Deploy to Azure (with https) #53
Open
+1,174
−9
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
`az containerapp job start --image` creates an execution that drops the job's command and env overrides, so the container ran the image's default CMD and crashed without DATABASE_URL. Update the job's template image first, then start it plainly so the full job template applies. Verified working end-to-end in Azure (execution gspotter-migrate-rzw4u6i).
The NTNU Entra tenant blocks app registrations, so a client-secret service principal is not possible. Instead, a user-assigned managed identity (id-gspotter-ci) gets a federated identity credential for this repo's main branch via git.ntnu.no's Actions OIDC issuer, plus Contributor on the resource group and AcrPush on the registry. Also: document the required GitHub secrets and update the deploy workflow's login to OIDC (client-id/tenant-id/subscription-id).
Sign in
to join this conversation on GitHub.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
(stale)NOTE: deploy-azure github action CANNOT be run here, and is intended for future use on public github, as it is intended to be used with OIDC on public github. The job WILL fail and nothing will change in the deplyoment
NEW NOTE: The deploy pipeline MIGHT work on ntnu's enterprize github now, but will need to be confirmed