Set up sonatype publishing (#26)

* Set up sonatype publishing

* Drift

Author: anuraaga

.github/workflows/main-build.yml

@@ -25,8 +25,8 @@ jobs:
         with:
           arguments: build snapshot --stacktrace -PenableCoverage=true
         env:
-          PUBLISH_USERNAME: ${{ github.actor }}
-          PUBLISH_PASSWORD: ${{ secrets.GITHUB_TOKEN }}
+          PUBLISH_USERNAME: ${{ secrets.PUBLISH_USERNAME }}
+          PUBLISH_PASSWORD: ${{ secrets.PUBLISH_PASSWORD }}
           GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
           GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
       - name: Upload to GitHub Actions

.github/workflows/release-build.yml

@@ -25,34 +25,15 @@ jobs:
         with:
           arguments: build jibDockerBuild final -Prelease.version=${{ github.event.inputs.version }} --stacktrace
         env:
-          PUBLISH_USERNAME: ${{ github.actor }}
-          PUBLISH_PASSWORD: ${{ secrets.GITHUB_TOKEN }}
+          PUBLISH_USERNAME: ${{ secrets.PUBLISH_USERNAME }}
+          PUBLISH_PASSWORD: ${{ secrets.PUBLISH_PASSWORD }}
           GRGIT_USER: ${{ github.actor }}
           GRGIT_PASS: ${{ secrets.GITHUB_TOKEN }}
           AWS_REGISTRY_ACCOUNT: ${{ secrets.AWS_ACCOUNT }}
           COMMIT_HASH: ${{ github.event.inputs.version }}
           GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
           GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
 
-      - name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@v1
-        with:
-          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
-          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
-          aws-region: us-west-2
-
-      - name: Login to Amazon ECR
-        id: login-ecr
-        uses: aws-actions/amazon-ecr-login@v1
-
-      - name: Push image to Amazon ECR
-        env:
-          ECR_REGISTRY: ${{ steps.login-ecr.outputs.registry }}
-        run: |
-          docker images
-          docker push $ECR_REGISTRY/springboot:${{ github.event.inputs.version }}
-          docker push $ECR_REGISTRY/spark:${{ github.event.inputs.version }}
-
       - name: Create Release
         id: create_release
         uses: actions/create-release@v1
@@ -74,3 +55,22 @@ jobs:
           asset_path: otelagent/build/libs/aws-opentelemetry-agent-${{ github.event.inputs.version }}.jar
           asset_name: aws-opentelemetry-agent.jar
           asset_content_type: application/java-archive
+
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v1
+        with:
+          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          aws-region: us-west-2
+
+      - name: Login to Amazon ECR
+        id: login-ecr
+        uses: aws-actions/amazon-ecr-login@v1
+
+      - name: Push image to Amazon ECR
+        env:
+          ECR_REGISTRY: ${{ steps.login-ecr.outputs.registry }}
+        run: |
+          docker images
+          docker push $ECR_REGISTRY/springboot:${{ github.event.inputs.version }}
+          docker push $ECR_REGISTRY/spark:${{ github.event.inputs.version }}

build.gradle.kts

@@ -19,6 +19,7 @@ import org.gradle.api.tasks.testing.logging.TestExceptionFormat
 plugins {
   java
   id("nebula.release") version "15.1.0"
+  id("io.codearte.nexus-staging") version "0.22.0"
   id("com.diffplug.spotless") version "5.1.2"
   id("com.github.jk1.dependency-license-report") version "1.14"
 }
@@ -184,14 +185,18 @@ allprojects {
         }
       }
 
+      val isSnapshot = version.toString().endsWith("SNAPSHOT")
+
       repositories {
-        // For now, we only publish to GitHub Packages
         maven {
-          name = "GitHubPackages"
-          url = uri("https://maven.pkg.github.com/aws-observability/aws-otel-java-instrumentation")
+          name = "Sonatype"
+          url = uri(
+            if (isSnapshot) "https://aws.oss.sonatype.org/content/repositories/snapshots/"
+            else "https://aws.oss.sonatype.org/service/local/staging/deploy/maven2"
+          )
           credentials {
-            username = project.findProperty("gpr.user") as String? ?: System.getenv("PUBLISH_USERNAME")
-            password = project.findProperty("gpr.key") as String? ?: System.getenv("PUBLISH_PASSWORD")
+            username = System.getenv("PUBLISH_USERNAME")
+            password = System.getenv("PUBLISH_PASSWORD")
           }
         }
       }