chore(Java): Sonatype requires User Token (#481)

Co-authored-by: José Corella <[email protected]>
aws · Jul 8, 2024 · fc5dbcf · fc5dbcf
1 parent f832ad1
commit fc5dbcf
Show file tree

Hide file tree

Showing 4 changed files with 7 additions and 6 deletions.
diff --git a/.github/workflows/java-release.yml → .github/workflows/todo-java-release.yml b/.github/workflows/java-release.yml → .github/workflows/todo-java-release.yml
@@ -1,5 +1,5 @@
-# This workflow performs MPL Java release
-name: MPL-Release-Java
+# This workflow WOULD perform MPL Java release
+name: TODO-MPL-Release-Java
 
 on:
   workflow_call:

diff --git a/.github/workflows/release.yml → .github/workflows/todo-release.yml b/.github/workflows/release.yml → .github/workflows/todo-release.yml
@@ -1,5 +1,5 @@
 # This workflow is triggered manually
-name: MPL-Release
+name: TODO-MPL-Release
 
 on:
   workflow_dispatch:
@@ -15,6 +15,6 @@ jobs:
   java-release:
     if: contains('["seebees","texastony","ShubhamChaturvedi7","lucasmcdonald3","josecorella","imabhichow","rishav-karanjit","antonf-amzn","justplaz","ajewellamz"]', github.actor)
     needs: getVersion
-    uses: ./.github/workflows/java-release.yml
+    uses: ./.github/workflows/todo-java-release.yml
     with:
       dafny: ${{needs.getVersion.outputs.version}}
diff --git a/cfn/CB.yml b/cfn/CB.yml
@@ -235,6 +235,7 @@ Resources:
                 "arn:aws:secretsmanager:us-west-2:${AWS::AccountId}:secret:Maven-GPG-Keys-Release-haLIjZ",
                 "arn:aws:secretsmanager:us-west-2:${AWS::AccountId}:secret:Maven-GPG-Keys-Release-Credentials-WgJanS",
                 "arn:aws:secretsmanager:us-west-2:${AWS::AccountId}:secret:Sonatype-Team-Account-0tWvZm",
+                "arn:aws:secretsmanager:us-west-2:${AWS::AccountId}:secret:Sonatype-User-Token-zK61bM",
                 "arn:aws:secretsmanager:us-west-2:${AWS::AccountId}:secret:Github/aws-crypto-tools-ci-bot-AGUB3U"
               ],
               "Action": "secretsmanager:GetSecretValue"

diff --git a/codebuild/release/release-prod.yml b/codebuild/release/release-prod.yml
@@ -11,8 +11,8 @@ env:
   secrets-manager:
     GPG_KEY: Maven-GPG-Keys-Release-Credentials:Keyname
     GPG_PASS: Maven-GPG-Keys-Release-Credentials:Passphrase
-    SONA_USERNAME: Sonatype-Team-Account:Username
-    SONA_PASSWORD: Sonatype-Team-Account:Password
+    SONA_USERNAME: Sonatype-User-Token:username
+    SONA_PASSWORD: Sonatype-User-Token:password
 
 phases:
   install: