Prepare Azure CI pipeline for OAuth (#224)

Signed-off-by: Jakub Scholz <www@scholzj.com>

.azure/build-pipeline.yaml

@@ -0,0 +1,29 @@
+# Triggers
+trigger:
+  branches:
+    include:
+      - 'main'
+      - 'release-*'
+pr:
+  autoCancel: true
+  branches:
+    include:
+      - '*'
+
+# Stages
+stages:
+  - stage: java_build
+    displayName: Java build
+    jobs:
+      - template: 'templates/jobs/build_java.yaml'
+  - stage: java_deploy
+    displayName: Deploy Java
+    condition: and(succeeded(), or(eq(variables['build.sourceBranch'], 'refs/heads/main'), startsWith(variables['build.sourceBranch'], 'refs/heads/release-')))
+    jobs:
+      - template: 'templates/jobs/deploy_java.yaml'
+        parameters:
+          artifactSource: 'current'
+          artifactProject: 'strimzi'
+          artifactPipeline: ''
+          artifactRunVersion: ''
+          artifactRunId: ''

.azure/scripts/push-to-nexus.sh

@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+
+echo "Build reason: ${BUILD_REASON}"
+echo "Source branch: ${BRANCH}"
+
+GPG_TTY=$(tty)
+export GPG_TTY
+
+echo "$GPG_SIGNING_KEY" | base64 -d > signing.gpg
+gpg --batch --import signing.gpg
+
+GPG_EXECUTABLE=gpg mvn $MVN_ARGS -DskipTests -s ./.azure/scripts/settings.xml -pl '!examples/producer','!examples/consumer' -P ossrh verify deploy
+
+rm -rf signing.gpg
+gpg --delete-keys
+gpg --delete-secret-keys

.azure/templates/jobs/build_java.yaml

@@ -0,0 +1,60 @@
+jobs:
+  - job: 'build_and_test_java'
+    displayName: 'Build & Test'
+    # Strategy for the job
+    strategy:
+      matrix:
+        'java-8':
+          image: 'Ubuntu-22.04'
+          jdk_version: '8'
+          main_build: 'true'
+        'java-11':
+          image: 'Ubuntu-22.04'
+          jdk_version: '11'
+          main_build: 'false'
+        'java-17':
+          image: 'Ubuntu-22.04'
+          jdk_version: '17'
+          main_build: 'false'
+    # Set timeout for jobs
+    timeoutInMinutes: 60
+    # Base system
+    pool:
+      vmImage: $(image)
+    # Variables
+    variables:
+      MVN_CACHE_FOLDER: $(HOME)/.m2/repository
+      MVN_ARGS: '-e -V -B'
+    # Pipeline steps
+    steps:
+      # Get cached Maven repository
+      - template: "../steps/maven_cache.yaml"
+      - template: '../steps/prerequisites/install_java.yaml'
+        parameters:
+          JDK_VERSION: $(jdk_version)
+      - bash: "mvn ${MVN_ARGS} install"
+        displayName: "Build & Test Java"
+        env:
+          BUILD_REASON: $(Build.Reason)
+          BRANCH: $(Build.SourceBranch)
+          TESTCONTAINERS_RYUK_DISABLED: "TRUE"
+          TESTCONTAINERS_CHECKS_DISABLE: "TRUE"
+          MVN_ARGS: "-e -V -B"
+      - bash: "mvn ${MVN_ARGS} spotbugs:check"
+        displayName: "Spotbugs"
+        env:
+          MVN_ARGS: "-e -V -B"
+      # We have to TAR the target directory to maintain the permissions of
+      # the files which would otherwise change when downloading the artifact
+      - bash: tar -cvpf target.tar ./target
+        displayName: "Tar the target directory"
+        condition: and(succeeded(), eq(variables['main_build'], 'true'))
+      - publish: $(System.DefaultWorkingDirectory)/target.tar
+        artifact: Binary
+        condition: and(succeeded(), eq(variables['main_build'], 'true'))
+      - task: PublishTestResults@2
+        inputs:
+          testResultsFormat: JUnit
+          testResultsFiles: '**/TEST-*.xml'
+          testRunTitle: "Unit & Integration tests"
+        condition: always()

.azure/templates/jobs/deploy_java.yaml

@@ -0,0 +1,43 @@
+jobs:
+  - job: 'deploy_java'
+    displayName: 'Deploy artifacts'
+    # Strategy for the job => we deploy the artifacts only from Java 11
+    strategy:
+      matrix:
+        'java-8':
+          image: 'Ubuntu-22.04'
+          jdk_version: '8'
+          main_build: 'true'
+    # Set timeout for jobs
+    timeoutInMinutes: 60
+    # Base system
+    pool:
+      vmImage: 'Ubuntu-22.04'
+    # Pipeline steps
+    steps:
+      # Get cached Maven repository
+      - template: "../steps/maven_cache.yaml"
+      - template: '../steps/prerequisites/install_java.yaml'
+        parameters:
+          JDK_VERSION: $(jdk_version)
+      - task: DownloadPipelineArtifact@2
+        inputs:
+          source: '${{ parameters.artifactSource }}'
+          artifact: Binary
+          path: $(System.DefaultWorkingDirectory)/
+          project: '${{ parameters.artifactProject }}'
+          pipeline: '${{ parameters.artifactPipeline }}'
+          runVersion: '${{ parameters.artifactRunVersion }}'
+          runId: '${{ parameters.artifactRunId }}'
+      - bash: tar -xvf target.tar
+        displayName: "Untar the target directory"
+      - bash: "./.azure/scripts/push-to-nexus.sh"
+        env:
+          BUILD_REASON: $(Build.Reason)
+          BRANCH: $(Build.SourceBranch)
+          GPG_PASSPHRASE: $(GPG_PASSPHRASE)
+          GPG_SIGNING_KEY: $(GPG_SIGNING_KEY)
+          NEXUS_USERNAME: $(NEXUS_USERNAME)
+          NEXUS_PASSWORD: $(NEXUS_PASSWORD)
+          MVN_ARGS: "-e -V -B"
+        displayName: "Deploy Java artifacts"

.azure/templates/steps/maven_cache.yaml

@@ -0,0 +1,9 @@
+steps:
+  - task: Cache@2
+    inputs:
+      key: 'maven-cache | $(System.JobName) | **/pom.xml'
+      restoreKeys: |
+        maven-cache | $(System.JobName)
+        maven-cache
+      path: $(HOME)/.m2/repository
+    displayName: Maven cache

.azure/templates/steps/prerequisites/install_java.yaml

@@ -0,0 +1,11 @@
+# Step to configure JAVA on the agent
+parameters:
+  - name: JDK_VERSION
+    default: '11'
+steps:
+  - task: JavaToolInstaller@0
+    inputs:
+      versionSpec: $(JDK_VERSION)
+      jdkArchitectureOption: 'x64'
+      jdkSourceOption: 'PreInstalled'
+    displayName: 'Configure Java'

.travis.yml

@@ -51,8 +51,5 @@ env:
   - PULL_REQUEST=${TRAVIS_PULL_REQUEST}
   - TAG=${TRAVIS_TAG:-latest}
   - BRANCH=${TRAVIS_BRANCH:-main}
-  - secure: ZUtBG8nQ3n7r434wrNnkSSMwpqG8Bdqv/nUubP7RPAtGIS/qyWOtYsNLyAj1jKpS5NR0xuqMBSX6BJd8JbG11gpTYH4Gx4aE+TmnhFm489IgywLeEKrlU+5m26I4kMw/P/JoK1jJ6Juu9TyLMLtzkzJhYK1n/VVS1kq2LRXn81ukJrhbxGIqNvk6ok46s0L8SWwjFVyBPgzxc6kcjOQSn9y/zrKsSZUVi6dW0Q7oGTfIMq6LIIlQWk3LJPMW4g8QH6+67WI4z9Ef8z5lzcJ5ypi0tDO9uCiGAGhh61mDdlMJqJNtVDCZz/ofwBRn0ZhAHaT0vGwf78hH/XIUJEQUVKIBndS0QrrIfazhYIVyBMikZI2fFUzXDOtQ21iIWDkcrJowAsaMJzXIzGrjVSc+4rBbhFJV7zlrT0uIPjuQeY0MbyP87qGn2kocIHKtEQWGaqLgUuJO/T4K9ACQvoa+VhgJpAunZ0EwQzZA/4h3qMMveYdHQaWHlbU4xJyOOyS7nGPF/Nm0ZweG8bYOgHUjqBl7LO+AvxXNKRqlrz2PHtRGHSy/j6PnUDZT1cbOaWd7rggfO1hkw39RGc1Gg1xOji/0Jv1MmOXO2GnmkwzWWTL8tOCXI3Yh+v5pnIZc8H8qU71G3CAuNAKefSVoy8uZ2Stg1KzYxpBb5hB5kuU8cpw=
-  - secure: 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
-  - secure: jRSKNwKeuq2wRif3UMcq/3V5qnCBLQB9TwyvFUGAs8eYqE83WnOcNqss2psTlY7JOHJUnNrXUvXLwp4bxlhkLqI7bUtRt96bPlZfCXKPUV95y8QMqahH6mMQARzFGhNjsU11ofYQROYoIg8I/IHMvsbQLTaf00D1d3PKqzRP+U9N/Mg8VlbzX45oSAsx7kC3KtTIVZQ1vwxt2wC9JViyDgJBHakH/tpvAbpkbMROQiIEXPY8G7P+6F1Cz4ipEltwIpZPDcRMb09/gAF1qnWIl1Xc3BLQnE+H/fA7nYF6bKwoMwISM3/DwU7n1ola7GWJ+nbuiisMrT1+gBTeQg0UG0mN8ILIyNlhOb3gd+5FvIyXWrXWN0PEonuTRlcYy3Tz7OiGadjQDuHLqH8uoqnZzSHF4Hii6lndkCK8Vrosi8aj42xcahE5MS+KrI7ji5xF2ILajEBcSHWWV3aIfz4zEzI/g+7FgKpTxViru5zw6Jdp+kijN9cMl6rhIKumfhyRzqf9apSTlVCKlc64FqfW6yCz+oVcBFmyLMT+hAWBGaj6qpFIEDEtx8wSfzhMGJCvsqHxNpM02g6WKI9GVGsp9y85sJ6mu/qkmZgw6bINU/pSp1oHquBmfl5OOkjuqOloOtFQMZUVQYBTSCK87DlYKKmCOtvUxeRMsrlbQLR9g2k= # GPG_PASSPHRASE
 script:
 - "./.travis/build.sh"

.travis/build.sh

@@ -99,18 +99,3 @@ if [ "$arch" != 'ppc64le' ] && [ "$arch" != 's390x' ]; then
 
   set -e
 fi
-
-
-# Only continue if Java 8 and x86_64 platform
-if [ "$JAVA_MAJOR_VERSION" == "1" ] && [ "$arch" == "x86_64" ]; then
-
-  # Push only releases
-  if [ "$PULL_REQUEST" != "false" ] ; then
-    echo "Building Pull Request - nothing to push"
-  elif [ "$TAG" = "latest" ] && [ "$BRANCH" != "main" ]; then
-    echo "Not in main branch and not in release tag - nothing to push"
-  else
-    echo "Pushing JARs"
-    ./.travis/push-to-nexus.sh
-  fi
-fi