chris-kiick-sp / sailpoint-iiq

Sailpoint Identity IQ Dockerized

Notes:

• The container is java version specific and this script WILL break if Oracle releases a newer build of 1.8. I had to hack up the java8 install script and it's not pretty, or robust.
• The containers are pretty fat. They don't use Alpine. Future work would be to port to Alpine and slim down the container as much as possible.
• It's using Mariadb, the forked open source version of MySQL. It works, but it's not officially supported. Future work would be to use an 'official' MySQL image.
• Access the IIQ UI via port 8888, so as not to conflict with other sandbox bulids you may have. The passwords are standard.
• The LCM is imported, but none of the SSD stuff is there. Future work would be to include a good chunk of those add-ons.
• Currently setup for IIQ 7.3. Edit to use other versions. IIQ Patches are not installed (more future work).
• Future work: integrate with SSB and use volume for IIQ in docker.

Prerequisites

Please note that Identity IQ is closed source so you first need to get a license for Idenity IQ and go to https://community.sailpoint.com/ to download the software. You will put the downloaded identityiq-x.y.zip into the build/src/ directory to get started. I provide a dummy file for demo purposes. This does not include ANY Sailpoint proprietary code and can only be used to check if this "dockerization" works.

Description

Debian Jessie, Oracle JDK 8 and Tomcat 8 based docker container. Inspired by dodorka/tomcat

Container will run in background, IIQ will be run from mounted volume.

Includes:

• Oracle JDK 1.8.1xx (pulling latest version automatically)
• Tomcat 8.5.29 (maybe you need to change this to current version)
• Git, wget, curl, build-essential
• mariadb database

Docker

Get started with docker for Windows here: https://docs.docker.com/engine/installation/windows/

Volumes

Currently commented out: add them back in, but you have to configure the local directories first. Exports a volume on /opt/tomcat/webapps (if you use this, you need to expand your identityiq.war manually to that directory. You can mount the volume on startup to a local directory containing your war file or exploded war directory.

Ports

Two ports are exposed:

• 8080: default Tomcat port.
• 8009: default Tomcat debug port.

Remember to map the ports to the docker host with "docker run" or in docker-compose.yml.

How to run the container

Using docker compose

Build with:

docker-compose build

Please do not upload this docker container to a public docker registry: Sailpoint IIQ is closed source and not publicly available.

If you have docker-compose installed, you can just launch:

docker-compose up -d

Usage

Login

Go to http://localhost:8080/identityiq. User: spadmin Password: admin

A warning regarding admin user for tomcat management console

• Please note that the image contains a tomcat-users.xml file, including an admin user (password admin). For the time being, should you wish to change that, fork this repo and modify the xml file accordingly.
• The manager application is accessible from all hosts, an appropriate configuration was deployed to /opt/tomcat/conf/Catalina/localhost/manager.xml