deploy infra

Author: Karacs Péter

.github/workflows/deploy.yml

@@ -1,14 +1,20 @@
-### Complete GitHub Actions Workflow
-
-name: Build and Deploy Bicep Template
+name: Build and Deploy Infrastructure and Application
 
 on:
   push:
     branches:
       - main
+  workflow_dispatch:
+
+env:
+  REGISTRY_NAME: PeterAppRegistry
+  IMAGE_BASE_NAME: python-flask-app
+  REGISTRY_LOGIN_SERVER: PeterAppRegistry.azurecr.io
+  APP_SERVICE_NAME: peterAppService
+  KEY_VAULT_NAME: PeterAppRegistry-kv
 
 jobs:
-  build:
+  build-bicep:
     runs-on: ubuntu-latest
 
     steps:
@@ -26,37 +32,14 @@ jobs:
         with:
           creds: ${{ secrets.AZURE_CREDENTIALS }}
 
-      - name: Create Key Vault
-        run: |
-          az keyvault create --name myKeyVault --resource-group myResourceGroup --location northeurope
-
       - name: Build Bicep Template
         run: |
           # Validate the Bicep template
           az bicep build --file main.bicep
 
-      - name: Get ACR credentials
-        id: get-acr-credentials
-        run: |
-          ACR_NAME="PeterAppRegistry"  # Replace with your ACR name
-          ACR_CREDENTIALS=$(az acr credential show --name $ACR_NAME --query "{username: username, password: passwords[0].value}" -o json)
-          echo "REGISTRY_USERNAME=$(echo $ACR_CREDENTIALS | jq -r .username)" >> $GITHUB_ENV
-          echo "REGISTRY_PASSWORD=$(echo $ACR_CREDENTIALS | jq -r .password)" >> $GITHUB_ENV
-
-      - name: Retrieve secrets from Key Vault
-        id: get-secrets
-        run: |
-          SECRET_USERNAME=$(az keyvault secret show --name acr-username --vault-name myKeyVault --query value -o tsv)
-          SECRET_PASSWORD1=$(az keyvault secret show --name acr-password1 --vault-name myKeyVault --query value -o tsv)
-          SECRET_PASSWORD2=$(az keyvault secret show --name acr-password2 --vault-name myKeyVault --query value -o tsv)
-          echo "REGISTRY_USERNAME=$SECRET_USERNAME" >> $GITHUB_ENV
-          echo "REGISTRY_PASSWORD1=$SECRET_PASSWORD1" >> $GITHUB_ENV
-          echo "REGISTRY_PASSWORD2=$SECRET_PASSWORD2" >> $GITHUB_ENV
-
-  deploy:
+  deploy-infrastructure:
     runs-on: ubuntu-latest
-    needs: build # Ensure this job runs after the build job
-
+    needs: build-bicep
     steps:
       - name: Checkout code
         uses: actions/checkout@v2
@@ -74,4 +57,61 @@ jobs:
 
       - name: Deploy Bicep Template
         run: |
-          az deployment group create --resource-group myResourceGroup --template-file main.bicep --parameters acrAdminUserEnabled=true containerRegistryImageName=PeterAppRegistry containerRegistryImageVersion=latest adminCredentialsKeyVaultSecretUserName=$REGISTRY_USERNAME adminCredentialsKeyVaultSecretUserPassword1=$REGISTRY_PASSWORD1 adminCredentialsKeyVaultSecretUserPassword2=$REGISTRY_PASSWORD2
+          az deployment group create \
+            --resource-group BCSAI2024-DEVOPS-STUDENTS-A-DEV \
+            --template-file main.bicep \
+            --parameters main.parameters.json
+
+  build-and-push-container:
+    needs: deploy-infrastructure
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@main
+
+      - name: Azure login
+        uses: azure/login@v1
+        with:
+          creds: ${{ secrets.AZURE_CREDENTIALS }}
+
+      - name: Get ACR credentials from Key Vault
+        run: |
+          ACR_USERNAME=$(az keyvault secret show --name "acr-admin-username" --vault-name ${{ env.KEY_VAULT_NAME }} --query "value" -o tsv)
+          ACR_PASSWORD=$(az keyvault secret show --name "acr-admin-password1" --vault-name ${{ env.KEY_VAULT_NAME }} --query "value" -o tsv)
+          echo "::add-mask::$ACR_PASSWORD"
+          echo "ACR_USERNAME=$ACR_USERNAME" >> $GITHUB_ENV
+          echo "ACR_PASSWORD=$ACR_PASSWORD" >> $GITHUB_ENV
+
+      - name: Login to Azure Container Registry
+        uses: azure/docker-login@v1
+        with:
+          login-server: ${{ env.REGISTRY_LOGIN_SERVER }}
+          username: ${{ env.ACR_USERNAME }}
+          password: ${{ env.ACR_PASSWORD }}
+
+      - name: Set image version
+        id: image-version
+        run: echo "::set-output name=version::$(echo ${GITHUB_REF#refs/heads/})-$(date +'%Y.%m.%d.%H.%M')"
+
+      - name: Build and push image
+        working-directory: .
+        run: |
+          docker build . -t ${{ env.REGISTRY_LOGIN_SERVER }}/${{ env.IMAGE_BASE_NAME }}:${{ steps.image-version.outputs.version }}
+          docker build . -t ${{ env.REGISTRY_LOGIN_SERVER }}/${{ env.IMAGE_BASE_NAME }}:${{ github.ref_name }}-latest
+          docker push ${{ env.REGISTRY_LOGIN_SERVER }}/${{ env.IMAGE_BASE_NAME }}:${{ steps.image-version.outputs.version }}
+          docker push ${{ env.REGISTRY_LOGIN_SERVER }}/${{ env.IMAGE_BASE_NAME }}:${{ github.ref_name }}-latest
+
+  deploy-container:
+    needs: build-and-push-container
+    runs-on: ubuntu-latest
+    steps:
+      - name: Azure login
+        uses: azure/login@v1
+        with:
+          creds: ${{ secrets.AZURE_CREDENTIALS }}
+
+      - name: Deploy to Azure Web App
+        uses: azure/webapps-deploy@v3
+        with:
+          app-name: ${{ env.APP_SERVICE_NAME }}
+          images: ${{ env.REGISTRY_LOGIN_SERVER }}/${{ env.IMAGE_BASE_NAME }}:${{ github.ref_name }}-latest