Skip to content

Commit

Permalink
feat(release): Support loading the rubygems token from secret manager (
Browse files Browse the repository at this point in the history
  • Loading branch information
dazuma authored Jan 31, 2025
1 parent 3b0e70e commit 611dd87
Showing 1 changed file with 16 additions and 10 deletions.
26 changes: 16 additions & 10 deletions toys/release/perform.rb
Original file line number Diff line number Diff line change
@@ -54,8 +54,10 @@ def run
end

def load_deps
# TODO: Update gems to "~> 1.3" after we drop Ruby 3.0 support and can vendor
# gems 1.3.0 in the docker image.
gem "gems", "~> 1.2"
gem "jwt", "~> 2.9"
gem "jwt", "~> 2.10"
require "fileutils"
require "gems"
require "json"
@@ -65,19 +67,23 @@ def load_deps

def load_env
raise "Did not find KOKORO_GFILE_DIR" unless ENV["KOKORO_GFILE_DIR"]
raise "Did not find KOKORO_KEYSTORE_DIR" unless ENV["KOKORO_KEYSTORE_DIR"]
secret_manager_dir = File.join ENV["KOKORO_GFILE_DIR"], "secret_manager"
keystore_dir = ENV["KOKORO_KEYSTORE_DIR"]
logger.warn "Did not find KOKORO_KEYSTORE_DIR" unless keystore_dir

load_param :docuploader_credentials, secret_manager_dir, "docuploader_service_account", from: :path
load_param :rubygems_api_token, keystore_dir, "73713_rubygems-publish-key"

return unless reporter_org && report_to_pr
load_param :reporter_app, secret_manager_dir, "releasetool-publish-reporter-app"
load_param :reporter_installation, secret_manager_dir, "releasetool-publish-reporter-#{reporter_org}-installation"
load_param :reporter_pem, secret_manager_dir, "releasetool-publish-reporter-pem"
ENV["GITHUB_TOKEN"] = ENV["GH_TOKEN"] = @reporter_token = acquire_reporter_token
extract_pr_info
load_param :rubygems_api_token, keystore_dir, "73713_rubygems-publish-key" if keystore_dir
load_param :rubygems_api_token, secret_manager_dir, "ruby-rubygems-token"

if reporter_org && report_to_pr
load_param :reporter_app, secret_manager_dir, "releasetool-publish-reporter-app"
load_param :reporter_installation, secret_manager_dir, "releasetool-publish-reporter-#{reporter_org}-installation"
load_param :reporter_pem, secret_manager_dir, "releasetool-publish-reporter-pem"
ENV["GITHUB_TOKEN"] = ENV["GH_TOKEN"] = @reporter_token = acquire_reporter_token
extract_pr_info
end

nil
end

def load_param param_name, dir, file_name, from: :content

0 comments on commit 611dd87

Please sign in to comment.