You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/artifacts/concepts/upstream-sources.md
+10-38Lines changed: 10 additions & 38 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -112,70 +112,42 @@ Upstream sources offer a critical safeguard for your consumers and infrastructur
112
112
113
113
## Override packages from upstream sources
114
114
115
-
When you enable upstream sources, keep in mind that you cannot publish a package version that already exists in an upstream source. For example, if you enable the *NuGet.org* upstream, you won't be able to publish the *Newtonsoft.Json 10.0.3* package, as that version is already available on NuGet.org.
116
-
117
-
If you need to publish a package version that already exists in one of your upstream sources, you must follow these steps:
115
+
When upstream sources are enabled in your feed, you **cannot publish a package version that already exists** in one of those upstream sources. For example, if the *NuGet.org* upstream is enabled, you won’t be able to publish *Newtonsoft.Json 10.0.3* to your feed, since that version is already available on *NuGet.org*. To override a package version from an upstream source:
118
116
119
117
1. Disable the relevant upstream source.
120
118
121
-
1. Publish your package.
119
+
1. Publish your desired package version to the feed.
122
120
123
121
1. Re-enable the upstream source.
124
122
125
-
This process ensures that you can publish the desired version while maintaining the integrity of your upstream sources.
123
+
This workflow ensures you can publish the desired version while maintaining the integrity of your upstream sources.
126
124
127
125
> [!NOTE]
128
126
> Package versions are immutable. Saved packages remain in the feed even if the upstream source is disabled or removed.
129
127
130
128
## Upstream sources health status
131
129
132
-
If a feed has a failing upstream source, the metadata for packages of the same protocol can no longer be refreshed. To check the health status of your upstream sources, follow these steps:
130
+
If a feed has a failing upstream source, metadata for packages using the same protocol can no longer be refreshed. To check the health status of your upstream sources, follow these steps:
133
131
134
-
1. Sign in to your Azure DevOps organization, and then navigate to your project.
132
+
1. Sign in to your Azure DevOps organization, and navigate to your project.
135
133
136
-
1. Select **Artifacts**, and then select your feed from the dropdown menu.
134
+
1. Select **Artifacts**, then select your feed from the dropdown menu.
137
135
138
-
1. Select the gear icon  to navigate to your **Feed settings**, and then select **Upstream sources**.
136
+
1. Select the gear icon  to open **Feed settings**, then select **Upstream sources**.
139
137
140
138
:::image type="content" source="media/last-sync-upstreams.png" alt-text="A screenshot showing the upstream sources last sync up status.":::
141
139
142
-
1. If any failures occur, a warning message will be displayed. Clicking on the *Failed* status provides additional details, including the cause of the failure and instructions on how to resolve it.
140
+
1. If any failures occur, a warning message will be displayed. Select the *Failed* status to view detailed information, including the cause of the failure and steps to resolve it.
143
141
144
142
:::image type="content" source="media/last-sync-upstreams-details.png" alt-text="A screenshot displaying details of the sync up failure.":::
145
143
146
144
> [!NOTE]
147
-
> For public registries like NuGet.org, there is a 3-6 hour delay between when a package is pushed to the public registry and when it becomes available for download. This delay depends on job timing and data propagation. However, when the upstream source is an Azure Artifacts feed, the latency is usually no more than a few minutes.
148
-
149
-
## FAQs
150
-
151
-
##### Q: I can't find my package even though I can see it in one of my feed's upstreams?
152
-
153
-
A: Packages from upstream sources become available in the downstream feed soon after they're published. However, the package will only be visible to readers after it has been saved to the feed. A package is saved when a user with [Feed and Upstream Reader (Collaborator)](../feeds/feed-permissions.md#feed-roles-and-permissions) or higher permissions installs the version in the downstream feed. This triggers the downstream to save a copy of the package from upstream, after which it is permanently saved and available in the downstream to all readers. This is when the package version becomes visible in the package versions section of the web UI.
154
-
155
-
##### Q: What are feed views?
156
-
157
-
A: Views allow developers to selectively share a subset of package versions that have been tested and validated, excluding any packages that are still under development or haven't met the quality criteria. See [What are feed views](./views.md) for more details.
158
-
159
-
##### Q: I can't find the feed that I want to configure as an upstream source?
160
-
161
-
A: Make sure that the feed's owner has shared a view as an upstream source. See [Add a feed in a different organization as an upstream source](../how-to/set-up-upstream-sources.md#add-a-feed-in-a-different-organization-as-an-upstream-source) for more details.
162
-
163
-
##### Q: Can a user with **Feed Reader** role download packages from an upstream source?
164
-
165
-
A: No. A user with the **Feed Reader** role in an Azure Artifacts feed can only download packages that have been saved to the feed. Packages are saved to the feed when a **Feed and Upstream Reader (Collaborator)**, **Feed Publisher (Contributor)**, or **Feed Owner** installs those packages from upstream.
166
-
167
-
##### Q: What happens when a user deletes or unpublishes a package saved from an upstream source?
168
-
169
-
A: The package becomes unavailable for download from the feed, and the version number is permanently reserved. Additionally, the package will no longer be saved from the upstream source. Earlier and later versions of the package will remain unaffected.
170
-
171
-
##### Q: What happens when a user deprecates a package saved from an upstream source?
172
-
173
-
A: When a user deprecates a package, a warning message is added to the package's metadata. This warning is displayed whenever the package is viewed or installed from the feed.
145
+
> For public registries like *NuGet.org*, there is typically a 3-6 hour delay between when a package is pushed to the public registry and when it becomes available for download. This delay depends on job timing and data propagation. However, when the upstream source is an Azure Artifacts feed, the latency is usually no more than a few minutes.
174
146
175
147
## Related content
176
148
177
149
- [Set up upstream sources](../how-to/set-up-upstream-sources.md)
178
150
179
151
- [Use upstream sources in a public feed](../how-to/public-feeds-upstream-sources.md)
0 commit comments