From c759300b9c26039bc72fce912fd484c5d3e95d5c Mon Sep 17 00:00:00 2001
From: Alpar Torok <alpar.torok@elastic.co>
Date: Tue, 21 Nov 2023 17:09:12 +0200
Subject: [PATCH] add a sample configuration for signing and configuration

---
 .buildkite/configure_signing.sh         | 25 +++++++++++++++++++++++++
 java-client-serverless/build.gradle.kts | 15 +++++++++++++++
 2 files changed, 40 insertions(+)
 create mode 100755 .buildkite/configure_signing.sh

diff --git a/.buildkite/configure_signing.sh b/.buildkite/configure_signing.sh
new file mode 100755
index 000000000..cfdba0d07
--- /dev/null
+++ b/.buildkite/configure_signing.sh
@@ -0,0 +1,25 @@
+#!/bin/bash
+
+#see https://central.sonatype.org/publish/publish-gradle/#distributing-your-public-key
+
+set -e 
+
+mkdir -p /tmp
+keyring_file="/tmp/keyring.gpg"
+
+vault kv get --field="keyring" kv/ci-shared/release-eng/team-release-secrets/elasticsearch-java/gpg | base64 -d > $keyring_file
+signing_password=$(vault kv get --field="passphase" kv/ci-shared/release-eng/team-release-secrets/elasticsearch-java/gpg)
+signing_key=$(vault kv get --field="key_id" kv/ci-shared/release-eng/team-release-secrets/elasticsearch-java/gpg)
+
+maven_username=$(vault kv get --field="username" kv/ci-shared/release-eng/team-release-secrets/elasticsearch-java/maven_central)
+maven_password=$(vault kv get --field="password" kv/ci-shared/release-eng/team-release-secrets/elasticsearch-java/maven_central)
+
+cat > gradle.properties <<EOF
+signing.keyId=${signing_key: -8}
+signing.password=${signing_password}
+signing.secretKeyRingFile=${keyring_file}
+
+ossrhUsername=${maven_username}
+ossrhPassword=${maven_password}
+EOF
+
diff --git a/java-client-serverless/build.gradle.kts b/java-client-serverless/build.gradle.kts
index fca219d44..28c9fcb46 100644
--- a/java-client-serverless/build.gradle.kts
+++ b/java-client-serverless/build.gradle.kts
@@ -28,6 +28,7 @@ plugins {
     `java-library`
     checkstyle
     `maven-publish`
+    signing
     id("com.github.jk1.dependency-license-report") version "2.2"
     id("de.thetaphi.forbiddenapis") version "3.4"
 }
@@ -35,6 +36,10 @@ plugins {
 // GitHub Maven repo doesn't like 1.0.0+20231031-SNAPSHOT
 version = "1.0.0-20231031-SNAPSHOT"
 
+signing {
+    sign(publishing.publications)
+}
+
 java {
     targetCompatibility = JavaVersion.VERSION_1_8
     sourceCompatibility = JavaVersion.VERSION_1_8
@@ -115,6 +120,7 @@ tasks.withType<Javadoc> {
     }
 }
 
+
 publishing {
     repositories {
         maven {
@@ -129,6 +135,15 @@ publishing {
             name = "Build"
             url = uri("${rootProject.buildDir}/repository")
         }
+
+	maven {
+            name = "MavenCentralSnapshot"
+            setUrl("https://s01.oss.sonatype.org/content/repositories/snapshots/")
+            credentials {
+                 username = providers.gradleProperty("ossrhUsername").getOrNull()
+                 password = providers.gradleProperty("ossrhPassword").getOrNull()
+           }
+       }
     }
 
     publications {