terraform/examples/azure-vm-custom-image-new-storage-account/deploy.ci.sh

#!/bin/bash

set -o errexit -o nounset

docker run --rm -it \
  -e ARM_CLIENT_ID \
  -e ARM_CLIENT_SECRET \
  -e ARM_SUBSCRIPTION_ID \
  -e ARM_TENANT_ID \
  -v $(pwd):/data \
  --workdir=/data \
  --entrypoint "/bin/sh" \
  hashicorp/terraform:light \
  -c "/bin/terraform get; \
      /bin/terraform validate; \
      /bin/terraform plan -out=out.tfplan \
        -var source_img_uri=$EXISTING_WINDOWS_IMAGE_URI \
        -var hostname=$KEY \
        -var resource_group=$KEY \
        -var existing_resource_group=$EXISTING_RESOURCE_GROUP \
        -var admin_password=$PASSWORD \
        -var existing_storage_acct=$EXISTING_STORAGE_ACCOUNT_NAME \
        -var custom_image_name=$WINDOWS_DISK_NAME; \
      /bin/terraform apply out.tfplan; \
      /bin/terraform show;"

# cleanup deployed azure resources via azure-cli
docker run --rm -it \
  azuresdk/azure-cli-python:0.2.10 \
  sh -c "az login --service-principal -u $ARM_CLIENT_ID -p $ARM_CLIENT_SECRET --tenant $ARM_TENANT_ID > /dev/null; \
         az vm show -g $KEY -n myvm; \
         az storage account show -g $KEY -n $KEY;"

# cleanup deployed azure resources via terraform
docker run --rm -it \
  -e ARM_CLIENT_ID \
  -e ARM_CLIENT_SECRET \
  -e ARM_SUBSCRIPTION_ID \
  -e ARM_TENANT_ID \
  -v $(pwd):/data \
  --workdir=/data \
  --entrypoint "/bin/sh" \
  hashicorp/terraform:light \
  -c "/bin/terraform destroy -force \
        -var source_img_uri=$EXISTING_WINDOWS_IMAGE_URI \
        -var hostname=$KEY \
        -var resource_group=$KEY \
        -var existing_resource_group=$EXISTING_RESOURCE_GROUP \
        -var admin_password=$PASSWORD \
        -var existing_storage_acct=$EXISTING_STORAGE_ACCOUNT_NAME \
        -var custom_image_name=$WINDOWS_DISK_NAME \
        -target=azurerm_virtual_machine.myvm \
        -target=azurerm_virtual_machine.transfer \
        -target=azurerm_network_interface.transfernic \
        -target=azurerm_network_interface.mynic \
        -target=azurerm_virtual_network.vnet \
        -target=azurerm_public_ip.mypip \
        -target=azurerm_public_ip.transferpip \
        -target=azurerm_storage_account.stor;"

# If you target the resource group to destroy with Terraform, it will destroy the existing storage account, so it must be deleted manually with the CLI.
docker run --rm -it \
  azuresdk/azure-cli-python:0.2.10 \
  sh -c "az login --service-principal -u $ARM_CLIENT_ID -p $ARM_CLIENT_SECRET --tenant $ARM_TENANT_ID > /dev/null; \
         az group delete -n $KEY -y"