Nexus IQ Data Services Maintenance: November 16th, 2019 - Sonatype Lifecycle & Repository Firewall - Sonatype Community
Nexus IQ Data Services Maintenance: November 16th, 2019
post by sangles on Nov 8, 2019
Steven Angles
Sonatype has planned a scheduled maintenance of the Nexus IQ Data Services on Saturday, November 16th, from approximately 6pm to 10pm EST.
Maintenance Window
- EST - 6pm to 10pm Saturday, November 16th, 2019
- UTC - 11pm Saturday, November 16th to 3am Sunday, November 17th, 2019
- IST - 4:30am to 8:30am Sunday, November 17th, 2019
Multiple service disruptions lasting 5-10 minutes are expected during the maintenance window. Users will be unable to submit IQ Server evaluations or view aspects of the Application Report during these service disruptions. This includes Nexus Lifecycle, Auditor, and Firewall.
How does this maintenance benefit my organization?
This is proactive maintenance in an effort to continue to provide reliant and performant IQ Server evaluations.
What is the immediate impact of this maintenance window to my organization?
For multiple 5-10 minute periods during the maintenance window, users will be unable to submit evaluations or view aspects of the Application Report.
- Nexus Firewall evaluations: By design, when "Quarantine” is enabled, Nexus Firewall component evaluations for new download requests are placed in a “pending” state and not served when IQ Services are not available. Once IQ Services are available, evaluations will automatically occur on components in the “pending” state. Depending on the policy violations, components will either be available for download from your local Nexus Repository, or placed in a “quarantined” state.
- Application evaluations in-flight: For evaluations that have already been initiated (e.g. Jenkins build) and have not yet completed prior to the start of the maintenance window, an out of service response from the Nexus IQ Data Services will be propagated to the client when next polled. By default, Sonatype CI plugins are configured to fail open when IQ Services are not available. Although builds will be marked unstable, they will not fail as a result of the IQ evaluation unless the default setting was altered by the end user.
- Application evaluations submitted during window: For evaluations that are initiated during the window, the client will first perform the localized fingerprinting analysis on-premise. When the analysis completes, it will poll the Nexus IQ Data Services and receive an out of service response. By default, Sonatype CI plugins are configured to fail open when IQ Services are not available. Although builds will be marked unstable, they will not fail as a result of the IQ evaluation unless the default setting was altered by the end user.
- Viewing pre-existing Application Reports: For previously completed evaluations, an Application Report was generated with a unique, persistent report link. During the maintenance window, users will be unable to load the “Component Info” section of the “Component Information Panel (CIP)” as this requires a connection to the Nexus IQ Data Services to provide the most up-to-date version release data.
What are the proactive measures to help prepare for the maintenance window?
Since all Nexus IQ Server evaluations during the maintenance window will be impacted, here are a few recommendations on how best to prepare:
- Communicate this scheduled maintenance to your developers.
- If you have modified the default fail open setting for Sonatype CI plugins, consider resetting to the default. This will allow builds to proceed during the maintenance window.
Where can I monitor the status of the Nexus IQ Data Services?
You can monitor the status of the Nexus IQ Data Services on our official Sonatype status page:
Should users expect additional scheduled maintenance going forward?
Yes. Sonatype takes great care to ensure our services are highly available. This can require periodic maintenance. Our aim is to minimize any impact during these periods. In the event there is an impact, we are committed to ensuring our customers are updated in advance of the planned maintenance.
Where can I ask additional questions?
You can reply directly to this post. If you are not already registered with the Sonatype User Community, you will be prompted to create an account. This will empower you to create and reply to other threads initiated by both the Sonatype team and your community peers. Notifications can be easily configured to ensure you are aware of updates for a specific thread and/or important announcements within the Community.