Deploy to Connected Cluster #3
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # This workflow will build and push an application to a Azure Arc-enabled Kubernetes (Connected Cluster) Service cluster when you push your code | |
| # | |
| # This workflow assumes you have already created the target Connected cluster and have created an Azure Container Registry (ACR) | |
| # For instructions see: | |
| # - https://docs.microsoft.com/en-us/azure/aks/kubernetes-walkthrough-portal | |
| # - https://docs.microsoft.com/en-us/azure/container-registry/container-registry-get-started-portal | |
| # - https://github.com/Azure/aks-create-action | |
| # | |
| # To configure this workflow: | |
| # | |
| # 1. Set the following secrets in your repository | |
| # - AZURE_CREDENTIALS | |
| # | |
| # | |
| # 2. Set the following environment variables (or replace the values below): | |
| # - AZURE_CONTAINER_REGISTRY (name of your container registry / ACR) | |
| # - RESOURCE_GROUP (where your Arc-enabled cluster is deployed) | |
| # - CLUSTER_NAME (name of your Arc-enabled cluster) | |
| # - CONTAINER_NAME (name of the container image you would like to push up to your ACR) | |
| # - SECRET_NAME (name of the secret associated with pulling your ACR image) | |
| # - DEPLOYMENT_MANIFEST_PATH (path to the manifest yaml for your deployment) | |
| # | |
| # For more information on GitHub Actions for Azure, refer to https://github.com/Azure/Actions | |
| # For more samples to get started with GitHub Action workflows to deploy to Azure, refer to https://github.com/Azure/actions-workflow-samples | |
| # For more options with the actions used below please refer to https://github.com/Azure/login | |
| name: Deploy to Connected Cluster | |
| on: | |
| workflow_dispatch: | |
| env: | |
| AZURE_CONTAINER_REGISTRY: "azlandemo" | |
| CONTAINER_NAME: "azure-voting-app" | |
| RESOURCE_GROUP: "Azlandemo" | |
| CLUSTER_NAME: "microk8s" | |
| IMAGE_PULL_SECRET_NAME: "image-pull-secret-name" | |
| jobs: | |
| build: | |
| permissions: | |
| actions: read | |
| contents: read | |
| id-token: write | |
| runs-on: ubuntu-latest | |
| steps: | |
| # Checks out the repository this file is in | |
| - uses: actions/checkout@master | |
| # Logs in with your Azure credentials | |
| - name: Azure login | |
| uses: azure/login@v1 | |
| with: | |
| client-id: ${{ secrets.AZURE_CLIENT_ID }} | |
| tenant-id: ${{ secrets.AZURE_TENANT_ID }} | |
| subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }} | |
| # Builds and pushes an image up to your Azure Container Registry | |
| - name: Build and push image to ACR | |
| run: | | |
| az acr build --image ${{ env.CONTAINER_NAME }}:${{ github.sha }} --registry ${{ env.AZURE_CONTAINER_REGISTRY }} -g ${{ env.RESOURCE_GROUP }} ./azure-vote | |
| # Retrieves your Azure Kubernetes Service cluster's kubeconfig file | |
| - name: Get K8s context | |
| uses: azure/k8s-set-context@v2 | |
| with: | |
| method: service-principal | |
| cluster-type: arc | |
| cluster-name: ${{ env.CLUSTER_NAME }} | |
| resource-group: ${{ env.RESOURCE_GROUP }} | |
| # Retrieves the credentials for pulling images from your Azure Container Registry | |
| - name: Get ACR credentials | |
| run: | | |
| az acr update -n ${{ env.AZURE_CONTAINER_REGISTRY }} -g ${{ env.RESOURCE_GROUP }} --admin-enabled true | |
| ACR_USERNAME=$(az acr credential show -g ${{ env.RESOURCE_GROUP }} -n ${{ env.AZURE_CONTAINER_REGISTRY }} --query username -o tsv) | |
| ACR_PASSWORD=$(az acr credential show -g ${{ env.RESOURCE_GROUP }} -n ${{ env.AZURE_CONTAINER_REGISTRY }} --query passwords[0].value -o tsv) | |
| echo "::add-mask::${ACR_USERNAME}" | |
| echo "::set-output name=username::${ACR_USERNAME}" | |
| echo "::add-mask::${ACR_PASSWORD}" | |
| echo "::set-output name=password::${ACR_PASSWORD}" | |
| id: get-acr-creds | |
| # Creates a kubernetes secret on your Azure Kubernetes Service cluster that matches up to the credentials from the last step | |
| - name: Create K8s secret for pulling image from ACR | |
| uses: Azure/[email protected] | |
| with: | |
| container-registry-url: ${{ env.AZURE_CONTAINER_REGISTRY }}.azurecr.io | |
| container-registry-username: ${{ steps.get-acr-creds.outputs.username }} | |
| container-registry-password: ${{ steps.get-acr-creds.outputs.password }} | |
| secret-name: ${{ env.IMAGE_PULL_SECRET_NAME }} | |
| # Deploys application based on given manifest file | |
| - name: Deploys application | |
| uses: Azure/[email protected] | |
| with: | |
| action: deploy | |
| manifests: | | |
| manifests/azure-vote-backend-deployment.yaml | |
| manifests/azure-vote-backend-service.yaml | |
| manifests/azure-vote-frontend-deployment.yaml | |
| manifests/azure-vote-frontend-service.yaml | |
| images: | | |
| ${{ env.AZURE_CONTAINER_REGISTRY }}.azurecr.io/${{ env.CONTAINER_NAME }}:${{ github.sha }} | |
| imagepullsecrets: | | |
| ${{ env.IMAGE_PULL_SECRET_NAME }} |