azure-pipelines.yml

pr: none

trigger:
  branches:
    include: ['*']
  tags:
    include: ['v*.*.*']

variables:
  - group: global-variables

resources:
  repositories:
    - repository: templates
      type: github
      endpoint: mx51
      name: mx51/azure-cicd-templates
      ref: refs/heads/master

stages:

# Build and Release stage
- stage: build_and_release
  jobs:
  - job: Build
    pool: shared
    steps:
    - script: make setup
      displayName: "Create venv and install packages"

    - script: |
        VERSION=$( ./determine-version.sh )
        echo make docker-dist version=$VERSION
        make docker-dist version=$VERSION
      displayName: "Build docker image"

    - template: partials/sysdig-scan.yml@templates
      parameters:
        sysdigUrl: $(SYSDIG_URL)
        sysdigKey: $(SYSDIG_KEY)
        sysdigProjectEnvFile: ".env"
        sysdigPlatformTag: ""
        sysdigScanDebugImage: false
        sysdigFailBuild: true
        sysdigVerboseLogging: false

    - ${{ if startsWith(variables['build.sourceBranch'], 'refs/tags/v') }}:
      - script: |
          $( awsume-role.sh )
          aws ecr-public get-login-password --region us-east-1 | docker login --username AWS --password-stdin public.ecr.aws
        env:
          AWS_ROLE_ARN: $(ASSUMED_ROLE)
          EXPORT: true
        displayName: "Perform docker login"

      - script: |
          source .env
          VERSION=$( ./determine-version.sh )
          echo docker push $IMAGE_NMAE:$VERSION
          docker push $IMAGE_NAME:$VERSION
          docker push $IMAGE_NAME:latest
        displayName: "Release docker image"

      - script: docker logout public.ecr.aws
        condition: always()
        displayName: "Perform docker logout"