Skip to content

Commit b63c2a2

Browse files
authored
Merge pull request #43 from MikolajKocik/development
Development
2 parents 6801a4b + c5a880b commit b63c2a2

6 files changed

Lines changed: 19 additions & 16 deletions

README.md

Lines changed: 19 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -123,19 +123,22 @@ Main dependencies used in the project (based on structure/config):
123123

124124
---
125125

126-
## Azure Deployment
126+
## Azure Deployment & CI/CD
127+
128+
The backend runs on **Azure Container Apps (ACA)**, while the application image is built and pushed to **GitHub Container Registry (GHCR)** automatically via GitHub Actions pipelines.
129+
130+
The automated process utilizes **Microsoft Entra ID (OIDC) Federated Credentials**, completely eliminating the need for storing explicit passwords/secrets in Azure connection strings.
127131

128-
The backend runs as Azure Container Apps (ACA), the app image is pushed to Azure Container Registry (ACR).
129132
Environment consists of:
130133

131-
- Azure Container Apps – API container host
132-
- Azure Container Registry – Docker image registry
133-
- Azure SQL Server + Azure SQL Database – database
134-
- Azure Storage – Azure Files – file shares
135-
- Azure Key Vault – secrets
136-
- Application Insights (+ Log Analytics Workspace) – telemetry & logs
137-
- Managed Environment (Container Apps)ACA environment
138-
- Azure DevOpsCI/CD (service connections: Azure subscription, ACR, GitHub)
134+
- **GitHub Actions** – Continuous Integration / Continuous Deployment pipeline
135+
- **GitHub Container Registry (GHCR)** – Docker image registry
136+
- **Azure Container Apps** – API container host
137+
- **Azure SQL Server + Azure SQL Database** – database
138+
- **Azure Storage – Azure Files** – file shares
139+
- **Azure Key Vault** – secrets handling
140+
- **Application Insights (+ Log Analytics Workspace)**telemetry & logs
141+
- **Managed Environment**ACA environment
139142

140143
---
141144

@@ -156,12 +159,12 @@ Environment consists of:
156159
- **Azure Files – file share:**
157160
![files](docs/azure-storage-files.jpg)
158161

159-
- **Build & push (PowerShell):**
160-
![ps](docs/powershell.png)
161-
![ps](docs/build-result-powershell-acr.PNG)
162-
163-
- **Azure DevOps – service connections:**
164-
![ado](docs/azure-devops-services.png)
162+
- **CI/CD via GitHub Actions & Entra ID (OIDC):**
163+
![App Registrations](docs/azure-app-registrations.png)
164+
![Certificates & Secrets](docs/azure-certificates-secrets.png)
165+
![Federated Credential](docs/azure-federated-credential.png)
166+
![GitHub Actions Secrets](docs/github-actions-secrets.png)
167+
![Role Assignment](docs/azure-role-assignment.png)
165168

166169
- **xUnit tests – passing:**
167170
![xunit](docs/xunit.PNG)

docs/azure-app-registrations.png

84.6 KB
Loading
78.3 KB
Loading
85.7 KB
Loading

docs/azure-role-assignment.png

41.3 KB
Loading

docs/github-actions-secrets.png

37.7 KB
Loading

0 commit comments

Comments
 (0)