Taskfile.yaml

version: "3"

vars:
  CONTEXT: kind-don-local
  KIND_CLUSTER_NAME: don-local
  NAMESPACES: istio-gateway tn-don-api tn-don-auth tn-don-frontend tn-don-search tn-don-static tn-don-oss
  APPS: api auth frontend search static oss

tasks:

  # ── Setup ────────────────────────────────────────────────────────────────────

  local:setup:
    desc: "Eerste keer: installeer Flux, Gateway API CRDs en maak alle namespaces aan op de lokale cluster"
    cmds:
      - kubectl config use-context {{.CONTEXT}}
      - |
        for ns in {{.NAMESPACES}}; do
          kubectl get namespace $ns > /dev/null 2>&1 || kubectl create namespace $ns
        done
      - kubectl apply --server-side -f https://github.com/kubernetes-sigs/gateway-api/releases/download/v1.5.0/standard-install.yaml
      - flux install

  # ── Secrets ──────────────────────────────────────────────────────────────────

  local:secrets:from-cluster:
    desc: "Exporteer alle secrets uit de test-cluster naar overlays/local/ (TEST_CONTEXT vereist)"
    requires:
      vars: [TEST_CONTEXT]
    cmds:
      - task: local:secret:api
      - task: local:secret:auth
      - task: local:secret:search
      - task: local:secret:oss
      - task: local:configs
      - echo "Klaar. Controleer de bijgewerkte lokale bestanden in overlays/local/."

  local:secret:api:
    desc: "Exporteer api-secrets uit test-cluster"
    requires:
      vars: [TEST_CONTEXT]
    cmds:
      - |
        kubectl get secret don-api-apisix -n tn-don-api --context={{.TEST_CONTEXT}} \
          -o json | jq 'del(.metadata.annotations, .metadata.creationTimestamp, .metadata.resourceVersion, .metadata.uid, .metadata.namespace) | .metadata.name = "apisix"' \
          > apps/api/overlays/local/apisix-secret.yaml
      - |
        kubectl get secret don-api-tools-secret -n tn-don-api --context={{.TEST_CONTEXT}} \
          -o json | jq 'del(.metadata.annotations, .metadata.creationTimestamp, .metadata.resourceVersion, .metadata.uid, .metadata.namespace) | .metadata.name = "tools-secret"' \
          > apps/api/overlays/local/tools-secret.yaml
      - |
        kubectl get secret don-api-api-register-secret -n tn-don-api --context={{.TEST_CONTEXT}} \
          -o json | jq 'del(.metadata.annotations, .metadata.creationTimestamp, .metadata.resourceVersion, .metadata.uid, .metadata.namespace) | .metadata.name = "api-register-secret"' \
          > apps/api/overlays/local/api-register-secret.yaml
      - |
        kubectl get secret don-api-api-db -n tn-don-api --context={{.TEST_CONTEXT}} \
          -o json | jq 'del(.metadata.annotations, .metadata.creationTimestamp, .metadata.resourceVersion, .metadata.uid, .metadata.namespace) | .metadata.name = "api-db"' \
          > apps/api/overlays/local/api-register-db.yaml
      - |
        kubectl get secret don-api-register-site-secret -n tn-don-api --context={{.TEST_CONTEXT}} \
          -o json | jq 'del(.metadata.annotations, .metadata.creationTimestamp, .metadata.resourceVersion, .metadata.uid, .metadata.namespace) | .metadata.name = "register-site-secret"' \
          > apps/api/overlays/local/register-site-secret.yaml
      - |
        kubectl get secret don-api-piwik-secret -n tn-don-api --context={{.TEST_CONTEXT}} \
          -o json | jq 'del(.metadata.annotations, .metadata.creationTimestamp, .metadata.resourceVersion, .metadata.uid, .metadata.namespace) | .metadata.name = "piwik-secret"' \
          > apps/api/overlays/local/piwik-secret.yaml
      - |
        kubectl get secret don-api-opa-auth-config -n tn-don-api --context={{.TEST_CONTEXT}} \
          -o json | jq 'del(.metadata.annotations, .metadata.creationTimestamp, .metadata.resourceVersion, .metadata.uid, .metadata.namespace) | .metadata.name = "opa-auth-config"' \
          > apps/api/overlays/local/opa-auth-config.yaml

  local:secret:auth:
    desc: "Exporteer keycloak-secret uit test-cluster"
    requires:
      vars: [TEST_CONTEXT]
    cmds:
      - |
        kubectl get secret don-auth-keycloak-login-secret -n tn-don-auth --context={{.TEST_CONTEXT}} \
          -o json | jq 'del(.metadata.annotations, .metadata.creationTimestamp, .metadata.resourceVersion, .metadata.uid, .metadata.namespace) | .metadata.name = "keycloak-login-secret"' \
          > apps/auth/overlays/local/keycloak-secret.yaml

  local:secret:search:
    desc: "Exporteer search api-key uit test-cluster"
    requires:
      vars: [TEST_CONTEXT]
    cmds:
      - |
        kubectl get secret don-search-api-key -n tn-don-search --context={{.TEST_CONTEXT}} \
          -o json | jq 'del(.metadata.annotations, .metadata.creationTimestamp, .metadata.resourceVersion, .metadata.uid, .metadata.namespace) | .metadata.name = "api-key"' \
          > apps/search/overlays/local/api-key.yaml

  local:secret:oss:
    desc: "Exporteer oss-secrets uit test-cluster"
    requires:
      vars: [TEST_CONTEXT]
    cmds:
      - |
        kubectl get secret don-oss-oss-db -n tn-don-oss --context={{.TEST_CONTEXT}} \
          -o json | jq 'del(.metadata.annotations, .metadata.creationTimestamp, .metadata.resourceVersion, .metadata.uid, .metadata.namespace) | .metadata.name = "oss-db"' \
          > apps/oss/overlays/local/oss-db.yaml
      - |
        kubectl get secret don-oss-register-site-secret -n tn-don-oss --context={{.TEST_CONTEXT}} \
          -o json | jq 'del(.metadata.annotations, .metadata.creationTimestamp, .metadata.resourceVersion, .metadata.uid, .metadata.namespace) | .metadata.name = "register-site-secret"' \
          > apps/oss/overlays/local/register-site-secret.yaml
      - |
        kubectl get secret don-oss-don-crawler-secret -n tn-don-oss --context={{.TEST_CONTEXT}} \
          -o json | jq 'del(.metadata.annotations, .metadata.creationTimestamp, .metadata.resourceVersion, .metadata.uid, .metadata.namespace) | .metadata.name = "don-crawler-secret"' \
          > apps/oss/overlays/local/don-crawler-secret.yaml

  local:configs:
    desc: "Werk plain ConfigMaps voor local bij vanuit de test-overlay (geen secrets)"
    cmds:
      - |
        cp apps/auth/overlays/test/keycloak-realm-config.yaml \
           apps/auth/overlays/local/keycloak-realm-config.yaml
        echo "Gekopieerd: keycloak-realm-config.yaml"
      - |
        cp apps/search/overlays/test/scraper-configmap.yaml \
           apps/search/overlays/local/scraper-configmap.yaml
        echo "Gekopieerd: scraper-configmap.yaml"

  # ── Deploy ───────────────────────────────────────────────────────────────────

  local:apply:
    desc: "Deploy alle apps naar de lokale cluster"
    cmds:
      - kubectl config use-context {{.CONTEXT}}
      - for: { var: APPS }
        cmd: |
          echo "→ deploying {{.ITEM}}..."
          kubectl apply -k apps/{{.ITEM}}/overlays/local/

  local:apply:api:
    desc: "Deploy alleen de api namespace"
    cmds:
      - kubectl config use-context {{.CONTEXT}}
      - kubectl apply -k apps/api/overlays/local/

  local:apply:auth:
    desc: "Deploy alleen de auth namespace"
    cmds:
      - kubectl config use-context {{.CONTEXT}}
      - kubectl apply -k apps/auth/overlays/local/

  local:apply:frontend:
    desc: "Deploy alleen de frontend namespace"
    cmds:
      - kubectl config use-context {{.CONTEXT}}
      - kubectl apply -k apps/frontend/overlays/local/

  local:apply:search:
    desc: "Deploy alleen de search namespace"
    cmds:
      - kubectl config use-context {{.CONTEXT}}
      - kubectl apply -k apps/search/overlays/local/

  local:apply:static:
    desc: "Deploy alleen de static namespace"
    cmds:
      - kubectl config use-context {{.CONTEXT}}
      - kubectl apply -k apps/static/overlays/local/

  local:apply:oss:
    desc: "Deploy alleen de oss namespace"
    cmds:
      - kubectl config use-context {{.CONTEXT}}
      - kubectl apply -k apps/oss/overlays/local/

  local:diff:
    desc: "Preview wat er deployed zou worden (alle apps)"
    cmds:
      - kubectl config use-context {{.CONTEXT}}
      - for: { var: APPS }
        cmd: |
          echo "=== {{.ITEM}} ==="
          kubectl diff -k apps/{{.ITEM}}/overlays/local/ || true

  # ── Port-forward ─────────────────────────────────────────────────────────────

  local:forward:
    desc: "Port-forward Apisix gateway (:9080) en admin (:9180)"
    cmds:
      - kubectl config use-context {{.CONTEXT}}
      - echo "Apisix gateway → http://localhost:9080"
      - echo "Apisix admin   → http://localhost:9180"
      - kubectl port-forward -n tn-don-api svc/don-api-apisix-gateway 9080:80 &
      - kubectl port-forward -n tn-don-api svc/don-api-apisix-admin 9180:9180 &

  local:forward:auth:
    desc: "Port-forward Keycloak (:8080)"
    cmds:
      - kubectl config use-context {{.CONTEXT}}
      - echo "Keycloak → http://localhost:8080"
      - kubectl port-forward -n tn-don-auth svc/don-auth-keycloak 8080:80 &

  local:forward:frontend:
    desc: "Port-forward frontend (:3000)"
    cmds:
      - kubectl config use-context {{.CONTEXT}}
      - echo "Frontend → http://localhost:3000"
      - kubectl port-forward -n tn-don-frontend svc/don-frontend-svc 3000:80 &

  local:forward:api-register-site:
    desc: "Port-forward API register site (:4321)"
    cmds:
      - kubectl config use-context {{.CONTEXT}}
      - echo "API register site → http://localhost:4321"
      - kubectl port-forward -n tn-don-api svc/don-api-register-site-svc 4321:4321 &

  local:forward:schemas:
    desc: "Port-forward schema register (:8000)"
    cmds:
      - kubectl config use-context {{.CONTEXT}}
      - echo "Schema register → http://localhost:8000"
      - kubectl port-forward -n tn-don-api svc/don-api-don-schema-register-svc 8000:8000 &

  local:forward:static:
    desc: "Port-forward static site (:8081)"
    cmds:
      - kubectl config use-context {{.CONTEXT}}
      - echo "Static → http://localhost:8081"
      - kubectl port-forward -n tn-don-static svc/don-static-svc 8081:80 &

  local:forward:oss:
    desc: "Port-forward OSS register site (:4322)"
    cmds:
      - kubectl config use-context {{.CONTEXT}}
      - echo "OSS register site → http://localhost:4322"
      - kubectl port-forward -n tn-don-oss svc/don-oss-register-oss-site-svc 4322:4321 &

  local:forward:search:
    desc: "Port-forward Typesense (:8108)"
    cmds:
      - kubectl config use-context {{.CONTEXT}}
      - echo "Typesense → http://localhost:8108"
      - kubectl port-forward -n tn-don-search svc/don-search-svc 8108:8108 &

  local:apisix:opa-demo:configure:
    desc: "Configureer een tijdelijke APISIX route die de built-in opa plugin gebruikt"
    cmds:
      - ./scripts/configure-local-opa-demo-route.sh

  local:apisix:routes:sync:
    desc: "Laad de declaratieve APISIX routes uit apps/api/base/apisix/routes/adc.yaml in de lokale APISIX admin API"
    cmds:
      - ./scripts/sync-local-apisix-routes.sh

  local:apisix:opa-demo:delete:
    desc: "Verwijder de tijdelijke APISIX OPA demo route"
    cmds:
      - ./scripts/delete-local-opa-demo-route.sh

  # ── Teardown ─────────────────────────────────────────────────────────────────

  local:teardown:namespaces:
    desc: "Verwijder alleen de lokale namespaces, maar laat de Kind-cluster bestaan"
    prompt: "Weet je zeker dat je alle lokale namespaces wil verwijderen?"
    cmds:
      - kubectl config use-context {{.CONTEXT}}
      - |
        for ns in {{.NAMESPACES}}; do
          kubectl delete namespace $ns --ignore-not-found
        done

  local:teardown:
    desc: "Verwijder de volledige lokale Kind-cluster"
    prompt: "Weet je zeker dat je de volledige lokale Kind-cluster wil verwijderen?"
    cmds:
      - |
        if ! kind delete cluster --name {{.KIND_CLUSTER_NAME}}; then
          echo "Normale Kind teardown mislukt, forceer verwijdering van overgebleven cluster-containers..."
          ids="$(docker ps -a -q --filter label=io.x-k8s.kind.cluster={{.KIND_CLUSTER_NAME}})"
          if [ -n "$ids" ]; then
            docker rm -f -v $ids
          fi
          kind delete cluster --name {{.KIND_CLUSTER_NAME}} || true
        fi