From e44f44f0b3f7b89e584fcda92f4fbd186da9f079 Mon Sep 17 00:00:00 2001
From: Zelin Hao <jerrynhao@gmail.com>
Date: Mon, 25 Aug 2025 00:14:35 -0700
Subject: [PATCH] Update the maven snapshot publish endpoint and credential
 (#102)

Signed-off-by: Zelin Hao <zelinhao@amazon.com>
(cherry picked from commit 142be0c20a978d88e9b81c52a0b7a41feee4236a)
---
 .github/workflows/maven-publish.yml | 17 ++++++++++-------
 build.gradle                        |  4 +++-
 2 files changed, 13 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/maven-publish.yml b/.github/workflows/maven-publish.yml
index 5be7a98..f0ee838 100644
--- a/.github/workflows/maven-publish.yml
+++ b/.github/workflows/maven-publish.yml
@@ -20,14 +20,17 @@ jobs:
           distribution: temurin # Temurin is a distribution of adoptium
           java-version: 11
       - uses: actions/checkout@v3
-      - uses: aws-actions/configure-aws-credentials@v1
+
+      - name: Load secret
+        uses: 1password/load-secrets-action@v2
         with:
-          role-to-assume: ${{ secrets.PUBLISH_SNAPSHOTS_ROLE }}
-          aws-region: us-east-1
+          # Export loaded secrets as environment variables
+          export-env: true
+        env:
+          OP_SERVICE_ACCOUNT_TOKEN: ${{ secrets.OP_SERVICE_ACCOUNT_TOKEN }}
+          SONATYPE_USERNAME: op://opensearch-infra-secrets/maven-central-portal-credentials/username
+          SONATYPE_PASSWORD: op://opensearch-infra-secrets/maven-central-portal-credentials/password
+
       - name: publish snapshots to maven
         run: |
-          export SONATYPE_USERNAME=$(aws secretsmanager get-secret-value --secret-id maven-snapshots-username --query SecretString --output text)
-          export SONATYPE_PASSWORD=$(aws secretsmanager get-secret-value --secret-id maven-snapshots-password --query SecretString --output text)
-          echo "::add-mask::$SONATYPE_USERNAME"
-          echo "::add-mask::$SONATYPE_PASSWORD"
           ./gradlew publishCreatePublicationToSnapshotsRepository
diff --git a/build.gradle b/build.gradle
index 03495f8..0deb7fb 100644
--- a/build.gradle
+++ b/build.gradle
@@ -26,6 +26,7 @@ buildscript {
     repositories {
         mavenLocal()
         mavenCentral()
+        maven { url "https://central.sonatype.com/repository/maven-snapshots/" }
         maven { url "https://aws.oss.sonatype.org/content/repositories/snapshots" }
     }
 }
@@ -58,6 +59,7 @@ allprojects {
     repositories {
         mavenLocal()
         mavenCentral()
+        maven { url "https://central.sonatype.com/repository/maven-snapshots/" }
         maven { url "https://aws.oss.sonatype.org/content/repositories/snapshots" }
         maven { url "https://plugins.gradle.org/m2/" }
     }
@@ -224,7 +226,7 @@ publishing {
         if (buildVersion.toString().endsWith("SNAPSHOT")) {
             maven {
                 name = "Snapshots"
-                url = "https://aws.oss.sonatype.org/content/repositories/snapshots/"
+                url = "https://central.sonatype.com/repository/maven-snapshots/"
                 credentials {
                     username = System.getenv("SONATYPE_USERNAME")
                     password = System.getenv("SONATYPE_PASSWORD")