --detach --name $CONTAINER_NAME --network="host" -v "$(pwd)/server.xml:/usr/local/tomcat/conf/server.xml" -v "$CERTDIR/bluval.key:/usr/local/tomcat/bluval.key" -v "$CERTDIR/bluval.crt:/usr/local/tomcat/bluval.crt" -v "$(pwd)/root_index.jsp:/usr/local/tomcat/webapps/ROOT/index.jsp" -e DB_IP_PORT="$DB_IP_PORT" -e MARIADB_AKRAINO_PASSWORD="$MARIADB_AKRAINO_PASSWORD" -e JENKINS_URL="$JENKINS_URL" -e JENKINS_USERNAME="$JENKINS_USERNAME" -e JENKINS_USER_PASSWORD="$JENKINS_USER_PASSWORD" -e JENKINS_JOB_NAME="$JENKINS_JOB_NAME" -e NEXUS_PROXY="$NEXUS_PROXY" -e JENKINS_PROXY="$JENKINS_PROXY" -e ENCRYPTION_KEY="$ENCRYPTION_KEY" $IMAGE
 sleep 10