fix settings.xml setup #43
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| name: Deploy | |
| on: | |
| push: | |
| branches: | |
| - main | |
| pull_request: | |
| branches: | |
| - main | |
| workflow_dispatch: | |
| inputs: | |
| command: | |
| type: choice | |
| options: | |
| - build # build only | |
| - publish # build & publish to maven | |
| - release # build & release to svn | |
| default: build | |
| permissions: | |
| contents: read | |
| id-token: write | |
| jobs: | |
| deploy: | |
| runs-on: ubuntu-latest | |
| defaults: | |
| run: | |
| shell: /usr/bin/bash -l -e -o pipefail {0} | |
| steps: | |
| - name: checkout | |
| uses: actions/checkout@v4 | |
| - name: setup java | |
| uses: actions/setup-java@v4 | |
| with: | |
| distribution: temurin | |
| java-version: 8 | |
| java-package: jdk | |
| - name: setup java | |
| uses: actions/setup-java@v4 | |
| with: | |
| distribution: temurin | |
| java-version: 21 | |
| java-package: jdk | |
| - name: install savant | |
| run: | | |
| curl -O https://repository.savantbuild.org/org/savantbuild/savant-core/2.0.0/savant-2.0.0.tar.gz | |
| tar xzvf savant-2.0.0.tar.gz | |
| savant-2.0.0/bin/sb --version | |
| SAVANT_PATH=$(realpath -s "./savant-2.0.0/bin") | |
| echo "${SAVANT_PATH}" >> $GITHUB_PATH | |
| mkdir -p ~/.savant/plugins | |
| cat << EOF > ~/.savant/plugins/org.savantbuild.plugin.java.properties | |
| 1.8=${JAVA_HOME} | |
| EOF | |
| - name: compile | |
| run: sb compile | |
| ### Everything below this line will only run on a workflow_dispatch | |
| - name: set aws credentials | |
| if: inputs.command == 'release' || inputs.command == 'publish' | |
| uses: aws-actions/configure-aws-credentials@v4 | |
| with: | |
| role-to-assume: arn:aws:iam::752443094709:role/gha-fusionauth-java-client | |
| role-session-name: aws-auth-action | |
| aws-region: us-west-2 | |
| - name: get secret | |
| if: inputs.command == 'release' || inputs.command == 'publish' | |
| run: | | |
| while IFS=$'\t' read -r key value; do | |
| echo "::add-mask::${value}" | |
| echo "${key}=${value}" >> $GITHUB_ENV | |
| done < <(aws secretsmanager get-secret-value \ | |
| --region us-west-2 \ | |
| --secret-id platform/maven \ | |
| --query SecretString \ | |
| --output text | \ | |
| jq -r 'to_entries[] | [.key, .value] | @tsv') | |
| - name: import gpg key | |
| if: inputs.command == 'release' || inputs.command == 'publish' | |
| run: | | |
| export GPG_TTY=$(tty) | |
| echo "${{ env.PRIV_KEY_B64 }}" | base64 -d > /tmp/key.asc | |
| echo "${{ env.PRIV_KEY_PASSWORD }}" | gpg --batch --yes --passphrase-fd 0 --import /tmp/key.asc | |
| rm /tmp/key.asc | |
| # We need this to prevent 'gpg: signing failed: Timeout' error during 'sb publish' | |
| mkdir -p ~/.gnupg | |
| echo "pinentry-mode loopback" > ~/.gnupg/gpg.conf | |
| - name: configure maven settings.xml | |
| if: inputs.command == 'release' || inputs.command == 'publish' | |
| run: | | |
| mkdir -p ~/.m2 | |
| cat << EOF > ~/.m2/settings.xml | |
| <settings> | |
| <servers> | |
| <server> | |
| <id>ossrh</id> | |
| <username>${{ env.OSSRH_USERNAME }}</username> | |
| <password>${{ env.OSSRH_PASSWORD }}</password> | |
| </server> | |
| </servers> | |
| <profiles> | |
| <profile> | |
| <id>ossrh</id> | |
| <activation> | |
| <activeByDefault>true</activeByDefault> | |
| </activation> | |
| <properties> | |
| <gpg.executable>/usr/bin/gpg</gpg.executable> | |
| <gpg.keyname>FusionAuth Platform Team</gpg.keyname> | |
| <gpg.passphrase>${{ env.PRIV_KEY_PASSWORD }}</gpg.passphrase> | |
| </properties> | |
| </profile> | |
| </profiles> | |
| <activeProfiles> | |
| <activeProfile>ossrh</activeProfile> | |
| </activeProfiles> | |
| </settings> | |
| EOF | |
| - name: release to svn | |
| if: inputs.command == 'release' | |
| run: sb release | |
| - name: publish to maven | |
| if: inputs.command == 'publish' | |
| run: | | |
| export GPG_TTY=$(tty) | |
| sb publish |