Migrate release pipeline to governed template

.azure-devops/nova-facade-release.yml

@@ -1,6 +1,13 @@
-pr: none
+resources:
+  repositories:
+  - repository: 1ESPipelineTemplates
+    type: git
+    name: 1ESPipelineTemplates/1ESPipelineTemplates
+    ref: refs/tags/release
+
 trigger:
   - main
+pr: none
 schedules:
 - cron: 0 0 * * Mon
   displayName: Nova-Facade weekly pipeline validation
@@ -14,52 +21,64 @@ variables:
   - name: tags
     value: production,externalfacing
   - name: serviceTreeID
-    value: 6F8CD842-E117-412F-BAE4-56A3B6166594
+    value: ade7d667-42f5-485a-91a9-f1dc6482a9b0
   - name: adoNpmFeedBaseUrl
     value: https://pkgs.dev.azure.com/domoreexp/_apis/packaging/feeds/npm-mirror
 
-jobs:
-  - job: compliance
-    displayName: Compliance checks
-    pool:
-      name: 1ES-Teams-Windows-2022-DomoreexpGithub
-    steps:
-      - template: ./steps/service-tree.yml
-        parameters:
-          serviceTreeID: $(serviceTreeID)
-      - template: ./steps/compliance-steps.yml
+extends:
+  template: v1/1ES.Official.PipelineTemplate.yml@1ESPipelineTemplates
+  stages:
+  - stage: Release_And_Compliance
+    jobs:
+      - job: compliance
+        displayName: Compliance checks
+        pool:
+          name: Azure-Pipelines-1ESPT-ExDShared
+          image: windows-2022
+          os: windows
+        steps:
+          - template: ./steps/service-tree.yml@self
+            parameters:
+              serviceTreeID: $(serviceTreeID)
+          - template: ./steps/compliance-steps.yml@self
 
-  - job: Release
-    variables:
-      - group: oss-secrets
-    dependsOn: Compliance
-    pool: "1ES-Teams-Ubuntu-Latest-Compliant-NCUS"
-    steps:
-      - template: ./steps/service-tree.yml
-        parameters:
-          serviceTreeID: $(serviceTreeID)
-      - script: yarn
-        displayName: yarn
-      - script: |
-          yarn ci
-        displayName: build and test [test]
-      - script: |
-          git config user.email "[email protected]"
-          git config user.name "Graphitation Service Account"
-          git remote set-url origin https://gql-svc:$(ossGithubPAT)@github.com/microsoft/nova-facade.git
-        displayName: Configure git for release
-      - script: yarn release -y -n $(ossNpmToken) --access public
-        displayName: Release
-      - task: AzureArtifacts.manifest-generator-task.manifest-generator-task.ManifestGeneratorTask@0
-        displayName: 📒 Generate Manifest
-        inputs:
-          BuildDropPath: $(System.DefaultWorkingDirectory)
-      - task: PublishPipelineArtifact@1
-        displayName: 📒 Publish Manifest
-        inputs:
-          artifactName: SBom-$(System.JobAttempt)
-          targetPath: $(System.DefaultWorkingDirectory)/_manifest
-      - template: ./steps/pierce-ado-npm-mirror-cache.yml
-        parameters:
-          adoNpmFeedPat: $(adoNpmFeedPat)
-          adoNpmFeedBaseUrl: $(adoNpmFeedBaseUrl)
+      - job: Release
+        variables:
+          - group: oss-secrets
+        dependsOn: Compliance
+        pool:
+          name: Azure-Pipelines-1ESPT-ExDShared
+          image: ubuntu-latest
+          os: linux
+        templateContext:
+          type: releaseJob
+          isProduction: true
+        steps:
+          - template: ./steps/service-tree.yml@self
+            parameters:
+              serviceTreeID: $(serviceTreeID)
+          - script: yarn
+            displayName: yarn
+          - script: |
+              yarn ci
+            displayName: build and test [test]
+          - script: |
+              git config user.email "[email protected]"
+              git config user.name "Graphitation Service Account"
+              git remote set-url origin https://gql-svc:$(ossGithubPAT)@github.com/microsoft/nova-facade.git
+            displayName: Configure git for release
+          - script: yarn release -y -n $(ossNpmToken) --access public
+            displayName: Release
+          - task: AzureArtifacts.manifest-generator-task.manifest-generator-task.ManifestGeneratorTask@0
+            displayName: 📒 Generate Manifest
+            inputs:
+              BuildDropPath: $(System.DefaultWorkingDirectory)
+          - task: PublishPipelineArtifact@1
+            displayName: 📒 Publish Manifest
+            inputs:
+              artifactName: SBom-$(System.JobAttempt)
+              targetPath: $(System.DefaultWorkingDirectory)/_manifest
+          - template: ./steps/pierce-ado-npm-mirror-cache.yml@self
+            parameters:
+              adoNpmFeedPat: $(adoNpmFeedPat)
+              adoNpmFeedBaseUrl: $(adoNpmFeedBaseUrl)