OMDSCloud/azure-pipelines-staging.yml

# Pipeline側でKeyVaultやDocker、AppService等に対する操作権限を持ったServiceConenctionを作成しておくこと
# また、環境変数 STATIC_DICTATION_DEPLOYMENT_TOKEN の値として静的WebAppsのデプロイトークンを設定しておくこと
trigger:
  branches:
    include:
    - main
  tags:
    include:
    - stage-*

jobs:
- job: initialize
  displayName: Initialize
  pool:
    vmImage: ubuntu-latest
  steps:
  - checkout: self
    clean: true
    fetchDepth: 1
    persistCredentials: true
  - script: |
      git fetch origin main:main
      if git merge-base --is-ancestor $(Build.SourceVersion) main; then
        echo "This commit is in the main branch."
      else
        echo "This commit is not in the main branch."
        exit 1
      fi
    displayName: 'タグが付けられたCommitがmainブランチに存在するか確認'
- job: backend_build
  dependsOn: initialize
  condition: succeeded('initialize')
  displayName: Build And Push Backend Image
  pool:
    name: odms-deploy-pipeline
  steps:
  - checkout: self
    clean: true
    fetchDepth: 1
  - task: Npm@1
    displayName: npm ci
    inputs:
      command: ci
      workingDir: dictation_server
      verbose: false
  - task: AzureKeyVault@2
    displayName: 'Azure Key Vault: kv-odms-secret-stg'
    inputs:
      ConnectedServiceName: 'omds-service-connection-stg'
      KeyVaultName: kv-odms-secret-stg
      SecretsFilter: '*'
  - task: Bash@3
    displayName: Bash Script (Test)
    inputs:
      targetType: inline
      script: |
        cd dictation_server
        npm run test
    env:
      JWT_PUBLIC_KEY: $(token-public-key)
      JWT_PRIVATE_KEY: $(token-private-key)
      SENDGRID_API_KEY: $(sendgrid-api-key)
      NOTIFICATION_HUB_NAME: $(notification-hub-name)
      NOTIFICATION_HUB_CONNECT_STRING: $(notification-hub-connect-string)
      STORAGE_ACCOUNT_NAME_US: $(storage-account-name-us)
      STORAGE_ACCOUNT_NAME_AU: $(storage-account-name-au)
      STORAGE_ACCOUNT_NAME_EU: $(storage-account-name-eu)
      STORAGE_ACCOUNT_KEY_US: $(storage-account-key-us)
      STORAGE_ACCOUNT_KEY_AU: $(storage-account-key-au)
      STORAGE_ACCOUNT_KEY_EU: $(storage-account-key-eu)
      STORAGE_ACCOUNT_ENDPOINT_US:  $(storage-account-endpoint-us)
      STORAGE_ACCOUNT_ENDPOINT_AU:  $(storage-account-endpoint-au)
      STORAGE_ACCOUNT_ENDPOINT_EU:  $(storage-account-endpoint-eu)
      ADB2C_TENANT_ID: $(adb2c-tenant-id)
      ADB2C_CLIENT_ID: $(adb2c-client-id)
      ADB2C_CLIENT_SECRET: $(adb2c-client-secret)
      MAIL_FROM: xxxxxx
      APP_DOMAIN: xxxxxxxxx
      EMAIL_CONFIRM_LIFETIME: 0
      TENANT_NAME: xxxxxxxxxxxx
      SIGNIN_FLOW_NAME: xxxxxxxxxxxx
      STORAGE_TOKEN_EXPIRE_TIME: 0
      REFRESH_TOKEN_LIFETIME_WEB: 0
      REFRESH_TOKEN_LIFETIME_DEFAULT: 0
      ACCESS_TOKEN_LIFETIME_WEB: 0
  - task: Docker@0
    displayName: build
    inputs:
      azureSubscriptionEndpoint: 'omds-service-connection-stg'
      azureContainerRegistry: '{"loginServer":"crodmsregistrymaintenance.azurecr.io", "id" : "/subscriptions/108fb131-cdca-4729-a2be-e5bd8c0b3ba7/resourceGroups/maintenance-rg/providers/Microsoft.ContainerRegistry/registries/crOdmsRegistryMaintenance"}'
      dockerFile: DockerfileServerDictation.dockerfile
      imageName: odmscloud/staging/dictation:$(Build.SourceVersion)
      buildArguments: |
          BUILD_VERSION=$(Build.SourceVersion)
  - task: Docker@0
    displayName: push
    inputs:
      azureSubscriptionEndpoint: 'omds-service-connection-stg'
      azureContainerRegistry: '{"loginServer":"crodmsregistrymaintenance.azurecr.io", "id" : "/subscriptions/108fb131-cdca-4729-a2be-e5bd8c0b3ba7/resourceGroups/maintenance-rg/providers/Microsoft.ContainerRegistry/registries/crOdmsRegistryMaintenance"}'
      action: Push an image
      imageName: odmscloud/staging/dictation:$(Build.SourceVersion)
- job: frontend_build
  dependsOn: backend_build
  condition: succeeded('backend_build')
  displayName: Build Frontend Files
  variables:
    storageAccountName: saomdspipeline
    containerName: staging
  pool:
    name: odms-deploy-pipeline
  steps:
  - checkout: self
    clean: true
    fetchDepth: 1
  - task: Npm@1
    displayName: npm ci
    inputs:
      command: ci
      workingDir: dictation_client
      verbose: false
  - task: Bash@3
    displayName: Bash Script
    inputs:
      targetType: inline
      script: cd dictation_client && npm run build
  - task: ArchiveFiles@2
    inputs:
      rootFolderOrFile: dictation_client/build
      includeRootFolder: false
      archiveType: 'zip'
      archiveFile: '$(Build.ArtifactStagingDirectory)/$(Build.SourceVersion).zip'
      replaceExistingArchive: true
  - task: AzureCLI@2
    inputs:
      azureSubscription: 'omds-service-connection-stg'
      scriptType: 'bash'
      scriptLocation: 'inlineScript'
      inlineScript: |
        az storage blob upload \
          --auth-mode login \
          --account-name $(storageAccountName) \
          --container-name $(containerName) \
          --name $(Build.SourceVersion).zip \
          --type block \
          --overwrite \
          --file $(Build.ArtifactStagingDirectory)/$(Build.SourceVersion).zip
- job: backend_deploy
  dependsOn: frontend_build
  condition: succeeded('frontend_build')
  displayName: Backend Deploy
  pool:
    name: odms-deploy-pipeline
  steps:
  - checkout: self
    clean: true
    fetchDepth: 1
  # TODO: Productionと同様にデプロイを行う
- job: frontend_deploy
  dependsOn: backend_deploy
  condition: succeeded('backend_deploy')
  displayName: Deploy Frontend Files
  variables:
    storageAccountName: saomdspipeline
    containerName: staging
  pool:
    name: odms-deploy-pipeline
  steps:
  - checkout: self
    clean: true
    fetchDepth: 1
    # TODO: Productionと同様にデプロイを行う
- job: migration
  dependsOn: frontend_deploy
  condition: succeeded('frontend_deploy')
  displayName: DB migration
  pool:
    name: odms-deploy-pipeline
  steps:
  - checkout: self
    clean: true
    fetchDepth: 1
    # TODO: Productionと同様にマイグレーションを行う