Add initial package and configuration files for FHIR info Gateway

config.yaml

@@ -1,5 +1,5 @@
 projectName: platform
-image: jembi/platform:3.0.0-beta
+image: jembi/platform:latest
 logPath: /tmp/logs
 
 packages:
@@ -26,6 +26,7 @@ packages:
  - database-postgres
  - reprocess-mediator
  - fhir-ig-importer
+ - fhir-info-gateway
 
 profiles:
  - name: cdr-dw
@@ -75,4 +76,3 @@ profiles:
  - openhim-mapping-mediator
  envFiles:
  - mpi.env
-

fhir-info-gateway/docker-compose.dev.yml

@@ -0,0 +1,8 @@
+version: '3.9'
+
+services:
+ fhir-info-gateway:
+ ports:
+ - target: 8080
+ published: 8880
+ mode: host

fhir-info-gateway/docker-compose.yml

@@ -0,0 +1,29 @@
+version: "3.9"
+services:
+ fhir-info-gateway:
+ image: ${FHIR_INFO_GATEWAY_IMAGE}
+ networks:
+ openhim:
+ default:
+ environment:
+ TOKEN_ISSUER: ${KC_API_URL}/realms/${KC_REALM_NAME}
+ ACCESS_CHECKER: ${ACCESS_CHECKER}
+ PROXY_TO: ${PROXY_TO}
+ BACKEND_TYPE: ${BACKEND_TYPE}
+ RUN_MODE: ${RUN_MODE}
+ deploy:
+ replicas: ${FHIR_INFO_GATEWAY_INSTANCES}
+ placement:
+ max_replicas_per_node: ${FHIR_INFO_GATEWAY_MAX_REPLICAS_PER_NODE}
+ resources:
+ limits:
+ cpus: ${FHIR_INFO_GATEWAY_CPU_LIMIT}
+ memory: ${FHIR_INFO_GATEWAY_MEMORY_LIMIT}
+ reservations:
+ cpus: ${FHIR_INFO_GATEWAY_CPU_RESERVE}
+ memory: ${FHIR_INFO_GATEWAY_MEMORY_RESERVE}
+ networks:
+ openhim:
+ name: openhim_public
+ external: true
+ default:

fhir-info-gateway/package-metadata.json

@@ -0,0 +1,23 @@
+{
+ "id": "fhir-info-gateway",
+ "name": "FHIR Info Gateway",
+ "description": "Implement the FHIR Info Gateway as a platform package which sits between the OpenHIM and MPI Mediator and any other direct FHIR access",
+ "type": "infrastructure",
+ "version": "0.0.1",
+ "dependencies": ["mpi-mediator"],
+ "environmentVariables": {
+ "MPI_PROXY_URL": "http://localhost:5001",
+ "ACCESS_CHECKER": "patient",
+ "RUN_MODE": "DEV",
+ "FHIR_INFO_GATEWAY_IMAGE": "jembi/fhir-info-gateway:v0.0.1",
+ "BACKEND_TYPE": "HAPI",
+ "KC_API_URL": "http://identity-access-manager-keycloak:8080",
+ "KC_REALM_NAME": "platform-realm",
+ "FHIR_INFO_GATEWAY_INSTANCES": "1",
+ "FHIR_INFO_GATEWAY_MAX_REPLICAS_PER_NODE": "1",
+ "FHIR_INFO_GATEWAY_CPU_LIMIT": "0",
+ "FHIR_INFO_GATEWAY_MEMORY_LIMIT": "2G",
+ "FHIR_INFO_GATEWAY_CPU_RESERVE": "0.05",
+ "FHIR_INFO_GATEWAY_MEMORY_RESERVE": "500M"
+ }
+}

fhir-info-gateway/swarm.sh

@@ -0,0 +1,81 @@
+#!/bin/bash
+
+declare ACTION=""
+declare MODE=""
+declare COMPOSE_FILE_PATH=""
+declare UTILS_PATH=""
+declare SERVICE_NAMES=()
+declare STACK="fhir-info-gateway"
+
+function init_vars() {
+ ACTION=$1
+ MODE=$2
+
+ COMPOSE_FILE_PATH=$(
+ cd "$(dirname "${BASH_SOURCE[0]}")" || exit
+ pwd -P
+ )
+
+ UTILS_PATH="${COMPOSE_FILE_PATH}/../utils"
+
+ SERVICE_NAMES=(
+ "fhir-info-gateway"
+ )
+
+ readonly ACTION
+ readonly MODE
+ readonly COMPOSE_FILE_PATH
+ readonly UTILS_PATH
+ readonly SERVICE_NAMES
+ readonly STACK
+}
+
+# shellcheck disable=SC1091
+function import_sources() {
+ source "${UTILS_PATH}/docker-utils.sh"
+ source "${UTILS_PATH}/log.sh"
+}
+
+function initialize_package() {
+ local package_dev_compose_filename=""
+ if [[ "${MODE}" == "dev" ]]; then
+ log info "Running package in DEV mode"
+ package_dev_compose_filename="docker-compose.dev.yml"
+ else
+ log info "Running package in PROD mode"
+ fi
+
+ (
+ docker::deploy_service $STACK "${COMPOSE_FILE_PATH}" "docker-compose.yml" "$package_dev_compose_filename"
+ ) || {
+ log error "Failed to deploy package"
+ exit 1
+ }
+}
+
+function destroy_package() {
+ docker::stack_destroy "$STACK"
+}
+
+main() {
+ init_vars "$@"
+ import_sources
+
+ if [[ "${ACTION}" == "init" ]] || [[ "${ACTION}" == "up" ]]; then
+ log info "Running package in Single node mode"
+
+ initialize_package
+ elif [[ "${ACTION}" == "down" ]]; then
+ log info "Scaling down package"
+
+ docker::scale_services "$STACK" 0
+ elif [[ "${ACTION}" == "destroy" ]]; then
+ log info "Destroying package"
+
+ destroy_package
+ else
+ log error "Valid options are: init, up, down, or destroy"
+ fi
+}
+
+main "$@"

interoperability-layer-openhim/docker-compose.yml

@@ -24,6 +24,10 @@ services:
  - api_openid_clientId=${KC_OPENHIM_CLIENT_ID}
  - api_openid_clientSecret=${KC_OPENHIM_CLIENT_SECRET}
  - openhimConsoleBaseUrl=${OPENHIM_CONSOLE_BASE_URL}
+ - authentication_enableJWTAuthentication=true
+ - authentication_jwt_jwksUri=${KC_API_URL}/realms/${KC_REALM_NAME}/protocol/openid-connect/certs
+ - authentication_jwt_algorithms=RS256
+ - authentication_jwt_issuer=${KC_FRONTEND_URL}/realms/${KC_REALM_NAME}
  deploy:
  replicas: ${OPENHIM_CORE_INSTANCES}
  placement: