Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 5 additions & 3 deletions .azure-pipelines/hidi-release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -292,7 +292,7 @@ extends:
- task: GitHubRelease@1
displayName: Attach signed hidi release artifacts
inputs:
gitHubConnection: Github-MaggieKimani1
gitHubConnection: 'microsoftgraph (22)'
action: edit
tagSource: userSpecifiedTag
tag: 'hidi-v$(HidiReleaseVersion)'
Expand All @@ -303,6 +303,10 @@ extends:
$(Pipeline.Workspace)\hidi\hidi-win-x64-$(HidiReleaseVersion).zip
addChangeLog: false
- deployment: publish_container
pool:
name: Azure-Pipelines-1ESPT-ExDShared
image: ubuntu-latest
os: linux
templateContext:
type: releaseJob
isProduction: true
Expand All @@ -314,8 +318,6 @@ extends:
strategy:
runOnce:
deploy:
pool:
vmImage: ubuntu-latest
steps:
- pwsh: |
$ErrorActionPreference = 'Stop'
Expand Down
4 changes: 4 additions & 0 deletions src/Microsoft.OpenApi.Hidi/readme.md
Original file line number Diff line number Diff line change
Expand Up @@ -114,6 +114,10 @@ private keys are excluded. The container release job consumes this artifact as
a 1ES input without checking out the repository. NuGet and Windows release
artifacts continue to use the separate `Hidi` artifact.

The container deployment selects the approved `Azure-Pipelines-1ESPT-ExDShared`
pool with `image: ubuntu-latest` and `os: linux` at deployment-job scope.
The build and NuGet/Windows artifact release jobs retain the Windows default pool.

The container release job retains the existing `docker-images-deploy`
environment and its approvals/checks. The destination pipeline must be authorized
for that protected environment before official publishing can execute. Signed
Expand Down
Loading