azure-pipelines-internal-tests.yml

parameters:
  - name: jobs
    type: string
    default: '[]'

variables:
  - name: _BuildConfig
    value: Release
  - name: DOTNET_SKIP_FIRST_TIME_EXPERIENCE
    value: true
  - name: _PublishUsingPipelines
    value: true
  - name: _CosmosConnectionUrl
    value: https://localhost:8081
  - name: _CosmosToken
    value: C2y6yDjf5/R+ob0N8A7Cgv30VRDJIWEHLM+4QDU5DE2nQ9nDuVTqobD4b8mGGyPMbIZnqyMsEcaGQy67XIw/Jw==
  - group: DotNet-HelixApi-Access
  - name: _InternalRuntimeDownloadArgs
    value: /p:DotNetRuntimeSourceFeed=https://ci.dot.net/internal /p:DotNetRuntimeSourceFeedKey=$(dotnetbuilds-internal-container-read-token-base64)
  - name: LC_ALL
    value: 'en_US.UTF-8'
  - name: LANG
    value: 'en_US.UTF-8'
  - name: LANGUAGE
    value: 'en_US.UTF-8'
  - template: /eng/common/templates-official/variables/pool-providers.yml@self
trigger:
  batch: true
  branches:
    include:
      - main
      - release/*
      - feature/*
      - internal/release/*
pr: ['*']
resources:
  repositories:
  - repository: 1ESPipelineTemplates
    type: git
    name: 1ESPipelineTemplates/1ESPipelineTemplates
    ref: refs/tags/release
extends:
  template: v1/1ES.Official.PipelineTemplate.yml@1ESPipelineTemplates
  parameters:
    featureFlags:
      autoBaseline: false
      autoEnableRoslynWithNewRuleset: false  
    sdl:
      createAdoIssuesForJustificationsForDisablement: false
      sourceAnalysisPool:
        name: $(DncEngInternalBuildPool)
        image: 1es-windows-2022
        os: windows
      enabled: false
      baseline:
        baselineFile: $(Build.SourcesDirectory)\.config\guardian\.gdnbaselines
      binskim:
        preReleaseVersion: '4.3.1'
        enabled: false
        justificationForDisabling: 'NonProduction'
      policheck:
        enabled: false
        justificationForDisabling: 'NonProduction'
      tsa:
        enabled: false
        justificationForDisabling: 'NonProduction'
      antimalwareScan:
        enabled: false
        justificationForDisabling: 'NonProduction'
      prefast:
        enabled: false
        justificationForDisabling: 'NonProduction'
      codeQL:
        compiled:
          enabled: false
          justificationForDisabling: 'NonProduction'
      psscriptanalyzer:
        enabled: false
        justificationForDisabling: 'NonProduction'
      credscan:
        enabled: false
        justificationForDisabling: 'NonProduction'
      spmi:
        enabled: false
        justificationForDisabling: 'NonProduction'
      componentgovernance:
        enabled: false
        justificationForDisabling: 'NonProduction'
      eslint:
        enabled: false
        justificationForDisabling: 'NonProduction'
      armory:
        enabled: false
        justificationForDisabling: 'NonProduction'
    customBuildTags:
    - ES365AIMigrationTooling
    settings:
      networkIsolationPolicy: Permissive,CFSClean
    stages:
    - stage: build
      displayName: Build
      jobs:
      - template: /eng/common/templates-official/jobs/jobs.yml@self
        parameters:
          continueOnError: true
          enableMicrobuild: true
          enablePublishBuildArtifacts: true
          enablePublishBuildAssets: false
          enablePublishTestResults: true
          publishAssetsImmediately: true
          isAssetlessBuild: ${{ eq(parameters.jobs, '[]') }}
          enableTelemetry: true
          helixRepo: dotnet/efcore
          jobs:
          - job: Windows
            condition: ${{ or(eq(parameters.jobs, '[]'), contains(parameters.jobs, '"Windows"')) }}
            pool:
              name: $(DncEngInternalBuildPool)
              demands: ImageOverride -equals 1es-windows-2022
              os: windows
            timeoutInMinutes: 180
            variables:
              - _InternalBuildArgs: ''
              # Rely on task Arcade injects, not auto-injected build step.
              - skipComponentGovernanceDetection: true
            steps:
              - task: NuGetCommand@2
                displayName: 'Clear NuGet caches'
                condition: succeeded()
                inputs:
                  command: custom
                  arguments: 'locals all -clear'
              - script: "echo ##vso[build.addbuildtag]daily-build"
                condition: and(notin(variables['Build.Reason'], 'PullRequest'), ne(variables['IsFinalBuild'], 'true'))
                displayName: 'Set CI tags'
              - script: "echo ##vso[build.addbuildtag]release-candidate"
                condition: and(notin(variables['Build.Reason'], 'PullRequest'), eq(variables['IsFinalBuild'], 'true'))
                displayName: 'Set CI tags'
              - template: /eng/common/templates-official/steps/enable-internal-sources.yml
              - template: /eng/common/templates-official/steps/enable-internal-runtimes.yml
              - script: eng\common\cibuild.cmd -configuration $(_BuildConfig) -prepareMachine $(_InternalBuildArgs) $(_InternalRuntimeDownloadArgs) /p:CollectCoverage=true /p:SkipApiBaselineTests=true
                env:
                  Test__Cosmos__DefaultConnection: $(_CosmosConnectionUrl)
                  Test__SqlServer__DefaultConnection: "Data Source="
                displayName: Build
              - script: .dotnet\dotnet test test\EFCore.ApiBaseline.Tests -p:Configuration=$(_BuildConfig)
                displayName: Test API Baselines
                condition: succeeded()
              - powershell: |
                  . ./eng/merge-coverage.ps1 -CoverageDirectory artifacts/coverage -OutputFile artifacts/coverage/coverage.cobertura.xml
                displayName: Merge coverage reports
                condition: always()
                continueOnError: true
            templateContext:
              outputs:
              - output: pipelineArtifact
                displayName: Upload code coverage
                condition: always()
                continueOnError: true
                targetPath: artifacts/coverage/coverage.cobertura.xml
                artifactName: Coverage_$(Agent.JobName)_$(System.JobAttempt)
              - output: pipelineArtifact
                displayName: Upload TestResults
                condition: always()
                continueOnError: true
                targetPath: artifacts/TestResults/$(_BuildConfig)/
                artifactName: $(Agent.Os)_$(Agent.JobName) TestResults_Attempt_$(System.JobAttempt)

          - job: Windows_SqlServer
            displayName: 'Windows SQL Server'
            condition: ${{ or(eq(parameters.jobs, '[]'), contains(parameters.jobs, '"Windows_SqlServer"')) }}
            pool:
              name: $(DncEngInternalBuildPool)
              demands: ImageOverride -equals 1es-windows-2022
              os: windows
            timeoutInMinutes: 120
            variables:
              - skipComponentGovernanceDetection: true
            steps:
              - powershell: SqlLocalDB start
                displayName: Start LocalDB
              - template: /eng/common/templates-official/steps/enable-internal-sources.yml
              - template: /eng/common/templates-official/steps/enable-internal-runtimes.yml
              - script: eng\common\build.cmd -restore -build -test -ci -configuration $(_BuildConfig) -prepareMachine $(_InternalRuntimeDownloadArgs)
                  /p:CollectCoverage=true
                  /p:Projects="$(Build.SourcesDirectory)/test/EFCore.SqlServer.FunctionalTests/EFCore.SqlServer.FunctionalTests.csproj;$(Build.SourcesDirectory)/test/EFCore.SqlServer.HierarchyId.Tests/EFCore.SqlServer.HierarchyId.Tests.csproj;$(Build.SourcesDirectory)/test/EFCore.CrossStore.FunctionalTests/EFCore.CrossStore.FunctionalTests.csproj;$(Build.SourcesDirectory)/test/EFCore.OData.FunctionalTests/EFCore.OData.FunctionalTests.csproj;$(Build.SourcesDirectory)/test/EFCore.AspNet.SqlServer.FunctionalTests/EFCore.AspNet.SqlServer.FunctionalTests.csproj;$(Build.SourcesDirectory)/test/EFCore.VisualBasic.FunctionalTests/EFCore.VisualBasic.FunctionalTests.vbproj;$(Build.SourcesDirectory)/test/EFCore.FSharp.FunctionalTests/EFCore.FSharp.FunctionalTests.fsproj"
                displayName: Test SQL Server
              - powershell: |
                  . ./eng/merge-coverage.ps1 -CoverageDirectory artifacts/coverage -OutputFile artifacts/coverage/coverage.cobertura.xml
                displayName: Merge coverage reports
                condition: always()
                continueOnError: true
            templateContext:
              outputs:
              - output: pipelineArtifact
                displayName: Upload code coverage
                condition: always()
                continueOnError: true
                targetPath: artifacts/coverage/coverage.cobertura.xml
                artifactName: Coverage_$(Agent.JobName)_$(System.JobAttempt)
              - output: pipelineArtifact
                displayName: Upload TestResults
                condition: always()
                continueOnError: true
                targetPath: artifacts/TestResults/$(_BuildConfig)/
                artifactName: $(Agent.Os)_$(Agent.JobName) TestResults_Attempt_$(System.JobAttempt)

          - job: macOS
            condition: ${{ or(eq(parameters.jobs, '[]'), contains(parameters.jobs, '"macOS"')) }}
            pool:
              name: Azure Pipelines
              image: macOS-15
              os: macOS
            variables:
              # Rely on task Arcade injects, not auto-injected build step.
              - skipComponentGovernanceDetection: true
            steps:
              - template: /eng/common/templates-official/steps/enable-internal-sources.yml
              - template: /eng/common/templates-official/steps/enable-internal-runtimes.yml
              - script: eng/common/build.sh --restore --build --test --pack --ci --configuration $(_BuildConfig) --prepareMachine $(_InternalRuntimeDownloadArgs) /p:CollectCoverage=true /p:SkipApiBaselineTests=true
                env:
                  Test__Cosmos__DefaultConnection: $(_CosmosConnectionUrl)
                  # Work-around for https://github.com/dotnet/runtime/issues/70758
                  COMPlus_EnableWriteXorExecute: 0
                displayName: Build
              - pwsh: . ./eng/merge-coverage.ps1 -CoverageDirectory artifacts/coverage -OutputFile artifacts/coverage/coverage.cobertura.xml
                displayName: Merge coverage reports
                condition: always()
                continueOnError: true
            templateContext:
              outputs:
              - output: pipelineArtifact
                displayName: Upload code coverage
                condition: always()
                continueOnError: true
                targetPath: artifacts/coverage/coverage.cobertura.xml
                artifactName: Coverage_$(Agent.JobName)_$(System.JobAttempt)
              - output: pipelineArtifact
                displayName: Upload TestResults
                condition: always()
                continueOnError: true
                targetPath: artifacts/TestResults/$(_BuildConfig)/
                artifactName: $(Agent.Os)_$(Agent.JobName) TestResults_Attempt_$(System.JobAttempt)
          - job: Linux
            condition: ${{ or(eq(parameters.jobs, '[]'), contains(parameters.jobs, '"Linux"')) }}
            timeoutInMinutes: 180
            pool:
              name: $(DncEngInternalBuildPool)
              demands: ImageOverride -equals 1es-ubuntu-2204
              os: linux
            variables:
              # Rely on task Arcade injects, not auto-injected build step.
              - skipComponentGovernanceDetection: true
            steps:
              - template: /eng/common/templates-official/steps/enable-internal-sources.yml
              - template: /eng/common/templates-official/steps/enable-internal-runtimes.yml
              - script: eng/common/build.sh --restore --build --test --pack --ci --configuration $(_BuildConfig) --prepareMachine $(_InternalRuntimeDownloadArgs) /p:CollectCoverage=true /p:SkipApiBaselineTests=true
                env:
                  Test__Cosmos__DefaultConnection: $(_CosmosConnectionUrl)
                displayName: Build
              - pwsh: . ./eng/merge-coverage.ps1 -CoverageDirectory artifacts/coverage -OutputFile artifacts/coverage/coverage.cobertura.xml
                displayName: Merge coverage reports
                condition: always()
                continueOnError: true
            templateContext:
              sdl:
                binskim:
                  preReleaseVersion: ''
              outputs:
              - output: pipelineArtifact
                displayName: Upload code coverage
                condition: always()
                continueOnError: true
                targetPath: artifacts/coverage/coverage.cobertura.xml
                artifactName: Coverage_$(Agent.JobName)_$(System.JobAttempt)
              - output: pipelineArtifact
                displayName: Upload TestResults
                condition: always()
                continueOnError: true
                targetPath: artifacts/TestResults/$(_BuildConfig)/
                artifactName: $(Agent.Os)_$(Agent.JobName) TestResults_Attempt_$(System.JobAttempt)

          - job: Helix_Windows
            displayName: 'Helix Windows'
            condition: ${{ or(eq(parameters.jobs, '[]'), contains(parameters.jobs, '"Helix_Windows"')) }}
            timeoutInMinutes: 180
            pool:
              name: $(DncEngInternalBuildPool)
              demands: ImageOverride -equals 1es-windows-2022
              os: windows
            variables:
              - skipComponentGovernanceDetection: true
              - name: _HelixBuildConfig
                value: $(_BuildConfig)
              - name: HelixTargetQueues
                value: Windows.10.Amd64
              - name: _HelixAccessToken
                value: $(HelixApiAccessToken)
            steps:
              - task: NuGetCommand@2
                displayName: 'Clear NuGet caches'
                condition: succeeded()
                inputs:
                  command: custom
                  arguments: 'locals all -clear'
              - template: /eng/common/templates-official/steps/enable-internal-sources.yml
              - template: /eng/common/templates-official/steps/enable-internal-runtimes.yml
              - template: /eng/common/core-templates/steps/get-delegation-sas.yml
                parameters:
                  federatedServiceConnection: 'dotnetbuilds-internal-read'
                  outputVariableName: 'dotnetbuilds-internal-container-read-token'
                  expiryInHours: 3
                  base64Encode: false
                  storageAccount: dotnetbuilds
                  container: internal
                  permissions: rl
              - script: restore.cmd -ci /p:configuration=$(_BuildConfig) $(_InternalRuntimeDownloadArgs)
                displayName: Restore packages
              - script: .dotnet\dotnet build eng\helix.proj /restore /t:Test /p:configuration=$(_BuildConfig) /bl:$(Build.SourcesDirectory)/artifacts/log/$(_BuildConfig)/SendToHelix.binlog $(_InternalRuntimeDownloadArgs)
                displayName: Send tests to helix
                env:
                  HelixAccessToken: $(_HelixAccessToken)
                  SYSTEM_ACCESSTOKEN: $(System.AccessToken)
                  DotNetBuildsInternalReadSasToken: $(dotnetbuilds-internal-container-read-token)

          - job: Helix_Windows_SqlServer
            displayName: 'Helix Windows SQL Server'
            condition: ${{ or(eq(parameters.jobs, '[]'), contains(parameters.jobs, '"Helix_Windows_SqlServer"')) }}
            timeoutInMinutes: 180
            pool:
              name: $(DncEngInternalBuildPool)
              demands: ImageOverride -equals 1es-windows-2022
              os: windows
            variables:
              - skipComponentGovernanceDetection: true
              - name: _HelixBuildConfig
                value: $(_BuildConfig)
              - name: HelixTargetQueues
                value: Windows.11.Amd64.Client
              - name: _HelixAccessToken
                value: $(HelixApiAccessToken)
            steps:
              - task: NuGetCommand@2
                displayName: 'Clear NuGet caches'
                condition: succeeded()
                inputs:
                  command: custom
                  arguments: 'locals all -clear'
              - template: /eng/common/templates-official/steps/enable-internal-sources.yml
              - template: /eng/common/templates-official/steps/enable-internal-runtimes.yml
              - template: /eng/common/core-templates/steps/get-delegation-sas.yml
                parameters:
                  federatedServiceConnection: 'dotnetbuilds-internal-read'
                  outputVariableName: 'dotnetbuilds-internal-container-read-token'
                  expiryInHours: 3
                  base64Encode: false
                  storageAccount: dotnetbuilds
                  container: internal
                  permissions: rl
              - script: restore.cmd -ci /p:configuration=$(_BuildConfig) $(_InternalRuntimeDownloadArgs)
                displayName: Restore packages
              - script: .dotnet\dotnet build eng\helix.proj /restore /t:Test /p:configuration=$(_BuildConfig) /bl:$(Build.SourcesDirectory)/artifacts/log/$(_BuildConfig)/SendToHelix.binlog $(_InternalRuntimeDownloadArgs)
                displayName: Send tests to helix
                env:
                  HelixAccessToken: $(_HelixAccessToken)
                  SYSTEM_ACCESSTOKEN: $(System.AccessToken)
                  DotNetBuildsInternalReadSasToken: $(dotnetbuilds-internal-container-read-token)

          - job: Helix_Windows_Arm64
            displayName: 'Helix Windows ARM64'
            condition: ${{ or(eq(parameters.jobs, '[]'), contains(parameters.jobs, '"Helix_Windows_Arm64"')) }}
            timeoutInMinutes: 180
            pool:
              name: $(DncEngInternalBuildPool)
              demands: ImageOverride -equals 1es-windows-2022
              os: windows
            variables:
              - skipComponentGovernanceDetection: true
              - name: _HelixBuildConfig
                value: $(_BuildConfig)
              - name: HelixTargetQueues
                value: Windows.11.Arm64
              - name: _HelixAccessToken
                value: $(HelixApiAccessToken)
            steps:
              - task: NuGetCommand@2
                displayName: 'Clear NuGet caches'
                condition: succeeded()
                inputs:
                  command: custom
                  arguments: 'locals all -clear'
              - template: /eng/common/templates-official/steps/enable-internal-sources.yml
              - template: /eng/common/templates-official/steps/enable-internal-runtimes.yml
              - template: /eng/common/core-templates/steps/get-delegation-sas.yml
                parameters:
                  federatedServiceConnection: 'dotnetbuilds-internal-read'
                  outputVariableName: 'dotnetbuilds-internal-container-read-token'
                  expiryInHours: 3
                  base64Encode: false
                  storageAccount: dotnetbuilds
                  container: internal
                  permissions: rl
              - script: restore.cmd -ci /p:configuration=$(_BuildConfig) $(_InternalRuntimeDownloadArgs)
                displayName: Restore packages
              - script: .dotnet\dotnet build eng\helix.proj /restore /t:Test /p:configuration=$(_BuildConfig) /bl:$(Build.SourcesDirectory)/artifacts/log/$(_BuildConfig)/SendToHelix.binlog $(_InternalRuntimeDownloadArgs)
                displayName: Send tests to helix
                env:
                  HelixAccessToken: $(_HelixAccessToken)
                  SYSTEM_ACCESSTOKEN: $(System.AccessToken)
                  DotNetBuildsInternalReadSasToken: $(dotnetbuilds-internal-container-read-token)

          - job: Helix_Windows_Cosmos
            displayName: 'Helix Windows Cosmos'
            condition: ${{ or(eq(parameters.jobs, '[]'), contains(parameters.jobs, '"Helix_Windows_Cosmos"')) }}
            timeoutInMinutes: 180
            pool:
              name: $(DncEngInternalBuildPool)
              demands: ImageOverride -equals 1es-windows-2022
              os: windows
            variables:
              - skipComponentGovernanceDetection: true
              - name: _HelixBuildConfig
                value: $(_BuildConfig)
              - name: HelixTargetQueues
                value: Windows.Server2025.Amd64
              - name: _HelixAccessToken
                value: $(HelixApiAccessToken)
            steps:
              - task: NuGetCommand@2
                displayName: 'Clear NuGet caches'
                condition: succeeded()
                inputs:
                  command: custom
                  arguments: 'locals all -clear'
              - template: /eng/common/templates-official/steps/enable-internal-sources.yml
              - template: /eng/common/templates-official/steps/enable-internal-runtimes.yml
              - template: /eng/common/core-templates/steps/get-delegation-sas.yml
                parameters:
                  federatedServiceConnection: 'dotnetbuilds-internal-read'
                  outputVariableName: 'dotnetbuilds-internal-container-read-token'
                  expiryInHours: 3
                  base64Encode: false
                  storageAccount: dotnetbuilds
                  container: internal
                  permissions: rl
              - script: restore.cmd -ci /p:configuration=$(_BuildConfig) $(_InternalRuntimeDownloadArgs)
                displayName: Restore packages
              - script: .dotnet\dotnet build eng\helix.proj /restore /t:Test /p:configuration=$(_BuildConfig) /bl:$(Build.SourcesDirectory)/artifacts/log/$(_BuildConfig)/SendToHelix.binlog $(_InternalRuntimeDownloadArgs)
                displayName: Send tests to helix
                env:
                  HelixAccessToken: $(_HelixAccessToken)
                  SYSTEM_ACCESSTOKEN: $(System.AccessToken)
                  DotNetBuildsInternalReadSasToken: $(dotnetbuilds-internal-container-read-token)

          - job: Helix_macOS_x64
            displayName: 'Helix macOS x64'
            condition: ${{ or(eq(parameters.jobs, '[]'), contains(parameters.jobs, '"Helix_macOS_x64"')) }}
            timeoutInMinutes: 180
            pool:
              name: $(DncEngInternalBuildPool)
              demands: ImageOverride -equals 1es-windows-2022
              os: windows
            variables:
              - skipComponentGovernanceDetection: true
              - name: _HelixBuildConfig
                value: $(_BuildConfig)
              - name: HelixTargetQueues
                value: OSX.15.Amd64
              - name: _HelixAccessToken
                value: $(HelixApiAccessToken)
            steps:
              - task: NuGetCommand@2
                displayName: 'Clear NuGet caches'
                condition: succeeded()
                inputs:
                  command: custom
                  arguments: 'locals all -clear'
              - template: /eng/common/templates-official/steps/enable-internal-sources.yml
              - template: /eng/common/templates-official/steps/enable-internal-runtimes.yml
              - template: /eng/common/core-templates/steps/get-delegation-sas.yml
                parameters:
                  federatedServiceConnection: 'dotnetbuilds-internal-read'
                  outputVariableName: 'dotnetbuilds-internal-container-read-token'
                  expiryInHours: 3
                  base64Encode: false
                  storageAccount: dotnetbuilds
                  container: internal
                  permissions: rl
              - script: restore.cmd -ci /p:configuration=$(_BuildConfig) $(_InternalRuntimeDownloadArgs)
                displayName: Restore packages
              - script: .dotnet\dotnet build eng\helix.proj /restore /t:Test /p:configuration=$(_BuildConfig) /bl:$(Build.SourcesDirectory)/artifacts/log/$(_BuildConfig)/SendToHelix.binlog $(_InternalRuntimeDownloadArgs)
                displayName: Send tests to helix
                env:
                  HelixAccessToken: $(_HelixAccessToken)
                  SYSTEM_ACCESSTOKEN: $(System.AccessToken)
                  DotNetBuildsInternalReadSasToken: $(dotnetbuilds-internal-container-read-token)

          - job: Helix_macOS_ARM64
            displayName: 'Helix macOS ARM64'
            condition: ${{ or(eq(parameters.jobs, '[]'), contains(parameters.jobs, '"Helix_macOS_ARM64"')) }}
            timeoutInMinutes: 180
            pool:
              name: $(DncEngInternalBuildPool)
              demands: ImageOverride -equals 1es-windows-2022
              os: windows
            variables:
              - skipComponentGovernanceDetection: true
              - name: _HelixBuildConfig
                value: $(_BuildConfig)
              - name: HelixTargetQueues
                value: OSX.15.ARM64
              - name: _HelixAccessToken
                value: $(HelixApiAccessToken)
            steps:
              - task: NuGetCommand@2
                displayName: 'Clear NuGet caches'
                condition: succeeded()
                inputs:
                  command: custom
                  arguments: 'locals all -clear'
              - template: /eng/common/templates-official/steps/enable-internal-sources.yml
              - template: /eng/common/templates-official/steps/enable-internal-runtimes.yml
              - template: /eng/common/core-templates/steps/get-delegation-sas.yml
                parameters:
                  federatedServiceConnection: 'dotnetbuilds-internal-read'
                  outputVariableName: 'dotnetbuilds-internal-container-read-token'
                  expiryInHours: 3
                  base64Encode: false
                  storageAccount: dotnetbuilds
                  container: internal
                  permissions: rl
              - script: restore.cmd -ci /p:configuration=$(_BuildConfig) $(_InternalRuntimeDownloadArgs)
                displayName: Restore packages
              - script: .dotnet\dotnet build eng\helix.proj /restore /t:Test /p:configuration=$(_BuildConfig) /bl:$(Build.SourcesDirectory)/artifacts/log/$(_BuildConfig)/SendToHelix.binlog $(_InternalRuntimeDownloadArgs)
                displayName: Send tests to helix
                env:
                  HelixAccessToken: $(_HelixAccessToken)
                  SYSTEM_ACCESSTOKEN: $(System.AccessToken)
                  DotNetBuildsInternalReadSasToken: $(dotnetbuilds-internal-container-read-token)

          - job: Helix_Ubuntu_SqlServer
            displayName: 'Helix Ubuntu SQL Server'
            condition: ${{ or(eq(parameters.jobs, '[]'), contains(parameters.jobs, '"Helix_Ubuntu_SqlServer"')) }}
            timeoutInMinutes: 180
            pool:
              name: $(DncEngInternalBuildPool)
              demands: ImageOverride -equals 1es-windows-2022
              os: windows
            variables:
              - skipComponentGovernanceDetection: true
              - name: _HelixBuildConfig
                value: $(_BuildConfig)
              - name: HelixTargetQueues
                value: Ubuntu.2204.Amd64.XL@mcr.microsoft.com/dotnet-buildtools/prereqs:ubuntu-22.04-helix-sqlserver-amd64
              - name: _HelixAccessToken
                value: $(HelixApiAccessToken)
            steps:
              - task: NuGetCommand@2
                displayName: 'Clear NuGet caches'
                condition: succeeded()
                inputs:
                  command: custom
                  arguments: 'locals all -clear'
              - template: /eng/common/templates-official/steps/enable-internal-sources.yml
              - template: /eng/common/templates-official/steps/enable-internal-runtimes.yml
              - template: /eng/common/core-templates/steps/get-delegation-sas.yml
                parameters:
                  federatedServiceConnection: 'dotnetbuilds-internal-read'
                  outputVariableName: 'dotnetbuilds-internal-container-read-token'
                  expiryInHours: 3
                  base64Encode: false
                  storageAccount: dotnetbuilds
                  container: internal
                  permissions: rl
              - script: restore.cmd -ci /p:configuration=$(_BuildConfig) $(_InternalRuntimeDownloadArgs)
                displayName: Restore packages
              - script: .dotnet\dotnet build eng\helix.proj /restore /t:Test /p:configuration=$(_BuildConfig) /bl:$(Build.SourcesDirectory)/artifacts/log/$(_BuildConfig)/SendToHelix.binlog $(_InternalRuntimeDownloadArgs)
                displayName: Send tests to helix
                env:
                  HelixAccessToken: $(_HelixAccessToken)
                  SYSTEM_ACCESSTOKEN: $(System.AccessToken)
                  MSSQL_SA_PASSWORD: "PLACEHOLDERPass$$w0rd"
                  DotNetBuildsInternalReadSasToken: $(dotnetbuilds-internal-container-read-token)

          - job: Helix_Ubuntu_Cosmos
            displayName: 'Helix Ubuntu Cosmos'
            condition: ${{ or(eq(parameters.jobs, '[]'), contains(parameters.jobs, '"Helix_Ubuntu_Cosmos"')) }}
            timeoutInMinutes: 180
            pool:
              name: $(DncEngInternalBuildPool)
              demands: ImageOverride -equals 1es-windows-2022
              os: windows
            variables:
              - skipComponentGovernanceDetection: true
              - name: _HelixBuildConfig
                value: $(_BuildConfig)
              - name: HelixTargetQueues
                value: Ubuntu.2204.Amd64.XL
              - name: _HelixAccessToken
                value: $(HelixApiAccessToken)
            steps:
              - task: NuGetCommand@2
                displayName: 'Clear NuGet caches'
                condition: succeeded()
                inputs:
                  command: custom
                  arguments: 'locals all -clear'
              - template: /eng/common/templates-official/steps/enable-internal-sources.yml
              - template: /eng/common/templates-official/steps/enable-internal-runtimes.yml
              - template: /eng/common/core-templates/steps/get-delegation-sas.yml
                parameters:
                  federatedServiceConnection: 'dotnetbuilds-internal-read'
                  outputVariableName: 'dotnetbuilds-internal-container-read-token'
                  expiryInHours: 3
                  base64Encode: false
                  storageAccount: dotnetbuilds
                  container: internal
                  permissions: rl
              - script: restore.cmd -ci /p:configuration=$(_BuildConfig) $(_InternalRuntimeDownloadArgs)
                displayName: Restore packages
              - script: .dotnet\dotnet build eng\helix.proj /restore /t:Test /p:configuration=$(_BuildConfig) /bl:$(Build.SourcesDirectory)/artifacts/log/$(_BuildConfig)/SendToHelix.binlog $(_InternalRuntimeDownloadArgs)
                displayName: Send tests to helix
                env:
                  HelixAccessToken: $(_HelixAccessToken)
                  SYSTEM_ACCESSTOKEN: $(System.AccessToken)
                  DotNetBuildsInternalReadSasToken: $(dotnetbuilds-internal-container-read-token)

          - job: Helix_Ubuntu
            displayName: 'Helix Ubuntu'
            condition: ${{ or(eq(parameters.jobs, '[]'), contains(parameters.jobs, '"Helix_Ubuntu"')) }}
            timeoutInMinutes: 180
            pool:
              name: $(DncEngInternalBuildPool)
              demands: ImageOverride -equals 1es-windows-2022
              os: windows
            variables:
              - skipComponentGovernanceDetection: true
              - name: _HelixBuildConfig
                value: $(_BuildConfig)
              - name: HelixTargetQueues
                value: Ubuntu.2204.Amd64
              - name: _HelixAccessToken
                value: $(HelixApiAccessToken)
            steps:
              - task: NuGetCommand@2
                displayName: 'Clear NuGet caches'
                condition: succeeded()
                inputs:
                  command: custom
                  arguments: 'locals all -clear'
              - template: /eng/common/templates-official/steps/enable-internal-sources.yml
              - template: /eng/common/templates-official/steps/enable-internal-runtimes.yml
              - template: /eng/common/core-templates/steps/get-delegation-sas.yml
                parameters:
                  federatedServiceConnection: 'dotnetbuilds-internal-read'
                  outputVariableName: 'dotnetbuilds-internal-container-read-token'
                  expiryInHours: 3
                  base64Encode: false
                  storageAccount: dotnetbuilds
                  container: internal
                  permissions: rl
              - script: restore.cmd -ci /p:configuration=$(_BuildConfig) $(_InternalRuntimeDownloadArgs)
                displayName: Restore packages
              - script: .dotnet\dotnet build eng\helix.proj /restore /t:Test /p:configuration=$(_BuildConfig) /bl:$(Build.SourcesDirectory)/artifacts/log/$(_BuildConfig)/SendToHelix.binlog $(_InternalRuntimeDownloadArgs)
                displayName: Send tests to helix
                env:
                  HelixAccessToken: $(_HelixAccessToken)
                  SYSTEM_ACCESSTOKEN: $(System.AccessToken)
                  DotNetBuildsInternalReadSasToken: $(dotnetbuilds-internal-container-read-token)
    - stage: validate
      displayName: Validate
      dependsOn: build
      condition: and(always(), eq('${{ parameters.jobs }}', '[]'))
      jobs:
      - job: Validate_Job_Results
        displayName: Job Results
        timeoutInMinutes: 200
        pool:
          name: $(DncEngInternalBuildPool)
          demands: ImageOverride -equals 1es-windows-2022
          os: windows
        variables:
          WindowsResult: $[ stageDependencies.build.Windows.result ]
          HelixWindowsResult: $[ stageDependencies.build.Helix_Windows.result ]
          WindowsSqlServerResult: $[ stageDependencies.build.Windows_SqlServer.result ]
          HelixWindowsSqlServerResult: $[ stageDependencies.build.Helix_Windows_SqlServer.result ]
          HelixWindowsCosmosResult: $[ stageDependencies.build.Helix_Windows_Cosmos.result ]
          LinuxResult: $[ stageDependencies.build.Linux.result ]
          HelixUbuntuResult: $[ stageDependencies.build.Helix_Ubuntu.result ]
          HelixUbuntuSqlServerResult: $[ stageDependencies.build.Helix_Ubuntu_SqlServer.result ]
          MacOsResult: $[ stageDependencies.build.macOS.result ]
          HelixMacOsX64Result: $[ stageDependencies.build.Helix_macOS_x64.result ]
          HelixMacOsArm64Result: $[ stageDependencies.build.Helix_macOS_ARM64.result ]
          HelixWindowsArm64Result: $[ stageDependencies.build.Helix_Windows_Arm64.result ]
          HelixUbuntuCosmosResult: $[ stageDependencies.build.Helix_Ubuntu_Cosmos.result ]
        steps:
          - task: DownloadPipelineArtifact@2
            displayName: Download code coverage
            inputs:
              buildType: current
              patterns: '**/*.cobertura.xml'
              targetPath: artifacts/coverage/jobs
            condition: always()
            continueOnError: true
          - script: eng\common\dotnet.cmd --info
            displayName: Ensure .NET SDK is installed
            condition: always()
            continueOnError: true
          - pwsh: . ./eng/merge-coverage.ps1 -CoverageDirectory artifacts/coverage/jobs -OutputFile artifacts/coverage/coverage.cobertura.xml
            displayName: Merge code coverage reports
            condition: always()
            continueOnError: true
          - task: PublishCodeCoverageResults@2
            displayName: Publish code coverage
            inputs:
              summaryFileLocation: artifacts/coverage/coverage.cobertura.xml
              pathToSources: $(Build.SourcesDirectory)
              failIfCoverageEmpty: true
            condition: always()
            continueOnError: true
          - pwsh: |
              $jobResults = @{
                Windows = "$(WindowsResult)"
                Helix_Windows = "$(HelixWindowsResult)"
                Windows_SqlServer = "$(WindowsSqlServerResult)"
                Helix_Windows_SqlServer = "$(HelixWindowsSqlServerResult)"
                Helix_Windows_Cosmos = "$(HelixWindowsCosmosResult)"
                Linux = "$(LinuxResult)"
                Helix_Ubuntu = "$(HelixUbuntuResult)"
                Helix_Ubuntu_SqlServer = "$(HelixUbuntuSqlServerResult)"
                macOS = "$(MacOsResult)"
                Helix_macOS_x64 = "$(HelixMacOsX64Result)"
                Helix_macOS_ARM64 = "$(HelixMacOsArm64Result)"
                Helix_Windows_Arm64 = "$(HelixWindowsArm64Result)"
                Helix_Ubuntu_Cosmos = "$(HelixUbuntuCosmosResult)"
              }

              & eng/aggregate-azdo-tests.ps1 -JobResults $jobResults
            displayName: Evaluate grouped job outcomes
            env:
              SYSTEM_ACCESSTOKEN: $(System.AccessToken)