In a terminal window, go to /path/to/openig-devops-guide/docker/sample1-base.

Take a moment to review the Dockerfile in that directory. The commands and options in the Dockerfile are used to build the OpenIG image.

Run the Docker instruction to build a Docker image called forgerock/openig-base:

$ docker build -t forgerock/openig-base .

It takes a few minutes to build a base image. While it is building, the status is displayed. When it is built, a success message is displayed along with the ID of the image.

Check that the base image is built:

$ docker images
REPOSITORY                  TAG                  IMAGE ID            CREATED             SIZE
forgerock/openig-base       latest               5a063649fc87        57 seconds ago      428 MB

The forgerock/openig-base image should be listed in the repository.

Run the Docker image on port 8080:

$ docker run -p 8080:8080 forgerock/openig-base

Tomcat starts up and the console displays the OpenIG message log. Read the message log to see the progress of the startup. When the startup is complete, a message similar to this is displayed:

org.apache.catalina.startup.Catalina.start Server startup in 8385 ms

Go to http://openig.example.com:8080 to view the OpenIG welcome page and confirm that your OpenIG image is running.

In the terminal that is running the Docker image, press CTRL-C to stop the image.

In a terminal window, go to /path/to/openig-devops-guide/docker/sample2-config.

Take a moment to review the Dockerfile in that directory. The Dockerfile refers to base image you built in Chapter 2, "Deploying a Base Image in Docker", and adds the new OpenIG configuration.

Review the OpenIG configuration file custom-config/config/routes/01-hello.json:

{
  "handler": {
    "type": "StaticResponseHandler",
    "config" : {
      "status": 200,
      "reason": "OK",
      "entity": "Hello, world! Your route is ${request.uri.path}"
    }
  },
  "condition": "${matches(request.uri.path, '^/hello')}"
}

This configuration contains a static response handler to return a "Hello World" statement when the URI of a request finishes with /hello.

From /path/to/openig-devops-guide/docker/sample2-config, run the Docker instruction to build a new Docker image called sample2-config:

$ docker build -t sample2-config .
Step 1 : FROM forgerock/openig-base:latest
 ---> a93fdd6074b8
Step 2 : ADD custom-config /var/openig
 ---> a720e5472a76
Removing intermediate container 1507feec0b39
    

When the image is built, a success message is displayed along with the ID of the image.

Check that the new image is built:

$ docker images
REPOSITORY              TAG                 IMAGE ID            CREATED              SIZE
sample2-config          latest              a720e5472a76        About a minute ago   428 MB
forgerock/openig-base   latest              a93fdd6074b8        3 minutes ago        428 MB

The sample2-config image should be in the list of repositories.

Run the Docker image on port 8080:

$ docker run -p 8080:8080 sample2-config

Tomcat starts up and the console displays the OpenIG message log. Read the message log to see the progress of the startup. When the startup is complete, a message similar to this is displayed:

org.apache.catalina.startup.Catalina.start Server startup in 8385 ms

Test that OpenIG is running on http://openig.example.com:8080/hello.

A page displaying the "Hello World" statement is displayed.

In the terminal that is running the Docker image, press CTRL-C to stop the image.

Browse to https://console.cloud.google.com/apis/credentials.

Create credentials for an OAuth 2.0 client ID with the following options:

A client ID and a client secret are created. Make a note of their values or keep the site open for the next step.

In a terminal window, go to /path/to/openig-devops-guide/docker/sample3-oidc.

Edit the Dockerfile to replace <your-client-ID> and <your-client-secret> with the values you created in Section 4.2, "Setting Up OAuth 2.0 Credentials":

FROM forgerock/openig-base:latest

#  Replace <your-client-ID> and <your-client-secret> with your own values.
ENV CLIENT_ID <your-client-ID>
ENV CLIENT_SECRET <your-client-secret>
#  These environment variables are referenced in the openid.json config file.
#  To override these values, pass them as environment variables in the docker run command.

ADD custom-config /var/openig

In a terminal window, go to /path/to/openig-devops-guide/docker/sample3-oidc.

Run the Docker instruction to build a new Docker image called sample3-oidc:

$ docker build -t sample3-oidc .
Sending build context to Docker daemon 14.34 kB
Step 1 : FROM forgerock/openig-base:latest
 ---> a385ade7625e
Step 2 : ENV CLIENT_ID . . .
 ---> Running in 14c20dec7d5c
 ---> b8e4ccefbc83
Removing intermediate container 14c20dec7d5c
Step 3 : ENV CLIENT_SECRET . . .
 ---> Running in 36eae9fb75c9
 ---> f485785a8a0c
Removing intermediate container 36eae9fb75c9
Step 4 : ADD custom-config /var/openig
 ---> fb3e4fdd24fb
Removing intermediate container 8ce983caface
Successfully built fb3e4fdd24fb

The build uses the base image from Chapter 2, "Deploying a Base Image in Docker", adds the OAuth 2.0 credentials to the image, and then adds the new OpenIG configuration to the image.

Check that the new image is built:

$ docker images
REPOSITORY              TAG                 IMAGE ID            CREATED              SIZE
sample3-oidc            latest              fb3e4fdd24fb        About a minute ago   428 MB
sample2-config          latest              a720e5472a76        10 minutes ago       428 MB
forgerock/openig-base   latest              a93fdd6074b8        20 minutes ago       428 MB

The sample3-oidc image should be in the list of repositories.

Run the Docker image on port 8080:

$ docker run -p 8080:8080 sample3-oidc

Tomcat starts up and the console displays the OpenIG message log. Read the message log to see the progress of the startup. When the startup is complete, a message similar to this is displayed:

org.apache.catalina.startup.Catalina.start Server startup in 8385 ms

Test the setup on http://openig.example.com:8080/openid.

Depending on whether you logged out of Google, you might need to authenticate.

The Google login is used to give you access to the OIDC Test Page, and you are asked to allow access. You should see a screen showing something like this:

Welcome to the OIDC Test Page

      Howdy George Costanza

      You are working on host a0b1c2345d67

What is happening behind the scenes:

In the terminal that is running the Docker image, press CTRL-C to stop the image.