azure-pipelines.yml

trigger:
- master

name: 'ODataCodeGenTools'

pool:
  vmImage: 'windows-latest'

variables:
  buildPlatform: 'Any CPU'
  buildConfiguration: 'Release'
  connectedServiceDir: '$(Build.SourcesDirectory)'
  sln: '$(connectedServiceDir)\ODataCodeGenTools.sln'
  signigConfigPath: '$(connectedServiceDir)\configs'
  signingConfigFiles: '*.*'
  productBinPath: '$(connectedServiceDir)\src\ODataConnectedService\bin\$(BuildConfiguration)'
  productFiles: 'Microsoft.OData.ConnectedService.*?(*.dll|*.config|*.pdb)'
  productBinPathVs2022Plus: '$(connectedServiceDir)\src\ODataConnectedService_VS2022Plus\bin\$(BuildConfiguration)'
  productFilesVs2022Plus: 'Microsoft.OData.ConnectedService.VS2022Plus.*?(*.dll|*.config|*.pdb)'
  productFilesODataCLI: 'Microsoft.OData.Cli.*?(*.dll|*.config|*.pdb)'
  testBinPath: '$(connectedServiceDir)\test\ODataConnectedService.Tests\bin\$(BuildConfiguration)'
  testBinPathODataCLI: '$(connectedServiceDir)\test\Microsoft.OData.Cli.Tests\bin\$(BuildConfiguration)'
  vsixPath: '$(productBinPath)'
  vsixFile: 'Microsoft.OData.ConnectedService.vsix'
  vsixFileVs2022Plus: 'Microsoft.OData.ConnectedService.VS2022Plus.vsix'
  nupkgFile: 'Microsoft.OData.Cli.nupkg'
  signingFiles: 'Microsoft.OData.ConnectedService.dll'
  signingFilesVs2022Plus: 'Microsoft.OData.ConnectedService.VS2022Plus.dll'
  signingFilesODataCLI: 'Microsoft.OData.Cli.dll'
  mainDll: 'Microsoft.OData.ConnectedService.dll'
  mainDllVs2022Plus: 'Microsoft.OData.ConnectedService.VS2022Plus.dll'
  mainDllODataCLI: 'Microsoft.OData.Cli.dll'
  testDll: 'ODataConnectedService.Tests.dll'
  testDllODataCLI: 'Microsoft.OData.Cli.Tests.dll'
  snExe: 'C:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.8 Tools\sn.exe'
  snExe64: 'C:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.8 Tools\x64\sn.exe'

stages:
- stage: Build

  jobs:
  - job: Build
    steps:

    - task: NuGetToolInstaller@0
      inputs:
        versionSpec: '>=5.2.0'

    - task: NuGetCommand@2
      displayName: 'Nuget restore - ODataCodeGenTools.sln'
      inputs:
        restoreSolution: '$(sln)'

    - task: VSBuild@1
      displayName: 'Build solution - ODataCodeGenTools.sln'
      inputs:
        solution: '$(sln)'
        platform: '$(buildPlatform)'
        configuration: '$(buildConfiguration)'
      
    - task: DotNetCoreCLI@2
      displayName: 'Pack Microsoft.OData.Cli package'
      inputs:
        command: pack
        packagesToPack: src/Microsoft.OData.Cli/Microsoft.OData.Cli.csproj
        outputDir: '$(Build.ArtifactStagingDirectory)\ODataCLINupkg'
        nobuild: true

    - task: VSTest@2
      displayName: 'Unit Tests (ODataConnectedService.Tests)'
      inputs:
        testSelector: 'testAssemblies'
        testAssemblyVer2: '$(testBinPath)\$(testDll)'
        platform: '$(buildPlatform)'
        configuration: '$(buildConfiguration)'
        searchFolder:  '$(System.DefaultWorkingDirectory)'
        resultsFolder: '$(Agent.TempDirectory)\TestResults'
        otherConsoleOptions: '/collect:"Code Coverage;Format=Cobertura"'
        runSettingsFile: '$(Build.SourcesDirectory)\test.runsettings'
        #codeCoverageEnabled: true

    - task: DotNetCoreCLI@2
      displayName: Unit Tests (Microsoft.OData.Cli.Tests)
      inputs:
        command: test
        publishTestResults: false
        projects: $(connectedServiceDir)\test\Microsoft.OData.Cli.Tests\Microsoft.OData.Cli.Tests.csproj
        arguments: '--configuration $(buildConfiguration) --settings $(Build.SourcesDirectory)\test.runsettings --no-build --collect "Code Coverage;Format=Cobertura" --logger trx --results-directory $(Agent.TempDirectory)\TestResults'
        
    - task: CmdLine@2
      displayName: Install ReportGenerator tool for code coverage
      inputs:
        script: dotnet tool install --global dotnet-reportgenerator-globaltool --version 4.5.8

    - task: CmdLine@2
      displayName: Create code coverage report
      inputs:
        script: reportgenerator -reports:$(Agent.TempDirectory)/TestResults/**/*.cobertura.xml -targetdir:$(Build.SourcesDirectory) -reporttypes:"Cobertura"

    # PublishCodeCoverageResults@2 doesn't support line and branch based coverage - https://stackoverflow.com/a/78276341/752739
    - task: PublishCodeCoverageResults@1
      displayName: Publish code coverage
      inputs:
        codeCoverageTool: Cobertura
        summaryFileLocation: $(Build.SourcesDirectory)/Cobertura.xml
    
    - task: CopyFiles@2
      displayName: 'Copy Files - VSIX to Artifacts Staging'
      inputs:
        SourceFolder: '$(productBinPath)'
        Contents: 'Microsoft.OData.ConnectedService.vsix'
        TargetFolder: '$(Build.ArtifactStagingDirectory)\VSIX'
        OverWrite: true

    - task: CopyFiles@2
      displayName: 'Copy Files - 2022plus VSIX to Artifacts Staging'
      inputs:
        SourceFolder: '$(productBinPathVs2022Plus)'
        Contents: 'Microsoft.OData.ConnectedService.VS2022Plus.vsix'
        TargetFolder: '$(Build.ArtifactStagingDirectory)\VSIX2022plus'
        OverWrite: true

    - task: CopyFiles@2
      displayName: 'Copy Files - Stage Product'
      inputs:
        SourceFolder: '$(productBinPath)'
        Contents: '$(productFiles)'
        TargetFolder: '$(Build.ArtifactStagingDirectory)\Product'
        OverWrite: true

    - task: CopyFiles@2
      displayName: 'Copy Files - Stage Product 2022plus'
      inputs:
        SourceFolder: '$(productBinPathVs2022Plus)'
        Contents: '$(productFilesVs2022Plus)'
        TargetFolder: '$(Build.ArtifactStagingDirectory)\Product2022plus'
        OverWrite: true

    - task: PublishBuildArtifacts@1
      displayName: 'Publish Artifact - VSIX'
      inputs:
        PathtoPublish: '$(Build.ArtifactStagingDirectory)\VSIX'
        ArtifactName: 'VSIX'
        publishLocation: 'Container'

    - task: PublishBuildArtifacts@1
      displayName: 'Publish Artifact - VSIX2022Plus'
      inputs:
        PathtoPublish: '$(Build.ArtifactStagingDirectory)\VSIX2022Plus'
        ArtifactName: 'VSIX2022Plus'
        publishLocation: 'Container'
        
    - task: PublishBuildArtifacts@1
      displayName: 'Publish Artifact - ODataCLINupkg'
      inputs:
        PathtoPublish: '$(Build.ArtifactStagingDirectory)\ODataCLINupkg'
        ArtifactName: 'ODataCLINupkg'
        publishLocation: 'Container'
            
    - publish: configs
      displayName: Publish Signing Scripts
      artifact: configs

- stage: CodeSign
  condition: and(succeeded('Build'), not(eq(variables['build.reason'], 'PullRequest')))
  jobs:
  - deployment: CodeSign
    displayName: Code Signing
    pool:
      vmImage: windows-latest    
    environment: Code Sign - Approvals
    variables:
    - group: Code Signing
    strategy:
      runOnce:
        deploy:
          steps:
          - task: DotNetCoreCLI@2
            inputs:
              command: custom
              custom: tool
              arguments: install --tool-path . --prerelease sign
            displayName: Install SignTool tool
          
          # Sign the VSIX archive as well as files contained in the VSIX that are listed in config/filelist.txt
          # For more info about the Sign CLI tool, visit: https://github.com/dotnet/sign
          - task: AzureCLI@2
            inputs:
              azureSubscription: 'Code Signing'
              scriptType: pscore
              scriptLocation: inlineScript
              inlineScript: |
                .\sign code azure-key-vault `
                "**/*.{dll,vsix,zip,nupkg}" `
                --base-directory "$(Pipeline.Workspace)/VSIX" `
                --output "$(Build.ArtifactStagingDirectory)/SignedVSIX" `
                --file-list "$(Pipeline.Workspace)/configs/filelist.txt" `
                --publisher-name "OData Labs" `
                --description "OData Connected Service" `
                --description-url "https://github.com/OData/ODataConnectedService" `
                --azure-key-vault-managed-identity `
                --azure-key-vault-certificate "$(SignKeyVaultCertificate)" `
                --azure-key-vault-url "$(SignKeyVaultUrl)"
            displayName: Code signing - VSIX

          # Publish the signed VSIX as an artifact so we can download it after the build
          - task: PublishBuildArtifacts@1
            displayName: 'Publish Artifact: SignedVSIX'
            inputs:
              PathtoPublish: '$(Build.ArtifactStagingDirectory)/SignedVSIX'
              ArtifactName: 'SignedVSIX'
              publishLocation: 'Container'

- stage: CodeSign2
  condition: and(succeeded('Build'), not(eq(variables['build.reason'], 'PullRequest')))
  jobs:
  - deployment: CodeSign
    displayName: Code Signing
    pool:
      vmImage: windows-latest    
    environment: Code Sign - Approvals
    variables:
    - group: Code Signing
    strategy:
      runOnce:
        deploy:
          steps:
          - task: DotNetCoreCLI@2
            inputs:
              command: custom
              custom: tool
              arguments: install --tool-path . --prerelease sign
            displayName: Install SignTool tool
          
          # Sign the VSIX archive as well as files contained in the VSIX that are listed in config/filelist.txt
          # For more info about the SignClient tool, visit: https://github.com/dotnet/sign
          - task: AzureCLI@2
            inputs:
              azureSubscription: 'Code Signing'
              scriptType: pscore
              scriptLocation: inlineScript
              inlineScript: |
                .\sign code azure-key-vault `
                "**/*.{dll,vsix,zip,nupkg}" `
                --base-directory "$(Pipeline.Workspace)/VSIX2022Plus" `
                --output "$(Build.ArtifactStagingDirectory)/SignedVSIX2022Plus" `
                --file-list "$(Pipeline.Workspace)/configs/filelist.txt" `
                --publisher-name "OData Labs" `
                --description "OData Connected Service 2022+" `
                --description-url "https://github.com/OData/ODataConnectedService" `
                --azure-key-vault-managed-identity `
                --azure-key-vault-certificate "$(SignKeyVaultCertificate)" `
                --azure-key-vault-url "$(SignKeyVaultUrl)"
            displayName: Code signing - VSIX2022Plus

          # Publish the signed VSIX as an artifact so we can download it after the build
          - task: PublishBuildArtifacts@1
            displayName: 'Publish Artifact: SignedVSIX2022Plus'
            inputs:
              PathtoPublish: '$(Build.ArtifactStagingDirectory)/SignedVSIX2022Plus'
              ArtifactName: 'SignedVSIX2022Plus'
              publishLocation: 'Container'

- stage: CodeSignODataCLI
  condition: and(succeeded('Build'), not(eq(variables['build.reason'], 'PullRequest')))
  jobs:
  - deployment: CodeSign
    displayName: Code Signing
    pool:
      vmImage: windows-latest    
    environment: Code Sign - Approvals
    variables:
    - group: Code Signing
    strategy:
      runOnce:
        deploy:
          steps:
          - task: DownloadPipelineArtifact@2
            inputs:
              artifact: 'ODataCLINupkg'
              path: $(Build.ArtifactStagingDirectory)/ODataCLINupkg
          
          - task: PowerShell@2
            inputs:
              targetType: 'inline'
              script: |
                $nupFile = Get-ChildItem -Path "$(Build.ArtifactStagingDirectory)/ODataCLINupkg" -Filter *.nupkg | Select-Object -First 1 -ExpandProperty Name
                Write-Host "Updated nupkgFile value: $nupFile"
                Write-Host "##vso[task.setvariable variable=nupkgFile]$nupFile"

          - task: DotNetCoreCLI@2
            inputs:
              command: custom
              custom: tool
              arguments: install --tool-path . --prerelease sign
            displayName: Install SignTool tool
            
          # Sign the CLI
          # For more info about the Sign CLI tool, visit: https://github.com/dotnet/sign
          - task: AzureCLI@2
            inputs:
              azureSubscription: 'Code Signing'
              scriptType: pscore
              scriptLocation: inlineScript
              inlineScript: |
                .\sign code azure-key-vault `
                "**/*.{{dll,exe,zip,nupkg}}" `
                --base-directory "$(Pipeline.Workspace)\ODataCLINupkg" `
                --output "$(Build.ArtifactStagingDirectory)\SignedODataCLINupkg" `
                --file-list "$(Pipeline.Workspace)\configs\filelist.txt" `
                --publisher-name "OData Labs" `
                --description "OData CLI" `
                --description-url "https://github.com/OData/ODataConnectedService" `
                --azure-key-vault-managed-identity `
                --azure-key-vault-certificate "$(SignKeyVaultCertificate)" `
                --azure-key-vault-url "$(SignKeyVaultUrl)"
            displayName: Code signing - ODataCLINupkg              

          # Publish the signed CLI as an artifact so we can download it after the build
          - task: PublishBuildArtifacts@1
            displayName: 'Publish Artifact - Nuget Packages'
            inputs:
              PathtoPublish: '$(Build.ArtifactStagingDirectory)\SignedODataCLINupkg'
              ArtifactName: SignedODataCLINupkg
              publishLocation: 'Container'