code-quality-scan-demo-app/.github/workflows/deploy-all.yml at main · devopsabcs-engineering/code-quality-scan-demo-app · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
name: Deploy All Demo Apps

on:
  workflow_dispatch:

permissions:
  id-token: write
  contents: read

env:
  LOCATION: canadacentral

jobs:
  deploy-storage:
    name: Deploy ADLS Gen2 Storage
    runs-on: ubuntu-latest
    environment: prod
    outputs:
      storageAccountName: ${{ steps.storage.outputs.storageAccountName }}
      containerName: ${{ steps.storage.outputs.containerName }}
      dfsEndpoint: ${{ steps.storage.outputs.dfsEndpoint }}
    steps:
      - uses: actions/checkout@v4

      - name: Azure Login
        uses: azure/login@v2
        with:
          client-id: ${{ secrets.AZURE_CLIENT_ID }}
          tenant-id: ${{ secrets.AZURE_TENANT_ID }}
          subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}

      - name: Create Storage Resource Group
        run: az group create --name rg-cq-scan-store --location ${{ env.LOCATION }}

      - name: Deploy ADLS Gen2
        id: storage
        run: |
          outputs=$(az deployment group create \
            --resource-group rg-cq-scan-store \
            --name "deploy-storage-${{ github.run_id }}" \
            --template-file infra/storage.bicep \
            --query 'properties.outputs' -o json)
          echo "storageAccountName=$(echo $outputs | jq -r '.storageAccountName.value')" >> $GITHUB_OUTPUT
          echo "containerName=$(echo $outputs | jq -r '.containerName.value')" >> $GITHUB_OUTPUT
          echo "dfsEndpoint=$(echo $outputs | jq -r '.dfsEndpoint.value')" >> $GITHUB_OUTPUT

      - name: Storage Summary
        run: |
          echo "### 🗄️ ADLS Gen2 Storage" >> $GITHUB_STEP_SUMMARY
          echo "- **Account:** ${{ steps.storage.outputs.storageAccountName }}" >> $GITHUB_STEP_SUMMARY
          echo "- **Container:** ${{ steps.storage.outputs.containerName }}" >> $GITHUB_STEP_SUMMARY
          echo "- **DFS Endpoint:** ${{ steps.storage.outputs.dfsEndpoint }}" >> $GITHUB_STEP_SUMMARY

  deploy:
    needs: deploy-storage
    runs-on: ubuntu-latest
    environment: prod
    strategy:
      matrix:
        app:
          - { name: 'cq-demo-app-001', rg: 'rg-cq-demo-001', dir: 'cq-demo-app-001' }
          - { name: 'cq-demo-app-002', rg: 'rg-cq-demo-002', dir: 'cq-demo-app-002' }
          - { name: 'cq-demo-app-003', rg: 'rg-cq-demo-003', dir: 'cq-demo-app-003' }
          - { name: 'cq-demo-app-004', rg: 'rg-cq-demo-004', dir: 'cq-demo-app-004' }
          - { name: 'cq-demo-app-005', rg: 'rg-cq-demo-005', dir: 'cq-demo-app-005' }
      fail-fast: false
    steps:
      - uses: actions/checkout@v4

      - name: Azure Login
        uses: azure/login@v2
        with:
          client-id: ${{ secrets.AZURE_CLIENT_ID }}
          tenant-id: ${{ secrets.AZURE_TENANT_ID }}
          subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}

      - name: Create Resource Group
        run: az group create --name ${{ matrix.app.rg }} --location ${{ env.LOCATION }}

      - name: Deploy Infrastructure
        id: infra
        working-directory: ${{ matrix.app.dir }}
        run: |
          outputs=$(az deployment group create \
            --resource-group ${{ matrix.app.rg }} \
            --name "deploy-${{ github.run_id }}" \
            --template-file infra/main.bicep \
            --parameters appName=${{ matrix.app.name }} \
            --query 'properties.outputs' -o json)
          echo "acrName=$(echo $outputs | jq -r '.acrName.value')" >> $GITHUB_OUTPUT
          echo "appServiceName=$(echo $outputs | jq -r '.appServiceName.value')" >> $GITHUB_OUTPUT

      - name: Build and Push to ACR
        working-directory: ${{ matrix.app.dir }}
        run: |
          az acr build \
            --registry ${{ steps.infra.outputs.acrName }} \
            --image ${{ matrix.app.name }}:${{ github.sha }} \
            --image ${{ matrix.app.name }}:latest \
            .

      - name: Deploy to Web App
        uses: azure/webapps-deploy@v3
        with:
          app-name: ${{ steps.infra.outputs.appServiceName }}
          images: ${{ steps.infra.outputs.acrName }}.azurecr.io/${{ matrix.app.name }}:${{ github.sha }}

      - name: Health Check
        run: |
          APP_URL=$(az webapp show -g ${{ matrix.app.rg }} -n ${{ steps.infra.outputs.appServiceName }} --query defaultHostName -o tsv)
          sleep 60
          curl -sf --retry 10 --retry-delay 15 --retry-all-errors "https://$APP_URL" || exit 1

      - name: Summary
        run: |
          APP_URL=$(az webapp show -g ${{ matrix.app.rg }} -n ${{ steps.infra.outputs.appServiceName }} --query defaultHostName -o tsv)
          echo "### ✅ ${{ matrix.app.name }}" >> $GITHUB_STEP_SUMMARY
          echo "Deployed to: https://$APP_URL" >> $GITHUB_STEP_SUMMARY