95 lines
2.3 KiB
YAML
95 lines
2.3 KiB
YAML
name: $(Rev:r)
|
|
|
|
trigger:
|
|
branches:
|
|
include:
|
|
- master
|
|
|
|
pr: none
|
|
|
|
variables:
|
|
rConnection: 'mc-java-sc'
|
|
storageAccount: 'pistonprod'
|
|
keyVault: 'mc-java-vault'
|
|
|
|
jobs:
|
|
- job: 'Build'
|
|
displayName: 'Build for release'
|
|
|
|
pool: 'MC-Build-1ES-Azure-Pipeline-Linux'
|
|
container: adoptopenjdk/openjdk8:latest
|
|
|
|
workspace:
|
|
clean: all
|
|
|
|
steps:
|
|
- task: Gradle@2
|
|
displayName: Build and Test
|
|
inputs:
|
|
workingDirectory: ''
|
|
gradleWrapperFile: 'gradlew'
|
|
gradleOptions: '-Xmx3072m'
|
|
options: '-PbuildNumber=$(Build.BuildNumber)'
|
|
javaHomeOption: 'JDKVersion'
|
|
jdkUserInputPath: '/usr/java/openjdk-8'
|
|
testResultsFiles: '**/TEST-*.xml'
|
|
tasks: 'build test publish report'
|
|
|
|
# This is a workaround for ComponentGovernanceComponentDetection@0 not recognizing the generated `.pom` file(s)
|
|
- task: Bash@3
|
|
displayName: Copy pom for component governance
|
|
inputs:
|
|
targetType: 'inline'
|
|
script: |
|
|
pompath=`find build/repo -name *.pom`
|
|
cp "${pompath}" build/pom.xml
|
|
|
|
- task: ComponentGovernanceComponentDetection@0
|
|
inputs:
|
|
scanType: 'Register'
|
|
verbosity: 'Verbose'
|
|
alertWarningLevel: 'High'
|
|
|
|
- publish: 'build/repo/'
|
|
artifact: repo
|
|
|
|
- job: 'Publish'
|
|
displayName: 'Publish release'
|
|
dependsOn: Build
|
|
condition: eq(variables['Build.SourceBranch'], 'refs/heads/master')
|
|
|
|
pool: 'MC-Build-1ES-Azure-Pipeline-Linux'
|
|
|
|
workspace:
|
|
clean: all
|
|
|
|
steps:
|
|
- download: current
|
|
artifact: repo
|
|
|
|
- task: AzureKeyVault@1
|
|
displayName: 'Fetching secrets'
|
|
name: secrets
|
|
inputs:
|
|
azureSubscription: '$(rConnection)'
|
|
KeyVaultName: '$(keyVault)'
|
|
SecretsFilter: 'aws-access-key-id, aws-secret-access-key, pistonprod-access-key'
|
|
RunAsPreJob: false
|
|
|
|
- task: S3Upload@1
|
|
env:
|
|
AWS_ACCESS_KEY_ID: '$(aws-access-key-id)'
|
|
AWS_SECRET_ACCESS_KEY: '$(aws-secret-access-key)'
|
|
inputs:
|
|
bucketName: 'minecraft-libraries'
|
|
globExpressions: '**'
|
|
sourceFolder: '$(Pipeline.Workspace)/repo'
|
|
|
|
- task: AzureCLI@2
|
|
displayName: Azure CLI
|
|
inputs:
|
|
azureSubscription: '$(rConnection)'
|
|
scriptType: 'bash'
|
|
scriptLocation: 'inlineScript'
|
|
inlineScript: |
|
|
az storage blob upload-batch -s '$(Pipeline.Workspace)/repo' -d libraries --account-name $(storageAccount) --account-key $(pistonprod-access-key)
|