517 deploy create production devops pipeline to deploy production images

.github/workflows/exvmi.yml

@@ -0,0 +1,52 @@
+name: Export Virtual Machine Image
+
+permissions:
+  id-token: write
+  contents: read
+
+on:
+  workflow_dispatch:
+
+env:
+  export_version: ${{ vars.major_version_number }}.${{ vars.minor_version_number }}.${{ github.run_number }}
+
+jobs:
+  export-vmi:
+    runs-on: ubuntu-latest
+    environment: dev  
+    steps:
+    - name: Checkout Repository
+      uses: actions/checkout@v3
+      with:
+        fetch-depth: '100'
+
+    - name: Setup tools
+      run: |
+        echo "installing jq and azcopy"
+        sudo apt-get update && sudo apt-get install -y jq
+        wget -O azcopy.tar.gz https://aka.ms/downloadazcopylinux64
+        tar -xf azcopy.tar.gz
+        sudo ./install.sh
+
+    - name: Azure Login
+      uses: azure/login@v1
+      with:
+        client-id: ${{ secrets.AZURE_CLIENT_ID }}
+        tenant-id: ${{ secrets.AZURE_TENANT_ID }}
+        subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
+
+    - name: Export Virtual Machine Image
+      run: |
+        latest_version=$(az sig image-version list -g ${{ vars.IMAGE_RESOURCE_GROUP }} -i ${{ vars.IMAGE_NAME }} -r ${{ vars.IMAGE_GALLERY_NAME }} -o json | jq -r 'sort_by(.name | split(".") | map(tonumber))[-1].name')
+        echo "pulled latest version $latest_version"
+
+        vmi_reference_id="/subscriptions/${{ secrets.AZURE_SUBSCRIPTION_ID }}/resourceGroups/${{ vars.IMAGE_RESOURCE_GROUP }}/providers/Microsoft.Compute/galleries/${{ vars.IMAGE_GALLERY_NAME }}/images/${{ vars.IMAGE_NAME }}/versions/$latest_version"
+
+        ./scripts/export-vmi.sh -g ${{ vars.IMAGE_RESOURCE_GROUP }} \
+          -l ${{ vars.IMAGE_LOCATION }} \
+          -n ${{ vars.IMAGE_NAME }} \
+          -i $vmi_reference_id \
+          -a ${{ vars.STORAGE_ACCOUNT_NAME }} \
+          -c ${{ vars.STORAGE_CONTAINER_NAME }} \
+          -e ${{ vars.EXPIRY_DATE }}
+

scripts/export-vmi.sh

@@ -0,0 +1,95 @@
+#!/bin/bash
+
+# ===========================================================================================
+#
+#   DESCRIPTION:
+#   This script automates the export of an image from an Azure Image Gallery to a Blob Storage Account.
+#
+#   Example Call (from root of repository):
+#       ./export-vmi.sh -g modm-image-export -l eastus -n bobjactestimage -i /subscriptions/.../images/modm/versions/2.0.208 -a modmimageexport -c images -e 2024-01-08T00:00:00Z
+# ===========================================================================================
+#   imports
+source ./build/vmi/scripts/shared.sh
+# args
+# ------------------------------------------------------------
+
+POSITIONAL_ARGS=()
+
+while [[ $# -gt 0 ]]; do
+case $1 in
+    -g|--resource-group)
+    RESOURCE_GROUP="$2"
+    shift # past argument
+    shift # past value
+    ;;
+    -l|--location)
+    LOCATION="$2"
+    shift # past argument
+    shift # past value
+    ;;
+    -n|--image-name)
+    IMAGE_NAME="$2"
+    shift # past argument
+    shift # past value
+    ;;
+    -i|--image-id)
+    IMAGE_ID="$2"
+    shift # past argument
+    shift # past value
+    ;;
+    -a|--account-name)
+    STORAGE_ACCOUNT_NAME="$2"
+    shift # past argument
+    shift # past value
+    ;;
+    -c|--container-name)
+    STORAGE_CONTAINER_NAME="$2"
+    shift # past argument
+    shift # past value
+    ;;
+    -e|--expiry)
+    EXPIRY_DATE="$2"
+    shift # past argument
+    shift # past value
+    ;;
+    -*|--*)
+    echo "Unknown option $1"
+    exit 1
+    ;;
+    *)
+    POSITIONAL_ARGS+=("$1") # save positional arg
+    shift # past argument
+    ;;
+esac
+done
+set -- "${POSITIONAL_ARGS[@]}" # restore positional parameters
+
+# Validate required parameters
+guard_against_empty --value "$RESOURCE_GROUP" --error-message "Resource Group is required. Use --resource-group|-g to set."
+guard_against_empty --value "$LOCATION" --error-message "Location is required. Use --location|-l to set."
+guard_against_empty --value "$IMAGE_NAME" --error-message "Image Name is required. Use --image-name|-n to set."
+guard_against_empty --value "$IMAGE_ID" --error-message "Image ID is required. Use --image-id|-i to set."
+guard_against_empty --value "$STORAGE_ACCOUNT_NAME" --error-message "Storage Account Name is required. Use --account-name|-a to set."
+guard_against_empty --value "$STORAGE_CONTAINER_NAME" --error-message "Storage Container Name is required. Use --container-name|-c to set."
+guard_against_empty --value "$EXPIRY_DATE" --error-message "Expiry Date is required. Use --expiry|-e to set."
+
+# Main function
+function export_image() {
+    echo "Creating disk from image."
+    az disk create --resource-group $RESOURCE_GROUP --location $LOCATION --name $IMAGE_NAME --gallery-image-reference $IMAGE_ID
+
+    echo "Granting access to disk."
+    access_url=$(az disk grant-access --resource-group $RESOURCE_GROUP --name $IMAGE_NAME --duration-in-seconds 36000 --access-level Read --query accessSas -o tsv)
+
+    echo "Generating SAS for storage container."
+    sas_token=$(az storage container generate-sas --account-name $STORAGE_ACCOUNT_NAME --name $STORAGE_CONTAINER_NAME --permissions acw --expiry $EXPIRY_DATE --output tsv)
+    destination_url="https://$STORAGE_ACCOUNT_NAME.blob.core.windows.net/$STORAGE_CONTAINER_NAME/$IMAGE_NAME.vhd?$sas_token"
+
+    echo "Copying disk to blob storage."
+    azcopy copy "$access_url" "$destination_url" --blob-type PageBlob
+}
+
+# Execute main function
+export_image
+
+echo "done."