# coding=utf-8
# --------------------------------------------------------------------------
# Copyright (c) Microsoft Corporation. All rights reserved.
# Licensed under the MIT License. See License.txt in the project root for license information.
# Code generated by Microsoft (R) AutoRest Code Generator.
# Changes may cause incorrect behavior and will be lost if the code is regenerated.
# --------------------------------------------------------------------------

from azure.identity import DefaultAzureCredential

from azure.mgmt.containerinstance import ContainerInstanceManagementClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-containerinstance
# USAGE
    python container_group_create_confidential.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = ContainerInstanceManagementClient(
        credential=DefaultAzureCredential(),
        subscription_id="00000000-0000-0000-0000-000000000000",
    )

    response = client.container_groups.begin_create_or_update(
        resource_group_name="demo",
        container_group_name="demo1",
        container_group={
            "location": "westeurope",
            "properties": {
                "confidentialComputeProperties": {
                    "ccePolicy": "eyJhbGxvd19hbGwiOiB0cnVlLCAiY29udGFpbmVycyI6IHsibGVuZ3RoIjogMCwgImVsZW1lbnRzIjogbnVsbH19"
                },
                "containers": [
                    {
                        "name": "accdemo",
                        "properties": {
                            "command": [],
                            "environmentVariables": [],
                            "image": "confiimage",
                            "ports": [{"port": 8000}],
                            "resources": {"requests": {"cpu": 1, "memoryInGB": 1.5}},
                            "securityContext": {"capabilities": {"add": ["CAP_NET_ADMIN"]}, "privileged": False},
                        },
                    }
                ],
                "imageRegistryCredentials": [],
                "ipAddress": {"ports": [{"port": 8000, "protocol": "TCP"}], "type": "Public"},
                "osType": "Linux",
                "sku": "Confidential",
            },
        },
    ).result()
    print(response)


# x-ms-original-file: specification/containerinstance/resource-manager/Microsoft.ContainerInstance/preview/2024-05-01-preview/examples/ContainerGroupCreateConfidential.json
if __name__ == "__main__":
    main()