apiVersion: v1
kind: Namespace
metadata:
  name: deptrack
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: deptrack-apiserver
  namespace: deptrack
  labels:
    app: deptrack-apiserver
spec:
  replicas: 1
  selector:
    matchLabels:
      app: deptrack-apiserver
  template:
    metadata:
      labels:
        app: deptrack-apiserver
    spec:
      initContainers:
        - name: init-deptrack
          image: dependencytrack/apiserver
          command:
            - sh
            - -c
            - |
              if [ ! -d /data/.dependency-track ] || [ -z "$(ls -A /data/.dependency-track)" ]; then
                echo "Seeding /data/.dependency-track from container image..."
                mkdir -p /data/.dependency-track
                cp -r /opt/dependency-track/.dependency-track/* /data/.dependency-track/
                echo "Seeding complete."
              else
                echo "/data/.dependency-track already populated, skipping."
              fi
          volumeMounts:
            - name: data
              mountPath: /data
      containers:
        - name: deptrack-apiserver
          image: dependencytrack/apiserver
          ports:
            - containerPort: 8080
          env:
            - name: ALPINE_DATABASE_MODE
              value: 'external'
            - name: ALPINE_DATABASE_URL
              value: 'jdbc:postgresql://postgres13.postgres:5432/deptrack'
            - name: ALPINE_DATABASE_DRIVER
              value: 'org.postgresql.Driver'
            - name: ALPINE_DATABASE_USERNAME
              value: 'deptrack'
            - name: ALPINE_DATABASE_PASSWORD
              value: 'deptrack'
            - name: ALPINE_DATABASE_POOL_ENABLED
              value: 'true'
            - name: ALPINE_DATABASE_POOL_MAX_SIZE
              value: '20'
            - name: ALPINE_DATABASE_POOL_MIN_IDLE
              value: '10'
            - name: ALPINE_DATABASE_POOL_IDLE_TIMEOUT
              value: '300000'
            - name: ALPINE_DATABASE_POOL_MAX_LIFETIME
              value: '600000'
          volumeMounts:
            - mountPath: /data
              name: data
      volumes:
        - name: data
          persistentVolumeClaim:
            claimName: deptrack-data-pvc
---
apiVersion: v1
kind: Service
metadata:
  name: deptrack-apiserver
  namespace: deptrack
  labels:
    name: deptrack-apiserver
spec:
  type: ClusterIP
  ports:
    - port: 8080
      name: deptrack-apiserver
  selector:
    app: deptrack-apiserver
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: deptrack-frontend
  namespace: deptrack
  labels:
    app: deptrack-frontend
spec:
  replicas: 1
  selector:
    matchLabels:
      app: deptrack-frontend
  template:
    metadata:
      labels:
        app: deptrack-frontend
    spec:
      initContainers:
        - name: init-frontend-config
          image: dependencytrack/frontend
          command:
            - sh
            - -c
            - |
              echo "Init container starting..."
              # Make sure temporary mount exists
              mkdir -p /mnt/config
              
              # Copy config.json from image to PVC if it doesn't exist
              if [ ! -f /mnt/config/config.json ]; then
                echo "Seeding config.json from container image..."
                cp /opt/owasp/dependency-track-frontend/static/config.json /mnt/config/config.json
                echo "Seeding complete."
              else
                echo "config.json already exists on PVC, skipping."
              fi
          volumeMounts:
            - name: config
              mountPath: /mnt/config
      containers:
        - name: deptrack-frontend
          image: dependencytrack/frontend
          ports:
            - containerPort: 8080
          env:
            - name: API_BASE_URL
              value: 'https://deptracka-dev.allarddcs.nl'
          volumeMounts:
            - name: config
              mountPath: /opt/owasp/dependency-track-frontend/static/config.json
              subPath: config.json
      volumes:
        - name: config
          persistentVolumeClaim:
            claimName: deptrack-config-pvc
---
apiVersion: v1
kind: Service
metadata:
  name: deptrack-frontend
  namespace: deptrack
  labels:
    name: deptrack-frontend
spec:
  type: ClusterIP
  ports:
    - port: 8080
      name: deptrack-frontend
  selector:
    app: deptrack-frontend
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: deptrackf-http
  namespace: deptrack
spec:
  entryPoints:
    - web
  routes:
  - match: Host(`deptrackf-dev.allarddcs.nl`)
    kind: Rule
    services:
    - name: deptrack-frontend
      port: 8080
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: deptracka-http
  namespace: deptrack
spec:
  entryPoints:
    - web
  routes:
  - match: Host(`deptracka-dev.allarddcs.nl`)
    kind: Rule
    services:
    - name: deptrack-apiserver
      port: 8080
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: deptrackf-tls
  namespace: deptrack
spec:
  entryPoints:
    - websecure
  routes:
  - match: Host(`deptrackf-dev.allarddcs.nl`)
    kind: Rule
    services:
    - name: deptrack-frontend
      port: 8080
  tls:
    certResolver: letsencrypt
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: deptracka-tls
  namespace: deptrack
spec:
  entryPoints:
    - websecure
  routes:
  - match: Host(`deptracka-dev.allarddcs.nl`)
    kind: Rule
    services:
    - name: deptrack-apiserver
      port: 8080
  tls:
    certResolver: letsencrypt
---
apiVersion: v1
kind: PersistentVolume
metadata:
  name: deptrack-data-pv
spec:
  storageClassName: ""
  capacity:
    storage: 1Gi
  accessModes:
    - ReadWriteMany
  persistentVolumeReclaimPolicy: Retain
  mountOptions:
    - hard
    - nfsvers=4.1
  nfs:
    server: 192.168.2.110
    path: /mnt/nfs_share/deptrack/data
    readOnly: false
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: deptrack-data-pvc
  namespace: deptrack
spec:
  storageClassName: ""
  volumeName: deptrack-data-pv
  accessModes:
    - ReadWriteMany
  volumeMode: Filesystem
  resources:
    requests:
      storage: 1Gi
---
apiVersion: v1
kind: PersistentVolume
metadata:
  name: deptrack-config-pv
spec:
  storageClassName: ""
  capacity:
    storage: 1Gi
  accessModes:
    - ReadWriteMany
  persistentVolumeReclaimPolicy: Retain
  mountOptions:
    - hard
    - nfsvers=4.1
  nfs:
    server: 192.168.2.110
    path: /mnt/nfs_share/deptrack/config
    readOnly: false
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: deptrack-config-pvc
  namespace: deptrack
spec:
  storageClassName: ""
  volumeName: deptrack-config-pv
  accessModes:
    - ReadWriteMany
  volumeMode: Filesystem
  resources:
    requests:
      storage: 1Gi