Add internal build access to pack and sign jobs (#7407)

dotnet · Oct 3, 2024 · 56ce405 · 56ce405
1 parent 2862028
commit 56ce405
Show file tree

Hide file tree

Showing 2 changed files with 38 additions and 4 deletions.
diff --git a/eng/pipelines/jobs/pack-sign-publish.yml b/eng/pipelines/jobs/pack-sign-publish.yml
@@ -15,6 +15,15 @@ jobs:
     variables:
     - _BuildConfig: Release
     - _SignType: real
+    - group: DotNet-MSRC-Storage
+    - _InternalBuildArgs: ''
+    - _InternalInstallArgs: >-
+        -RuntimeSourceFeed https://dotnetclimsrc.blob.core.windows.net/dotnet
+        -RuntimeSourceFeedKey $(dotnetclimsrc-read-sas-token-base64)
+    - ${{ if notin(variables['Build.Reason'], 'PullRequest') }}:
+      - _InternalBuildArgs: >-
+          /p:TeamName=$(_TeamName)
+          /p:OfficialBuildId=$(BUILD.BUILDNUMBER)
     steps:
     - task: DownloadPipelineArtifact@2
       displayName: Download Binaries
@@ -31,13 +40,20 @@ jobs:
       inputs:
         artifactName: 'THIRD-PARTY-NOTICES'
         targetPath: '$(Build.SourcesDirectory)'
+    - task: PowerShell@2
+      displayName: Setup Private Feeds Credentials
+      inputs:
+        filePath: $(Build.SourcesDirectory)/eng/common/SetupNugetSources.ps1
+        arguments: -ConfigFile $(Build.SourcesDirectory)/NuGet.config -Password $Env:Token
+      env:
+        Token: $(dn-bot-dnceng-artifact-feeds-rw)
     - script: >-
         $(Build.SourcesDirectory)/eng/cipacksignpublish.cmd
-        /p:TeamName=$(_TeamName)
-        /p:OfficialBuildId=$(BUILD.BUILDNUMBER)
         /p:DotNetSignType=real
         /p:DotNetPublishUsingPipelines=true
         /p:ThirdPartyNoticesFilePath='$(Build.SourcesDirectory)/$(_TPNFile)'
+        $(_InternalInstallArgs)
+        $(_InternalBuildArgs)
       displayName: Pack, Sign, and Publish
     # Intentionally copying file as "dotnet-monitor.nupkg.buildversion" for back compat
     - task: powershell@2

diff --git a/eng/pipelines/jobs/sign-binaries.yml b/eng/pipelines/jobs/sign-binaries.yml
@@ -15,6 +15,16 @@ jobs:
     variables:
     - _BuildConfig: ${{ parameters.configuration }}
     - _SignType: real
+    - group: DotNet-MSRC-Storage
+    - _InternalBuildArgs: ''
+    - _InternalInstallArgs: >-
+        -RuntimeSourceFeed https://dotnetclimsrc.blob.core.windows.net/dotnet
+        -RuntimeSourceFeedKey $(dotnetclimsrc-read-sas-token-base64)
+
+    - ${{ if notin(variables['Build.Reason'], 'PullRequest') }}:
+      - _InternalBuildArgs: >-
+          /p:TeamName=$(_TeamName)
+          /p:OfficialBuildId=$(BUILD.BUILDNUMBER)
 
     steps:
     - task: DownloadPipelineArtifact@2
@@ -23,6 +33,14 @@ jobs:
         artifactName: Build_Published_${{ parameters.configuration }}
         targetPath: '$(Build.SourcesDirectory)/artifacts'
 
+    - task: PowerShell@2
+      displayName: Setup Private Feeds Credentials
+      inputs:
+        filePath: $(Build.SourcesDirectory)/eng/common/SetupNugetSources.ps1
+        arguments: -ConfigFile $(Build.SourcesDirectory)/NuGet.config -Password $Env:Token
+      env:
+        Token: $(dn-bot-dnceng-artifact-feeds-rw)
+
     - script: >-
         $(Build.SourcesDirectory)/restore.cmd
         -configuration ${{ parameters.configuration }}
@@ -32,10 +50,10 @@ jobs:
         -sign
         -nobl
         /bl:'$(Build.SourcesDirectory)\artifacts\log\Release\SignBinaries.binlog'
-        /p:TeamName=$(_TeamName)
-        /p:OfficialBuildId=$(BUILD.BUILDNUMBER)
         /p:DotNetSignType=real
         /p:SignAllBinaries=true
+        $(_InternalInstallArgs)
+        $(_InternalBuildArgs)
       displayName: Sign
 
     - task: CopyFiles@2