Update gemspec to include signing key path

By default, signing key is expected to be at root of project with name gem-private_key.pem. Include only if command is gem and argument is gemspec and signing key exists. Signed-off-by: Vijayan Balasubramanian <[email protected]>
opensearch-project · Dec 6, 2021 · 397e541 · 397e541
1 parent 9517882
commit 397e541
Show file tree

Hide file tree

Showing 6 changed files with 33 additions and 4 deletions.
diff --git a/.gitignore b/.gitignore
@@ -14,3 +14,4 @@ Gemfile.lock
 profile/**/data/*.json
 .byebug_history
 dist/
+gem-private_key.pem
diff --git a/opensearch-api/opensearch-api.gemspec b/opensearch-api/opensearch-api.gemspec
@@ -29,6 +29,8 @@ lib = File.expand_path('../lib', __FILE__)
 $LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
 require 'opensearch/api/version'
 
+signing_key_path = File.expand_path("../gem-private_key.pem")
+
 Gem::Specification.new do |s|
   s.name          = 'opensearch-api'
   s.version       = OpenSearch::API::VERSION
@@ -45,7 +47,12 @@ Gem::Specification.new do |s|
   s.files         = `git ls-files`.split($/)
   s.executables   = s.files.grep(%r{^bin/}) { |f| File.basename(f) }
   s.test_files    = s.files.grep(%r{^(test|spec|features)/})
-  s.cert_chain  = ['../certs/opensearch-rubygems.pem']
+
+  if $PROGRAM_NAME.end_with?("gem") && ARGV == ["build", __FILE__] && File.exist?(signing_key_path)
+    s.signing_key = signing_key_path
+    s.cert_chain  = ['../certs/opensearch-rubygems.pem']
+  end
+
   s.require_paths = ['lib']
 
   s.extra_rdoc_files  = [ 'README.md', 'LICENSE' ]

diff --git a/opensearch-dsl/opensearch-dsl.gemspec b/opensearch-dsl/opensearch-dsl.gemspec
@@ -29,6 +29,8 @@ lib = File.expand_path('../lib', __FILE__)
 $LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
 require 'opensearch/dsl/version'
 
+signing_key_path = File.expand_path("../gem-private_key.pem")
+
 Gem::Specification.new do |s|
   s.name          = 'opensearch-dsl'
   s.version       = OpenSearch::DSL::VERSION
@@ -46,7 +48,12 @@ Gem::Specification.new do |s|
   s.files         = `git ls-files`.split($/)
   s.executables   = s.files.grep(%r{^bin/}) { |f| File.basename(f) }
   s.test_files    = s.files.grep(%r{^(test|spec|features)/})
-  s.cert_chain  = ['../certs/opensearch-rubygems.pem']
+
+  if $PROGRAM_NAME.end_with?("gem") && ARGV == ["build", __FILE__] && File.exist?(signing_key_path)
+    s.signing_key = signing_key_path
+    s.cert_chain  = ['../certs/opensearch-rubygems.pem']
+  end
+
   s.require_paths = ['lib']
 
   s.extra_rdoc_files  = [ 'README.md', 'LICENSE' ]

diff --git a/opensearch-transport/opensearch-transport.gemspec b/opensearch-transport/opensearch-transport.gemspec
@@ -29,6 +29,8 @@ lib = File.expand_path('../lib', __FILE__)
 $LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
 require 'opensearch/transport/version'
 
+signing_key_path = File.expand_path("../gem-private_key.pem")
+
 Gem::Specification.new do |s|
   s.name          = 'opensearch-transport'
   s.version       = OpenSearch::Transport::VERSION
@@ -45,7 +47,12 @@ Gem::Specification.new do |s|
   s.files         = `git ls-files`.split($/)
   s.executables   = s.files.grep(%r{^bin/}) { |f| File.basename(f) }
   s.test_files    = s.files.grep(%r{^(test|spec|features)/})
-  s.cert_chain  = ['../certs/opensearch-rubygems.pem']
+
+  if $PROGRAM_NAME.end_with?("gem") && ARGV == ["build", __FILE__] && File.exist?(signing_key_path)
+    s.signing_key = signing_key_path
+    s.cert_chain  = ['../certs/opensearch-rubygems.pem']
+  end
+
   s.require_paths = ['lib']
 
   s.extra_rdoc_files  = [ 'README.md', 'LICENSE' ]

diff --git a/opensearch/opensearch.gemspec b/opensearch/opensearch.gemspec
@@ -28,6 +28,8 @@ lib = File.expand_path('../lib', __FILE__)
 $LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
 require 'opensearch/version'
 
+signing_key_path = File.expand_path("../gem-private_key.pem")
+
 Gem::Specification.new do |s|
   s.name          = 'opensearch-ruby'
   s.version       = OpenSearch::VERSION
@@ -45,7 +47,12 @@ Gem::Specification.new do |s|
   s.executables   = s.files.grep(%r{^bin/}) { |f| File.basename(f) }
   s.executables   << 'opensearch_ruby_console'
   s.test_files    = s.files.grep(%r{^(test|spec|features)/})
-  s.cert_chain  = ['../certs/opensearch-rubygems.pem']
+
+  if $PROGRAM_NAME.end_with?("gem") && ARGV == ["build", __FILE__] && File.exist?(signing_key_path)
+    s.signing_key = signing_key_path
+    s.cert_chain  = ['../certs/opensearch-rubygems.pem']
+  end
+
   s.require_paths = ['lib']
   s.bindir = 'bin'
 

diff --git a/release/build.sh b/release/build.sh