cicd: Fix secrets to deploy maven #TASK-8067

Author: juanfeSanahuja

.github/actions/setup-java-maven/action.yml

@@ -26,11 +26,19 @@ inputs:
     description: "If true, configure Java and Maven for deploy (GPG, Nexus, etc)"
     required: false
     default: "false"
-  maven_gpg_private_key:
-    description: "GPG private key for Maven deploy (base64)"
+  server-username:
+    description: "Username for Maven deploy (Nexus)"
     required: false
-    default: ""
-  maven_gpg_passphrase:
+    default: ""  # env variable for username in deploy
+  server-password:
+    description: "Password/token for Maven deploy (Nexus)"
+    required: false
+    default: ""  # env variable for token in deploy
+  gpg-private-key:
+    description: "GPG private key for Maven deploy"
+    required: false
+    default: ""   # Value of the GPG private key to import
+  gpg-passphrase:
     description: "GPG passphrase for Maven deploy"
     required: false
     default: ""
@@ -72,10 +80,10 @@ runs:
         java-version: ${{ inputs.java_version }}
         cache: 'maven'
         server-id: ossrh
-        server-username: MAVEN_NEXUS_USER
-        server-password: MAVEN_NEXUS_PASSWORD
-        gpg-private-key: ${{ inputs.maven_gpg_private_key }}
-        gpg-passphrase: ${{ inputs.maven_gpg_passphrase }}
+        server-username: ${{ inputs.server-username }}
+        server-password: ${{ inputs.server-password }}
+        gpg-private-key: ${{ inputs.gpg-private-key }}
+        gpg-passphrase: ${{ inputs.gpg-passphrase }}
     - name: Clone dependencies and compute dependencies_sha
       id: clone_dependencies
       if: ${{ inputs.dependency_repos != '' }}

.github/workflows/build.yml

@@ -67,8 +67,12 @@ jobs:
           dependency_repos: ${{ inputs.dependency_repos }}
           needs_hadoop_preparation: ${{ inputs.needs_hadoop_preparation }}
           deploy_maven: ${{ inputs.deploy_maven }}
-          maven_gpg_private_key: ${{ secrets.MAVEN_GPG_PRIVATE_KEY }}
-          maven_gpg_passphrase: ${{ secrets.MAVEN_GPG_PASSPHRASE }}
+          server-id: ossrh                                        # Value of the distributionManagement/repository/id field of the pom.xml
+          server-username: MAVEN_NEXUS_USER                       # env variable for username in deploy
+          server-password: MAVEN_NEXUS_PASSWORD                   # env variable for token in deploy
+          gpg-private-key: ${{ secrets.MAVEN_GPG_PRIVATE_KEY }}   # Value of the GPG private key to import
+          gpg-passphrase: MAVEN_GPG_PASSPHRASE
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         env:
           THIRDPARTY_READ_TOKEN: ${{ secrets.THIRDPARTY_READ_TOKEN }}