Add fork from https://github.com/Oteemo/charts/tree/master/charts/sonatype-nexus with minor tweaks.

.gitignore

+##LDE specific
+.project
+*.iml
+*.idea

.helmignore

+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+# OWNERS file for Kubernetes
+OWNERS
+*.tar

Chart.yaml

+apiVersion: v1
+name: sonatype-nexus
+version: 2.0.0
+appVersion: 3.21.2
+description: Sonatype Nexus is an open source repository manager
+keywords:
+  - artifacts
+  - dependency
+  - management
+  - sonatype
+  - nexus
+  - repository
+home: https://www.sonatype.com/nexus-repository-oss
+icon: http://www.sonatype.org/nexus/content/uploads/2015/06/Nexus-Logo.jpg
+sources:
+  - https://github.com/sonatype/nexus-public
+  - https://github.com/travelaudience/docker-nexus
+  - https://github.com/travelaudience/kubernetes-nexus
+  - https://github.com/travelaudience/docker-nexus-backup
+maintainers:
+  - name: rjkernick
+    email: rjkernick@gmail.com
+  - name: tsiddique
+    email: tsiddique@live.com

OWNERS

+approvers:
+- rjkernick
+- tsiddique
+reviewers:
+- rjkernick
+- tsiddique

demo-infra-nexus-install.sh

+#!/bin/sh
+
+__is_pod_ready() {
+
+  POD_STATUS="False"
+  while [ "$POD_STATUS" != "True" ];
+  do
+    echo "waiting for pod..."
+    sleep 5
+    POD_STATUS=$(kubectl get pods --namespace demo-infra -l "app.kubernetes.io/component=jenkins-master" -l "app.kubernetes.io/instance=demo-infra-nexus" -o jsonpath='{..status.conditions[?(@.type=="Ready")].status}')
+  done
+}
+
+# install nexus
+helm install -f values.yaml --namespace demo-infra --kubeconfig ~/.kube/config demo-infra-nexus oteemo.github.io/charts/sonatype-nexus
+
+# wait for it to become ready
+__is_pod_ready
+
+# print admin password
+#export JENKINS_PASS=$(kubectl get secret --namespace demo-infra demo-infra-jenkins -o jsonpath="{.data.jenkins-admin-password}" | base64 --decode)
+echo "HOST: http://192.168.1.194:8180  USERNAME: admin  PASSWORD: admin123"
+
+# expose
+export POD_NAME=$(kubectl get pods --namespace demo-infra -l "app.kubernetes.io/component=jenkins-master" -l "app.kubernetes.io/instance=demo-infra-jenkins" -o jsonpath="{.items[0].metadata.name}")
+kubectl --namespace demo-infra port-forward $POD_NAME 8180:8080  --address 0.0.0.0 &

demo-infra-nexus-uninstall.sh

+#!/bin/sh
+
+# use helm for uninstall
+helm uninstall --namespace demo-infra --kubeconfig ~/.kube/config demo-infra-jenkins

templates/NOTES.txt

+1. To access Nexus:
+
+   NOTE: It may take a few minutes for the ingress load balancer to become available or the backends to become HEALTHY.
+         You can watch the status of the backends by running:
+         `kubectl get ingress -o jsonpath='{.items[*].metadata.annotations.ingress\.kubernetes\.io/backends}'`
+
+   To access Nexus you can check:
+   {{- if .Values.nexusProxy.env.enforceHttps }}
+     https://{{ .Values.nexusProxy.env.nexusHttpHost }}
+   {{- else }}
+     http://{{ .Values.nexusProxy.env.nexusHttpHost }}
+   {{- end }}
+
+2. Login with the following credentials
+
+   username: admin
+   password: {{ .Values.nexusBackup.nexusAdminPassword }}
+
+3. Change Your password after the first login
+
+  {{- if .Values.nexusBackup.enabled }}
+   Once you login you should change your admin password to match the value of `nexusBackup.env.nexusAdminPassword`
+   This is important for security reasons and also because backup container needs this password set for admin user
+   to access Nexus API to run backups.
+  {{- end }}
+
+4. Next steps in configuration
+
+   Please follow the link below to the README for nexus configuration, usage, backups and DR info:
+   https://github.com/helm/charts/tree/master/stable/sonatype-nexus#after-installing-the-chart

templates/_helpers.tpl

+{{/* vim: set filetype=mustache: */}}
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "nexus.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+If release name contains chart name it will be used as a full name.
+*/}}
+{{- define "nexus.fullname" -}}
+{{- if .Values.fullnameOverride -}}
+{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}
+{{- else -}}
+{{- $name := default .Chart.Name .Values.nameOverride -}}
+{{- if contains $name .Release.Name -}}
+{{- .Release.Name | trunc 63 | trimSuffix "-" -}}
+{{- else -}}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+{{- end -}}
+{{- end -}}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "nexus.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*
+Create a default fully qualified name for proxy keystore secret.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+*/}}
+{{- define "nexus.proxy-ks.name" -}}
+{{- printf "%s-%s" (include "nexus.fullname" .) "proxy-ks" | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*  Manage the labels for each entity  */}}
+{{- define "nexus.labels" -}}
+app: {{ template "nexus.name" . }}
+fullname: {{ template "nexus.fullname" . }}
+chart: {{ template "nexus.chart" . }}
+release: {{ .Release.Name }}
+heritage: {{ .Release.Service }}
+{{- end -}}

templates/backup-pv.yaml

+{{- if not .Values.statefulset.enabled }}
+{{- if .Values.nexusBackup.persistence.pdName -}}
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: {{ .Values.nexusBackup.persistence.pdName }}
+  labels:
+{{ include "nexus.labels" . | indent 4 }}
+spec:
+  capacity:
+    storage: {{ .Values.nexusBackup.persistence.storageSize }}
+  accessModes:
+    - ReadWriteOnce
+  claimRef:
+    name: {{ template "nexus.fullname" . }}-backup
+    namespace: {{ .Release.Namespace }}
+  gcePersistentDisk:
+    pdName: {{ .Values.nexusBackup.persistence.pdName }}
+    fsType: {{ .Values.nexusBackup.persistence.fsType }}
+{{- end }}
+{{- end }}

templates/backup-pvc.yaml

+{{- if not .Values.statefulset.enabled }}
+{{- if and .Values.nexusBackup.persistence.enabled (not .Values.nexusBackup.persistence.existingClaim) }}
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: {{ template "nexus.fullname" . }}-backup
+  labels:
+{{ include "nexus.labels" . | indent 4 }}
+{{- if .Values.nexusBackup.persistence.annotations }}
+  annotations:
+{{ toYaml .Values.nexusBackup.persistence.annotations | indent 4 }}
+{{- end }}
+spec:
+  accessModes:
+    - {{ .Values.nexusBackup.persistence.accessMode }}
+  resources:
+    requests:
+      storage: {{ .Values.nexusBackup.persistence.storageSize | quote }}
+{{- if .Values.nexusBackup.persistence.storageClass }}
+{{- if (eq "-" .Values.nexusBackup.persistence.storageClass) }}
+  storageClassName: ""
+{{- else }}
+  storageClassName: "{{ .Values.nexusBackup.persistence.storageClass }}"
+{{- end }}
+{{- end }}
+{{- end }}
+{{- end }}

templates/backup-secret.yaml

+{{- if .Values.nexusBackup.enabled }}
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ template "nexus.fullname" . }}
+  labels:
+{{ include "nexus.labels" . | indent 4 }}
+type: Opaque
+data:
+  nexus.nexusAdminPassword: {{ printf "%s%s" "Basic " (printf "%s%s" "admin:" .Values.nexusBackup.nexusAdminPassword | b64enc) | cat | b64enc | quote }}
+{{- end }}

templates/configmap.yaml

+{{- if .Values.config.enabled -}}
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: {{ template "nexus.name" . }}-conf
+  labels:
+{{ include "nexus.labels" . | indent 4 }}
+{{- if .Values.nexus.labels }}
+{{ toYaml .Values.nexus.labels | indent 4 }}
+{{- end }}
+data:
+{{ toYaml .Values.config.data | indent 2 }}
+{{- end }}
\ No newline at end of file

templates/ingress.yaml

+{{- if .Values.ingress.enabled -}}
+apiVersion: extensions/v1beta1
+kind: Ingress
+metadata:
+  name: {{ template "nexus.fullname" . }}
+  labels:
+{{ include "nexus.labels" . | indent 4 }}
+    {{- range $key, $value := .Values.ingress.labels }}
+    {{ $key }}: {{ $value | quote }}
+    {{- end }}
+  annotations:
+    {{- range $key, $value := .Values.ingress.annotations }}
+    {{ $key }}: {{ $value | quote }}
+    {{- end }}
+spec:
+  rules:
+{{- if .Values.nexusProxy.env.nexusHttpHost }}
+    - host: {{ .Values.nexusProxy.env.nexusHttpHost }}
+      http:
+        paths:
+          - backend:
+            {{- if .Values.nexusProxy.svcName }}
+              serviceName: {{ .Values.nexusProxy.svcName }}
+            {{- else }}
+              serviceName: {{ template "nexus.fullname" . }}
+            {{- end }}
+{{- if .Values.nexusProxy.enabled }}
+              servicePort: {{ .Values.nexusProxy.port }}
+{{- else }}
+              servicePort: {{ .Values.nexus.nexusPort }}
+{{- end }}
+            path: {{ .Values.ingress.path }}
+{{- end }}
+{{- if .Values.nexusProxy.enabled -}}
+  {{- if .Values.nexusProxy.env.nexusDockerHost }}
+    - host: {{ .Values.nexusProxy.env.nexusDockerHost }}
+      http:
+        paths:
+          - backend:
+            {{- if .Values.nexusProxy.svcName }}
+              serviceName: {{ .Values.nexusProxy.svcName }}
+            {{- else }}
+              serviceName: {{ template "nexus.fullname" . }}
+            {{- end }}
+              servicePort: {{ .Values.nexusProxy.port }}
+            path: {{ .Values.ingress.path }}
+  {{- end }}
+{{- end -}}
+  {{- with .Values.ingress.rules }}
+    {{- toYaml . | nindent 4 }}
+  {{- end -}}
+{{- if .Values.ingress.tls.enabled }}
+  tls:
+    - hosts:
+      {{- if .Values.nexusProxy.env.nexusHttpHost }}
+        - {{ .Values.nexusProxy.env.nexusHttpHost }}
+      {{- end }}
+      {{- if .Values.nexusProxy.env.nexusDockerHost }}
+        - {{ .Values.nexusProxy.env.nexusDockerHost }}
+      {{- end }}
+      {{- if .Values.ingress.tls.secretName }}
+      secretName: {{ .Values.ingress.tls.secretName | quote }}
+      {{- end }}
+{{- end -}}
+{{- end }}

templates/proxy-ks-secret.yaml

+{{- if .Values.nexusProxy.env.cloudIamAuthEnabled }}
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ template "nexus.proxy-ks.name" . }}
+  labels:
+{{ include "nexus.labels" . | indent 4 }}
+type: Opaque
+data:
+  keystore: {{ .Values.nexusProxy.secrets.keystore }}
+  password: {{ .Values.nexusProxy.secrets.password | b64enc }}
+{{- end}}

templates/proxy-route.yaml

+{{- if .Values.nexusProxyRoute.enabled }}
+apiVersion: route.openshift.io/v1
+kind: Route
+metadata:
+  name: {{ template "nexus.fullname" . }}
+  labels: {{ .Values.nexusProxyRoute.labels }}
+  annotations:
+    {{- range $key, $value := .Values.nexusProxyRoute.annotations }}
+    {{ $key }}: {{ $value | quote }}
+    {{- end }}
+spec:
+  host: {{ .Values.nexusProxyRoute.path }}
+  port:
+    {{- if .Values.nexusProxy.svcName }}
+      targetPort: {{ .Values.nexusProxy.svcName }}
+    {{- else }}
+      targetPort: {{ template "nexus.fullname" . }}
+    {{- end }}
+  tls:
+    insecureEdgeTerminationPolicy: Redirect
+    termination: edge
+  to:
+    kind: Service
+{{- if .Values.nexusProxy.svcName }}
+    name: {{ .Values.nexusProxy.svcName }}
+{{- else }}
+    name: {{ template "nexus.fullname" . }}
+{{- end }}
+    weight: 100
+  wildcardPolicy: None
+{{- end }}

templates/proxy-svc.yaml

+{{- if or .Values.nexusProxy.enabled .Values.ingress.enabled }}
+apiVersion: v1
+kind: Service
+metadata:
+{{- if .Values.nexusProxy.svcName }}
+  name: {{ .Values.nexusProxy.svcName }}
+{{- else }}
+  name: {{ template "nexus.fullname" . }}
+{{- end }}
+  labels:
+{{ include "nexus.labels" . | indent 4 }}
+{{- if .Values.nexus.labels }}
+{{ toYaml .Values.nexus.labels | indent 4 }}
+{{- end }}
+{{- if .Values.nexusProxy.labels }}
+{{ toYaml .Values.nexusProxy.labels | indent 4 }}
+{{- end }}
+{{- if .Values.nexus.annotations }}
+  annotations:
+{{ toYaml .Values.nexus.annotations | indent 4 }}
+{{- end }}
+spec:
+  ports:
+{{- if .Values.nexusProxy.enabled }}
+    - port: {{ .Values.nexusProxy.port }}
+{{- else }}
+    - port: {{ .Values.nexus.nexusPort }}
+{{- end }}
+{{- if .Values.nexusProxy.svcName }}
+      name: {{ .Values.nexusProxy.svcName }}
+{{- else }}
+      name: {{ template "nexus.fullname" . }}
+{{- end }}
+      protocol: TCP
+{{- if .Values.nexusProxy.enabled }}
+      targetPort: {{ .Values.nexusProxy.targetPort }}
+{{- else }}
+      targetPort: {{ .Values.nexus.nexusPort }}
+{{- end }}
+  selector:
+    app: {{ template "nexus.name" . }}
+    release: {{ .Release.Name }}
+  type: {{ .Values.nexus.service.type }}
+  {{- if and (eq .Values.nexus.service.type "ClusterIP") .Values.nexus.service.clusterIP }}
+  clusterIP: {{ .Values.nexus.service.clusterIP }}
+  {{- end }}
+{{- end }}

templates/pv.yaml

+{{- if not .Values.statefulset.enabled }}
+{{- if .Values.persistence.pdName -}}
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: {{ .Values.persistence.pdName }}
+  labels:
+{{ include "nexus.labels" . | indent 4 }}
+spec:
+  capacity:
+    storage: {{ .Values.persistence.storageSize }}
+  accessModes:
+    - ReadWriteOnce
+  claimRef:
+    namespace: {{ .Release.Namespace }}
+    name: {{ template "nexus.fullname" . }}-data
+  gcePersistentDisk:
+    pdName: {{ .Values.persistence.pdName }}
+    fsType: {{ .Values.persistence.fsType }}
+{{- end }}
+{{- end }}

templates/pvc.yaml

+{{- if not .Values.statefulset.enabled }}
+{{- if and .Values.persistence.enabled (not .Values.persistence.existingClaim) }}
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: {{ template "nexus.fullname" . }}-data
+  labels:
+{{ include "nexus.labels" . | indent 4 }}
+{{- if .Values.persistence.annotations }}
+  annotations:
+{{ toYaml .Values.persistence.annotations | indent 4 }}
+{{- end }}
+spec:
+  accessModes:
+    - {{ .Values.persistence.accessMode | quote }}
+  resources:
+    requests:
+      storage: {{ .Values.persistence.storageSize | quote }}
+{{- if .Values.persistence.storageClass }}
+{{- if (eq "-" .Values.persistence.storageClass) }}
+  storageClassName: ""
+{{- else }}
+  storageClassName: "{{ .Values.persistence.storageClass }}"
+{{- end }}
+{{- end }}
+{{- end }}
+{{- end }}

templates/route.yaml

+{{- if .Values.route.enabled }}
+apiVersion: route.openshift.io/v1
+kind: Route
+metadata:
+  name: {{ .Values.route.name }}
+  labels: {{ .Values.route.labels }}
+  annotations:
+    {{- range $key, $value := .Values.route.annotations }}
+    {{ $key }}: {{ $value | quote }}
+    {{- end }}
+spec:
+  host: {{ .Values.route.path }}
+  port:
+    targetPort: {{ .Values.service.portName }}
+  tls:
+    insecureEdgeTerminationPolicy: Redirect
+    termination: edge
+  to:
+    kind: Service
+{{- if .Values.service.name }}
+    name: {{ .Values.service.name }}
+{{- else }}
+    name: {{ template "nexus.name" . }}-service
+{{- end }}
+    weight: 100
+  wildcardPolicy: None
+status:
+  ingress: []
+{{- end }}

templates/secret.yaml

+{{- if .Values.secret.enabled -}}
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ template "nexus.name" . }}-secret
+  labels:
+{{ include "nexus.labels" . | indent 4 }}
+{{- if .Values.nexus.labels }}
+{{ toYaml .Values.nexus.labels | indent 4 }}
+{{- end }}
+data:
+{{ toYaml .Values.secret.data | indent 2 }}
+{{- end}}

templates/service.yaml

+{{- if .Values.service.enabled -}}
+apiVersion: v1
+kind: Service
+metadata:
+{{- if .Values.service.name }}
+  name: {{ .Values.service.name }}
+{{- else }}
+  name: {{ template "nexus.name" . }}-service
+{{- end }}
+  labels:
+{{ include "nexus.labels" . | indent 4 }}
+{{- if .Values.service.labels }}
+{{ toYaml .Values.service.labels | indent 4 }}
+{{- end }}
+{{- if .Values.service.annotations }}
+  annotations:
+{{ toYaml .Values.service.annotations | indent 4 }}
+{{- end }}
+spec:
+  ports:
+  {{- if .Values.service.portName }}
+  - name: {{ .Values.service.portName }}
+    port: {{ .Values.service.port }}
+    targetPort: {{ .Values.service.targetPort }}
+  {{- end }}
+  {{- with .Values.service.ports  }}
+{{ toYaml . | indent 2 }}
+  {{- end }}
+  selector:
+    app: {{ template "nexus.name" . }}
+    release: {{ .Release.Name }}
+  type: {{ .Values.service.type }}
+  {{ if .Values.service.loadBalancerSourceRanges }}
+  loadBalancerSourceRanges:
+    {{- range .Values.service.loadBalancerSourceRanges }}
+    - {{ . }}
+    {{- end }}
+  {{ end }}
+{{- end}}
+

templates/serviceaccount.yaml

+{{- if .Values.serviceAccount.create }}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ template "nexus.fullname" . }}
+  {{- if .Values.serviceAccount.annotations }}
+  annotations: {{ toYaml .Values.serviceAccount.annotations | nindent 4 }}
+  {{- end }}
+{{- end }}

values.yaml

+statefulset:
+  enabled: false
+replicaCount: 1
+# By default deploymentStrategy is set to rollingUpdate with maxSurge of 25% and maxUnavailable of 25% . you can change type to `Recreate` or can uncomment `rollingUpdate` specification and adjust them to your usage.
+deploymentStrategy: {}
+  # rollingUpdate:
+  #   maxSurge: 25%
+  #   maxUnavailable: 25%
+  # type: RollingUpdate
+
+nexus:
+  imageName: quay.io/travelaudience/docker-nexus
+  imageTag: 3.21.2-03
+  imagePullPolicy: IfNotPresent
+  # Uncomment this to scheduler pods on priority
+  # priorityClassName: "high-priority"
+  env:
+    - name: install4jAddVmParams
+      value: "-Xms1200M -Xmx1200M -XX:MaxDirectMemorySize=2G -XX:+UnlockExperimentalVMOptions -XX:+UseCGroupMemoryLimitForHeap"
+    - name: NEXUS_SECURITY_RANDOMPASSWORD
+      value: "false"
+  # nodeSelector:
+  #   cloud.google.com/gke-nodepool: default-pool
+  resources: {}
+    # requests:
+      ## Based on https://support.sonatype.com/hc/en-us/articles/115006448847#mem
+      ## and https://twitter.com/analytically/status/894592422382063616:
+      ##   Xms == Xmx
+      ##   Xmx <= 4G
+      ##   MaxDirectMemory >= 2G
+      ##   Xmx + MaxDirectMemory <= RAM * 2/3 (hence the request for 4800Mi)
+      ##   MaxRAMFraction=1 is not being set as it would allow the heap
+      ##     to use all the available memory.
+      # cpu: 250m
+      # memory: 4800Mi
+  # The ports should only be changed if the nexus image uses a different port
+  dockerPort: 5003
+  nexusPort: 8081
+  service:
+    type: NodePort
+    # clusterIP: None
+  # annotations: {}
+    ## When using LoadBalancer service type, use the following AWS certificate from ACM
+    ## https://aws.amazon.com/documentation/acm/
+    # service.beta.kubernetes.io/aws-load-balancer-ssl-cert: "arn:aws:acm:eu-west-1:123456789:certificate/abc123-abc123-abc123-abc123"
+    # service.beta.kubernetes.io/aws-load-balancer-backend-protocol: "https"
+    # service.beta.kubernetes.io/aws-load-balancer-backend-port: "https"
+  ## When using LoadBalancer service type, whitelist these source IP ranges
+  ## https://kubernetes.io/docs/tasks/access-application-cluster/configure-cloud-provider-firewall/
+  # loadBalancerSourceRanges:
+  #   - 192.168.1.10/32
+  # labels: {}
+  securityContextEnabled: true
+  securityContext:
+    fsGroup: 200
+  podAnnotations: {}
+  livenessProbe:
+    initialDelaySeconds: 30
+    periodSeconds: 30
+    failureThreshold: 6
+    # timeoutSeconds: 10
+    path: /
+  readinessProbe:
+    initialDelaySeconds: 30
+    periodSeconds: 30
+    failureThreshold: 6
+    # timeoutSeconds: 10
+    path: /
+  # hostAliases allows the modification of the hosts file inside a container
+  hostAliases: []
+  # - ip: "192.168.1.10"
+  #   hostnames:
+  #   - "example.com"
+  #   - "www.example.com"
+
+route:
+  enabled: false
+  name: docker
+  portName: docker
+  labels:
+  annotations:
+  # path: /docker
+
+nexusProxy:
+  enabled: true
+  # svcName: proxy-svc
+  imageName: quay.io/travelaudience/docker-nexus-proxy
+  imageTag: 2.6.0
+  imagePullPolicy: IfNotPresent
+  port: 8080
+  targetPort: 8080
+  # labels: {}
+  env:
+    nexusDockerHost:
+    nexusHttpHost:
+    enforceHttps: false
+    cloudIamAuthEnabled: false
+## If cloudIamAuthEnabled is set to true uncomment the variables below and remove this line
+  #   clientId: ""
+  #   clientSecret: ""
+  #   organizationId: ""
+  #   redirectUrl: ""
+  #   requiredMembershipVerification: "true"
+  # secrets:
+  #   keystore: ""
+  #   password: ""
+  resources: {}
+    # requests:
+      # cpu: 100m
+      # memory: 256Mi
+    # limits:
+      # cpu: 200m
+      # memory: 512Mi
+
+nexusProxyRoute:
+  enabled: true
+  labels:
+  annotations:
+  path: /nexus
+
+persistence:
+  enabled: true
+  accessMode: ReadWriteOnce
+  ## If defined, storageClass: <storageClass>
+  ## If set to "-", storageClass: "", which disables dynamic provisioning
+  ## If undefined (the default) or set to null, no storageClass spec is
+  ##   set, choosing the default provisioner.  (gp2 on AWS, standard on
+  ##   GKE, AWS & OpenStack)
+  ##
+  # existingClaim:
+  # annotations:
+  #  "helm.sh/resource-policy": keep
+  # storageClass: "-"
+  storageSize: 8Gi
+  # If PersistentDisk already exists you can create a PV for it by including the 2 following keypairs.
+  # pdName: nexus-data-disk
+  # fsType: ext4
+
+nexusBackup:
+  enabled: false
+  imageName: quay.io/travelaudience/docker-nexus-backup
+  imageTag: 1.5.0
+  imagePullPolicy: IfNotPresent
+  env:
+    targetBucket:
+  nexusAdminPassword: "admin123"
+  persistence:
+    enabled: true
+    # existingClaim:
+    # annotations:
+    #  "helm.sh/resource-policy": keep
+    accessMode: ReadWriteOnce
+    # See comment above for information on setting the backup storageClass
+    # storageClass: "-"
+    storageSize: 8Gi
+    # If PersistentDisk already exists you can create a PV for it by including the 2 following keypairs.
+    # pdName: nexus-backup-disk
+    # fsType: ext4
+  resources: {}
+    # requests:
+      # cpu: 100m
+      # memory: 256Mi
+    # limits:
+      # cpu: 200m
+      # memory: 512Mi
+
+serviceAccount:
+  # Specifies whether a service account should be created
+  create: true
+  # The name of the service account to use.
+  # If not set and create is true, a name is generated using the fullname template
+  name:
+  annotations: {}
+
+ingress:
+  enabled: false
+  path: /
+  labels: {}
+  annotations: {}
+  # # NOTE: Can't use 'false' due to https://github.com/jetstack/kube-lego/issues/173.
+  # kubernetes.io/ingress.allow-http: true
+  # kubernetes.io/ingress.class: gce
+  # kubernetes.io/ingress.global-static-ip-name: ""
+  # kubernetes.io/tls-acme: true
+  tls:
+    enabled: true
+    secretName: nexus-tls
+  # Specify custom rules in addition to or instead of the nexus-proxy rules
+  rules:
+  # - host: http://nexus.127.0.0.1.nip.io
+  #   http:
+  #     paths:
+  #     - backend:
+  #         serviceName: additional-svc
+  #         servicePort: 80
+
+
+tolerations: []
+
+# # Enable configmap and add data in configmap
+config:
+  enabled: false
+  mountPath: /sonatype-nexus-conf
+  data:
+
+deployment:
+  # # Add annotations in deployment to enhance deployment configurations
+  annotations: {}
+  # # Add init containers. e.g. to be used to give specific permissions for nexus-data.
+  # # Add your own init container or uncomment and modify the given example.
+  initContainers:
+  # - name: fmp-volume-permission
+    # image: busybox
+    # imagePullPolicy: IfNotPresent
+    # command: ['chown','-R', '200', '/nexus-data']
+    # volumeMounts:
+      # - name: nexus-data
+        # mountPath: /nexus-data
+  # # Uncomment and modify this to run a command after starting the nexus container.
+  postStart:
+    command:    # '["/bin/sh", "-c", "ls"]'
+  additionalContainers:
+  additionalVolumes:
+  additionalVolumeMounts:
+
+# # To use an additional secret, set enable to true and add data
+secret:
+  enabled: false
+  mountPath: /etc/secret-volume
+  readOnly: true
+  data:
+
+# # To use an additional service, set enable to true
+service:
+  type: ClusterIP
+  # name: additional-svc
+  enabled: false
+  labels: {}
+  annotations: {}
+  ports:
+  - name: nexus-service
+    targetPort: 80
+    port: 80