Skip to content

Commit e38ee48

Browse files
premunpremun
authored
[Rollout] Production rollout 2025-01-10 (#4315)
2 parents 4b4c10f + de38cfb commit e38ee48

File tree

37 files changed

+978
-360
lines changed

37 files changed

+978
-360
lines changed

‎.config/1espt/PipelineAutobaseliningConfig.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,6 @@ pipelines:
1616
credscan:
1717
lastModifiedDate: 2024-03-15
1818
binskim:
19-
lastModifiedDate: 2024-03-15
19+
lastModifiedDate: 2025-01-09
2020
spotbugs:
2121
lastModifiedDate: 2024-03-15

‎.config/guardian/.gdnbaselines‎

Lines changed: 182 additions & 62 deletions
Original file line numberDiff line numberDiff line change
@@ -1,63 +1,183 @@
1-
{
2-
"properties": {
3-
"helpUri": "https://eng.ms/docs/microsoft-security/security/azure-security/cloudai-security-fundamentals-engineering/security-integration/guardian-wiki/microsoft-guardian/general/baselines"
4-
},
5-
"version": "1.0.0",
6-
"baselines": {
7-
"default": {
8-
"name": "default",
9-
"createdDate": "2024-03-15 14:24:22Z",
10-
"lastUpdatedDate": "2024-03-15 14:24:22Z"
11-
}
12-
},
13-
"results": {
14-
"5fbfa3c1727d4dd17fced99456030eeee06e543325c355c5305097908bcee03a": {
15-
"signature": "5fbfa3c1727d4dd17fced99456030eeee06e543325c355c5305097908bcee03a",
16-
"alternativeSignatures": [
17-
"cb865f28719d0426460c4a4b53de3a57a89fba98cd726af9da222f2f712eb616"
18-
],
19-
"target": "src/Maestro/cluster-template/deploy.ps1",
20-
"line": 32,
21-
"memberOf": [
22-
"default"
23-
],
24-
"tool": "psscriptanalyzer",
25-
"ruleId": "PSAvoidUsingConvertToSecureStringWithPlainText",
26-
"createdDate": "2024-03-15 14:24:22Z",
27-
"expirationDate": "2024-09-01 18:56:13Z",
28-
"justification": "This error is baselined with an expiration date of 180 days from 2024-03-15 18:56:13Z"
29-
},
30-
"9fe69aee114a2f195eedbc788b05d437a744099ba443fea45bd94100a00775ec": {
31-
"signature": "9fe69aee114a2f195eedbc788b05d437a744099ba443fea45bd94100a00775ec",
32-
"alternativeSignatures": [
33-
"9d11467e9c369db0412117d7672bf2d4d95d575e016e554f0c0e9f96bead3767"
34-
],
35-
"target": "src/Maestro/cluster-template/deploy.ps1",
36-
"line": 114,
37-
"memberOf": [
38-
"default"
39-
],
40-
"tool": "psscriptanalyzer",
41-
"ruleId": "PSAvoidUsingConvertToSecureStringWithPlainText",
42-
"createdDate": "2024-03-15 14:24:22Z",
43-
"expirationDate": "2024-09-01 18:56:13Z",
44-
"justification": "This error is baselined with an expiration date of 180 days from 2024-03-15 18:56:13Z"
45-
},
46-
"182e5e8989331062b02910ce3f6c51f9c5e70add756fd45fd2318b1221f1be65": {
47-
"signature": "182e5e8989331062b02910ce3f6c51f9c5e70add756fd45fd2318b1221f1be65",
48-
"alternativeSignatures": [
49-
"acc79ea4390cca8757bc1dac6cb4578c8a1cc6c95750da2fa5ccd20da18d6559"
50-
],
51-
"target": "src/Maestro/cluster-template/deploy.ps1",
52-
"line": 115,
53-
"memberOf": [
54-
"default"
55-
],
56-
"tool": "psscriptanalyzer",
57-
"ruleId": "PSAvoidUsingConvertToSecureStringWithPlainText",
58-
"createdDate": "2024-03-15 14:24:22Z",
59-
"expirationDate": "2024-09-01 18:56:13Z",
60-
"justification": "This error is baselined with an expiration date of 180 days from 2024-03-15 18:56:13Z"
61-
}
62-
}
1+
{
2+
"properties": {
3+
"helpUri": "https://eng.ms/docs/microsoft-security/security/azure-security/cloudai-security-fundamentals-engineering/security-integration/guardian-wiki/microsoft-guardian/general/baselines"
4+
},
5+
"version": "1.0.0",
6+
"baselines": {
7+
"default": {
8+
"name": "default",
9+
"createdDate": "2024-03-15 14:24:22Z",
10+
"lastUpdatedDate": "2024-03-15 14:24:22Z"
11+
}
12+
},
13+
"results": {
14+
"5fbfa3c1727d4dd17fced99456030eeee06e543325c355c5305097908bcee03a": {
15+
"signature": "5fbfa3c1727d4dd17fced99456030eeee06e543325c355c5305097908bcee03a",
16+
"alternativeSignatures": [
17+
"cb865f28719d0426460c4a4b53de3a57a89fba98cd726af9da222f2f712eb616"
18+
],
19+
"target": "src/Maestro/cluster-template/deploy.ps1",
20+
"line": 32,
21+
"memberOf": [
22+
"default"
23+
],
24+
"tool": "psscriptanalyzer",
25+
"ruleId": "PSAvoidUsingConvertToSecureStringWithPlainText",
26+
"createdDate": "2024-03-15 14:24:22Z",
27+
"expirationDate": "2024-09-01 18:56:13Z",
28+
"justification": "This error is baselined with an expiration date of 180 days from 2024-03-15 18:56:13Z"
29+
},
30+
"9fe69aee114a2f195eedbc788b05d437a744099ba443fea45bd94100a00775ec": {
31+
"signature": "9fe69aee114a2f195eedbc788b05d437a744099ba443fea45bd94100a00775ec",
32+
"alternativeSignatures": [
33+
"9d11467e9c369db0412117d7672bf2d4d95d575e016e554f0c0e9f96bead3767"
34+
],
35+
"target": "src/Maestro/cluster-template/deploy.ps1",
36+
"line": 114,
37+
"memberOf": [
38+
"default"
39+
],
40+
"tool": "psscriptanalyzer",
41+
"ruleId": "PSAvoidUsingConvertToSecureStringWithPlainText",
42+
"createdDate": "2024-03-15 14:24:22Z",
43+
"expirationDate": "2024-09-01 18:56:13Z",
44+
"justification": "This error is baselined with an expiration date of 180 days from 2024-03-15 18:56:13Z"
45+
},
46+
"182e5e8989331062b02910ce3f6c51f9c5e70add756fd45fd2318b1221f1be65": {
47+
"signature": "182e5e8989331062b02910ce3f6c51f9c5e70add756fd45fd2318b1221f1be65",
48+
"alternativeSignatures": [
49+
"acc79ea4390cca8757bc1dac6cb4578c8a1cc6c95750da2fa5ccd20da18d6559"
50+
],
51+
"target": "src/Maestro/cluster-template/deploy.ps1",
52+
"line": 115,
53+
"memberOf": [
54+
"default"
55+
],
56+
"tool": "psscriptanalyzer",
57+
"ruleId": "PSAvoidUsingConvertToSecureStringWithPlainText",
58+
"createdDate": "2024-03-15 14:24:22Z",
59+
"expirationDate": "2024-09-01 18:56:13Z",
60+
"justification": "This error is baselined with an expiration date of 180 days from 2024-03-15 18:56:13Z"
61+
},
62+
"4e8519184f6e07a6b58e43ba7d65c2da43bb3e70d958348f6daca75f5a72694a": {
63+
"signature": "4e8519184f6e07a6b58e43ba7d65c2da43bb3e70d958348f6daca75f5a72694a",
64+
"alternativeSignatures": [
65+
"53ce62c6a1cd91d46ea67ae713e9bf6ff3f2b19d43d2f90668e2a52c0d36a7a8"
66+
],
67+
"target": "artifacts/bin/ProductConstructionService.ScenarioTests/Release/net8.0/publish/CodeCoverage/CodeCoverage.exe",
68+
"memberOf": [
69+
"default"
70+
],
71+
"tool": "binskim",
72+
"ruleId": "BA2008",
73+
"createdDate": "2025-01-09 09:55:43Z",
74+
"expirationDate": "2025-06-28 11:53:26Z",
75+
"justification": "This error is baselined with an expiration date of 180 days from 2025-01-09 11:53:26Z"
76+
},
77+
"058397f86faed51dab330941a2f62509e338b6a0c72367cb9f91741ee8554f6e": {
78+
"signature": "058397f86faed51dab330941a2f62509e338b6a0c72367cb9f91741ee8554f6e",
79+
"alternativeSignatures": [
80+
"a0c978e8c82018b14abe4ca0571e5e57857dac671cada60fe544c7d655b23b32"
81+
],
82+
"target": "artifacts/bin/ProductConstructionService.ScenarioTests/Release/net8.0/publish/CodeCoverage/covrun32.dll",
83+
"memberOf": [
84+
"default"
85+
],
86+
"tool": "binskim",
87+
"ruleId": "BA2008",
88+
"createdDate": "2025-01-09 09:55:43Z",
89+
"expirationDate": "2025-06-28 11:53:26Z",
90+
"justification": "This error is baselined with an expiration date of 180 days from 2025-01-09 11:53:26Z"
91+
},
92+
"fb141714ff8b20fa20637a91b03cbcc447c997f49b4d69f310e37669e0ddfbd9": {
93+
"signature": "fb141714ff8b20fa20637a91b03cbcc447c997f49b4d69f310e37669e0ddfbd9",
94+
"alternativeSignatures": [
95+
"e80416fdb630ef941a63faeb27ec149418cb622d74d597b6b3bfd046856003fd"
96+
],
97+
"target": "artifacts/bin/ProductConstructionService.ScenarioTests/Release/net8.0/publish/CodeCoverage/msdia140.dll",
98+
"memberOf": [
99+
"default"
100+
],
101+
"tool": "binskim",
102+
"ruleId": "BA2008",
103+
"createdDate": "2025-01-09 09:55:43Z",
104+
"expirationDate": "2025-06-28 11:53:26Z",
105+
"justification": "This error is baselined with an expiration date of 180 days from 2025-01-09 11:53:26Z"
106+
},
107+
"4d35b1e8fec9ef948014197d17b004a6d4475fa4e9adadf8717d533c31c7d55e": {
108+
"signature": "4d35b1e8fec9ef948014197d17b004a6d4475fa4e9adadf8717d533c31c7d55e",
109+
"alternativeSignatures": [
110+
"8e411e5767653c1df6e5f89b23a8370ad4ca887b7c41aefaea0d78433fa1d8ca"
111+
],
112+
"target": "artifacts/bin/ProductConstructionService.ScenarioTests/Release/net8.0/publish/CodeCoverage/amd64/CodeCoverage.exe",
113+
"memberOf": [
114+
"default"
115+
],
116+
"tool": "binskim",
117+
"ruleId": "BA2008",
118+
"createdDate": "2025-01-09 09:55:43Z",
119+
"expirationDate": "2025-06-28 11:53:26Z",
120+
"justification": "This error is baselined with an expiration date of 180 days from 2025-01-09 11:53:26Z"
121+
},
122+
"988f4defc51a8713c4ca1797451ef6d500de89daa9c324a746638ebfa79818cd": {
123+
"signature": "988f4defc51a8713c4ca1797451ef6d500de89daa9c324a746638ebfa79818cd",
124+
"alternativeSignatures": [
125+
"2b1710cdf2ac3c29cde6aebad3620447a8fcfc146c806398efa41ce98853e6b1"
126+
],
127+
"target": "artifacts/bin/ProductConstructionService.ScenarioTests/Release/net8.0/publish/CodeCoverage/amd64/covrun64.dll",
128+
"memberOf": [
129+
"default"
130+
],
131+
"tool": "binskim",
132+
"ruleId": "BA2008",
133+
"createdDate": "2025-01-09 09:55:43Z",
134+
"expirationDate": "2025-06-28 11:53:26Z",
135+
"justification": "This error is baselined with an expiration date of 180 days from 2025-01-09 11:53:26Z"
136+
},
137+
"7096a7f01380c56982d349db0f58bec2f07520aa3c9e5c6897bc38035abee850": {
138+
"signature": "7096a7f01380c56982d349db0f58bec2f07520aa3c9e5c6897bc38035abee850",
139+
"alternativeSignatures": [
140+
"cbcb209a796843b2d1ac3ed5db3a9704610fc33a024243acf686ab394430de1d"
141+
],
142+
"target": "artifacts/bin/ProductConstructionService.ScenarioTests/Release/net8.0/publish/CodeCoverage/amd64/msdia140.dll",
143+
"memberOf": [
144+
"default"
145+
],
146+
"tool": "binskim",
147+
"ruleId": "BA2008",
148+
"createdDate": "2025-01-09 09:55:43Z",
149+
"expirationDate": "2025-06-28 11:53:26Z",
150+
"justification": "This error is baselined with an expiration date of 180 days from 2025-01-09 11:53:26Z"
151+
},
152+
"89be4383260cfc137e2107c9be6cc9acfb70d3fbef1d1df3afa7e1eaf06f3a31": {
153+
"signature": "89be4383260cfc137e2107c9be6cc9acfb70d3fbef1d1df3afa7e1eaf06f3a31",
154+
"alternativeSignatures": [
155+
"5fe659347158af42da20459c24b8c5acc9f032aa488a71c799af899f3c5a3414"
156+
],
157+
"target": "artifacts/bin/ProductConstructionService.ScenarioTests/Release/net8.0/publish/CodeCoverage/arm64/covrunarm64.dll",
158+
"memberOf": [
159+
"default"
160+
],
161+
"tool": "binskim",
162+
"ruleId": "BA2008",
163+
"createdDate": "2025-01-09 09:55:43Z",
164+
"expirationDate": "2025-06-28 11:53:26Z",
165+
"justification": "This error is baselined with an expiration date of 180 days from 2025-01-09 11:53:26Z"
166+
},
167+
"a16ab0e21e4b0ea806c5455ed2eb7099a777f77201bbc2d998429a2225ea9770": {
168+
"signature": "a16ab0e21e4b0ea806c5455ed2eb7099a777f77201bbc2d998429a2225ea9770",
169+
"alternativeSignatures": [
170+
"96638be48f099b56684de8bd3d0505f4cc25ed3eb87e9bd6f03fbc586aa6f2e4"
171+
],
172+
"target": "artifacts/bin/ProductConstructionService.ScenarioTests/Release/net8.0/publish/CodeCoverage/arm64/msdia140.dll",
173+
"memberOf": [
174+
"default"
175+
],
176+
"tool": "binskim",
177+
"ruleId": "BA2008",
178+
"createdDate": "2025-01-09 09:55:43Z",
179+
"expirationDate": "2025-06-28 11:53:26Z",
180+
"justification": "This error is baselined with an expiration date of 180 days from 2025-01-09 11:53:26Z"
181+
}
182+
}
63183
}

‎.github/ISSUE_TEMPLATE/rollout-issue.md‎

Lines changed: 4 additions & 28 deletions
Original file line numberDiff line numberDiff line change
@@ -15,9 +15,8 @@ This issue tracks the `arcade-services` repository rollout. It provides the pers
1515

1616
## Build status check
1717
- [ ] Check the status of the [dotnet-arcade-services-weekly](https://dev.azure.com/dnceng/internal/_build?definitionId=993) pipeline
18-
- [ ] Rotate any secrets that need manual rotation
19-
- [ ] Check the status of the [arcade-services-internal-ci](https://dev.azure.com/dnceng/internal/_build?definitionId=252) pipeline. Try to fix issues, if any, so that we have a green build before the rollout day.
20-
- [ ] Check the `Rollout` column in the [Product Construction](https://github.com/orgs/dotnet/projects/276) board - move any issues rolled-out last week into `Done`
18+
- [ ] Check the status of the [arcade-services-internal-ci](https://dev.azure.com/dnceng/internal/_build?definitionId=252) pipeline.
19+
- [ ] Check the `Rollout` column in the [Product Construction](https://github.com/orgs/dotnet/projects/276) board - move any issues rolled-out **last week** into `Done`
2120

2221
## Rollout preparation
2322
- [ ] Create the rollout PR:
@@ -26,18 +25,15 @@ This issue tracks the `arcade-services` repository rollout. It provides the pers
2625
- Create a PR on GitHub from the `rollout/YYYY-MM-DD` branch to `production`
2726
- Name the PR `[Rollout] Production rollout YYYY-MM-DD`
2827
- Link this issue in the PR description
29-
- [ ] Link the rollout PR to the [Rollout PRs](#rollout-prs) section of this issue
3028
- [ ] Merge the prepared rollout PR (⚠️ **DO NOT SQUASH**)
31-
- [ ] Link the rollout build to the [Rollout build](#rollout-build) section of this issue
32-
- [ ] Verify that Maestro opened a `production => main` PR in `arcade-services` with the rollout merge commit ([example](https://github.com/dotnet/arcade-services/pull/2741)). There should be no changes in the PR to any files. **Do not merge the PR yet**.
29+
- [ ] Verify that a `production => main` PR was opened in `arcade-services` with the rollout merge commit ([example](https://github.com/dotnet/arcade-services/pull/2741)). There should be no changes in the PR to any files. **Do not merge the PR yet**.
3330
- [ ] Ensure the build is green and stops at the `Approval` phase
3431

3532
## Rollout
3633
- [ ] Approve the `Approval` stage of the rollout build.
3734
- [ ] Monitor the rollout build for failures.
3835
- Note: this [PCS exceptions query](https://ms.portal.azure.com#@72f988bf-86f1-41af-91ab-2d7cd011db47/blade/Microsoft_OperationsManagementSuite_Workspace/Logs.ReactView/resourceId/%2Fsubscriptions%2Ffbd6122a-9ad3-42e4-976e-bccb82486856%2FresourceGroups%2Fproduct-construction-service%2Fproviders%2Fmicrosoft.insights%2Fcomponents%2Fproduct-construction-service-ai-prod/source/LogsBlade.AnalyticsShareLinkToQuery/q/H4sIAAAAAAAAAz2MOw6DMBBE%252B5xiSlsiRZDS5i7GjGQXu0brRSSIwyekoH4fvjMXr0377cBWaIRXYfckC17QtoV4H%252Bcf7KtIsroTua3qIWL6YKoaLn%252FA4ylxgNBLOxOjzrT%252FMJdk%252FgV08ryabQAAAA%253D%253D) might help in diagnosing issues.
3936
- [ ] Keep track of any issues encountered during the rollout either directly in this issue, or in a dedicated issue linked to this issue
40-
- [ ] When finished, update the rollout stats in the [Stats](#stats) section below. The statistics will be available in Kusto a few minutes after the build was finished
4137
- [ ] Merge the `production => main` PR in `arcade-services` (⚠️ **DO NOT SQUASH**)
4238
- [ ] Move rolled-out issues/PRs in the `Rollout` column of the [Product Construction](https://github.com/orgs/dotnet/projects/276) board into `Done`. Verify that PRs have a reference to the release at the bottom ([example](https://github.com/dotnet/arcade-services/pull/3663)). If needed, manually add a comment with the reference ([example](https://github.com/dotnet/arcade-services/pull/3680#issuecomment-2191186247))
4339
- [ ] Close this issue with closing comment describing a high-level summary of issues encountered during the rollout
@@ -46,36 +42,16 @@ This issue tracks the `arcade-services` repository rollout. It provides the pers
4642
<!-- UNCOMMENT HERE IN CASE OF A ROLLBACK
4743
## Rollback
4844
49-
In case the services don't work as expected after the rollout, it's necessary to roll back.
45+
A rollback was necessary during this rollout.
5046
5147
- [ ] Announce the issues on the [Rollout channel](https://teams.microsoft.com/l/channel/19%3a72e283b51f9e4567ba24a35328562df4%40thread.skype/Rollout?groupId=147df318-61de-4f04-8f7b-ecd328c256bb&tenantId=72f988bf-86f1-41af-91ab-2d7cd011db47), rollout issue in [AzDO](https://dev.azure.com/dnceng/internal/_workitems/)
5248
- [ ] Notify the partners that we'll be rolling back
5349
- [ ] Rollback as described on the [Rollback / Hotfix](https://dev.azure.com/dnceng/internal/_wiki/wikis/DNCEng%20Services%20Wiki/831/Rollout?anchor=rollback-/-hotfix) wiki page
5450
- [ ] Validate the rolled-back services are running as expected
5551
- [ ] Announce successful rollout on the [Rollout channel](https://teams.microsoft.com/l/channel/19%3a72e283b51f9e4567ba24a35328562df4%40thread.skype/Rollout?groupId=147df318-61de-4f04-8f7b-ecd328c256bb&tenantId=72f988bf-86f1-41af-91ab-2d7cd011db47)
5652
- [ ] Notify the partners that the rollback has been finished (as reply on the original email)
57-
58-
### Rollback PRs
59-
- `<TO BE FILLED (IF APPICABLE)>`
6053
-->
6154

62-
# Rollout data
63-
64-
## Rollout PRs
65-
66-
* The main PR: <TO BE FILLED>
67-
68-
## Rollout build
69-
70-
* Rollout AzDO build: <TO BE FILLED>
71-
72-
## Rollout times
73-
74-
Use the following [Kusto query](https://dataexplorer.azure.com/clusters/engsrvprod/databases/engineeringdata?query=H4sIAAAAAAAAA52QP0%2FDQAzF934KK0tzUlgYU2UAtUJdUNWyIRSZxG0O3eWCzwHKn%2B%2BOE4oIjNxkvbN%2Fz341VQ6Z4LEnPpYdMnoS4phug3Ohl3WdgwvtAQqzmDkSuCJZ9oxiQwsFpKU9NWRQ7i1H2QkeKIcobEfR4R%2FNwNsM9N1YT862tKUqcB1H7R2eG9JtLnvr6nUNRQFq8OvrWhcE26YTt6mLOTXH3ntk%2B0rqiiy6qteh3VAPxiYDautBxZeJehruODxQJTA5dB%2FYo5SiXbHDNh2mz77YGSRNk3ufaEIfi1mnR8oIup1vmC46pT2hg3RsMvM7pUmIFWru6STNn8QVOAaQaLHp752NDfRRo4MlcpUYk33jQ5T%2F8ZfUuXAcDFbnKxCKEpW7%2BATR1TCdDgIAAA%3D%3D) to gather data about rollout times:
75-
76-
* Pre-Approval run time: `<TO BE FILLED>`
77-
* Post-Approval run time: `<TO BE FILLED>`
78-
7955
# Useful links
8056

8157
- AzDO pipelines

0 commit comments

Comments
 (0)