GitHub ActionsによるAzure App Serviceデプロイ入門

name: 'ワークフロー名'

# トリガー条件
on:
  push:
    branches:
      - main
  pull_request:
    branches:
      - main

# 環境変数
env:
  APP_NAME: my-app
  PYTHON_VERSION: '3.10'

# ジョブ定義
jobs:
  # ビルドジョブ
  build:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v4
    - name: Setup Python
      uses: actions/setup-python@v5
      with:
        python-version: ${{ env.PYTHON_VERSION }}
    - name: Install dependencies
      run: pip install -r requirements.txt

name: '[Production] Build and deploy Python app to Azure Web App'

on:
  push:
    branches:
      - main

env:
  AZURE_WEBAPP_NAME: app-test-dev-001
  AZURE_WEBAPP_SLOT_NAME: staging
  AZURE_WEBAPP_PACKAGE_PATH: '.'
  PYTHON_VERSION: '3.10'
  PYTHON_MAJOR_VERSION: '3'
  STARTUP_COMMAND: 'python3 -m gunicorn main:app'
  BUILD_ARTIFACT_NAME: build-artifact
  BUILD_ZIP_FILE_NAME: build.zip

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
    # リポジトリのチェックアウト
    - uses: actions/checkout@v4

    # Pythonのセットアップ
    - name: Setup Python
      uses: actions/setup-python@v5
      with:
        python-version: ${{ env.PYTHON_VERSION }}

    # 依存関係のインストール
    - name: python install
      working-directory: ${{ env.AZURE_WEBAPP_PACKAGE_PATH }}
      run: |
        sudo apt install python${{ env.PYTHON_MAJOR_VERSION }}-venv
        python -m venv --copies antenv
        source antenv/bin/activate
        pip install setuptools
        pip install -r requirements.txt        

    # ビルド成果物のZIP化
    - name: Archive build zip
      run: |
                zip -qr ${{ env.BUILD_ZIP_FILE_NAME }} ./* -x '*.git*'

    # 成果物のアップロード
    - name: Upload artifact for deployment job
      uses: actions/upload-artifact@v4
      with:
        name: ${{ env.BUILD_ARTIFACT_NAME }}
        path: ${{ env.BUILD_ZIP_FILE_NAME }}

  deploy:
    name: Deploy
    runs-on: ubuntu-latest
    environment: prd
    if: ${{ (!cancelled() && !failure()) }}
    needs: build
    steps:
    # Azure ログイン
    - uses: azure/login@v2
      with:
        creds: ${{ secrets.AZURE_CREDENTIALS }}

    # ビルド成果物のダウンロード
    - name: Download artifact from build job
      uses: actions/download-artifact@v4
      with:
        name: ${{ env.BUILD_ARTIFACT_NAME }}

    # Web Appへのデプロイ
    - name: deploy web app
      uses: azure/webapps-deploy@v3
      with:
        app-name: ${{ env.AZURE_WEBAPP_NAME }}
        package: ${{ env.BUILD_ZIP_FILE_NAME }}
        clean: true
        type: zip
        restart: false
        startup-command: ${{ env.STARTUP_COMMAND }}
        slot-name: ${{ env.AZURE_WEBAPP_SLOT_NAME }}

    # App Serviceの設定
    - name: setting app setting
      uses: azure/appservice-settings@v1
      with:
        app-name: ${{ env.AZURE_WEBAPP_NAME }}
        slot-name: ${{ env.AZURE_WEBAPP_SLOT_NAME }}
        mask-inputs: false
        general-settings-json: '{"linuxFxVersion": "PYTHON|${{ env.PYTHON_VERSION }}"}'
        app-settings-json: |
          [
              {
                  "name": "HOGEHOGE",
                  "value": "${{ secrets.HOGEHOGE }}",
                  "slotSetting": false
              }
          ]          

    # Azure ログアウト
    - name: logout
      run: |
                az logout

needs: build

creds: ${{ secrets.AZURE_CREDENTIALS }}

if: ${{ (!cancelled() && !failure()) }}

- name: setting app setting
  uses: azure/appservice-settings@v1
  with:
    app-name: ${{ env.AZURE_WEBAPP_NAME }}
    slot-name: ${{ env.AZURE_WEBAPP_SLOT_NAME }}
    app-settings-json: |
      [
          {
              "name": "SCM_DO_BUILD_DURING_DEPLOYMENT",
              "value": "false",
              "slotSetting": false
          }
      ]      

- name: setting app setting
  uses: azure/appservice-settings@v1
  with:
    app-name: ${{ env.AZURE_WEBAPP_NAME }}
    slot-name: ${{ env.AZURE_WEBAPP_SLOT_NAME }}
    app-settings-json: |
      [
          {
              "name": "SCM_DO_BUILD_DURING_DEPLOYMENT",
              "value": "true",
              "slotSetting": false
          }
      ]      

- name: python install
  run: |
    python -m venv --copies antenv
    source antenv/bin/activate
    pip install -r requirements.txt    

- name: deploy web app
  uses: azure/webapps-deploy@v3
  with:
    app-name: ${{ env.AZURE_WEBAPP_NAME }}
    package: ${{ env.BUILD_ZIP_FILE_NAME }}
    clean: true
    type: zip
    restart: false