mirror of
https://github.com/elastic/elasticsearch.git
synced 2025-06-28 09:28:55 -04:00
Cleanup gradle init script used in ci (#119015)
This commit is contained in:
parent
696ee806e7
commit
c808137709
1 changed files with 2 additions and 99 deletions
101
.ci/init.gradle
101
.ci/init.gradle
|
@ -1,95 +1,3 @@
|
||||||
import com.bettercloud.vault.VaultConfig
|
|
||||||
import com.bettercloud.vault.Vault
|
|
||||||
|
|
||||||
initscript {
|
|
||||||
repositories {
|
|
||||||
mavenCentral()
|
|
||||||
}
|
|
||||||
dependencies {
|
|
||||||
classpath 'com.bettercloud:vault-java-driver:4.1.0'
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
boolean USE_ARTIFACTORY = false
|
|
||||||
|
|
||||||
if (System.getenv('VAULT_ADDR') == null) {
|
|
||||||
// When trying to reproduce errors outside of CI, it can be useful to allow this to just return rather than blowing up
|
|
||||||
if (System.getenv('CI') == null) {
|
|
||||||
return
|
|
||||||
}
|
|
||||||
|
|
||||||
throw new GradleException("You must set the VAULT_ADDR environment variable to use this init script.")
|
|
||||||
}
|
|
||||||
|
|
||||||
if (System.getenv('VAULT_ROLE_ID') == null && System.getenv('VAULT_SECRET_ID') == null && System.getenv('VAULT_TOKEN') == null) {
|
|
||||||
// When trying to reproduce errors outside of CI, it can be useful to allow this to just return rather than blowing up
|
|
||||||
if (System.getenv('CI') == null) {
|
|
||||||
return
|
|
||||||
}
|
|
||||||
|
|
||||||
throw new GradleException("You must set either the VAULT_ROLE_ID and VAULT_SECRET_ID environment variables, " +
|
|
||||||
"or the VAULT_TOKEN environment variable to use this init script.")
|
|
||||||
}
|
|
||||||
|
|
||||||
final String vaultPathPrefix = System.getenv('VAULT_ADDR') ==~ /.+vault-ci.+\.dev.*/ ? "secret/ci/elastic-elasticsearch/migrated" : "secret/elasticsearch-ci"
|
|
||||||
|
|
||||||
final String vaultToken = System.getenv('VAULT_TOKEN') ?: new Vault(
|
|
||||||
new VaultConfig()
|
|
||||||
.address(System.env.VAULT_ADDR)
|
|
||||||
.engineVersion(1)
|
|
||||||
.build()
|
|
||||||
)
|
|
||||||
.withRetries(5, 1000)
|
|
||||||
.auth()
|
|
||||||
.loginByAppRole("approle", System.env.VAULT_ROLE_ID, System.env.VAULT_SECRET_ID)
|
|
||||||
.getAuthClientToken()
|
|
||||||
|
|
||||||
final Vault vault = new Vault(
|
|
||||||
new VaultConfig()
|
|
||||||
.address(System.env.VAULT_ADDR)
|
|
||||||
.engineVersion(1)
|
|
||||||
.token(vaultToken)
|
|
||||||
.build()
|
|
||||||
)
|
|
||||||
.withRetries(5, 1000)
|
|
||||||
|
|
||||||
|
|
||||||
if (USE_ARTIFACTORY) {
|
|
||||||
final Map<String, String> artifactoryCredentials = vault.logical()
|
|
||||||
.read("${vaultPathPrefix}/artifactory.elstc.co")
|
|
||||||
.getData()
|
|
||||||
logger.info("Using elastic artifactory repos")
|
|
||||||
Closure configCache = {
|
|
||||||
return {
|
|
||||||
name "artifactory-gradle-release"
|
|
||||||
url "https://artifactory.elstc.co/artifactory/gradle-release"
|
|
||||||
credentials {
|
|
||||||
username artifactoryCredentials.get("username")
|
|
||||||
password artifactoryCredentials.get("token")
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
settingsEvaluated { settings ->
|
|
||||||
settings.pluginManagement {
|
|
||||||
repositories {
|
|
||||||
maven configCache()
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
projectsLoaded {
|
|
||||||
allprojects {
|
|
||||||
buildscript {
|
|
||||||
repositories {
|
|
||||||
maven configCache()
|
|
||||||
}
|
|
||||||
}
|
|
||||||
repositories {
|
|
||||||
maven configCache()
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
gradle.settingsEvaluated { settings ->
|
gradle.settingsEvaluated { settings ->
|
||||||
settings.pluginManager.withPlugin("com.gradle.develocity") {
|
settings.pluginManager.withPlugin("com.gradle.develocity") {
|
||||||
settings.develocity {
|
settings.develocity {
|
||||||
|
@ -98,14 +6,10 @@ gradle.settingsEvaluated { settings ->
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
final String buildCacheUrl = System.getProperty('org.elasticsearch.build.cache.url')
|
final String buildCacheUrl = System.getProperty('org.elasticsearch.build.cache.url')
|
||||||
final boolean buildCachePush = Boolean.valueOf(System.getProperty('org.elasticsearch.build.cache.push', 'false'))
|
final boolean buildCachePush = Boolean.valueOf(System.getProperty('org.elasticsearch.build.cache.push', 'false'))
|
||||||
|
|
||||||
if (buildCacheUrl) {
|
if (buildCacheUrl) {
|
||||||
final Map<String, String> buildCacheCredentials = System.getenv("GRADLE_BUILD_CACHE_USERNAME") ? [:] : vault.logical()
|
|
||||||
.read("${vaultPathPrefix}/gradle-build-cache")
|
|
||||||
.getData()
|
|
||||||
gradle.settingsEvaluated { settings ->
|
gradle.settingsEvaluated { settings ->
|
||||||
settings.buildCache {
|
settings.buildCache {
|
||||||
local {
|
local {
|
||||||
|
@ -116,11 +20,10 @@ if (buildCacheUrl) {
|
||||||
url = buildCacheUrl
|
url = buildCacheUrl
|
||||||
push = buildCachePush
|
push = buildCachePush
|
||||||
credentials {
|
credentials {
|
||||||
username = System.getenv("GRADLE_BUILD_CACHE_USERNAME") ?: buildCacheCredentials.get("username")
|
username = System.getenv("GRADLE_BUILD_CACHE_USERNAME")
|
||||||
password = System.getenv("GRADLE_BUILD_CACHE_PASSWORD") ?: buildCacheCredentials.get("password")
|
password = System.getenv("GRADLE_BUILD_CACHE_PASSWORD")
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue