search

sonatype / nexus-public

Sonatype Nexus Repository Open-source codebase mirror
https://www.sonatype.com/products/repository-oss-download
Eclipse Public License 1.0
1.94k stars 572 forks source link

Nexus Helm Proxy Index File #470

Open s3n29t opened 1 month ago

s3n29t commented 1 month ago

Hi,

We have configured a Nexus Helm proxy repository where the source repository delivers different index.yaml files with anonymous or password protected access. Although we have configured Authentication, we always get the index file for Anonymous access. Is there a way to ensure that only the password protected index file is requested?

Workaround: Unfortunately, we do not have a workaround.

Version: OSS 3.71.0-06 on Kubernetes

Any help appreciated. Thanks

mrprescott commented 1 month ago

This is an unfortunate side effect. Repo probably asks for the index.yaml and obtains it without authentication, since the server doesn't challenge for authentication credentials. It will then cache the anonymous version of the index.yaml indefinitely. You could tweak the metadata retention age, but my guess is that will either do a) nothing, or b) just oscillate, sometimes caching the

I imagine the only way this will change is if we add pre-emptive auth for Helm proxies. I've tagged this as an enhancement request, and we'll continue to monitor it for demand from other users.

s3n29t commented 1 month ago

Thank you for the quick reply.