thepaulmacca

- task: PowerShell@2
  displayName: 'Get Latest Build ID'
  inputs:
    targetType: 'inline'
    script: |
      $definitionName = "$(Build.DefinitionName)"
      $url="$(System.TeamFoundationCollectionUri)$(System.TeamProject)/_apis/build/definitions?name=$definitionName&includeLatestBuilds=true&api-version=6.0"
      $result = Invoke-RestMethod -Uri $url -Headers @{authorization = "Bearer $(System.AccessToken)"} -Method Get

      $buildId = $result.value[0].latestBuild.id

thepaulmacca

/*
  By default this is being deployed without private link configured but
  if you want to enable it, just uncomment the resources below
*/
param location string
param appName string
param environmentName string
param logAnalyticsWorkspaceId string
// param vnetName string
// param vnetId string

thepaulmacca

resource keyVault 'Microsoft.KeyVault/vaults@2019-09-01' existing = {
  name: last(split(keyVaultId, '/'))
  resource storageSecret 'secrets' = {
    name: 'StorageAccount-ConnectionString'
    properties: {
    value: 'DefaultEndpointsProtocol=https;AccountName=${storageAccountName};AccountKey=${listKeys(storageAccount.id, storageAccount.apiVersion).keys[1].value}'
   }
  }
}

thepaulmacca

resource keyVault 'Microsoft.KeyVault/vaults@2019-09-01' existing = {
  name: keyVaultName
}

@description('This is the built-in Key Vault Secret User role. See https://docs.microsoft.com/azure/role-based-access-control/built-in-roles#key-vault-secrets-user')
resource keyVaultSecretUserRoleRoleDefinition 'Microsoft.Authorization/roleDefinitions@2018-01-01-preview' existing = {
  scope: subscription()
  name: '4633458b-17de-408a-b874-0445c86b69e6'
}

thepaulmacca

trigger:
  branches:
    include:
    - main

resources:
  repositories:
  - repository: templates
    type: github
    name: thepaulmacca/azure-pipelines-templates

thepaulmacca

@description('The Azure region into which the resources should be deployed')
param location string = resourceGroup().location

@description('The type of environment. This must be nonprod or prod')
@allowed([
  'nonprod'
  'prod'
])
param environmentType string

thepaulmacca

Fixes #

thepaulmacca

{
  "properties": {
    "roleName": "Automation Account Contributor",
    "description": "Allows access to manage Azure Automation and its resources",
    "assignableScopes": [
        "/subscriptions/XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXX"
    ],
    "permissions": [
      {
        "actions": [

thepaulmacca

using namespace System.Management.Automation
using namespace System.Management.Automation.Language

if ($host.Name -eq 'ConsoleHost')
{
    Import-Module PSReadLine
}

Import-Module posh-git

thepaulmacca

# requires the WIKI Updater Tasks extension https://marketplace.visualstudio.com/items?itemName=richardfennellBM.BM-VSTS-WIKIUpdater-Tasks

trigger:
  branches:
    include:
      - main
  paths:
    include:
      - docs/*