DevOps:信通院DevOps能力成熟度评估认证相关的文档、工具、流程以及经验。欢迎在Issue区提问，我们会尽快回答

# Nexus [Nexus OSS](https://www.sonatype.com/nexus-repository-oss) is a free open source repository manager. It supports a wide range of package formats and it's used by hundreds of tech companies. ## Introduction This chart bootstraps a Nexus OSS deployment on a cluster using Helm. This setup is best configured in [GCP](https://cloud.google.com/) since: - [google cloud storage](https://cloud.google.com/storage/) is used for backups - [GCE Ingress controller](https://github.com/kubernetes/ingress/blob/master/docs/faq/gce.md) is used for using a pre-allocated static IP in GCE. There is also the option of using a [proxy for Nexus](https://github.com/travelaudience/nexus-proxy) that authenticates Nexus against an external identity provider (only GCP IAM at the moment) which is **disabled** by default. ## Prerequisites - Kubernetes 1.8+ with Beta APIs enabled - PV provisioner support in the underlying infrastructure - [Fulfill Nexus kubernetes requirements](https://github.com/travelaudience/kubernetes-nexus#pre-requisites) ### With GCP IAM enabled All the [Prerequisites](#Prerequisites) should be in place, plus: - [Fulfill GCP IAM requirements](https://github.com/travelaudience/kubernetes-nexus/blob/master/docs/admin/configuring-nexus-proxy.md#pre-requisites) ## Testing the Chart To test the chart: ```bash $ helm install --dry-run --debug ./ ``` To test the chart with your own values: ```bash $ helm install --dry-run --debug -f my_values.yaml ./ ``` ## Installing the Chart To install the chart: ```bash $ helm install stable/sonatype-nexus ``` The above command deploys Nexus on the Kubernetes cluster in the default configuration. The [configuration](#configuration) section lists the parameters that can be configured during installation. The default login is admin/admin123 ## Uninstalling the Chart To uninstall/delete the deployment: ```bash $ helm list NAME REVISION UPDATED STATUS CHART NAMESPACE plinking-gopher 1 Fri Sep 1 13:19:50 2017 DEPLOYED sonatype-nexus-0.1.0 default $ helm delete plinking-gopher ``` The command removes all the Kubernetes components associated with the chart and deletes the release. ## Configuration The following table lists the configurable parameters of the Nexus chart and their default values. | Parameter | Description | Default | | ------------------------------------------ | ---------------------------------- | ----------------------------------------| | `statefulset.enabled` | Use statefulset instead of deployment | `false` | | `replicaCount` | Number of Nexus service replicas | `1` | | `deploymentStrategy` | Deployment Strategy | `rollingUpdate` | | `nexus.imageName` | Nexus image | `quay.io/travelaudience/docker-nexus` | | `nexus.imageTag` | Version of Nexus | `3.15.2` | | `nexus.imagePullPolicy` | Nexus image pull policy | `IfNotPresent` | | `nexus.env` | Nexus environment variables | `[{install4jAddVmParams: -Xms1200M -Xmx1200M -XX:MaxDirectMemorySize=2G -XX:+UnlockExperimentalVMOptions -XX:+UseCGroupMemoryLimitForHeap}]` | | `nexus.resources` | Nexus resource requests and limits | `{}` | | `nexus.dockerPort` | Port to access docker | `5003` | | `nexus.nexusPort` | Internal port for Nexus service | `8081` | | `nexus.service.type` | Service for Nexus |`NodePort` | | `nexus.service.clusterIp` | Specific cluster IP when service type is cluster IP. Use None for headless service |`nil` | | `nexus.securityContext` | Security Context (for enabling official image use `fsGroup: 2000`) | `{}` | | `nexus.labels` | Service labels | `{}` | | `nexus.podAnnotations` | Pod Annotations | `{}` | `nexus.livenessProbe.initialDelaySeconds` | LivenessProbe initial delay | 30 | | `nexus.livenessProbe.periodSeconds` | Seconds between polls | 30 | | `nexus.livenessProbe.failureThreshold` | Number of attempts before failure | 6 | | `nexus.livenessProbe.timeoutSeconds` | Time in seconds after liveness probe times out | `nil` | | `nexus.livenessProbe.path` | Path for LivenessProbe | / | | `nexus.readinessProbe.initialDelaySeconds` | ReadinessProbe initial delay | 30 | | `nexus.readinessProbe.periodSeconds` | Seconds between polls | 30 | | `nexus.readinessProbe.failureThreshold` | Number of attempts before failure | 6 | | `nexus.readinessProbe.timeoutSeconds` | Time in seconds after readiness probe times out | `nil` | | `nexus.readinessProbe.path` | Path for ReadinessProbe | / | | `nexus.hostAliases` | Aliases for IPs in /etc/hosts | [] | | `nexusProxy.enabled` | Enable nexus proxy | `true` | | `nexusProxy.svcName` | Nexus proxy service name | `nil` | | `nexusProxy.targetPort` | Container Port for Nexus proxy | `8080` | | `nexusProxy.port` | Port for exposing Nexus | `8080` | | `nexusProxy.imageName` | Proxy image | `quay.io/travelaudience/docker-nexus-proxy` | | `nexusProxy.imageTag` | Proxy image version | `2.4.0_8u191` | | `nexusProxy.imagePullPolicy` | Proxy image pull policy | `IfNotPresent` | | `nexusProxy.resources` | Proxy resource requests and limits | `{}` | | `nexusProxy.env.nexusHttpHost` | Nexus url to access Nexus | `nil` | | `nexusProxy.env.nexusDockerHost` | Containers url to be used with docker | `nil` | | `nexusProxy.env.enforceHttps` | Allow only https access or not | `false` | | `nexusProxy.env.cloudIamAuthEnabled` | Enable GCP IAM authentication in Nexus proxy | `false` | | `persistence.enabled` | Create a volume for storage | `true` | | `persistence.accessMode` | ReadWriteOnce or ReadOnly | `ReadWriteOnce` | | `persistence.storageClass` | Storage class of Nexus PVC | `nil` | | `persistence.storageSize` |