This guide walks through how artifact repository administrators can synchronize Spring commercial releases from https://packages.broadcom.com/artifactory/spring-enterprise to your internal artifact repository. After those commercial releases of Spring artifacts are synced, application development teams with access to your internal artifact repository can include them as dependencies in their projects.

Prerequisites

Access to the Spring Commercial repository is available to entitled customers through the Broadcom Customer Support Portal with at least one entitlement in:

  • VMware Tanzu Spring
  • VMware Platform for Cloud Foundry (formerly Tanzu Application Service)
  • VMware Platform for Kubernetes
  • Azure Spring Apps Enterprise

Additional Prerequisites for Air-Gapped Environments

For air-gapped environments in which external access is tightly controlled, you must add the following domains to your allow list:

Accessing Spring Enterprise Subscription Artifact Repositories

To access the Spring Enterprise Subscription artifact repository:

  1. Log in to the Broadcom Customer Support Portal.

  2. Make sure that Tanzu is selected in the top navigation bar of the site.

    Broadcom Customer Support Portal, Select Tanzu section

    Figure 1: Select Tanzu from section dropdown.

  3. Select My Downloads from the left side navigation.

    Broadcom Customer Support Portal, Select My Downloads navigation

    Figure 2: Select My Downloads from left side navigation.

  4. Search for "Spring Enterprise" on the My Downloads page.

    Broadcom Customer Support Portal, Search in Downloads

    Figure 3: Search for "Spring Enterprise."

  5. Retrieve the access token by expanding the Token Access row and then clicking on the green icon, after which you are presented with an instructions pop-up.

    Broadcom Customer Support Portal, Retrieve Access Token

    Figure 4: Retrieve Access Token using green icon.

The download instructions walk you through how to save your access token. The access token is valid for 6 months by default, along with steps for setting up your own artifact repository to sync the artifacts from Spring Enterprise Subscription.

Save your access token value into a local file. To do this, click the Save File button on the instructions pop-up. This access token serves as a password for your email address or as a bearer token for API requests. When authenticating to Spring Enterprise Subscription artifact repository URL directly, use the value access_token in the saved JSON file.

Spring Enterprise Subscription repository details

Adding a Remote Repository in Artifactory

JFrog Artifactory and Sonatype Nexus are two commonly used artifact repository managers. The following sections describe how to add Release artifacts to your local Artifactory server.

To configure a remote repository:

  1. Go to the Administration module.
  2. Go to Repositories and select Add Repositories, then select Remote Repository.
  3. On that page, select type Maven, and provide the configuration values listed below.

Configuring Release Artifacts

The following configuration values can be used to cache the Spring Enterprise Subscription release artifacts in Artifactory:

  1. Configure:
  2. Click Test to confirm that the credentials are working.
    • Repository Layout: maven-2-default
    • Remote Layout Mapping: maven-2-default
  3. Ensure that Handle Releases is selected.

Maven versus Gradle

The Spring Enterprise artifact repository is of type Maven but can be used by both Maven and Gradle clients, as the Spring team does today.

Artifactory Smart Repository

Artifactory platform administrators might see an alert saying, "Artifactory Smart Repository Detected" when testing connectivity of a new remote repository to packages.broadcom.com.

Administrators who want to assist the Spring team by delivering a limited set of repository statistics back upstream to packages.broadcom.com can enable all settings for this feature, however it is not required.

Advanced Settings

Advanced settings for the remote repository depend largely on individual platform requirements, including storage, network, local compliance and regulations, and more. These settings are outside the scope of Spring Enterprise Subscription support.

When storage is a concern, the Spring Team generally sets a non-zero value for Unused Artifacts Cleanup Period (Hr) for remote snapshot and other repositories.

Downstream Repository Replications

Pull replication is a convenient way to proactively populate a remote cache. This avoids waiting for artifacts to arrive when first requested, reduces traffic on the Spring Enterprise server, and is permitted from packages.broadcom.com. The ability to configure downstream repository replication is available in the JFrog Artifactory commercial offering and Sonatype Nexus Proxy Repository.

Reference Documentation

Release notes, reference documentation, and Javadoc for Spring Enterprise Subscription releases are indexed at enterprise.spring.io. Release-specific documentation for many Spring releases is also published in a docs zip file in the repository tree.

check-circle-line exclamation-circle-line close-line
Scroll to top icon