Files
ss-tools/docker-compose.full-flow-soak.yml

28 lines
972 B
YAML

# Explicit opt-in laboratory observer. No Docker socket enters this container.
services:
soak:
profiles: ["stage6-soak"]
image: ss-tools-full-flow-backend
init: true
restart: on-failure
entrypoint: ["python", "/opt/soak/collector.py"]
command: ["run"]
environment:
SOAK_DATABASE_HOST: db
SOAK_DATABASE_PORT: "5432"
volumes:
- ./scripts/stage6_soak:/opt/soak:ro
- ${SOAK_EVIDENCE_DIR:-./artifacts/docker-stage6/soak}:/evidence
- ${FULL_FLOW_SOAK_ENV_FILE:-/tmp/ss-tools-full-flow.env}:/run/secrets/full-flow.env:ro
- type: bind
source: ${SOAK_ACCEPTANCE_DIR:?SOAK_ACCEPTANCE_INPUT_UNAVAILABLE - set an existing independently audited artifact or external directory}
target: /acceptance
read_only: true
bind:
create_host_path: false
- storage:/retained-storage:ro
depends_on:
backend:
condition: service_healthy
stop_grace_period: 60s