portal-web/.github/workflows/release-to-production.yml at 034ac33d396d80336843a2ee38f319a29974385c · frasermolyneux/portal-web · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
name: Release to Production

on:
  workflow_dispatch:
  push:
    branches:
      - main
  schedule:
    - cron: "0 3 * * 4" # Weekly Thursday at 3am UTC

permissions:
  contents: read
  id-token: write # Required for OIDC with Azure

concurrency:
  group: ${{ github.workflow }}

jobs:
  dotnet-web-ci:
    runs-on: ubuntu-latest

    steps:
    - uses: frasermolyneux/actions/dotnet-web-ci@main
      with:
        dotnet-project: "XtremeIdiots.Portal.Web"
        dotnet-version: 9.0.x
        src-folder: "src"

  terraform-plan-and-apply-dev:
    environment: Development
    runs-on: ubuntu-latest
    needs: [dotnet-web-ci]

    concurrency:
      group: ${{ github.repository }}-dev

    steps:
    - uses: frasermolyneux/actions/terraform-plan-and-apply@main
      with:
        terraform-folder: "terraform"
        terraform-var-file: "tfvars/dev.tfvars"
        terraform-backend-file: "backends/dev.backend.hcl"
        AZURE_CLIENT_ID: ${{ vars.AZURE_CLIENT_ID }}
        AZURE_TENANT_ID: ${{ vars.AZURE_TENANT_ID }}
        AZURE_SUBSCRIPTION_ID: ${{ vars.AZURE_SUBSCRIPTION_ID }}

    - id: terraform-output-dev
      shell: bash
      run: |
        cd terraform
        echo "web_app_name=$(terraform output -raw web_app_name)" >> $GITHUB_OUTPUT
        echo "web_app_resource_group=$(terraform output -raw web_app_resource_group)" >> $GITHUB_OUTPUT
      env:
        ARM_CLIENT_ID: ${{ vars.AZURE_CLIENT_ID }}
        ARM_SUBSCRIPTION_ID: ${{ vars.AZURE_SUBSCRIPTION_ID }}
        ARM_TENANT_ID: ${{ vars.AZURE_TENANT_ID }}
        ARM_USE_AZUREAD: true
        ARM_USE_OIDC: true

    outputs:
      web_app_name: ${{ steps.terraform-output-dev.outputs.web_app_name }}
      web_app_resource_group: ${{ steps.terraform-output-dev.outputs.web_app_resource_group }}

  app-service-deploy-dev:
    environment: Development
    runs-on: ubuntu-latest
    needs: [dotnet-web-ci, terraform-plan-and-apply-dev]

    concurrency:
      group: ${{ github.repository }}-dev

    steps:
    - uses: frasermolyneux/actions/deploy-app-service@main
      with:
        web-artifact-name: "XtremeIdiots.Portal.Web"
        web-app-name: ${{ needs.terraform-plan-and-apply-dev.outputs.web_app_name }}
        resource-group-name: ${{ needs.terraform-plan-and-apply-dev.outputs.web_app_resource_group }}
        AZURE_CLIENT_ID: ${{ vars.AZURE_CLIENT_ID }}
        AZURE_TENANT_ID: ${{ vars.AZURE_TENANT_ID }}
        AZURE_SUBSCRIPTION_ID: ${{ vars.AZURE_SUBSCRIPTION_ID }}

  terraform-plan-and-apply-prd:
    environment: Production
    runs-on: ubuntu-latest
    needs: [app-service-deploy-dev]

    concurrency:
      group: ${{ github.repository }}-prd

    steps:
    - uses: frasermolyneux/actions/terraform-plan-and-apply@main
      with:
        terraform-folder: "terraform"
        terraform-var-file: "tfvars/prd.tfvars"
        terraform-backend-file: "backends/prd.backend.hcl"
        AZURE_CLIENT_ID: ${{ vars.AZURE_CLIENT_ID }}
        AZURE_TENANT_ID: ${{ vars.AZURE_TENANT_ID }}
        AZURE_SUBSCRIPTION_ID: ${{ vars.AZURE_SUBSCRIPTION_ID }}

    - id: terraform-output-prd
      shell: bash
      run: |
        cd terraform
        echo "web_app_name=$(terraform output -raw web_app_name)" >> $GITHUB_OUTPUT
        echo "web_app_resource_group=$(terraform output -raw web_app_resource_group)" >> $GITHUB_OUTPUT
      env:
        ARM_CLIENT_ID: ${{ vars.AZURE_CLIENT_ID }}
        ARM_SUBSCRIPTION_ID: ${{ vars.AZURE_SUBSCRIPTION_ID }}
        ARM_TENANT_ID: ${{ vars.AZURE_TENANT_ID }}
        ARM_USE_AZUREAD: true
        ARM_USE_OIDC: true

    outputs:
      web_app_name: ${{ steps.terraform-output-prd.outputs.web_app_name }}
      web_app_resource_group: ${{ steps.terraform-output-prd.outputs.web_app_resource_group }}

  app-service-deploy-prd:
    environment: Production
    runs-on: ubuntu-latest
    needs: [dotnet-web-ci, terraform-plan-and-apply-prd]

    concurrency:
      group: ${{ github.repository }}-prd

    steps:
    - uses: frasermolyneux/actions/deploy-app-service@main
      with:
        web-artifact-name: "XtremeIdiots.Portal.Web"
        web-app-name: ${{ needs.terraform-plan-and-apply-prd.outputs.web_app_name }}
        resource-group-name: ${{ needs.terraform-plan-and-apply-prd.outputs.web_app_resource_group }}
        AZURE_CLIENT_ID: ${{ vars.AZURE_CLIENT_ID }}
        AZURE_TENANT_ID: ${{ vars.AZURE_TENANT_ID }}
        AZURE_SUBSCRIPTION_ID: ${{ vars.AZURE_SUBSCRIPTION_ID }}