deploy-dev.yml

name: Deploy Dev

on:
  workflow_dispatch:
    inputs:
      allow-data-loss:
        description: "Allow SQL schema changes that may cause data loss. Triggers a pre-deploy database export first."
        type: boolean
        default: false

permissions: {}

jobs:
  build-and-test:
    permissions:
      contents: read
      id-token: write
    runs-on: ubuntu-latest
    steps:
      - id: v1-ci
        uses: frasermolyneux/actions/dotnet-web-ci@dotnet-web-ci/v1.4
        with:
          dotnet-project: "XtremeIdiots.Portal.Repository.Api.V1"
          dotnet-version: |
            9.0.x
            10.0.x
          src-folder: "src"
          skip-nuget-artifact-upload: "true"
      - id: v2-ci
        uses: frasermolyneux/actions/dotnet-web-ci@dotnet-web-ci/v1.4
        with:
          dotnet-project: "XtremeIdiots.Portal.Repository.Api.V2"
          dotnet-version: |
            9.0.x
            10.0.x
          src-folder: "src"
          skip-nuget-artifact-upload: "true"

    outputs:
      build_version: ${{ steps.v1-ci.outputs.build_version }}

  terraform-plan-and-apply-dev:
    permissions:
      contents: read
      id-token: write
    environment: Development
    needs: build-and-test
    runs-on: ubuntu-latest
    concurrency:
      group: ${{ github.repository }}-dev
    steps:
      - uses: frasermolyneux/actions/terraform-plan-and-apply@terraform-plan-and-apply/v1.4
        with:
          terraform-folder: "terraform"
          terraform-var-file: "tfvars/dev.tfvars"
          terraform-backend-file: "backends/dev.backend.hcl"
          AZURE_CLIENT_ID: ${{ vars.AZURE_CLIENT_ID }}
          AZURE_TENANT_ID: ${{ vars.AZURE_TENANT_ID }}
          AZURE_SUBSCRIPTION_ID: ${{ vars.AZURE_SUBSCRIPTION_ID }}

      - id: terraform-output
        shell: bash
        run: |
          cd terraform
          echo "web_app_name_v1=$(terraform output -raw web_app_name_v1)" >> $GITHUB_OUTPUT
          echo "web_app_resource_group_v1=$(terraform output -raw web_app_resource_group_v1)" >> $GITHUB_OUTPUT
          echo "web_app_name_v2=$(terraform output -raw web_app_name_v2)" >> $GITHUB_OUTPUT
          echo "web_app_resource_group_v2=$(terraform output -raw web_app_resource_group_v2)" >> $GITHUB_OUTPUT
          echo "sql_server_fqdn=$(terraform output -raw sql_server_fqdn)" >> $GITHUB_OUTPUT
          echo "sql_database_name=$(terraform output -raw sql_database_name)" >> $GITHUB_OUTPUT
          echo "api_management_name=$(terraform output -raw api_management_name)" >> $GITHUB_OUTPUT
          echo "api_management_resource_group_name=$(terraform output -raw api_management_resource_group_name)" >> $GITHUB_OUTPUT
          echo "api_management_product_id=$(terraform output -raw api_management_product_id)" >> $GITHUB_OUTPUT
          echo "api_version_set_id=$(terraform output -raw api_version_set_id)" >> $GITHUB_OUTPUT
          echo "backup_storage_account_name=$(terraform output -raw backup_storage_account_name)" >> $GITHUB_OUTPUT
        env:
          ARM_CLIENT_ID: ${{ vars.AZURE_CLIENT_ID }}
          ARM_SUBSCRIPTION_ID: ${{ vars.AZURE_SUBSCRIPTION_ID }}
          ARM_TENANT_ID: ${{ vars.AZURE_TENANT_ID }}
          ARM_USE_AZUREAD: true
          ARM_USE_OIDC: true

    outputs:
      web_app_name_v1: ${{ steps.terraform-output.outputs.web_app_name_v1 }}
      web_app_resource_group_v1: ${{ steps.terraform-output.outputs.web_app_resource_group_v1 }}
      web_app_name_v2: ${{ steps.terraform-output.outputs.web_app_name_v2 }}
      web_app_resource_group_v2: ${{ steps.terraform-output.outputs.web_app_resource_group_v2 }}
      sql_server_fqdn: ${{ steps.terraform-output.outputs.sql_server_fqdn }}
      sql_database_name: ${{ steps.terraform-output.outputs.sql_database_name }}
      api_management_name: ${{ steps.terraform-output.outputs.api_management_name }}
      api_management_resource_group_name: ${{ steps.terraform-output.outputs.api_management_resource_group_name }}
      api_management_product_id: ${{ steps.terraform-output.outputs.api_management_product_id }}
      api_version_set_id: ${{ steps.terraform-output.outputs.api_version_set_id }}
      backup_storage_account_name: ${{ steps.terraform-output.outputs.backup_storage_account_name }}

  deploy-sql-database-dev:
    permissions:
      contents: read
      id-token: write
    environment: Development
    needs: terraform-plan-and-apply-dev
    runs-on: ubuntu-latest
    concurrency:
      group: ${{ github.repository }}-dev
    steps:
      - uses: frasermolyneux/actions/deploy-sql-database@deploy-sql-database/v1.3
        with:
          sql-args: /Variables:env=dev /Variables:instance=01
          sql-server-fqdn: ${{ needs.terraform-plan-and-apply-dev.outputs.sql_server_fqdn }}
          sql-database-name: ${{ needs.terraform-plan-and-apply-dev.outputs.sql_database_name }}
          project-folder: "src/XtremeIdiots.Portal.Repository.Database"
          project-file: "XtremeIdiots.Portal.Repository.Database.sqlproj"
          allow-data-loss: ${{ inputs.allow-data-loss && 'true' || 'false' }}
          backup-storage-account-name: ${{ needs.terraform-plan-and-apply-dev.outputs.backup_storage_account_name }}
          AZURE_CLIENT_ID: ${{ vars.AZURE_CLIENT_ID }}
          AZURE_TENANT_ID: ${{ vars.AZURE_TENANT_ID }}
          AZURE_SUBSCRIPTION_ID: ${{ vars.AZURE_SUBSCRIPTION_ID }}

  app-service-deploy-v1-dev:
    permissions:
      contents: read
      id-token: write
    environment: Development
    needs: [build-and-test, terraform-plan-and-apply-dev, deploy-sql-database-dev]
    runs-on: ubuntu-latest
    concurrency:
      group: ${{ github.repository }}-dev
    steps:
      - uses: frasermolyneux/actions/deploy-app-service@deploy-app-service/v1.2
        with:
          web-artifact-name: "XtremeIdiots.Portal.Repository.Api.V1"
          web-app-name: ${{ needs.terraform-plan-and-apply-dev.outputs.web_app_name_v1 }}
          resource-group-name: ${{ needs.terraform-plan-and-apply-dev.outputs.web_app_resource_group_v1 }}
          AZURE_CLIENT_ID: ${{ vars.AZURE_CLIENT_ID }}
          AZURE_TENANT_ID: ${{ vars.AZURE_TENANT_ID }}
          AZURE_SUBSCRIPTION_ID: ${{ vars.AZURE_SUBSCRIPTION_ID }}

  app-service-deploy-v2-dev:
    permissions:
      contents: read
      id-token: write
    environment: Development
    needs: [build-and-test, terraform-plan-and-apply-dev, deploy-sql-database-dev]
    runs-on: ubuntu-latest
    concurrency:
      group: ${{ github.repository }}-dev
    steps:
      - uses: frasermolyneux/actions/deploy-app-service@deploy-app-service/v1.2
        with:
          web-artifact-name: "XtremeIdiots.Portal.Repository.Api.V2"
          web-app-name: ${{ needs.terraform-plan-and-apply-dev.outputs.web_app_name_v2 }}
          resource-group-name: ${{ needs.terraform-plan-and-apply-dev.outputs.web_app_resource_group_v2 }}
          AZURE_CLIENT_ID: ${{ vars.AZURE_CLIENT_ID }}
          AZURE_TENANT_ID: ${{ vars.AZURE_TENANT_ID }}
          AZURE_SUBSCRIPTION_ID: ${{ vars.AZURE_SUBSCRIPTION_ID }}

  apim-api-import-dev:
    permissions:
      contents: read
      id-token: write
    environment: Development
    needs: [build-and-test, terraform-plan-and-apply-dev, app-service-deploy-v1-dev, app-service-deploy-v2-dev]
    runs-on: ubuntu-latest
    concurrency:
      group: ${{ github.repository }}-dev
    steps:
      - uses: frasermolyneux/actions/apim-api-import@apim-api-import/v1.0
        with:
          api-id: "repository-api-v1"
          api-display-name: "Repository API"
          api-path: "repository"
          api-version: "v1"
          api-version-set-id: ${{ needs.terraform-plan-and-apply-dev.outputs.api_version_set_id }}
          specification-url: "https://${{ needs.terraform-plan-and-apply-dev.outputs.web_app_name_v1 }}.azurewebsites.net/openapi/v1.0.json"
          service-url: "https://${{ needs.terraform-plan-and-apply-dev.outputs.web_app_name_v1 }}.azurewebsites.net/v1"
          apim-name: ${{ needs.terraform-plan-and-apply-dev.outputs.api_management_name }}
          apim-resource-group: ${{ needs.terraform-plan-and-apply-dev.outputs.api_management_resource_group_name }}
          product-id: ${{ needs.terraform-plan-and-apply-dev.outputs.api_management_product_id }}
          info-url: "https://${{ needs.terraform-plan-and-apply-dev.outputs.web_app_name_v1 }}.azurewebsites.net/v1.0/info"
          expected-version: ${{ needs.build-and-test.outputs.build_version }}
          AZURE_CLIENT_ID: ${{ vars.AZURE_CLIENT_ID }}
          AZURE_TENANT_ID: ${{ vars.AZURE_TENANT_ID }}
          AZURE_SUBSCRIPTION_ID: ${{ vars.AZURE_SUBSCRIPTION_ID }}

      - uses: frasermolyneux/actions/apim-api-import@apim-api-import/v1.0
        with:
          api-id: "repository-api-v2"
          api-display-name: "Repository API"
          api-path: "repository"
          api-version: "v2"
          api-version-set-id: ${{ needs.terraform-plan-and-apply-dev.outputs.api_version_set_id }}
          specification-url: "https://${{ needs.terraform-plan-and-apply-dev.outputs.web_app_name_v2 }}.azurewebsites.net/openapi/v2.0.json"
          service-url: "https://${{ needs.terraform-plan-and-apply-dev.outputs.web_app_name_v2 }}.azurewebsites.net/v2"
          apim-name: ${{ needs.terraform-plan-and-apply-dev.outputs.api_management_name }}
          apim-resource-group: ${{ needs.terraform-plan-and-apply-dev.outputs.api_management_resource_group_name }}
          product-id: ${{ needs.terraform-plan-and-apply-dev.outputs.api_management_product_id }}
          info-url: "https://${{ needs.terraform-plan-and-apply-dev.outputs.web_app_name_v2 }}.azurewebsites.net/v2.0/info"
          expected-version: ${{ needs.build-and-test.outputs.build_version }}
          AZURE_CLIENT_ID: ${{ vars.AZURE_CLIENT_ID }}
          AZURE_TENANT_ID: ${{ vars.AZURE_TENANT_ID }}
          AZURE_SUBSCRIPTION_ID: ${{ vars.AZURE_SUBSCRIPTION_ID }}