Use a variable name that is stored in another variable in Azure Pipelines

Question

I'm using the AzureKeyVault task to retrieve a secret from the Key Vault. The name of the secret is StorageAccountKey. This name is stored in the variable KeyName. I do it like that

- task: AzureKeyVault@1
  displayName: 'Get key'
  name: GetKey
  inputs:
    azureSubscription: '${{ parameters.azureSubscription }}'
    KeyVaultName: '$(KeyVaultName)'
    SecretsFilter: '$(KeyName)'

Now, in a subsequent task, I would like to access the secret. How would I do that, given that the name of the secret is itself stored in a variable? The following seems not to work

- task: Bash@3
  displayName: Create container
  inputs:
    targetType: 'inline'
    script: |
      az storage container create \
          --name raw \
          --account-name storageaccountname \
          --account-key $($(dataLakeAccountKeyKeyName))
    failOnStderr: true

I'm getting the error

/mnt/azp/azp-linux1_5/_temp/6719378a-b3ee-45d8-aad8-4f6a5e8b581e.sh: line 1: StorageAccountKey: command not found
ERROR: az storage container create: error: argument --account-key: expected one argument

So, it does seem to resolve the inner variable but still fails.

Hi friend, any update for this issue? Please check if Kontekst's answer helps to resolve your issue. As i know, no matter you use Azure Key Valut task or use Variable Group way, you can then use $(SecretName) to get the value after them. Let me know if the issue persists :) — LoLance
– LoLance, Commented Jan 1, 2020 at 10:02

Jakub Igła · Accepted Answer · 2021-12-15 11:13:20Z

3

I also struggled to get this done and this has worked for me:

steps:
  - task: AzureKeyVault@1
    inputs:
      azureSubscription: ${{ parameters.azureSubscription }}
      KeyVaultName: ${{ parameters.azureKeyVaultName }}
      SecretsFilter: '*'
      RunAsPreJob: true

  - bash: |
      #I can now use ${GCP_CREDS}
    displayName: GCP auth
    env:
      GCP_CREDS: $(${{ parameters.azureKeyVaultCredentailsKey }})

answered Dec 15, 2021 at 11:13

Jakub Igła

636 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

abatishchev · Accepted Answer · 2023-08-19 17:53:08Z

0

Try using:

--account-key $(StorageAccountKey)

From "Azure Key Vault task" documentation:

Values are retrieved as strings. For example, if there is a secret named connectionString, a task variable connectionString is created with the latest value of the respective secret fetched from Azure key vault. This variable is then available in subsequent tasks."

So if you access secret named in azure key vault "StorageAccountKey" then Azure DevOps creates from this place variable called "StorageAccountKey".

edited Aug 19, 2023 at 17:53

abatishchev

101k88 gold badges303 silver badges443 bronze badges

answered Dec 20, 2019 at 14:48

Kontekst

1,2111 gold badge11 silver badges20 bronze badges

Comments

MAC_UNSW · Accepted Answer · 2024-10-21 23:55:49Z

not sure you got the answer for the question, but yes, if you know the keyvault's keyname is StorageAccountKey then when keyvault task finished, just use the variable $(StorageAccountKey) directly from the powershell script.

az storage container create \
          --name raw \
          --account-name storageaccountname \
          --account-key $(StorageAccountKey)

or, I am not sure if its feasible, as sometime it does not allow the same syntax to be executed. maybe try this if you need to insist using variable assume the variable keyname is the secret key that present the string value storageaccountkey

az storage container create \
          --name raw \
          --account-name storageaccountname \
          --account-key $((Get-Variable -name $KeyName).Value)

as this was tested under some sample ps program

$mm = 'bb'
$bb = "aa"

Write-Output "$((Get-Variable -name $mm).Value)"

the output result is aa for the above code.

Collectives™ on Stack Overflow

Use a variable name that is stored in another variable in Azure Pipelines

3 Answers 3

Comments

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related