Skip to content

Commit c01f28c

Browse files
author
Komal Yadav
committed
Set up Maven profiles for release and snapshot
updated updated updated updated updated updated Set up Maven profiles for release and snapshot updated updated updated updated updated updated updated updated updated updated updated updated updated updated updated updated updated updated updated updated updated updated updated updated updated updated
1 parent f79f1b9 commit c01f28c

3 files changed

Lines changed: 132 additions & 45 deletions

File tree

‎.github/workflows/tag-release.yml‎

Lines changed: 12 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
# Copyright © 2022 Cask Data, Inc.
1+
# Copyright © 2026 Cask Data, Inc.
22
# Licensed under the Apache License, Version 2.0 (the "License"); you may not
33
# use this file except in compliance with the License. You may obtain a copy of
44
# the License at
@@ -21,16 +21,6 @@ jobs:
2121
if: ${{ github.ref_type == 'tag' }}
2222
steps:
2323

24-
- name: Get Secrets from GCP Secret Manager
25-
id: 'secrets'
26-
uses: 'google-github-actions/get-secretmanager-secrets@v0'
27-
with:
28-
secrets: |-
29-
CDAP_OSSRH_USERNAME:cdapio-github-builds/CDAP_OSSRH_USERNAME
30-
CDAP_OSSRH_PASSWORD:cdapio-github-builds/CDAP_OSSRH_PASSWORD
31-
CDAP_GPG_PASSPHRASE:cdapio-github-builds/CDAP_GPG_PASSPHRASE
32-
CDAP_GPG_PRIVATE_KEY:cdapio-github-builds/CDAP_GPG_PRIVATE_KEY
33-
3424
- name: Checkout Repository
3525
uses: actions/checkout@v4
3626
with:
@@ -44,25 +34,17 @@ jobs:
4434
restore-keys: |
4535
${{ runner.os }}-maven-${{ github.workflow }}
4636
47-
- name: Set up GPG conf
48-
run: |
49-
echo "pinentry-mode loopback" >> ~/.gnupg/gpg.conf
50-
echo "allow-loopback-pinentry" >> ~/.gnupg/gpg-agent.conf
51-
52-
- name: Import GPG key
53-
run: |
54-
echo "$GPG_PRIVATE_KEY" > private.key
55-
gpg --import --batch private.key
56-
env:
57-
GPG_PRIVATE_KEY: ${{ steps.secrets.outputs.CDAP_GPG_PRIVATE_KEY }}
58-
5937
- name: Run tests
6038
run: mvn clean test -fae -T 2 -B -V -DcloudBuild -Dmaven.wagon.http.retryHandler.count=5 -Dmaven.wagon.httpconnectionManager.ttlSeconds=30
6139

62-
- name: Publish to Maven Central
63-
run: mvn clean -B -V -DskipTests deploy -P release -Dgpg.passphrase=$CDAP_GPG_PASSPHRASE -Dmaven.wagon.http.retryHandler.count=5 -Dmaven.wagon.httpconnectionManager.ttlSeconds=30
64-
env:
65-
CDAP_OSSRH_USERNAME: ${{ steps.secrets.outputs.CDAP_OSSRH_USERNAME }}
66-
CDAP_OSSRH_PASSWORD: ${{ steps.secrets.outputs.CDAP_OSSRH_PASSWORD }}
67-
CDAP_GPG_PASSPHRASE: ${{ steps.secrets.outputs.CDAP_GPG_PASSPHRASE }}
68-
MAVEN_OPTS: '-Xmx3200m'
40+
- name: Get Project Version
41+
id: get_version
42+
run: echo "VERSION=$(mvn help:evaluate -Dexpression=project.version -q -DforceStdout)" >> $GITHUB_OUTPUT
43+
44+
- name: Submit Build to GCB
45+
id: gcb
46+
run: |
47+
gcloud builds submit . \
48+
--config=cloudbuild-release.yaml \
49+
--project='cdapio-github-builds' \
50+
--substitutions="_VERSION=${{ steps.get_version.outputs.VERSION }}"

‎cloudbuild-release.yaml‎

Lines changed: 102 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,102 @@
1+
# Copyright © 2026 Cask Data, Inc.
2+
# Licensed under the Apache License, Version 2.0 (the "License"); you may not
3+
# use this file except in compliance with the License. You may obtain a copy of
4+
# the License at
5+
# http://www.apache.org/licenses/LICENSE-2.0
6+
# Unless required by applicable law or agreed to in writing, software
7+
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
8+
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
9+
# License for the specific language governing permissions and limitations under
10+
# the License.
11+
12+
steps:
13+
- name: 'gcr.io/cloud-builders/gcloud'
14+
id: setup-gpg
15+
entrypoint: 'bash'
16+
secretEnv: ['GPG_KEY']
17+
args:
18+
- '-c'
19+
- |
20+
set -e
21+
export GNUPGHOME=/workspace/.gnupg
22+
mkdir -p $$GNUPGHOME
23+
chmod 700 $$GNUPGHOME
24+
25+
echo "pinentry-mode loopback" >> $$GNUPGHOME/gpg.conf
26+
echo "allow-loopback-pinentry" >> $$GNUPGHOME/gpg-agent.conf
27+
28+
echo "$$GPG_KEY" | gpg --batch --import
29+
echo "GPG key imported into $$GNUPGHOME."
30+
31+
- name: 'gcr.io/cloud-builders/mvn:3.8-jdk-8'
32+
id: maven-package
33+
entrypoint: 'mvn'
34+
args:
35+
- 'deploy'
36+
- '-B'
37+
- '-V'
38+
- '-DskipTests'
39+
- "-Dgpg.passphrase=$${GPG_PASSPHRASE}"
40+
- '-Pcommon-artifacts,version-release'
41+
- '-DaltDeploymentRepository=local::default::file:///workspace/target'
42+
- '-Dmaven.wagon.http.retryHandler.count=5'
43+
- '-Dmaven.wagon.httpconnectionManager.ttlSeconds=30'
44+
env:
45+
- 'GNUPGHOME=/workspace/.gnupg'
46+
secretEnv: [ 'GPG_PASSPHRASE' ]
47+
48+
49+
- name: 'bash'
50+
id: create-exit-gate-manifest
51+
entrypoint: 'bash'
52+
args:
53+
- '-c'
54+
- |
55+
set -e
56+
MANIFEST_FILE="/workspace/publish_manifest.textproto"
57+
echo '# -*- protobuffer -*-' > "$${MANIFEST_FILE}"
58+
echo '# proto-file: security/opensource/exit_gate_v1/onboarded/proto/publishing_manifest.proto' >> "$${MANIFEST_FILE}"
59+
echo '# proto-message: PublishingManifest' >> "$${MANIFEST_FILE}"
60+
echo '' >> "$${MANIFEST_FILE}"
61+
echo 'publish_all: true' >> "$${MANIFEST_FILE}"
62+
echo "Created manifest file: $${MANIFEST_FILE}"
63+
waitFor: ['maven-package']
64+
65+
- name: 'gcr.io/cloud-builders/gsutil'
66+
id: upload-exit-gate-manifest
67+
entrypoint: 'bash'
68+
args:
69+
- '-c'
70+
- |
71+
set -e
72+
GCS_MANIFEST_DIR="gs://oss-exit-gate-prod-projects-bucket/cloud-data-fusion/githubreleases/manifests/"
73+
MANIFEST_FILE="/workspace/publish_manifest.textproto"
74+
MANIFEST_FILENAME="release_${_VERSION}.textproto"
75+
echo "Uploading manifest to $${GCS_MANIFEST_DIR}$${MANIFEST_FILENAME}"
76+
gsutil cp "$${MANIFEST_FILE}" "$${GCS_MANIFEST_DIR}$${MANIFEST_FILENAME}"
77+
echo "Manifest uploaded successfully."
78+
waitFor: ['create-exit-gate-manifest']
79+
80+
81+
substitutions:
82+
_VERSION: '0.25.0-SNAPSHOT'
83+
84+
artifacts:
85+
mavenArtifacts:
86+
- repository: 'https://us-east1-maven.pkg.dev/komalyd-dev/my-test-maven-repo'
87+
deployFolder: '/workspace/target/'
88+
groupId: 'io.cdap.plugin'
89+
artifactId: 'google-cloud'
90+
version: '${_VERSION}'
91+
92+
options:
93+
requestedVerifyOption: VERIFIED
94+
machineType: 'E2_HIGHCPU_32'
95+
96+
97+
availableSecrets:
98+
secretManager:
99+
- versionName: projects/cdapio-github-builds/secrets/CDAP_GPG_PRIVATE_KEY/versions/latest
100+
env: 'GPG_KEY'
101+
- versionName: projects/cdapio-github-builds/secrets/CDAP_GPG_PASSPHRASE/versions/latest
102+
env: 'GPG_PASSPHRASE'

‎pom.xml‎

Lines changed: 18 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -904,6 +904,13 @@
904904
</dependencies>
905905

906906
<build>
907+
<extensions>
908+
<extension>
909+
<groupId>com.google.cloud.artifactregistry</groupId>
910+
<artifactId>artifactregistry-maven-wagon</artifactId>
911+
<version>2.2.5</version>
912+
</extension>
913+
</extensions>
907914
<testSourceDirectory>${testSourceLocation}</testSourceDirectory>
908915
<plugins>
909916
<plugin>
@@ -1058,7 +1065,13 @@
10581065
<!-- Profile for release. Includes signing of jars. -->
10591066
<profiles>
10601067
<profile>
1061-
<id>release</id>
1068+
<id>version-release</id>
1069+
<distributionManagement>
1070+
<repository>
1071+
<id>artifact-registry</id>
1072+
<url>artifactregistry://us-east1-maven.pkg.dev/komalyd-dev/my-test-maven-repo</url>
1073+
</repository>
1074+
</distributionManagement>
10621075
<build>
10631076
<plugins>
10641077
<!-- Source JAR -->
@@ -1145,20 +1158,10 @@
11451158
</execution>
11461159
</executions>
11471160
</plugin>
1148-
<plugin>
1149-
<groupId>org.sonatype.central</groupId>
1150-
<artifactId>central-publishing-maven-plugin</artifactId>
1151-
<version>0.8.0</version>
1152-
<extensions>true</extensions>
1153-
<configuration>
1154-
<publishingServerId>sonatype.release</publishingServerId>
1155-
<autoPublish>false</autoPublish>
1156-
<ignorePublishedComponents>true</ignorePublishedComponents>
1157-
</configuration>
1158-
</plugin>
1159-
</plugins>
1160-
</build>
1161-
</profile>
1161+
</plugins>
1162+
</build>
1163+
</profile>
1164+
11621165
<profile>
11631166
<id>cloudBuild</id>
11641167
<activation>

0 commit comments

Comments
 (0)