-
-
Notifications
You must be signed in to change notification settings - Fork 2
Add GitHub Actions workflow for Azure Web App deployment #3
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Open
Mandax94
wants to merge
1
commit into
MetaMask:main
Choose a base branch
from
Mandax94:main
base: main
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Open
Changes from all commits
Commits
File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,86 @@ | ||
| # This workflow will build and push a Docker container to an Azure Web App when a commit is pushed to your default branch. | ||
| # | ||
| # This workflow assumes you have already created the target Azure App Service web app. | ||
| # For instructions see https://docs.microsoft.com/en-us/azure/app-service/quickstart-custom-container?tabs=dotnet&pivots=container-linux | ||
| # | ||
| # To configure this workflow: | ||
| # | ||
| # 1. Download the Publish Profile for your Azure Web App. You can download this file from the Overview page of your Web App in the Azure Portal. | ||
| # For more information: https://docs.microsoft.com/en-us/azure/app-service/deploy-github-actions?tabs=applevel#generate-deployment-credentials | ||
| # | ||
| # 2. Create a secret in your repository named AZURE_WEBAPP_PUBLISH_PROFILE, paste the publish profile contents as the value of the secret. | ||
| # For instructions on obtaining the publish profile see: https://docs.microsoft.com/azure/app-service/deploy-github-actions#configure-the-github-secret | ||
| # | ||
| # 3. Create a GitHub Personal access token with "repo" and "read:packages" permissions. | ||
| # | ||
| # 4. Create three app settings on your Azure Web app: | ||
| # DOCKER_REGISTRY_SERVER_URL: Set this to "https://ghcr.io" | ||
| # DOCKER_REGISTRY_SERVER_USERNAME: Set this to the GitHub username or organization that owns the repository | ||
| # DOCKER_REGISTRY_SERVER_PASSWORD: Set this to the value of your PAT token from the previous step | ||
| # | ||
| # 5. Change the value for the AZURE_WEBAPP_NAME. | ||
| # | ||
| # For more information on GitHub Actions for Azure: https://github.com/Azure/Actions | ||
| # For more information on the Azure Web Apps Deploy action: https://github.com/Azure/webapps-deploy | ||
| # For more samples to get started with GitHub Action workflows to deploy to Azure: https://github.com/Azure/actions-workflow-samples | ||
|
|
||
| name: Build and deploy a container to an Azure Web App | ||
|
|
||
| env: | ||
| AZURE_WEBAPP_NAME: your-app-name # set this to the name of your Azure Web App | ||
|
|
||
| on: | ||
| push: | ||
| branches: [ "main" ] | ||
| workflow_dispatch: | ||
|
|
||
| permissions: | ||
| contents: read | ||
|
|
||
| jobs: | ||
| build: | ||
| runs-on: ubuntu-latest | ||
|
|
||
| steps: | ||
| - uses: actions/checkout@v4 | ||
|
|
||
| - name: Set up Docker Buildx | ||
| uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0 | ||
|
|
||
| - name: Log in to GitHub container registry | ||
| uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0 | ||
| with: | ||
| registry: ghcr.io | ||
| username: ${{ github.actor }} | ||
| password: ${{ github.token }} | ||
|
|
||
| - name: Lowercase the repo name and username | ||
| run: echo "REPO=${GITHUB_REPOSITORY,,}" >>${GITHUB_ENV} | ||
|
|
||
| - name: Build and push container image to registry | ||
| uses: docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0.0 | ||
| with: | ||
| push: true | ||
| tags: ghcr.io/${{ env.REPO }}:${{ github.sha }} | ||
| file: ./Dockerfile | ||
|
|
||
| deploy: | ||
| permissions: | ||
| contents: none | ||
| runs-on: ubuntu-latest | ||
| needs: build | ||
| environment: | ||
| name: 'Development' | ||
| url: ${{ steps.deploy-to-webapp.outputs.webapp-url }} | ||
|
|
||
| steps: | ||
| - name: Lowercase the repo name and username | ||
| run: echo "REPO=${GITHUB_REPOSITORY,,}" >>${GITHUB_ENV} | ||
|
|
||
| - name: Deploy to Azure Web App | ||
| id: deploy-to-webapp | ||
| uses: azure/webapps-deploy@v2 | ||
| with: | ||
| app-name: ${{ env.AZURE_WEBAPP_NAME }} | ||
| publish-profile: ${{ secrets.AZURE_WEBAPP_PUBLISH_PROFILE }} | ||
| images: 'ghcr.io/${{ env.REPO }}:${{ github.sha }}' | ||
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Bug: Missing packages write permission for container push
The workflow sets
permissionsto onlycontents: read, but the build job pushes a Docker image to GitHub Container Registry at line 63. Pushing to GHCR requirespackages: writepermission for theGITHUB_TOKEN. Without this permission, the Docker push operation will fail with an authorization error, preventing the workflow from completing successfully.