132 lines
No EOL
3.9 KiB
YAML
132 lines
No EOL
3.9 KiB
YAML
# Docs for the Azure Web Apps Deploy action: https://github.com/Azure/webapps-deploy
|
|
# More GitHub Actions for Azure: https://github.com/Azure/actions
|
|
# More info on Python, GitHub Actions, and Azure App Service: https://aka.ms/python-webapps-actions
|
|
|
|
name: Build and deploy Python app to Azure Web App - gateway-prod
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
workflow_dispatch:
|
|
|
|
# Cancel in-progress runs when a new run is triggered (saves logs/storage)
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
jobs:
|
|
test:
|
|
runs-on: ubuntu-latest
|
|
# Same GitHub Environment as deploy — CONFIG_KEY lives here (not on the build job).
|
|
environment:
|
|
name: 'Production'
|
|
url: ${{ steps.deploy-to-webapp.outputs.webapp-url }}
|
|
|
|
steps:
|
|
- uses: actions/checkout@v5
|
|
|
|
- name: Set up Python version
|
|
uses: actions/setup-python@v6
|
|
with:
|
|
python-version: '3.11'
|
|
|
|
- name: Set environment file
|
|
run: |
|
|
test -f env-gateway-prod.env
|
|
cp env-gateway-prod.env .env
|
|
rm -f env-gateway-dev.env env-gateway-int.env env-gateway-prod.env env-gateway-prod-forgejo.env
|
|
|
|
- name: Install dependencies
|
|
run: |
|
|
python -m pip install --upgrade pip
|
|
if [ -f requirements.lock ]; then
|
|
pip install -r requirements.lock --no-cache-dir
|
|
else
|
|
pip install -r requirements.txt --no-cache-dir
|
|
fi
|
|
|
|
- name: Verify CONFIG_KEY for pytest
|
|
env:
|
|
CONFIG_KEY: ${{ secrets.CONFIG_KEY }}
|
|
run: |
|
|
if [ -z "${CONFIG_KEY}" ]; then
|
|
echo "::error::CONFIG_KEY is empty in GitHub Environment 'Production'. Azure App Service settings are not visible to this job — add CONFIG_KEY under Settings → Environments → Production → Environment secrets (same value as in Azure portal)."
|
|
exit 1
|
|
fi
|
|
echo "CONFIG_KEY is set (${#CONFIG_KEY} characters)."
|
|
|
|
- name: Run tests
|
|
env:
|
|
CONFIG_KEY: ${{ secrets.CONFIG_KEY }}
|
|
run: python -m pytest tests/ --ignore=tests/demo
|
|
|
|
build:
|
|
runs-on: ubuntu-latest
|
|
needs: test
|
|
permissions:
|
|
contents: read #This is required for actions/checkout
|
|
|
|
steps:
|
|
- uses: actions/checkout@v5
|
|
|
|
- name: Set up Python version
|
|
uses: actions/setup-python@v6
|
|
with:
|
|
python-version: '3.11'
|
|
|
|
- name: Create and start virtual environment
|
|
run: |
|
|
python -m venv venv
|
|
source venv/bin/activate
|
|
|
|
- name: Install dependencies
|
|
run: |
|
|
python -m pip install --upgrade pip
|
|
if [ -f requirements.lock ]; then
|
|
pip install -r requirements.lock --no-cache-dir
|
|
else
|
|
pip install -r requirements.txt --no-cache-dir
|
|
fi
|
|
|
|
- name: Zip artifact for deployment
|
|
run: zip release.zip ./* -r
|
|
|
|
- name: Upload artifact for deployment jobs
|
|
uses: actions/upload-artifact@v6
|
|
with:
|
|
name: python-app
|
|
path: |
|
|
release.zip
|
|
!venv/
|
|
retention-days: 5
|
|
|
|
deploy:
|
|
runs-on: ubuntu-latest
|
|
needs: build
|
|
environment:
|
|
name: 'Production'
|
|
url: ${{ steps.deploy-to-webapp.outputs.webapp-url }}
|
|
|
|
steps:
|
|
- name: Download artifact from build job
|
|
uses: actions/download-artifact@v7
|
|
with:
|
|
name: python-app
|
|
|
|
- name: Unzip artifact for deployment
|
|
run: unzip release.zip
|
|
|
|
- name: Set productive environment
|
|
run: cp env-gateway-prod.env .env
|
|
|
|
- name: Clean up environment files
|
|
run: rm -f env-*.env
|
|
|
|
- name: 'Deploy to Azure Web App'
|
|
uses: azure/webapps-deploy@v3
|
|
id: deploy-to-webapp
|
|
with:
|
|
app-name: 'gateway-prod'
|
|
slot-name: 'Production'
|
|
publish-profile: ${{ secrets.AZUREAPPSERVICE_PUBLISHPROFILE_GATEWAY_PROD }} |