Add workflow to publish snapshots via GHA (opensearch-project#325)

* Add workflow to publish snapshots via GHA

Signed-off-by: Sayali Gaikawad <gaiksaya@amazon.com>

* Fix task name

Signed-off-by: Sayali Gaikawad <gaiksaya@amazon.com>

* Fix conflict and add documentation

Signed-off-by: Sayali Gaikawad <gaiksaya@amazon.com>

Signed-off-by: Sayali Gaikawad <gaiksaya@amazon.com>

.github/workflows/publish-snapshots.yml

@@ -0,0 +1,30 @@
+name: Publish snapshots to maven
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  build-and-publish-snapshots:
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: write
+    steps:
+      - uses: actions/checkout@v3
+      - name: Set up JDK 11
+        uses: actions/setup-java@v3
+        with:
+          java-version: 11
+          distribution: adopt
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v1
+        with:
+          role-to-assume: ${{ secrets.PUBLISH_SNAPSHOTS_ROLE }}
+          aws-region: us-east-1
+      - name: publish snapshots to maven
+        run: |
+          export SONATYPE_USERNAME=$(aws secretsmanager get-secret-value --secret-id maven-snapshots-username --query SecretString --output text)
+          export SONATYPE_PASSWORD=$(aws secretsmanager get-secret-value --secret-id maven-snapshots-password --query SecretString --output text)
+          ./gradlew --no-daemon publishPublishMavenPublicationToSnapshotsRepository

CHANGELOG.md

@@ -8,6 +8,7 @@ Inspired from [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 - Add javadoc link for the client ([#255](https://github.com/opensearch-project/opensearch-java/pull/255))
 - Add 1-click release workflows ([#321](https://github.com/opensearch-project/opensearch-java/pull/321))
 - Introduce new OpenSearchTransport based on Apache HttpClient 5 ([#281](https://github.com/opensearch-project/opensearch-java/pull/281))
+- Add workflow to publish snapshots via GHA ([#325](https://github.com/opensearch-project/opensearch-java/pull/325))
 
 ### Dependencies
 - Bumps `classgraph` from 4.8.149 to 4.8.154

README.md

@@ -35,7 +35,7 @@ Please see the [USER_GUIDE](USER_GUIDE.md) for code snippets.
 * [Documentation](https://opensearch.org/docs/latest/clients/java/)
 * [JavaDoc](https://www.javadoc.io/doc/org.opensearch.client/opensearch-java/latest/index.html)
 * [Maven Central](https://search.maven.org/artifact/org.opensearch.client/opensearch-java)
-* [Snapshot Builds](https://aws.oss.sonatype.org/content/repositories/snapshots/org/opensearch/client/opensearch-java/)
+* [Snapshot Builds](#snapshot-builds)
 * Need help? Try [Forums](https://discuss.opendistrocommunity.dev/)
 * [Project Principles](https://opensearch.org/#principles)
 * [Contributing to OpenSearch](CONTRIBUTING.md)
@@ -52,6 +52,9 @@ This project has adopted the [Amazon Open Source Code of Conduct](CODE_OF_CONDUC
 
 See [User Guide](USER_GUIDE.md).
 
+## Snapshot Builds
+The [snapshots builds](https://aws.oss.sonatype.org/content/repositories/snapshots/org/opensearch/client/opensearch-java/) are published to sonatype using [publish-snapshots.yml](./.github/workflows/publish-snapshots.yml) workflow. Each `push` event to the main branch triggers this workflow.
+
 ## Compatibility with OpenSearch
 
 See [Compatibility](COMPATIBILITY.md).

java-client/build.gradle.kts

@@ -257,8 +257,11 @@ publishing {
     repositories{
         if (version.toString().endsWith("SNAPSHOT")) {
             maven("https://aws.oss.sonatype.org/content/repositories/snapshots/") {
-                name = "snapshotRepo"
-                credentials(PasswordCredentials::class)
+                name = "Snapshots"
+                credentials {
+                    username = System.getenv("SONATYPE_USERNAME")
+                    password = System.getenv("SONATYPE_PASSWORD")
+                }
             }
         }
         maven("${rootProject.buildDir}/repository") {