# Copyright 2020 Red Hat, Inc.
# All Rights Reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.

FROM quay.rdoproject.org/podified-master-centos10/openstack-os:d136cbd30345d0c918569def6d4766d4
USER root
RUN bash /usr/local/bin/uid_gid_manage keystone
RUN dnf -y install httpd mod_auth_gssapi mod_auth_openidc mod_ssl openstack-keystone python3-ldappool python3-mod_wsgi python3-requests-kerberos && dnf clean all && rm -rf /var/cache/dnf
RUN if [ '10' == '9' ];then dnf -y install mod_auth_mellon && dnf clean all && rm -rf /var/cache/dnf; fi
RUN mkdir -p /var/www/cgi-bin/keystone && chown -R keystone /var/www/cgi-bin/keystone
RUN cp /usr/share/tcib/container-images/kolla/keystone/extend_start.sh /usr/local/bin/kolla_extend_start
RUN chmod 755 /usr/local/bin/kolla_extend_start
RUN cp -a /usr/bin/keystone-wsgi-public /var/www/cgi-bin/keystone/main
RUN cp -a /usr/bin/keystone-wsgi-admin /var/www/cgi-bin/keystone/admin
RUN sed -i -r 's,^(Listen 80),#\1,' /etc/httpd/conf/httpd.conf
RUN sed -i -r 's,^(Listen 443),#\1,' /etc/httpd/conf.d/ssl.conf