Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update build pipeline to auth with OpenId and use actions with Node.js 20 #198

Merged
merged 8 commits into from
Jun 11, 2024
Merged

Update build pipeline to auth with OpenId and use actions with Node.js 20 #198

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
70e8f02
Update buildPipeline.yml
FranciscoJavierOrtegaPalacios Mar 22, 2024
22ac8f2
Update pipeline to auth with OpenID
FranciscoJavierOrtegaPalacios Apr 2, 2024
dc58da1
Updating actions to use a version that uses Node.js 20
FranciscoJavierOrtegaPalacios Apr 17, 2024
ef28640
Updating actions to use a version that uses Node.js 20
FranciscoJavierOrtegaPalacios Apr 17, 2024
5dbfe11
Updated action to refresh auth token every execution
FranciscoJavierOrtegaPalacios Apr 17, 2024
c166889
Update action to refresh auth token each execution
FranciscoJavierOrtegaPalacios Apr 17, 2024
3d4c9c8
Remove auth refresh from action
FranciscoJavierOrtegaPalacios Apr 17, 2024
85a70dd
Empty PR to trigger the pipeline
FranciscoJavierOrtegaPalacios Jun 10, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions .github/actions/actionAzVmRunCommand/action.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ description: "This action uses az vm run-command in order to execute a command i
# WARNING: This action ONLY checks the exit code of the last command. If your script input is made of multiple commands,
# make sure that a failure early results in the last command failing or not executing, otherwise it could mask errors.
# Some options to do this include using [set -euo pipeline] or equivalents, or using the && operator to connect console commands
# WARNING: This action hasn't been tested with script files.
# WARNING: This action hasn't been tested with script files.
inputs:
commandName:
description: "Name of the command to execute"
Expand All @@ -15,10 +15,10 @@ inputs:
required: true
runs:
using: "composite"
steps:
steps:
- name: Execute the command in Linux
if: ${{ env.os == 'linux' }}
uses: azure/CLI@v1
uses: azure/CLI@v2
with:
inlineScript: |
az vm run-command create \
Expand Down
56 changes: 33 additions & 23 deletions .github/workflows/buildPipeline.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,9 @@ on:
pull_request:
branches: [ "master" ]

permissions:
id-token: write
contents: read

# A workflow run is made up of one or more jobs that can run sequentially or in parallel
jobs:
Expand Down Expand Up @@ -41,16 +44,17 @@ jobs:
rgName: dcap-github-actions-agents-rg
location: ${{ matrix.location }}
branchName: ${{ github.head_ref }}


# Steps represent a sequence of tasks that will be executed as part of the job
steps:
# Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
- uses: actions/checkout@v3
- uses: actions/checkout@v4

- uses: azure/login@v1
- uses: azure/login@v2
with:
creds: ${{ secrets.AZURE_CREDENTIALS }}
client-id: ${{ secrets.AZURE_CLIENT_ID }}
tenant-id: ${{ secrets.AZURE_TENANT_ID }}
subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}

- name: Create VM
uses: azure/CLI@v1
Expand Down Expand Up @@ -215,7 +219,7 @@ jobs:

- name: Cleanup
if: always()
uses: azure/CLI@v1
uses: azure/CLI@v2
with:
inlineScript: |
az vm delete \
Expand Down Expand Up @@ -258,14 +262,16 @@ jobs:
# Steps represent a sequence of tasks that will be executed as part of the job
steps:
# Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
- uses: actions/checkout@v3
- uses: actions/checkout@v4

- uses: azure/login@v1
- uses: azure/login@v2
with:
creds: ${{ secrets.AZURE_CREDENTIALS }}
client-id: ${{ secrets.AZURE_CLIENT_ID }}
tenant-id: ${{ secrets.AZURE_TENANT_ID }}
subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}

- name: Start VM
uses: azure/CLI@v1
uses: azure/CLI@v2
with:
inlineScript: |
az vm start \
Expand All @@ -276,7 +282,7 @@ jobs:
run: sleep 60

- name: Clone the DCAP repo after cleaning up the previous execution
uses: azure/CLI@v1
uses: azure/CLI@v2
with:
inlineScript: |
az vm run-command create \
Expand All @@ -294,7 +300,7 @@ jobs:
if [[ "$result" == *"DCAP_Build_Step_Successfully_Completed"* ]]; then echo "Step successfully executed"; else exit 1; fi

- name: Build Azure DCAP
uses: azure/CLI@v1
uses: azure/CLI@v2
with:
inlineScript: |
az vm run-command create \
Expand All @@ -312,7 +318,7 @@ jobs:
if [[ "$result" == *"DCAP_Build_Step_Successfully_Completed"* ]]; then echo "Step successfully executed"; else exit 1; fi

- name: Run Azure DCAP unit tests
uses: azure/CLI@v1
uses: azure/CLI@v2
with:
inlineScript: |
az vm run-command create \
Expand All @@ -331,7 +337,7 @@ jobs:

- name: Stop VM
if: always()
uses: azure/CLI@v1
uses: azure/CLI@v2
with:
inlineScript: |
az vm deallocate \
Expand Down Expand Up @@ -368,14 +374,16 @@ jobs:
# Steps represent a sequence of tasks that will be executed as part of the job
steps:
# Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
- uses: actions/checkout@v3
- uses: actions/checkout@v4

- uses: azure/login@v1
- uses: azure/login@v2
with:
creds: ${{ secrets.AZURE_CREDENTIALS }}
client-id: ${{ secrets.AZURE_CLIENT_ID }}
tenant-id: ${{ secrets.AZURE_TENANT_ID }}
subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}

- name: Create VM
uses: azure/CLI@v1
uses: azure/CLI@v2
with:
inlineScript: |
az vm create \
Expand Down Expand Up @@ -513,7 +521,7 @@ jobs:

- name: Cleanup
if: always()
uses: azure/CLI@v1
uses: azure/CLI@v2
with:
inlineScript: |
az vm delete \
Expand Down Expand Up @@ -561,14 +569,16 @@ jobs:
# Steps represent a sequence of tasks that will be executed as part of the job
steps:
# Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
- uses: actions/checkout@v3
- uses: actions/checkout@v4

- uses: azure/login@v1
- uses: azure/login@v2
with:
creds: ${{ secrets.AZURE_CREDENTIALS }}
client-id: ${{ secrets.AZURE_CLIENT_ID }}
tenant-id: ${{ secrets.AZURE_TENANT_ID }}
subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}

- name: Create VM
uses: azure/CLI@v1
uses: azure/CLI@v2
with:
inlineScript: |
az vm create \
Expand Down Expand Up @@ -731,7 +741,7 @@ jobs:

- name: Cleanup
if: always()
uses: azure/CLI@v1
uses: azure/CLI@v2
with:
inlineScript: |
az vm delete \
Expand Down
Loading