Azure IPAM Deployment & Testing #44
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Azure IPAM Testing | |
| # permissions: | |
| # id-token: write | |
| # contents: read | |
| run-name: Azure IPAM Deployment & Testing | |
| on: | |
| push: | |
| branches: [ github-actions ] | |
| pull_request: | |
| branches: [ main ] | |
| env: | |
| ACR_NAME: azureipamtest | |
| IPAM_UI_ID: ipam-ui-${{ github.run_id }}-${{ github.run_attempt }} | |
| IPAM_ENGINE_ID: ipam-engine-${{ github.run_id }}-${{ github.run_attempt }} | |
| jobs: | |
| deploy: | |
| name: Deploy Azure IPAM | |
| runs-on: ubuntu-latest | |
| outputs: | |
| ipamURL: ${{ steps.pwshScript.outputs.ipamURL }} | |
| ipamUIAppId: ${{ steps.pwshScript.outputs.ipamUIAppId }} | |
| ipamEngineAppId: ${{ steps.pwshScript.outputs.ipamEngineAppId }} | |
| ipamSuffix: ${{ steps.pwshScript.outputs.ipamSuffix }} | |
| ipamResourceGroup: ${{ steps.pwshScript.outputs.ipamResourceGroup }} | |
| steps: | |
| - run: echo "Job triggered by a ${{ github.event_name }} event from ${{ github.head_ref }} to main." | |
| - name: Install Deployment Prerequisites | |
| shell: pwsh | |
| run: | | |
| Set-PSRepository PSGallery -InstallationPolicy Trusted | |
| Install-Module Az, Microsoft.Graph, powershell-yaml -AllowClobber -Force | |
| # - name: "Azure Login" | |
| # uses: azure/login@v1 | |
| # with: | |
| # client-id: ${{ secrets.AZURE_CLIENT_ID }} | |
| # subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }} | |
| # tenant-id: ${{ secrets.AZURE_TENANT_ID }} | |
| # enable-AzPSSession: true | |
| - name: Azure Login | |
| uses: azure/login@v1 | |
| with: | |
| creds: ${{ secrets.AZURE_CREDENTIALS }} | |
| enable-AzPSSession: true | |
| - name: Checkout Azure IPAM Code | |
| uses: actions/checkout@v3 | |
| with: | |
| sparse-checkout: | | |
| deploy | |
| engine | |
| ui | |
| lb | |
| - name: Build Azure IPAM Containers | |
| run: | | |
| az acr build -r $ACR_NAME -t ipam-engine:${{ github.run_id }}-${{ github.run_attempt }} -f ./engine/Dockerfile.deb ./engine | |
| az acr build -r $ACR_NAME -t ipam-func:${{ github.run_id }}-${{ github.run_attempt }} -f ./engine/Dockerfile.func ./engine | |
| az acr build -r $ACR_NAME -t ipam-ui:${{ github.run_id }}-${{ github.run_attempt }} -f ./ui/Dockerfile.deb ./ui | |
| az acr build -r $ACR_NAME -t ipam-lb:${{ github.run_id }}-${{ github.run_attempt }} -f ./lb/Dockerfile ./lb | |
| - name: Update Docker-Compose YAML | |
| shell: pwsh | |
| run: | | |
| $uiContainer = "$env:ACR_NAME.azurecr.io/ipam-ui:${{ github.run_id }}-${{ github.run_attempt }}" | |
| $engineContainer = "$env:ACR_NAME.azurecr.io/ipam-engine:${{ github.run_id }}-${{ github.run_attempt }}" | |
| $lbContainer = "$env:ACR_NAME.azurecr.io/ipam-lb:${{ github.run_id }}-${{ github.run_attempt }}" | |
| $composeFile = Get-Content -Path ./docker-compose.prod.yml | |
| $composeYaml = $composeFile | ConvertFrom-Yaml | |
| $composeYaml['services']['ipam-ui'].image = $uiContainer | |
| $composeYaml['services']['ipam-engine'].image = $engineContainer | |
| $composeYaml['services']['nginx-proxy'].image = $lbContainer | |
| $composeYaml | ConvertTo-Yaml | Out-File -FilePath ./docker-compose.prod.yml | |
| - name: Deploy Azure IPAM | |
| working-directory: deploy | |
| id: "pwshScript" | |
| shell: pwsh | |
| run: ./deploy.ps1 -Location "westus3" -UIAppName $Env:IPAM_UI_ID -EngineAppName $Env:IPAM_ENGINE_ID | |
| - name: "Output PowerShell Value 'ipamSuffix'" | |
| run: echo "${{ steps.pwshScript.outputs.ipamSuffix }}" | |
| - name: "Upload Logs" | |
| working-directory: logs | |
| shell: pwsh | |
| run: | | |
| $dateStamp = (Get-Date -UFormat "%Y-%m-%d_%I-%M-%S_%p").tostring() | |
| $archiveName = "ipam-${dateStamp}.zip" | |
| Compress-Archive -Pat ./* -DestinationPath /tmp/$archiveName | |
| $storage = Get-AzStorageAccount -Name "ipamghactionlogs" -ResourceGroupName "Logging-RG" | |
| $context = $storage.Context | |
| $uploadDetails = @{ | |
| File = "/tmp/$archiveName" | |
| Container = "deploy-logs" | |
| Blob = $archiveName | |
| Context = $context | |
| StandardBlobTier = "Hot" | |
| } | |
| Set-AzStorageBlobContent @uploadDetails | |
| sleep: | |
| name: Sleep for 1 Minute | |
| runs-on: ubuntu-latest | |
| needs: deploy | |
| steps: | |
| - name: Sleep to Allow Azure IPAM Startup | |
| run: | | |
| echo "Time: $(date +'%T')" | |
| echo "Sleeping for 30 seconds" | |
| sleep 30 | |
| echo "Time: $(date +'%T')" | |
| test: | |
| name: Test Azure IPAM via Pester | |
| runs-on: ubuntu-latest | |
| needs: [ deploy, sleep ] | |
| steps: | |
| - name: Install Testing Prerequisites | |
| shell: pwsh | |
| run: | | |
| Set-PSRepository PSGallery -InstallationPolicy Trusted | |
| Install-Module Az, Pester -AllowClobber -Force | |
| - name: Azure Login | |
| uses: azure/login@v1 | |
| with: | |
| creds: ${{ secrets.AZURE_CREDENTIALS }} | |
| enable-AzPSSession: true | |
| - name: Checkout Azure IPAM Code | |
| uses: actions/checkout@v3 | |
| with: | |
| sparse-checkout: | | |
| tests | |
| - name: Invoke Pester Tests | |
| working-directory: tests | |
| env: | |
| IPAM_RESOURCE_GROUP: ${{ needs.deploy.outputs.ipamResourceGroup }} | |
| IPAM_URL: ${{ needs.deploy.outputs.ipamURL }} | |
| IPAM_ENGINE_APP_ID: ${{ needs.deploy.outputs.ipamEngineAppId }} | |
| shell: pwsh | |
| run: | | |
| Import-Module Pester -PassThru | |
| $pesterSettings = @{ | |
| Run = @{ | |
| Path = "./azureipam.tests.ps1" | |
| PassThru = $true | |
| SkipRemainingOnFailure = "Run" | |
| } | |
| Output = @{ | |
| Verbosity = "Detailed" | |
| } | |
| } | |
| $pesterConfig = New-PesterConfiguration -Hashtable $pesterSettings | |
| Invoke-Pester -Configuration $pesterConfig | |
| cleanup: | |
| name: Cleanup Azure IPAM Deployment | |
| runs-on: ubuntu-latest | |
| needs: [ deploy, sleep, test ] | |
| steps: | |
| - name: Install Deployment Prerequisites | |
| shell: pwsh | |
| run: | | |
| Set-PSRepository PSGallery -InstallationPolicy Trusted | |
| Install-Module Az -AllowClobber -Force | |
| - name: Azure Login | |
| uses: azure/login@v1 | |
| with: | |
| creds: ${{ secrets.AZURE_CREDENTIALS }} | |
| enable-AzPSSession: true | |
| - name : Remove Azure IPAM Resources | |
| shell: pwsh | |
| run: | | |
| Remove-AzResourceGroup -Name ${{ needs.deploy.outputs.ipamResourceGroup }} -Force | |
| - name : Remove Azure IPAM Identities | |
| shell: pwsh | |
| run: | | |
| $tenantId = (Get-AzContext).Tenant.Id | |
| $scope = "/providers/Microsoft.Management/managementGroups/$tenantId" | |
| $uiApp = Get-AzADApplication -ApplicationId ${{ needs.deploy.outputs.ipamUIAppId }} | |
| $engineApp = Get-AzADApplication -ApplicationId ${{ needs.deploy.outputs.ipamEngineAppId }} | |
| $engineSpn = Get-AzADServicePrincipal -ApplicationId ${{ needs.deploy.outputs.ipamEngineAppId }} | |
| Remove-AzRoleAssignment -ObjectId $engineSpn.Id -Scope $scope -RoleDefinitionName Reader | |
| $engineSpn | Remove-AzADServicePrincipal | |
| $uiApp | Remove-AzADApplication | |
| $engineApp | Remove-AzADApplication | |
| - name: "Remove Azure IPAM Containers" | |
| run: | | |
| az acr repository delete --name $ACR_NAME --repository ipam-engine --yes | |
| az acr repository delete --name $ACR_NAME --repository ipam-func --yes | |
| az acr repository delete --name $ACR_NAME --repository ipam-ui --yes | |
| az acr repository delete --name $ACR_NAME --repository ipam-lb --yes |