update secrets and binds for shib sp

internet2 · Dec 4, 2020 · 40be5f5 · 40be5f5
1 parent 0331c0d
commit 40be5f5
Showing 1 changed file with 15 additions and 1 deletion.
diff --git a/Workbench/docker-compose.yml b/Workbench/docker-compose.yml
@@ -322,6 +322,8 @@ services:
     environment:
      - ENV
      - USERTOKEN
+     - SHIBBOLETH_SP_ENCRYPT_CERT=
+     - SHIBBOLETH_SP_ENCRYPT_PRIVKEY=/run/secrets/shib_sp-key.pem
     networks:
      - net
     ports:
@@ -330,6 +332,15 @@ services:
      - type: bind
        source: ./configs-and-secrets/comanage/shibboleth/shibboleth2.xml
        target: /etc/shibboleth/shibboleth2.xml
+     - type: bind
+       source: ./configs-and-secrets/comanage/httpd/host-cert.pem
+       target: /etc/pki/tls/certs/cachain.pem
+     - type: bind
+       source: ./configs-and-secrets/comanage/shibboleth/sp-cert.pem
+       target: /etc/shibboleth/sp-cert.pem
+    secrets:
+     - source: c_sp-key.pem
+       target: shib_sp-key.pem
 
 networks:
   net:    
@@ -360,7 +371,10 @@ secrets:
     file: ./configs-and-secrets/midpoint/application/keystore_password.txt    
   mp_shibboleth_sp_keys.jks:
     file: ./configs-and-secrets/midpoint/shibboleth/shibboleth_sp_keys.jks
-
+# COmanage
+  c_sp-key.pem:
+    file: ./configs-and-secrets/comanage/shibboleth/sp-key.pem
+
 volumes:
   grouper_data:
   source_data: