Skip to content

Commit 2e0ef5d

Browse files
Update common Docker engineering infrastructure with latest
1 parent 7c5a65f commit 2e0ef5d

32 files changed

+463
-139
lines changed

eng/common/templates/1es-official.yml

Lines changed: 29 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -17,6 +17,9 @@ parameters:
1717
- name: stages
1818
type: stageList
1919
default: []
20+
- name: serviceConnections
21+
type: object
22+
default: []
2023
- name: pool
2124
type: object
2225
default:
@@ -38,23 +41,30 @@ resources:
3841
ref: refs/tags/release
3942

4043
extends:
41-
template: v1/1ES.Official.PipelineTemplate.yml@1ESPipelineTemplates
44+
template: /eng/common/templates/task-prefix-decorator.yml@self
4245
parameters:
43-
pool: ${{ parameters.pool }}
44-
sdl:
45-
binskim:
46-
enabled: true
47-
componentgovernance:
48-
ignoreDirectories: $(Build.SourcesDirectory)/versions
49-
whatIf: ${{ parameters.cgDryRun }}
50-
showAlertLink: true
51-
policheck:
52-
enabled: true
53-
sourceRepositoriesToScan:
54-
exclude:
55-
- repository: InternalVersionsRepo
56-
- repository: PublicVersionsRepo
57-
sourceAnalysisPool: ${{ parameters.sourceAnalysisPool }}
58-
tsa:
59-
enabled: true
60-
stages: ${{ parameters.stages }}
46+
baseTemplate: v1/1ES.Official.PipelineTemplate.yml@1ESPipelineTemplates
47+
templateParameters:
48+
pool: ${{ parameters.pool }}
49+
sdl:
50+
binskim:
51+
enabled: true
52+
componentgovernance:
53+
ignoreDirectories: $(Build.SourcesDirectory)/versions
54+
whatIf: ${{ parameters.cgDryRun }}
55+
showAlertLink: true
56+
policheck:
57+
enabled: true
58+
sourceRepositoriesToScan:
59+
exclude:
60+
- repository: InternalVersionsRepo
61+
- repository: PublicVersionsRepo
62+
sourceAnalysisPool: ${{ parameters.sourceAnalysisPool }}
63+
tsa:
64+
enabled: true
65+
stages:
66+
- template: /eng/common/templates/stages/setup-service-connections.yml@self
67+
parameters:
68+
pool: ${{ parameters.pool }}
69+
serviceConnections: ${{ parameters.serviceConnections }}
70+
- ${{ parameters.stages }}

eng/common/templates/1es-unofficial.yml

Lines changed: 34 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -20,6 +20,9 @@ parameters:
2020
type: stageList
2121
default: []
2222
# 1ES Pipeline Template parameters
23+
- name: serviceConnections
24+
type: object
25+
default: []
2326
- name: pool
2427
type: object
2528
default:
@@ -41,26 +44,35 @@ resources:
4144
ref: refs/tags/release
4245

4346
extends:
44-
template: v1/1ES.Unofficial.PipelineTemplate.yml@1ESPipelineTemplates
47+
template: /eng/common/templates/task-prefix-decorator.yml@self
4548
parameters:
46-
pool: ${{ parameters.pool }}
47-
sdl:
48-
binskim:
49-
enabled: true
50-
componentgovernance:
51-
ignoreDirectories: $(Build.SourcesDirectory)/versions
52-
whatIf: true
53-
showAlertLink: true
54-
enableAllTools: ${{ not(parameters.disableSDL) }}
55-
policheck:
56-
enabled: true
57-
sbom:
58-
enabled: true
59-
sourceRepositoriesToScan:
60-
exclude:
61-
- repository: InternalVersionsRepo
62-
- repository: PublicVersionsRepo
63-
sourceAnalysisPool: ${{ parameters.sourceAnalysisPool }}
64-
tsa:
65-
enabled: true
66-
stages: ${{ parameters.stages }}
49+
# Use a unique task prefix for unofficial pipelines
50+
taskPrefix: "🟦"
51+
baseTemplate: v1/1ES.Unofficial.PipelineTemplate.yml@1ESPipelineTemplates
52+
templateParameters:
53+
pool: ${{ parameters.pool }}
54+
sdl:
55+
binskim:
56+
enabled: true
57+
componentgovernance:
58+
ignoreDirectories: $(Build.SourcesDirectory)/versions
59+
whatIf: true
60+
showAlertLink: true
61+
enableAllTools: ${{ not(parameters.disableSDL) }}
62+
policheck:
63+
enabled: true
64+
sbom:
65+
enabled: true
66+
sourceRepositoriesToScan:
67+
exclude:
68+
- repository: InternalVersionsRepo
69+
- repository: PublicVersionsRepo
70+
sourceAnalysisPool: ${{ parameters.sourceAnalysisPool }}
71+
tsa:
72+
enabled: true
73+
stages:
74+
- template: /eng/common/templates/stages/setup-service-connections.yml@self
75+
parameters:
76+
pool: ${{ parameters.pool }}
77+
serviceConnections: ${{ parameters.serviceConnections }}
78+
- ${{ parameters.stages }}

eng/common/templates/jobs/build-images.yml

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -65,10 +65,14 @@ jobs:
6565
parameters:
6666
name: BuildImages
6767
displayName: Build Images
68-
serviceConnection: $(build.serviceConnectionName)
68+
serviceConnections:
69+
- name: acr
70+
id: $(build.serviceConnection.id)
71+
tenantId: $(build.serviceConnection.tenantId)
72+
clientId: $(build.serviceConnection.clientId)
6973
internalProjectName: ${{ parameters.internalProjectName }}
7074
dockerClientOS: ${{ parameters.dockerClientOS }}
71-
args: >
75+
args: >-
7276
build
7377
--manifest $(manifest)
7478
$(imageBuilderPaths)

eng/common/templates/jobs/copy-base-images-staging.yml

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,10 @@ jobs:
2424
additionalOptions: ${{ parameters.additionalOptions }}
2525
acr:
2626
server: $(acr-staging.server)
27-
serviceConnection: $(internal-mirror.serviceConnectionName)
27+
serviceConnection:
28+
tenantId: $(internal-mirror.serviceConnection.tenantId)
29+
clientId: $(internal-mirror.serviceConnection.clientId)
30+
id: $(internal-mirror.serviceConnection.id)
2831
subscription: $(acr-staging.subscription)
2932
resourceGroup: $(acr-staging.resourceGroup)
3033
repoPrefix: $(mirrorRepoPrefix)

eng/common/templates/jobs/copy-base-images.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ jobs:
3232
- ${{ parameters.customInitSteps }}
3333
- template: /eng/common/templates/steps/copy-base-images.yml@self
3434
parameters:
35-
acr: ${{ parameters.acr }}
35+
acr: ${{ parameters.acr }}
3636
repoPrefix: ${{ parameters.repoPrefix }}
3737
additionalOptions: ${{ parameters.additionalOptions }}
3838
continueOnError: ${{ parameters.continueOnError }}

eng/common/templates/jobs/generate-matrix.yml

Lines changed: 8 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,7 @@ parameters:
88
noCache: false
99
customInitSteps: []
1010
commonInitStepsForMatrixAndBuild: []
11+
sourceBuildPipelineRunId: ""
1112

1213
jobs:
1314
- job: ${{ parameters.name }}
@@ -28,9 +29,10 @@ jobs:
2829
parameters:
2930
targetPath: $(Build.ArtifactStagingDirectory)
3031
artifactName: image-info
32+
pipelineRunId: ${{ parameters.sourceBuildPipelineRunId }}
3133
- powershell: |
3234
$additionalGenerateBuildMatrixOptions = "$(additionalGenerateBuildMatrixOptions)"
33-
35+
3436
if ("${{ parameters.isTestStage}}" -eq "true") {
3537
$additionalGenerateBuildMatrixOptions = "$additionalGenerateBuildMatrixOptions --image-info $(artifactsPath)/image-info.json"
3638
}
@@ -59,6 +61,10 @@ jobs:
5961
parameters:
6062
name: matrix
6163
displayName: Generate ${{ parameters.matrixType }} Matrix
62-
serviceConnection: $(build.serviceConnectionName)
64+
serviceConnections:
65+
- name: acr
66+
tenantId: $(build.serviceConnection.tenantId)
67+
clientId: $(build.serviceConnection.clientId)
68+
id: $(build.serviceConnection.id)
6369
internalProjectName: internal
6470
args: $(generateBuildMatrixCommand)

0 commit comments

Comments
 (0)