前提

现在依赖的底层Hadoop+Spark环境是10.110.18.10/10.110.18.18/10.110.18.19集群。

docker容器启动在10.110.18.216/10.110.18.217/10.110.18.218集群。

keycloak与mysql通过容器部署在10.110.13.208主机。

keycloak的访问路径是http://10.110.13.208:8380/auth ，管理控制台用户名admin，密码123456

可以通过http://10.110.18.216/idsw直接访问idsw环境： 用户名test01/密码123456

定制Tomcat

建议使用JDK 8+，Tomcat 8+

在本地工程开启keycloak认证，因此需要对Tomcat做出定制，具体参照tfs的idsw-portal镜像的Dockerfile

http://10.110.13.73:8080/tfs/DefaultCollection/Inspur%20Cloud%20Platform/DA%20-%20DS%20%E6%95%B0%E6%8D%AE%E7%A7%91%E5%AD%A6/_git/DataScience-portal?path=%2Fdocker-images%2Fidsw-portal%2FDockerfile&version=GBmaster&_a=contents

首先，将keycloak-tomcat8-adapter/ 目录的jar拷贝到tomcat的lib目录

将context.xml 拷贝到tomcat的conf目录，这里是开启tomcat的keycloak认证

nginx配置

安装nginx，配置NGINX_HOME/conf/nginx.conf

worker_processes  1;

events {
    worker_connections  1024;
}


http {
    include       mime.types;
    default_type  application/octet-stream;

    sendfile        on;

    keepalive_timeout  65;

    server {
        listen       80;
        client_max_body_size 100M;

    location /user {
        proxy_pass http://10.110.18.216:8000;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
    }

    location /hub {
        proxy_pass http://10.110.18.216:8000;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }

    location /idsw {
        proxy_pass http://localhost:8080;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Host $host:$server_port;
    }

    }

}

本地工程

克隆项目

git clone http://10.110.13.208/root/idsw.git

maven编译发布

maven clean package

启动tomcat