build_acr.sh

#!/bin/bash
function GetBuildCommand() {
  local prefix="BUILD_SECRET_"
  local buildArgs=''
  if [[ ${PUSH} == "--push" ]]; then
    local ACR_TASK_NAME='radix-image-builder-${RADIX_ZONE}'
  else
    local ACR_TASK_NAME='radix-image-builder-build-only-${RADIX_ZONE}'
  fi

  local buildCommand="az acr task run \
        --name ${ACR_TASK_NAME} \
        --registry ${DOCKER_REGISTRY} \
        --context ${CONTEXT} \
        --file ${CONTEXT}${DOCKER_FILE_NAME} \
        --set IMAGE=${IMAGE} \
        --set CLUSTERTYPE_IMAGE=${CLUSTERTYPE_IMAGE} \
        --set CLUSTERNAME_IMAGE=${CLUSTERNAME_IMAGE} \
        --set DOCKER_FILE_NAME=${DOCKER_FILE_NAME}"

  if [[ -n "${SUBSCRIPTION_ID}" ]]; then
    buildCommand+=" --subscription ${SUBSCRIPTION_ID} "
  fi
  local line
  local keyValue
  local envBuildSecret
  local secretName
  local secretValue

  while read -r line; do
      if [[ "$line" ]]; then
          keyValue=(${line//=/ })
          envBuildSecret=${keyValue[0]}
          secretName=${envBuildSecret#"$prefix"}
          secretValue="$(printenv $envBuildSecret | base64 | tr -d \\n)"

          buildArgs+="--build-arg $secretName=\"$secretValue\" "
      fi
  done <<< "$(env | grep 'BUILD_SECRET_')"

  if [[ -n "${RADIX_GIT_COMMIT_HASH}" ]]; then
    buildArgs+="--build-arg RADIX_GIT_COMMIT_HASH=${RADIX_GIT_COMMIT_HASH} "
  fi
  if [[ -n "${RADIX_GIT_TAGS}" ]]; then
    buildArgs+="--build-arg RADIX_GIT_TAGS=\\\"${RADIX_GIT_TAGS}\\\" "
  fi
  if [[ -n "${BRANCH}" ]]; then
    buildArgs+="--build-arg BRANCH=${BRANCH} "
  fi
  if [[ -n "${TARGET_ENVIRONMENTS}" ]]; then
    buildArgs+="--build-arg TARGET_ENVIRONMENTS=\\\"${TARGET_ENVIRONMENTS}\\\" "
  fi

  buildCommand+=" --set BUILD_ARGS=\"${buildArgs}\""
  echo "$buildCommand"
}

if [[ -z "${SP_USER}" ]]; then
  SP_USER=$(cat ${AZURE_CREDENTIALS} | jq -r '.id')
fi
if [[ -z "${SP_SECRET}" ]]; then
  SP_SECRET=$(cat ${AZURE_CREDENTIALS} | jq -r '.password')
fi

#if [[ -n "${RADIX_GIT_COMMIT_HASH}" ]]; then
#  git --git-dir=/workspace/.git --work-tree=/workspace/ reset --hard $RADIX_GIT_COMMIT_HASH || exit 1
#fi

TEMPFILE="$(mktemp -u).sh" # We need a random filename since emptyDir /tmp is mounted to multiple build containers
GetBuildCommand > "$TEMPFILE"
az login --service-principal -u ${SP_USER} -p ${SP_SECRET} --tenant ${TENANT}
bash "$TEMPFILE"