[CI] Circumvent login keychain with envvars (#10749)

* Use envvars for GitHub.Token

* add gitHubToken parameter to stage.yml

* Use envvars for certificate passwords

tools/devops/automation/build-pipeline.yml

@@ -143,6 +143,8 @@ stages:
     iOSDeviceDemand: 'xismoke-32'
     vsdropsPrefix: ${{ variables.vsdropsPrefix }}
     keyringPass: $(xma-password)
+    gitHubToken: ${{ variables['GitHub.Token'] }}
+    xqaCertPass: $(xqa--certificates--password)
 
 - template: templates/devices/stage.yml
   parameters:
@@ -156,6 +158,8 @@ stages:
     iOSDeviceDemand: 'ios'
     vsdropsPrefix: ${{ variables.vsdropsPrefix }}
     keyringPass: $(xma-password)
+    gitHubToken: ${{ variables['GitHub.Token'] }}
+    xqaCertPass: $(xqa--certificates--password)
 
 - template: templates/devices/stage.yml
   parameters:
@@ -169,6 +173,8 @@ stages:
     iOSDeviceDemand: 'tvos'
     vsdropsPrefix: ${{ variables.vsdropsPrefix }}
     keyringPass: $(xma-password)
+    gitHubToken: ${{ variables['GitHub.Token'] }}
+    xqaCertPass: $(xqa--certificates--password)
 
 - template: templates/mac/stage.yml
   parameters:

tools/devops/automation/templates/devices/build.yml

@@ -37,6 +37,12 @@ parameters:
   type: string
   default: 'ios' # default context, since we started dealing with iOS devices.
 
+- name: gitHubToken
+  type: string
+
+- name: xqaCertPass
+  type: string
+
 steps:
 
 - checkout: self
@@ -124,6 +130,12 @@ steps:
   displayName: 'Add provisioning profiles'
   timeoutInMinutes: 30
   env:
+    AUTH_TOKEN_GITHUB_COM: ${{ parameters.gitHubToken }}
+    AUTH_TOKEN_LA_DEV_APPLE_P12: ${{ parameters.xqaCertPass }}
+    AUTH_TOKEN_LA_DISTR_APPLE_P12: ${{ parameters.xqaCertPass }}
+    AUTH_TOKEN_LA_MAC_INSTALLER_DISTR_P12: ${{ parameters.xqaCertPass }}
+    AUTH_TOKEN_VSENG_XAMARIN_MAC_DEVICES_P12: ${{ parameters.xqaCertPass }}
+    AUTH_TOKEN_VSENG_XAMARIN_MAC_DEVICES_2_P12: ${{ parameters.xqaCertPass }}
     LOGIN_KEYCHAIN_PASSWORD: ${{ parameters.keyringPass }}
 
 # download the artifacts.json, which will use to find the URI of the built pkg to later be installed by provisionator

tools/devops/automation/templates/devices/stage.yml

@@ -49,6 +49,12 @@ parameters:
   type: string
   default: 'ios' # default context, since we started dealing with iOS devices.
 
+- name: gitHubToken
+  type: string
+
+- name: xqaCertPass
+  type: string
+
 stages:
 - stage:
   displayName: ${{ parameters.stageName }}
@@ -74,6 +80,8 @@ stages:
         vsdropsPrefix: ${{ parameters.vsdropsPrefix }}
         keyringPass: ${{ parameters.keyringPass }}
         devicePrefix: ${{ parameters.devicePrefix }}
+        gitHubToken: ${{ parameters.gitHubToken }}
+        xqaCertPass: ${{ parameters.xqaCertPass }}
 
   - job: upload_vsdrops
     displayName: 'Upload report to vsdrops'