Update azure-pipelines.yml for Azure Pipelines

azure-pipelines.yml

@@ -11,100 +11,151 @@ variables:
   - name: build.version.minor
     value: 0
   - name: build.version.revision
-    value: 0
+    value: $[counter(format('{0}.{1}', variables['build.version.major'], variables['build.version.minor'], 0)]
-  - name: build.version.beta
-    value: $[counter(format('{0}.{1}.{2}', variables['build.version.major'], variables['build.version.minor'], variables['build.version.revision']), 0)]
-  - name: build.version.suffix
-    value: -beta1.$(build.version.beta)
   - name: build.version
-    value: $(build.version.major).$(build.version.minor).$(build.version.revision)$(build.version.suffix)
+    value: $(build.version.major).$(build.version.minor).$(build.version.revision)
   - name: build.date
     value: $[format('{0:yyyy}-{0:MM}-{0:dd}T{0:HH}:{0:mm}:{0:ss}', pipeline.startTime)]
   - group: Azure KeyVault Code Signing
 
-name: $(build.version.major).$(build.version.minor).$(build.version.revision)$(build.version.suffix)
+name: $(build.version.major).$(build.version.minor).$(build.version.revision)
+trigger: none
 
-steps:
+stages:
-- task: NuGetToolInstaller@1
+- stage: build
+  displayName: Build credential provider
+  dependsOn: []
+  jobs:
+    - job: "buildjob"
+      steps:
+      - task: DotNetCoreCLI@2
+        displayName: dotnet build
+        inputs:
+          command: build
+          publishWebProjects: false
+          arguments: '-c $(buildConfiguration) -p:Version=$(build.version) -p:PackageOutputPath=$(Build.ArtifactStagingDirectory)'
+          projects: 'src/Lithnet.CredentialProvider/Lithnet.CredentialProvider.csproj'
+          zipAfterPublish: false
 
-- task: DotNetCoreCLI@2
+      - task: DotNetCoreCLI@2
-  displayName: dotnet build
+        inputs:
-  inputs:
+          command: 'custom'
-    command: build
+          custom: 'tool'
-    publishWebProjects: false
+          arguments: 'update --global NuGetKeyVaultSignTool'
-    arguments: '-c $(buildConfiguration) -p:Version=$(build.version) -p:PackageOutputPath=$(Build.ArtifactStagingDirectory)'
+        displayName: Install NugetKeyVaultSignTool
-    projects: 'src/Lithnet.CredentialProvider/Lithnet.CredentialProvider.csproj'
-    zipAfterPublish: false
 
-- task: DotNetCoreCLI@2
+      - task: DotNetCoreCLI@2
-  inputs:
+        inputs:
-    command: 'custom'
+          command: 'custom'
-    custom: 'tool'
+          custom: 'tool'
-    arguments: 'update --global NuGetKeyVaultSignTool'
+          arguments: 'update --global azuresigntool'
-  displayName: Install NugetKeyVaultSignTool
+        displayName: Install AzureSignTool
 
-- task: DotNetCoreCLI@2
+      - task: PowerShell@2
-  inputs:
+        displayName: 'Sign files with AzureSignTool'
-    command: 'custom'
+        inputs:
-    custom: 'tool'
+          targetType: 'inline'
-    arguments: 'update --global azuresigntool'
+          script: |
-  displayName: Install AzureSignTool
+            $files = @()
+            $files += (Get-ChildItem -Recurse -Path "$(Build.SourcesDirectory)\Lithnet*.dll").FullName
 
-- task: PowerShell@2
+            write-host "Signing $($files.Length) files:"
-  displayName: 'Sign files with AzureSignTool'
+            write-output $files
-  inputs:
-    targetType: 'inline'
-    script: |
-      $files = @()
-      $files += (Get-ChildItem -Recurse -Path "$(Build.SourcesDirectory)\Lithnet*.dll").FullName
 
-      write-host "Signing $($files.Length) files:"
+            $cmdargs = @(
-      write-output $files
+              "sign",
+              "-d", "Lithnet Windows Credential Provider",
+              "-kvu", "$(akv.url)",
+              "-kvi", "$(akv.applicationID)",
+              "-kvs", "$(akv.secret)",
+              "-kvt", "$(akv.tenantId)",
+              "-kvc", "$(akv.certificateName)",
+              "-tr", "http://timestamp.digicert.com",
+              "-td", "sha256"
+            )
 
-      $cmdargs = @(
+            $cmdargs += $files
-        "sign",
+        
-        "-d", "Lithnet Windows Credential Provider",
+            & AzureSignTool $cmdargs
-        "-kvu", "$(akv.url)",
+          failOnStderr: true
-        "-kvi", "$(akv.applicationID)",
+          showWarnings: true
-        "-kvs", "$(akv.secret)",
-        "-kvt", "$(akv.tenantId)",
-        "-kvc", "$(akv.certificateName)",
-        "-tr", "http://timestamp.digicert.com",
-        "-td", "sha256"
-      )
 
-      $cmdargs += $files
+      - task: PowerShell@2
-      
+        displayName: 'Sign Nuget package'
-      & AzureSignTool $cmdargs
+        inputs:
+          targetType: 'inline'
+          script: |
+            $cmdargs = @(
+              "sign", "$(Build.ArtifactStagingDirectory)\Lithnet.CredentialProvider.$(build.version).nupkg"
+              "-fd", "sha256",
+              "-kvu", "$(akv.url)",
+              "-kvi", "$(akv.applicationID)",
+              "-kvs", "$(akv.secret)",
+              "-kvt", "$(akv.tenantId)",
+              "-kvc", "$(akv.certificateName)",
+              "-tr", "http://timestamp.digicert.com",
+              "-td", "sha256"
+            )
+        
+            & NuGetKeyVaultSignTool $cmdargs
+          failOnStderr: true
+          showWarnings: true
 
-    failOnStderr: true
+      - task: PowerShell@2
-    showWarnings: true
+        displayName: 'Sign Nuget symbols package'
+        inputs:
+          targetType: 'inline'
+          script: |
+            $cmdargs = @(
+              "sign", "$(Build.ArtifactStagingDirectory)\Lithnet.CredentialProvider.$(build.version).snupkg"
+              "-fd", "sha256",
+              "-kvu", "$(akv.url)",
+              "-kvi", "$(akv.applicationID)",
+              "-kvs", "$(akv.secret)",
+              "-kvt", "$(akv.tenantId)",
+              "-kvc", "$(akv.certificateName)",
+              "-tr", "http://timestamp.digicert.com",
+              "-td", "sha256"
+            )
+        
+            & NuGetKeyVaultSignTool $cmdargs
+          failOnStderr: true
+          showWarnings: true
 
-- task: PowerShell@2
+      - task: DotNetCoreCLI@2
-  displayName: 'Sign Nuget package'
+        displayName: Publish package to internal feed
-  inputs:
+        inputs:
-    targetType: 'inline'
+          command: 'push'
-    script: |
+          packagesToPush: '$(Build.ArtifactStagingDirectory)/*.nupkg'
-      $cmdargs = @(
+          nuGetFeedType: 'internal'
-        "sign", "$(Build.ArtifactStagingDirectory)\Lithnet.CredentialProvider.$(build.version).nupkg"
+          publishVstsFeed: '91a552bc-359d-4f28-bdbd-f36f71cfdf81'
-        "-fd", "sha256",
-        "-kvu", "$(akv.url)",
-        "-kvi", "$(akv.applicationID)",
-        "-kvs", "$(akv.secret)",
-        "-kvt", "$(akv.tenantId)",
-        "-kvc", "$(akv.certificateName)",
-        "-tr", "http://timestamp.digicert.com",
-        "-td", "sha256"
-      )
-      
-      & NuGetKeyVaultSignTool $cmdargs
 
-    failOnStderr: true
+      - task: DotNetCoreCLI@2
-    showWarnings: true
+        displayName: Publish symbols to internal feed
+        inputs:
+          command: 'push'
+          packagesToPush: '$(Build.ArtifactStagingDirectory)/*.nupkg'
+          nuGetFeedType: 'internal'
+          publishVstsFeed: '91a552bc-359d-4f28-bdbd-f36f71cfdf81'
 
-- task: NuGetCommand@2
+- stage: publish
-  displayName: 'NuGet push'
+  displayName: Publish packages to production feed
-  inputs:
+  dependsOn: "build"
-    command: push
+  jobs:
-    nuGetFeedType: external
+      - deployment: 'PublishPackages'
-    publishFeedCredentials: 'WindowsCredentialProviderNuget'
+        environment: 'Production'
+        displayName: Publish packages to public nuget feed 
+        pool:
+          vmImage: windows-2022 
+        strategy:
+          runOnce:
+            deploy:            
+              steps:
+              - checkout: self
+
+              - task: NuGetCommand@2
+                displayName: 'Publish nuget package to public feed'
+                inputs:
+                  command: push
+                  nuGetFeedType: external
+                  publishFeedCredentials: 'WindowsCredentialProviderNuget'