RUN echo 'debconf debconf/frontend select Noninteractive' | debconf-set-selections
-RUN apt-get update && apt-get install -y git python3 python3-jsonschema \
+RUN apt-get update && apt-get install -y git python3 \
python3-pymongo python3-yaml python3-pip python3-keystoneclient \
&& python3 -m pip install pip --upgrade \
- && python3 -m pip install aiokafka aiohttp cherrypy==18.1.2 keystoneauth1 requests \
+ && python3 -m pip install aiokafka dataclasses aiohttp cherrypy==18.1.2 keystoneauth1 requests jsonschema==3.2.0 \
+ && python3 -m pip install tacacs_plus \
&& mkdir -p /app/storage/kafka && mkdir -p /app/log
# OSM_COMMON
# logs
# ENV OSMNBI_LOG_FILE /app/log/nbi.log
ENV OSMNBI_LOG_LEVEL DEBUG
+# ENV OSMNBI_SERVER_ENABLE_TEST False
+
# message
ENV OSMNBI_MESSAGE_DRIVER kafka
ENV OSMNBI_MESSAGE_HOST kafka
# authentication
ENV OSMNBI_AUTHENTICATION_BACKEND internal
#ENV OSMNBI_AUTHENTICATION_BACKEND keystone
-#ENV OSMNBI_AUTHENTICATION_AUTH_URL keystone
+#ENV OSMNBI_AUTHENTICATION_AUTH_URL http://keystone:5000/v3
#ENV OSMNBI_AUTHENTICATION_AUTH_PORT 5000
+
+# DOMAIN_NAME can be a single value or a comma separated list of values. The first value is for internal domain
+# meanwhile the rest ones are external identity services as e.g. LDAP
+# for the case of USER_DOMAIN_NAME each item can be suffixed with ":ro" (read only). In this case NBI will reject any
+# operationi of create/update/delete users in this domain. Do not suffix PROJECT_DOMAIN_NAME
#ENV OSMNBI_AUTHENTICATION_USER_DOMAIN_NAME default
#ENV OSMNBI_AUTHENTICATION_PROJECT_DOMAIN_NAME default
#ENV OSMNBI_AUTHENTICATION_SERVICE_USERNAME nbi
ADD . /app/NBI
# Run app.py when the container launches
-CMD python3 -m osm_nbi.nbi
+CMD ["python3", "-m", "osm_nbi.nbi"]