run-imagebuilder.yml

parameters:
- name: name
  type: string
  default: ""
- name: displayName
  type: string
  default: "Run ImageBuilder"
- name: serviceConnections
  type: object
  default: []
  # - name: The name of the service connection argument that will be passed to the ImageBuilder command.
  #         For example, if the argument is --acr-service-connection, the name would be "acr".
    # id: The service connection's ID (GUID).
    # clientId: The client ID of the Managed Idendity backing the service connection (GUID).
    # tenantId: The ID of the tenant that the Managed Identity is in (GUID).
- name: internalProjectName
  type: string
  default: null
- name: args
  type: string
  default: null
- name: condition
  type: string
  default: succeeded()
- name: continueOnError
  type: boolean
  default: false
- name: dockerClientOS
  type: string
  default: "linux"

# Additional docker run args inserted before the image name (Linux only).
# These are flags passed to `docker run` for the containerized ImageBuilder
# and must not be set for Windows jobs where ImageBuilder runs as a native
# executable. Used for signing (volume mounts, env files) or other
# job-specific docker configuration.
- name: linuxOnlyExtraDockerRunArgs
  type: string
  default: ""

steps:
- ${{ if and(eq(variables['System.TeamProject'], parameters.internalProjectName), ne(variables['Build.Reason'], 'PullRequest')) }}:

  - task: PowerShell@2
    ${{ if ne(parameters.name, '') }}:
      name: ${{ parameters.name }}
    displayName: ${{ parameters.displayName }}
    continueOnError: ${{ parameters.continueOnError }}
    condition: ${{ parameters.condition }}
    env:
      SYSTEM_ACCESSTOKEN: $(System.AccessToken)
      SYSTEM_OIDCREQUESTURI: $(System.OidcRequestUri)
    inputs:
      targetType: 'inline'
      script: |
        $serviceConnections = '${{ convertToJson(parameters.serviceConnections) }}'

        Write-Host "Service connections:"
        Write-Host "${serviceConnections}"

        $serviceConnectionsJson = $serviceConnections | ConvertFrom-Json
        $serviceConnectionsArgs = @()
        foreach ($connection in $serviceConnectionsJson) {
            $serviceConnectionsArgs += "--$($connection.name)-service-connection"
            $serviceConnectionsArgs += "$($connection.tenantId):$($connection.clientId):$($connection.id)"
        }

        $(runAuthedImageBuilderBaseCmd) ${{ parameters.linuxOnlyExtraDockerRunArgs }} $(imageBuilderImageName) ${{ parameters.args }} @serviceConnectionsArgs

- ${{ else }}:

  - task: PowerShell@2
    ${{ if ne(parameters.name, '') }}:
      name: ${{ parameters.name }}
    displayName: ${{ parameters.displayName }}
    continueOnError: ${{ parameters.continueOnError }}
    condition: ${{ parameters.condition }}
    inputs:
      targetType: 'inline'
      script: >-
        $(runImageBuilderBaseCmd) ${{ parameters.linuxOnlyExtraDockerRunArgs }} $(imageBuilderImageName) ${{ parameters.args }}