variable “tenant_id” {
type = string
default = “”
}

variable “client_id” {
type = string
default = “”
}

variable “client_secret” {
sensitive = true
type = string
default = “”
}

source “azure-arm” “am-image” {
subscription_id = var.subscription_id
tenant_id = var.tenant_id
client_id = var.client_id
client_secret = var.client_secret
managed_image_name = “am-image-v1”
managed_image_resource_group_name = “am-packer-rg”
communicator = “winrm”
image_offer = “WindowsServer”
image_publisher = “MicrosoftWindowsServer”
image_sku = “2019-Datacenter”
location = “westeurope”
os_type = “Windows”
vm_size = “Standard_B4ms”
winrm_insecure = “true”
winrm_timeout = “5m”
winrm_use_ssl = “true”
winrm_username = “packeradmin”
}

build {
sources = [“source.azure-arm.am-image”]

provisioner “powershell” {
inline = [“Add-WindowsFeature Web-Server”, “while ((Get-Service RdAgent).Status -ne ‘Running’) { Start-Sleep -s 5 }”, “while ((Get-Service WindowsAzureGuestAgent).Status -ne ‘Running’) { Start-Sleep -s 5 }”, “& $env:SystemRoot\System32\Sysprep\Sysprep.exe /oobe /generalize /quiet /quit”, “while($true) { $imageState = Get-ItemProperty HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\State | Select ImageState; if($imageState.ImageState -ne ‘IMAGE_STATE_GENERALIZE_RESEAL_TO_OOBE’) { Write-Output $imageState.ImageState; Start-Sleep -s 10 } else { break } }”]
}

}

######################
# Declare Parameters:-
######################
parameters:
– name: KVName
displayName: Please Provide the Keyvault Name:-
type: object
default: ampockv
values:
– ampockv

######################
#DECLARE VARIABLES:-
######################
variables:
ServiceConnection: amcloud-cicd-service-connection
BuildAgent: windows-latest
packerfile: ‘$(Build.SourcesDirectory)/Packer/am-packer-template-v2.pkr.hcl’
envName: NonProd

#########################
# Declare Build Agents:-
#########################
pool:
vmImage: $(BuildAgent)

###################
# Declare Stages:-
###################

stages:

– stage: BUILD_IMAGE_PACKER
jobs:
– job: BUILD_IMAGE_PACKER
displayName: BUILD IMAGE PACKER
steps:
################################
# Download Keyvault Secrets:-
################################
– task: AzureKeyVault@2
displayName: Fetch all Secrets from Keyvault
inputs:
azureSubscription: ‘$(ServiceConnection)’
KeyVaultName: ‘${{ parameters.KVName }}’
SecretsFilter: ‘*’
RunAsPreJob: false
####################################
# Build Windows Image with Packer:-
####################################
– task: AzureCLI@2
displayName: Build Image With Packer
inputs:
azureSubscription: $(ServiceConnection)
scriptType: ps
scriptLocation: inlineScript
inlineScript: |
packer
packer plugins install github.com/hashicorp/azure
packer build -var “client_id=$(clientId)” -var “client_secret=$(clientsecret)” -var “subscription_id=$(subsId)” -var “tenant_id=$(tenantId)” -on-error=abort -force $(packerfile)