Exercise - Create a GitHub action to deploy to AKS

Completed

In this exercise, you'll complete the following tasks:

• Enhance the existing GitHub action to include a deployment job.
• Verify that the changes deploy to the Azure Kubernetes Service (AKS) cluster.
• Roll back the deployment.

Update the Kubernetes manifest for the product service

To deploy new versions of the eShop product service, edit the product.yml file to point at the Azure Container Registry (ACR) you used in the previous unit.

1. In your forked repository, select the code tab, then select the product.yml file.

2. To edit the file, select the edit icon (pencil).

3. Edit the line:

   containers:
     - image: [replace with your ACR name].azurecr.io/productservice:latest
   

   Replace the [replace with your ACR name] with the name of your ACR; for example, acseshop186748394.

4. In the top right, select Commit changes... then, in the dialog, select Commit changes.

Create the deployment action

The YAML code adds a GitHub step that:

Has one step that deploys new images. Here's the steps in an ubuntu-latest runner:

1. Checks out the repository this file is in.
2. Azure Login signs in to Azure with the service principal credentials.
3. Set up kubelogin for non-interactive login configures the kubeconfig file for Azure authentication.
4. Get K8s context set context sets the Azure Kubernetes Service (AKS) credentials in the runner's .kube/config file.
5. Deploys application deploys the application to AKS, using the image built in the previous step and the Kubernetes manifest file you edited earlier.

Complete the following steps to create a GitHub action that deploys the coupon service:

1. In your forked repository, on the code tab, select the .github/workflows tab.

2. Select azure-kubernetes-service.yml.

3. To edit the file, select the edit icon (pencil).

4. At the bottom of the file, paste the following YAML code into the editor:

   
     deploy:
       permissions:
         actions: read
         contents: read
         id-token: write
       runs-on: ubuntu-latest
       needs: [buildImage]
       steps:
         # Checks out the repository this file is in
         - uses: actions/checkout@v3
   
         # Logs in with your Azure credentials
         - name: Azure login
           uses: azure/login@v1.4.6
           with:
             creds: '${{ secrets.AZURE_CREDENTIALS }}'
   
         # Use kubelogin to configure your kubeconfig for Azure auth
         - name: Set up kubelogin for non-interactive login
           uses: azure/use-kubelogin@v1
           with:
             kubelogin-version: 'v0.0.25'
   
         # Retrieves your Azure Kubernetes Service cluster's kubeconfig file
         - name: Get K8s context
           uses: azure/aks-set-context@v3
           with:
             resource-group: ${{ env.RESOURCE_GROUP }}
             cluster-name: ${{ env.CLUSTER_NAME }}
             admin: 'false'
             use-kubelogin: 'true'
   
         # Deploys application based on given manifest file
         - name: Deploys application
           uses: Azure/k8s-deploy@v4
           with:
             action: deploy
             manifests: ${{ env.DEPLOYMENT_MANIFEST_PATH }}
             images: |
               ${{ env.AZURE_CONTAINER_REGISTRY }}.azurecr.io/${{ env.CONTAINER_NAME }}:${{ github.sha }}
             pull-images: false
   
   

5. In the top right, select Commit changes..., then in the dialog select Commit changes.

Trigger a deployment

Updating the azure-kubernetes-service.yml file and committing the changes automatically triggers another deployment. Now see how making a code change triggers another deployment.

You have a new product your marketing team would like to add to the catalog.

1. In your forked repository, on the code tab, select the Products folder.

2. Select the Data folder.

3. Select the ProductDataContext.c file.

4. To edit the file, select the edit icon (pencil).

5. At the bottom of the file, add a new product to the products array:

   new Product {  Name = "Camping Tent 2", Description = "This updated tent is improved and cheaper, perfect for your next trip.", Price = 79.99m, ImageUrl = "product9.png" },
   

6. In the top right, select Commit changes... then, in the dialog, select Commit changes.

Monitor the deployment

1. To monitor the deployment's progress, select the Actions tab.

2. Select the most recent workflow run listed for the Build and deploy an app to AKS workflow. The run's name is the commit message you used in the previous step.

3. Select the deploy job to see details for this workflow run.

   

4. In the terminal, run the following command to monitor the coupon service pods in your AKS cluster. The --selector flag filters the list to only pods for the coupon service, and the --watch flag instructs kubectl to watch for changes.

   kubectl get pods --selector=app=productservice --watch
   

   During the deployment, a variation of the following output appears:

   NAME                             READY   STATUS    RESTARTS   AGE
   productservice-7979d4c47-xlcrr   1/1     Running   0          17m
   productservice-ff98b6d8d-7wmsh   0/1     Pending   0          0s
   productservice-ff98b6d8d-7wmsh   0/1     Pending   0          0s
   productservice-ff98b6d8d-7wmsh   0/1     ContainerCreating   0          0s
   productservice-ff98b6d8d-7wmsh   1/1     Running             0          4s
   productservice-7979d4c47-xlcrr   1/1     Terminating         0          19m
   

   In the preceding output, notice that a new productservice pod is created. When the new pod is ready, the old one is terminated. This process makes the transition to the new version as smooth as possible.

Verify the app

Complete the following steps to verify that your app still works:

• View the deployed eShop by running this command in the terminal:

  echo "http://$(kubectl get services --namespace ingress-nginx ingress-nginx-controller --output jsonpath='{.status.loadBalancer.ingress[0].ip}')"
  

  The above command returns the external IP address for the web app. Hold CTRL and select the link to open the app in a new tab.

Go to the products page to view the new tent listed at the bottom of the page.

Roll back the deployment

One common mitigation for production issues is to revert to a known good deployment. Kubernetes maintains a deployment history that you can use to roll back to a previous version of your app.

In your terminal, run this command to remove the new tent you just added to the website:

kubectl rollout undo deployment/productservice

You should see this console message:

deployment.apps/productservice rolled back

Refresh the products page in your browser, and the new tent should no longer be listed.

Note

In a real-life scenario, you deploy the build's artifacts to multiple environments. For example, you might have development, testing, and staging environments. You can trigger deployment workflows by events like merging PRs. You can add quality or approval gates, such as a stakeholder's PR approval, to prevent unexpected deployments to production.

Check your knowledge

1.

What's the best place to store sensitive information, such as credentials, for GitHub Actions?

appsettings.json

web.config

Azure Key Vault

GitHub secrets

2.

What's the purpose of creating an Azure Active Directory service principal for GitHub Actions to use?

The service principal is for storing application logs.

The service principal is the name of the Azure Kubernetes Service (AKS) resource.

The service principal is the GitHub Actions identity for doing tasks in Azure.

The service principal is the web URL of the app.

3.

During upgrade deployment, why does AKS create a new container while the old one is still running?

To avoid downtime.

To scale up.

For redundancy.

To scale out.

You must answer all questions before checking your work.