From 75b06b89bf17df8c510244bc51b910eb9ee8c553 Mon Sep 17 00:00:00 2001
From: Sakthivel Subramanian <sakthipvmj@gmail.com>
Date: Tue, 26 Nov 2024 11:02:04 +0530
Subject: [PATCH] ci(spanner): use airlock for fetching dependencies

---
 .kokoro/build.sh        |   9 ++++
 .kokoro/dependencies.sh |   7 +++
 .mvn/extensions.xml     |   8 +++
 pom.xml                 | 113 ++++++++++++++++++++++++++++++++++++++++
 4 files changed, 137 insertions(+)
 create mode 100644 .mvn/extensions.xml

diff --git a/.kokoro/build.sh b/.kokoro/build.sh
index d603c59859b..c17f0264eb7 100755
--- a/.kokoro/build.sh
+++ b/.kokoro/build.sh
@@ -15,6 +15,8 @@
 
 set -eo pipefail
 
+set -x
+
 ## Get the directory of the build script
 scriptDir=$(realpath $(dirname "${BASH_SOURCE[0]}"))
 ## cd to the parent directory, i.e. the root of the git repo
@@ -33,9 +35,16 @@ fi
 mvn -version
 echo ${JOB_TYPE}
 
+# Enable airlock only for Kokoro jobs
+INSTALL_OPTS=""
+if [[ ! -z "${KOKORO_JOB_TYPE}" && ${KOKORO_JOB_TYPE} =~ ^.*presubmit.*$ ]]; then
+  INSTALL_OPTS="-Pairlock-trusted"
+fi
+
 # attempt to install 3 times with exponential backoff (starting with 10 seconds)
 retry_with_backoff 3 10 \
   mvn install -B -V -ntp \
+    ${INSTALL_OPTS} \
     -DskipTests=true \
     -Dclirr.skip=true \
     -Denforcer.skip=true \
diff --git a/.kokoro/dependencies.sh b/.kokoro/dependencies.sh
index 3c613d6b56d..7fc722077aa 100755
--- a/.kokoro/dependencies.sh
+++ b/.kokoro/dependencies.sh
@@ -53,9 +53,16 @@ if [ ! -z "${JAVA11_HOME}" ]; then
   setJava "${JAVA11_HOME}"
 fi
 
+# Enable airlock only for Kokoro jobs
+INSTALL_OPTS=""
+if [[ ! -z "${KOKORO_JOB_TYPE}" ]]; then
+  INSTALL_OPTS="-Pairlock-trusted"
+fi
+
 # this should run maven enforcer
 retry_with_backoff 3 10 \
   mvn install -B -V -ntp \
+    ${INSTALL_OPTS} \
     -DskipTests=true \
     -Dmaven.javadoc.skip=true \
     -Dclirr.skip=true
diff --git a/.mvn/extensions.xml b/.mvn/extensions.xml
new file mode 100644
index 00000000000..38f37df431b
--- /dev/null
+++ b/.mvn/extensions.xml
@@ -0,0 +1,8 @@
+<extensions xmlns="http://maven.apache.org/EXTENSIONS/1.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+  xsi:schemaLocation="http://maven.apache.org/EXTENSIONS/1.0.0 http://maven.apache.org/xsd/core-extensions-1.0.0.xsd">
+  <extension>
+    <groupId>com.google.cloud.artifactregistry</groupId>
+    <artifactId>artifactregistry-maven-wagon</artifactId>
+    <version>2.2.3</version>
+  </extension>
+</extensions>
\ No newline at end of file
diff --git a/pom.xml b/pom.xml
index 191e70768a6..93534105ebd 100644
--- a/pom.xml
+++ b/pom.xml
@@ -234,4 +234,117 @@
       </plugin>
     </plugins>
   </reporting>
+
+  <profiles>
+    <profile>
+      <!-- Profile to use Airlock (go/airlock/howto_maven). Disabled by default. -->
+      <id>airlock-trusted</id>
+      <pluginRepositories>
+        <pluginRepository>
+          <id>airlock</id>
+          <name>Airlock</name>
+          <url>artifactregistry://us-maven.pkg.dev/artifact-foundry-prod/maven-3p-trusted</url>
+          <layout>default</layout>
+          <releases>
+            <enabled>true</enabled>
+          </releases>
+          <snapshots>
+            <enabled>true</enabled>
+          </snapshots>
+        </pluginRepository>
+        <!-- Adding a fallback to airlock 3p staging till all the license verification issues are resolved -->
+        <pluginRepository>
+          <id>airlock-staging</id>
+          <name>Airlock</name>
+          <url>artifactregistry://us-maven.pkg.dev/artifact-foundry-prod/ah-3p-staging-maven</url>
+          <layout>default</layout>
+          <releases>
+            <enabled>true</enabled>
+          </releases>
+          <snapshots>
+            <enabled>true</enabled>
+          </snapshots>
+        </pluginRepository>
+        <pluginRepository>
+          <id>central</id>
+          <!-- Disable default Maven Central -->
+          <name>Maven Central remote repository</name>
+          <url>https://repo.maven.apache.org/maven2</url>
+          <layout>default</layout>
+          <releases>
+            <enabled>false</enabled>
+          </releases>
+          <snapshots>
+            <enabled>false</enabled>
+          </snapshots>
+        </pluginRepository>
+        <pluginRepository>
+          <id>rso-public-grid</id>
+          <!-- Disable default sonatype public grid -->
+          <name>Maven Central Sonatype repository</name>
+          <url>https://repository.sonatype.org/content/groups/sonatype-public-grid</url>
+          <layout>default</layout>
+          <releases>
+            <enabled>false</enabled>
+          </releases>
+          <snapshots>
+            <enabled>false</enabled>
+          </snapshots>
+        </pluginRepository>
+      </pluginRepositories>
+      <repositories>
+        <repository>
+          <id>airlock</id>
+          <name>Airlock</name>
+          <url>artifactregistry://us-maven.pkg.dev/artifact-foundry-prod/maven-3p-trusted</url>
+          <layout>default</layout>
+          <releases>
+            <enabled>true</enabled>
+          </releases>
+          <snapshots>
+            <enabled>true</enabled>
+          </snapshots>
+        </repository>
+        <!-- Adding a fallback to airlock 3p staging till all the license verification issues are resolved -->
+        <repository>
+          <id>airlock-staging</id>
+          <name>Airlock</name>
+          <url>artifactregistry://us-maven.pkg.dev/artifact-foundry-prod/ah-3p-staging-maven</url>
+          <layout>default</layout>
+          <releases>
+            <enabled>true</enabled>
+          </releases>
+          <snapshots>
+            <enabled>true</enabled>
+          </snapshots>
+        </repository>
+        <repository>
+          <id>central</id>
+          <!-- Disable default Maven Central -->
+          <name>Maven Central remote repository</name>
+          <url>https://repo.maven.apache.org/maven2</url>
+          <layout>default</layout>
+          <releases>
+            <enabled>false</enabled>
+          </releases>
+          <snapshots>
+            <enabled>false</enabled>
+          </snapshots>
+        </repository>
+        <repository>
+          <id>rso-public-grid</id>
+          <!-- Disable default sonatype public grid -->
+          <name>Maven Central Sonatype repository</name>
+          <url>https://repository.sonatype.org/content/groups/sonatype-public-grid</url>
+          <layout>default</layout>
+          <releases>
+            <enabled>false</enabled>
+          </releases>
+          <snapshots>
+            <enabled>false</enabled>
+          </snapshots>
+        </repository>
+      </repositories>
+    </profile>
+  </profiles>
 </project>