Poetry Private Repository for Modern Python Teams

[project]
name = "my-service"
version = "0.1.0"
requires-python = ">=3.9"
dependencies = [
    "requests (>=2.31.0,<3.0.0)",         # public: from PyPI
    "acme-shared-lib (>=1.2.0,<2.0.0)",   # private: from CloudRepo alone
    "acme-utils (>=1.0.0,<2.0.0)",        # a private dependency of acme-shared-lib
]

[tool.poetry.dependencies]
acme-shared-lib = { source = "cloudrepo" }
acme-utils = { source = "cloudrepo" }

[[tool.poetry.source]]
name = "cloudrepo"
url = "https://your-org.mycloudrepo.io/repositories/your-repo/simple/"
priority = "explicit"

# Poetry reads the credential for the cloudrepo source from these variables,
# so the token is not an argument. The username is the email address of the
# account that created the token. Set both from your secret store.
export POETRY_HTTP_BASIC_CLOUDREPO_USERNAME="$CLOUDREPO_USERNAME"
export POETRY_HTTP_BASIC_CLOUDREPO_PASSWORD="$CLOUDREPO_TOKEN"
poetry install

# Add private packages to your project. Name every private package they need
# in the same command, so Poetry never takes one of them from PyPI
poetry add acme-utils acme-shared-lib --source cloudrepo

# Install all dependencies including private packages
poetry install

# Update lock file with latest versions
poetry update

# Export requirements for Docker or CI/CD
poetry export -f requirements.txt --output requirements.txt

# The upload URL is the repository URL without /simple/
export POETRY_REPOSITORIES_CLOUDREPO_URL=https://your-org.mycloudrepo.io/repositories/your-repo

# Poetry reads the credential for the cloudrepo repository from these variables,
# so the token is not an argument. The username is the email address of the
# account that created the token. Set both from your secret store.
export POETRY_HTTP_BASIC_CLOUDREPO_USERNAME="$CLOUDREPO_USERNAME"
export POETRY_HTTP_BASIC_CLOUDREPO_PASSWORD="$CLOUDREPO_TOKEN"

# Build and publish your package
poetry build
poetry publish --repository cloudrepo