destroy-self-hosted-agent.yml

name: $(BuildDefinitionName)_$(date:yyyyMMdd)$(rev:.r)

trigger: none
pr: none

variables:
- group: global-variables
- name: azureSubscription
  value: AzureSubscription
- name: terraformVersion
  value: 1.0.7
- name: terraformPath
  value: agent
- name: tfstatePath
  value: agent.tfstate
- name: environment
  value: production
- name: resourceGroupName
  value: BabosbirdRG
- name: containerName
  value: scripts
- name: scriptPath
  value: agent/scripts
- name: scriptName
  value: configure-self-hosted-agent.sh
- name: tfvarsPath
  value: tfvars/agent/agent.tfvars
- name: location
  value: westeurope
  
pool:
  vmImage: ubuntu-latest

stages :
- stage: terraform_deployment
  displayName: 'Terraform Destroy'
  jobs: 
  - deployment: production
    displayName: 'Terraform Destroy'
    environment: $(environment)
    continueOnError: false
    strategy:
      runOnce:
        deploy:
          steps:
          - checkout: self
          - task: AzureCLI@2
            displayName: 'Create Temporary Storage Account'
            continueOnError: true
            inputs:
              scriptType: bash
              scriptLocation: inlineScript
              azureSubscription: $(azureSubscription)
              addSpnToEnvironment: true
              inlineScript: |
                #Variables
                postfix=$(cat /dev/urandom | tr -dc 'a-z' | fold -w 8 | head -n 1)
                storageAccountName="scriptstorage$postfix"
                sku="Standard_LRS"
                subscriptionName=$(az account show --query name --output tsv)

                # Create resource group
                echo "Checking if [$(resourceGroupName)] resource group actually exists in the [$subscriptionName] subscription..."
                az group show --name $(resourceGroupName) &>/dev/null

                if [[ $? != 0 ]]; then
                    echo "No [$(resourceGroupName)] resource group actually exists in the [$subscriptionName] subscription"
                    echo "Creating [$(resourceGroupName)] resource group in the [$subscriptionName] subscription..."

                    # Create the resource group
                    az group create \
                        --name $(resourceGroupName) \
                        --location $(location) 1>/dev/null

                    if [[ $? == 0 ]]; then
                        echo "[$(resourceGroupName)] resource group successfully created in the [$subscriptionName] subscription"
                    else
                        echo "Failed to create [$(resourceGroupName)] resource group in the [$subscriptionName] subscription"
                        exit -1
                    fi
                else
                    echo "[$(resourceGroupName)] resource group already exists in the [$subscriptionName] subscription"
                fi

                # Create storage account
                echo "Checking if [$storageAccountName] storage account actually exists in the [$subscriptionName] subscription..."
                az storage account --name $storageAccountName &>/dev/null

                if [[ $? != 0 ]]; then
                    echo "No [$storageAccountName] storage account actually exists in the [$subscriptionName] subscription"
                    echo "Creating [$storageAccountName] storage account in the [$subscriptionName] subscription..."

                    az storage account create \
                        --resource-group $(resourceGroupName) \
                        --name $storageAccountName \
                        --sku $sku \
                        --encryption-services blob 1>/dev/null

                    # Create the storage account
                    if  [[ $? == 0 ]]; then
                        echo "[$storageAccountName] storage account successfully created in the [$subscriptionName] subscription"
                    else
                        echo "Failed to create [$storageAccountName] storage account in the [$subscriptionName] subscription"
                        exit -1
                    fi
                else
                    echo "[$storageAccountName] storage account already exists in the [$subscriptionName] subscription"
                fi

                # Get storage account key
                echo "Retrieving the primary key of the [$storageAccountName] storage account..."
                storageAccountKey=$(az storage account keys list --resource-group $(resourceGroupName) --account-name $storageAccountName --query [0].value -o tsv)

                if [[ -n $storageAccountKey ]]; then
                    echo "Primary key of the [$storageAccountName] storage account successfully retrieved"
                else
                    echo "Failed to retrieve the primary key of the [$storageAccountName] storage account"
                    exit -1
                fi

                # Create blob container
                echo "Checking if [$(containerName)] container actually exists in the [$storageAccountName] storage account..."
                az storage container show \
                    --name $(containerName) \
                    --account-name $storageAccountName \
                    --account-key $storageAccountKey &>/dev/null

                if [[ $? != 0 ]]; then
                    echo "No [$(containerName)] container actually exists in the [$storageAccountName] storage account"
                    echo "Creating [$(containerName)] container in the [$storageAccountName] storage account..."

                    # Create the container
                    az storage container create \
                        --name $(containerName) \
                        --account-name $storageAccountName \
                        --account-key $storageAccountKey 1>/dev/null

                    if  [[ $? == 0 ]]; then
                        echo "[$(containerName)] container successfully created in the [$storageAccountName] storage account"
                    else
                        echo "Failed to create [$(containerName)] container in the [$storageAccountName] storage account"
                        exit -1
                    fi
                else
                    echo "[$(containerName)] container already exists in the [$storageAccountName] storage account"
                fi

                # Copy script as blob to the storage account container
                az storage blob upload \
                  --container-name $(containerName) \
                  --name $(scriptName) \
                  --account-name $storageAccountName \
                  --account-key $storageAccountKey \
                  --file "$(System.DefaultWorkingDirectory)/$(scriptPath)/$(scriptName)"
                
                if  [[ $? == 0 ]]; then
                    echo "[$(scriptName)] successfully copied to the [$(containerName)] container in the [$storageAccountName] storage account"
                else
                    echo "Failed to copy the [$(scriptName)] script to the [$(containerName)] container in the [$storageAccountName] storage account"
                    exit -1
                fi

                # Print data
                echo "----------------------------------------------------------------------------------------------"
                echo "storageAccountName: $storageAccountName"
                echo "containerName: $(containerName)"

                echo "##vso[task.setvariable variable=storageAccountName;]$storageAccountName"
                echo "##vso[task.setvariable variable=storageAccountKey;]$storageAccountKey"
                echo "##vso[task.setvariable variable=ok;]true"
          - bash: |
              echo "Storage Account Name: $(storageAccountName)"
              echo "Storage Account Key: $(storageAccountKey)"
            displayName: 'Print Variables'
            condition: and(succeeded(), not(eq(variables.storageAccountName, '')), not(eq(variables.storageAccountKey, '')))
          - task: TerraformInstaller@0
            displayName: 'Terraform Install'
            condition: and(succeeded(), not(eq(variables.storageAccountName, '')), not(eq(variables.storageAccountKey, '')))
            inputs:
              terraformVersion: $(terraformVersion)
          - task: TerraformTaskV2@2
            displayName: 'Terraform Init'
            condition: and(succeeded(), not(eq(variables.storageAccountName, '')), not(eq(variables.storageAccountKey, '')))
            inputs:
              provider: 'azurerm'
              command: 'init'
              backendServiceArm: $(azureSubscription)
              backendAzureRmResourceGroupName: $(terraformBackendResourceGroupName)
              backendAzureRmStorageAccountName: $(terraformBackendStorageAccountName)
              backendAzureRmContainerName: '$(terraformBackendContainerName)'
              backendAzureRmKey: $(tfstatePath)
              workingDirectory: '$(System.DefaultWorkingDirectory)/$(terraformPath)/'
          - task: TerraformTaskV2@2
            displayName: 'Terraform Destroy'
            condition: and(succeeded(), not(eq(variables.storageAccountName, '')), not(eq(variables.storageAccountKey, '')))
            enabled: true
            inputs:
              provider: 'azurerm'
              command: 'destroy'
              commandOptions: '-auto-approve -var="ssh_public_key=$(sshPublicKey)" -var="location=$(location)" -var="resource_group_name=$(resourceGroupName)" -var="script_storage_account_name=$(storageAccountName)" -var="script_storage_account_key=$(storageAccountKey)" -var="container_name=$(containerName)" -var="script_name=$(scriptName)" -var="azure_devops_url=$(azureDevOpsUrl)" -var="azure_devops_pat=$(azureDevOpsPat)" -var="azure_devops_agent_pool_name=$(azureDevOpsAgentPoolName)" -var-file="$(System.DefaultWorkingDirectory)/$(tfvarsPath)'
              environmentServiceNameAzureRM: $(azureSubscription)
              workingDirectory: '$(System.DefaultWorkingDirectory)/$(terraformPath)/'
          - task: AzureCLI@2
            displayName: 'Delete Temporary Storage Account'
            condition: always()
            inputs:
              scriptType: bash
              scriptLocation: inlineScript
              azureSubscription: $(azureSubscription)
              addSpnToEnvironment: true
              inlineScript: |
                az group delete \
                  --name $(storageAccountResourceGroupName) \
                  --yes
                  
                if  [[ $? == 0 ]]; then
                    echo "Temporary storage account successfully deleted"
                else
                    echo "Failed to delete the temporary storage account"
                    exit -1
                fi