WIP

frontierhq · Dec 20, 2023 · 58c5060 · 58c5060
1 parent 760873b
commit 58c5060
Show file tree

Hide file tree

Showing 2 changed files with 68 additions and 4 deletions.
diff --git a/tasks/SheriffPlan/SheriffPlanV0/src/index.js b/tasks/SheriffPlan/SheriffPlanV0/src/index.js
@@ -4,25 +4,68 @@ const tl = require('azure-pipelines-task-lib/task');
 
 async function run() {
   try {
+    const configDir = tl.getInput('configDir', false);
     const connectedService = tl.getInput('serviceConnectionName', true);
+    const mode = tl.getInput('mode', true);
+
+    let subscriptionId = tl.getInput('subscriptionId', false);
+
+    const env = {};
+
     const authScheme = tl.getEndpointAuthorizationScheme(connectedService, true);
-    // const subscriptionID = tl.getEndpointDataParameter(connectedService, 'SubscriptionID', true);
+    if (!subscriptionId) {
+      subscriptionId = tl.getEndpointDataParameter(connectedService, 'SubscriptionID', true);
+    }
+
+    env.AZURE_SUBSCRIPTION_ID = subscriptionId;
 
     if (authScheme.toLowerCase() === 'workloadidentityfederation') {
-      tl.debug('workload identity federation based endpoint');
+      tl.debug('workload identity federation scheme');
+      throw new Error('Workload identity federation scheme not implemented');
     } else if (authScheme.toLowerCase() === 'serviceprincipal') {
-      const authType = tl.getEndpointAuthorizationParameter(connectedService, 'authenticationType', true);
+      tl.debug('service principal scheme');
+      const authType = tl.getEndpointAuthorizationParameter(connectedService, 'authenticationType', false);
+
+      const servicePrincipalId = tl.getEndpointAuthorizationParameter(connectedService, 'serviceprincipalid', false);
+      env.AZURE_CLIENT_ID = servicePrincipalId;
+
+      const tenantId = tl.getEndpointAuthorizationParameter(connectedService, 'tenantid', false);
+      env.AZURE_TENANT_ID = tenantId;
 
       if (authType === 'spnCertificate') {
         tl.debug('certificate based endpoint');
+        throw new Error('certificate based service principal scheme not implemented');
       } else {
         tl.debug('key based endpoint');
+        const servicePrincipalKey = tl.getEndpointAuthorizationParameter(connectedService, 'serviceprincipalkey', false);
+        env.AZURE_CLIENT_SECRET = servicePrincipalKey;
       }
     } else if (authScheme.toLowerCase() === 'managedserviceidentity') {
-      tl.debug('managed service identity based endpoint');
+      tl.debug('managed service identity scheme');
+      throw new Error('managed service identity scheme not implemented');
     } else {
       throw new Error(`Authentication scheme ${authScheme} is not supported`);
     }
+
+    await tl.execAsync(
+      'sheriff',
+      [
+        'plan',
+        mode,
+        configDir ? `--config-dir ${configDir}` : '',
+        '--subscription-id',
+        subscriptionId,
+      ],
+      {
+        env: {
+          ...process.env,
+          ...env,
+        },
+        silent: false,
+      },
+    );
+
+    tl.setResult(tl.TaskResult.Succeeded, 'Success');
   } catch (err) {
     if (err instanceof Error) {
       tl.setResult(tl.TaskResult.Failed, err.message);

diff --git a/tasks/SheriffPlan/SheriffPlanV0/task.json b/tasks/SheriffPlan/SheriffPlanV0/task.json
@@ -9,6 +9,20 @@
   "category": "Utility",
   "author": "Frontier Digital Ltd",
   "inputs": [
+    {
+      "name": "configDir",
+      "type": "string",
+      "label": "Config directory path",
+      "required": false,
+      "helpMarkDown": "The config directory path"
+    },
+    {
+      "name": "mode",
+      "type": "string",
+      "label": "Mode",
+      "required": true,
+      "helpMarkDown": "The mode to run"
+    },
     {
       "name": "serviceConnectionName",
       "type": "connectedService:AzureRM",
@@ -18,6 +32,13 @@
       "properties": {
         "EndpointFilterRule": "ScopeLevel != ManagementGroup"
       }
+    },
+    {
+      "name": "subscriptionId",
+      "type": "string",
+      "label": "Subscription ID",
+      "required": false,
+      "helpMarkDown": "The subscription ID"
     }
   ],
   "execution": {