Onboard to s3 snapshots (#4320) (#4322)

opensearch-trigger-bot[bot] · DarshitChanpura · gaiksaya · web-flow · commit 4d1c695671b1 · 2025-10-27T18:18:05.000-07:00
* Onboard to s3 snapshots * Remove oss sonatype maven reference --------- (cherry picked from commit 3950a87) Signed-off-by: Darshit Chanpura <dchanp@amazon.com> Co-authored-by: Darshit Chanpura <dchanp@amazon.com> Co-authored-by: Sayali Gaikawad <gaiksaya@amazon.com>
diff --git a/.github/workflows/maven-publish.yml b/.github/workflows/maven-publish.yml
@@ -33,8 +33,14 @@ jobs:
           export-env: true
         env:
           OP_SERVICE_ACCOUNT_TOKEN: ${{ secrets.OP_SERVICE_ACCOUNT_TOKEN }}
-          SONATYPE_USERNAME: op://opensearch-infra-secrets/maven-central-portal-credentials/username
-          SONATYPE_PASSWORD: op://opensearch-infra-secrets/maven-central-portal-credentials/password
+          MAVEN_SNAPSHOTS_S3_REPO: op://opensearch-infra-secrets/maven-snapshots-s3/repo
+          MAVEN_SNAPSHOTS_S3_ROLE: op://opensearch-infra-secrets/maven-snapshots-s3/role
+
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v5
+        with:
+          role-to-assume: ${{ env.MAVEN_SNAPSHOTS_S3_ROLE }}
+          aws-region: us-east-1
 
       - name: publish snapshots to maven
         run: |
diff --git a/build-tools/repositories.gradle b/build-tools/repositories.gradle
@@ -5,8 +5,7 @@
 
 repositories {
     mavenLocal()
-    maven { url "https://central.sonatype.com/repository/maven-snapshots/" }
-    maven { url "https://aws.oss.sonatype.org/content/repositories/snapshots" }
+    maven { url "https://ci.opensearch.org/ci/dbc/snapshots/maven/" }
     mavenCentral()
     maven {url 'https://oss.sonatype.org/content/repositories/snapshots/'}
     maven { url "https://ci.opensearch.org/ci/dbc/snapshots/lucene/" }
diff --git a/build.gradle b/build.gradle
@@ -30,8 +30,7 @@ buildscript {
 
     repositories {
         mavenLocal()
-        maven { url "https://central.sonatype.com/repository/maven-snapshots/" }
-        maven { url "https://aws.oss.sonatype.org/content/repositories/snapshots" }
+        maven { url "https://ci.opensearch.org/ci/dbc/snapshots/maven/" }
         mavenCentral()
         maven { url "https://plugins.gradle.org/m2/" }
         maven { url "https://ci.opensearch.org/ci/dbc/snapshots/lucene/" }
diff --git a/client/build.gradle b/client/build.gradle
@@ -81,10 +81,11 @@ publishing {
         }
         maven {
             name = "Snapshots"
-            url = "https://central.sonatype.com/repository/maven-snapshots/"
-            credentials {
-                username "$System.env.SONATYPE_USERNAME"
-                password "$System.env.SONATYPE_PASSWORD"
+            url = System.getenv("MAVEN_SNAPSHOTS_S3_REPO")
+            credentials(AwsCredentials) {
+                accessKey = System.getenv("AWS_ACCESS_KEY_ID")
+                secretKey = System.getenv("AWS_SECRET_ACCESS_KEY")
+                sessionToken = System.getenv("AWS_SESSION_TOKEN")
             }
         }
     }
diff --git a/common/build.gradle b/common/build.gradle
@@ -121,10 +121,11 @@ publishing {
         }
         maven {
             name = "Snapshots" //  optional target repository name
-            url = "https://central.sonatype.com/repository/maven-snapshots/"
-            credentials {
-                username "$System.env.SONATYPE_USERNAME"
-                password "$System.env.SONATYPE_PASSWORD"
+            url = System.getenv("MAVEN_SNAPSHOTS_S3_REPO")
+            credentials(AwsCredentials) {
+                accessKey = System.getenv("AWS_ACCESS_KEY_ID")
+                secretKey = System.getenv("AWS_SECRET_ACCESS_KEY")
+                sessionToken = System.getenv("AWS_SESSION_TOKEN")
             }
         }
     }
diff --git a/plugin/build.gradle b/plugin/build.gradle
@@ -119,10 +119,11 @@ publishing {
             mavenCentral()
             maven { url "https://ci.opensearch.org/ci/dbc/snapshots/lucene/" }
             name = "Snapshots"
-            url = "https://central.sonatype.com/repository/maven-snapshots/"
-            credentials {
-                username "$System.env.SONATYPE_USERNAME"
-                password "$System.env.SONATYPE_PASSWORD"
+            url = System.getenv("MAVEN_SNAPSHOTS_S3_REPO")
+            credentials(AwsCredentials) {
+                accessKey = System.getenv("AWS_ACCESS_KEY_ID")
+                secretKey = System.getenv("AWS_SECRET_ACCESS_KEY")
+                sessionToken = System.getenv("AWS_SESSION_TOKEN")
             }
         }
     }
diff --git a/spi/build.gradle b/spi/build.gradle
@@ -18,8 +18,7 @@ apply plugin: 'opensearch.java'
 repositories {
     mavenLocal()
     mavenCentral()
-    maven { url "https://central.sonatype.com/repository/maven-snapshots/" }
-    maven { url "https://aws.oss.sonatype.org/content/repositories/snapshots" }
+    maven { url "https://ci.opensearch.org/ci/dbc/snapshots/maven/" }
 }
 
 ext {
@@ -97,10 +96,11 @@ publishing {
         }
         maven {
             name = "Snapshots" //  optional target repository name
-            url = "https://central.sonatype.com/repository/maven-snapshots/"
-            credentials {
-                username "$System.env.SONATYPE_USERNAME"
-                password "$System.env.SONATYPE_PASSWORD"
+            url = System.getenv("MAVEN_SNAPSHOTS_S3_REPO")
+            credentials(AwsCredentials) {
+                accessKey = System.getenv("AWS_ACCESS_KEY_ID")
+                secretKey = System.getenv("AWS_SECRET_ACCESS_KEY")
+                sessionToken = System.getenv("AWS_SESSION_TOKEN")
             }
         }
     }

Original file line number	Diff line number	Diff line change
`@@ -81,10 +81,11 @@ publishing {`
`81`	`81`	`}`
`82`	`82`	`maven {`
`83`	`83`	`name = "Snapshots"`
`84`		`- url = "https://central.sonatype.com/repository/maven-snapshots/"`
`85`		`- credentials {`
`86`		`- username "$System.env.SONATYPE_USERNAME"`
`87`		`- password "$System.env.SONATYPE_PASSWORD"`
	`84`	`+ url = System.getenv("MAVEN_SNAPSHOTS_S3_REPO")`
	`85`	`+ credentials(AwsCredentials) {`
	`86`	`+ accessKey = System.getenv("AWS_ACCESS_KEY_ID")`
	`87`	`+ secretKey = System.getenv("AWS_SECRET_ACCESS_KEY")`
	`88`	`+ sessionToken = System.getenv("AWS_SESSION_TOKEN")`
`88`	`89`	`}`
`89`	`90`	`}`
`90`	`91`	`}`
Original file line number	Diff line number	Diff line change
`@@ -121,10 +121,11 @@ publishing {`
`121`	`121`	`}`
`122`	`122`	`maven {`
`123`	`123`	`name = "Snapshots" // optional target repository name`
`124`		`- url = "https://central.sonatype.com/repository/maven-snapshots/"`
`125`		`- credentials {`
`126`		`- username "$System.env.SONATYPE_USERNAME"`
`127`		`- password "$System.env.SONATYPE_PASSWORD"`
	`124`	`+ url = System.getenv("MAVEN_SNAPSHOTS_S3_REPO")`
	`125`	`+ credentials(AwsCredentials) {`
	`126`	`+ accessKey = System.getenv("AWS_ACCESS_KEY_ID")`
	`127`	`+ secretKey = System.getenv("AWS_SECRET_ACCESS_KEY")`
	`128`	`+ sessionToken = System.getenv("AWS_SESSION_TOKEN")`
`128`	`129`	`}`
`129`	`130`	`}`
`130`	`131`	`}`
Original file line number	Diff line number	Diff line change
`@@ -119,10 +119,11 @@ publishing {`
`119`	`119`	`mavenCentral()`
`120`	`120`	`maven { url "https://ci.opensearch.org/ci/dbc/snapshots/lucene/" }`
`121`	`121`	`name = "Snapshots"`
`122`		`- url = "https://central.sonatype.com/repository/maven-snapshots/"`
`123`		`- credentials {`
`124`		`- username "$System.env.SONATYPE_USERNAME"`
`125`		`- password "$System.env.SONATYPE_PASSWORD"`
	`122`	`+ url = System.getenv("MAVEN_SNAPSHOTS_S3_REPO")`
	`123`	`+ credentials(AwsCredentials) {`
	`124`	`+ accessKey = System.getenv("AWS_ACCESS_KEY_ID")`
	`125`	`+ secretKey = System.getenv("AWS_SECRET_ACCESS_KEY")`
	`126`	`+ sessionToken = System.getenv("AWS_SESSION_TOKEN")`
`126`	`127`	`}`
`127`	`128`	`}`
`128`	`129`	`}`
Original file line number	Diff line number	Diff line change
`@@ -18,8 +18,7 @@ apply plugin: 'opensearch.java'`
`18`	`18`	`repositories {`
`19`	`19`	`mavenLocal()`
`20`	`20`	`mavenCentral()`
`21`		`- maven { url "https://central.sonatype.com/repository/maven-snapshots/" }`
`22`		`- maven { url "https://aws.oss.sonatype.org/content/repositories/snapshots" }`
	`21`	`+ maven { url "https://ci.opensearch.org/ci/dbc/snapshots/maven/" }`
`23`	`22`	`}`
`24`	`23`
`25`	`24`	`ext {`
`@@ -97,10 +96,11 @@ publishing {`
`97`	`96`	`}`
`98`	`97`	`maven {`
`99`	`98`	`name = "Snapshots" // optional target repository name`
`100`		`- url = "https://central.sonatype.com/repository/maven-snapshots/"`
`101`		`- credentials {`
`102`		`- username "$System.env.SONATYPE_USERNAME"`
`103`		`- password "$System.env.SONATYPE_PASSWORD"`
	`99`	`+ url = System.getenv("MAVEN_SNAPSHOTS_S3_REPO")`
	`100`	`+ credentials(AwsCredentials) {`
	`101`	`+ accessKey = System.getenv("AWS_ACCESS_KEY_ID")`
	`102`	`+ secretKey = System.getenv("AWS_SECRET_ACCESS_KEY")`
	`103`	`+ sessionToken = System.getenv("AWS_SESSION_TOKEN")`
`104`	`104`	`}`
`105`	`105`	`}`
`106`	`106`	`}`