From 28e6d31a96d7305b1ac508f69c782e75df3fa2a0 Mon Sep 17 00:00:00 2001
From: Peter Collins <pecolli@microsoft.com>
Date: Tue, 27 Feb 2024 14:50:12 -0800
Subject: [PATCH] [ci] Improve triggers and support test signing

Updates the CI trigger to run against `main`, `release/*`, and any tags
that are created for releases.  The PR trigger has also been updated to
run against main.

Support for "Test" signing has been added, and should help us save some
time when running PR builds or CI builds against non-release branches.
---
 build-tools/automation/azure-pipelines.yml | 37 ++++++++++++++--------
 1 file changed, 23 insertions(+), 14 deletions(-)

diff --git a/build-tools/automation/azure-pipelines.yml b/build-tools/automation/azure-pipelines.yml
index 2f96d61..7151ad7 100644
--- a/build-tools/automation/azure-pipelines.yml
+++ b/build-tools/automation/azure-pipelines.yml
@@ -1,10 +1,14 @@
 trigger:
-- main
-- release/*
-- dev/*
+  branches:
+    include:
+    - main
+    - release/*
+  tags:
+    include:
+    - '*'
 
 pr:
-- none
+- main
 
 resources:
   repositories:
@@ -23,7 +27,18 @@ resources:
     name: 1ESPipelineTemplates/1ESPipelineTemplates
     ref: refs/tags/release
 
+parameters:
+- name: SignArtifactsOverride
+  default: false
+- name: Skip1ESComplianceTasks
+  default: false
+
 variables:
+- name: MicroBuildSignType
+  ${{ if or(startsWith(variables['Build.SourceBranch'], 'refs/tags/'), eq(variables['Build.SourceBranch'], 'refs/heads/main'), eq(parameters.SignArtifactsOverride, 'true')) }}:
+    value: Real
+  ${{ else }}:
+    value: Test
 - name: TeamName
   value: XamarinAndroid
 - name: BUILD_DIR
@@ -32,10 +47,8 @@ variables:
   value: 1ESPT-Windows2022
 - name: LinuxPoolImage1ESPT
   value: 1ESPT-Ubuntu22.04
-
-parameters:
-- name: Skip1ESComplianceTasks
-  default: false
+- name: MicroBuildPoolName
+  value: VSEngSS-MicroBuild2022-1ES
 
 extends:
   ${{ if or(eq(variables['Build.Reason'], 'PullRequest'), eq('${{ parameters.Skip1ESComplianceTasks }}', 'true')) }}:
@@ -183,9 +196,6 @@ extends:
     - stage: package
       displayName: Package Stage
       dependsOn: build
-      variables:
-      - name: MicroBuildSignType
-        value: Real
       jobs:
       - job: pack_sign
         displayName: Sign and Zip
@@ -257,9 +267,9 @@ extends:
       - job: sign_verify
         displayName: Verify Signing
         dependsOn: pack_sign
+        condition: and(eq(dependencies.pack_sign.result, 'Succeeded'), eq(variables['MicroBuildSignType'], 'Real'))
         timeoutInMinutes: 240
-        pool:
-          name: VSEngSS-MicroBuild2022-1ES
+        pool: $(MicroBuildPoolName)
         steps:
         - checkout: self
           submodules: recursive
@@ -274,4 +284,3 @@ extends:
           inputs:
             TargetFolders: $(Build.SourcesDirectory)\artifacts
             ExcludeSNVerify: true
-          condition: and(succeededOrFailed(), eq(variables['MicroBuildSignType'], 'Real'))