Deploy QA to Production (#759)

* add packages for azure secrets retrieval * add code snippets to get secrets from azure * add script for app startup * add workflow for the azure deployer * call webhook on build fail * do not pin azure package to specific version * add comment for better readability * --- (#755) updated-dependencies: - dependency-name: requests dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: Saurav <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Crowdbotics <[email protected]>
crowdbotics · May 28, 2024 · 2653269 · 2653269
1 parent 77a8a69
commit 2653269
Show file tree

Hide file tree

Showing 6 changed files with 418 additions and 280 deletions.
diff --git a/{{cookiecutter.project_slug}}/.circleci/config.yml b/{{cookiecutter.project_slug}}/.circleci/config.yml
@@ -10,7 +10,7 @@ jobs:
       - run: 
           name: Generate Pipeline generated_config.yml file
           command: |
-            bash .circleci/generate_gcp_config.sh
+            bash ".circleci/generate_${BUILD_TYPE}_config.sh"
       - continuation/continue:
           parameters: '{}'
           configuration_path: configs/generated_config.yml

diff --git a/{{cookiecutter.project_slug}}/.circleci/generate_azure_config.sh b/{{cookiecutter.project_slug}}/.circleci/generate_azure_config.sh
@@ -0,0 +1,87 @@
+#!/bin/bash
+set -o pipefail
+
+BACKEND_PATH=$1
+
+mkdir configs/
+cat <<EOF >configs/generated_config.yml
+version: 2.1
+
+executors:
+  python-executor:
+    docker:
+      - image: circleci/python:3.9
+
+jobs:
+  build:
+    executor: python-executor
+    steps:
+      - checkout
+      - setup_remote_docker:
+          version: 20.10.7
+          docker_layer_caching: true
+      - run:
+          name: Install Azure CLI
+          command: |
+            curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash
+      
+      - run:
+          name: Build Docker image
+          command: docker build -t "$AZURE_REGISTRY_NAME.azurecr.io/$AZURE_APP_NAME:latest" --build-arg SECRET_KEY="build" "."
+      - run:
+          name: Login to Azure Container Registry
+          command: |
+            az login --service-principal -u $AZURE_CLIENT_ID -p $AZURE_CLIENT_SECRET --tenant $AZURE_TENANT_ID
+            az acr login --name $AZURE_REGISTRY_NAME
+      - run:
+          name: Push Docker image to ACR
+          command: docker push "$AZURE_REGISTRY_NAME.azurecr.io/$AZURE_APP_NAME:latest"
+      - run:
+          name: Webhook Failed
+          command: bash "$BACKEND_PATH.circleci/webhook_callback.sh" "failure"
+          when: on_fail
+
+  deploy:
+    executor: python-executor
+    steps:
+      - checkout
+      - run:
+          name: Install Azure CLI
+          command: |
+            curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash
+      - run:
+          name: Login to Azure
+          command: |
+            az login --service-principal -u $AZURE_CLIENT_ID -p $AZURE_CLIENT_SECRET --tenant $AZURE_TENANT_ID
+      - run:
+          name: Set Azure subscription
+          command: |
+            az account set --subscription $AZURE_SUBSCRIPTION_ID
+      - run:
+          name: Deploy to Azure App Service
+          command: |
+            az webapp config container set --name $AZURE_APP_NAME --resource-group $AZURE_RESOURCE_GROUP_NAME --container-image-name "$AZURE_REGISTRY_NAME.azurecr.io/$AZURE_APP_NAME:latest" --container-registry-url "https://$AZURE_REGISTRY_NAME.azurecr.io"
+      - run:
+          name: Restart App Service
+          command: |
+            az webapp restart --name $AZURE_APP_NAME --resource-group $AZURE_RESOURCE_GROUP_NAME
+      - run:
+          name: Webhook Success
+          command: bash "$BACKEND_PATH.circleci/webhook_callback.sh" "success"
+          when: on_success
+
+      - run:
+          name: Webhook Failed
+          command: bash "$BACKEND_PATH.circleci/webhook_callback.sh" "failure"
+          when: on_fail
+
+workflows:
+  version: 2
+  build_and_deploy:
+    jobs:
+      - build
+      - deploy:
+          requires:
+            - build
+
+EOF
diff --git a/{{cookiecutter.project_slug}}/Pipfile b/{{cookiecutter.project_slug}}/Pipfile
@@ -33,3 +33,5 @@ pipenv = "*"
 django-import-export = "*"
 drf-spectacular = "~=0.26.4"
 dj-rest-auth = "==5.0.2"
+azure-keyvault-secrets = "~=4.8.0"
+azure-identity = "~=1.16.0"