Github Actions For Architecture Deployment (CI/CD)

This repo is an overview/walkthrough on using GitHub Actions to deploy architecture and applications to Azure.

The end result is a secure Azure App Service that connects to an Azure SQL Database, with secrets from Azure Key Vault. The application is only accessible from a private virtual network and the ingress to that network is a public IP address that routes to an Azure Application Gateway with a Web Application Firewall.

The architecture is deployed using Azure Bicep and the application is deployed using GitHub Actions.

In the end, it is the hope of the authors that you would have enough information to create a solution using bicep and GitHub Actions to deploy your own architecture and applications.

Prerequisites

You will need the following tools and services to complete this walkthrough:

1. Git Download here
   • Getting Started with Git
2. GitHub Account Sign up here
3. Azure Account Sign up here
4. Visual Studio Code Download here
5. Azure Bicep Extension for Visual Studio Code Download here

Walk-throughs

The walk-throughs are broken down into the following parts:

1. Part 0 - Before you begin - Introduction to GitHub Actions

2. Part 1 - Creating the architecture deployment

3. Part 2 - Creating the application deployment

4. Part 3 - Creating the GitHub Actions workflow

Notes

This solution is for demonstration purposes only. It is not intended for production use, as there are a number of security considerations that should be addressed before going live. For brevity, those resources and configurations are not included in this walkthrough.

For example, the following resources should be evaluated and considered (at least discussed, not necessarily deployed) for a production deployment:

• Firewall for routing traffic out of the network
• NAT Gateway for routing traffic out of the network
• Network Security Groups for controlling traffic within the network
• Azure Policy for enforcing compliance
• Additional logging and monitoring
• Disaster Recovery and Backup solutions
• Resiliency and High Availability solutions
• Route Tables for controlling traffic within the network

Slides and Demonstrations for this workshop

The slides and demonstrations for this workshop can be viewed here.

No Guarantee/Disclaimer

There is no guarantee that this solution will work for you. It is a demonstration and may require additional configuration or troubleshooting to work in your environment. It is recommended that you understand the solution and the components before deploying it.

By using this solution, you agree that the author is not responsible for any issues that may arise from the use of this solution, and you agree that you will not hold any contributors responsible for any issues that may arise from the use of this solution, nor will you have any rights to take legal action against any contributors to this solution.