feat(device-plane): enable B2 discovery ingress

device-plane/docker-compose.device-plane.yml

@@ -43,7 +43,9 @@ services:
       DEVICE_DATABASE_USER: device_plane
       DEVICE_DATABASE_PASSWORD_FILE: /run/nodedc-secrets/postgres-password
       DEVICE_DATABASE_POOL_SIZE: "10"
-      DEVICE_DISCOVERY_INGEST_ENABLED: "false"
+      DEVICE_DISCOVERY_INGEST_ENABLED: "true"
+      DEVICE_GATEWAY_CORE_TOKEN_FILE: /run/nodedc-secrets/gateway-core-token
+      DEVICE_IDENTIFIER_PEPPER_FILE: /run/nodedc-secrets/identifier-pepper
     volumes:
       - type: bind
         source: /volume1/docker/nodedc-device-plane/secrets/postgres-password
@@ -51,6 +53,18 @@ services:
         read_only: true
         bind:
           create_host_path: false
+      - type: bind
+        source: /volume1/docker/nodedc-device-plane/secrets/gateway-core-token
+        target: /run/nodedc-secrets/gateway-core-token
+        read_only: true
+        bind:
+          create_host_path: false
+      - type: bind
+        source: /volume1/docker/nodedc-device-plane/secrets/identifier-pepper
+        target: /run/nodedc-secrets/identifier-pepper
+        read_only: true
+        bind:
+          create_host_path: false
     ports:
       - "127.0.0.1:18120:18120"
     networks:
@@ -85,16 +99,34 @@ services:
     environment:
       DEVICE_GATEWAY_HEALTH_HOST: 0.0.0.0
       DEVICE_GATEWAY_HEALTH_PORT: "18121"
-      DEVICE_GATEWAY_LISTEN_ENABLED: "false"
-      DEVICE_GATEWAY_TCP_HOST: 127.0.0.1
+      DEVICE_GATEWAY_LISTEN_ENABLED: "true"
+      DEVICE_GATEWAY_PUBLIC_INGRESS_ENABLED: "true"
+      DEVICE_GATEWAY_TCP_HOST: 0.0.0.0
       DEVICE_GATEWAY_TCP_PORT: "9921"
+      DEVICE_GATEWAY_CORE_URL: http://device-control-core:18120
+      DEVICE_GATEWAY_CORE_TOKEN_FILE: /run/nodedc-secrets/gateway-core-token
+      DEVICE_GATEWAY_CORE_TIMEOUT_MS: "5000"
+      DEVICE_GATEWAY_MAX_BUFFERED_BYTES: "65536"
       DEVICE_GATEWAY_MAX_SESSIONS: "100"
+      DEVICE_GATEWAY_MAX_SESSIONS_PER_ADDRESS: "10"
+      DEVICE_GATEWAY_MAX_CONNECTIONS_PER_MINUTE_PER_ADDRESS: "30"
       DEVICE_GATEWAY_SESSION_TIMEOUT_MS: "10000"
+    volumes:
+      - type: bind
+        source: /volume1/docker/nodedc-device-plane/secrets/gateway-core-token
+        target: /run/nodedc-secrets/gateway-core-token
+        read_only: true
+        bind:
+          create_host_path: false
     ports:
       - "127.0.0.1:18121:18121"
+      - "0.0.0.0:9921:9921"
     networks:
       - device-plane-private
       - device-plane-control
+    depends_on:
+      device-control-core:
+        condition: service_healthy
     security_opt:
       - no-new-privileges:true
     cap_drop: