split service account for app distribution and google play release

Author: hrach

catalog/build.gradle.kts

@@ -61,7 +61,9 @@ android {
                 appId = "1:442962334472:android:3a8ac71491745d2d37d2bd"
                 artifactType = "APK"
                 groups = "main"
-                serviceCredentialsFile = "release/service-account.json"
+                // A different service account as the Orbit Compose project is not the linked project
+                // to Google Play.
+                serviceCredentialsFile = "release/orbit-service-account.json"
             }
         }
         release {

release/.gitignore

@@ -1,4 +1,4 @@
 /secring.gpg
 /signing.properties
 /upload.jks
-/service-account.json
+/*.json

release/orbit-service-account.json.aes

@@ -6,6 +6,7 @@ if [[ -n "$ENCRYPT_KEY" ]]; then
   openssl enc -aes-256-cbc -md sha512 -pbkdf2 -iter 100000 -salt -in release/signing.properties -out release/signing.properties.aes -k ${ENCRYPT_KEY}
   openssl enc -aes-256-cbc -md sha512 -pbkdf2 -iter 100000 -salt -in release/upload.jks -out release/upload.jks.aes -k ${ENCRYPT_KEY}
   openssl enc -aes-256-cbc -md sha512 -pbkdf2 -iter 100000 -salt -in release/service-account.json -out release/service-account.json.aes -k ${ENCRYPT_KEY}
+  openssl enc -aes-256-cbc -md sha512 -pbkdf2 -iter 100000 -salt -in release/orbit-service-account.json -out release/orbit-service-account.json.aes -k ${ENCRYPT_KEY}
 
 else
   echo "Encrypt key is empty"

release/secring.gpg.aes

@@ -6,6 +6,7 @@ if [[ -n "$ENCRYPT_KEY" ]]; then
   openssl enc -d -aes-256-cbc -md sha512 -pbkdf2 -iter 100000 -salt -in release/signing.properties.aes -out release/signing.properties -k ${ENCRYPT_KEY}
   openssl enc -d -aes-256-cbc -md sha512 -pbkdf2 -iter 100000 -salt -in release/upload.jks.aes -out release/upload.jks -k ${ENCRYPT_KEY}
   openssl enc -d -aes-256-cbc -md sha512 -pbkdf2 -iter 100000 -salt -in release/service-account.json.aes -out release/service-account.json -k ${ENCRYPT_KEY}
+  openssl enc -d -aes-256-cbc -md sha512 -pbkdf2 -iter 100000 -salt -in release/orbit-service-account.json.aes -out release/orbit-service-account.json -k ${ENCRYPT_KEY}
 
 else
   echo "Encrypt key is empty"