Nexus IQ Data Services Maintenance: Wednesday, December 26th, 2018

Sonatype has planned a scheduled maintenance of the Nexus IQ Data Services on Wednesday, December 26th, 2018 at approximately 9 PM EDT. The expected maintenance window is 15 minutes.

Maintenance Window

• EDT - 9 PM Wednesday, December 26th, 2018
• UTC - 2 AM Thursday, December 27th, 2018
• IST - 7:30 AM Thursday, December 27th, 2018

During the period, users will be unable to submit IQ Server evaluations or view aspects of the Application Report. This includes Nexus Lifecycle, Auditor, and Firewall.

How does this maintenance benefit my organization?

This is proactive maintenance, which will further increase the capacity of our Nexus IQ Data Services and continue to provide reliant and performant IQ Server evaluations as we continue to see record growth.

What is the immediate impact of this maintenance window to my organization?

During the maintenance window, users will be unable to submit evaluations or view aspects of the Application Report.

• Nexus Firewall evaluations: By design, when "Quarantine” is enabled, Nexus Firewall component evaluations for new download requests are placed in a “pending” state and not served when IQ Services are not available. Once IQ Services are available, evaluations will automatically occur on components in the “pending” state. Depending on the policy violations, components will either be available for download from your local Nexus Repository, or placed in a “quarantined” state.
• Application evaluations in-flight: For evaluations that have already been initiated (e.g. Jenkins build) and have not yet completed prior to the start of the maintenance window, an out of service response from the Nexus IQ Data Services will be propagated to the client when next polled. By default, Sonatype CI plugins are configured to fail open when IQ Services are not available. Although builds will be marked unstabl, they will not fail as a result of the IQ evaluation unless the default setting was altered by the end user.
• Application evaluations submitted during window: For evaluations that are initiated during the window, the client will first perform the localized fingerprinting analysis on-premise. When the analysis completes, it will poll the Nexus IQ Data Services and receive an out of service response. By default, Sonatype CI plugins are configured to fail open when IQ Services are not available. Although builds will be marked unstable, they will not fail as a result of the IQ evaluation unless the default setting was altered by the end user.
• Viewing pre-existing Application Reports: For previously completed evaluations, an Application Report was generated with a unique, persistent report link. During the maintenance window, users will be unable to load the “Component Info” section of the “Component Information Panel (CIP)” as this requires a connection to the Nexus IQ Data Services to provide the most up-to-date version release data.

What are the proactive measures to help prepare for the maintenance window?

Since all Nexus IQ Server evaluations during the maintenance window will be impacted, here are a few recommendations on how best to prepare:

• Communicate this scheduled maintenance to your developers.
• If you have modified the default fail open setting for Sonatype CI plugins, consider resetting to the default. This will allow builds to proceed during the maintenance window.

Where can I monitor the status of the Nexus IQ Data Services?

You can monitor the status of the Nexus IQ Data Services on our official Sonatype status page:

https://status.sonatype.com/

Should users expect additional scheduled maintenance going forward?

Yes. Sonatype takes great care to ensure our services are highly available. This can require periodic maintenance. Our aim is to minimize any impact during these periods. In the event there is an impact, we are committed to ensuring our customers are updated in advance of the planned maintenance.

Where can I ask additional questions?

You can reply directly to this post. If you are not already registered with the Sonatype User Community, you will be prompted to create an account. This will empower you to create and reply to other threads initiated by both the Sonatype team and your community peers. Notifications can be easily configured to ensure you are aware of updates for a specific thread and/or important announcements within the Community.