change
This commit is contained in:
Ubuntu
34
dev/deptrack/README.md
Executable file
34
dev/deptrack/README.md
Executable file
@@ -0,0 +1,34 @@
|
||||
#Installatie
|
||||
kubectl apply -f deptrack.yaml
|
||||
|
||||
Opletten dat de API-URL klopt met VIMEXX DNS in stellingen: deptracka.alldcs.nl
|
||||
Dit kun je controleren door te "pingen".
|
||||
In de yaml moet de setting staan:
|
||||
|
||||
- name: API_BASE_URL
|
||||
value: 'https://deptracka-dev.alldcs.nl'
|
||||
|
||||
#configuratie tekton:
|
||||
|
||||
- ga naar deptrackmenu -> configuration -> access-management -> teams
|
||||
- kijk bij team "automation" en kopieer de api-key
|
||||
- vul die in in de pipelinerun en in de gitea-trigger-template
|
||||
- Je moet ook een project aanmaken met de juiste versie
|
||||
|
||||
#integratie met defectdojo
|
||||
|
||||
- haal de api key v2 op in defectdojo (menu rechtsboven bij symbool poppetje);
|
||||
- vul die in bij deptrack bij integrations -> defectdojo
|
||||
- je moet ook properties aanmaken:
|
||||
|
||||
Attribute Value
|
||||
Group Name integrations
|
||||
Property Name defectdojo.engagementId
|
||||
Property Value The CI/CD engagement ID to upload findings to, noted in Step 3 s
|
||||
Property Type STRING
|
||||
|
||||
Zie ook: https://docs.dependencytrack.org/integrations/defectdojo/
|
||||
|
||||
#ingressroutes
|
||||
|
||||
werkt met TCP-route op tls en http
|
||||
252
dev/deptrack/deptrack.old
Normal file
252
dev/deptrack/deptrack.old
Normal file
@@ -0,0 +1,252 @@
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: deptrack
|
||||
---
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: deptrack-apiserver
|
||||
namespace: deptrack
|
||||
labels:
|
||||
app: deptrack-apiserver
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
app: deptrack-apiserver
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: deptrack-apiserver
|
||||
spec:
|
||||
containers:
|
||||
- name: deptrack-apiserver
|
||||
image: dependencytrack/apiserver
|
||||
ports:
|
||||
- containerPort: 8080
|
||||
env:
|
||||
- name: ALPINE_DATABASE_MODE
|
||||
value: 'external'
|
||||
- name: ALPINE_DATABASE_URL
|
||||
value: 'jdbc:postgresql://postgres13.postgres:5432/deptrack'
|
||||
# value: 'jdbc:postgresql://192.168.2.233:5432/deptrack'
|
||||
- name: ALPINE_DATABASE_DRIVER
|
||||
value: 'org.postgresql.Driver'
|
||||
- name: ALPINE_DATABASE_USERNAME
|
||||
value: 'deptrack'
|
||||
- name: ALPINE_DATABASE_PASSWORD
|
||||
value: 'deptrack'
|
||||
- name: ALPINE_DATABASE_POOL_ENABLED
|
||||
value: 'true'
|
||||
- name: ALPINE_DATABASE_POOL_MAX_SIZE
|
||||
value: '20'
|
||||
- name: ALPINE_DATABASE_POOL_MIN_IDLE
|
||||
value: '10'
|
||||
- name: ALPINE_DATABASE_POOL_IDLE_TIMEOUT
|
||||
value: '300000'
|
||||
- name: ALPINE_DATABASE_POOL_MAX_LIFETIME
|
||||
value: '600000'
|
||||
volumeMounts:
|
||||
- mountPath: /data
|
||||
name: data
|
||||
volumes:
|
||||
- name: data
|
||||
persistentVolumeClaim:
|
||||
claimName: deptrack-data-pvc
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: deptrack-apiserver
|
||||
namespace: deptrack
|
||||
labels:
|
||||
name: deptrack-apiserver
|
||||
spec:
|
||||
type: ClusterIP
|
||||
ports:
|
||||
- port: 8080
|
||||
name: deptrack-apiserver
|
||||
selector:
|
||||
app: deptrack-apiserver
|
||||
---
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: deptrack-frontend
|
||||
namespace: deptrack
|
||||
labels:
|
||||
app: deptrack-frontend
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
app: deptrack-frontend
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: deptrack-frontend
|
||||
spec:
|
||||
containers:
|
||||
- name: deptrack-frontend
|
||||
image: dependencytrack/frontend
|
||||
ports:
|
||||
- containerPort: 8080
|
||||
env:
|
||||
- name: API_BASE_URL
|
||||
value: 'https://deptracka-dev.allarddcs.nl'
|
||||
volumeMounts:
|
||||
- mountPath: /app/static/config.json
|
||||
name: config
|
||||
volumes:
|
||||
- name: config
|
||||
persistentVolumeClaim:
|
||||
claimName: deptrack-config-pvc
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: deptrack-frontend
|
||||
namespace: deptrack
|
||||
labels:
|
||||
name: deptrack-frontend
|
||||
spec:
|
||||
type: ClusterIP
|
||||
ports:
|
||||
- port: 8080
|
||||
name: deptrack-frontend
|
||||
selector:
|
||||
app: deptrack-frontend
|
||||
---
|
||||
apiVersion: traefik.io/v1alpha1
|
||||
kind: IngressRoute
|
||||
metadata:
|
||||
name: deptrackf-http
|
||||
namespace: deptrack
|
||||
spec:
|
||||
entryPoints:
|
||||
- web
|
||||
routes:
|
||||
- match: Host(`deptrackf-dev.allarddcs.nl`)
|
||||
kind: Rule
|
||||
services:
|
||||
- name: deptrack-frontend
|
||||
port: 8080
|
||||
---
|
||||
apiVersion: traefik.io/v1alpha1
|
||||
kind: IngressRoute
|
||||
metadata:
|
||||
name: deptracka-http
|
||||
namespace: deptrack
|
||||
spec:
|
||||
entryPoints:
|
||||
- web
|
||||
routes:
|
||||
- match: Host(`deptracka-dev.allarddcs.nl`)
|
||||
kind: Rule
|
||||
services:
|
||||
- name: deptrack-apiserver
|
||||
port: 8080
|
||||
---
|
||||
apiVersion: traefik.io/v1alpha1
|
||||
kind: IngressRoute
|
||||
metadata:
|
||||
name: deptrackf-tls
|
||||
namespace: deptrack
|
||||
spec:
|
||||
entryPoints:
|
||||
- websecure
|
||||
routes:
|
||||
- match: Host(`deptrackf-dev.allarddcs.nl`)
|
||||
kind: Rule
|
||||
services:
|
||||
- name: deptrack-frontend
|
||||
port: 8080
|
||||
tls:
|
||||
certResolver: letsencrypt
|
||||
---
|
||||
apiVersion: traefik.io/v1alpha1
|
||||
kind: IngressRoute
|
||||
metadata:
|
||||
name: deptracka-tls
|
||||
namespace: deptrack
|
||||
spec:
|
||||
entryPoints:
|
||||
- websecure
|
||||
routes:
|
||||
- match: Host(`deptracka-dev.allarddcs.nl`)
|
||||
kind: Rule
|
||||
services:
|
||||
- name: deptrack-apiserver
|
||||
port: 8080
|
||||
tls:
|
||||
certResolver: letsencrypt
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: PersistentVolume
|
||||
metadata:
|
||||
name: deptrack-data-pv
|
||||
spec:
|
||||
storageClassName: ""
|
||||
capacity:
|
||||
storage: 1Gi
|
||||
accessModes:
|
||||
- ReadWriteMany
|
||||
persistentVolumeReclaimPolicy: Retain
|
||||
mountOptions:
|
||||
- hard
|
||||
- nfsvers=4.1
|
||||
nfs:
|
||||
server: 192.168.2.110
|
||||
path: /mnt/nfs_share/deptrack/data
|
||||
readOnly: false
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: deptrack-data-pvc
|
||||
namespace: deptrack
|
||||
spec:
|
||||
storageClassName: ""
|
||||
volumeName: deptrack-data-pv
|
||||
accessModes:
|
||||
- ReadWriteMany
|
||||
volumeMode: Filesystem
|
||||
resources:
|
||||
requests:
|
||||
storage: 1Gi
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: PersistentVolume
|
||||
metadata:
|
||||
name: deptrack-config-pv
|
||||
spec:
|
||||
storageClassName: ""
|
||||
capacity:
|
||||
storage: 1Gi
|
||||
accessModes:
|
||||
- ReadWriteMany
|
||||
persistentVolumeReclaimPolicy: Retain
|
||||
mountOptions:
|
||||
- hard
|
||||
- nfsvers=4.1
|
||||
nfs:
|
||||
server: 192.168.2.110
|
||||
path: /mnt/nfs_share/deptrack/config
|
||||
readOnly: false
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: deptrack-config-pvc
|
||||
namespace: deptrack
|
||||
spec:
|
||||
storageClassName: ""
|
||||
volumeName: deptrack-config-pv
|
||||
accessModes:
|
||||
- ReadWriteMany
|
||||
volumeMode: Filesystem
|
||||
resources:
|
||||
requests:
|
||||
storage: 1Gi
|
||||
|
||||
292
dev/deptrack/deptrack.yaml
Normal file
292
dev/deptrack/deptrack.yaml
Normal file
@@ -0,0 +1,292 @@
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: deptrack
|
||||
---
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: deptrack-apiserver
|
||||
namespace: deptrack
|
||||
labels:
|
||||
app: deptrack-apiserver
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
app: deptrack-apiserver
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: deptrack-apiserver
|
||||
spec:
|
||||
initContainers:
|
||||
- name: init-deptrack
|
||||
image: dependencytrack/apiserver
|
||||
command:
|
||||
- sh
|
||||
- -c
|
||||
- |
|
||||
if [ ! -d /data/.dependency-track ] || [ -z "$(ls -A /data/.dependency-track)" ]; then
|
||||
echo "Seeding /data/.dependency-track from container image..."
|
||||
mkdir -p /data/.dependency-track
|
||||
cp -r /opt/dependency-track/.dependency-track/* /data/.dependency-track/
|
||||
echo "Seeding complete."
|
||||
else
|
||||
echo "/data/.dependency-track already populated, skipping."
|
||||
fi
|
||||
volumeMounts:
|
||||
- name: data
|
||||
mountPath: /data
|
||||
containers:
|
||||
- name: deptrack-apiserver
|
||||
image: dependencytrack/apiserver
|
||||
ports:
|
||||
- containerPort: 8080
|
||||
env:
|
||||
- name: ALPINE_DATABASE_MODE
|
||||
value: 'external'
|
||||
- name: ALPINE_DATABASE_URL
|
||||
value: 'jdbc:postgresql://postgres13.postgres:5432/deptrack'
|
||||
- name: ALPINE_DATABASE_DRIVER
|
||||
value: 'org.postgresql.Driver'
|
||||
- name: ALPINE_DATABASE_USERNAME
|
||||
value: 'deptrack'
|
||||
- name: ALPINE_DATABASE_PASSWORD
|
||||
value: 'deptrack'
|
||||
- name: ALPINE_DATABASE_POOL_ENABLED
|
||||
value: 'true'
|
||||
- name: ALPINE_DATABASE_POOL_MAX_SIZE
|
||||
value: '20'
|
||||
- name: ALPINE_DATABASE_POOL_MIN_IDLE
|
||||
value: '10'
|
||||
- name: ALPINE_DATABASE_POOL_IDLE_TIMEOUT
|
||||
value: '300000'
|
||||
- name: ALPINE_DATABASE_POOL_MAX_LIFETIME
|
||||
value: '600000'
|
||||
volumeMounts:
|
||||
- mountPath: /data
|
||||
name: data
|
||||
volumes:
|
||||
- name: data
|
||||
persistentVolumeClaim:
|
||||
claimName: deptrack-data-pvc
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: deptrack-apiserver
|
||||
namespace: deptrack
|
||||
labels:
|
||||
name: deptrack-apiserver
|
||||
spec:
|
||||
type: ClusterIP
|
||||
ports:
|
||||
- port: 8080
|
||||
name: deptrack-apiserver
|
||||
selector:
|
||||
app: deptrack-apiserver
|
||||
---
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: deptrack-frontend
|
||||
namespace: deptrack
|
||||
labels:
|
||||
app: deptrack-frontend
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
app: deptrack-frontend
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: deptrack-frontend
|
||||
spec:
|
||||
initContainers:
|
||||
- name: init-frontend-config
|
||||
image: dependencytrack/frontend
|
||||
command:
|
||||
- sh
|
||||
- -c
|
||||
- |
|
||||
echo "Init container starting..."
|
||||
# Make sure temporary mount exists
|
||||
mkdir -p /mnt/config
|
||||
|
||||
# Copy config.json from image to PVC if it doesn't exist
|
||||
if [ ! -f /mnt/config/config.json ]; then
|
||||
echo "Seeding config.json from container image..."
|
||||
cp /opt/owasp/dependency-track-frontend/static/config.json /mnt/config/config.json
|
||||
echo "Seeding complete."
|
||||
else
|
||||
echo "config.json already exists on PVC, skipping."
|
||||
fi
|
||||
volumeMounts:
|
||||
- name: config
|
||||
mountPath: /mnt/config
|
||||
containers:
|
||||
- name: deptrack-frontend
|
||||
image: dependencytrack/frontend
|
||||
ports:
|
||||
- containerPort: 8080
|
||||
env:
|
||||
- name: API_BASE_URL
|
||||
value: 'https://deptracka-dev.allarddcs.nl'
|
||||
volumeMounts:
|
||||
- name: config
|
||||
mountPath: /opt/owasp/dependency-track-frontend/static/config.json
|
||||
subPath: config.json
|
||||
volumes:
|
||||
- name: config
|
||||
persistentVolumeClaim:
|
||||
claimName: deptrack-config-pvc
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: deptrack-frontend
|
||||
namespace: deptrack
|
||||
labels:
|
||||
name: deptrack-frontend
|
||||
spec:
|
||||
type: ClusterIP
|
||||
ports:
|
||||
- port: 8080
|
||||
name: deptrack-frontend
|
||||
selector:
|
||||
app: deptrack-frontend
|
||||
---
|
||||
apiVersion: traefik.io/v1alpha1
|
||||
kind: IngressRoute
|
||||
metadata:
|
||||
name: deptrackf-http
|
||||
namespace: deptrack
|
||||
spec:
|
||||
entryPoints:
|
||||
- web
|
||||
routes:
|
||||
- match: Host(`deptrackf-dev.allarddcs.nl`)
|
||||
kind: Rule
|
||||
services:
|
||||
- name: deptrack-frontend
|
||||
port: 8080
|
||||
---
|
||||
apiVersion: traefik.io/v1alpha1
|
||||
kind: IngressRoute
|
||||
metadata:
|
||||
name: deptracka-http
|
||||
namespace: deptrack
|
||||
spec:
|
||||
entryPoints:
|
||||
- web
|
||||
routes:
|
||||
- match: Host(`deptracka-dev.allarddcs.nl`)
|
||||
kind: Rule
|
||||
services:
|
||||
- name: deptrack-apiserver
|
||||
port: 8080
|
||||
---
|
||||
apiVersion: traefik.io/v1alpha1
|
||||
kind: IngressRoute
|
||||
metadata:
|
||||
name: deptrackf-tls
|
||||
namespace: deptrack
|
||||
spec:
|
||||
entryPoints:
|
||||
- websecure
|
||||
routes:
|
||||
- match: Host(`deptrackf-dev.allarddcs.nl`)
|
||||
kind: Rule
|
||||
services:
|
||||
- name: deptrack-frontend
|
||||
port: 8080
|
||||
tls:
|
||||
certResolver: letsencrypt
|
||||
---
|
||||
apiVersion: traefik.io/v1alpha1
|
||||
kind: IngressRoute
|
||||
metadata:
|
||||
name: deptracka-tls
|
||||
namespace: deptrack
|
||||
spec:
|
||||
entryPoints:
|
||||
- websecure
|
||||
routes:
|
||||
- match: Host(`deptracka-dev.allarddcs.nl`)
|
||||
kind: Rule
|
||||
services:
|
||||
- name: deptrack-apiserver
|
||||
port: 8080
|
||||
tls:
|
||||
certResolver: letsencrypt
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: PersistentVolume
|
||||
metadata:
|
||||
name: deptrack-data-pv
|
||||
spec:
|
||||
storageClassName: ""
|
||||
capacity:
|
||||
storage: 1Gi
|
||||
accessModes:
|
||||
- ReadWriteMany
|
||||
persistentVolumeReclaimPolicy: Retain
|
||||
mountOptions:
|
||||
- hard
|
||||
- nfsvers=4.1
|
||||
nfs:
|
||||
server: 192.168.2.110
|
||||
path: /mnt/nfs_share/deptrack/data
|
||||
readOnly: false
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: deptrack-data-pvc
|
||||
namespace: deptrack
|
||||
spec:
|
||||
storageClassName: ""
|
||||
volumeName: deptrack-data-pv
|
||||
accessModes:
|
||||
- ReadWriteMany
|
||||
volumeMode: Filesystem
|
||||
resources:
|
||||
requests:
|
||||
storage: 1Gi
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: PersistentVolume
|
||||
metadata:
|
||||
name: deptrack-config-pv
|
||||
spec:
|
||||
storageClassName: ""
|
||||
capacity:
|
||||
storage: 1Gi
|
||||
accessModes:
|
||||
- ReadWriteMany
|
||||
persistentVolumeReclaimPolicy: Retain
|
||||
mountOptions:
|
||||
- hard
|
||||
- nfsvers=4.1
|
||||
nfs:
|
||||
server: 192.168.2.110
|
||||
path: /mnt/nfs_share/deptrack/config
|
||||
readOnly: false
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: deptrack-config-pvc
|
||||
namespace: deptrack
|
||||
spec:
|
||||
storageClassName: ""
|
||||
volumeName: deptrack-config-pv
|
||||
accessModes:
|
||||
- ReadWriteMany
|
||||
volumeMode: Filesystem
|
||||
resources:
|
||||
requests:
|
||||
storage: 1Gi
|
||||
|
||||
Reference in New Issue
Block a user