Skip to content

Draft: Replace "Store all packages in one project" with Artifact Management Group approach

What does this MR do and why?

Summary

This MR updates the package registry workflow documentation to replace the "store all packages in one project" approach with a more practical "dedicated artifact management" structure.

Problem

The current documentation recommends storing all package types in a single GitLab project, which creates several issues:

  • Mixed package types make it difficult to apply type-specific policies
  • No separation of concerns between different package formats
  • Hard to manage cleanup policies, protected packages, and access controls
  • Doesn't align with how most enterprises want to organize packages

Solution

New recommended structure:

company/artifact-management/ (top-level group)
├── java-packages/           # Maven packages
├── node-packages/           # npm packages  
├── python-packages/         # PyPI packages
├── docker-images/           # Container registry
├── terraform-modules/       # Terraform modules
├── nuget-packages/          # NuGet packages
└── generic-packages/        # Generic file packages

References

Screenshots or screen recordings

Before After

How to set up and validate locally

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Tim Rizzi

Merge request reports

Loading