Skip to content

Fix/daily ci pool image#2098

Open
ramsessanchez wants to merge 26 commits into
mainfrom
fix/daily-ci-pool-image
Open

Fix/daily ci pool image#2098
ramsessanchez wants to merge 26 commits into
mainfrom
fix/daily-ci-pool-image

Conversation

@ramsessanchez
Copy link
Copy Markdown
Contributor

Fixes #

Changes proposed in this pull request

Other links

ramsessanchez and others added 22 commits May 21, 2026 14:45
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Adds gradlePluginPortal() and mavenCentral() as plugin repositories
to ensure plugins can be resolved in restricted network environments
like the Azure DevOps 1ESPT pipeline agents.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
…vironments

Moves spotbugs and sonarqube from the plugins block to buildscript
dependencies with conditional application. Pass -PskipCodeAnalysis
to skip loading these plugins in environments without external
Maven repository access (e.g., ADO 1ESPT pipeline agents).

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Project properties (-P) are not available in the buildscript block
during early Gradle evaluation. Switch to system properties (-D)
which are available everywhere via System.getProperty().

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Replace shell script steps with the managed Gradle@4 task which
handles Java setup, dependency resolution, and JUnit test result
publishing natively within ADO infrastructure.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Reverts the conditional buildscript/skipCodeAnalysis changes now that
the daily-ci pipeline uses the managed Gradle@4 ADO task instead.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
The Go SDK daily-ci pipeline works with the same pool without
specifying an image. Removing the image property to use the pool's
default image which has internet access. Also removes the
skipCodeAnalysis flag since build.gradle uses the standard plugins
block.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Adds the java.internalModuleProxy feature flag (matching the Go SDK's
golang.internalModuleProxy pattern) to route dependency resolution
through the 1ES internal proxy, bypassing network isolation on the
Azure-Pipelines-1ESPT-ExDShared pool. Also restores image: ubuntu-latest
to match the working Go SDK pipeline configuration.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
…esolution

Adds a sed step to remove the spotbugs and sonarqube plugin declarations
from build.gradle before running Gradle on network-isolated 1ES agents.
This tests whether the java.internalModuleProxy feature flag enables
Maven Central access for core dependencies (okhttp, etc.).

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
The previous sed only removed plugin declarations but left the
spotbugsMain, spotbugsTest, and sonarqube configuration blocks
which reference the removed plugins.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Attempts to whitelist Maven Central, Gradle Plugin Portal, and Gradle
services endpoints through 1ES network isolation override rules.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Moves settings under parameters and removes the rejected
networkIsolation.overrideAllowRules parameter.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Generates an init.gradle script that redirects all Gradle repositories
(both dependencies and plugins) to the GraphDeveloperExperiences_Public
Azure Artifacts feed, which has Maven Central as a CFS upstream. This
complies with network isolation on 1ES agents by routing through the
approved Centralized Feed Service instead of public endpoints.

Also removes failed featureFlags and networkIsolationPolicy parameters
that are not supported for Java in 1ES Pipeline Templates.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Adds the GraphDeveloperExperiences_Public Azure Artifacts feed (with
Maven Central upstream) to both repositories and publishing.repositories
in build.gradle, and to pluginManagement in settings.gradle. Removes
the init.gradle pipeline workaround in favor of direct configuration.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Writes GraphDeveloperExperiences_Public credentials to
~/.gradle/gradle.properties using System.AccessToken for
authentication against the Azure Artifacts CFS upstream feed.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@ramsessanchez ramsessanchez requested a review from a team as a code owner May 23, 2026 00:46
ramsessanchez and others added 4 commits May 22, 2026 17:47
Moves GraphDeveloperExperiences_Public credentials from pipeline
script step to gradle.properties. The token will be overridden
via ADO environment variables at pipeline runtime.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Overrides GraphDeveloperExperiences_PublicPassword at build time
using the ARTIFACTS_PAT pipeline variable passed via -P flag.
Configure ARTIFACTS_PAT as a secret variable in the ADO pipeline.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Gradle PasswordCredentials requires the repository name to contain
only letters and digits. Renames GraphDeveloperExperiences_Public
to GraphDeveloperExperiencesPublic across all config files.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
The Gradle repo name must be letters/digits only, but the actual
feed URLs must use the real feed name with underscores.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@sonarqubecloud
Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant