Onboard to s3 snapshots (#1618)

DarshitChanpura · gaiksaya · commit a2af79e9bee0 · 2025-10-27T16:23:37.000-07:00
* Onboard to s3 snapshots

Signed-off-by: Darshit Chanpura &lt;dchanp@amazon.com&gt;

* Add changelog entry

Signed-off-by: Darshit Chanpura &lt;dchanp@amazon.com&gt;

---------

Signed-off-by: Darshit Chanpura &lt;dchanp@amazon.com&gt;
Signed-off-by: Peter Zhu &lt;zhujiaxi@amazon.com&gt;
diff --git a/.github/workflows/maven-publish.yml b/.github/workflows/maven-publish.yml
@@ -30,8 +30,14 @@ jobs:
           export-env: true
         env:
           OP_SERVICE_ACCOUNT_TOKEN: ${{ secrets.OP_SERVICE_ACCOUNT_TOKEN }}
-          SONATYPE_USERNAME: op://opensearch-infra-secrets/maven-central-portal-credentials/username
-          SONATYPE_PASSWORD: op://opensearch-infra-secrets/maven-central-portal-credentials/password
+          MAVEN_SNAPSHOTS_S3_REPO: op://opensearch-infra-secrets/maven-snapshots-s3/repo
+          MAVEN_SNAPSHOTS_S3_ROLE: op://opensearch-infra-secrets/maven-snapshots-s3/role
+
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v5
+        with:
+          role-to-assume: ${{ env.MAVEN_SNAPSHOTS_S3_ROLE }}
+          aws-region: us-east-1
 
       - name: publish snapshots to maven
         run: |
diff --git a/build.gradle b/build.gradle
@@ -33,8 +33,7 @@ buildscript {
 
     repositories {
         mavenLocal()
-        maven { url "https://central.sonatype.com/repository/maven-snapshots/" }
-        maven { url "https://aws.oss.sonatype.org/content/repositories/snapshots" }
+        maven { url "https://ci.opensearch.org/ci/dbc/snapshots/maven/" }
         mavenCentral()
         maven { url "https://plugins.gradle.org/m2/" }
     }
@@ -203,10 +202,11 @@ publishing {
     repositories {
         maven {
             name = "Snapshots"
-            url = "https://central.sonatype.com/repository/maven-snapshots/"
-            credentials {
-                username "$System.env.SONATYPE_USERNAME"
-                password "$System.env.SONATYPE_PASSWORD"
+            url = System.getenv("MAVEN_SNAPSHOTS_S3_REPO")
+            credentials(AwsCredentials) {
+                accessKey = System.getenv("AWS_ACCESS_KEY_ID")
+                secretKey = System.getenv("AWS_SECRET_ACCESS_KEY")
+                sessionToken = System.getenv("AWS_SESSION_TOKEN")
             }
         }
     }
diff --git a/repositories.gradle b/repositories.gradle
@@ -5,8 +5,7 @@
 
 repositories {
     mavenLocal()
-    maven { url "https://central.sonatype.com/repository/maven-snapshots/" }
-    maven { url "https://aws.oss.sonatype.org/content/repositories/snapshots" }
+    maven { url "https://ci.opensearch.org/ci/dbc/snapshots/maven/" }
     mavenCentral()
     maven { url "https://plugins.gradle.org/m2/" }
 }

Original file line number	Diff line number	Diff line change
`@@ -33,8 +33,7 @@ buildscript {`
`33`	`33`
`34`	`34`	`repositories {`
`35`	`35`	`mavenLocal()`
`36`		`- maven { url "https://central.sonatype.com/repository/maven-snapshots/" }`
`37`		`- maven { url "https://aws.oss.sonatype.org/content/repositories/snapshots" }`
	`36`	`+ maven { url "https://ci.opensearch.org/ci/dbc/snapshots/maven/" }`
`38`	`37`	`mavenCentral()`
`39`	`38`	`maven { url "https://plugins.gradle.org/m2/" }`
`40`	`39`	`}`
`@@ -203,10 +202,11 @@ publishing {`
`203`	`202`	`repositories {`
`204`	`203`	`maven {`
`205`	`204`	`name = "Snapshots"`
`206`		`- url = "https://central.sonatype.com/repository/maven-snapshots/"`
`207`		`- credentials {`
`208`		`- username "$System.env.SONATYPE_USERNAME"`
`209`		`- password "$System.env.SONATYPE_PASSWORD"`
	`205`	`+ url = System.getenv("MAVEN_SNAPSHOTS_S3_REPO")`
	`206`	`+ credentials(AwsCredentials) {`
	`207`	`+ accessKey = System.getenv("AWS_ACCESS_KEY_ID")`
	`208`	`+ secretKey = System.getenv("AWS_SECRET_ACCESS_KEY")`
	`209`	`+ sessionToken = System.getenv("AWS_SESSION_TOKEN")`
`210`	`210`	`}`
`211`	`211`	`}`
`212`	`212`	`}`
Original file line number	Diff line number	Diff line change
`@@ -5,8 +5,7 @@`
`5`	`5`
`6`	`6`	`repositories {`
`7`	`7`	`mavenLocal()`
`8`		`- maven { url "https://central.sonatype.com/repository/maven-snapshots/" }`
`9`		`- maven { url "https://aws.oss.sonatype.org/content/repositories/snapshots" }`
	`8`	`+ maven { url "https://ci.opensearch.org/ci/dbc/snapshots/maven/" }`
`10`	`9`	`mavenCentral()`
`11`	`10`	`maven { url "https://plugins.gradle.org/m2/" }`
`12`	`11`	`}`