deploy.yml

on:
  push:
    branches:
      - 'main'
    paths:
      - 'src/**'
      - 'infra/**'
  workflow_dispatch:
name: 🚀 Deploy

env:
  DOTNET_VERSION: '6.0' 
  ARTIFACT_DIR: './artifacts'

jobs:
  deploy-infra:
    name: 🏗️ Deploy Infrastructure
    runs-on: ubuntu-latest
    outputs:
      apiDataAppName: ${{ steps.deploy.outputs.apiDataAppName }}
      simulationAppName: ${{ steps.deploy.outputs.simulationAppName }}
      patchesListenSecretUrl: ${{ steps.deploy.outputs.patchesListenSecretUrl }}
      patchesSendSecretUrl: ${{ steps.deploy.outputs.patchesSendSecretUrl }}
      ingressListenSecretUrl: ${{ steps.deploy.outputs.ingressListenSecretUrl }}
      ingressSendSecretUrl: ${{ steps.deploy.outputs.ingressSendSecretUrl }}
      azureDigitalTwinsEndpoint: ${{ steps.deploy.outputs.azureDigitalTwinsEndpoint }}
      azureDigitalTwinsName: ${{ steps.deploy.outputs.azureDigitalTwinsName }}
      tableEndpoint: ${{ steps.deploy.outputs.tableEndpoint }}
      eventGridTopicName: ${{ steps.deploy.outputs.eventGridTopicName }}
      functionAppName: ${{ steps.deploy.outputs.functionAppName }}
    steps:

    - uses: actions/checkout@v3

    - name: 🔑 Azure Login 
      uses: azure/login@v1
      with:
        creds: ${{ secrets.AZURE_CREDENTIALS }}

    - name: 🏗️ Deploy
      id: deploy
      uses: azure/arm-deploy@v1
      with:
        subscriptionId: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
        resourceGroupName: ${{ secrets.AZURE_RESOURCE_GROUP_NAME }}
        template: ./infra/main.bicep
        parameters: 'tenantId=${{ secrets.AZURE_TENANT_ID }} principalId=${{ secrets.AZURE_CLIENT_ID }}'
        failOnStdErr: false

  build-code:
    name: 🏢 Build Code
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@main
    - name: 🔧 Setup DotNet ${{ env.DOTNET_VERSION }} Environment
      uses: actions/setup-dotnet@v1
      with:
        dotnet-version: ${{ env.DOTNET_VERSION }}
    - name: 🏗️ Build Solution
      shell: pwsh
      run: |
        mkdir ${{ env.ARTIFACT_DIR }}
        dotnet publish ./src/CopyTheWorld/CopyTheWorld.sln --configuration Release
        Compress-Archive -Path ./src/CopyTheWorld/CopyTheWorld.ApiData/bin/Release/net6.0/publish/* -DestinationPath ${{ env.ARTIFACT_DIR }}/CopyTheWorld.ApiData.zip
        Compress-Archive -Path ./src/CopyTheWorld/CopyTheWorld.Functions/bin/Release/net6.0/publish/* -DestinationPath ${{ env.ARTIFACT_DIR }}/CopyTheWorld.Functions.zip
        Compress-Archive -Path ./src/CopyTheWorld/CopyTheWorld.Simulations/bin/Release/net6.0/publish/* -DestinationPath ${{ env.ARTIFACT_DIR }}/CopyTheWorld.Simulations.zip
    - name: ⬆️ Upload Artifact
      uses: actions/upload-artifact@v3
      with:
        name: artifacts
        path: ${{ env.ARTIFACT_DIR }}
  deploy-code:
    name: 🚀 Deploy Code
    runs-on: ubuntu-latest
    needs: [build-code, deploy-infra]
    steps:
    - name: ⬇️ Download artifacts
      uses: actions/download-artifact@v3
      with:
        name: artifacts

    - name: 🔑 Azure Login 
      uses: azure/login@v1
      with:
        creds: ${{ secrets.AZURE_CREDENTIALS }}

    - name: 💾 Install Azure IoT Extension
      shell: pwsh
      run: az extension add -n azure-iot

    - name: 🪧 Configure event routes
      shell: pwsh
      run: |
        az dt route create -n ${{ needs.deploy-infra.outputs.azureDigitalTwinsName }} -g ${{ secrets.AZURE_RESOURCE_GROUP_NAME }} --en changes --rn twin-updates --filter "type = 'Microsoft.DigitalTwins.Twin.Update'"

    - name: 🚀 Deploy ApiData Function
      shell: pwsh
      run: |
        az functionapp deploy --resource-group ${{ secrets.AZURE_RESOURCE_GROUP_NAME }} --name ${{ needs.deploy-infra.outputs.apiDataAppName }} --src-path CopyTheWorld.ApiData.zip --type zip
        az functionapp config appsettings set -g ${{ secrets.AZURE_RESOURCE_GROUP_NAME }} -n ${{ needs.deploy-infra.outputs.apiDataAppName }} --settings "PatchesSend=@Microsoft.KeyVault(SecretUri=${{ needs.deploy-infra.outputs.patchesSendSecretUrl }})" "AdtEndpoint=${{ needs.deploy-infra.outputs.azureDigitalTwinsEndpoint }}"

    - name: 🚀 Deploy Simulations Function
      shell: pwsh
      run: |
        az functionapp deploy --resource-group ${{ secrets.AZURE_RESOURCE_GROUP_NAME }} --name ${{ needs.deploy-infra.outputs.simulationAppName }} --src-path CopyTheWorld.Simulations.zip --type zip

    - name: 🚀 Deploy Core Functions
      shell: pwsh
      run: |
        az functionapp deploy --resource-group ${{ secrets.AZURE_RESOURCE_GROUP_NAME }} --name ${{ needs.deploy-infra.outputs.functionAppName }} --src-path CopyTheWorld.Functions.zip --type zip
        az functionapp config appsettings set  -g ${{ secrets.AZURE_RESOURCE_GROUP_NAME }} -n ${{ needs.deploy-infra.outputs.functionAppName }} --settings "PatchesListen=@Microsoft.KeyVault(SecretUri=${{ needs.deploy-infra.outputs.patchesListenSecretUrl }})" "PatchesSend=@Microsoft.KeyVault(SecretUri=${{ needs.deploy-infra.outputs.patchesSendSecretUrl }})" "IngressListen=@Microsoft.KeyVault(SecretUri=${{ needs.deploy-infra.outputs.ingressListenSecretUrl }})" "AdtEndpoint=${{ needs.deploy-infra.outputs.azureDigitalTwinsEndpoint }}" "TableEndpoint=${{ needs.deploy-infra.outputs.tableEndpoint }}" "TableName=mapping"
  
  deploy-event-grid-subscriptions:
    name: 🔀 Deploy Event Grid Subscriptions
    runs-on: ubuntu-latest
    needs: [deploy-code, deploy-infra]
    steps:
    - uses: actions/checkout@v3

    - name: 🔑 Azure Login 
      uses: azure/login@v1
      with:
        creds: ${{ secrets.AZURE_CREDENTIALS }}

    - name: 🏗️ Deploy
      id: deploy
      uses: azure/arm-deploy@v1
      with:
        subscriptionId: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
        resourceGroupName: ${{ secrets.AZURE_RESOURCE_GROUP_NAME }}
        template: ./infra/event-grid-subscriptions.bicep
        parameters: './infra/parameters/event-grid-subscriptions.json functionAppName=${{ needs.deploy-infra.outputs.functionAppName }} eventGridTopicName=${{ needs.deploy-infra.outputs.eventGridTopicName }}'