Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/nhatthaiquang-agilityio/net6.webapi-aks-githubactions

.NET6 WebAPI sample and deploy with GitHub Actions
https://github.com/nhatthaiquang-agilityio/net6.webapi-aks-githubactions

azure azure-kubernetes-service docker github-actions helm kubernetes terraform webapp

Last synced: 19 days ago
JSON representation

.NET6 WebAPI sample and deploy with GitHub Actions

Host: GitHub
URL: https://github.com/nhatthaiquang-agilityio/net6.webapi-aks-githubactions
Owner: nhatthaiquang-agilityio
Created: 2022-07-02T08:20:00.000Z (over 2 years ago)
Default Branch: main
Last Pushed: 2022-10-27T08:35:09.000Z (about 2 years ago)
Last Synced: 2024-04-16T07:09:41.138Z (9 months ago)
Topics: azure, azure-kubernetes-service, docker, github-actions, helm, kubernetes, terraform, webapp
Language: HCL
Homepage:
Size: 376 KB
Stars: 0
Watchers: 1
Forks: 0
Open Issues: 0
Metadata Files:
- Readme: README.md

Awesome Lists containing this project

README

# NET6.WebAPI
.NET6 WebAPI sample using Github Actions for deployments to Azure Kubernetes Service

### Github Runner Requirements
------------------------------
+ Install Docker & DockerCompose
+ Minikube or Kubernetes cluster (see below if needed)
+ Install azure cli
+ Install Kubectl

## Usage
---------
### Setup Azure
----------------
+ Azure Login
```
az login
```

+ Create group in Azure
```
az group create --name LearningDeployment --location KoreaCentral
```

+ Create AKS Cluster
```
az aks create --resource-group LearningDeployment --name AKSLearningGithubActions --node-count 2 --generate-ssh-keys
```

+ Get Credentials for kubectl
```
az aks get-credentials -n AKSLearningGithubActions -g LearningDeployment
```

+ Create ACR
```
az acr create --resource-group LearningDeployment --name learndeploymentgithub --sku Basic
```

+ Login ACR(Required: docker start on your machine)
```
az acr login --name learndeploymentgithub
```

+ Create AZURE_CREDENTIALS
```
az ad sp create-for-rbac --name "net6web" --role contributor --scopes /subscriptions//resourceGroups/ --sdk-auth
```
Copy and paste into secret AZURE_CREDENTTIAL in the github repository

+ [Create container registry Credentials](https://docs.microsoft.com/en-us/azure/container-registry/container-registry-auth-service-principal)
```
#!/bin/bash
# This script requires Azure CLI version 2.25.0 or later. Check version with `az --version`.

# Modify for your environment.
# ACR_NAME: The name of your Azure Container Registry
# SERVICE_PRINCIPAL_NAME: Must be unique within your AD tenant
ACR_NAME=learndeploymentgithub
SERVICE_PRINCIPAL_NAME=PrincipalLearnDeploymentGithubActions

# Obtain the full registry ID
ACR_REGISTRY_ID=$(az acr show --name $ACR_NAME --query "id" --output tsv)
# echo $registryId

# Create the service principal with rights scoped to the registry.
# Default permissions are for docker pull access. Modify the '--role'
# argument value as desired:
# acrpull: pull only
# acrpush: push and pull
# owner: push, pull, and assign roles
PASSWORD=$(az ad sp create-for-rbac --name $SERVICE_PRINCIPAL_NAME --scopes $ACR_REGISTRY_ID --role acrpush --query "password" --output tsv)
USER_NAME=$(az ad sp list --display-name $SERVICE_PRINCIPAL_NAME --query "[].appId" --output tsv)

# Output the service principal's credentials; use these in your services and
# applications to authenticate to the container registry.
echo "Service principal ID: $USER_NAME"
echo "Service principal password: $PASSWORD"
```

+ Run Github Action deploy_aks

### Using Terraform in AKZ
---------------------------
+ Azure Login
```
az login
```

+ Set up the privileges for accessing the Azure resources required for using Terraform
```
az ad sp create-for-rbac --name "net6web" --role contributor --scopes /subscriptions/
```
Copy and paste appId and password into terraform.tfvar

+ Get Credentials for kubectl
```
az aks get-credentials -n AKSLearningGithubActions -g LearningDeployment
```
+ [Create container registry Credentials](https://docs.microsoft.com/en-us/azure/container-registry/container-registry-auth-service-principal)
```
#!/bin/bash
# This script requires Azure CLI version 2.25.0 or later. Check version with `az --version`.

# Obtain the full registry ID
ACR_REGISTRY_ID=$(az acr show --name $ACR_NAME --query "id" --output tsv)
# echo $registryId

Copy paste REGISTRY_USERNAME&REGISTRY_PASSWORD of github secret

### Create Ingress and expose IP
---------------------------------
+ Create Static IP
```
az aks show --resource-group LearningDeployment --name AKSLearningGithubActions --query nodeResourceGroup -o tsv
```
--> MC_LearningDeployment_AKSLearningGithubActions_koreacentral

```
az network public-ip create --resource-group MC_LearningDeployment_AKSLearningGithubActions_koreacentral --name AKSLearningGithubActions --sku Standard --allocation-method static --query publicIp.ipAddress -o tsv
```
--> 20.249.96.38(IP Address)

+ Create namespace for ingress
```
kubectl create namespace ingress-basic
```

+ Add ingress-nginx repo from helm command
```
helm repo add ingress-nginx https://kubernetes.github.io/ingress-nginx
helm repo add stable https://kubernetes-charts.storage.googleapis.com/
helm repo update
```

+ Set Ingress with IP(expose IP)
```
helm install ingress-nginx ingress-nginx/ingress-nginx --namespace ingress-basic --set controller.replicaCount=2 --set controller.nodeSelector."beta\.kubernetes\.io/os"=linux --set defaultBackend.nodeSelector."beta\.kubernetes\.io/os"=linux --set controller.service.externalTrafficPolicy=Local --set controller.service.loadBalancerIP="20.249.96.38"
```

+ Check service
```
kubectl get service -l app.kubernetes.io/name=ingress-nginx --namespace ingress-basic
```
Results:
```
ingress-nginx-controller LoadBalancer 10.0.42.164 20.249.96.38 80:31350/TCP,443:30212/TCP 68s
ingress-nginx-controller-admission ClusterIP 10.0.69.59 443/TCP 68s
```

+ Get external IP
```
kubectl get all -n ingress-basic
```
--> Go to browser and enter IP(http://20.249.96.38/). It should be showed nginx(404 NOT FOUND)

+ Check the Web APP
```
http://20.249.96.38/webapi
```

### Result
![Azure Kubernetes Sevice](./images/AKS.png)
![Web site](./images/Web.png)

### References
---------------
+ [Install Azure CLI](https://docs.microsoft.com/en-us/cli/azure/install-azure-cli-macos)
+ [AKS Github Actions](https://docs.microsoft.com/en-us/azure/aks/kubernetes-action?tabs=userlevel)
+ [KubeLab Github Actions](https://azure.github.io/kube-labs/1-github-actions.html#_1-create-a-deployment-pipeline)
+ [AKS deployment with github actions](https://docs.microsoft.com/en-us/learn/modules/aks-deployment-pipeline-github-actions/)