How to deploy using github actions to webapp behind private endpoint

Anass Keddo 6

Hello,

I'm facing a problem and cannot figure out the best way to solve it.

Deploying new versions using github actions to webapp works like a charm but once you put your webapp behind a private endpoint it become a nightmare since the runner cannot deploy into webapp since access to the webapp behind a private link is only possible withing the same vnet...

Any solution or best practice to follow ?

Thank you

VenkateshDodda-MSFT 23,686 Reputation points Microsoft Employee

2023-02-01T10:19:40.24+00:00
Thank you for reaching out to Microsoft Q&A, apologize for any inconvenience caused on this.

You can refer to this blog post which explains how to deploy source code to a private endpoint enabled webapp through GitHub actions. your GitHub actions workflow will have two jobs

The first builds and tests the application and uploads the artifact for the second job. Once the artifact is built, tested and uploaded, the second job pulls the artifact and runs an Azure CLI script to publish the files to an Azure Storage Account.

Once the files are uploaded, we generate a SAS URL for the storage container web app then pulls the application from the storage account and deploys it.
VenkateshDodda-MSFT 23,686 Reputation points Microsoft Employee

2023-02-03T12:06:14.29+00:00

Just following up to check if you have a chance to check my previous response and helped. Do let me know if you have any further questions on this.
Anass Keddo 6 Reputation points

2023-02-03T15:45:07.35+00:00

Hello @VenkateshDodda-MSFT

The link you provided is broken, i already tested the process provided by the app service team, the important point is that the az webapp deploy still have a bug since 2021, so it's working only using the az rest alternative.
VenkateshDodda-MSFT 23,686 Reputation points Microsoft Employee

2023-02-09T06:42:13.4066667+00:00

Thanks for your response. apologizes for the delay in my response. Here is the correct link for that blog post
Could please send an email with subject line “Attn:Venkatesh|thread title” to AzCommunity@microsoft.com referencing this thread to check and assist you further on this.
Kaloyan Drenski 0 Reputation points

2025-01-19T09:19:00.67+00:00

As of January 2025, here's the solution https://systemshogun.com/p/github-actions-and-private-endpoints

1 answer

Luke Murray 11,246 Reputation points MVP

2023-01-29T00:14:03.1566667+00:00

Hi, if your attempting top deploy in a private VNET, then you will need to setup a self-hosted github runner, which has line of sight to the resources you are attempting to deploy to.

https://docs.github.com/en/actions/hosting-your-own-runners/about-self-hosted-runners
Please sign in to rate this answer.
Anass Keddo 6 Reputation points

2023-01-29T09:02:57.7533333+00:00

Hello,

I already tried this solution that in fact work but a costly solution, since you have to pay for a VM, the maintenance.... etc.

I tried this solution --> https://azure.github.io/AppService/2022/12/02/n-tier-web-app.html but it didn't work or i'm doing something wrong, since the SCM have denied access, the only possibility is to whitelist the runner ip before trying to deploy
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

How to deploy using github actions to webapp behind private endpoint

1 answer

Your answer