Skip to content

Instantly share code, notes, and snippets.

@hc2p
Created March 1, 2023 15:29
Show Gist options
  • Save hc2p/1c22554afa83006a3b5f0e743a31fa24 to your computer and use it in GitHub Desktop.
Save hc2p/1c22554afa83006a3b5f0e743a31fa24 to your computer and use it in GitHub Desktop.
Manifest for installing Nexus OSS on Kubernetes
apiVersion: v1
kind: Namespace
metadata:
name: nexus
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: nexus-pvc
namespace: nexus
labels:
app: nexus
spec:
accessModes:
- ReadWriteOnce
resources:
requests:
storage: 100Gi
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: nexus
namespace: nexus
spec:
selector:
matchLabels:
app: nexus
replicas: 1
template:
metadata:
labels:
app: nexus
spec:
initContainers:
- name: fix-ownership-nexus-data
image: busybox
command: ["sh", "-c", "chown -R 200:200 /nexus-data"]
volumeMounts:
- name: nexus-data-volume
mountPath: /nexus-data
containers:
- name: nexus
image: sonatype/nexus3:latest
imagePullPolicy: Always
ports:
- containerPort: 8081
volumeMounts:
- name: nexus-data-volume
mountPath: /nexus-data
env:
- name: NEXUS_SECURITY_RANDOMPASSWORD
value: "false"
- name: INSTALL4J_ADD_VM_PARAMS
value: >-
-Xms2703m
-Xmx2703m
-XX:MaxDirectMemorySize=2703m
-Djava.util.prefs.userRoot=${NEXUS_DATA}/javaprefs
volumes:
- name: nexus-data-volume
persistentVolumeClaim:
claimName: nexus-pvc
---
apiVersion: v1
kind: Service
metadata:
name: nexus-service
namespace: nexus
spec:
selector:
app: nexus
ports:
- name: http
protocol: TCP
port: 80
targetPort: 8081
- name: registry
protocol: TCP
port: 8082
targetPort: 8082
- name: hosted-registry
protocol: TCP
port: 8084
targetPort: 8084
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: nexus-ingress
namespace: nexus
annotations:
cert-manager.io/cluster-issuer: letsencrypt
nginx.ingress.kubernetes.io/proxy-body-size: 20g
spec:
ingressClassName: nginx
rules:
- host: archive.<your domain>
http:
paths:
- pathType: Prefix
path: "/"
backend:
service:
name: nexus-service
port:
number: 80
- host: registry.archive.<your domain>
http:
paths:
- pathType: Prefix
path: "/"
backend:
service:
name: nexus-service
port:
number: 8082
- host: hosted-registry.archive.<your domain>
http:
paths:
- pathType: Prefix
path: "/"
backend:
service:
name: nexus-service
port:
number: 8084
tls:
- hosts:
- archive.<your domain>
secretName: archive.<your domain>-tls-cert
- hosts:
- registry.archive.<your domain>
secretName: registry.archive.<your domain>-tls-cert
- hosts:
- hosted-registry.archive.<your domain>
secretName: hosted-registry.archive.<your domain>-tls-cert
---
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment