Create cicdpipe

.github/workflows/deploy-infra-and-app-PR.yml

@@ -0,0 +1,40 @@
+on:
+  pull_request:
+    branches:
+      - main
+jobs:
+    build-reactapp-lint-frontend-job:
+        runs-on: ubuntu-latest
+        environment: production
+
+        steps:
+        - name: Checkout repository
+          uses: actions/checkout@v4
+
+        - name: Build the react app - production mode
+          run: npm install && npm run build
+          working-directory: ./frontend
+
+        - name: Run the linting script
+          run: npm run lint
+          working-directory: ./frontend
+
+    build-dotnet-app-release-backend-job:
+        runs-on: ubuntu-latest
+        environment: production
+
+        steps:
+        - name: Checkout repository
+          uses: actions/checkout@v4
+
+        - name: Setup .NET SDK 9.0.x
+          uses: actions/setup-dotnet@v4
+          with:
+            dotnet-version: '9.0.x'
+
+        - name: Build the dotnet app in release mode
+          run: dotnet build --configuration Release
+          working-directory: ./backend
+
+
+

.github/workflows/deploy-infra-and-apps.yml

@@ -0,0 +1,175 @@
+on: 
+  push:
+    tags:
+      - 'v[0-9].[0-9].[0-9]'
+  workflow_dispatch:
+
+
+permissions:
+  # Require write permission to Fetch an OIDC token (required for federated credential) and write it
+  # It will be automatically used on actions / cli that needs it
+  id-token: write
+
+
+
+env: 
+  AZURE_RG_NAME: rg-${{ vars.PROJECT_NAME }}-${{ vars.AZURE_RESOURCE_IDENTIFIER }}
+
+jobs:
+  build-reactapp-lint-frontend-job:
+      runs-on: ubuntu-latest
+      environment: production
+
+      steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Build the react app - production mode
+        run: npm install && npm run build
+        working-directory: ./frontend
+
+      - name: 'Createa artefact frontend'
+        uses: actions/upload-artifact@v4
+        with:
+          name: react-frontend-build
+          path : ./frontend
+
+  build-dotnet-app-release-backend-job:
+      runs-on: ubuntu-latest
+      environment: production
+
+      steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Setup .NET SDK 9.0.x
+        uses: actions/setup-dotnet@v4
+        with:
+          dotnet-version: '9.0.x'
+
+      - name: Build the dotnet app in release mode
+        run: dotnet build --configuration Release
+        working-directory: ./backend
+
+
+      - name: 'Create artefact'
+        uses: actions/upload-artifact@v4
+        with:
+          name: dotnet-backend-build
+          path : ./backend
+
+  deploy_infrastructure:
+    runs-on: ubuntu-latest
+    needs : [build-dotnet-app-release-backend-job, build-reactapp-lint-frontend-job]   # Ensure this job runs after the pull_request job
+    environment: production # bind the job to the production environment
+    outputs:
+      appServiceName: ${{ steps.bicep_deploy.outputs.appServiceName }}
+      staticWebAppName: ${{ steps.bicep_deploy.outputs.staticWebAppName }}
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v4
+
+    - name: Login to Azure 
+      uses: azure/login@v2
+      with:
+        client-id: ${{ secrets.AZURE_CLIENT_ID }}
+        tenant-id: ${{ secrets.AZURE_TENANT_ID }}
+        subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
+        enable-AzPSSession: true 
+
+    - name: Create resource group if not exists      
+      run: |
+        az group show --name ${{ env.AZURE_RG_NAME }} ||
+        az group create --name ${{ env.AZURE_RG_NAME }} --location ${{ secrets.AZURE_REGION }}
+
+    - name: Deploy bicep
+      id: bicep_deploy
+      uses: azure/arm-deploy@v2
+      with:
+        subscriptionId: ${{ secrets.AZURE_SUBSCRIPTION }}
+        region: ${{ secrets.AZURE_REGION }}
+        template: ./infrastructure/main.bicep
+        parameters: project=${{ vars.PROJECT_NAME }} location=${{ secrets.AZURE_REGION }} swaLocation=${{ secrets.AZURE_SWA_REGION }} identifier=${{ vars.AZURE_RESOURCE_IDENTIFIER }}
+        resourceGroupName: ${{ env.AZURE_RG_NAME }}
+
+
+  deploy_backend:
+    runs-on: ubuntu-latest
+    needs: deploy_infrastructure
+    environment: production
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v4
+
+    - name: Setup .NET SDK 9.0.x
+      uses: actions/setup-dotnet@v4
+      with:
+        dotnet-version: '9.0.x'
+
+    - name : Deploy artefact backend
+      uses : actions/download-artifact@v5
+      with :
+        name : dotnet-backend-build
+        path : ./backend
+
+
+
+    - name: Login to Azure 
+      uses: azure/login@v2
+      with:
+        client-id: ${{ secrets.AZURE_CLIENT_ID }}
+        tenant-id: ${{ secrets.AZURE_TENANT_ID }}
+        subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
+
+    - name: Deploy backend to App Service
+      uses: azure/webapps-deploy@v2
+      with: 
+        app-name: ${{ needs.deploy_infrastructure.outputs.appServiceName }} # Access to the previous job output to get the appServiceName deployed with bicep
+        package: ./backend
+  # deploy_infrastructure ...
+
+  deploy_frontend:
+    runs-on: ubuntu-latest
+    needs: deploy_infrastructure
+    environment: production
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v4
+
+    - name : Deploy artefact frontend
+      uses : actions/download-artifact@v5
+      with :
+        name : react-frontend-build
+        path : ./frontend
+
+
+
+    - name: Login to Azure 
+      uses: azure/login@v2
+      with:
+        client-id: ${{ secrets.AZURE_CLIENT_ID }}
+        tenant-id: ${{ secrets.AZURE_TENANT_ID }}
+        subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }} 
+
+    # Login to Azure
+    # ...
+
+    - name: Get Static Web App deployment token
+      run: |      
+          SWA_DEPLOYMENT_TOKEN=$(az staticwebapp secrets list -n ${{ needs.deploy_infrastructure.outputs.staticWebAppName }} -o tsv --query properties.apiKey)
+            echo SWA_DEPLOYMENT_TOKEN=$SWA_DEPLOYMENT_TOKEN >> $GITHUB_ENV
+
+    # Deploy frontend to Static Web App
+    # ...
+
+    - name: Deploy frontend to Static Web App
+      uses: azure/static-web-apps-deploy@v1
+      with:
+        azure_static_web_apps_api_token: ${{ env.SWA_DEPLOYMENT_TOKEN }}
+        app_location: ./frontend
+        action: upload
+        skip_app_build: true
+        skip_api_build: true
+

infrastructure/main.bicep

@@ -0,0 +1,50 @@
+targetScope = 'resourceGroup' // We'll deploy the resources in the provided resource group
+
+// Parameters to easily construct resource names
+param location string
+param project string
+param swaLocation string // Static Web App locations are limited, we need to add another variable
+// Here we'll add an identifier to create a unique name for the App Service Plan, for example your trigram, so that everyone could deploy his own parkndeploy instance
+param identifier string
+
+// Create the AppServicePlan through the AppServicePlan module
+module appServicePlan 'modules/appServicePlan.bicep' = {
+  name: 'appServicePlan'
+  params: {
+    location: location
+    project: project
+    identifier: identifier
+  }
+}
+
+// Create the AppService through the AppService module
+module appService 'modules/appService.bicep' = {
+  name: 'appService'
+  params: {
+    location: location
+    project: project
+    identifier: identifier
+    planId: appServicePlan.outputs.planId // Use the appServicePlan output to get its id back => an App Service needs to reference its App Service Plan
+  }
+}
+
+module staticWebApp 'modules/staticWebApp.bicep' = {
+  name: 'staticWebApp'
+  params: {
+    location: swaLocation
+    project: project
+    identifier: identifier
+  }
+}
+module staticWebAppBackend 'modules/staticWebAppBackEnd.bicep' = {
+  name: 'staticWebAppBackend'
+  params: {
+    backendBindedResourceId: appService.outputs.appServiceId
+    swaName: staticWebApp.outputs.swaName
+    location: location
+  }
+}
+// Export App Service Name
+
+output appServiceName string = appService.outputs.appServiceName // Export AppServiceName in order to deploy the API later on
+output staticWebAppName string = staticWebApp.outputs.swaName // Export StaticWebAppName in order to deploy the Frontend late

infrastructure/modules/appService.bicep

@@ -0,0 +1,24 @@
+param location string
+param project string
+param identifier string
+
+// App Service Plan identifier that will host our App Service
+param planId string
+
+resource app 'Microsoft.Web/sites@2022-03-01' = {
+  name: '${project}-app-${identifier}'
+  location: location
+
+  properties: {
+    serverFarmId: planId
+    reserved: true
+
+    siteConfig: {
+      linuxFxVersion: 'DOTNETCORE|9.0' // Specify to setup the .NET Core 9.0 runtime (used by our backend API) on the Linux machine under the hood
+    }
+  }
+}
+
+output appServiceName string = app.name // Export the App Service name for deployment
+
+output appServiceId string = app.id

infrastructure/modules/appServicePlan.bicep

@@ -0,0 +1,20 @@
+param location string
+param project string
+param identifier string
+
+resource plan 'Microsoft.Web/serverfarms@2022-09-01' = {
+  name: '${project}-plan-${identifier}'
+  location: location
+
+  sku: {
+    name: 'F1' // We use F1 pricing plan (free one) as we don't need specific features
+  }
+
+  kind: 'app,linux' // Allow to deploy on an App Service using Linux OS
+
+  properties: {
+    reserved: true // Specifity of App Service with Linux OS
+  }
+}
+
+output planId string = plan.id // Export the App Service identifier

infrastructure/modules/staticWebApp.bicep

@@ -0,0 +1,17 @@
+param location string
+param project string
+param identifier string
+
+resource swa 'Microsoft.Web/staticSites@2024-04-01' = {
+  name: '${project}-swa-${identifier}'
+  location: location
+
+  sku: {   
+    name: 'Standard'
+    tier: 'Standard'
+}
+
+  properties: {} // Even empty, it's mandatory ...
+}
+
+output swaName string = swa.name // Expose Static Web App name as we did for App Service for deployment purpose

infrastructure/modules/staticWebAppBackEnd.bicep

@@ -0,0 +1,12 @@
+param backendBindedResourceId string
+param swaName string
+param location string
+
+resource staticWebAppBackend 'Microsoft.Web/staticSites/linkedBackends@2022-03-01' = {
+  name: '${swaName}/backend'
+  properties: {
+    backendResourceId: backendBindedResourceId
+    region: location
+  }
+}
+