From 4200e0dea1f7a09ddd099a404bdaf3b2824ebab9 Mon Sep 17 00:00:00 2001
From: Daniel Azuma <dazuma@google.com>
Date: Thu, 31 Oct 2024 09:38:40 -0700
Subject: [PATCH] chore: Update release config to use keystore for rubygems key
 (#318)

---
 .kokoro/release.cfg | 21 ++++++++++++++++-----
 .trampolinerc       |  8 +++++++-
 2 files changed, 23 insertions(+), 6 deletions(-)

diff --git a/.kokoro/release.cfg b/.kokoro/release.cfg
index 98fa36c5..6bac5fd3 100644
--- a/.kokoro/release.cfg
+++ b/.kokoro/release.cfg
@@ -32,11 +32,22 @@ env_vars: {
   value: "releasetool-publish-reporter-app,releasetool-publish-reporter-googleapis-installation,releasetool-publish-reporter-pem,docuploader_service_account"
 }
 
+# Pick up Rubygems key from internal keystore
+before_action {
+  fetch_keystore {
+    keystore_resource {
+      keystore_config_id: 73713
+      keyname: "rubygems-publish-key"
+      backend: "blade:keystore-fastconfigpush"
+    }
+  }
+}
+
 # Store the packages uploaded to rubygems.org, which
 # we can later use to generate SBOMs and attestations.
 action {
- define_artifacts {
-   regex: "github/ruby-spanner-activerecord/pkg/*.gem"
-   strip_prefix: "github"
- }
-}
\ No newline at end of file
+  define_artifacts {
+    regex: "github/ruby-spanner-activerecord/pkg/*.gem"
+    strip_prefix: "github"
+  }
+}
diff --git a/.trampolinerc b/.trampolinerc
index d4c5febe..677fcd45 100644
--- a/.trampolinerc
+++ b/.trampolinerc
@@ -18,7 +18,13 @@ required_envvars+=(
 
 # Add env vars which are passed down into the container here.
 pass_down_envvars+=(
-    "AUTORELEASE_PR" "RELEASE_DRY_RUN" "RELEASE_PACKAGE" "KOKORO_GIT_COMMIT" "RUBY_VERSIONS" "EXTRA_CI_ARGS"
+    "AUTORELEASE_PR"
+    "EXTRA_CI_ARGS"
+    "KOKORO_GIT_COMMIT"
+    "KOKORO_KEYSTORE_DIR"
+    "RELEASE_DRY_RUN"
+    "RELEASE_PACKAGE"
+    "RUBY_VERSIONS"
 )
 
 # Prevent unintentional override on the default image.