CFS: Fix network isolation for registry.npmjs.org in Verify_Installers LinuxDockerSh job#8492
CFS: Fix network isolation for registry.npmjs.org in Verify_Installers LinuxDockerSh job#8492azure-sdk-automation[bot] wants to merge 4 commits into
Conversation
…ob (CFS) Configure npm to use the internal Azure Artifacts npm feed instead of the public registry.npmjs.org before running npx http-server in the Verify_Installers LinuxDockerSh job. This resolves network isolation failures when npx downloads http-server. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
azure-sdk-automation
Bot
requested review from
RickWinter,
danieljurek,
tg-msft and
vhvb1989
as code owners
azure-sdk-automation
Bot
requested review from
chidozieononiwu
and removed request for
Copilot
microsoft-github-policy-service
Bot
added
the
customer-reported
🔗 Linked Issue RequiredThanks for the contribution! Please link a GitHub issue to this PR by adding |
There was a problem hiding this comment.
Pull request overview
This PR attempts to route npx -y http-server in installer verification through an authenticated Azure Artifacts npm feed to avoid registry.npmjs.org access in network-isolated pipeline runs.
Changes:
- Adds the shared
create-authenticated-npmrc.ymlpipeline step before starting the local HTTP server. - Targets the installer verification job template used by the verify-installers matrix.
microsoft-github-policy-service
Bot
added
the
no-recent-activity
|
Hi @@azure-sdk-automation[bot]. Thank you for your interest in helping to improve the Azure Developer CLI experience and for your contribution. We've noticed that there hasn't been recent engagement on this pull request. If this is still an active work stream, please let us know by pushing some changes or leaving a comment. Otherwise, we'll close this out in 7 days. |
Network Isolation Fix
Domain being fixed:
registry.npmjs.orgAffected job:
Verify_Installers LinuxDockerShPipeline entry point YAML:
eng/pipelines/release-cli.ymlPipeline run URL: https://dev.azure.com/azure-sdk/internal/_build/results?buildId=6386733&view=results
Change Description
The
Verify_Installers LinuxDockerShjob starts an HTTP server usingnpx -y http-server, which downloads thehttp-serverpackage fromregistry.npmjs.orgwhen not cached. In network-isolated pipeline environments this connection is blocked.This fix adds a step to configure an authenticated
.npmrcpointing to the internal Azure Artifacts npm feed (https://pkgs.dev.azure.com/azure-sdk/public/_packaging/azure-sdk-for-js/npm/registry/) at$(HOME)/.npmrcbefore thenpx -y http-serverstep (Linux only), so npm resolves packages through the internal feed instead of the public registry.