25a96f1322
* Fix token generation * Ordering of steps * Demonstrate proper redaction * Revert "Demonstrate proper redaction" This reverts commit 1e67e0ac3a67c857c5ea0df6abfae89e4a94b63e. * Spelling
51 lines
1.9 KiB
PowerShell
51 lines
1.9 KiB
PowerShell
param(
|
|
[string] $StorageAccountName = 'cppvcpkgcache',
|
|
[string] $StorageAccountKey
|
|
)
|
|
|
|
|
|
."$PSScriptRoot/../common/scripts/Helpers/PSModule-Helpers.ps1"
|
|
|
|
Write-Host "`$env:PSModulePath = $($env:PSModulePath)"
|
|
|
|
# Work around double backslash
|
|
if ($IsWindows) {
|
|
$hostedAgentModulePath = $env:SystemDrive + "\\Modules"
|
|
$moduleSeperator = ";"
|
|
} else {
|
|
$hostedAgentModulePath = "/usr/share"
|
|
$moduleSeperator = ":"
|
|
}
|
|
$modulePaths = $env:PSModulePath -split $moduleSeperator
|
|
$modulePaths = $modulePaths.Where({ !$_.StartsWith($hostedAgentModulePath) })
|
|
$AzModuleCachePath = (Get-ChildItem "$hostedAgentModulePath/az_*" -Attributes Directory) -join $moduleSeperator
|
|
if ($AzModuleCachePath -and $env.PSModulePath -notcontains $AzModuleCachePath) {
|
|
$modulePaths += $AzModuleCachePath
|
|
}
|
|
|
|
$env:PSModulePath = $modulePaths -join $moduleSeperator
|
|
|
|
Install-ModuleIfNotInstalled "Az.Storage" "4.3.0" | Import-Module
|
|
|
|
$ctx = New-AzStorageContext `
|
|
-StorageAccountName $StorageAccountName `
|
|
-StorageAccountKey $StorageAccountKey
|
|
$token = New-AzStorageAccountSASToken `
|
|
-Service Blob `
|
|
-ResourceType Object `
|
|
-Permission "rwc" `
|
|
-Context $ctx `
|
|
-ExpiryTime (Get-Date).AddDays(1)
|
|
|
|
$vcpkgBinarySourceSas = $token
|
|
if ($token.StartsWith('?')) {
|
|
$vcpkgBinarySourceSas = $token.Substring(1)
|
|
}
|
|
|
|
Write-Host "Ensure redaction of SAS tokens in logs"
|
|
Write-Host "##vso[task.setvariable variable=VCPKG_BINARY_SAS_TOKEN;issecret=true;]$vcpkgBinarySourceSas"
|
|
|
|
Write-Host "Setting vcpkg binary cache to read and write"
|
|
Write-Host "##vso[task.setvariable variable=VCPKG_BINARY_SOURCES_SECRET;issecret=true;]clear;x-azblob,https://cppvcpkgcache.blob.core.windows.net/public-vcpkg-container,$vcpkgBinarySourceSas,readwrite"
|
|
Write-Host "##vso[task.setvariable variable=X_VCPKG_ASSET_SOURCES_SECRET;issecret=true;]clear;x-azurl,https://cppvcpkgcache.blob.core.windows.net/public-vcpkg-asset-container/,?$vcpkgBinarySourceSas,readwrite"
|