azure-ipam-testing.yml

name: Azure IPAM Testing

# permissions:
#   id-token: write
#   contents: read

run-name: Azure IPAM Deployment & Testing

on:
  push:
    branches: [ github-actions ]
  pull_request:
    branches: [ main ]

env:
  ACR_NAME: azureipamtest
  IPAM_UI_ID: ipam-ui-${{ github.run_id }}-${{ github.run_attempt }}
  IPAM_ENGINE_ID: ipam-engine-${{ github.run_id }}-${{ github.run_attempt }}

jobs:
  deploy:
    name: Deploy Azure IPAM
    runs-on: ubuntu-latest
    outputs:
      ipamURL: ${{ steps.pwshScript.outputs.ipamURL }}
      ipamUIAppId: ${{ steps.pwshScript.outputs.ipamUIAppId }}
      ipamEngineAppId: ${{ steps.pwshScript.outputs.ipamEngineAppId }}
      ipamSuffix: ${{ steps.pwshScript.outputs.ipamSuffix }}
      ipamResourceGroup: ${{ steps.pwshScript.outputs.ipamResourceGroup }}
    steps:
      - run: echo "Job triggered by a ${{ github.event_name }} event from ${{ github.head_ref }} to main."

      - name: Install Deployment Prerequisites
        shell: pwsh
        run: |
          Set-PSRepository PSGallery -InstallationPolicy Trusted
          Install-Module Az, Microsoft.Graph, powershell-yaml -AllowClobber -Force

      # - name: "Azure Login"
      #   uses: azure/login@v1
      #   with:
      #     client-id: ${{ secrets.AZURE_CLIENT_ID }}
      #     subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
      #     tenant-id: ${{ secrets.AZURE_TENANT_ID }}
      #     enable-AzPSSession: true

      - name: Azure Login
        uses: azure/login@v1
        with:
          creds: ${{ secrets.AZURE_CREDENTIALS }}
          enable-AzPSSession: true

      - name: Checkout Azure IPAM Code
        uses: actions/checkout@v3
        with:
          sparse-checkout: |
            deploy
            engine
            ui
            lb

      - name: Build Azure IPAM Containers
        run: |
          az acr build -r $ACR_NAME -t ipam-engine:${{ github.run_id }}-${{ github.run_attempt }} -f ./engine/Dockerfile.deb ./engine
          az acr build -r $ACR_NAME -t ipam-func:${{ github.run_id }}-${{ github.run_attempt }} -f ./engine/Dockerfile.func ./engine
          az acr build -r $ACR_NAME -t ipam-ui:${{ github.run_id }}-${{ github.run_attempt }}  -f ./ui/Dockerfile.deb ./ui
          az acr build -r $ACR_NAME -t ipam-lb:${{ github.run_id }}-${{ github.run_attempt }} -f ./lb/Dockerfile ./lb

      - name: Update Docker-Compose YAML
        shell: pwsh
        run: |
          $uiContainer = "$env:ACR_NAME.azurecr.io/ipam-ui:${{ github.run_id }}-${{ github.run_attempt }}"
          $engineContainer = "$env:ACR_NAME.azurecr.io/ipam-engine:${{ github.run_id }}-${{ github.run_attempt }}"
          $lbContainer = "$env:ACR_NAME.azurecr.io/ipam-lb:${{ github.run_id }}-${{ github.run_attempt }}"

          $composeFile = Get-Content -Path ./docker-compose.prod.yml
          $composeYaml = $composeFile | ConvertFrom-Yaml

          $composeYaml['services']['ipam-ui'].image = $uiContainer
          $composeYaml['services']['ipam-engine'].image = $engineContainer
          $composeYaml['services']['nginx-proxy'].image = $lbContainer

          $composeYaml | ConvertTo-Yaml | Out-File -FilePath ./docker-compose.prod.yml

      - name: Deploy Azure IPAM
        working-directory: deploy
        id: "pwshScript"
        shell: pwsh
        run: ./deploy.ps1 -Location "westus3" -UIAppName $Env:IPAM_UI_ID -EngineAppName $Env:IPAM_ENGINE_ID

      - name: "Output PowerShell Value 'ipamSuffix'"
        run: echo "${{ steps.pwshScript.outputs.ipamSuffix }}"

      - name: "Upload Logs"
        working-directory: logs
        shell: pwsh
        run: |
          $dateStamp = (Get-Date -UFormat "%Y-%m-%d_%I-%M-%S_%p").tostring()
          $archiveName = "ipam-${dateStamp}.zip"

          Compress-Archive -Pat ./* -DestinationPath /tmp/$archiveName

          $storage = Get-AzStorageAccount -Name "ipamghactionlogs" -ResourceGroupName "Logging-RG"
          $context = $storage.Context

          $uploadDetails = @{
            File = "/tmp/$archiveName"
            Container = "deploy-logs"
            Blob = $archiveName
            Context = $context
            StandardBlobTier = "Hot"
          }

          Set-AzStorageBlobContent @uploadDetails

  sleep:
    name: Sleep for 1 Minute
    runs-on: ubuntu-latest
    needs: deploy
    steps:
      - name: Sleep to Allow Azure IPAM Startup
        run: |
            echo "Time: $(date +'%T')"
            echo "Sleeping for 30 seconds"
            sleep 30
            echo "Time: $(date +'%T')"

  test:
    name: Test Azure IPAM via Pester
    runs-on: ubuntu-latest
    needs: [ deploy, sleep ]
    steps:
      - name: Install Testing Prerequisites
        shell: pwsh
        run: |
          Set-PSRepository PSGallery -InstallationPolicy Trusted
          Install-Module Az, Pester -AllowClobber -Force

      - name: Azure Login
        uses: azure/login@v1
        with:
          creds: ${{ secrets.AZURE_CREDENTIALS }}
          enable-AzPSSession: true

      - name: Checkout Azure IPAM Code
        uses: actions/checkout@v3
        with:
          sparse-checkout: |
            tests

      - name: Invoke Pester Tests
        working-directory: tests
        env:
          IPAM_RESOURCE_GROUP: ${{ needs.deploy.outputs.ipamResourceGroup }}
          IPAM_URL: ${{ needs.deploy.outputs.ipamURL }}
          IPAM_ENGINE_APP_ID: ${{ needs.deploy.outputs.ipamEngineAppId }}
        shell: pwsh
        run: |
          Import-Module Pester -PassThru

          $pesterSettings = @{
            Run = @{
              Path = "./azureipam.tests.ps1"
              PassThru = $true
              SkipRemainingOnFailure = "Run"
            }
            Output = @{
              Verbosity = "Detailed"
            }
          }

          $pesterConfig = New-PesterConfiguration -Hashtable $pesterSettings

          Invoke-Pester -Configuration $pesterConfig

  cleanup:
    name: Cleanup Azure IPAM Deployment
    runs-on: ubuntu-latest
    needs: [ deploy, sleep, test ]
    steps:
      - name: Install Deployment Prerequisites
        shell: pwsh
        run: |
          Set-PSRepository PSGallery -InstallationPolicy Trusted
          Install-Module Az -AllowClobber -Force

      - name: Azure Login
        uses: azure/login@v1
        with:
          creds: ${{ secrets.AZURE_CREDENTIALS }}
          enable-AzPSSession: true

      - name : Remove Azure IPAM Resources
        shell: pwsh
        run: |
          Remove-AzResourceGroup -Name ${{ needs.deploy.outputs.ipamResourceGroup }} -Force

      - name : Remove Azure IPAM Identities
        shell: pwsh
        run: |
          $tenantId = (Get-AzContext).Tenant.Id
          $scope = "/providers/Microsoft.Management/managementGroups/$tenantId"

          $uiApp = Get-AzADApplication -ApplicationId ${{ needs.deploy.outputs.ipamUIAppId }}
          $engineApp = Get-AzADApplication -ApplicationId ${{ needs.deploy.outputs.ipamEngineAppId }}
          $engineSpn = Get-AzADServicePrincipal -ApplicationId ${{ needs.deploy.outputs.ipamEngineAppId }}

          Remove-AzRoleAssignment -ObjectId $engineSpn.Id -Scope $scope -RoleDefinitionName Reader

          $engineSpn | Remove-AzADServicePrincipal
          $uiApp | Remove-AzADApplication
          $engineApp | Remove-AzADApplication

      - name: "Remove Azure IPAM Containers"
        run: |
          az acr repository delete --name $ACR_NAME --repository ipam-engine --yes
          az acr repository delete --name $ACR_NAME --repository ipam-func --yes
          az acr repository delete --name $ACR_NAME --repository ipam-ui --yes
          az acr repository delete --name $ACR_NAME --repository ipam-lb --yes