-
-
Notifications
You must be signed in to change notification settings - Fork 9
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
chore: migrate to bring your own azure function app (#1417)
Fixes #1343. As outlined there, the azure cli currently doesn't provide means to link a specific environment of a static web app to a function app. This is why we use the python sdk directly. Maybe once Azure/azure-cli#23894 is merged and released, we can remove the script and use the cli.
- Loading branch information
1 parent
6512f18
commit 42993d0
Showing
4 changed files
with
293 additions
and
19 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,14 @@ | ||
| To test these scripts locally, run | ||
|
|
||
| ```bash | ||
| curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash | ||
| sudo apt-get install python3 pip python3-venv | ||
| python3 -m venv .venv | ||
| source .venv/bin/activate | ||
| pip install azure-identity azure-mgmt-web azure-mgmt-storage azure-mgmt-applicationinsights azure-mgmt-redis | ||
| az login | ||
| export SUBSCRIPTION_ID=<...> | ||
| export DATABASE_URL=<...> | ||
| export AZURE_SESSION_SECRET=<...> | ||
| python3 .github/scripts/deploy.py --env dev -v | ||
| ``` |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,203 @@ | ||
| # type: ignore | ||
|
|
||
| import os | ||
|
|
||
| from azure.identity import DefaultAzureCredential | ||
| from azure.mgmt.web import WebSiteManagementClient | ||
| from azure.mgmt.web.models import ( | ||
| StaticSiteUserProvidedFunctionAppARMResource, | ||
| Site, | ||
| SiteConfig, | ||
| ) | ||
| from azure.mgmt.storage import StorageManagementClient | ||
| from azure.mgmt.applicationinsights import ApplicationInsightsManagementClient | ||
| from azure.mgmt.redis import RedisManagementClient | ||
| from argparse import ArgumentParser | ||
| import logging | ||
|
|
||
|
|
||
| def main(environment_name: str, verbose: bool = False): | ||
| logger = logging.getLogger("script") | ||
| logger.addHandler(logging.StreamHandler(stream=os.sys.stdout)) | ||
| if verbose: | ||
| logger.setLevel(level=logging.DEBUG) | ||
| else: | ||
| logger.setLevel(level=logging.INFO) | ||
|
|
||
| logger.info(f"Deploying to {environment_name}") | ||
|
|
||
| SUBSCRIPTION_ID = os.environ.get("SUBSCRIPTION_ID", None) | ||
| if SUBSCRIPTION_ID is None: | ||
| raise Exception("No subscription ID found") | ||
| GROUP_NAME = "JabRefOnline" | ||
| STATIC_SITE = "jabref-online" | ||
| STORAGE_ACCOUNT = "jabreffunctionstorage" | ||
| APP_INSIGHTS_NAME = "jabref-online" | ||
| REDIS_NAME = "jabref" | ||
| DATABASE_URL = os.environ.get("DATABASE_URL", "<Not specified>") | ||
| SESSION_SECRET = os.environ.get("AZURE_SESSION_SECRET", "<Not specified>") | ||
|
|
||
| function_app_name = "jabref-function-" + environment_name | ||
|
|
||
| # Create clients | ||
| # For other authentication approaches | ||
| # see: https://pypi.org/project/azure-identity/ | ||
| web_client = WebSiteManagementClient( | ||
| credential=DefaultAzureCredential(), subscription_id=SUBSCRIPTION_ID | ||
| ) | ||
| storage_client = StorageManagementClient( | ||
| credential=DefaultAzureCredential(), subscription_id=SUBSCRIPTION_ID | ||
| ) | ||
| appinsights_client = ApplicationInsightsManagementClient( | ||
| credential=DefaultAzureCredential(), subscription_id=SUBSCRIPTION_ID | ||
| ) | ||
| redis_client = RedisManagementClient( | ||
| credential=DefaultAzureCredential(), subscription_id=SUBSCRIPTION_ID | ||
| ) | ||
|
|
||
| # Get info for static site (only for debug) | ||
| # static_site = web_client.static_sites.get_static_site( | ||
| # resource_group_name=GROUP_NAME, name=STATIC_SITE | ||
| # ) | ||
| # print("Get static site:\n{}".format(static_site)) | ||
| # builds = web_client.static_sites.get_static_site_builds( | ||
| # resource_group_name=GROUP_NAME, name=STATIC_SITE | ||
| # ) | ||
| # for build in builds: | ||
| # print("Get build:\n{}".format(build)) | ||
|
|
||
| storage_keys = storage_client.storage_accounts.list_keys( | ||
| resource_group_name=GROUP_NAME, account_name=STORAGE_ACCOUNT | ||
| ) | ||
| storage_connection_string = f"DefaultEndpointsProtocol=https;EndpointSuffix=core.windows.net;AccountName={STORAGE_ACCOUNT};AccountKey={storage_keys.keys[0].value}" | ||
| logger.debug(f"Storage connection string: {storage_connection_string}") | ||
|
|
||
| appinsights = appinsights_client.components.get( | ||
| GROUP_NAME, APP_INSIGHTS_NAME | ||
| ) | ||
| logger.debug( | ||
| f"Application insights instrumentation key: {appinsights.instrumentation_key}" | ||
| ) | ||
| redis = redis_client.redis.get( | ||
| resource_group_name=GROUP_NAME, name=REDIS_NAME | ||
| ) | ||
| logger.debug(f"Redis client: {redis}") | ||
| redis_keys = redis_client.redis.list_keys( | ||
| resource_group_name=GROUP_NAME, name=REDIS_NAME | ||
| ) | ||
| logger.debug(f"Redis keys: {redis_keys}") | ||
|
|
||
| poller_function_app = web_client.web_apps.begin_create_or_update( | ||
| resource_group_name=GROUP_NAME, | ||
| name=function_app_name, | ||
| site_envelope=Site( | ||
| location="westeurope", | ||
| kind="functionapp", | ||
| site_config=SiteConfig( | ||
| app_settings=[ | ||
| {"name": "FUNCTIONS_EXTENSION_VERSION", "value": "~4"}, | ||
| {"name": "FUNCTIONS_WORKER_RUNTIME", "value": "node"}, | ||
| {"name": "WEBSITE_NODE_DEFAULT_VERSION", "value": "~18"}, | ||
| { | ||
| "name": "APPINSIGHTS_INSTRUMENTATIONKEY", | ||
| "value": appinsights.instrumentation_key, | ||
| }, | ||
| { | ||
| "name": "AzureWebJobsStorage", | ||
| "value": storage_connection_string, | ||
| }, | ||
| { | ||
| "name": "WEBSITE_CONTENTAZUREFILECONNECTIONSTRING", | ||
| "value": storage_connection_string, | ||
| }, | ||
| {"name": "DATABASE_URL", "value": DATABASE_URL}, | ||
| {"name": "NODE_ENV", "value": "production"}, | ||
| { | ||
| "name": "REDIS_HOST", | ||
| "value": redis.host_name, | ||
| }, | ||
| { | ||
| "name": "REDIS_PASSWORD", | ||
| "value": redis_keys.primary_key, | ||
| }, | ||
| {"name": "SESSION_SECRET_PRIMARY", "value": SESSION_SECRET}, | ||
| # { | ||
| # "name": "WEBSITE_CONTENTSHARE", | ||
| # "value": "[concat(toLower(parameters('name')), 'b215')]", | ||
| # }, | ||
| ] | ||
| ), | ||
| ), | ||
| ) | ||
| function_app = poller_function_app.result() | ||
| logger.info(f"Created function app: {function_app.name}") | ||
| logger.debug(f"{function_app}") | ||
|
|
||
| # We can even link to a certain slot in an function app | ||
| # however, we are currently limited to 2 slots per app, so this doesn't make much sense for PRs | ||
| # https://docs.microsoft.com/en-us/azure/azure-functions/functions-scale#service-limits | ||
| # but maybe for production + staging with swapping this might be handy in the future | ||
| # poller_function_app_slot = web_client.web_apps.begin_create_or_update_slot( | ||
| # resource_group_name=GROUP_NAME, | ||
| # name=function_app_name, | ||
| # site_envelope=Site( | ||
| # server_farm_id=function_app.server_farm_id, | ||
| # location=function_app.location, | ||
| # ), | ||
| # slot="test", | ||
| # ) | ||
| # function_app_slot = poller_function_app_slot.result() | ||
| # print("Created function app slot:\n{}".format(function_app_slot)) | ||
|
|
||
| # Detach already attached function apps | ||
| linked_function_apps = web_client.static_sites.get_user_provided_function_apps_for_static_site_build( | ||
| resource_group_name=GROUP_NAME, | ||
| name=STATIC_SITE, | ||
| environment_name=environment_name, | ||
| ) | ||
| for app in linked_function_apps: | ||
| logger.info(f"Detaching function app {app.name}") | ||
| logger.debug(f"{app}") | ||
| web_client.static_sites.detach_user_provided_function_app_from_static_site_build( | ||
| resource_group_name=GROUP_NAME, | ||
| name=STATIC_SITE, | ||
| environment_name=environment_name, | ||
| function_app_name=app.name, | ||
| ) | ||
|
|
||
| # Attach new function app | ||
| poller_link = web_client.static_sites.begin_register_user_provided_function_app_with_static_site_build( | ||
| resource_group_name=GROUP_NAME, | ||
| name=STATIC_SITE, | ||
| environment_name=environment_name, | ||
| function_app_name=function_app_name, | ||
| static_site_user_provided_function_envelope=StaticSiteUserProvidedFunctionAppARMResource( | ||
| kind="functionapp", | ||
| function_app_resource_id=function_app.id, | ||
| # function_app_resource_id=function_app_slot.id, | ||
| function_app_region=function_app.location, | ||
| ), | ||
| ) | ||
| logger.info( | ||
| f"Linked function app {function_app_name} to {environment_name}" | ||
| ) | ||
| logger.debug(f"{poller_link.result()}") | ||
|
|
||
|
|
||
| if __name__ == "__main__": | ||
| parser = ArgumentParser() | ||
| parser.add_argument( | ||
| "--env", | ||
| dest="environment_name", | ||
| required=True, | ||
| help="name of the environment to deploy to", | ||
| ) | ||
| # add verbose flag | ||
| parser.add_argument( | ||
| "-v", | ||
| "--verbose", | ||
| help="increase output verbosity", | ||
| action="store_true", | ||
| ) | ||
| args = parser.parse_args() | ||
| main(**vars(args)) |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -159,3 +159,6 @@ apollo/fragment-masking.ts | |
| !.yarn/releases | ||
| !.yarn/sdks | ||
| !.yarn/versions | ||
|
|
||
| # Python | ||
| .venv/* | ||