azure-pipelines.yml

# Azure DevOps pipeline to build, check source codes, run tests, and deploy.
#
# To make Danger JS run on a pull request you need to add the following pipeline
# variable and set it with a GitHub access token (scope public_repo); otherwise
# set its value to 'skip' without marking it secret:
# - DANGER_GITHUB_API_TOKEN
#
# To enable the deployment in any environment you need to configure the following 
# global variable otherwise all the deployment jobs will be always skipped:
# - DO_DEPLOY = true
# you also need to configure the following additional parameters based on the 
# environment(s) to update when running the pipeline:
# - PRODUCTION_ENABLE_DEPLOY = true
# - TEST_ENABLE_DEPLOY = true
#
# The following parameter and variables must also be set to run the deployment:
# - PRODUCTION_DEPLOY_TYPE:
#    -- 'deployToAzureBlob': deploy to 'AzureBlobStorage'
# - PRODUCTION_AZURE_SUBSCRIPTION
# - PRODUCTION_STORAGE_ACCOUNT_NAME
#
# - TEST_DEPLOY_TYPE:
#    -- 'deployToAzureBlob': deploy to 'AzureBlobStorage'
# - TEST_AZURE_SUBSCRIPTION
# - TEST_STORAGE_ACCOUNT_NAME
#

variables:
  NODE_VERSION: '10.14.1'
  YARN_CACHE_FOLDER: $(Pipeline.Workspace)/.yarn
  BLOB_CONTAINER_NAME: '$web'
  REACT_APP_API_URL: 'https://api.io.italia.it'
  ADB2C_TENANT_AUDIENCE: 'https://iobackoffice.b2clogin.com/iobackoffice.onmicrosoft.com/c2c9dbf8-9fc3-4f69-b8a6-c87d10d0ab06'
  ADB2C_TENANT_AUTHORITY: 'https://iobackoffice.b2clogin.com/iobackoffice.onmicrosoft.com/B2C_1_backoffice'
  ADB2C_TENANT_B2CSCOPES: 'https://iobackoffice.onmicrosoft.com/c2c9dbf8-9fc3-4f69-b8a6-c87d10d0ab06/ProfileRead'
  ADB2C_TENANT_CLIENTID: 'c2c9dbf8-9fc3-4f69-b8a6-c87d10d0ab06'

parameters:
  - name: 'TEST_ENABLE_DEPLOY'
    displayName: 'Enable deploy in test environment'
    type: boolean
    default: false

  - name: 'TEST_DEPLOY_TYPE'
    displayName: 'Method to achieve deployment in Test (if enabled):'
    type: string
    default: deployToAzureBlob
    values:
      - deployToAzureBlob

  - name: 'PRODUCTION_ENABLE_DEPLOY'
    displayName: 'Enable deploy in production environment'
    type: boolean
    default: true

  - name: 'PRODUCTION_DEPLOY_TYPE'
    displayName: 'Method to achieve deployment in Production (if enabled):'
    type: string
    default: deployToAzureBlob
    values:
      - deployToAzureBlob

# This pipeline can be manually run or is automatically triggered whenever one 
# of the following conditions is true:
# - a push is made to any branch in the repository (not only 'master')
# - a pull request is created
# - a tag named 'latest' is pushed
# Note. In the last case, the tag can be (re-)created using the Git CLI, e.g.:
#    git push -f origin <abfb967>:refs/tags/latest
trigger:
  branches:
    include:
      - '*'
      - refs/tags/latest

# This pipeline has been implemented to be run on hosted agent pools based both
# on 'windows' and 'ubuntu' virtual machine images and using the scripts defined
# in the package.json file. Since we are usually deploying on Azure Web app on Windows
# runtime, the pipeline is currently configured to use a Windows hosted image for
# verifying the build and deploying, and Linux OS for all other jobs for faster 
# execution. In this specific case the deploying just need to copy static Web contents.
pool:
  vmImage: 'windows-2019'

stages:
  # A) Build and code validation (always run)
  - stage: Build
    dependsOn: []
    jobs:
      # A1) Checkout, install module and build code (use Windows OS)
      - job: make_build
        steps:
          - template: azure-templates/make-build-steps.yml
            parameters:
              make: build
            
      # A2) Analyze source code to find errors with lint (use Linux VM)
      - job: lint
        pool:
          vmImage: 'ubuntu-latest'
        steps:
          - template: azure-templates/make-build-steps.yml
            parameters:
              make: install_dependencies

          - script: |
              yarn lint
            displayName: 'Lint'

      # A3) Run Danger (skipping if not executing on a PR)
      - job: danger
        pool:
          vmImage: 'ubuntu-latest'
        condition: 
          and(
            succeeded(), 
            and(
              eq(variables['Build.Reason'], 'PullRequest'),
              ne(variables['DANGER_GITHUB_API_TOKEN'], 'skip')
            )
          )
        steps:
          - template: azure-templates/make-build-steps.yml
            parameters:
              make: install_dependencies

          - bash: |
              yarn danger ci
            env:
              DANGER_GITHUB_API_TOKEN: '$(DANGER_GITHUB_API_TOKEN)'
            displayName: 'Danger CI'

  # B) Run unit tests: no test is currently available (stage Test is missed)

  # C) Deploy to TEST environment if the following conditions apply:
  #    - continuos deployment (automatic):
  #       - $DO_DEPLOY == true and TEST_ENABLE_DEPLOY == true
  #       - there is a push on 'master' branch 
  #    - manual deployment:
  #       - $DO_DEPLOY == true and TEST_ENABLE_DEPLOY == true
  - ${{ if eq(parameters.TEST_ENABLE_DEPLOY, true) }}:
    - stage: Deploy_test
      condition: 
        and(
          succeeded(),
          and (
            eq(variables['DO_DEPLOY'], true),
            or(
              eq(variables['Build.SourceBranch'], 'refs/heads/master'),
              eq(variables['Build.Reason'], 'Manual')
            )
          )
        )
      dependsOn:
        - Build
      jobs:
        - job: deploy_to_container
          steps:
            - template: azure-templates/deploy-steps.yml
              parameters:
                deployType: 'deployToAzureBlob'
                azureSubscription: '$(TEST_AZURE_SUBSCRIPTION)'
                storageAccountName: '$(TEST_STORAGE_ACCOUNT_NAME)'
                containerName: '$(BLOB_CONTAINER_NAME)'


  # D) Deploy to PRODUCTION environment if one of the following conditions apply:
  #    - continuos deployment (automatic):
  #       - $DO_DEPLOY == true and PRODUCTION_ENABLE_DEPLOY == true
  #       - the 'latest' tag is pushed 
  #    - manual deployment:
  #       - $DO_DEPLOY == true and PRODUCTION_ENABLE_DEPLOY == true
  - ${{ if eq(parameters.PRODUCTION_ENABLE_DEPLOY, true) }}:
    - stage: Deploy_production
      condition: 
        and(
          succeeded(),
          and (
            eq(variables['DO_DEPLOY'], true),
            or(
              eq(variables['Build.SourceBranch'], 'refs/tags/latest'),
              eq(variables['Build.Reason'], 'Manual')
            )
          )
        )
      dependsOn:
        - Build
      jobs:
        - job: deploy_to_container
          steps:
            - template: azure-templates/deploy-steps.yml
              parameters:
                deployType: 'deployToAzureBlob'
                azureSubscription: '$(PRODUCTION_AZURE_SUBSCRIPTION)'
                storageAccountName: '$(PRODUCTION_STORAGE_ACCOUNT_NAME)'
                containerName: '$(BLOB_CONTAINER_NAME)'