add a sample configuration for signing and configuration (#710)

elastic · May 6, 2024 · af747b2 · af747b2
1 parent d179692
commit af747b2
Show file tree

Hide file tree

Showing 2 changed files with 40 additions and 0 deletions.
diff --git a/.buildkite/configure_signing.sh b/.buildkite/configure_signing.sh
@@ -0,0 +1,25 @@
+#!/bin/bash
+
+#see https://central.sonatype.org/publish/publish-gradle/#distributing-your-public-key
+
+set -e 
+
+mkdir -p /tmp
+keyring_file="/tmp/keyring.gpg"
+
+vault kv get --field="keyring" kv/ci-shared/release-eng/team-release-secrets/elasticsearch-java/gpg | base64 -d > $keyring_file
+signing_password=$(vault kv get --field="passphase" kv/ci-shared/release-eng/team-release-secrets/elasticsearch-java/gpg)
+signing_key=$(vault kv get --field="key_id" kv/ci-shared/release-eng/team-release-secrets/elasticsearch-java/gpg)
+
+maven_username=$(vault kv get --field="username" kv/ci-shared/release-eng/team-release-secrets/elasticsearch-java/maven_central)
+maven_password=$(vault kv get --field="password" kv/ci-shared/release-eng/team-release-secrets/elasticsearch-java/maven_central)
+
+cat > gradle.properties <<EOF
+signing.keyId=${signing_key: -8}
+signing.password=${signing_password}
+signing.secretKeyRingFile=${keyring_file}
+
+ossrhUsername=${maven_username}
+ossrhPassword=${maven_password}
+EOF
+
diff --git a/java-client-serverless/build.gradle.kts b/java-client-serverless/build.gradle.kts
@@ -28,13 +28,18 @@ plugins {
     `java-library`
     checkstyle
     `maven-publish`
+    signing
     id("com.github.jk1.dependency-license-report") version "2.2"
     id("de.thetaphi.forbiddenapis") version "3.4"
 }
 
 // GitHub Maven repo doesn't like 1.0.0+20231031-SNAPSHOT
 version = "1.0.0-20231031-SNAPSHOT"
 
+signing {
+    sign(publishing.publications)
+}
+
 java {
     targetCompatibility = JavaVersion.VERSION_1_8
     sourceCompatibility = JavaVersion.VERSION_1_8
@@ -115,6 +120,7 @@ tasks.withType<Javadoc> {
     }
 }
 
+
 publishing {
     repositories {
         maven {
@@ -129,6 +135,15 @@ publishing {
             name = "Build"
             url = uri("${rootProject.buildDir}/repository")
         }
+
+	maven {
+            name = "MavenCentralSnapshot"
+            setUrl("https://s01.oss.sonatype.org/content/repositories/snapshots/")
+            credentials {
+                 username = providers.gradleProperty("ossrhUsername").getOrNull()
+                 password = providers.gradleProperty("ossrhPassword").getOrNull()
+           }
+       }
     }
 
     publications {