The {@code @SpringBootApplication} annotation enables: + *
These endpoints serve two purposes: + *
This entity exists so the scaffolded project proves end-to-end + * database integration out of the box. Developers should replace or + * extend it with their domain models.
+ */ +@Entity +@Table(name = "sample_items") +public class SampleItem { + + @Id + @GeneratedValue(strategy = GenerationType.IDENTITY) + private Long id; + + @Column(nullable = false) + private String name; + + private String description; + + @Column(name = "created_at", nullable = false, updatable = false) + private Instant createdAt = Instant.now(); + + // ── Constructors ─────────────────────────────────── + + protected SampleItem() { + // JPA requires a no-arg constructor + } + + public SampleItem(String name, String description) { + this.name = name; + this.description = description; + } + + // ── Getters & Setters ────────────────────────────── + + public Long getId() { + return id; + } + + public String getName() { + return name; + } + + public void setName(String name) { + this.name = name; + } + + public String getDescription() { + return description; + } + + public void setDescription(String description) { + this.description = description; + } + + public Instant getCreatedAt() { + return createdAt; + } +} diff --git a/apps/portal/examples/spring-boot-template/content/source/src/main/java/com/helios/app/repository/SampleItemRepository.java b/apps/portal/examples/spring-boot-template/content/source/src/main/java/com/helios/app/repository/SampleItemRepository.java new file mode 100644 index 0000000..abd2aa0 --- /dev/null +++ b/apps/portal/examples/spring-boot-template/content/source/src/main/java/com/helios/app/repository/SampleItemRepository.java @@ -0,0 +1,15 @@ +package com.helios.app.repository; + +import com.helios.app.entity.SampleItem; +import org.springframework.data.jpa.repository.JpaRepository; +import org.springframework.stereotype.Repository; + +/** + * Spring Data JPA repository for {@link SampleItem}. + * + *Provides CRUD operations and query derivation. Developers can add + * custom query methods following Spring Data naming conventions.
+ */ +@Repository +public interface SampleItemRepository extends JpaRepositoryUses an in-memory H2 database (via the {@code test} profile) so + * the test suite runs without an external PostgreSQL instance — critical + * for CI pipelines (Tekton) where a DB may not yet be provisioned.
+ */ +@SpringBootTest +@ActiveProfiles("test") +class ApplicationTests { + + @Test + void contextLoads() { + // If the context fails to load, this test will fail. + } +} diff --git a/apps/portal/examples/spring-boot-template/content/source/src/test/resources/application-test.yml b/apps/portal/examples/spring-boot-template/content/source/src/test/resources/application-test.yml new file mode 100644 index 0000000..7a0ed2a --- /dev/null +++ b/apps/portal/examples/spring-boot-template/content/source/src/test/resources/application-test.yml @@ -0,0 +1,14 @@ +# ────────────────────────────────────────────────────────── +# Test Profile — used by CI/CD pipelines (Tekton) and local +# test runs where a real PostgreSQL instance is not available. +# ────────────────────────────────────────────────────────── +spring: + datasource: + url: jdbc:h2:mem:testdb;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE + driver-class-name: org.h2.Driver + username: sa + password: + jpa: + hibernate: + ddl-auto: create-drop + database-platform: org.hibernate.dialect.H2Dialect diff --git a/apps/portal/examples/spring-boot-template/template.yaml b/apps/portal/examples/spring-boot-template/template.yaml new file mode 100644 index 0000000..93324be --- /dev/null +++ b/apps/portal/examples/spring-boot-template/template.yaml @@ -0,0 +1,182 @@ +apiVersion: scaffolder.backstage.io/v1beta3 +kind: Template +metadata: + name: spring-boot-template + title: Java Spring Boot Template (Database-backed) + description: >- + Scaffolds a standard Java Spring Boot application (Gradle) with a PostgreSQL database. + The Helios Operator automatically provisions the database and injects + credentials (DB_HOST, DB_PORT, DB_NAME, DB_USER, DB_PASS) into the backend pod. +spec: + owner: user:guest + type: service + + parameters: + - title: Component Information + required: + - name + - port + - dockerOrg + - repoName + properties: + name: + title: Name + type: string + description: Unique name of the component + ui:autofocus: true + port: + title: Port + type: number + description: The port the Spring Boot app listens on + default: 8080 + dockerOrg: + title: Docker Registry Org/User + type: string + description: Your Docker Hub username or Organization + repoName: + title: Docker Repository Name + type: string + description: The name of the Docker repository (e.g. my-service) + + - title: Database Configuration + properties: + databaseConfig: + title: Database Settings + type: object + ui:field: DatabasePicker + + - title: Repository & Webhook + required: + - repoUrl + properties: + repoUrl: + title: Source Repository Location + type: string + ui:field: RepoUrlPicker + ui:options: + allowedHosts: + - localhost:3030 + - title: Optional Extras (Local Convenience) + properties: + registerToCatalog: + title: Register component in catalog + type: boolean + default: false + sendNotification: + title: Send Backstage notification + type: boolean + default: false + + steps: + # 1. Source Code + - id: fetch-source + name: Fetch Source Code + action: fetch:template + input: + url: ./content/source + targetPath: ./source + values: + # Use repoName as the app identifier to keep it Kubernetes/URL safe. + name: ${{ parameters.repoName }} + owner: ${{ user.entity.metadata.name or 'guest' }} + port: ${{ parameters.port }} + description: "Spring Boot service: ${{ parameters.name }}" + image: index.docker.io/${{ parameters.dockerOrg }}/${{ parameters.repoName }} + + - id: publish-source + name: Publish Source Code + action: publish:gitea + input: + description: Source Code for ${{ parameters.name }} + repoUrl: ${{ parameters.repoUrl }} + sourcePath: ./source + repoVisibility: public + + - id: create-webhook + name: Create Webhook + action: gitea:create-webhook + input: + repoUrl: ${{ parameters.repoUrl }} + # Tekton EventListener address is the service root. + webhookUrl: http://el-${{ parameters.repoName }}-listener.default.svc.cluster.local:8080 + # Deterministic secret so users don't have to provide one. + # Must match the Kubernetes secret value created below. + webhookSecret: ${{ parameters.repoName }} + events: + - push + + # 2. GitOps + - id: fetch-gitops + name: Fetch GitOps Manifests + action: fetch:template + input: + url: ./content/gitops + targetPath: ./gitops + values: + name: ${{ parameters.repoName }} + image: index.docker.io/${{ parameters.dockerOrg }}/${{ parameters.repoName }} + dockerOrg: ${{ parameters.dockerOrg }} + repoName: ${{ parameters.repoName }} + port: ${{ parameters.port }} + databaseType: ${{ parameters.databaseConfig.dbType }} + databaseName: ${{ parameters.databaseConfig.dbName }} + owner: ${{ user.entity.metadata.name or 'guest' }} + sourceRepo: ${{ steps['publish-source'].output.remoteUrl }} + gitopsRepo: ${{ steps['publish-source'].output.remoteUrl | replace(".git", "") }}-gitops + testCommand: "gradle test" + + - id: publish-gitops + name: Publish GitOps Manifests + action: publish:gitea + input: + description: GitOps Manifests for ${{ parameters.name }} + repoUrl: ${{ parameters.repoUrl }}-gitops + sourcePath: ./gitops + repoVisibility: public + + # 3. Secret + Deploy + - id: create-secret + name: Create Git Credentials Secret + action: kubernetes:create-git-credentials-secret + input: + name: ${{ parameters.repoName }} + namespace: default + username: ${{ (parameters.repoUrl | parseRepoUrl).owner }} + webhookSecret: ${{ parameters.repoName }} + + - id: apply-helios + name: Deploy to Kubernetes + action: kubernetes:apply + input: + manifestPath: ./gitops/helios-app.yaml + namespaced: true + + # 4. Registration + - id: register + name: Register Component + action: catalog:register + if: '{{ parameters.registerToCatalog }}' + input: + repoContentsUrl: ${{ steps['publish-source'].output.repoContentsUrl }} + catalogInfoPath: 'catalog-info.yaml' + + - id: notify + name: Notify User + action: notification:send + if: '{{ parameters.sendNotification }}' + input: + recipients: entity + entityRefs: + - user:default/guest + title: 'Spring Boot Template Executed' + info: 'Your Spring Boot application has been scaffolded with a PostgreSQL database!' + + output: + links: + - title: Source Repository + url: ${{ steps['publish-source'].output.remoteUrl }} + - title: GitOps Repository + url: ${{ steps['publish-gitops'].output.remoteUrl }} + - title: Open in Catalog + icon: catalog + entityRef: ${{ steps['register'].output.entityRef }} diff --git a/scripts/check-prereqs.bat b/scripts/check-prereqs.bat index ac95be0..fce2b9b 100644 --- a/scripts/check-prereqs.bat +++ b/scripts/check-prereqs.bat @@ -35,6 +35,8 @@ call :check_tool "docker" "docker --version" call :check_tool "kubectl" "kubectl version --client" call :check_tool "k3d" "k3d version" call :check_tool "cue" "cue version" +call :check_optional_tool "helm" "helm version" +call :check_optional_tool "jq" "jq --version" echo. echo [Node.js / Frontend] @@ -88,11 +90,9 @@ if %CHECK_ENV% equ 1 ( ) ) - REM Check required variables - call :check_env_var "GITHUB_TOKEN" - call :check_env_var "GITHUB_USER" - call :check_env_var "AUTH_GITHUB_CLIENT_ID" - call :check_env_var "AUTH_GITHUB_CLIENT_SECRET" + REM Check required variables (Gitea-based workflow) + call :check_env_var "DOCKER_USERNAME" + call :check_env_var "DOCKER_PASSWORD" ) ) @@ -153,3 +153,14 @@ if "!val!"=="" ( echo [OK] %~1 is configured ) goto :eof + +:check_optional_tool +REM %~1 = tool name, %~2 = version command +where %~1 >nul 2>&1 +if %errorlevel% equ 0 ( + echo [OK] %~1 found ^(Optional^) +) else ( + echo [WARN] %~1 not found. ^(Optional, but recommended for Gitea setup^) + set /a WARNINGS+=1 +) +goto :eof diff --git a/scripts/check-prereqs.sh b/scripts/check-prereqs.sh index 0381d86..a715211 100755 --- a/scripts/check-prereqs.sh +++ b/scripts/check-prereqs.sh @@ -64,6 +64,18 @@ check_tool() { fi } +# --------------------------------------------------------------------------- +# Check an optional tool (only warns if missing) +# --------------------------------------------------------------------------- +check_optional_tool() { + local name="$1" hint="$2" + if ! command -v "$name" &>/dev/null; then + warn "$name not found. (Optional, but recommended for Gitea setup). Install: $hint" + else + pass "$name $(command -v "$name")" + fi +} + # --------------------------------------------------------------------------- # Main # --------------------------------------------------------------------------- @@ -91,8 +103,7 @@ check_tool "cue" "" \ "cue version | head -1 | sed -n -E 's/.*v([0-9]+\.[0-9]+\.[0-9]+).*/\\1/p'" \ "go install cuelang.org/go/cmd/cue@latest" -check_tool "helm" "" \ - "helm version --short | sed -n -E 's/^v([0-9]+\.[0-9]+\.[0-9]+).*/\\1/p'" \ +check_optional_tool "helm" \ "https://helm.sh/docs/intro/install/" echo -e "\n${BOLD}Node.js / Frontend${NC}" @@ -105,8 +116,7 @@ check_tool "yarn" "" \ "corepack enable && corepack prepare yarn@4 --activate" echo -e "\n${BOLD}CLI Helpers${NC}" -check_tool "jq" "" \ - "jq --version | awk '{print \$1}'" \ +check_optional_tool "jq" \ "https://stedolan.github.io/jq/download/" echo -e "\n${BOLD}Runtime Checks${NC}" diff --git a/scripts/config-gitea.ps1 b/scripts/config-gitea.ps1 new file mode 100644 index 0000000..d0dfbf1 --- /dev/null +++ b/scripts/config-gitea.ps1 @@ -0,0 +1,134 @@ +param( + [string]$GiteaPort = "3030", + [string]$AdminUser = $env:GITEA_ADMIN_USER, + [string]$AdminPass = $env:GITEA_ADMIN_PASS +) + +if ([string]::IsNullOrEmpty($AdminUser)) { $AdminUser = "helios" } +if ([string]::IsNullOrEmpty($AdminPass)) { $AdminPass = "helios123" } + +$GiteaBase = "http://localhost:$GiteaPort" + +Write-Host "Cleaning up port $GiteaPort..." +Get-NetTCPConnection -LocalPort $GiteaPort -ErrorAction SilentlyContinue | ForEach-Object { + Stop-Process -Id $_.OwningProcess -Force -ErrorAction SilentlyContinue +} + +Write-Host "Port-forwarding Gitea for setup..." +$Job = Start-Job -ScriptBlock { + param($port) + kubectl port-forward -n gitea svc/gitea-http "${port}:3000" +} -ArgumentList $GiteaPort + +# Wait for Gitea to be available +$maxRetries = 10 +$retryCount = 0 +$connected = $false + +Write-Host "Waiting for Gitea at $GiteaBase..." +while ($retryCount -lt $maxRetries -and -not $connected) { + try { + $response = Invoke-RestMethod -Uri "$GiteaBase/api/v1/version" -Method Get -ErrorAction Stop + $connected = $true + Write-Host "Connected to Gitea version: $($response.version)" + } catch { + $retryCount++ + Write-Host "Retry ${retryCount}/${maxRetries}: Gitea not ready yet..." + Start-Sleep -Seconds 3 + } +} + +if (-not $connected) { + Stop-Job $Job + Remove-Job $Job + Write-Error "Failed to connect to Gitea via port-forward." + exit 1 +} + +# Create Auth Header +$Pair = "$($AdminUser):$($AdminPass)" +$Encoded = [System.Convert]::ToBase64String([System.Text.Encoding]::ASCII.GetBytes($Pair)) +$Headers = @{ + Authorization = "Basic $Encoded" + "Content-Type" = "application/json" +} + +Write-Host "Creating Gitea organization 'helios-platform'..." +try { + $body = @{ + username = "helios-platform" + full_name = "Helios Platform" + visibility = "public" + } | ConvertTo-Json + Invoke-RestMethod -Uri "$GiteaBase/api/v1/orgs" -Method Post -Headers $Headers -Body $body +} catch { + Write-Host "Organization might already exist or request failed: $_" +} + +Write-Host "Creating Gitea API token..." +$timestamp = [DateTimeOffset]::Now.ToUnixTimeSeconds() +$tokenName = "helios-platform-$timestamp" +$body = @{ + name = $tokenName + scopes = @("all") +} | ConvertTo-Json + +try { + $tokenResp = Invoke-RestMethod -Uri "$GiteaBase/api/v1/users/$AdminUser/tokens" -Method Post -Headers $Headers -Body $body + $token = $tokenResp.sha1 + if ([string]::IsNullOrEmpty($token)) { $token = $tokenResp.token } +} catch { + Write-Error "Failed to create Gitea API token: $_" + Stop-Job $Job + Remove-Job $Job + exit 1 +} + +if (-not $token) { + Write-Error "Could not extract token from response." + Stop-Job $Job + Remove-Job $Job + exit 1 +} + +Write-Host "Token created successfully." + +# Update .env files +$envFiles = @(".env", "apps/portal/.env") + +function Update-EnvVar { + param($filePath, $key, $value) + if (Test-Path $filePath) { + $lines = Get-Content $filePath + $updated = $false + $newLines = @() + foreach ($line in $lines) { + if ($line -match "^$key=") { + $newLines += "$key=$value" + $updated = $true + } else { + $newLines += $line + } + } + if (-not $updated) { + $newLines += "$key=$value" + } + $newLines | Set-Content $filePath + Write-Host "Updated $key in $filePath" + } +} + +foreach ($file in $envFiles) { + Update-EnvVar -filePath $file -key "GITEA_TOKEN" -value $token + Update-EnvVar -filePath $file -key "GITEA_USER" -value $AdminUser + Update-EnvVar -filePath $file -key "GITEA_URL" -value $GiteaBase + Update-EnvVar -filePath $file -key "GITEA_INTERNAL_URL" -value "http://gitea-http.gitea.svc.cluster.local:3000" +} + +Write-Host "=============================================" +Write-Host " Gitea configuration complete on Windows!" +Write-Host "=============================================" + +# Cleanup +Stop-Job $Job +Remove-Job $Job diff --git a/scripts/setup-argocd-creds.ps1 b/scripts/setup-argocd-creds.ps1 new file mode 100644 index 0000000..f3d2f5c --- /dev/null +++ b/scripts/setup-argocd-creds.ps1 @@ -0,0 +1,23 @@ +param( + [string]$GiteaInternalHost = "gitea-http.gitea.svc.cluster.local:3000" +) + +$user = if ($env:GITEA_ADMIN_USER) { $env:GITEA_ADMIN_USER } else { "helios" } +$pass = if ($env:GITEA_ADMIN_PASS) { $env:GITEA_ADMIN_PASS } else { "helios123" } + +$secret = @" +apiVersion: v1 +kind: Secret +metadata: + name: gitea-repo-creds + namespace: argocd + labels: + argocd.argoproj.io/secret-type: repo-creds +stringData: + type: git + url: http://$GiteaInternalHost + username: "$user" + password: "$pass" +"@ + +$secret | kubectl apply -f - diff --git a/scripts/setup-credentials.ps1 b/scripts/setup-credentials.ps1 new file mode 100644 index 0000000..c95b4e5 --- /dev/null +++ b/scripts/setup-credentials.ps1 @@ -0,0 +1,29 @@ +$dockerUser = $env:DOCKER_USERNAME +$dockerPass = $env:DOCKER_PASSWORD +$dockerServer = $env:DOCKER_SERVER +$dockerEmail = $env:DOCKER_EMAIL + +if ([string]::IsNullOrEmpty($dockerUser) -or [string]::IsNullOrEmpty($dockerPass)) { + Write-Error "DOCKER_USERNAME and DOCKER_PASSWORD must be set in .env" + exit 1 +} + +if ([string]::IsNullOrEmpty($dockerServer)) { $dockerServer = "https://index.docker.io/v1/" } +if ([string]::IsNullOrEmpty($dockerEmail)) { $dockerEmail = "dev@helios.io" } + +Write-Host "Creating docker-registry secret..." +kubectl create secret docker-registry docker-credentials ` + --docker-server=$dockerServer ` + --docker-username=$dockerUser ` + --docker-password=$dockerPass ` + --docker-email=$dockerEmail ` + --dry-run=client -o yaml | kubectl apply -f - + +Write-Host "Patching pipeline service account..." +$sa = kubectl get sa pipeline -n default -o name 2>$null +if ($LASTEXITCODE -eq 0) { + kubectl patch sa pipeline -p '{"secrets": [{"name": "docker-credentials"}]}' + Write-Host "Patched pipeline service account with docker-credentials" +} else { + Write-Host "pipeline ServiceAccount not found yet; skipping patch (will be created by Tekton)" +} diff --git a/scripts/setup-gitops-creds.ps1 b/scripts/setup-gitops-creds.ps1 new file mode 100644 index 0000000..da2c7f9 --- /dev/null +++ b/scripts/setup-gitops-creds.ps1 @@ -0,0 +1,32 @@ +param( + [string]$GiteaInternalHost = "gitea-http.gitea.svc.cluster.local:3000", + [string]$SecretName = "helios-gitops-bot" +) + +$user = if ($env:GITOPS_GIT_USER) { $env:GITOPS_GIT_USER } elseif ($env:GITEA_BOT_USER) { $env:GITEA_BOT_USER } elseif ($env:GITEA_ADMIN_USER) { $env:GITEA_ADMIN_USER } else { "helios" } +$pass = if ($env:GITOPS_GIT_PASSWORD) { $env:GITOPS_GIT_PASSWORD } elseif ($env:GITEA_BOT_PASSWORD) { $env:GITEA_BOT_PASSWORD } elseif ($env:GITEA_ADMIN_PASS) { $env:GITEA_ADMIN_PASS } else { "helios123" } + +kubectl create secret generic "$SecretName" --type=kubernetes.io/basic-auth --from-literal=username="$user" --from-literal=password="$pass" --dry-run=client -o yaml | kubectl apply -f - +kubectl annotate secret "$SecretName" "tekton.dev/git-0=http://$GiteaInternalHost" --overwrite + +# PowerShell env update logic +$envFiles = @(".env", "apps/portal/.env") +foreach ($file in $envFiles) { + if (Test-Path $file) { + $content = Get-Content $file + $updated = $false + $newLines = @() + foreach ($line in $content) { + if ($line -match "^GITOPS_SECRET_REF=") { + $newLines += "GITOPS_SECRET_REF=$SecretName" + $updated = $true + } else { + $newLines += $line + } + } + if (-not $updated) { + $newLines += "GITOPS_SECRET_REF=$SecretName" + } + $newLines | Set-Content $file + } +} diff --git a/scripts/start-portal.ps1 b/scripts/start-portal.ps1 index aebf1f8..5d8cc21 100644 --- a/scripts/start-portal.ps1 +++ b/scripts/start-portal.ps1 @@ -1,38 +1,89 @@ param( - [string]$ArgocdPort = "8080" + [string]$ArgocdPort = "8080", + [string]$GiteaLocalPort = "3030", + [string]$ProxyPort = "8001" ) -# Generate ArgoCD auth token -try { - $passB64 = kubectl -n argocd get secret argocd-initial-admin-secret -o jsonpath='{.data.password}' +$ErrorActionPreference = "Stop" +$Jobs = @() + +function Cleanup { + Write-Host "[Stop] Stopping background processes..." -ForegroundColor Yellow + foreach ($job in $Jobs) { + Stop-Job $job -ErrorAction SilentlyContinue + Remove-Job $job -ErrorAction SilentlyContinue + } + # Also kill any lingering kubectl port-forwards we might have started + Get-Process -Name "kubectl" -ErrorAction SilentlyContinue | Where-Object { $_.CommandLine -match "port-forward" -or $_.CommandLine -match "proxy" } | Stop-Process -Force -ErrorAction SilentlyContinue + Write-Host "[Done] Cleanup complete." -ForegroundColor Green +} + +# Ensure cleanup on exit +trap { Cleanup; exit } + +Write-Host "[Gitea] Starting Gitea Port-Forward (localhost:$GiteaLocalPort)..." -ForegroundColor Yellow +$Jobs += Start-Job -ScriptBlock { kubectl port-forward -n gitea svc/gitea-http "${using:GiteaLocalPort}:3000" } + +Write-Host "[Proxy] Starting Kubectl Proxy (localhost:$ProxyPort)..." -ForegroundColor Yellow +$Jobs += Start-Job -ScriptBlock { kubectl proxy --port="${using:ProxyPort}" } + +# ArgoCD Token Automation +$argocdToken = "" +$adminSecret = kubectl -n argocd get secret argocd-initial-admin-secret -o json 2>$null | ConvertFrom-Json +if ($null -ne $adminSecret) { + Write-Host "[ArgoCD] Fetching Admin Password..." -ForegroundColor Yellow + $passB64 = $adminSecret.data.password $pass = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String($passB64)).Trim() - $body = @{ username = "admin"; password = $pass } | ConvertTo-Json -Compress + Write-Host "[ArgoCD] Starting Port-Forward (localhost:$ArgocdPort)..." -ForegroundColor Yellow + $Jobs += Start-Job -ScriptBlock { kubectl port-forward -n argocd svc/argocd-server "${using:ArgocdPort}:443" } + + # Wait for PF to be ready + Start-Sleep -Seconds 3 - # Limit TLS bypass scope to the local ArgoCD login request. - $previousValidationCallback = [System.Net.ServicePointManager]::ServerCertificateValidationCallback try { + $previousValidationCallback = [System.Net.ServicePointManager]::ServerCertificateValidationCallback [System.Net.ServicePointManager]::ServerCertificateValidationCallback = { $true } - - $parsed = Invoke-RestMethod -Uri "https://127.0.0.1:${ArgocdPort}/api/v1/session" ` - -Method Post ` - -ContentType "application/json" ` - -Body $body - } - finally { + + $body = @{ username = "admin"; password = $pass } | ConvertTo-Json -Compress + $parsed = Invoke-RestMethod -Uri "https://127.0.0.1:${ArgocdPort}/api/v1/session" -Method Post -ContentType "application/json" -Body $body -ErrorAction Stop + + if ($parsed.token) { + $env:ARGOCD_AUTH_TOKEN = $parsed.token + Write-Host "[ArgoCD] Token Generated!" -ForegroundColor Green + } + } catch { + Write-Host "[ArgoCD] Warning: Could not generate token: $_" -ForegroundColor Yellow + } finally { [System.Net.ServicePointManager]::ServerCertificateValidationCallback = $previousValidationCallback } +} else { + Write-Host "[ArgoCD] Info: Admin secret not found. Skipping token generation." -ForegroundColor Yellow +} - if ($parsed.token) { - $env:ARGOCD_AUTH_TOKEN = $parsed.token - Write-Output "ArgoCD token generated." - } else { - Write-Warning "Could not generate ArgoCD token. ArgoCD features may not work." +# Load Environment Variables from .env +$envFile = "../../.env" +if (Test-Path $envFile) { + Write-Host "[Env] Loading variables from $envFile" -ForegroundColor Yellow + Get-Content $envFile | Where-Object { $_ -match "=" -and $_ -notmatch "^#" } | ForEach-Object { + $parts = $_.Split('=', 2) + if ($parts.Count -eq 2) { + $key = $parts[0].Trim() + $value = $parts[1].Trim() + + # Use ASCII codes for quotes to avoid encoding issues: [char]34 is ", [char]39 is ' + $value = $value.Trim([char]34).Trim([char]39) + + if ($key) { + [System.Environment]::SetEnvironmentVariable($key, $value) + } + } } -} catch { - Write-Warning "Could not generate ArgoCD token. ArgoCD features may not work." - Write-Error "ArgoCD token request failed: $_" } -# Start Backstage -yarn start +Write-Host "[Portal] Starting Backstage Portal..." -ForegroundColor Green +try { + yarn start +} finally { + Cleanup +}