.gitlab-ci.yml

stages:
  - deploy_to_sonatype
  - create_key

variables:
  REGISTRY: 486234852809.dkr.ecr.us-east-1.amazonaws.com

# From the tagged repo, stage the final artifact
# We've already run tests through the CI when creating the changelog and tag, skip them here
deploy_to_sonatype:
  stage: deploy_to_sonatype
  tags: [ "arch:amd64" ]
  image: registry.ddbuild.io/images/mirror/maven:3.8.6-openjdk-8
  only:
    - tags
  script:
    # Ensure we don't print commands being run to the logs during credential
    # operations
    - set +x

    - echo "Installing AWSCLI..."
    - apt update
    - apt install -y python3 python3-pip
    - python3 -m pip install awscli

    - echo "Fetching Sonatype user..."
    - export SONATYPE_USER=$(aws ssm get-parameter --region us-east-1 --name ci.datadog-api-client-java.publishing.sonatype_username --with-decryption --query "Parameter.Value" --out text)

    - echo "Fetching Sonatype password..."
    - export SONATYPE_PASS=$(aws ssm get-parameter --region us-east-1 --name ci.datadog-api-client-java.publishing.sonatype_password --with-decryption --query "Parameter.Value" --out text)

    - echo "Fetching signing key password..."
    - export GPG_PASSPHRASE=$(aws ssm get-parameter --region us-east-1 --name ci.datadog-api-client-java.signing.gpg_passphrase --with-decryption --query "Parameter.Value" --out text)

    - echo "Fetching signing key..."
    - GPG_KEY=$(aws ssm get-parameter --region us-east-1 --name ci.datadog-api-client-java.signing.gpg_private_key --with-decryption --query "Parameter.Value" --out text)
    - printf -- "$GPG_KEY" | gpg --import --batch

    - set -x

    - echo "Building release..."
    - mvn -DperformRelease=true -DskipTests -Darguments=-DskipTests --settings ./settings.xml clean deploy


# This job creates the GPG key
create_key:
  stage: create_key
  when: manual

  tags: [ "arch:amd64" ]

  image: $REGISTRY/ci/agent-key-management-tools/gpg:1
  variables:
    PROJECT_NAME: "datadog-api-client-java"
    EXPORT_TO_KEYSERVER: "false"
  script:
    - /create.sh
  artifacts:
    expire_in: 13 mos
    paths:
      - ./pubkeys/