From c63e8e9472fd0011d2d5f0d74c58afa7b4de6c1f Mon Sep 17 00:00:00 2001 From: Jonathan Mah Date: Mon, 16 May 2022 20:16:30 -0700 Subject: [PATCH] Moved credentials to Azure Key Vault --- azure-pipelines.yml | 15 +++++++++++++-- 1 file changed, 13 insertions(+), 2 deletions(-) diff --git a/azure-pipelines.yml b/azure-pipelines.yml index f7aea8f9..7c3be69d 100644 --- a/azure-pipelines.yml +++ b/azure-pipelines.yml @@ -11,6 +11,9 @@ schedules: - dev always: true +variables: +- group: DjangoTestApp + jobs: - job: Windows pool: @@ -69,7 +72,7 @@ jobs: Invoke-Sqlcmd @" EXEC xp_instance_regwrite N'HKEY_LOCAL_MACHINE', N'Software\Microsoft\MSSQLServer\MSSQLServer', N'LoginMode', REG_DWORD, 2 ALTER LOGIN [sa] ENABLE; - ALTER LOGIN [sa] WITH PASSWORD = 'MyPassword42', CHECK_POLICY=OFF; + ALTER LOGIN [sa] WITH PASSWORD = '$(TestAppPassword)', CHECK_POLICY=OFF; "@ displayName: Set up SQL Server @@ -77,6 +80,10 @@ jobs: Restart-Service -Name MSSQLSERVER -Force displayName: Restart SQL Server + - powershell: | + (Get-Content -ReadCount 0 testapp\settings.py) -replace 'MyPassword42', '$(TestAppPassWord)' | Set-Content testapp\settings.py + displayName: Change PASSWORD in settings.py + - powershell: | python -m pip install --upgrade pip wheel setuptools python -m pip install tox @@ -125,7 +132,7 @@ jobs: - script: | docker pull mcr.microsoft.com/mssql/server:2019-latest - docker run -e 'ACCEPT_EULA=Y' -e 'SA_PASSWORD=MyPassword42' -p 1433:1433 -d mcr.microsoft.com/mssql/server:2019-latest + docker run -e 'ACCEPT_EULA=Y' -e 'SA_PASSWORD=$(TestAppPassword)' -p 1433:1433 -d mcr.microsoft.com/mssql/server:2019-latest curl https://packages.microsoft.com/keys/microsoft.asc | sudo apt-key add - curl https://packages.microsoft.com/config/ubuntu/20.04/prod.list | sudo tee /etc/apt/sources.list.d/mssql-release.list sudo apt-get update @@ -138,6 +145,10 @@ jobs: git clone https://github.com/django/django.git displayName: Install requirements + - script: | + sed -i 's/MyPassword42/$(TestAppPassword)/g' testapp/settings.py + displayName: Change PASSWORD in settings.py + - script: tox -e $(tox.env) displayName: Run tox