feat: add Nexus-compatible Terraform repositories by klboke · Pull Request #124 · klboke/kkRepo

klboke · 2026-07-14T16:45:04Z

Summary

add Nexus-compatible Terraform module and provider repositories for hosted, proxy, and group recipes under /repository/<repo>/...
add official discovery, module/provider protocols, checksum and detached PGP signatures, archive validation, shared MySQL/PostgreSQL state, publish leases, and stable group source binding
support GenericToken/API key URL credentials while redacting and canonicalizing credential-bearing paths
add admin/browse UI integration, component upload, Nexus migration with signing-key continuity, roadmap/design completion updates, and operational metrics
migrate explicitly selected native Nexus Terraform proxy archive caches through a dedicated proxy-only writer that preserves Nexus paths and reconstructs verified upstream route/checksum/signature snapshots

Compatibility and distributed semantics

behavior is based on Terraform Registry protocols and Nexus 3.92 reference observations
metadata and publish coordination live in the shared database; blobs remain behind the storage abstraction
proxy-cache restore uses a shared database lease, archive validation, and idempotent asset writes without creating hosted publication/signing state
group source selection is persisted and invalidated across nested membership/config changes
local caches remain rebuildable and are not correctness authorities

Validation

mvn -B -ntp -pl server -am test (25-module reactor, server 1026 tests, MySQL/PostgreSQL contract and smoke suites)
Terraform CLI 0.13.7 and 1.15.8 against hosted and group/proxy repositories
Nexus 3.92 black-box hosted/group compatibility checks
source-to-target Nexus hosted migration with archive hashes, shasums, signing key ID continuity, secret redaction, and Terraform CLI initialization
real Nexus 3.92 Terraform proxy warm-up and archive-cache migration, target pre-metadata path/SHA-256 proof, and real terraform init
workflow/script syntax checks and git diff --check

All optional E2E workflow labels are applied so GitHub runs the full compatibility matrix.

codecov · 2026-07-14T16:53:49Z

Codecov Report

❌ Patch coverage is 73.05340% with 661 lines in your changes missing coverage. Please review.
✅ Project coverage is 62.10%. Comparing base (41a89a0) to head (41c264f).

Files with missing lines	Patch %	Lines
...boke/kkrepo/server/terraform/TerraformService.java	79.65%	66 Missing and 86 partials ⚠️
...ithub/klboke/kkrepo/server/raw/RawAssetWriter.java	41.66%	31 Missing and 4 partials ⚠️
...po/server/terraform/TerraformComponentService.java	77.77%	17 Missing and 17 partials ⚠️
...thub/klboke/kkrepo/server/raw/RawProxyService.java	32.65%	33 Missing ⚠️
...kkrepo/protocol/terraform/TerraformPathParser.java	75.96%	7 Missing and 24 partials ⚠️
...e/kkrepo/server/browse/TerraformBrowseService.java	73.07%	11 Missing and 17 partials ⚠️
...krepo/server/terraform/TerraformMetadataCache.java	63.01%	18 Missing and 9 partials ⚠️
...repo/migration/nexus/NexusApiMigrationService.java	67.90%	9 Missing and 17 partials ⚠️
.../kkrepo/server/repositories/RepositoryService.java	26.66%	16 Missing and 6 partials ⚠️
...raform/TerraformRepositoryDataMigrationWriter.java	78.64%	9 Missing and 13 partials ⚠️
... and 29 more

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #124      +/-   ##
==========================================
+ Coverage   61.29%   62.10%   +0.81%     
==========================================
  Files         423      441      +18     
  Lines       34646    37045    +2399     
  Branches     5697     6173     +476     
==========================================
+ Hits        21235    23008    +1773     
- Misses       9476     9813     +337     
- Partials     3935     4224     +289

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Copilot

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

Copilot

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

klboke · 2026-07-15T00:37:52Z

@codex review

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 2871e48dfc

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

klboke · 2026-07-15T00:52:55Z

@codex review

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: e96bba7e4a

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

klboke · 2026-07-15T01:10:53Z

@codex review

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 18dd871e43

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

klboke · 2026-07-15T15:13:25Z

@codex review

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: ce4bfb29cf

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

klboke · 2026-07-15T15:47:47Z

@codex review

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 4b3b27a1ab

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

klboke · 2026-07-15T16:12:41Z

@codex review

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 06d190bcab

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

klboke · 2026-07-15T17:00:32Z

@codex review

Please review the current head (a5f4372), including the explicit Terraform provider protocol metadata flow, cross-platform version consistency, Nexus-compatible 5.0 default, protocol-6 live compatibility coverage, and the existing real Nexus 3.92 Terraform proxy migration E2E. All current CI checks are green and Codecov is complete.

chatgpt-codex-connector · 2026-07-15T17:11:43Z

Codex Review: Didn't find any major issues. What shall we delve into next?

Reviewed commit: a5f43726f6

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

klboke · 2026-07-16T07:49:56Z

@codex review

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 99aaea0bcd

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

klboke · 2026-07-16T08:10:44Z

@codex review

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 644bd82b6d

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

klboke · 2026-07-16T08:27:11Z

@codex review

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 1166205d20

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

klboke · 2026-07-16T10:13:39Z

@codex review

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: ca13380de2

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

klboke · 2026-07-16T10:46:58Z

@codex review

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 41c264fb2a

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

feat: add Nexus-compatible Terraform repositories

d5a1b11

klboke added run-client-e2e run-live-compat Trigger live compatibility workflow run-migration-e2e run-docker-oci-conformance Trigger Docker OCI conformance workflow labels Jul 14, 2026

github-advanced-security AI found potential problems Jul 14, 2026

View reviewed changes

Comment thread server/src/main/java/com/github/klboke/kkrepo/server/terraform/TerraformService.java Fixed

fix: parse Terraform upload filenames in linear time

84ad2a8

test: cover Terraform repository service workflows

b956f15

klboke marked this pull request as ready for review July 14, 2026 17:11

Copilot AI review requested due to automatic review settings July 14, 2026 17:11

Copilot AI reviewed Jul 14, 2026

test: expand Terraform migration and validation coverage

2871e48

Copilot AI review requested due to automatic review settings July 15, 2026 00:35

Copilot AI reviewed Jul 15, 2026

chatgpt-codex-connector Bot reviewed Jul 15, 2026

View reviewed changes

Comment thread server/src/main/java/com/github/klboke/kkrepo/server/terraform/TerraformService.java Outdated

Comment thread ...terraform/src/main/java/com/github/klboke/kkrepo/protocol/terraform/TerraformPathParser.java Outdated

fix: address Terraform review findings

e96bba7

Copilot AI review requested due to automatic review settings July 15, 2026 00:52

This comment was marked as low quality.

Sign in to view

chatgpt-codex-connector Bot reviewed Jul 15, 2026

View reviewed changes

Comment thread server/src/main/java/com/github/klboke/kkrepo/server/security/RepositorySecurityFilter.java

Comment thread server/src/main/java/com/github/klboke/kkrepo/server/terraform/TerraformService.java Outdated

fix: tighten Terraform authorization and group metadata

18dd871

Copilot AI review requested due to automatic review settings July 15, 2026 01:10

This comment was marked as low quality.

Sign in to view

chatgpt-codex-connector Bot reviewed Jul 15, 2026

View reviewed changes

Comment thread server/src/main/java/com/github/klboke/kkrepo/server/terraform/TerraformService.java Outdated

Comment thread server/src/main/java/com/github/klboke/kkrepo/server/terraform/TerraformService.java Outdated

fix: enforce Terraform module coordinates and metadata ttl

df60e7f

Copilot AI review requested due to automatic review settings July 15, 2026 01:32

This comment was marked as low quality.

Sign in to view

chatgpt-codex-connector Bot reviewed Jul 15, 2026

View reviewed changes

Comment thread server/src/main/java/com/github/klboke/kkrepo/server/terraform/TerraformService.java

Comment thread server/src/main/java/com/github/klboke/kkrepo/server/terraform/TerraformService.java Outdated

fix(terraform): preserve proxy cache snapshots

4b3b27a

chatgpt-codex-connector Bot reviewed Jul 15, 2026

View reviewed changes

Comment thread server/src/main/java/com/github/klboke/kkrepo/server/terraform/TerraformService.java

Comment thread server/src/main/java/com/github/klboke/kkrepo/server/terraform/TerraformService.java Outdated

fix(terraform): return not found for empty packages

06d190b

chatgpt-codex-connector Bot reviewed Jul 15, 2026

View reviewed changes

Comment thread server/src/main/java/com/github/klboke/kkrepo/server/terraform/TerraformService.java Outdated

klboke added 2 commits July 16, 2026 00:45

fix(terraform): persist provider protocols

96f94c5

test(terraform): cover provider protocol header

a5f4372

fix(terraform): align logical components and browse behavior

99aaea0

chatgpt-codex-connector Bot reviewed Jul 16, 2026

View reviewed changes

Comment thread ...er/src/main/java/com/github/klboke/kkrepo/server/terraform/TerraformPublishLeaseManager.java Outdated

fix(terraform): renew publication leases

644bd82

chatgpt-codex-connector Bot reviewed Jul 16, 2026

View reviewed changes

Comment thread server/src/main/java/com/github/klboke/kkrepo/server/terraform/TerraformService.java

fix(terraform): verify migrated provider cache

1166205

chatgpt-codex-connector Bot reviewed Jul 16, 2026

View reviewed changes

Comment thread ...er/src/main/java/com/github/klboke/kkrepo/server/metrics/RepositoryRequestMetricsFilter.java

klboke added 2 commits July 16, 2026 17:20

perf(terraform): optimize metadata and asset hot paths

92b1519

test(terraform): cover non-token path normalization

ca13380

chatgpt-codex-connector Bot reviewed Jul 16, 2026

View reviewed changes

Comment thread server/src/main/java/com/github/klboke/kkrepo/server/browse/BrowseContentDeleteController.java

fix(terraform): resolve browse aliases before delete

41c264f

chatgpt-codex-connector Bot reviewed Jul 16, 2026

View reviewed changes

Comment thread server/src/main/java/com/github/klboke/kkrepo/server/terraform/TerraformService.java

klboke merged commit 4134598 into main Jul 16, 2026
23 checks passed

klboke deleted the feat/terraform-repository-support branch July 16, 2026 11:14

Conversation

klboke commented Jul 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Compatibility and distributed semantics

Validation

Uh oh!

Uh oh!

codecov Bot commented Jul 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Uh oh!

klboke commented Jul 15, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

Uh oh!

This comment was marked as low quality.

Uh oh!

klboke commented Jul 15, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

Uh oh!

This comment was marked as low quality.

Uh oh!

klboke commented Jul 15, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

Uh oh!

This comment was marked as low quality.

Uh oh!

klboke commented Jul 15, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

Uh oh!

klboke commented Jul 15, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

Uh oh!

klboke commented Jul 15, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

klboke commented Jul 15, 2026

Uh oh!

chatgpt-codex-connector Bot commented Jul 15, 2026

Uh oh!

klboke commented Jul 16, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

klboke commented Jul 14, 2026 •

edited

Loading

codecov Bot commented Jul 14, 2026 •

edited

Loading