azure-dev.yml

# Run when commits are pushed to main
on:
  workflow_dispatch:
  push:
    branches:
      - main

# Set up permissions for deploying with secretless Azure federated credentials
permissions:
  id-token: write
  contents: read

jobs:
  build-and-deploy:
    runs-on: ubuntu-latest
    env:
      AZURE_CLIENT_ID: ${{ vars.AZURE_CLIENT_ID }}
      AZURE_TENANT_ID: ${{ vars.AZURE_TENANT_ID }}
      AZURE_SUBSCRIPTION_ID: ${{ vars.AZURE_SUBSCRIPTION_ID }}
      AZURE_ENV_NAME: ${{ vars.AZURE_ENV_NAME }}
      AZURE_LOCATION: ${{ vars.AZURE_LOCATION }}
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Install azd
        uses: Azure/setup-azd@v1.0.0

      - name: Log in with Azure (Federated Credentials)
        run: |
          azd auth login \
            --client-id "$AZURE_CLIENT_ID" \
            --federated-credential-provider "github" \
            --tenant-id "$AZURE_TENANT_ID"

      - name: Log in to Azure Container Registry
        uses: azure/docker-login@v1
        with:
          login-server: criesfcdba3xnfa.azurecr.io
          username: ${{ secrets.ACR_USERNAME }}
          password: ${{ secrets.ACR_PASSWORD }}

      - name: Build and push Docker image for frontend
        run: |
          docker build -t criesfcdba3xnfa.azurecr.io/frontend:latest -f applications/client/Dockerfile ./applications/client
          docker push criesfcdba3xnfa.azurecr.io/frontend:latest

      - name: Build and push Docker image for backend
        run: |
          docker build -t criesfcdba3xnfa.azurecr.io/backend:latest -f applications/server/Dockerfile ./applications/server
          docker push criesfcdba3xnfa.azurecr.io/backend:latest

      - name: Provision Infrastructure
        run: azd provision --no-prompt
        env:
          AZD_INITIAL_ENVIRONMENT_CONFIG: ${{ secrets.AZD_INITIAL_ENVIRONMENT_CONFIG }}

      - name: Deploy Application
        run: azd deploy --no-prompt