azure-pipelines.yml

trigger:
  - master

pr:
  - master

variables:
- ${{ if eq(variables._RunAsInternal, True) }}:
  - group: DotNet-Install-Scripts-BuildPipeline-Params
- template: eng/common-variables.yml

resources:
  containers:
  - container: LinuxContainer
    image: microsoft/dotnet-buildtools-prereqs:ubuntu-14.04-cross-0cd4667-20170319080304

stages:
- stage: build
  displayName: Build
  jobs:
  - template: /eng/common/templates/jobs/jobs.yml
    parameters:
      artifacts:
        publish:
          artifacts: true
          logs: true
          manifests: true
      enableMicrobuild: true
      enablePublishUsingPipelines: true
      useBuildManifest: ${{ variables['_UseBuildManifest'] }}
      workspace:
        clean: all
      jobs:
      - job: Windows_NT
        timeoutInMinutes: 90
        pool:
          ${{ if eq(variables._RunAsPublic, True) }}:
            name: NetCorePublic-Pool
            queue: BuildPool.Server.Amd64.VS2017.Arcade.Open
          ${{ if eq(variables._RunAsInternal, True) }}:
            name: NetCoreInternal-Pool
            queue: BuildPool.Server.Amd64.VS2017.Arcade
        strategy:
          matrix:
            ${{ if eq(variables._RunAsInternal, True) }}:
              Build_Release:
                _BuildConfig: Release
            ${{ if eq(variables._RunAsPublic, True) }}:
              Build_Debug:
                _BuildConfig: Debug
        preSteps:
        - checkout: self
          clean: true
        steps:
        - task: UseDotNet@2
          displayName: Get .NET Core SDK
          inputs:
            version: 3.x
        - task: DotNetCoreCLI@2
          displayName: Run Tests
          inputs: 
            command: test
        - script: eng\common\cibuild.cmd
            -configuration $(_BuildConfig)
            -projects src/Signing/SignScripts.csproj
            -prepareMachine
            $(_InternalBuildArgs)
            /p:Test=false
            /p:DotNetSignType=$(_SignType)
            /p:TeamName=$(_TeamName)
          displayName: Sign dotnet-install.ps1
        - ${{ if eq(variables._RunAsInternal, True) }}:
          - task: PowerShell@2
            displayName: Validate Signature
            inputs:
              filePath: eng/common/sdk-task.ps1
              arguments: -task SigningValidation -restore -msbuildEngine vs 
                /p:InputFiles='$(Build.Repository.LocalPath)/artifacts/bin/SignScripts/**/*.ps1'
                /p:PackageBasePath='$(Build.Repository.LocalPath)/artifacts/bin/SignScripts/'
          # Signing step overrides the default SDK version to 5.0. Reinstall is needed.
          - task: UseDotNet@2
            displayName: Get .NET Core SDK
            inputs:
              # Azure Functions client library (v3.0.9) has a dependency on SDK 3.x
              version: 3.x
          - task: DotNetCoreCLI@2
            displayName: Publish Windows functions to folder
            inputs:
              command: publish
              arguments: '--configuration Release --output publish_output_windows'
              projects: src/MonitoringFunctions.Windows/MonitoringFunctions.Windows.csproj
              publishWebProjects: false
              modifyOutputPath: false
              zipAfterPublish: false
          - task: DotNetCoreCLI@2
            displayName: Publish Linux functions to folder
            inputs:
              command: publish
              arguments: '--configuration Release --output publish_output_linux'
              projects: src/MonitoringFunctions.Linux/MonitoringFunctions.Linux.csproj
              publishWebProjects: false
              modifyOutputPath: false
              zipAfterPublish: false
          - task: ArchiveFiles@2
            displayName: "Archive Windows functions"
            inputs:
              rootFolderOrFile: "$(System.DefaultWorkingDirectory)/publish_output_windows"
              includeRootFolder: false
              archiveFile: "$(System.DefaultWorkingDirectory)/build_windows_$(Build.BuildId).zip"
          - task: ArchiveFiles@2
            displayName: "Archive Linux functions"
            inputs:
              rootFolderOrFile: "$(System.DefaultWorkingDirectory)/publish_output_linux"
              includeRootFolder: false
              archiveFile: "$(System.DefaultWorkingDirectory)/build_linux_$(Build.BuildId).zip"

          - task: AzureRmWebAppDeployment@4
            condition: eq(variables['TestPublishing'], 'true')
            displayName: "Deploy Linux Functions to Test"
            inputs:
              ConnectionType: 'AzureRM'
              # Name of the service connection that will give us access to Dotnet-Install-Monitoring resource group
              # This is where the linux based test Azure Functions are allocated.
              azureSubscription: 'InstallScripts_KeyVault'
              appType: 'functionAppLinux'
              WebAppName: 'install-scripts-linux-test'
              deployToSlotOrASE: true
              ResourceGroupName: 'Dotnet-Install-Monitoring'
              Package: '$(System.DefaultWorkingDirectory)/build_linux_$(Build.BuildId).zip'
          - task: AzureRmWebAppDeployment@4
            condition: eq(variables['TestPublishing'], 'true')
            displayName: "Deploy Windows Functions to Test"
            inputs:
              ConnectionType: 'AzureRM'
              # Name of the service connection that will give us access to Dotnet-Install-Monitoring resource group
              # This is where the windows based Azure Functions are allocated.
              azureSubscription: 'InstallScripts_KeyVault'
              appType: 'functionApp'
              WebAppName: install-scripts-win-test
              deployToSlotOrASE: true
              ResourceGroupName: 'Dotnet-Install-Monitoring'
              Package: '$(System.DefaultWorkingDirectory)/build_windows_$(Build.BuildId).zip'

          - task: AzureRmWebAppDeployment@4
            condition: eq(variables['TestPublishing'], 'false')
            displayName: "Deploy Linux Functions to Prod"
            inputs:
              ConnectionType: 'AzureRM'
              # Name of the service connection that will give us access to Dotnet-Install-Monitoring-Visualization resource group
              # This is where the linux based Azure Functions are allocated.
              azureSubscription: 'InstallScripts_Visualization_RG'
              appType: 'functionApp'
              WebAppName: install-scripts-linux-prod
              deployToSlotOrASE: true
              ResourceGroupName: 'Dotnet-Install-Monitoring-Visualization'
              Package: '$(System.DefaultWorkingDirectory)/build_linux_$(Build.BuildId).zip'
          - task: AzureRmWebAppDeployment@4
            condition: eq(variables['TestPublishing'], 'false')
            displayName: "Deploy Windows Functions to Prod"
            inputs:
              ConnectionType: 'AzureRM'
              # Name of the service connection that will give us access to Dotnet-Install-Monitoring resource group
              # This is where the windows based Azure Functions are allocated.
              azureSubscription: 'InstallScripts_KeyVault'
              appType: 'functionApp'
              WebAppName: install-scripts-win-prod
              deployToSlotOrASE: true
              ResourceGroupName: 'Dotnet-Install-Monitoring'
              Package: '$(System.DefaultWorkingDirectory)/build_windows_$(Build.BuildId).zip'

  - job: LinuxTests
    timeoutInMinutes: 30
    container: LinuxContainer
    pool:
      ${{ if eq(variables._RunAsPublic, True) }}:
        name:  NetCorePublic-Pool
        queue: BuildPool.Ubuntu.1604.Amd64.Open
      ${{ if eq(variables._RunAsInternal, True) }}:
        name: NetCoreInternal-Pool
        queue: BuildPool.Ubuntu.1604.Amd64
    steps:
    - checkout: self
      displayName: Checkout Self
      clean: true
    - task: UseDotNet@2
      displayName: Get .NET Core SDK
      inputs:
        version: 3.x
    - script: |
        chmod u+x src/dotnet-install.sh
      displayName: 'Add permission to execute'
    - task: DotNetCoreCLI@2
      displayName: Run Tests
      inputs: 
        command: test

- ${{ if eq(variables._RunAsInternal, True) }}:
  - template: eng\common\templates\post-build\post-build.yml
    parameters:
      enableSigningValidation: false
      enableNugetValidation: false
      # Symbol validation isn't being very reliable lately. This should be enabled back
      # once this issue is resolved: https://github.com/dotnet/arcade/issues/2871
      enableSymbolValidation: false
      # Sourcelink validation isn't passing for Arcade due to some regressions. This should be
      # enabled back once this issue is resolved: https://github.com/dotnet/arcade/issues/2912
      enableSourceLinkValidation: false
      publishDependsOn:
      - Validate
      # This is to enable SDL runs part of Post-Build Validation Stage
      SDLValidationParameters:
        enable: true
        continueOnError: false
        params: ' -SourceToolsList @("policheck","credscan")
        -TsaInstanceURL $(_TsaInstanceURL)
        -TsaProjectName $(_TsaProjectName)
        -TsaNotificationEmail $(_TsaNotificationEmail)
        -TsaCodebaseAdmin $(_TsaCodebaseAdmin)
        -TsaBugAreaPath $(_TsaBugAreaPath)
        -TsaIterationPath $(_TsaIterationPath)
        -TsaRepositoryName "Install-Scripts"
        -TsaCodebaseName "Install-Scripts"
        -TsaPublish $True'
      useBuildManifest: ${{ variables['_UseBuildManifest'] }}