Dependency-Track Deployment on EKS with ArgoCD - Database Download Failure

[Ehudaviv]

Overview

I am currently deploying Dependency-Track (API server and frontend) on EKS using ArgoCD. Initially, I faced issues with pod access to the vulnerability databases (NVD and Cyentia) due to CloudFront restrictions. After opening access to the required URLs, I encountered a new issue during the database download process.

Issue Description

The pods attempt to download the necessary databases but fail at different stages of the process. However, the error message remains consistent.

Error Logs

2025-03-09 14:09:15,451 ERROR [VulnerabilityIndexer] An error occurred while updating document in index
org.apache.lucene.store.LockObtainFailedException: Lock held by this virtual machine: /data/.dependency-track/index/vulnerability/write.lock
at org.apache.lucene.store.NativeFSLockFactory.obtainFSLock(NativeFSLockFactory.java:139)
at org.apache.lucene.store.FSLockFactory.obtainLock(FSLockFactory.java:41)
at org.apache.lucene.store.BaseDirectory.obtainLock(BaseDirectory.java:45)
at org.apache.lucene.index.IndexWriter.(IndexWriter.java:923)
at org.dependencytrack.search.IndexManager.openIndex(IndexManager.java:238)
at org.dependencytrack.search.IndexManager.getIndexWriter(IndexManager.java:268)
at org.dependencytrack.search.IndexManager.updateDocument(IndexManager.java:330)
at org.dependencytrack.search.VulnerabilityIndexer.update(VulnerabilityIndexer.java:74)
at org.dependencytrack.search.VulnerabilityIndexer.update(VulnerabilityIndexer.java:39)
at org.dependencytrack.tasks.IndexTask.inform(IndexTask.java:55)
at alpine.event.framework.BaseEventService.lambda$publish$0(BaseEventService.java:110)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
at java.base/java.lang.Thread.run(Unknown Source)

Current Setup

• Dependency-Track Version: 4.12.6
• Pod Memory Allocation: 10Gi (which seems excessive)

Additional Context

• The error suggests a Lucene lock issue, possibly related to concurrent writes or filesystem limitations.
• Adding an image for reference:
  

Seeking Assistance

Has anyone encountered similar issues with database downloads in Dependency-Track behind CloudFront? Any suggestions on resolving this Lucene lock issue would be greatly appreciated.