Dockerfile

#       Copyright 2020-2021 IBM Corp All Rights Reserved
#       Copyright 2022-2023 Kyndryl, All Rights Reserved

#   Licensed under the Apache License, Version 2.0 (the "License");
#   you may not use this file except in compliance with the License.
#   You may obtain a copy of the License at

#       http://www.apache.org/licenses/LICENSE-2.0

#   Unless required by applicable law or agreed to in writing, software
#   distributed under the License is distributed on an "AS IS" BASIS,
#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
#   See the License for the specific language governing permissions and
#   limitations under the License.

# FROM alpine:latest AS cert-extractor
# ARG keycloak_connection_string
# ARG extract_keycloak_cert
# RUN echo "Extract cert: '$extract_keycloak_cert' - Connection string: '$keycloak_connection_string'" && touch keycloak.pem
# RUN if [ "$extract_keycloak_cert" = "true" ]; then apk add openssl && openssl s_client -showcerts -connect ${keycloak_connection_string} </dev/null 2>/dev/null|openssl x509 -outform PEM > keycloak.pem ; fi

# FROM maven:3.6-jdk-11-slim AS build
# COPY . /usr/
# RUN mvn -f /usr/pom.xml clean package

# FROM openliberty/open-liberty:kernel-slim-java11-openj9-ubi
FROM openliberty/open-liberty:24.0.0.3-full-java17-openj9-ubi

# ARG extract_keycloak_cert
USER root
COPY src/main/liberty/config /opt/ol/wlp/usr/servers/defaultServer/

# This script will add the requested XML snippets to enable Liberty features and grow image to be fit-for-purpose using featureUtility. 
# Only available in 'kernel-slim'. The 'full' tag already includes all features for convenience.
# RUN features.sh

# COPY --from=build /usr/target/broker-1.0-SNAPSHOT.war /opt/ol/wlp/usr/servers/defaultServer/apps/Broker.war
COPY target/broker-1.0-SNAPSHOT.war /opt/ol/wlp/usr/servers/defaultServer/apps/Broker.war
# COPY --from=cert-extractor /keycloak.pem /tmp/keycloak.pem
RUN chown -R 1001:0 config/
USER 1001
# RUN if [ "$extract_keycloak_cert" = "true" ]; then keytool -import -v -trustcacerts -alias keycloak -file /tmp/keycloak.pem -keystore /opt/ol/wlp/usr/servers/defaultServer/resources/security/trust.p12 --noprompt --storepass St0ckTr@der ; fi
RUN configure.sh