04_self_hosted.yml

name: Deploy Azure function

on:
  workflow_call:
    inputs:
      environment:
        required: true
        description: The name of the environment where to deploy
        type: string
      target:
        required: true
        description: The environment target of the job
        type: string
      registry_image:
        required: true
        description: The name of the image from container registry to be used
        type: string

permissions:
  id-token: write
  contents: read

jobs:
  show_input:
    runs-on: ubuntu-latest
    if: ${{ inputs.target == inputs.environment }}
    environment: ${{ inputs.environment }}
    steps:
      - name: Get input parameters
        run: |
          echo environment=${{ inputs.environment }}
          echo target=${{ inputs.target }}
          echo resource_group=${{ vars.FUNCTION_RESOURCE_GROUP }}
          echo app_name=${{ vars.FUNCTION_APP_NAME }}
          echo registry_image=${{ inputs.registry_image }}
          

  # Starting the Azure Function's staging slot, if deploying in PROD
  start_staging_slot:
    name: Create staging slots
    runs-on: ubuntu-22.04
    if: ${{ inputs.target == inputs.environment && inputs.target == 'prod' }}
    environment: ${{ inputs.environment }}
    steps:
      - name: Login
        id: login
        # from https://github.com/Azure/login/commits/master
        uses: azure/login@92a5484dfaf04ca78a94597f4f19fea633851fa2
        with:
          client-id: ${{ secrets.CD_CLIENT_ID }}
          tenant-id: ${{ secrets.TENANT_ID }}
          subscription-id: ${{ secrets.SUBSCRIPTION_ID }}

      - name: Create staging slots
        uses: pagopa/github-actions-template/azure-function-start-staging-slot@a1b72480e9ac555364be0b7ecdcc8f5ab1c89ad9
        with:
          branch: ${{ github.ref_name }}
          client_id: ${{ secrets.CD_CLIENT_ID }}
          tenant_id: ${{ secrets.TENANT_ID }}
          subscription_id: ${{ secrets.SUBSCRIPTION_ID }}
          resource_group: ${{ vars.FUNCTION_RESOURCE_GROUP }}
          app_name: ${{ vars.FUNCTION_APP_NAME }}
          registry_image: ${{ inputs.registry_image }}


  # Executing the deploy of the Azure function with the new image
  deploy:
    name: Deploy Azure Function
    runs-on: ubuntu-22.04
    needs: [ start_staging_slot ]
    if: ${{ always() && inputs.target == inputs.environment }}
    environment: ${{ inputs.environment }}
    steps:
      - name: Login
        id: login
        # from https://github.com/Azure/login/commits/master
        uses: azure/login@92a5484dfaf04ca78a94597f4f19fea633851fa2
        with:
          client-id: ${{ secrets.CD_CLIENT_ID }}
          tenant-id: ${{ secrets.TENANT_ID }}
          subscription-id: ${{ secrets.SUBSCRIPTION_ID }}

      - name: Deploy Azure Function
        uses: pagopa/github-actions-template/azure-functions-deploy@a1b72480e9ac555364be0b7ecdcc8f5ab1c89ad9
        with:
          branch: ${{ github.ref_name }}
          client_id: ${{ secrets.CD_CLIENT_ID }}
          tenant_id: ${{ secrets.TENANT_ID }}
          subscription_id: ${{ secrets.SUBSCRIPTION_ID }}
          app_name: ${{ vars.FUNCTION_APP_NAME }}
          registry_image: ${{ inputs.registry_image }}


  # Stopping the Azure Function's staging slot, if deploying in PROD
  stop_staging_slot:
    name: Clean staging slots
    needs: [ start_staging_slot, deploy ]
    if: ${{ success() || failure() && (inputs.target == inputs.environment && inputs.target == 'prod') }}
    runs-on: ubuntu-22.04
    environment: ${{ inputs.environment }}
    steps:
      - name: Login
        id: login
        # from https://github.com/Azure/login/commits/master
        uses: azure/login@92a5484dfaf04ca78a94597f4f19fea633851fa2
        with:
          client-id: ${{ secrets.CD_CLIENT_ID }}
          tenant-id: ${{ secrets.TENANT_ID }}
          subscription-id: ${{ secrets.SUBSCRIPTION_ID }}

      - name: Deploy Azure Function
        uses: pagopa/github-actions-template/azure-function-stop-staging-slot@a1b72480e9ac555364be0b7ecdcc8f5ab1c89ad9
        with:
          branch: ${{ github.ref_name }}
          client_id: ${{ secrets.CD_CLIENT_ID }}
          tenant_id: ${{ secrets.TENANT_ID }}
          subscription_id: ${{ secrets.SUBSCRIPTION_ID }}
          resource_group: ${{ vars.FUNCTION_RESOURCE_GROUP }}
          app_name: ${{ vars.FUNCTION_APP_NAME }}
          registry_image: ${{ inputs.registry_image }}