tbc
ENHANCEMENTS:
- Added support for the
repository.purge-unused("Repository - Delete unused components") Task, which is the only API-managed way to evict unused proxied content on Sonatype Nexus Repository Community Edition, as that edition exposes no REST API for Cleanup Policies [GH-125]- New Resource:
sonatyperepo_task_repository_purge_unused
- New Resource:
- Added support for Sonatype Nexus Repository 3.96.x, alongside continued support for pre-3.96.0 versions [GH-482]
NOTES:
- Tested against Sonatype Nexus Repository Manager 3.96.0 [GH-482] - required upgrading to
nexus-repo-api-client-gov395.96.1, as v395.96.0 shipped without the OAuth2/OIDC configuration API used bysonatyperepo_security_oauth2 - Dependency updates
BUG FIXES:
- Prevent
Provider produced inconsistent result after applyerror whenallowed_domains/allowed_ipsare omitted from config on initialterraform applyforsonatyperepo_security_ssrf_protection[GH-476] -Createwas reading from the raw config instead of the plan, so the schema's empty-set default never made it into state sonatyperepo_cleanup_policyrejected validformat = "oci"values [GH-483] - theformatenum was never updated when the OCI and Pub repository formats were added, sopubwas also missing and has been added alongsideoci
ENHANCEMENTS:
- Added support for OCI (Open Container Initiative) repository format [GH-456]
- New Resource:
sonatyperepo_repository_oci_hosted - New Resource:
sonatyperepo_repository_oci_proxy - New Resource:
sonatyperepo_repository_oci_group
- New Resource:
BUG FIXES:
- Prevent
Provider produced inconsistent result after applyerror whenrepository_firewall.enabled = falseis explicitly configured against Sonatype Nexus Repository 3.94.0+ [GH-469] - this affected every proxy repository format supportingrepository_firewall, not just NPM as originally reported:sonatyperepo_repository_alpine_proxy,sonatyperepo_repository_cargo_proxy,sonatyperepo_repository_cocoapods_proxy,sonatyperepo_repository_composer_proxy,sonatyperepo_repository_conan_proxy,sonatyperepo_repository_conda_proxy,sonatyperepo_repository_docker_proxy,sonatyperepo_repository_go_proxy,sonatyperepo_repository_huggingface_proxy,sonatyperepo_repository_maven2_proxy,sonatyperepo_repository_npm_proxy,sonatyperepo_repository_nuget_proxy,sonatyperepo_repository_pub_proxy,sonatyperepo_repository_pypi_proxy,sonatyperepo_repository_r_proxy,sonatyperepo_repository_raw_proxy,sonatyperepo_repository_rubygems_proxyandsonatyperepo_repository_yum_proxyresources actions = ["ALL"]is no longer rejected by validation as documented [GH-475] - the shared schema validator only allowed explicit BREAD values (ADD,BROWSE,DELETE,EDIT,READ), affectingsonatyperepo_privilege_repository_view,sonatyperepo_privilege_repository_adminandsonatyperepo_privilege_repository_content_selectorresources
NOTES:
- OCI repositories require Sonatype Nexus Repository 3.94.0 or later
- Acceptance Testing now includes Sonatype IQ Server [GH-285]
- Known issue:
repository_firewallonsonatyperepo_repository_composer_proxydoes not survive a refresh against Sonatype Nexus Repository 3.94.0+ [GH-471]
ENHANCEMENTS:
- Added support for Pub (Dart/Flutter) repository format [GH-452]
- New Resource:
sonatyperepo_repository_pub_hosted - New Resource:
sonatyperepo_repository_pub_proxy - New Resource:
sonatyperepo_repository_pub_group
- New Resource:
NOTES:
- Pub repositories require Sonatype Nexus Repository 3.92.0 or later
BUG FIXES:
repository_firewallnow correctly hydrates from the live inlinefirewall.modeonterraform import/plan/applyagainst Sonatype Nexus Repository 3.94.0+ forsonatyperepo_repository_pypi_proxy[GH-466] - required upgrading tonexus-repo-api-client-gov395.95.3, which fixed a missingfirewallfield onPyPiProxyApiRepositoryin the generated client
BUG FIXES:
- Prevent
Provider produced inconsistent result after applyerror when configuringrepository_firewallagainst Sonatype Nexus Repository 3.94.0+ forsonatyperepo_repository_raw_proxy,sonatyperepo_repository_maven2_proxy,sonatyperepo_repository_nuget_proxy,sonatyperepo_repository_conan_proxy,sonatyperepo_repository_conda_proxyandsonatyperepo_repository_rubygems_proxyresources [GH-461] repository_firewallnow correctly hydrates from the live inlinefirewall.modeonterraform import/plan/applyagainst Sonatype Nexus Repository 3.94.0+ forsonatyperepo_repository_yum_proxyandsonatyperepo_repository_cocoapods_proxyresources [GH-464]
ENHANCEMENTS:
- Added support for managing OAuth2 / OpenID Connect (OIDC) authentication [GH-446]
- New Resource:
sonatyperepo_security_oauth2
- New Resource:
NOTES:
sonatyperepo_security_oauth2requires Sonatype Nexus Repository Pro 3.94.0 or later - the underlying API is not available against older versions, even though the OAuth2/OIDC feature itself was introduced in the UI earlier
ENHANCEMENTS:
- Added support for Sonatype Nexus Repository 3.94.x and 3.95.x, alongside continued support for pre-3.94.0 versions [GH-449], [GH-445]
BUG FIXES:
maven.layout_policyandmaven.version_policyonsonatyperepo_repository_maven_hosted/sonatyperepo_repository_maven_proxyare nowRequired(previouslyOptional) - Sonatype Nexus Repository rejects requests where these are omittedalpine.key_paironsonatyperepo_repository_alpine_hosted/sonatyperepo_repository_alpine_proxy/sonatyperepo_repository_alpine_groupis nowRequired(previouslyOptional) - Sonatype Nexus Repository rejects requests where this is omitted or emptyyum.deploy_policyonsonatyperepo_repository_yum_hostednow defaults toSTRICTwhen not specified, matching the Sonatype Nexus Repository UI default
NOTES:
- Documented the approach provided by @marknl when using this provider against a HA Cluster with >1 active notes [GH-453]
- Tested against Sonatype Nexus Repository Manager 3.95.1 [GH-449]
- Tested against Sonatype Nexus Repository Manager 3.94.0 [GH-445]
- Dependency updates
ENHANCEMENTS:
- Added support for managing SSRF Protection settings [GH-447]
- New Resource:
sonatyperepo_security_ssrf_protection
- New Resource:
ENHANCEMENTS:
- Added support for Alpine repository format [GH-416]
- New Resource:
sonatyperepo_repository_alpine_hosted - New Resource:
sonatyperepo_repository_alpine_proxy - New Resource:
sonatyperepo_repository_alpine_group
- New Resource:
BUG FIXES:
- Prevent
invalid result object after applyerror forkey_paironsonatyperepo_repository_yum_proxy/sonatyperepo_repository_yum_groupresources [GH-440]
ENHANCEMENTS:
- Added support for Helm Group repository [GH-437]
- New Resource:
sonatyperepo_repository_helm_group
- New Resource:
BUG FIXES:
- Prevent
inconsistent valueserror forsonatyperepo_repository_yum_*resources [GH-436]
ENHANCEMENTS:
- Added support for Go Hosted repositories [GH-419]
- New Resource:
sonatyperepo_repository_go_hosted
- New Resource:
- Added support for Swift Group repositories [GH-418]
- New Resource:
sonatyperepo_repository_swift_group
- New Resource:
NOTES:
- Docuemnted the environment variables that can be used to configure this provider [GH-421]
- Documented the privileges required in Sonatype Nexus Repository to use this provider [GH-424]
ENHANCEMENTS:
- Added support for managing Ansible Galaxy repositories - [GH-417] - thanks @JoooostB:
- New Resource:
sonatyperepo_repository_ansiblegalaxy_hosted - New Resource:
sonatyperepo_repository_ansiblegalaxy_proxy - New Resource:
sonatyperepo_repository_ansiblegalaxy_group
- New Resource:
BUG FIXES:
- Documentation corrected for all
sonatyperepo_repository_*_proxyresources re.http_client.connection[GH-420]
NOTES:
- Only run acceptance tests against Sonatype Nexus Repository versions not yet in Extended Maintenance [GH-425]
- Tested against Terraform 1.15.x [GH-423]
- Tested against Sonatype Nexus Repository Manager 3.93.0 [GH-422]
BUG FIXES:
- Resolved inconsistent values after apply when using Bearer Token auth for Proxy Repositories [GH-413]
ENHANCEMENTS:
-
A notable change has been implemented that applies only when running this provider against a Sonatype Nexus Repository HA Cluster with
> 1active nodes [GH-391], [GH-363]Background
In multi-node High Availability (HA) deployments of Sonatype Nexus Repository, write operations (POST, PUT, DELETE) are committed to a shared database. Individual nodes read these events and can exhibit a short lag before serving the updated state on subsequent reads.
This has caused Terraform to report spurious drift, "resource not found" errors, or plan inconsistencies during complex apply cycles where resources are created and immediately read back.
The provider uses a default
cluster_stabilisation_delay_msvalue of 10,000ms (10 seconds) which is validated and safe to cover all real world deployments of Sonatype Nexus Repository. The default (10s) is intentionally conservative. Most clusters will converge faster; reduce the value if your cluster is lower-latency. -
Related to the above, specific handling has been added to cover
sonatyperepo_capability_*when running this provider against a Sonatype Nexus Repository HA Cluster
BUG FIXES:
- The above enhancements are expected to resolve the following bugs:
- [GH-393]
- [GH-407]
- [GH-408]
BUG FIXES:
- Support
*forformatonsonatyperepo_cleanup_policyresource [GH-406]
NOTES:
- Dependency updates
BUG FIXES:
frequency.start_datewasint32and notint64for Task Resources [GH-405]
ENHANCEMENTS:
- Resource
sonatyperepo_system_iq_connectionnow supportsterraform import
NOTES:
- Tested against Sonatype Nexus Repository Manager 3.92.0 [GH-400]
BUG FIXES:
- Attempting to update
apt_signing.passphraseon resourcesonatyperepo_repository_apt_hostedcausedError: Provider produced inconsistent result after apply[GH-397]
BUG FIXES:
- Implemented missing READ functionality for resources
sonatype_task_*which allowsterraform importto now work [GH-394] - thanks to @HazemElAgaty
ENHANCEMENTS:
- New Data Source:
sonatyperepo_blob_store_acs[GH-378] - New Resource:
sonatyperepo_blob_store_acs[GH-378]
BUG FIXES:
- Empty
override_urlis now acceptable forsonatyperepo_capability_outreach_management[GH-375]
ENHANCEMENTS:
- Resource
sonatyperepo_blob_store_s3now supportsterraform import[GH-374] - Resource
sonatyperepo_system_config_httpnow supportterraform import[GH-376]
BUG FIXES:
softQuotawas never applied for resourcesonatyperepo_blob_store_s3[GH-381]- Acceptance Tests running against HA Cluster were not spreading requests across Cluster Nodes in CI [GH-370], [GH-385]
NOTES:
- Tested against Sonatype Nexus Repository Manager 3.91.0 [GH-379]
- Given the fixes related to Acceptance Testing included in this release we are aware that there can be issues using this Provider against NXRM HA Clusters - this is being tracked in [GH-386]
ENHANCEMENTS:
- New Resource:
sonatyperepo_repository_terraform_group[GH-372] - New Resource:
sonatyperepo_security_ssl_truststore[GH-362] - thanks to @HazemElAgaty - The following resources now support
terraform import[GH-368]:sonatyperepo_privilege_applicationsonatyperepo_privilege_repository_adminsonatyperepo_privilege_repository_content_selectorsonatyperepo_privilege_repository_viewsonatyperepo_privilege_wildcard
BUG FIXES:
- Setting
nexus_trust_store_enabledonsonatyperepo_system_iq_connectionresource had no effect [GH-365] - thanks to @gcroucher
ENHANCEMENTS:
sonatyperepo_repository_terraform_hostedhas hadcomponentproperty removed as Terraform Hosted repositories do not support Proprietary Components- Documentation updates provided by @marknl [GH-347]
- Dependencies have been updated to avoid newly disclosed CVEs [GH-354]
BUG FIXES:
- Prevent provider crash when using
sonatyperepo_blob_store_s3resource [GH-349] sonatyperepo_system_config_httpregression when running against NXRM 3.90 [GH-359]
NOTES:
- Tested against Sonatype Nexus Repository Manager 3.90.1 [GH-295], [GH-352]
ENHANCEMENTS:
enabledis now a required property ofrepository_firewallfor resourcessonatyperepo_repository_*where this is supported [GH-345]
BUG FIXES:
- Provider crashes due to
repository_firewallblock being removed resolved [GH-345]
ENHANCEMENTS:
sonatyperepo_cleanup_policynow supports the following formats:cargo,composer,huggingface,swiftandterraform[GH-340]
BUG FIXES:
- Prevent provide crash when adding/removing
repository_firewallconfiguration for proxy repositories [GH-333] - Resolved
inconsistent resultthat could be seen when managing Proxy Repositories with HTTP Client Authentication [GH-339] - Resolved
inconsistent resultforsonatyperepo_repository_*resources that support Cleanup Policies [GH-340]
NOTES:
- Acceptance Testing is now performed against Sonatype Nexus Repository backed by PostgreSQL [GH-282]
- Acceptance Testing is now additionally performed against a 3-node HA Cluster of Sonatype Nexus Repository (latest supported version) [GH-335]
BUG FIXES:
- Use of empty string
passwordforsonatyperepo_usershowed plan changed that resulted in a provider crash [GH-334]
ENHANCEMENTS:
sonatyperepo_blob_store_filenow supports import [GH-329] - thanks to @HazemElAgaty
NOTES:
- Tested against Sonatype Nexus Repository Manager 3.89.1 [GH-275]
- The API regression in 3.89.0 that prevented use of the
sonatyperepo_system_config_ldap_connectionresource has been fixed in 3.89.1 [GH-260]
- The API regression in 3.89.0 that prevented use of the
ENHANCEMENTS:
- Added additional schema validation to prevent
pccs_enabled = truewhenrepository_firewall.enabled = false[GH-323]
BUG FIXES:
nullvalue forsonatyperepo_blob_store_s3.bucket_configuration.advanced_bucket_configuration.max_connection_pool_sizewas interpretted as a0leading to inconsistent state [GH-314]- SIGSEGV error when setting
pccs_enabled = trueforsonatyperepo_repository_npm_proxyresource [GH-319] pccs_enabled = truehad no effect forsonatyperepo_repository_pypi_proxyresource [GH-320]- Missing implementation meant it was impossible to add or update
repository_firewallconfiguration after initial resource creation [GH-322]
BUG FIXES:
- There was no path forwards for the renamed resources in
v1.0.0- this release adds support for migrating existing state - see the updated Migration Guide for details [GH-315]
BREAKING CHANGES:
See the Migration Guide for help migrating from v0.x.x versions of this provider.
- Sonatype Repository Firewall configuration is now part of the
sonatyperepo_repository_[FORMAT]_proxyresources [GH-280]sonatyperepo_system_iq_connectionresouce has been deprecated
- Multiple resources have been renamed to improve consistency
ENHANCEMENTS:
- New Resource:
sonatyperepo_repository_swift_proxy[GH-310] - New Resource:
sonatyperepo_repository_terraform_hosted[GH-309] - New Resource:
sonatyperepo_repository_terraform_proxy[GH-262] - A number of properties on
sonatype_repository_[FORMAT]_proxynow have default values and need not be defined - A number of
sonatype_repository_*resources now supportimport
BUG FIXES:
- Resolved inability to manage S3 Blob Stores after introduction of
pre_signed_url_enabled[GH-281]
NOTES:
- Tested against Sonatype Nexus Repository Manager 3.88.0 [GH-263]
- There is an API regression in NXRM 3.88.x that prevents use of the
sonatyperepo_system_config_ldap_connectionresource [GH-276]
- There is an API regression in NXRM 3.88.x that prevents use of the
- Tested against Sonatype Nexus Repository Manager 3.89.0 [GH-275]
- There is an API regression in NXRM 3.89.0 that prevents use of the
sonatyperepo_system_config_ldap_connectionresource [GH-276]
- There is an API regression in NXRM 3.89.0 that prevents use of the
- Tested against Terraform 1.14.x [GH-255]
- Import is noted as broken for
sonatype_repository_apt_hostedresource [GH-290] - Multiple documentation and example updates [GH-283]
BUG FIXES:
- Resolved inability to update resource
sonatyperepo_system_config_ldap_connection[GH-271] - Unable to create resource
sonatyperepo_blob_store_s3[GH-273]
ENHANCEMENTS:
- Support for S3 Pre-signed URLs on
sonatyperepo_blob_store_s3Data Source and Resource [GH-248] - Resource
sonatyperepo_rolenow supports managing roles consisting of only privileges or only roles [GH-259]
BUG FIXES:
- The following resources could not be updated (missing
idin API call) [GH-261]:sonatyperepo_capability_base_urlsonatyperepo_capability_custom_s3_regionssonatyperepo_capability_default_rolesonatyperepo_capability_firewall_audit_and_quarantinesonatyperepo_capability_healthchecksonatyperepo_capability_outreach_managementsonatyperepo_capability_rut_authsonatyperepo_capability_storage_settingssonatyperepo_capability_ui_brandingsonatyperepo_capability_ui_settingssonatyperepo_capability_webhook_globalsonatyperepo_capability_webhook_repository
NOTES:
- Tested against Sonatype Nexus Repository Manager 3.87.1
ENHANCEMENTS:
-
Updated the minimum Terraform version to 1.7.0 [GH-253]
Earlier versions may well work fine, but are now not supported or tested.
BUG FIXES:
- Unable to update
sonatyperepo_capability_auditresource after import [GH-250] - Unable to update capabilities (
sonatyperepo_capability_*) due to missing ID in request [GH-251]
ENHANCEMENTS:
- New Resource:
sonatyperepo_blob_store_group[GH-136] - New Resource:
sonatyperepo_system_config_http[GH-246] - New Resource:
sonatyperepo_task_license_expiration_notification- see help docs [GH-223]
BUG FIXES:
- Resource
sonatyperepo_capability_auditcould not be imported [GH-237] - Resource
sonatyperepo_system_iq_connectionalways showed plan changes due topropertiesandlast_updatedfields [GH-236] - Proxy Repository Resources could produce inconsistent results after apply [GH-232] (thanks @yfougeray-euphoria)
NOTES:
- Tested against Sonatype Nexus Repository Manager 3.86.2
ENHANCEMENTS:
-
Refactored common code and patterns into a shared library to improve mantainability and consistency [GH-208], [GH-201], [GH-199]
You will see slight changes (improvements, minor corrections and consistency) in descriptions of fields for data sources and resources as a result of this, but there should be NO breaking changes - all schemas have been verified as matching version the previous release.
BUG FIXES:
- Could not create
sonatyperepo_repository_conan_proxyresource [GH-224]
BUG FIXES:
- Resources
sonatyperepo_capability_*crashed provider whennoteswas not provided [GH-222]
ENHANCEMENTS:
- HuggingFace now a supported format for
sonatyperepo_cleanup_policy[GH-218] (thanks @yfougeray-euphoria)
BUG FIXES:
- Fixed "Provider produced inconsistent result after apply" error when
routing_rulewas provided for Maven, PyPi, R or Ruby Gems repositories [GH-216] (thanks @yfougeray-euphoria)
ENHANCEMENTS:
sonatyperepo_content_selectorresources now support import [GH-209]
BUG FIXES:
- Temporary workaround for
sonatyperepo_repository_docker_hostedas API does not returnstorage.latest_policy[GH-210]
BUG FIXES:
- Fixed regression that immpacted all
sonatyperepo_repository_*_proxyresources where replication was not enabled [GH-206]
ENHANCEMENTS:
sonatyperepo_repository_apt_*resources now support import [GH-146] (thanks @yfougeray-euphoria)sonatyperepo_repository_conda_*resources now support import [GH-147] (thanks @yfougeray-euphoria)sonatyperepo_repository_go_*resources now support import [GH-148] (thanks @yfougeray-euphoria)sonatyperepo_repository_helm_*resources now support import [GH-145] (thanks @yfougeray-euphoria)sonatyperepo_repository_huggingface_proxyresource now support import [GH-149] (thanks @yfougeray-euphoria)sonatyperepo_repository_maven_*resources now support import [GH-138] (thanks @yfougeray-euphoria)sonatyperepo_repository_npm_*resources now support import [GH-139] (thanks @yfougeray-euphoria)sonatyperepo_repository_nuget_*resources now support import [GH-140] (thanks @yfougeray-euphoria)sonatyperepo_repository_p2_proxyresource now support import [GH-150] (thanks @yfougeray-euphoria)sonatyperepo_repository_pypi_*resources now support import [GH-141] (thanks @yfougeray-euphoria)sonatyperepo_repository_raw_*resources now support import [GH-142] (thanks @yfougeray-euphoria)sonatyperepo_repository_rubygems_*resources now support import [GH-143] (thanks @yfougeray-euphoria)sonatyperepo_repository_yum_*resources now support import [GH-144] (thanks @yfougeray-euphoria)
BUG FIXES:
- Fixed issue with import for
sonatyperepo_repository_*_proxyresources [GH-153] (thanks @yfougeray-euphoria)
FEATURES:
- New Data Source:
sonatyperepo_capabilities[GH-157] - New Data Source:
sonatyperepo_routing_rule[GH-152] (thanks @yfougeray-euphoria) - New Data Source:
sonatyperepo_routing_rules[GH-152] (thanks @yfougeray-euphoria) - New Data Source:
sonatyperepo_user_tokens[GH-151] (thanks @yfougeray-euphoria) - New Resource:
sonatyperepo_capability_audit[GH-159] - New Resource:
sonatyperepo_capability_base_url[GH-156] - New Resource:
sonatyperepo_capability_custom_s3_regions[GH-186] - New Resource:
sonatyperepo_capability_default_role[GH-188] - New Resource:
sonatyperepo_capability_firewall_audit_and_quarantine[GH-163] - New Resource:
sonatyperepo_capability_healthcheck[GH-163] - New Resource:
sonatyperepo_capability_outreach_management[GH-166] - New Resource:
sonatyperepo_capability_rut_auth[GH-195] - New Resource:
sonatyperepo_capability_storage_settings[GH-194] - New Resource:
sonatyperepo_capability_ui_branding[GH-168] - New Resource:
sonatyperepo_capability_ui_settings[GH-169] - New Resource:
sonatyperepo_capability_webhook_global[GH-183] - New Resource:
sonatyperepo_capability_webhook_repository[GH-184] - New Resource:
sonatyperepo_routing_rule[GH-152] (thanks @yfougeray-euphoria) - New Resource:
sonatyperepo_user_tokens[GH-151] (thanks @yfougeray-euphoria)
FEATURES:
- New Resource:
sonatyperepo_task_blobstore_compact[GH-92] - New Resource:
sonatyperepo_task_malware_remediator[GH-92] - New Resource:
sonatyperepo_task_repair_create_browse_nodes[GH-92] - New Resource:
sonatyperepo_task_repository_maven_remove_snapshots[GH-92] - New Resource:
sonatyperepo_task_repository_docker_gc[GH-92] - New Resource:
sonatyperepo_task_repository_docker_upload_purge[GH-92]
ENHANCEMENTS:
- You can now supply a
version_hintin the Provider configuration to work around scenarios where theServerheader is stripped from responses. This can be typical when using a reverse proxy or load balancer in front of Sonatype Nexus Repository. [GH-109]
ENHANCEMENTS:
- Resource
sonatyperepo_repository_docker_groupnow supports import [GH-126] (thanks @yfougeray-euphoria) - Resource
sonatyperepo_repository_docker_hostednow supports import [GH-126] (thanks @yfougeray-euphoria) - Resource
sonatyperepo_repository_docker_proxynow supports import [GH-126] (thanks @yfougeray-euphoria) - Resource
sonatyperepo_rolenow supports import [GH-128] (thanks @yfougeray-euphoria) - Resource
sonatyperepo_system_config_mailnow supports import [GH-119] (thanks @yfougeray-euphoria) - Resource
sonatyperepo_security_realmsnow supports import [GH-118] (thanks @yfougeray-euphoria) - Resource
sonatyperepo_security_samlnow supports import [GH-120] (thanks @yfougeray-euphoria) - Resource
sonatyperepo_system_anonymous_accessnow supports import [GH-117] (thanks @yfougeray-euphoria) - Resource
sonatyperepo_usernow supports import [GH-97]
ENHANCEMENTS:
- A number of resources have had their schemas updated to use
Setrather thanListto avoid unncessary plan changes due to ordering of data. The impacted data sources and resources are:- Data Sources:
sonatyperepo_blob_store_groupsonatyperepo_rolessonatyperepo_users
- Resources:
sonatyperepo_privilege_*(i.e. all Privilege resources)sonatyperepo_repository_*_hosted(i.e. all Hosted Repository resources)sonatyperepo_repository_*_proxy(i.e. all Proxy Repository resources)sonatyperepo_rolesonatyperepo_user
- Data Sources:
BUG FIXES:
- Bug: Read for resource
sonatyperepo_usermight return incorrect User breaking state [GH-111] - Bug: Subsequent plans for
sonatyperepo_roleshowed change due to ordering of privileges [GH-112]
BUG FIXES:
- Bug: Further improve connectivity errors to Sonatype Nexus Repository without the provider crashing [GH-105]
BUG FIXES:
- Bug:
userMemberOfAttributewas not mapped in API requests forsonatyperepo_system_config_ldap_connectionresource [GH-101] - Bug:
prefixforsonatyperepo_blob_store_s3was not stored in Terraform State correctly leading to inconsistent results after apply error [GH-103]
NOTES:
- Tested against Sonatype Nexus Repository Manager 3.85.0
FEATURES:
- New Data Source:
sonatyperepo_content_selector[GH-84] - New Data Source:
sonatyperepo_content_selectors[GH-84] - New Resource:
sonatyperepo_content_selector[GH-84]
BUG FIXES:
- Bug: Changing the
idon asonatyperepo_roledid not force a recreation of the resource - failed with409 - Conflict[GH-88] - Bug: Handle connectivity errors to Sonatype Nexus Repository without the provider crashing [GH-94]
NOTES:
- Docs: Clarified that
sonatyperepo_roleresource can be used to create Roles that auto-map to LDAP or SAML groups
BUG FIXES:
- Bug: Unable to create Docker Registry on NXRM 3.84+ as
latest_policynot returned in API create response
FEATURES:
- New Resource:
sonatyperepo_blob_store_google_cloud[GH-64]
FEATURES:
- New Resource:
sonatyperepo_cleanup_policy[GH-58] - New Resource:
sonatyperepo_security_saml[GH-63]
ENHANCEMENTS:
- resource/sonatyperepo_repository_docker_group: Add
path_enabledattribute [GH-75] - resource/sonatyperepo_repository_docker_hosted: Add
path_enabledattribute [GH-75] - resource/sonatyperepo_repository_docker_proxy: Add
path_enabledattribute [GH-75]
NOTES:
- Tested against Sonatype Nexus Repository Manager 3.79.1 through 3.84.1
FEATURES:
- New Resource:
sonatyperepo_security_realms[GH-60]
ENHANCEMENTS:
- Confirm Sonatype Nexus Repository Manager is WRITABLE [GH-54]
- Determine version of Sonatype Nexus Repository Manager for future use in this Provider [GH-54]
NOTES:
- Tested against Sonatype Nexus Repository Manager 3.82.0
FEATURES:
- New Resource:
sonatyperepo_repository_apt_hosted[GH-35] - New Resource:
sonatyperepo_repository_apt_proxy[GH-35] - New Resource:
sonatyperepo_repository_cargo_group[GH-50] - New Resource:
sonatyperepo_repository_cargo_hosted[GH-50] - New Resource:
sonatyperepo_repository_cargo_proxy[GH-50] - New Resource:
sonatyperepo_repository_conan_group[GH-51] - New Resource:
sonatyperepo_repository_conan_hosted[GH-51] - New Resource:
sonatyperepo_repository_conan_proxy[GH-51] - New Resource:
sonatyperepo_repository_cocoapods_proxy[GH-39] - New Resource:
sonatyperepo_repository_composer_proxy[GH-40] - New Resource:
sonatyperepo_repository_conda_proxy[GH-45] - New Resource:
sonatyperepo_repository_docker_group[GH-36] - New Resource:
sonatyperepo_repository_docker_hosted[GH-36] - New Resource:
sonatyperepo_repository_docker_proxy[GH-36] - New Resource:
sonatyperepo_repository_gitlfs_hosted[GH-46] - New Resource:
sonatyperepo_repository_go_group[GH-41] - New Resource:
sonatyperepo_repository_go_hosted[GH-41] - New Resource:
sonatyperepo_repository_helm_hosted[GH-42] - New Resource:
sonatyperepo_repository_helm_proxy[GH-42] - New Resource:
sonatyperepo_repository_huggingface_proxy[GH-43] - New Resource:
sonatyperepo_repository_nuget_group[GH-38] - New Resource:
sonatyperepo_repository_nuget_hosted[GH-38] - New Resource:
sonatyperepo_repository_nuget_proxy[GH-38] - New Resource:
sonatyperepo_repository_p2_proxy[GH-47] - New Resource:
sonatyperepo_repository_pypi_group[GH-37] - New Resource:
sonatyperepo_repository_pypi_hosted[GH-37] - New Resource:
sonatyperepo_repository_pypi_proxy[GH-37] - New Resource:
sonatyperepo_repository_r_group[GH-49] - New Resource:
sonatyperepo_repository_r_hosted[GH-49] - New Resource:
sonatyperepo_repository_r_proxy[GH-49] - New Resource:
sonatyperepo_repository_ruby_gems_group[GH-48] - New Resource:
sonatyperepo_repository_ruby_gems_hosted[GH-48] - New Resource:
sonatyperepo_repository_ruby_gems_proxy[GH-48] - New Resource:
sonatyperepo_repository_yum_group[GH-52] - New Resource:
sonatyperepo_repository_yum_hosted[GH-52] - New Resource:
sonatyperepo_repository_yum_proxy[GH-52]
This is the first MVP release.
FEATURES:
- Resources and Datasources defined in [GH-1]