Skip to content
Build and test

Update build pipeline to auth with OpenId and use actions with Node.js 20 #438

Sign in to view logs

Update build pipeline to auth with OpenId and use actions with Node.js 20

Update build pipeline to auth with OpenId and use actions with Node.js 20 #438

Workflow file for this run

.github/workflows/buildPipeline.yml at dc58da1
# This is a basic workflow to help you get started with Actions
name: Build and test
# Controls when the workflow will run
on:
# Triggers the workflow on pull request events but only for the "master" branch
pull_request:
branches: [ "master" ]
permissions:
id-token: write
contents: read
# A workflow run is made up of one or more jobs that can run sequentially or in parallel
jobs:
# This job tests running on hardware with a custom path to libdcap_quoteprov.so
ACCTest:
strategy:
# Launch a VM and build once per each combination of linux image, VM size and buildType
max-parallel: 1
matrix:
sizeName: [IceLake, CoffeeLake]
imageName: ["Ubuntu20_04"]
buildType: [RelWithDebInfo, Debug]
include:
- imageUrn: "Canonical:0001-com-ubuntu-server-focal:20_04-lts-gen2:latest"
imageName: Ubuntu20_04
- sizeName: CoffeeLake
size: Standard_DC4s_v2
location: uksouth
- sizeName: IceLake
size: Standard_DC4s_v3
location: westus
# OS of the Github VM calling Azure CLI
runs-on: ubuntu-latest
# Job environment variables
env:
os: linux
vmName: dcapACCTestBuildVM${{ github.run_number }}${{ matrix.sizeName }}${{ matrix.imageName }}${{ matrix.buildType }}
rgName: dcap-github-actions-agents-rg
location: ${{ matrix.location }}
branchName: ${{ github.head_ref }}
# Steps represent a sequence of tasks that will be executed as part of the job
steps:
# Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
- uses: actions/checkout@v4
- uses: azure/login@v2
with:
client-id: ${{ secrets.AZURE_CLIENT_ID }}
tenant-id: ${{ secrets.AZURE_TENANT_ID }}
subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
- name: Create VM
uses: azure/CLI@v1
with:
inlineScript: |
az vm create \
--resource-group $rgName \
--name $vmName \
--image ${{ matrix.imageUrn }} \
--size ${{ matrix.size }} \
--location ${{ matrix.location }} \
--admin-username ${{ secrets.BUILD_VM_USERNAME }} \
--admin-password ${{ secrets.BUILD_VM_PASSWORD }} \
--nic-delete-option delete \
--os-disk-delete-option delete \
--public-ip-sku Standard
- name: Sleep to let the VM start
run: sleep 60
- name: Install software properties common
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "installSoftwarePropertiesCommon"
script: "sudo apt-get install software-properties-common -y"
- name: Add ppa repository
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "addPpaRepository"
script: "sudo add-apt-repository ppa:team-xbmc/ppa -y"
- name: Update apt-get
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "updateAptGet"
script: "sudo apt-get update -y"
- name: Install libSSL
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "installLibSSL"
script: "sudo apt-get install libssl-dev -y"
- name: Install openSSL
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "installOpenSSL"
script: "sudo apt-get install libcurl4-openssl-dev -y"
- name: Install PkgConfig
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "installPkgConfig"
script: "sudo apt-get install pkg-config -y"
- name: Install buildEssential
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "installBuildEssential"
script: "sudo apt-get install build-essential -y"
- name: Install nlohmann json
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "installNlohmannJson"
script: "sudo apt-get install nlohmann-json3-dev -y"
- name: Install sqlite3
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "installSqlite3"
script: "sudo apt-get install sqlite3 -y"
- name: Install sqlite3 dev
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "installSqlite3Dev"
script: "sudo apt-get install libsqlite3-dev -y"
- name: Install CMake
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "installCMake"
script: "sudo apt-get install cmake -y"
- name: Clone Azure DCAP
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "cloneAzureDcap"
script: "sudo git clone -b $branchName https://github.com/microsoft/Azure-DCAP-Client.git /AzureDCAP"
- name: Update DCAP submodule
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "updateSubmodule"
script: "cd /AzureDCAP && sudo git submodule update --init --recursive"
- name: Configure Azure DCAP
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "configureAzureDcap"
script: "cd /AzureDCAP/src/Linux && sudo ./configure"
- name: Make Azure DCAP
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "makeAzureDcap"
script: "cd /AzureDCAP/src/Linux && sudo make"
- name: Clone openenclave
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "cloneOpenEnclave"
script: "sudo git clone --recursive https://github.com/openenclave/openenclave.git /openenclave"
- name: Update openenclave submodule
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "updateOpenEnclaveSubmodule"
script: "mkdir /openenclave/build && cd /openenclave/build && sudo git submodule update --recursive --init"
- name: Install Ansible
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "installAnsible"
script: "cd /openenclave && sudo scripts/ansible/install-ansible.sh"
- name: Setup ACC
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "setupACC"
script: "cd /openenclave && sudo ansible-playbook scripts/ansible/oe-contributors-acc-setup.yml"
- name: CMake openenclave with ninja
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "cmakeOpenEnclave"
script: "cd /openenclave/build && sudo cmake /openenclave -G Ninja -DCMAKE_BUILD_TYPE=${{ matrix.buildType }}"
- name: Make openenclave with ninja
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "makeOpenEnclave"
script: "cd /openenclave/build && sudo ninja -v"
- name: Run openenclave tests excluding samples test
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "testOpenEnclave"
script: "export AZDCAP_REGION_URL=\"thimt2-dev-cbn01p\" && export AZDCAP_BASE_CERT_URL_TDX=\".thim.azure-test.net/sgx/certification\" && cd /openenclave/build && LD_LIBRARY_PATH=/AzureDCAP/src/Linux ctest --output-on-failure -E samples"
- name: Run openenclave samples test
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "testOpenEnclaveSamples"
script: "cd /openenclave/build && sudo LD_LIBRARY_PATH=/AzureDCAP/src/Linux ctest --output-on-failure -R samples"
- name: If the build fails, keep the VM alive for 4 hours for debugging purposes
if: failure()
run: sleep 4h
- name: Cleanup
if: always()
uses: azure/CLI@v2
with:
inlineScript: |
az vm delete \
-g $rgName \
-n $vmName \
--yes
az resource delete \
-g $rgName \
-n ${{ env.vmName }}NSG \
--resource-type "Microsoft.Network/networkSecurityGroups"
az resource delete \
-g $rgName \
-n ${{ env.vmName }}PublicIP \
--resource-type "Microsoft.Network/publicIPAddresses"
# Test DCAP build process in Windows
DCAPWindowsBuildTest:
strategy:
# Launch a VM and build once per each buildType
# Since we only have one persistent VM to perform the windows jobs, max-parallel should always be one.
max-parallel: 1
matrix:
buildType: [Release, Debug]
# OS of the Github VM calling Azure CLI
runs-on: ubuntu-latest
# Job environment variables
env:
os: windows
#Windows VM name must be within 15 characters
vmName: winBuildPers
rgName: dcap-github-actions-agents-rg
location: northeurope
branchName: ${{ github.head_ref }}
# Steps represent a sequence of tasks that will be executed as part of the job
steps:
# Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
- uses: actions/checkout@v4
- uses: azure/login@v2
with:
client-id: ${{ secrets.AZURE_CLIENT_ID }}
tenant-id: ${{ secrets.AZURE_TENANT_ID }}
subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
- name: Start VM
uses: azure/CLI@v2
with:
inlineScript: |
az vm start \
--resource-group $rgName \
--name $vmName
- name: Sleep to let the VM start
run: sleep 60
- name: Clone the DCAP repo after cleaning up the previous execution
uses: azure/CLI@v2
with:
inlineScript: |
az vm run-command create \
--resource-group $rgName \
--vm-name $vmName \
--location $location \
--name "cloneDcap" \
--script "C:/dcapBuild/DCAPCloneMain.ps1 -repo https://github.com/microsoft/Azure-DCAP-Client.git -branch $branchName"
- name: Get the result of cloning the repository
shell: bash
run: |
result=$(az vm run-command show --resource-group $rgName --vm-name $vmName --name "cloneDcap" --instance-view)
echo -e "$result"
if [[ "$result" == *"DCAP_Build_Step_Successfully_Completed"* ]]; then echo "Step successfully executed"; else exit 1; fi
- name: Build Azure DCAP
uses: azure/CLI@v2
with:
inlineScript: |
az vm run-command create \
--resource-group $rgName \
--vm-name $vmName \
--location $location \
--name "buildDcap" \
--script "C:/dcapBuild/DCAPBuildMain.ps1 -BuildType ${{ matrix.buildType }}"
- name: Get the result of building dcap
shell: bash
run: |
result=$(az vm run-command show --resource-group $rgName --vm-name $vmName --name "buildDcap" --instance-view)
echo -e "$result"
if [[ "$result" == *"DCAP_Build_Step_Successfully_Completed"* ]]; then echo "Step successfully executed"; else exit 1; fi
- name: Run Azure DCAP unit tests
uses: azure/CLI@v2
with:
inlineScript: |
az vm run-command create \
--resource-group $rgName \
--vm-name $vmName \
--location $location \
--name "unitTestDcap" \
--script "C:/dcapBuild/DCAPUnitTestsMain.ps1 -BuildType ${{ matrix.buildType }}"
- name: Get the result of the unit tests
shell: bash
run: |
result=$(az vm run-command show --resource-group $rgName --vm-name $vmName --name "unitTestDcap" --instance-view)
echo -e "$result"
if [[ "$result" == *"DCAP_Build_Step_Successfully_Completed"* ]]; then echo "Step successfully executed"; else exit 1; fi
- name: Stop VM
if: always()
uses: azure/CLI@v2
with:
inlineScript: |
az vm deallocate \
--resource-group $rgName \
--name $vmName
# This job runs DCAP end to end tests
DCAPE2ETest:
strategy:
# Launch a VM and build once per each combination of linux image, VM size and buildType
max-parallel: 1
matrix:
sizeName: [CoffeeLake]
imageName: ["Ubuntu20_04"]
include:
- imageUrn: "Canonical:0001-com-ubuntu-server-focal:20_04-lts-gen2:latest"
imageName: Ubuntu20_04
- sizeName: CoffeeLake
size: Standard_DC4s_v2
location: westus
# OS of the Github VM calling Azure CLI
runs-on: ubuntu-latest
# Job environment variables
env:
os: linux
vmName: dcapE2ETestBuildVM${{ github.run_number }}${{ matrix.sizeName }}${{ matrix.imageName }}
rgName: dcap-github-actions-agents-rg
branchName: ${{ github.head_ref }}
# Steps represent a sequence of tasks that will be executed as part of the job
steps:
# Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
- uses: actions/checkout@v4
- uses: azure/login@v2
with:
client-id: ${{ secrets.AZURE_CLIENT_ID }}
tenant-id: ${{ secrets.AZURE_TENANT_ID }}
subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
- name: Create VM
uses: azure/CLI@v2
with:
inlineScript: |
az vm create \
--resource-group $rgName \
--name $vmName \
--image ${{ matrix.imageUrn }} \
--size ${{ matrix.size }} \
--location ${{ matrix.location }} \
--admin-username ${{ secrets.BUILD_VM_USERNAME }} \
--admin-password ${{ secrets.BUILD_VM_PASSWORD }} \
--nic-delete-option delete \
--os-disk-delete-option delete \
--public-ip-sku Standard
- name: Sleep to let the VM start
run: sleep 60
- name: Update apt-get
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "updateAptGet"
script: "sudo apt-get update -y"
- name: Install libSSL
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "installLibSSL"
script: "sudo apt-get install libssl-dev -y"
- name: Install openSSL
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "installOpenSSL"
script: "sudo apt install libcurl4-openssl-dev -y"
- name: Install PkgConfig
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "installPkgConfig"
script: "sudo apt-get install pkg-config -y"
- name: Install buildEssential
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "installBuildEssential"
script: "sudo apt install build-essential -y"
- name: Install nlohmann json
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "installNlohmannJson"
script: "sudo apt-get install nlohmann-json3-dev -y"
- name: Install sqlite3
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "installSqlite3"
script: "sudo apt-get install sqlite3 -y"
- name: Install sqlite3 dev
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "installSqlite3Dev"
script: "sudo apt-get install libsqlite3-dev -y"
- name: Install libgtest
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "installLibgtest"
script: "sudo apt-get install libgtest-dev -y"
- name: Install CMake
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "installCMake"
script: "sudo apt-get install cmake -y"
- name: Install Google test
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "installGoogleTest"
script: "cd /usr/src/gtest && sudo cmake CMakeLists.txt && sudo make && cd lib && sudo cp *.a /usr/lib"
- name: Clone Azure DCAP
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "cloneAzureDcap"
script: "git clone -b $branchName https://github.com/microsoft/Azure-DCAP-Client.git /AzureDCAP"
- name: Update submodule
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "updateSubmodule"
script: "cd /AzureDCAP && git submodule update --init --recursive"
- name: Configure Azure DCAP
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "configureAzureDcap"
script: "cd /AzureDCAP/src/Linux && ./configure"
- name: Make Azure DCAP
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "makeAzureDcap"
script: "cd /AzureDCAP/src/Linux && make"
- name: Make Install Azure DCAP
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "makeInstallAzureDcap"
script: "cd /AzureDCAP/src/Linux && sudo make install"
- name: CMake DCAP tests
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "cmakeDcapTests"
script: "cd /AzureDCAP/src/Linux && cmake CMakeLists.txt"
- name: Make DCAP tests
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "makeDcapTests"
script: "cd /AzureDCAP/src/ && sudo cp sgx_ql_lib_common.h /usr/include/ && cd /AzureDCAP/src/Linux/ext/intel/ && sudo cp * /usr/include/ && cd ../.. && make"
- name: Run DCAP tests
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "runDcapTests"
script: "cd /AzureDCAP/src/Linux && sudo /sbin/ldconfig -v && ./dcap_provider_utests"
- name: If the build fails, keep the VM alive for 4 hours for debugging purposes
if: failure()
run: sleep 4h
- name: Cleanup
if: always()
uses: azure/CLI@v2
with:
inlineScript: |
az vm delete \
-g $rgName \
-n $vmName \
--yes
az resource delete \
-g $rgName \
-n ${{ env.vmName }}NSG \
--resource-type "Microsoft.Network/networkSecurityGroups"
az resource delete \
-g $rgName \
-n ${{ env.vmName }}PublicIP \
--resource-type "Microsoft.Network/publicIPAddresses"
# This job runs DCAP end to end tests
# Mariner is based on Fedora and requires different commands from Ubuntu
MarinerBuild:
strategy:
# Launch a VM and build once per each combination of linux image, VM size and buildType
max-parallel: 1
matrix:
sizeName: [CoffeeLake]
imageName: ["Mariner"]
buildType: [RelWithDebInfo, Debug]
include:
- imageUrn: "MicrosoftCBLMariner:cbl-mariner:cbl-mariner-2-gen2:latest"
imageName: Mariner
- sizeName: CoffeeLake
size: Standard_DC4s_v2
location: uksouth
# OS of the Github VM calling Azure CLI
runs-on: ubuntu-latest
# Job environment variables
env:
os: linux
vmName: dcapACCTestBuildVM${{ github.run_number }}${{ matrix.imageName }}${{ matrix.buildType }}
rgName: dcap-github-actions-agents-rg
branchName: ${{ github.head_ref }}
# Steps represent a sequence of tasks that will be executed as part of the job
steps:
# Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
- uses: actions/checkout@v4
- uses: azure/login@v2
with:
client-id: ${{ secrets.AZURE_CLIENT_ID }}
tenant-id: ${{ secrets.AZURE_TENANT_ID }}
subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
- name: Create VM
uses: azure/CLI@v2
with:
inlineScript: |
az vm create \
--resource-group $rgName \
--name $vmName \
--image ${{ matrix.imageUrn }} \
--size ${{ matrix.size }} \
--location ${{ matrix.location }} \
--admin-username ${{ secrets.BUILD_VM_USERNAME }} \
--admin-password ${{ secrets.BUILD_VM_PASSWORD }} \
--nic-delete-option delete \
--os-disk-delete-option delete \
--public-ip-sku Standard \
--os-disk-size-gb 10
- name: Sleep to let the VM start
run: sleep 60
- name: Update packages through dnf
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "dnfUpgrade"
script: "sudo dnf upgrade -y"
- name: Install kernel devel, automake, glibc, glibc-devel and libSSL
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "installPrerequisites1"
script: "sudo dnf install kernel-devel -y && sudo dnf install automake -y && sudo dnf install glibc -y && sudo dnf install glibc-devel -y && sudo dnf install openssl-devel -y"
- name: Install openSSL
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "installOpenSSL"
script: "sudo dnf install libcurl-devel -y"
- name: Install PkgConfig
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "installPkgConfig"
script: "sudo dnf install pkg-config -y"
- name: Install nlohmann json
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "installNlohmannJson"
script: "sudo dnf install nlohmann-json-devel -y"
- name: Install sqlite3
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "installSqlite3"
script: "sudo dnf install sqlite -y"
- name: Install sqlite3 dev
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "installSqlite3Dev"
script: "sudo dnf install sqlite-devel -y"
- name: Install git
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "installGit"
script: "sudo dnf install git -y"
- name: Install CMake
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "installCMake"
script: "sudo dnf install cmake -y"
- name: Install kernel-headers
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "installKernelHeaders"
script: 'sudo dnf install kernel-headers -y'
- name: Install binutils
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "installBinutils"
script: 'sudo dnf install binutils -y'
- name: Clone GoogleTest
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "cloneGoogleTest"
script: 'sudo git clone https://github.com/google/googletest.git /GoogleTest'
- name: CMake GoogleTest
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "cmakeGoogleTest"
script: "cd /GoogleTest && sudo mkdir build && cd build && sudo cmake .."
- name: Make GoogleTest
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "makeGoogleTest"
script: "cd /GoogleTest/build && sudo make"
- name: Make Install GoogleTest
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "makeInstallGoogleTest"
script: "cd /GoogleTest/build && sudo make install"
- name: Clone Azure DCAP
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "cloneAzureDcap"
script: "sudo git clone -b $branchName https://github.com/microsoft/Azure-DCAP-Client.git /AzureDCAP"
- name: Update DCAP submodule
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "updateSubmodule"
script: "cd /AzureDCAP && sudo git submodule update --init --recursive"
- name: Configure Azure DCAP
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "configureAzureDcap"
script: "cd /AzureDCAP/src/Linux && sudo ./configure"
- name: Make Azure DCAP
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "makeAzureDcap"
script: "cd /AzureDCAP/src/Linux && sudo make"
- name: Make Install Azure DCAP
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "makeInstallAzureDcap"
script: "cd /AzureDCAP/src/Linux && sudo make install"
- name: CMake DCAP tests
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "cmakeDcapTests"
script: "cd /AzureDCAP/src/Linux && cmake CMakeLists.txt"
- name: Make DCAP tests
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "makeDcapTests"
script: "cd /AzureDCAP/src/ && sudo cp sgx_ql_lib_common.h /usr/include/ && cd /AzureDCAP/src/Linux/ext/intel/ && sudo cp * /usr/include/ && cd ../.. && make"
- name: Run DCAP tests
uses: ./.github/actions/actionAzVmRunCommand
with:
commandName: "runDcapTests"
script: "cd /AzureDCAP/src/Linux && sudo /sbin/ldconfig -v && ./dcap_provider_utests"
- name: If the build fails, keep the VM alive for 4 hours for debugging purposes
if: failure()
run: sleep 4h
- name: Cleanup
if: always()
uses: azure/CLI@v2
with:
inlineScript: |
az vm delete \
-g $rgName \
-n $vmName \
--yes
az resource delete \
-g $rgName \
-n ${{ env.vmName }}NSG \
--resource-type "Microsoft.Network/networkSecurityGroups"
az resource delete \
-g $rgName \
-n ${{ env.vmName }}PublicIP \
--resource-type "Microsoft.Network/publicIPAddresses"