Skip to content

Commit 4896ae4

Browse files
author
Rami Bououni
committed
upstream sources overview
1 parent 3b3fd55 commit 4896ae4

File tree

1 file changed

+10
-38
lines changed

1 file changed

+10
-38
lines changed

docs/artifacts/concepts/upstream-sources.md

Lines changed: 10 additions & 38 deletions
Original file line numberDiff line numberDiff line change
@@ -112,70 +112,42 @@ Upstream sources offer a critical safeguard for your consumers and infrastructur
112112
113113
## Override packages from upstream sources
114114
115-
When you enable upstream sources, keep in mind that you cannot publish a package version that already exists in an upstream source. For example, if you enable the *NuGet.org* upstream, you won't be able to publish the *Newtonsoft.Json 10.0.3* package, as that version is already available on NuGet.org.
116-
117-
If you need to publish a package version that already exists in one of your upstream sources, you must follow these steps:
115+
When upstream sources are enabled in your feed, you **cannot publish a package version that already exists** in one of those upstream sources. For example, if the *NuGet.org* upstream is enabled, you won’t be able to publish *Newtonsoft.Json 10.0.3* to your feed, since that version is already available on *NuGet.org*. To override a package version from an upstream source:
118116
119117
1. Disable the relevant upstream source.
120118
121-
1. Publish your package.
119+
1. Publish your desired package version to the feed.
122120
123121
1. Re-enable the upstream source.
124122
125-
This process ensures that you can publish the desired version while maintaining the integrity of your upstream sources.
123+
This workflow ensures you can publish the desired version while maintaining the integrity of your upstream sources.
126124
127125
> [!NOTE]
128126
> Package versions are immutable. Saved packages remain in the feed even if the upstream source is disabled or removed.
129127
130128
## Upstream sources health status
131129
132-
If a feed has a failing upstream source, the metadata for packages of the same protocol can no longer be refreshed. To check the health status of your upstream sources, follow these steps:
130+
If a feed has a failing upstream source, metadata for packages using the same protocol can no longer be refreshed. To check the health status of your upstream sources, follow these steps:
133131
134-
1. Sign in to your Azure DevOps organization, and then navigate to your project.
132+
1. Sign in to your Azure DevOps organization, and navigate to your project.
135133
136-
1. Select **Artifacts**, and then select your feed from the dropdown menu.
134+
1. Select **Artifacts**, then select your feed from the dropdown menu.
137135
138-
1. Select the gear icon ![gear icon](../../media/icons/gear-icon.png) to navigate to your **Feed settings**, and then select **Upstream sources**.
136+
1. Select the gear icon ![gear icon](../../media/icons/gear-icon.png) to open **Feed settings**, then select **Upstream sources**.
139137
140138
:::image type="content" source="media/last-sync-upstreams.png" alt-text="A screenshot showing the upstream sources last sync up status.":::
141139
142-
1. If any failures occur, a warning message will be displayed. Clicking on the *Failed* status provides additional details, including the cause of the failure and instructions on how to resolve it.
140+
1. If any failures occur, a warning message will be displayed. Select the *Failed* status to view detailed information, including the cause of the failure and steps to resolve it.
143141
144142
:::image type="content" source="media/last-sync-upstreams-details.png" alt-text="A screenshot displaying details of the sync up failure.":::
145143
146144
> [!NOTE]
147-
> For public registries like NuGet.org, there is a 3-6 hour delay between when a package is pushed to the public registry and when it becomes available for download. This delay depends on job timing and data propagation. However, when the upstream source is an Azure Artifacts feed, the latency is usually no more than a few minutes.
148-
149-
## FAQs
150-
151-
##### Q: I can't find my package even though I can see it in one of my feed's upstreams?
152-
153-
A: Packages from upstream sources become available in the downstream feed soon after they're published. However, the package will only be visible to readers after it has been saved to the feed. A package is saved when a user with [Feed and Upstream Reader (Collaborator)](../feeds/feed-permissions.md#feed-roles-and-permissions) or higher permissions installs the version in the downstream feed. This triggers the downstream to save a copy of the package from upstream, after which it is permanently saved and available in the downstream to all readers. This is when the package version becomes visible in the package versions section of the web UI.
154-
155-
##### Q: What are feed views?
156-
157-
A: Views allow developers to selectively share a subset of package versions that have been tested and validated, excluding any packages that are still under development or haven't met the quality criteria. See [What are feed views](./views.md) for more details.
158-
159-
##### Q: I can't find the feed that I want to configure as an upstream source?
160-
161-
A: Make sure that the feed's owner has shared a view as an upstream source. See [Add a feed in a different organization as an upstream source](../how-to/set-up-upstream-sources.md#add-a-feed-in-a-different-organization-as-an-upstream-source) for more details.
162-
163-
##### Q: Can a user with **Feed Reader** role download packages from an upstream source?
164-
165-
A: No. A user with the **Feed Reader** role in an Azure Artifacts feed can only download packages that have been saved to the feed. Packages are saved to the feed when a **Feed and Upstream Reader (Collaborator)**, **Feed Publisher (Contributor)**, or **Feed Owner** installs those packages from upstream.
166-
167-
##### Q: What happens when a user deletes or unpublishes a package saved from an upstream source?
168-
169-
A: The package becomes unavailable for download from the feed, and the version number is permanently reserved. Additionally, the package will no longer be saved from the upstream source. Earlier and later versions of the package will remain unaffected.
170-
171-
##### Q: What happens when a user deprecates a package saved from an upstream source?
172-
173-
A: When a user deprecates a package, a warning message is added to the package's metadata. This warning is displayed whenever the package is viewed or installed from the feed.
145+
> For public registries like *NuGet.org*, there is typically a 3-6 hour delay between when a package is pushed to the public registry and when it becomes available for download. This delay depends on job timing and data propagation. However, when the upstream source is an Azure Artifacts feed, the latency is usually no more than a few minutes.
174146
175147
## Related content
176148
177149
- [Set up upstream sources](../how-to/set-up-upstream-sources.md)
178150
179151
- [Use upstream sources in a public feed](../how-to/public-feeds-upstream-sources.md)
180152
181-
- [Feed permissions](../feeds/feed-permissions.md)
153+
- [Manage permissions](../feeds/feed-permissions.md)

0 commit comments

Comments
 (0)