wehub-resource-sync
26 lines
754 B
Bash
Executable File
26 lines
754 B
Bash
Executable File
#!/bin/bash
|
|
# This script is used to login to azure docker registry using azure cli
|
|
|
|
set -euo pipefail
|
|
|
|
# Retrieve credentials from Secrets Manager
|
|
SECRET="$(aws secretsmanager get-secret-value \
|
|
--secret-id azure-service-principal-oss-release \
|
|
--query SecretString \
|
|
--region us-west-2 \
|
|
--output text)"
|
|
|
|
CLIENT_ID="$(echo "$SECRET" | jq -r '.client_id')"
|
|
TENANT_ID="$(echo "$SECRET" | jq -r '.tenant_id')"
|
|
|
|
temp_dir=$(mktemp -d)
|
|
|
|
aws secretsmanager get-secret-value \
|
|
--secret-id azure-service-principal-certificate \
|
|
--query SecretString \
|
|
--region us-west-2 \
|
|
--output text > "${temp_dir}/azure_cert.pem"
|
|
|
|
# Login to azure
|
|
az login --service-principal --username "$CLIENT_ID" --certificate "${temp_dir}/azure_cert.pem" --tenant "$TENANT_ID"
|