Publish -SNAPSHOT artifacts to a codeartifact account (#1)

added deployment workflow for RIC

Author: smirnoal

.github/workflows/aws-lambda-java-runtime-interface-client.yml

@@ -62,3 +62,35 @@ jobs:
         name: the-jar
         path: ./aws-lambda-java-runtime-interface-client/target/aws-lambda-java-runtime-interface-client-*.jar
 
+  publish:
+    needs: build
+    if: github.ref == 'refs/heads/main'
+
+    permissions:
+      id-token: write
+      contents: read
+
+    steps:
+      - name: Issue AWS credentials
+        uses: aws-actions/configure-aws-credentials@v1
+        with:
+          aws-region: ${{ secrets.AWS_REGION }}
+          role-to-assume: ${{ secrets.AWS_ROLE }}
+          role-session-name: GitHubActionsPublishPackage
+          role-duration-seconds: 900
+
+      - name: Prepare codeartifact properties
+        working-directory: ./aws-lambda-java-runtime-interface-client/ric-dev-environment
+        run: |
+          cat <<EOF > codeartifact-properties.mk
+          CODE_ARTIFACT_REPO_ACCOUNT=${{ secrets.AWS_ACCOUNT }}
+          CODE_ARTIFACT_REPO_REGION=${{ env.AWS_REGION }}
+          CODE_ARTIFACT_REPO_NAME=${{ secrets.CODE_ARTIFACT_REPO_NAME }}
+          CODE_ARTIFACT_DOMAIN=${{ secrets.AWS_CODEARTIFACT_DOMAIN }}
+          EOF
+
+      - name: Publish
+        working-directory: ./aws-lambda-java-runtime-interface-client
+        env:
+          ENABLE_SNAPSHOT: ${{ secrets.ENABLE_SNAPSHOT }}
+        run: make publish

aws-lambda-java-runtime-interface-client/.gitignore

@@ -1,2 +1,2 @@
 compile-flags.txt
-ric-dev-environment/dev-maven-repo.mk
+ric-dev-environment/codeartifact-properties.mk

aws-lambda-java-runtime-interface-client/Makefile

@@ -5,8 +5,8 @@ ARCHITECTURE_ALIAS := $($(shell echo "$(ARCHITECTURE)_ALIAS"))
 ARCHITECTURE_ALIAS := $(or $(ARCHITECTURE_ALIAS),amd64) # on any other archs defaulting to amd64
 
 # This optional module exports MAVEN_REPO_URL, MAVEN_REPO_USERNAME and MAVEN_REPO_PASSWORD environment variables
-# making it possible to publish resulting artifacts to a development maven repository
--include ric-dev-environment/dev-maven-repo.mk
+# making it possible to publish resulting artifacts to a codeartifact maven repository
+-include ric-dev-environment/codeartifact-repo.mk
 
 .PHONY: target
 target:
@@ -48,7 +48,7 @@ build:
 
 .PHONY: publish
 publish:
-	mvn deploy --settings ric-dev-environment/settings.xml
+	./ric-dev-environment/publish_snapshot.sh
 
 define HELP_MESSAGE
 

aws-lambda-java-runtime-interface-client/pom.xml

@@ -184,17 +184,6 @@
   <profiles>
     <profile>
       <id>dev</id>
-      <activation>
-        <file>
-          <exists>ric-dev-environment/dev-maven-repo.mk</exists>
-        </file>
-      </activation>
-      <distributionManagement>
-        <snapshotRepository>
-          <id>dev-snapshot-repo</id>
-          <url>${env.MAVEN_REPO_URL}</url>
-        </snapshotRepository>
-      </distributionManagement>
       <build>
         <plugins>
           <plugin>
@@ -277,5 +266,14 @@
         </plugins>
       </build>
     </profile>
+    <profile>
+      <id>ci-repo</id>
+      <distributionManagement>
+        <repository>
+          <id>ci-repo</id>
+          <url>${env.MAVEN_REPO_URL}</url>
+        </repository>
+      </distributionManagement>
+    </profile>
   </profiles>
 </project>

aws-lambda-java-runtime-interface-client/ric-dev-environment/codeartifact-repo.mk

@@ -0,0 +1,27 @@
+
+ifneq ("$(wildcard ric-dev-environment/codeartifact-properties.mk)","")
+
+    include ric-dev-environment/codeartifact-properties.mk
+    $(info Found codeartifact-properties.mk module)
+
+    export MAVEN_REPO_URL:=$(shell aws codeartifact get-repository-endpoint \
+                            --domain ${CODE_ARTIFACT_DOMAIN} \
+                            --repository ${CODE_ARTIFACT_REPO_NAME} \
+                            --format maven \
+                            --output text \
+                            --region ${CODE_ARTIFACT_REPO_REGION})
+
+    export MAVEN_REPO_PASSWORD:=$(shell aws codeartifact get-authorization-token \
+                                  --domain ${CODE_ARTIFACT_DOMAIN} \
+                                  --domain-owner ${CODE_ARTIFACT_REPO_ACCOUNT} \
+                                  --query authorizationToken \
+                                  --output text \
+                                  --region ${CODE_ARTIFACT_REPO_REGION})
+
+    export MAVEN_REPO_USERNAME:=aws
+
+    $(info MAVEN_REPO_URL: $(MAVEN_REPO_URL))
+    # $(info MAVEN_REPO_PASSWORD: $(MAVEN_REPO_PASSWORD))
+    $(info MAVEN_REPO_USERNAME: $(MAVEN_REPO_USERNAME))
+    $(info CODE_ARTIFACT_REPO_NAME: $(CODE_ARTIFACT_REPO_NAME))
+endif

aws-lambda-java-runtime-interface-client/ric-dev-environment/publish_snapshot.sh

@@ -0,0 +1,22 @@
+#!/bin/bash
+
+set -e
+
+projectVersion=$(mvn help:evaluate -Dexpression=project.version -q -DforceStdout)
+if [[ -z ${ENABLE_SNAPSHOT} ]]; then
+  echo "Skipping SNAPSHOT deployment, as ENABLE_SNAPSHOT environment variable is not defined"
+  exit
+fi
+
+echo "Deploying SNAPSHOT artifact"
+if [[ ${projectVersion} != *"SNAPSHOT"* ]]; then
+    snapshotProjectVersion="${projectVersion}-SNAPSHOT"
+    echo "projectVersion: ${projectVersion}"
+    echo "snapshotProjectVersion: ${snapshotProjectVersion}"
+    mvn versions:set "-DnewVersion=${snapshotProjectVersion}"
+else
+    echo "Already -SNAPSHOT version"
+fi
+
+mvn -P ci-repo deploy --settings ric-dev-environment/settings.xml
+mv pom.xml.versionsBackup pom.xml

aws-lambda-java-runtime-interface-client/ric-dev-environment/settings.xml

@@ -1,23 +1,18 @@
 <settings>
     <profiles>
         <profile>
-            <id>dev</id>
-            <activation>
-                <file>
-                    <exists>dev-maven-repo.mk</exists>
-                </file>
-            </activation>
+            <id>dev-ci</id>
             <repositories>
                 <repository>
-                    <id>dev-snapshot-repo</id>
+                    <id>ci-repo</id>
                     <url>${env.MAVEN_REPO_URL}</url>
                 </repository>
             </repositories>
         </profile>
     </profiles>
     <servers>
         <server>
-            <id>dev-snapshot-repo</id>
+            <id>ci-repo</id>
             <username>${env.MAVEN_REPO_USERNAME}</username>
             <password>${env.MAVEN_REPO_PASSWORD}</password>
         </server>