master-branch-pipeline.yml

# This pipeline produces a SNAPSHOT build for each of the sub modules in
# the ig library, and publishes them to ossrh. 
pr: none

trigger:
- master

variables:
- group: PGP_VAR_GROUP
- group: SONATYPE_VAR_GROUP
- group: GIT_VAR_GROUP

jobs:
  - job: deploy_snapshot_to_repositories
    pool:
      vmImage: "ubuntu-latest"
    steps:
      # For creating the snapshot release with maven, we need to build a fake settings.xml for it to read from.
      # This is done for the master branch merges only.
      - bash: |
          cat >$(System.DefaultWorkingDirectory)/settings.xml <<EOL
          <settings xmlns="http://maven.apache.org/SETTINGS/1.0.0"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                    xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.0.0
                                        https://maven.apache.org/xsd/settings-1.0.0.xsd">
            <servers>
              <server>
                <id>github</id>
                <username>$(GIT_USER_NAME)</username>
                <password>$(GIT_PAT)</password>
              </server>
              <server>
                <id>ossrh</id>
                <username>$(SONATYPE_USER)</username>
                <password>$(SONATYPE_PASS)</password>
              </server>
              <server>
                <id>$(PGP_KEYNAME)</id>
                <passphrase>$(PGP_PASSPHRASE)</passphrase>
              </server>
              <server>
                <id>github-releases</id>
                <username>$(GIT_USER_NAME)</username>
                <password>$(GIT_PACKAGE_PAT)</password>
              </server>
            </servers>
            <profiles>
              <profile>
                <id>release</id>
                <activation>
                  <activeByDefault>true</activeByDefault>
                </activation>
                <properties>
                  <gpg.keyname>$(PGP_KEYNAME)</gpg.keyname>
                </properties>
              </profile>
            </profiles>
          </settings>
          EOL
        displayName: 'Create .mvn/settings.xml'

      # Runs 'mvn package'
      - task: Maven@4
        inputs:
          mavenPomFile: 'pom.xml'
          mavenOptions: '-Xmx3072m'
          options: '--settings $(System.DefaultWorkingDirectory)/settings.xml'
          javaHomeOption: 'JDKVersion'
          jdkVersionOption: '1.11'
          jdkArchitectureOption: 'x64'
          publishJUnitResults: true
          testResultsFiles: '**/surefire-reports/TEST-*.xml'
          goals: 'package'

      # Signing, for now, occurs for all builds, SNAPSHOT or release. So we need a valid
      # signing key. The next two steps download the public and private keys from the
      # secure library files.
      - task: DownloadSecureFile@1
        displayName: 'Download public key.'
        inputs:
          secureFile: public.key

      - task: DownloadSecureFile@1
        displayName: 'Download private key.'
        inputs:
          secureFile: private.key

      # Import both the private and public keys into gpg for signing.
      - bash: |
          gpg --import --no-tty --batch --yes $(Agent.TempDirectory)/public.key
          gpg --import --no-tty --batch --yes $(Agent.TempDirectory)/private.key
          gpg --list-keys --keyid-format LONG
          gpg --list-secret-keys --keyid-format LONG
        displayName: 'Import signing keys.'

      # Deploy the SNAPSHOT artifact to sonatype nexus.
      # This is done for the master branch merges only.
      - task: Maven@4
        displayName: 'Deploy to Sonatype staging'
        inputs:
          mavenPomFile: '$(System.DefaultWorkingDirectory)/pom.xml'
          goals: deploy
          options: '--settings $(System.DefaultWorkingDirectory)/settings.xml -Dmaven.test.skip -DdeployToSonatype -e'
          publishJUnitResults: false

      # Deploy the SNAPSHOT artifact to GitHub packages.
      # This is done for the master branch merges only.
      - task: Maven@4
        enabled: false
        displayName: 'Deploy to GitHub Packages'
        inputs:
          mavenPomFile: '$(System.DefaultWorkingDirectory)/pom.xml'
          goals: deploy
          options: '--settings $(System.DefaultWorkingDirectory)/settings.xml -Dmaven.test.skip -pl "!org.hl7.fhir.publisher.cli" -DdeployToGitHub -e'
          publishJUnitResults: false