Skip to content

Commit

Permalink
feat(nexus3): Updated image to v3.76.0 (#1109)
Browse files Browse the repository at this point in the history
Signed-off-by: Steve Hipwell <[email protected]>
  • Loading branch information
stevehipwell authored Jan 13, 2025
1 parent fe7c4f5 commit aea8df0
Show file tree
Hide file tree
Showing 4 changed files with 23 additions and 10 deletions.
11 changes: 11 additions & 0 deletions charts/nexus3/CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -14,6 +14,16 @@

## [UNRELEASED]

## [v5.6.0] - 2025-01-13

### Added

- Added a default value of `"default"` for users and roles where this is undefined. ([#1109](https://github.com/stevehipwell/helm-charts/pull/1109)) _@stevehipwell_

### Changed

- Updated the _Nexus3_ OCI image to [v3.76.0](https://github.com/sonatype/nexus-public/releases/tag/release-3.76.0-03). ([#1109](https://github.com/stevehipwell/helm-charts/pull/1109)) _@stevehipwell_

## [v5.5.1] - 2024-12-06

### Changed
Expand Down Expand Up @@ -769,6 +779,7 @@ RELEASE LINKS
-->

[UNRELEASED]: https://github.com/stevehipwell/helm-charts/tree/main/charts/nexus3
[v5.6.0]: https://github.com/stevehipwell/helm-charts/releases/tag/nexus3-5.6.0
[v5.5.1]: https://github.com/stevehipwell/helm-charts/releases/tag/nexus3-5.5.1
[v5.5.0]: https://github.com/stevehipwell/helm-charts/releases/tag/nexus3-5.5.0
[v5.4.1]: https://github.com/stevehipwell/helm-charts/releases/tag/nexus3-5.4.1
Expand Down
8 changes: 5 additions & 3 deletions charts/nexus3/Chart.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -2,8 +2,8 @@ apiVersion: v2
name: nexus3
description: Helm chart for Sonatype Nexus 3 OSS.
type: application
version: 5.5.1
appVersion: 3.75.1
version: 5.6.0
appVersion: 3.76.0
home: https://www.sonatype.com/products/sonatype-nexus-repository
icon: https://raw.githubusercontent.com/stevehipwell/helm-charts/main/charts/nexus3/icon.png
keywords:
Expand All @@ -23,5 +23,7 @@ maintainers:
annotations:
artifacthub.io/alternativeName: nexus
artifacthub.io/changes: |
- kind: added
description: "Added a default value of `default` for users and roles where this is undefined."
- kind: changed
description: "Updated the _Nexus3_ OCI image to [v3.75.1](https://github.com/sonatype/nexus-public/releases/tag/release-3.75.1-01)."
description: "Updated the _Nexus3_ OCI image to [v3.76.0](https://github.com/sonatype/nexus-public/releases/tag/release-3.76.0-03)."
8 changes: 4 additions & 4 deletions charts/nexus3/README.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# nexus3

![Version: 5.5.1](https://img.shields.io/badge/Version-5.5.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 3.75.1](https://img.shields.io/badge/AppVersion-3.75.1-informational?style=flat-square)
![Version: 5.6.0](https://img.shields.io/badge/Version-5.6.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 3.76.0](https://img.shields.io/badge/AppVersion-3.76.0-informational?style=flat-square)

Helm chart for Sonatype Nexus 3 OSS.

Expand All @@ -25,15 +25,15 @@ Helm chart for Sonatype Nexus 3 OSS.
To install the chart using the recommended OCI method you can use the following command.

```shell
helm upgrade --install nexus3 oci://ghcr.io/stevehipwell/helm-charts/nexus3 --version 5.5.1
helm upgrade --install nexus3 oci://ghcr.io/stevehipwell/helm-charts/nexus3 --version 5.6.0
```

#### Verification

As the OCI chart release is signed by [Cosign](https://github.com/sigstore/cosign) you can verify the chart before installing it by running the following command.

```shell
cosign verify --certificate-oidc-issuer https://token.actions.githubusercontent.com --certificate-identity-regexp 'https://github\.com/action-stars/helm-workflows/\.github/workflows/release\.yaml@.+' --certificate-github-workflow-repository stevehipwell/helm-charts --certificate-github-workflow-name Release ghcr.io/stevehipwell/helm-charts/nexus3:5.5.1
cosign verify --certificate-oidc-issuer https://token.actions.githubusercontent.com --certificate-identity-regexp 'https://github\.com/action-stars/helm-workflows/\.github/workflows/release\.yaml@.+' --certificate-github-workflow-repository stevehipwell/helm-charts --certificate-github-workflow-name Release ghcr.io/stevehipwell/helm-charts/nexus3:5.6.0
```

### Non-OCI Repository
Expand All @@ -42,7 +42,7 @@ Alternatively you can use the legacy non-OCI method via the following commands.

```shell
helm repo add stevehipwell https://stevehipwell.github.io/helm-charts/
helm upgrade --install nexus3 stevehipwell/nexus3 --version 5.5.1
helm upgrade --install nexus3 stevehipwell/nexus3 --version 5.6.0
```

## Values
Expand Down
6 changes: 3 additions & 3 deletions charts/nexus3/scripts/configure.sh
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,7 @@ if [[ -z "${password:-}" ]]; then
error "No password was provided."
fi

while [[ "$(curl -s -o /dev/null -w "%{http_code}" "${NEXUS_HOST}/service/rest/v1/status")" -ne "200" ]]; do
while [[ "$(curl -s -o /dev/null -w "%{http_code}" "${NEXUS_HOST}/service/rest/v1/status" || true)" -ne "200" ]]; do
echo "Waiting for Nexus..."
sleep 15
done
Expand Down Expand Up @@ -160,7 +160,7 @@ echo "Configuring roles..."
for json_file in "${CONFIG_DIR}"/conf/*-role.json; do
if [[ -f "${json_file}" ]]; then
id="$(jq -r '.id' "${json_file}")"
source="$(jq -r '.source' "${json_file}")"
source="$(jq -r '.source // "default"' "${json_file}")"

status_code=$(curl -sS -o /dev/null -w "%{http_code}" -X GET -H 'Content-Type: application/json' -u "${NEXUS_USER}:${password}" "${NEXUS_HOST}/service/rest/v1/security/roles/${id}?source=${source}")
if [[ "${status_code}" -eq 200 ]]; then
Expand All @@ -183,7 +183,7 @@ echo "Configuring users..."
for json_file in "${CONFIG_DIR}"/conf/*-user.json; do
if [[ -f "${json_file}" ]]; then
id="$(jq -r '.userId' "${json_file}")"
source="$(jq -r '.source' "${json_file}")"
source="$(jq -r '.source // "default' "${json_file}")"

out_file="$(mktemp -p "${tmp_dir}")"
status_code=$(curl -sS -o "${out_file}" -w "%{http_code}" -X GET -H 'Content-Type: application/json' -u "${NEXUS_USER}:${password}" "${NEXUS_HOST}/service/rest/v1/security/users/?userId=${id}&source=${source}")
Expand Down

0 comments on commit aea8df0

Please sign in to comment.