AzDo Private Preview Pipeline

.azure-pipelines/ci-build.yml

@@ -0,0 +1,79 @@
+# Copyright (c) Microsoft Corporation. All rights reserved.
+# Licensed under the MIT License.
+name: $(BuildDefinitionName)_$(SourceBranchName)_$(Date:yyyyMMdd)$(Rev:.r)
+parameters:
+  - name: BuildAgent
+    default: 1es-windows-ps-compute
+    displayName: Build Agent
+  - name: Test
+    type: boolean
+    default: true
+  - name: Pack
+    type: boolean
+    default: true
+  - name: Sign
+    type: boolean
+    default: true
+
+variables:
+  BuildAgent: ${{ parameters.BuildAgent }}
+  GitUserEmail: 'GraphTooling@service.microsoft.com'
+  GitUserName: 'Microsoft Graph DevX Tooling'
+
+pool: $(BuildAgent)
+
+trigger:
+  branches:
+    include:
+      - main
+      - features/2.0
+pr: none
+
+jobs:
+- job: MsGraphPsSdkCiBuild
+  displayName: Microsoft Graph PowerShell SDK CI Build
+  timeoutInMinutes: 840
+  steps:
+    - template: ./common-templates/install-tools.yml
+    - template: ./common-templates/security-pre-checks.yml
+
+    - template: ./generation-templates/authentication-module.yml
+      parameters:
+        Test: ${{ parameters.Test }}
+        Pack: ${{ parameters.Pack }}
+        Sign: ${{ parameters.Sign }}
+
+    - template: ./generation-templates/workload-modules.yml
+      parameters:
+        Test: ${{ parameters.Test }}
+        Pack: ${{ parameters.Pack }}
+        Sign: ${{ parameters.Sign }}
+
+    - template: ./generation-templates/meta-module.yml
+      parameters:
+        Test: ${{ parameters.Test }}
+        Pack: ${{ parameters.Pack }}
+        Sign: ${{ parameters.Sign }}
+
+    - ${{ if and(eq(parameters.Pack, true), eq(parameters.Sign, true)) }}:
+      - template: ./common-templates/esrp/codesign-nuget.yml
+        parameters:
+          FolderPath: '$(Build.ArtifactStagingDirectory)'
+          Pattern: 'Microsoft.Graph*.nupkg'
+
+      - task: PublishBuildArtifacts@1
+        displayName: Publish Module Artifacts
+        inputs:
+          PathtoPublish: '$(Build.ArtifactStagingDirectory)'
+          ArtifactName: 'drop'
+          publishLocation: 'Container'
+
+      - task: NuGetCommand@2
+        displayName: Publish NuGet to preview feed
+        inputs:
+          command: push
+          packagesToPush: $(Build.ArtifactStagingDirectory)/**/Microsoft.Graph.*.nupkg
+          publishVstsFeed: $(PROJECT_NAME)/$(PREVIEW_FEED_NAME)
+          allowPackageConflicts: true
+
+    - template: ./common-templates/security-post-checks.yml

.azure-pipelines/common-templates/esrp/codesign-nuget.yml

@@ -0,0 +1,38 @@
+# Copyright (c) Microsoft Corporation. All rights reserved.
+# Licensed under the MIT License.
+
+parameters:
+  - name: FolderPath
+    type: string
+    default: $(System.DefaultWorkingDirectory)
+  - name: Pattern
+    type: string
+    default: '*.nupkg'
+
+steps:
+  - task: SFP.build-tasks.custom-build-task-1.EsrpCodeSigning@1
+    displayName: ESRP NuGet CodeSigning
+    enabled: true
+    inputs:
+      ConnectedServiceName: microsoftgraph ESRP CodeSign DLL and NuGet (AKV)
+      FolderPath: ${{ parameters.FolderPath }}
+      Pattern: ${{ parameters.Pattern }}
+      signConfigType: inlineSignParams
+      inlineOperation: |
+        [
+            {
+                "keyCode": "CP-401405",
+                "operationSetCode": "NuGetSign",
+                "parameters": [ ],
+                "toolName": "sign",
+                "toolVersion": "1.0"
+            },
+            {
+                "keyCode": "CP-401405",
+                "operationSetCode": "NuGetVerify",
+                "parameters": [ ],
+                "toolName": "sign",
+                "toolVersion": "1.0"
+            }
+        ]
+      SessionTimeout: 20

.azure-pipelines/common-templates/esrp/codesign.yml

@@ -0,0 +1,59 @@
+# Copyright (c) Microsoft Corporation. All rights reserved.
+# Licensed under the MIT License.
+
+parameters:
+  - name: FolderPath
+    type: string
+    default: $(System.DefaultWorkingDirectory)
+  - name: Pattern
+    type: string
+    default: '.*.dll'
+
+steps:
+  - task: SFP.build-tasks.custom-build-task-1.EsrpCodeSigning@1
+    displayName: ESRP DLL CodeSigning
+    enabled: true
+    inputs:
+      ConnectedServiceName: microsoftgraph ESRP CodeSign DLL and NuGet (AKV)
+      FolderPath: ${{ parameters.FolderPath }}
+      Pattern: ${{ parameters.Pattern }}
+      signConfigType: inlineSignParams
+      inlineOperation: |
+        [
+            {
+                "keyCode": "CP-230012",
+                "operationSetCode": "SigntoolSign",
+                "parameters": [
+                    {
+                        "parameterName": "OpusName",
+                        "parameterValue": "Microsoft"
+                    },
+                    {
+                        "parameterName": "OpusInfo",
+                        "parameterValue": "http://www.microsoft.com"
+                    },
+                    {
+                        "parameterName": "FileDigest",
+                        "parameterValue": "/fd \"SHA256\""
+                    },
+                    {
+                        "parameterName": "PageHash",
+                        "parameterValue": "/NPH"
+                    },
+                    {
+                        "parameterName": "TimeStamp",
+                        "parameterValue": "/tr \"http://rfc3161.gtm.corp.microsoft.com/TSS/HttpTspServer\" /td sha256"
+                    }
+                ],
+                "toolName": "sign",
+                "toolVersion": "1.0"
+            },
+            {
+                "keyCode": "CP-230012",
+                "operationSetCode": "SigntoolVerify",
+                "parameters": [],
+                "toolName": "sign",
+                "toolVersion": "1.0"
+            }
+        ]
+      SessionTimeout: 160

.azure-pipelines/common-templates/esrp/strongname.yml

@@ -0,0 +1,38 @@
+# Copyright (c) Microsoft Corporation. All rights reserved.
+# Licensed under the MIT License.
+
+parameters:
+  - name: FolderPath
+    type: string
+    default: $(System.DefaultWorkingDirectory)
+  - name: Pattern
+    type: string
+    default: '.*.dll'
+
+steps:
+  - task: SFP.build-tasks.custom-build-task-1.EsrpCodeSigning@1
+    displayName: ESRP DLL Strong Name
+    enabled: true
+    inputs:
+      ConnectedServiceName: microsoftgraph ESRP CodeSign DLL and NuGet (AKV)
+      FolderPath: ${{ parameters.FolderPath }}
+      Pattern: ${{ parameters.Pattern }}
+      signConfigType: inlineSignParams
+      inlineOperation: |
+        [
+            {
+                "keyCode": "CP-233863-SN",
+                "operationSetCode": "StrongNameSign",
+                "parameters": [],
+                "toolName": "sign",
+                "toolVersion": "1.0"
+            },
+            {
+                "keyCode": "CP-233863-SN",
+                "operationSetCode": "StrongNameVerify",
+                "parameters": [],
+                "toolName": "sign",
+                "toolVersion": "1.0"
+            }
+        ]
+      SessionTimeout: 20

.azure-pipelines/common-templates/install-tools-template.yml

@@ -3,66 +3,42 @@
 
 steps:
     - task: UseDotNet@2
-      displayName: 'Use .NET Core SDK 2 LTS'
-      inputs:
-        debugMode: false
-        version: 2.x
-
-    - task: UseDotNet@2
-      displayName: 'Use .NET Core SDK 3 LTS'
-      inputs:
-        debugMode: false
-        version: 3.x
-
-    - task: UseDotNet@2
-      displayName: 'Use .NET Core SDK 6 Current'
+      displayName: Use .NET SDK
       inputs:
         debugMode: false
         version: 6.x
 
     - task: NuGetToolInstaller@1
-      displayName: 'Install Nuget 5.7'
-      inputs:
-         versionSpec: 5.7.0
-         checkLatest: false # Optional
+      displayName: Install Nuget
 
     - task: NuGetAuthenticate@0
 
-
     - task: PowerShell@2
-      displayName: 'Version Check'
+      displayName: Version Check
       inputs:
         targetType: inline
         pwsh: true
         script: |
-          Write-Host $PSVersionTable.PSVersion
-          Write-Host $host.Version
-          Write-Host (Get-Host).Version
+          Write-Output $PSVersionTable
 
     - task: NodeTool@0
-      displayName: 'Install NodeJs'
-      inputs:
-        versionSpec: '14.18.2'
-        checkLatest: true # Optional
-
-    - task: Npm@1
-      displayName: 'Install AutoRest'
+      displayName: Install NodeJs
       inputs:
-        command: 'custom'
-        customCommand: 'install -g autorest@latest'
+        versionSpec: 16.x
 
     - task: Npm@1
-      displayName: 'Install Rush'
+      displayName: Install AutoRest
       inputs:
-        command: 'custom'
-        customCommand: 'install -g @microsoft/rush'
+        command: custom
+        customCommand: install -g autorest@latest
 
     - task: PowerShell@2
-      displayName: 'Register PS Repository'
+      displayName: Register PS Repository
+      enabled: false
       inputs:
         targetType: inline
         pwsh: true
-        errorActionPreference: 'continue'
+        errorActionPreference: continue
         script: |
           $ErrorActionPreference = [System.Management.Automation.ActionPreference]::Continue
           Get-PSRepository

.azure-pipelines/common-templates/install-tools.yml

@@ -0,0 +1,55 @@
+# Copyright (c) Microsoft Corporation. All rights reserved.
+# Licensed under the MIT License.
+
+steps:
+    - task: UseDotNet@2
+      displayName: Use .NET SDK
+      inputs:
+        debugMode: false
+        version: 6.x
+
+    - task: NuGetToolInstaller@1
+      displayName: Install Nuget
+
+    - task: NuGetAuthenticate@0
+
+    - task: PowerShell@2
+      displayName: Version Check
+      inputs:
+        targetType: inline
+        pwsh: true
+        script: |
+          Write-Output $PSVersionTable
+
+    - task: NodeTool@0
+      displayName: Install NodeJs
+      inputs:
+        versionSpec: 16.x
+
+    - task: Npm@1
+      displayName: Install AutoRest
+      inputs:
+        command: custom
+        customCommand: install -g autorest@latest
+
+    - task: PowerShell@2
+      displayName: Register PS Repository
+      enabled: false
+      inputs:
+        targetType: inline
+        pwsh: true
+        errorActionPreference: continue
+        script: |
+          $ErrorActionPreference = [System.Management.Automation.ActionPreference]::Continue
+          Get-PSRepository
+          $patToken = '$(NUGETFEEDKEY)' | ConvertTo-SecureString -AsPlainText -Force
+          $nugetFeed = '$(NUGETFEED)'
+          $user = '$(NUGETBUILDUSER)'
+          $credsAzureDevopsServices = New-Object System.Management.Automation.PSCredential($user, $patToken)
+          UnRegister-PackageSource -Name 'LocalNugetPackageSource' -ErrorAction Continue
+          UnRegister-PSRepository -Name 'LocalNugetFeed' -ErrorAction Continue
+          Register-PackageSource -Name 'LocalNugetPackageSource' -Location $nugetFeed -SkipValidate -Trusted -Verbose -ProviderName 'Nuget' -ErrorAction Continue
+          Register-PSRepository -Name 'LocalNugetFeed' -SourceLocation $nugetFeed -PublishLocation $nugetFeed -InstallationPolicy Trusted -Credential $credsAzureDevopsServices -PackageManagementProvider 'Nuget' -ErrorAction Continue
+          Get-PSRepository
+          Find-Module -Name Microsoft.Graph.Authentication -AllowPrerelease -Credential $credsAzureDevopsServices -AllVersions -Repository 'LocalNugetFeed'
+          Find-Module -Name Microsoft.Graph.Authentication -AllowPrerelease -Repository 'LocalNugetFeed'