release_groovy_plugin_maven.gocd.groovy

def secretParam = { String param ->
  return "{{SECRET:[build-pipelines][$param]}}".toString()
}

String org = "gocd-contrib"
String repo = "gocd-groovy-dsl-config-plugin"

GoCD.script {
  pipelines {
    pipeline('upload-groovy-plugin-to-maven') {
      group = 'plugins'
      labelTemplate = '${COUNT}'
      lockBehavior = 'none'
      materials {
        git('signing-keys') {
          url = "https://git.gocd.io/git/gocd/signing-keys"
          destination = "signing-keys"
        }
        git('groovy') {
          url = "https://git.gocd.io/git/${org}/${repo}"
          shallowClone = false
          destination = 'groovy'
        }
        dependency('GroovyPipeline') {
          pipeline = "${org}-${repo}"
          stage = 'github-release'
        }
      }
      stages {
        stage('upload') {
          artifactCleanupProhibited = false
          cleanWorkingDir = true
          fetchMaterials = true
          environmentVariables = [
            'GNUPGHOME'                    : '.signing',
            'GOCD_GPG_KEYRING_FILE'        : 'signing-key.gpg',
            'GOCD_GPG_PASSPHRASE'          : secretParam("GOCD_GPG_PASSPHRASE"),
            'MAVEN_CENTRAL_TOKEN_USERNAME' : secretParam("MAVEN_CENTRAL_TOKEN_USERNAME"),
            'MAVEN_CENTRAL_TOKEN_PASSWORD' : secretParam("MAVEN_CENTRAL_TOKEN_PASSWORD"),
          ]
          secureEnvironmentVariables = [
            GOCD_GPG_KEY_ID: 'AES:+ORNmqROtoiLtfp+q4FlfQ==:PxQcI6mOtG4J/WQHS9jakg=='
          ]
          jobs {
            job('upload-to-maven') {
              elasticProfileId = 'ecs-gocd-dev-build'
              tasks {
                bash {
                  commandString = 'mkdir -p ${GNUPGHOME}'
                  workingDir = "groovy"
                }
                bash {
                  commandString = 'echo ${GOCD_GPG_PASSPHRASE} > gpg-passphrase'
                  workingDir = "groovy"
                }
                bash {
                  commandString = 'gpg --quiet --batch --passphrase-file gpg-passphrase --output - ../signing-keys/gpg-keys.pem.gpg | gpg --import --batch --quiet'
                  workingDir = "groovy"
                }
                bash {
                  commandString = 'gpg --export-secret-keys ${GOCD_GPG_KEY_ID} > dsl/${GOCD_GPG_KEYRING_FILE}'
                  workingDir = "groovy"
                }
                bash {
                  commandString = './gradlew clean dsl:publishToSonatype closeAndReleaseSonatypeStagingRepository'
                  workingDir = "groovy"
                }
              }
            }
          }
        }
      }
    }
  }
}