Uploaded image for project: 'Infrastructure'
  1. Infrastructure
  2. INFRA-20769

Clarification on what credential to use to publish Apache project artifacts to Maven central via ASF Nexus from CI/CD

    XMLWordPrintableJSON

    Details

    • Type: Wish
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Fix Version/s: None
    • Component/s: maven, Nexus
    • Labels:
      None
    • Project:
      Fineract

      Description

      The Apache Fineract project in FINERACT-1102 is looking for some guidance from ASF about how a project such as others could potentially release artifacts to Maven Central (using Maven Group ID org.apache.fineract).

      We're interesting in publishing both SNAPSHOT and releases (eventually).

      I've found and read https://infra.apache.org/publishing-maven-artifacts.html, and just raised INFRA-20768 as per that doc, but am still confused about how we would automate Maven deployment in CI/CD instead of doing this manually locally - what credential would we use?

      Not sure if putting e.g. my own personal (vorburger) Apache Login and Password on GitHub for some automated GitHub Action/Workflow is a great idea? (Even if we were using GitHub Secrets, as per http://blog2.vorburger.ch/2020/05/fineractdev-cicd-from-github-to-google.html, using one individual committers credential doesn't seem right, to me.)

      Is there perhaps e.g. a Jenkins at Apache that already has a global or project specific machine user service account with required credentials set up, or something like that?

      Or is it customary to request and use "real" ASF accounts for "bots" like build jobs running outside of ASF infra? How do other projects at the ASF typically do this?

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                vorburger Michael Vorburger
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: