Patch remaining release stages that are affected by CfsClean (#46201)

scbedd · web-flow · commit b0631e2c14fe · 2026-04-09T12:52:20.000-07:00
* patch remaining items that may crash during a release
diff --git a/eng/pipelines/templates/jobs/smoke.tests.yml b/eng/pipelines/templates/jobs/smoke.tests.yml
@@ -7,6 +7,9 @@ parameters:
   - name: ArtifactName
     type: string
     default: "not-specified"
+  - name: DevFeedName
+    type: string
+    default: 'public/azure-sdk-for-python'
 
 jobs:
   - ${{ if eq(parameters.Daily, false) }}:
@@ -67,6 +70,7 @@ jobs:
           Artifact: ${{ parameters.Artifact }}
           ArtifactName: ${{ parameters.ArtifactName }}
           Daily: ${{ parameters.Daily }}
+          DevFeedName: ${{ parameters.DevFeedName }}
 
   - ${{ if eq(parameters.Daily, true) }}:
     - job: run_smoke_test_windows
@@ -99,6 +103,7 @@ jobs:
             Artifact: ${{ parameters.Artifact }}
             ArtifactName: ${{ parameters.ArtifactName }}
             Daily: ${{ parameters.Daily }}
+            DevFeedName: ${{ parameters.DevFeedName }}
 
     - job: run_smoke_test_macos
       displayName: Run Smoke Test MacOS
@@ -131,4 +136,5 @@ jobs:
           parameters:
             Artifact: ${{ parameters.Artifact }}
             ArtifactName: ${{ parameters.ArtifactName }}
-            Daily: ${{ parameters.Daily }}
+            Daily: ${{ parameters.Daily }}
+            DevFeedName: ${{ parameters.DevFeedName }}
diff --git a/eng/pipelines/templates/stages/archetype-python-release.yml b/eng/pipelines/templates/stages/archetype-python-release.yml
@@ -42,6 +42,10 @@ stages:
                 inputs:
                   versionSpec: '3.12'
 
+              - template: /eng/pipelines/templates/steps/auth-dev-feed.yml
+                parameters:
+                  DevFeedName: ${{ parameters.DevFeedName }}
+
               - template: /eng/common/pipelines/templates/steps/retain-run.yml
 
               - template: /eng/common/pipelines/templates/steps/set-test-pipeline-version.yml
@@ -125,6 +129,13 @@ stages:
                         inputs:
                           versionSpec: '3.9'
 
+                      - template: /eng/pipelines/templates/steps/auth-dev-feed.yml
+                        parameters:
+                          DevFeedName: ${{ parameters.DevFeedName }}
+                          EnableTwineAuth: false
+                          EnablePipAuth: true
+                          EnableUvAuth: false
+
                       - script: |
                           python -m pip install -r $(Pipeline.Workspace)/release_artifact/release_requirements.txt
                         displayName: Install Release Dependencies
@@ -280,6 +291,10 @@ stages:
                   inputs:
                     versionSpec: '3.12.x'
 
+                - template: /eng/pipelines/templates/steps/auth-dev-feed.yml
+                  parameters:
+                    DevFeedName: ${{ parameters.DevFeedName }}
+
                 - template: /eng/pipelines/templates/steps/install-rex-validation-tool.yml
 
                 - template: /eng/common/pipelines/templates/steps/update-docsms-metadata.yml
@@ -307,6 +322,11 @@ stages:
             steps:
               - checkout: self
               - task: UsePythonVersion@0
+
+              - template: /eng/pipelines/templates/steps/auth-dev-feed.yml
+                parameters:
+                  DevFeedName: ${{ parameters.DevFeedName }}
+
               - script: |
                   python -m pip install "./eng/tools/azure-sdk-tools"
                 displayName: Install versioning tool dependencies
@@ -333,6 +353,7 @@ stages:
                 Daily: false
                 ArtifactName: ${{ parameters.ArtifactName }}
                 Artifact: ${{ artifact }}
+                DevFeedName: ${{ parameters.DevFeedName }}
 
   - ${{ if eq(variables['System.TeamProject'], 'internal') }}:
     - stage: Integration
@@ -350,15 +371,17 @@ stages:
         - download: current
           artifact: ${{parameters.ArtifactName}}
           timeoutInMinutes: 5
+
         - task: UsePythonVersion@0
-        - script: |
-            set -e
-            python -m pip install twine
-          displayName: Install Twine
 
         - template: ../steps/auth-dev-feed.yml
           parameters:
             DevFeedName: ${{ parameters.DevFeedName }}
+        
+        - script: |
+            set -e
+            python -m pip install twine
+          displayName: Install Twine
 
         - ${{ each artifact in parameters.Artifacts }}:
           - ${{if ne(artifact.skipPublishDevFeed, 'true')}}:
@@ -412,6 +435,10 @@ stages:
             inputs:
               versionSpec: '3.11'
 
+          - template: /eng/pipelines/templates/steps/auth-dev-feed.yml
+            parameters:
+              DevFeedName: ${{ parameters.DevFeedName }}
+
           - template: /eng/pipelines/templates/steps/install-rex-validation-tool.yml
 
           - template: /eng/common/pipelines/templates/steps/update-docsms-metadata.yml
diff --git a/eng/pipelines/templates/steps/auth-dev-feed.yml b/eng/pipelines/templates/steps/auth-dev-feed.yml
@@ -1,5 +1,8 @@
 parameters:
   DevFeedName: 'public/azure-sdk-for-python'
+  EnableTwineAuth: true
+  EnablePipAuth: true
+  EnableUvAuth: true
 
 steps:
   - pwsh: |
@@ -14,27 +17,30 @@ steps:
       echo "Using DevopsFeed = $devopsFeedName"
     displayName: Setup DevOpsFeedName
 
-  - task: TwineAuthenticate@0
-    displayName: 'Twine Authenticate to feed'
-    inputs:
-      artifactFeeds: $(DevFeedName)
+  - ${{ if eq(parameters.EnableTwineAuth, true) }}:
+    - task: TwineAuthenticate@0
+      displayName: 'Twine Authenticate to feed'
+      inputs:
+        artifactFeeds: $(DevFeedName)
 
-  - task: PipAuthenticate@1
-    displayName: 'Pip Authenticate to feed'
-    inputs:
-      artifactFeeds: $(DevFeedName)
-      onlyAddExtraIndex: false
+  - ${{ if eq(parameters.EnablePipAuth, true) }}:
+    - task: PipAuthenticate@1
+      displayName: 'Pip Authenticate to feed'
+      inputs:
+        artifactFeeds: $(DevFeedName)
+        onlyAddExtraIndex: false
 
-  - pwsh: |
-      if ($env:PIP_INDEX_URL) {
-        Write-Host "Found pip index URL: $($env:PIP_INDEX_URL)"
-        # UV_DEFAULT_INDEX is the canonical replacement for the deprecated UV_INDEX_URL (uv 0.4.23+).
-        # PIP_INDEX_URL is set by PipAuthenticate@1 and contains embedded credentials, which uv
-        # will use for Basic auth against the ADO feed (and its PyPI upstream) per astral-sh/uv#12651.
-        Write-Host "##vso[task.setvariable variable=UV_DEFAULT_INDEX]$($env:PIP_INDEX_URL)"
-        # Disable keyring so uv uses the URL-embedded credentials directly.
-        Write-Host "##vso[task.setvariable variable=UV_KEYRING_PROVIDER]disabled"
-      } else {
-        Write-Host "##[warning]PIP_INDEX_URL not set - uv will fall back to public PyPI."
-      }
-    displayName: 'Configure UV Authentication'
+  - ${{ if eq(parameters.EnableUvAuth, true) }}:
+    - pwsh: |
+        if ($env:PIP_INDEX_URL) {
+          Write-Host "Found pip index URL: $($env:PIP_INDEX_URL)"
+          # UV_DEFAULT_INDEX is the canonical replacement for the deprecated UV_INDEX_URL (uv 0.4.23+).
+          # PIP_INDEX_URL is set by PipAuthenticate@1 and contains embedded credentials, which uv
+          # will use for Basic auth against the ADO feed (and its PyPI upstream) per astral-sh/uv#12651.
+          Write-Host "##vso[task.setvariable variable=UV_DEFAULT_INDEX]$($env:PIP_INDEX_URL)"
+          # Disable keyring so uv uses the URL-embedded credentials directly.
+          Write-Host "##vso[task.setvariable variable=UV_KEYRING_PROVIDER]disabled"
+        } else {
+          Write-Host "##[warning]PIP_INDEX_URL not set - uv will fall back to public PyPI."
+        }
+      displayName: 'Configure UV Authentication'
diff --git a/eng/pipelines/templates/steps/smoke-test-steps.yml b/eng/pipelines/templates/steps/smoke-test-steps.yml
@@ -7,13 +7,20 @@ parameters:
   - name: ArtifactName
     type: string
     default: "not-specified"
+  - name: DevFeedName
+    type: string
+    default: 'public/azure-sdk-for-python'
 
 steps:
   - task: UsePythonVersion@0
     displayName: "Use Python $(PythonVersion)"
     inputs:
       versionSpec: $(PythonVersion)
 
+  - template: /eng/pipelines/templates/steps/auth-dev-feed.yml
+    parameters:
+      DevFeedName: ${{ parameters.DevFeedName }}
+
   - script: |
       python -m pip install pip==20.0.2
       pip --version
