Update the maven snapshot publish endpoint and credential (opensearch-project#1634) (opensearch-project#1639)

(cherry picked from commit 9e3d473)

Signed-off-by: Zelin Hao <[email protected]>
Co-authored-by: Zelin Hao <[email protected]>

Author: Xtansia

.github/workflows/publish-snapshots.yml

@@ -20,15 +20,15 @@ jobs:
           java-version: '11'
           distribution: 'temurin'
           cache: 'gradle'
-      - name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@v4
+      - name: Load secret
+        uses: 1password/load-secrets-action@v2
         with:
-          role-to-assume: ${{ secrets.PUBLISH_SNAPSHOTS_ROLE }}
-          aws-region: us-east-1
+          # Export loaded secrets as environment variables
+          export-env: true
+        env:
+          OP_SERVICE_ACCOUNT_TOKEN: ${{ secrets.OP_SERVICE_ACCOUNT_TOKEN }}
+          SONATYPE_USERNAME: op://opensearch-infra-secrets/maven-central-portal-credentials/username
+          SONATYPE_PASSWORD: op://opensearch-infra-secrets/maven-central-portal-credentials/password
       - name: publish snapshots to maven
         run: |
-          export SONATYPE_USERNAME=$(aws secretsmanager get-secret-value --secret-id maven-snapshots-username --query SecretString --output text)
-          export SONATYPE_PASSWORD=$(aws secretsmanager get-secret-value --secret-id maven-snapshots-password --query SecretString --output text)
-          echo "::add-mask::$SONATYPE_USERNAME"
-          echo "::add-mask::$SONATYPE_PASSWORD"
           ./gradlew --no-daemon publishPublishMavenPublicationToSnapshotsRepository

README.md

@@ -53,7 +53,7 @@ This project has adopted the [Amazon Open Source Code of Conduct](CODE_OF_CONDUC
 See [User Guide](USER_GUIDE.md).
 
 ## Snapshot Builds
-The [snapshots builds](https://aws.oss.sonatype.org/content/repositories/snapshots/org/opensearch/client/opensearch-java/) are published to sonatype using [publish-snapshots.yml](./.github/workflows/publish-snapshots.yml) workflow.
+The [snapshots builds](https://central.sonatype.com/service/rest/repository/browse/maven-snapshots/org/opensearch/client/opensearch-java/) are published to sonatype using [publish-snapshots.yml](./.github/workflows/publish-snapshots.yml) workflow. Each `push` event to the main branch triggers this workflow.
 
 ## Compatibility with OpenSearch
 

build.gradle.kts

@@ -38,6 +38,7 @@ allprojects {
 
     repositories {
         mavenLocal()
+        maven(url = "https://central.sonatype.com/repository/maven-snapshots/")
         maven(url = "https://aws.oss.sonatype.org/content/repositories/snapshots")
         mavenCentral()
         gradlePluginPortal()

buildSrc/build.gradle.kts

@@ -36,6 +36,7 @@ plugins {
 
 repositories {
     mavenLocal()
+    maven(url = "https://central.sonatype.com/repository/maven-snapshots/")
     maven(url = "https://aws.oss.sonatype.org/content/repositories/snapshots")
     mavenCentral()
     gradlePluginPortal()

java-client/build.gradle.kts

@@ -38,6 +38,7 @@ import java.io.FileWriter
 buildscript {
     repositories {
         mavenLocal()
+        maven(url = "https://central.sonatype.com/repository/maven-snapshots/")
         maven(url = "https://aws.oss.sonatype.org/content/repositories/snapshots")
         mavenCentral()
         gradlePluginPortal()
@@ -320,7 +321,7 @@ tasks.withType<Jar> {
 publishing {
     repositories{
         if (version.toString().endsWith("SNAPSHOT")) {
-            maven("https://aws.oss.sonatype.org/content/repositories/snapshots/") {
+            maven("https://central.sonatype.com/repository/maven-snapshots/") {
                 name = "Snapshots"
                 credentials {
                     username = System.getenv("SONATYPE_USERNAME")

java-codegen/build.gradle.kts

@@ -19,6 +19,7 @@ import java.io.FileWriter
 buildscript {
     repositories {
         mavenLocal()
+        maven(url = "https://central.sonatype.com/repository/maven-snapshots/")
         maven(url = "https://aws.oss.sonatype.org/content/repositories/snapshots")
         mavenCentral()
         gradlePluginPortal()