feat(ime-577): Add envoy gateway for connection to mojaloop ingress

.gitignore

@@ -1,2 +1,5 @@
 docker-compose/vault/tmp
 docker-compose/.env
+**/*tmp
+**/*keycloak-data
+**/*certs

docker-compose/docker-compose.yaml

@@ -18,9 +18,10 @@ version: '3.7'
 services:
 
   frontend:
-    image: pm4ml/mojaloop-payment-manager-ui:1.17.6
+    image: pm4ml/mojaloop-payment-manager-ui:1.19.0
     environment:
-      - API_BASE_URL=http://localhost:4010
+      - API_BASE_URL=https://ec2-18-130-212-53.eu-west-2.compute.amazonaws.com:8443/api
+      - ENABLE_AUTHENTICATION=true
     ports:
       - "8081:8080"
     depends_on:
@@ -33,7 +34,7 @@ services:
    environment:
      - KEYCLOAK_USER=admin
      - KEYCLOAK_PASSWORD=admin
-     - KEYCLOAK_FRONTEND_URL=http://localhost:8080/auth
+     - KEYCLOAK_FRONTEND_URL=https://ec2-18-130-212-53.eu-west-2.compute.amazonaws.com:8443/keycloak/auth
      - KEYCLOAK_IMPORT=/tmp/pm4ml-realm.json
      - DB_VENDOR=h2
    volumes:
@@ -52,9 +53,9 @@ services:
       - AUTH_CLIENT_ID=pm4ml-customer-ui
       - AUTH_CLIENT_SECRET=a857e3d7-ebd4-4451-aabd-bcb480dde1a3
       - AUTH_DISCOVERY_ENDPOINT=http://keycloak:8080/auth/realms/pm4ml/.well-known/openid-configuration
-      - AUTH_LOGGED_IN_LANDING_URL=http://localhost:8081/
+      - AUTH_LOGGED_IN_LANDING_URL=https://ec2-18-130-212-53.eu-west-2.compute.amazonaws.com:8443/keycloak/auth/
       - AUTH_REDIRECT_NAME=pm4ml-customer-ui
-      - AUTH_REDIRECT_URI=http://localhost:4010/auth
+      - AUTH_REDIRECT_URI=https://ec2-18-130-212-53.eu-west-2.compute.amazonaws.com:8443/api/auth
       - AUTH_RESOURCE_NAME=pm4ml-customer-ui
       - AUTH_SCOPES=roles
       - DFSP_ID={{ CHANGE BEFORE INSTALL }}
@@ -71,7 +72,7 @@ services:
     depends_on:
       - management-api
       - redis
-#      - keycloak
+      - keycloak
     profiles:
       - portal
 
@@ -119,7 +120,7 @@ services:
       - portal
 
   sim-backend:
-    image: mojaloop/ml-testing-toolkit:v18.5.1
+    image: mojaloop/ml-testing-toolkit:v18.7.5
     volumes:
       - "../testing-toolkit/docker-compose/as-a-backend/spec_files:/opt/app/spec_files"
     ports:
@@ -132,11 +133,11 @@ services:
 
   # NOTE: The following UI for sim backend can be enabled for debugging purpose
   sim-backend-ui:
-    image: mojaloop/ml-testing-toolkit-ui:v16.0.4
+    image: mojaloop/ml-testing-toolkit-ui:v16.1.2
     ports:
       - "6061:6060"
     environment:
-      - API_BASE_URL=http://localhost:5051
+      - API_BASE_URL=http://18.130.212.53:5051
       - AUTH_ENABLED=FALSE
     command:
       - sh
@@ -153,13 +154,14 @@ services:
       - "6379:6379"
 
   sdk-scheme-adapter:
-    image: mojaloop/sdk-scheme-adapter:v23.6.0-iso.16
+    image: mojaloop/sdk-scheme-adapter:v24.9.2
     command:
       - sh
       - -c
       - "yarn start:api-svc"
     environment:
       - API_TYPE=iso20022
+      - EXPIRY_SECONDS=60
       - ILP_VERSION=4
       - AUTO_ACCEPT_PARTY=false
       - AUTO_ACCEPT_QUOTES=false
@@ -199,6 +201,7 @@ services:
     ports:
       - "4000:4000"
       - "4001:4001"
+      - "443:4000"
     volumes:
       - ./inbound-cacert.pem:/secrets/inbound-cacert.pem
       - ./inbound-cert.pem:/secrets/inbound-cert.pem
@@ -230,7 +233,7 @@ services:
     ports:
       - "6060:6060"
     environment:
-      - API_BASE_URL=http://localhost:5050
+      # - API_BASE_URL=http://localhost:5050
       - AUTH_ENABLED=FALSE
     command:
       - sh
@@ -272,4 +275,4 @@ networks:
     name: pm4ml-net
 
 volumes:
-  vault-data:
+  vault-data:

docker-compose/envoy/docker-compose.yml

@@ -0,0 +1,87 @@
+version: '3.8'
+
+services:
+  envoy-gateway:
+    container_name: envoy-gateway
+    image: envoyproxy/gateway:v1.4.0
+    ports:
+      - "8443:8443"
+      - "8888:8888"
+      - "19000:19000"
+      - "19001:19001"
+      # - "8081:8081"
+    volumes:
+      - ./envoy-gateway:/etc/envoy-gateway
+      - ./certs/envoy-oidc-hmac:/tmp/envoy-gateway/certs/envoy-oidc-hmac
+      - ./certs/envoy:/tmp/envoy-gateway/certs/envoy
+      - ./certs/envoy-gateway:/tmp/envoy-gateway/certs/envoy-gateway
+      - ./tmp:/tmp/envoy-gateway
+      - ./certs:/etc/envoy-gateway/certs
+    command: server --config-path /etc/envoy-gateway/standalone.yaml
+    environment:
+      - EG_EXTENSION_APIS_ENABLE_BACKEND=true
+      - EG_EXTENSION_APIS_ENABLE_OAUTH=true
+      - ENVOY_GATEWAY_NAMESPACE=envoy-gateway-system
+      - EG_GATEWAY_CONTROLLER_NAME=gateway.envoyproxy.io/gatewayclass-controller
+      - EG_PROVIDER_TYPE=Custom
+      - EG_PROVIDER_CUSTOM_RESOURCE_TYPE=File
+      - EG_PROVIDER_CUSTOM_RESOURCE_FILE_PATHS=/etc/envoy-gateway/config.yaml
+      - EG_PROVIDER_CUSTOM_INFRASTRUCTURE_TYPE=Host
+      - EG_LOG_LEVEL=debug
+    networks:
+      - envoy-gateway-test
+    depends_on:
+      - redis
+      - test-backend
+      - keycloak
+
+  redis:
+    image: redis:7.0-alpine
+    container_name: redis-ratelimit
+    ports:
+      - "6380:6379"
+    networks:
+      - envoy-gateway-test
+
+  test-backend:
+    image: python:3.13-slim
+    container_name: test-backend
+    networks:
+      - envoy-gateway-test
+    volumes:
+      - ../:/app
+    working_dir: /app
+    command: python3 -m http.server 8090
+    ports:
+      - "8090:8090"
+
+  keycloak:
+    image: quay.io/keycloak/keycloak:22.0.1
+    container_name: keycloak
+    environment:
+      - KEYCLOAK_ADMIN=admin
+      - KEYCLOAK_ADMIN_PASSWORD=admin
+      - KC_DB=dev-file
+      - KC_HOSTNAME_STRICT=false
+      - KC_HOSTNAME_STRICT_HTTPS=false
+      - KC_HTTP_ENABLED=true
+      - KC_PROXY=edge
+      - JAVA_OPTS=-Djboss.bind.address=0.0.0.0 -Djboss.bind.address.private=0.0.0.0 -Dvertx.cacheDirBase=/opt/keycloak/cache -Djava.io.tmpdir=/opt/keycloak/tmp
+    volumes:
+      - ./keycloak-data:/opt/keycloak/data
+      - ./keycloak-cache:/opt/keycloak/cache
+      - ./keycloak-tmp:/opt/keycloak/tmp
+    ports:
+      - "8085:8080"
+    networks:
+      - envoy-gateway-test
+    command:
+      - start-dev
+      - --hostname=localhost
+      - --hostname-port=8085
+      - --hostname-strict-backchannel=false
+
+networks:
+  envoy-gateway-test:
+    name: envoy-gateway-test
+    driver: bridge