練習 - 植入儲存體帳戶和資料庫

  • 14 分鐘

您已更新管線，以建置網站的應用程式並部署到 Bicep 檔案中定義的 Azure App Service 應用程式。 但是，由於資料庫尚未運作，因此煙霧測試階段會失敗。 在此單元中，您將部署新的 Azure SQL 邏輯伺服器和資料庫，並設定管線以建置和部署資料庫的結構描述。 您也會更新管線，以為測試環境新增一些範例產品資料，讓您的小組可以試用網站。

在此程序中，您將執行下列工作：

  • 將 Blob 容器新增至 Azure 儲存體帳戶。
  • 新增 Azure SQL 邏輯伺服器和資料庫。
  • 更新建置階段，以將資料庫專案建置到 DACPAC 檔案中。
  • 將新變數新增至 Azure SQL 邏輯伺服器和資料庫的變數群組。
  • 更新部署階段，以使用新的變數作為參數值。
  • 新增管線步驟以部署 DACPAC 檔案。
  • 執行管線並檢視網站。

新增儲存體容器

您的 Bicep 檔案已定義儲存體帳戶，但未定義 Blob 容器。 在這裡，您會將 Blob 容器新增至 Bicep 檔案。 您也可以使用其組態設定，來將儲存體帳戶和 Blob 容器的名稱提供給應用程式。 如此一來，應用程式就知道要存取的儲存體帳戶。

  1. 在 Visual Studio Code 中，開啟 [deploy] 資料夾中的 main.bicep 檔案。

  2. 在定義資源名稱的變數下方 (第 27 行附近)，為 Blob 儲存體容器的名稱新增一個新的變數定義：

    var storageAccountImagesBlobContainerName = 'toyimages'

  3. 更新 storageAccount 資源以定義 Blob 容器：

    resource storageAccount 'Microsoft.Storage/storageAccounts@2022-09-01' = {
  name: storageAccountName
  location: location
  kind: 'StorageV2'
  sku: environmentConfigurationMap[environmentType].storageAccount.sku

  resource blobService 'blobServices' = {
    name: 'default'

    resource storageAccountImagesBlobContainer 'containers' = {
      name: storageAccountImagesBlobContainerName

      properties: {
        publicAccess: 'Blob'
      }
    }
  }
}

  4. 更新應用程式的 appSettings 屬性以新增三個新的應用程式設定，用於儲存體帳戶名稱、Blob 端點和 Blob 容器名稱：

    resource appServiceApp 'Microsoft.Web/sites@2022-03-01' = {
  name: appServiceAppName
  location: location
  properties: {
    serverFarmId: appServicePlan.id
    httpsOnly: true
    siteConfig: {
      appSettings: [
        {
          name: 'APPINSIGHTS_INSTRUMENTATIONKEY'
          value: applicationInsights.properties.InstrumentationKey
        }
        {
          name: 'APPLICATIONINSIGHTS_CONNECTION_STRING'
          value: applicationInsights.properties.ConnectionString
        }
        {
          name: 'ReviewApiUrl'
          value: reviewApiUrl
        }
        {
          name: 'ReviewApiKey'
          value: reviewApiKey
        }
        {
          name: 'StorageAccountName'
          value: storageAccount.name
        }
        {
          name: 'StorageAccountBlobEndpoint'
          value: storageAccount.properties.primaryEndpoints.blob
        }
        {
          name: 'StorageAccountImagesContainerName'
          value: storageAccount::blobService::storageAccountImagesBlobContainer.name
        }
      ]
    }
  }
}

  5. 在檔案的結尾，新增輸出，以公開儲存體帳戶和 Blob 容器的名稱：

    output storageAccountName string = storageAccount.name
output storageAccountImagesBlobContainerName string = storageAccount::blobService::storageAccountImagesBlobContainer.name

  6. 儲存對檔案所做的變更。

  7. 將您的變更認可至 Git 存放庫，但還不要推送這些變更。 在 Visual Studio Code 終端中，執行下列命令：

    git add .
git commit -m "Add storage container"

新增 Azure SQL 邏輯伺服器和資料庫

您的 Bicep 檔案目前不會部署 Azure SQL 邏輯伺服器或資料庫。 在本節中，您會將這些資源新增至 Bicep 檔案。

  1. 在 main.bicep 檔案中，在 reviewApiKey 參數下方新增兩個新參數：

    @description('The administrator login username for the SQL server.')
param sqlServerAdministratorLogin string

@secure()
@description('The administrator login password for the SQL server.')
param sqlServerAdministratorLoginPassword string

  2. 在定義資源名稱的變數下方，新增變數以定義 Azure SQL 邏輯伺服器和資料庫的名稱：

    var sqlServerName = 'toy-website-${resourceNameSuffix}'
var sqlDatabaseName = 'Toys'

  3. 在您剛新增的變數下方，定義新變數，以建立可讓應用程式用來存取資料庫的連接字串：

    // Define the connection string to access Azure SQL.
var sqlDatabaseConnectionString = 'Server=tcp:${sqlServer.properties.fullyQualifiedDomainName},1433;Initial Catalog=${sqlDatabase.name};Persist Security Info=False;User ID=${sqlServerAdministratorLogin};Password=${sqlServerAdministratorLoginPassword};MultipleActiveResultSets=False;Encrypt=True;TrustServerCertificate=False;Connection Timeout=30;'

    注意

    為了簡單起見，應用程式會使用管理員登入和密碼來存取資料庫。 不過，這不是用於實際執行解決方案的良好做法。 最好使用 App Service 受控識別來存取資料庫，並為受控識別授與應用程式所需的最低權限。 我們會在摘要頁面中連結更多資訊。

  4. 在接近檔案的結尾，於輸出上方，新增 Azure SQL 邏輯伺服器和資料庫資源：

    resource sqlServer 'Microsoft.Sql/servers@2022-05-01-preview' = {
  name: sqlServerName
  location: location
  properties: {
    administratorLogin: sqlServerAdministratorLogin
    administratorLoginPassword: sqlServerAdministratorLoginPassword
  }
}

resource sqlServerFirewallRule 'Microsoft.Sql/servers/firewallRules@2022-05-01-preview' = {
  parent: sqlServer
  name: 'AllowAllWindowsAzureIps'
  properties: {
    endIpAddress: '0.0.0.0'
    startIpAddress: '0.0.0.0'
  }
}

resource sqlDatabase 'Microsoft.Sql/servers/databases@2022-05-01-preview' = {
  parent: sqlServer
  name: sqlDatabaseName
  location: location
  sku: environmentConfigurationMap[environmentType].sqlDatabase.sku
}

  5. 更新 environmentConfigurationMap 變數，以定義要針對每個環境的資料庫使用的 sku 值：

    var environmentConfigurationMap = {
  Production: {
    appServicePlan: {
      sku: {
        name: 'S1'
        capacity: 1
      }
    }
    storageAccount: {
      sku: {
        name: 'Standard_LRS'
      }
    }
    sqlDatabase: {
      sku: {
        name: 'Standard'
        tier: 'Standard'
      }
    }
  }
  Test: {
    appServicePlan: {
      sku: {
        name: 'F1'
      }
    }
    storageAccount: {
      sku: {
        name: 'Standard_GRS'
      }
    }
    sqlDatabase: {
      sku: {
        name: 'Standard'
        tier: 'Standard'
      }
    }
  }
}

  6. 針對資料庫連接字串，將其他應用程式設定新增至 App Service 應用程式：

    resource appServiceApp 'Microsoft.Web/sites@2022-03-01' = {
  name: appServiceAppName
  location: location
  properties: {
    serverFarmId: appServicePlan.id
    httpsOnly: true
    siteConfig: {
      appSettings: [
        {
          name: 'APPINSIGHTS_INSTRUMENTATIONKEY'
          value: applicationInsights.properties.InstrumentationKey
        }
        {
          name: 'APPLICATIONINSIGHTS_CONNECTION_STRING'
          value: applicationInsights.properties.ConnectionString
        }
        {
          name: 'ReviewApiUrl'
          value: reviewApiUrl
        }
        {
          name: 'ReviewApiKey'
          value: reviewApiKey
        }
        {
          name: 'StorageAccountName'
          value: storageAccount.name
        }
        {
          name: 'StorageAccountBlobEndpoint'
          value: storageAccount.properties.primaryEndpoints.blob
        }
        {
          name: 'StorageAccountImagesContainerName'
          value: storageAccount::blobService::storageAccountImagesBlobContainer.name
        }
        {
          name: 'SqlDatabaseConnectionString'
          value: sqlDatabaseConnectionString
        }
      ]
    }
  }
}

  7. 在檔案底部，新增輸出以公開 Azure SQL 邏輯伺服器的主機名稱和資料庫的名稱：

    output appServiceAppName string = appServiceApp.name
output appServiceAppHostName string = appServiceApp.properties.defaultHostName
output storageAccountName string = storageAccount.name
output storageAccountImagesBlobContainerName string = storageAccount::blobService::storageAccountImagesBlobContainer.name
output sqlServerFullyQualifiedDomainName string = sqlServer.properties.fullyQualifiedDomainName
output sqlDatabaseName string = sqlDatabase.name

  8. 儲存對檔案所做的變更。

為資料庫專案新增建置步驟

您的網站開發人員已備妥 Visual Studio 資料庫專案，以部署和設定您的網站資料庫資料表。 在這裡，您會更新管線「建置」階段，以將資料庫專案建置到 DACPAC 檔案，並將其發佈為管線成品。

  1. 開啟 deploy/pipeline-templates 資料夾中的 build.yml 檔案。

  2. 若要建置 Visual Studio 資料庫專案，請將產生的 DACPAC 檔案複製到暫存資料夾，並將其發佈為管線成品，新增下列步驟：

    jobs:
- job: Build
  displayName: Build application and database
  pool:
    vmImage: windows-latest

  steps:

  # Build, copy, and publish the website.
  - task: DotNetCoreCLI@2
    displayName: Build publishable website
    inputs:
      command: 'publish'
      publishWebProjects: true

  - task: CopyFiles@2
    displayName: Copy publishable website
    inputs:
      sourceFolder: '$(Build.SourcesDirectory)/src/ToyCompany/ToyCompany.Website/bin'
      contents: '**/publish.zip'
      targetFolder: '$(Build.ArtifactStagingDirectory)/website'
      flattenFolders: true

  - task: PublishBuildArtifacts@1
    displayName: Publish website as pipeline artifact
    inputs:
      pathToPublish: '$(Build.ArtifactStagingDirectory)/website'
      artifactName: 'website'

  # Build, copy, and publish the DACPAC file.
  - task: VSBuild@1
    displayName: Build Visual Studio solution
    inputs:
      solution: '$(Build.SourcesDirectory)/src/ToyCompany/ToyCompany.Database/ToyCompany.Database.sqlproj'

  - task: CopyFiles@2
    displayName: Copy DACPAC
    inputs:
      sourceFolder: '$(Build.SourcesDirectory)/src/ToyCompany/ToyCompany.Database/bin'
      contents: '**/*.dacpac'
      targetFolder: '$(Build.ArtifactStagingDirectory)/database'
      flattenFolders: true

  - task: PublishBuildArtifacts@1
    displayName: Publish DACPAC as pipeline artifact
    inputs:
      pathToPublish: '$(Build.ArtifactStagingDirectory)/database'
      artifactName: 'database'

  3. 儲存對檔案所做的變更。

將值新增至變數群組

  1. 在您的瀏覽器中，移至 [管線] > [程式庫]。

  2. 選取 ToyWebsiteProduction 變數群組。

    Screenshot of Azure DevOps showing the list of variable groups, with the ToyWebsiteProduction variable group highlighted.

  3. 將下列變數新增至變數群組：

    名稱 值
    SqlServerAdministratorLogin ToyCompanyAdmin
    SqlServerAdministratorLoginPassword SecurePassword!111

  4. 選取 SqlServerAdministratorLoginPassword 變數旁的掛鎖圖示。 此功能會告訴 Azure Pipelines 安全地處理變數的值。

    Screenshot of the production variable group, with the secret variable button highlighted.

  5. 儲存變數群組。

    Screenshot of the production variable group, with the Save button highlighted.

  6. 重複此流程，以將下列變數新增至 ToyWebsiteTest 變數群組：

    名稱 值
    SqlServerAdministratorLogin TestToyCompanyAdmin
    SqlServerAdministratorLoginPassword SecurePassword!999

    記得選取 SqlServerAdministratorLoginPassword 變數旁的掛鎖圖示，並儲存變數群組。

將參數值新增至驗證和預覽階段

Bicep 檔案現在有兩個新的強制參數：sqlServerAdministratorLogin 和 sqlServerAdministratorLoginPassword。 在這裡，您會針對「驗證」和「預覽」階段，從變數群組傳播那些參數值。

  1. 在 Visual Studio Code 中，開啟 deploy/pipeline-templates 資料夾中的 deploy.yml 檔案。

  2. 新增參數，以更新「驗證」階段的 RunPreflightValidation 步驟。

    - task: AzureResourceManagerTemplateDeployment@3
  name: RunPreflightValidation
  displayName: Run preflight validation
  inputs:
    connectedServiceName: ToyWebsite${{parameters.environmentType}}
    location: ${{parameters.deploymentDefaultLocation}}
    deploymentMode: Validation
    resourceGroupName: $(ResourceGroupName)
    csmFile: deploy/main.bicep
    overrideParameters: >
      -environmentType $(EnvironmentType)
      -reviewApiUrl $(ReviewApiUrl)
      -reviewApiKey $(ReviewApiKey)
      -sqlServerAdministratorLogin $(SqlServerAdministratorLogin)
      -sqlServerAdministratorLoginPassword $(SqlServerAdministratorLoginPassword)

  3. 新增參數，以更新「預覽」階段的 RunWhatIf 步驟。

    inlineScript: |
  az deployment group what-if \
    --resource-group $(ResourceGroupName) \
    --template-file deploy/main.bicep \
    --parameters environmentType=$(EnvironmentType) \
                 reviewApiUrl=$(ReviewApiUrl) \
                 reviewApiKey=$(ReviewApiKey) \
                 sqlServerAdministratorLogin=$(SqlServerAdministratorLogin) \
                 sqlServerAdministratorLoginPassword=$(SqlServerAdministratorLoginPassword)

    重要

    務必在設定 reviewApiKey 參數值的行尾以及後續行上新增反斜線字元 (\)。 \ 字元表示後續幾行是相同 Azure CLI 命令的一部分。

將參數值新增至部署階段

  1. 新增參數，以更新「部署」階段的 DeployBicepFile 步驟：

    - task: AzureResourceManagerTemplateDeployment@3
  name: DeployBicepFile
  displayName: Deploy Bicep file
  inputs:
    connectedServiceName: ToyWebsite${{parameters.environmentType}}
    deploymentName: $(Build.BuildNumber)
    location: ${{parameters.deploymentDefaultLocation}}
    resourceGroupName: $(ResourceGroupName)
    csmFile: deploy/main.bicep
    overrideParameters: >
      -environmentType $(EnvironmentType)
      -reviewApiUrl $(ReviewApiUrl)
      -reviewApiKey $(ReviewApiKey)
      -sqlServerAdministratorLogin $(SqlServerAdministratorLogin)
      -sqlServerAdministratorLoginPassword $(SqlServerAdministratorLoginPassword)
    deploymentOutputs: deploymentOutputs

  2. 建立管線變數，以包含您最近為儲存體帳戶和 Azure SQL 資源新增的 Bicep 輸出值：

    - bash: |
    echo "##vso[task.setvariable variable=appServiceAppName]$(echo $DEPLOYMENT_OUTPUTS | jq -r '.appServiceAppName.value')"
    echo "##vso[task.setvariable variable=appServiceAppHostName;isOutput=true]$(echo $DEPLOYMENT_OUTPUTS | jq -r '.appServiceAppHostName.value')"
    echo "##vso[task.setvariable variable=storageAccountName]$(echo $DEPLOYMENT_OUTPUTS | jq -r '.storageAccountName.value')"
    echo "##vso[task.setvariable variable=storageAccountImagesBlobContainerName]$(echo $DEPLOYMENT_OUTPUTS | jq -r '.storageAccountImagesBlobContainerName.value')"
    echo "##vso[task.setvariable variable=sqlServerFullyQualifiedDomainName]$(echo $DEPLOYMENT_OUTPUTS | jq -r '.sqlServerFullyQualifiedDomainName.value')"
    echo "##vso[task.setvariable variable=sqlDatabaseName]$(echo $DEPLOYMENT_OUTPUTS | jq -r '.sqlDatabaseName.value')"
  name: SaveDeploymentOutputs
  displayName: Save deployment outputs into variables
  env:
    DEPLOYMENT_OUTPUTS: $(deploymentOutputs)

新增資料庫部署步驟

在本節中，您會定義部署網站的資料庫元件所需的步驟。 首先，您會新增步驟來部署管線先前建置的 DACPAC 檔案。 然後，將範例資料新增至資料庫和儲存體帳戶，但僅適用非商業執行環境。

  1. 在「部署」階段的 DeployWebsiteApp 步驟下方，新增步驟以部署 DACPAC 檔案：

    - task: SqlAzureDacpacDeployment@1
  name: DeploySqlDatabaseDacpac
  displayName: Deploy DACPAC to database
  inputs:
    ConnectedServiceNameARM: ToyWebsite${{parameters.environmentType}}
    authenticationType: 'server'
    serverName: $(sqlServerFullyQualifiedDomainName)
    databaseName: $(sqlDatabaseName)
    sqlUsername: $(SqlServerAdministratorLogin)
    sqlPassword: $(SqlServerAdministratorLoginPassword)
    deployType: 'DacpacTask'
    deploymentAction: 'Publish'
    dacpacFile: '$(Pipeline.Workspace)/database/ToyCompany.Database.dacpac'

  2. 在您剛新增的步驟下方，定義使用範例資料植入資料庫的步驟。

    - ${{ if ne(parameters.environmentType, 'Production') }}:
  - task: SqlAzureDacpacDeployment@1
    name: AddTestDataToDatabase
    displayName: Add test data to database
    inputs:
      ConnectedServiceNameARM: ToyWebsite${{parameters.environmentType}}
      authenticationType: 'server'
      serverName: $(sqlServerFullyQualifiedDomainName)
      databaseName: $(sqlDatabaseName)
      sqlUsername: $(SqlServerAdministratorLogin)
      sqlPassword: $(SqlServerAdministratorLoginPassword)
      deployType: 'sqlTask'
      sqlFile: 'deploy/sample-data/Toys.sql'

    請注意，此步驟套用了一個條件，以便其只會在非商業執行環境下執行。

  3. 在您剛新增的步驟下方，但仍在條件範圍內，新增一個步驟，以使用 Azure CLI 來將一些範例玩具影像上傳至 Blob 容器：

    - task: AzureCLI@2
  name: UploadSampleImages
  displayName: Upload sample images
  inputs:
    azureSubscription: ToyWebsite${{parameters.environmentType}}
    scriptType: 'bash'
    scriptLocation: 'inlineScript'
    inlineScript: |
      az storage blob upload-batch \
        --account-name $(storageAccountName) \
        --destination $(storageAccountImagesBlobContainerName) \
        --source 'deploy/sample-data/toyimages'

驗證檔案並認可您的變更

  1. 驗證您的 main.bicep 檔案看起來像這樣：

    @description('The location into which your Azure resources should be deployed.')
param location string = resourceGroup().location

@description('Select the type of environment you want to provision. Allowed values are Production and Test.')
@allowed([
  'Production'
  'Test'
])
param environmentType string

@description('A unique suffix to add to resource names that need to be globally unique.')
@maxLength(13)
param resourceNameSuffix string = uniqueString(resourceGroup().id)

@description('The URL to the product review API.')
param reviewApiUrl string

@secure()
@description('The API key to use when accessing the product review API.')
param reviewApiKey string

@description('The administrator login username for the SQL server.')
param sqlServerAdministratorLogin string

@secure()
@description('The administrator login password for the SQL server.')
param sqlServerAdministratorLoginPassword string

// Define the names for resources.
var appServiceAppName = 'toy-website-${resourceNameSuffix}'
var appServicePlanName = 'toy-website'
var logAnalyticsWorkspaceName = 'workspace-${resourceNameSuffix}'
var applicationInsightsName = 'toywebsite'
var storageAccountName = 'mystorage${resourceNameSuffix}'
var storageAccountImagesBlobContainerName = 'toyimages'
var sqlServerName = 'toy-website-${resourceNameSuffix}'
var sqlDatabaseName = 'Toys'

// Define the connection string to access Azure SQL.
var sqlDatabaseConnectionString = 'Server=tcp:${sqlServer.properties.fullyQualifiedDomainName},1433;Initial Catalog=${sqlDatabase.name};Persist Security Info=False;User ID=${sqlServerAdministratorLogin};Password=${sqlServerAdministratorLoginPassword};MultipleActiveResultSets=False;Encrypt=True;TrustServerCertificate=False;Connection Timeout=30;'

// Define the SKUs for each component based on the environment type.
var environmentConfigurationMap = {
  Production: {
    appServicePlan: {
      sku: {
        name: 'S1'
        capacity: 1
      }
    }
    storageAccount: {
      sku: {
        name: 'Standard_LRS'
      }
    }
    sqlDatabase: {
      sku: {
        name: 'Standard'
        tier: 'Standard'
      }
    }
  }
  Test: {
    appServicePlan: {
      sku: {
        name: 'F1'
      }
    }
    storageAccount: {
      sku: {
        name: 'Standard_GRS'
      }
    }
    sqlDatabase: {
      sku: {
        name: 'Standard'
        tier: 'Standard'
      }
    }
  }
}

resource appServicePlan 'Microsoft.Web/serverfarms@2022-03-01' = {
  name: appServicePlanName
  location: location
  sku: environmentConfigurationMap[environmentType].appServicePlan.sku
}

resource appServiceApp 'Microsoft.Web/sites@2022-03-01' = {
  name: appServiceAppName
  location: location
  properties: {
    serverFarmId: appServicePlan.id
    httpsOnly: true
    siteConfig: {
      appSettings: [
        {
          name: 'APPINSIGHTS_INSTRUMENTATIONKEY'
          value: applicationInsights.properties.InstrumentationKey
        }
        {
          name: 'APPLICATIONINSIGHTS_CONNECTION_STRING'
          value: applicationInsights.properties.ConnectionString
        }
        {
          name: 'ReviewApiUrl'
          value: reviewApiUrl
        }
        {
          name: 'ReviewApiKey'
          value: reviewApiKey
        }
        {
          name: 'StorageAccountName'
          value: storageAccount.name
        }
        {
          name: 'StorageAccountBlobEndpoint'
          value: storageAccount.properties.primaryEndpoints.blob
        }
        {
          name: 'StorageAccountImagesContainerName'
          value: storageAccount::blobService::storageAccountImagesBlobContainer.name
        }
        {
          name: 'SqlDatabaseConnectionString'
          value: sqlDatabaseConnectionString
        }
      ]
    }
  }
}

resource logAnalyticsWorkspace 'Microsoft.OperationalInsights/workspaces@2022-10-01' = {
  name: logAnalyticsWorkspaceName
  location: location
}

resource applicationInsights 'Microsoft.Insights/components@2020-02-02' = {
  name: applicationInsightsName
  location: location
  kind: 'web'
  properties: {
    Application_Type: 'web'
    Request_Source: 'rest'
    Flow_Type: 'Bluefield'
    WorkspaceResourceId: logAnalyticsWorkspace.id
  }
}

resource storageAccount 'Microsoft.Storage/storageAccounts@2022-09-01' = {
  name: storageAccountName
  location: location
  kind: 'StorageV2'
  sku: environmentConfigurationMap[environmentType].storageAccount.sku

  resource blobService 'blobServices' = {
    name: 'default'

    resource storageAccountImagesBlobContainer 'containers' = {
      name: storageAccountImagesBlobContainerName

      properties: {
        publicAccess: 'Blob'
      }
    }
  }
}

resource sqlServer 'Microsoft.Sql/servers@2022-05-01-preview' = {
  name: sqlServerName
  location: location
  properties: {
    administratorLogin: sqlServerAdministratorLogin
    administratorLoginPassword: sqlServerAdministratorLoginPassword
  }
}

resource sqlServerFirewallRule 'Microsoft.Sql/servers/firewallRules@2022-05-01-preview' = {
  parent: sqlServer
  name: 'AllowAllWindowsAzureIps'
  properties: {
    endIpAddress: '0.0.0.0'
    startIpAddress: '0.0.0.0'
  }
}

resource sqlDatabase 'Microsoft.Sql/servers/databases@2022-05-01-preview' = {
  parent: sqlServer
  name: sqlDatabaseName
  location: location
  sku: environmentConfigurationMap[environmentType].sqlDatabase.sku
}

output appServiceAppName string = appServiceApp.name
output appServiceAppHostName string = appServiceApp.properties.defaultHostName
output storageAccountName string = storageAccount.name
output storageAccountImagesBlobContainerName string = storageAccount::blobService::storageAccountImagesBlobContainer.name
output sqlServerFullyQualifiedDomainName string = sqlServer.properties.fullyQualifiedDomainName
output sqlDatabaseName string = sqlDatabase.name

    如果沒有，請更新以符合檔案內容。

  2. 驗證 deploy.yml 檔案看起來像這樣：

    parameters:
- name: environmentType
  type: string
- name: deploymentDefaultLocation
  type: string
  default: westus3

stages:

- ${{ if ne(parameters.environmentType, 'Production') }}:
  - stage: Validate_${{parameters.environmentType}}
    displayName: Validate (${{parameters.environmentType}} Environment)
    jobs:
    - job: ValidateBicepCode
      displayName: Validate Bicep code
      variables:
      - group: ToyWebsite${{parameters.environmentType}}
      steps:
        - task: AzureResourceManagerTemplateDeployment@3
          name: RunPreflightValidation
          displayName: Run preflight validation
          inputs:
            connectedServiceName: ToyWebsite${{parameters.environmentType}}
            location: ${{parameters.deploymentDefaultLocation}}
            deploymentMode: Validation
            resourceGroupName: $(ResourceGroupName)
            csmFile: deploy/main.bicep
            overrideParameters: >
              -environmentType $(EnvironmentType)
              -reviewApiUrl $(ReviewApiUrl)
              -reviewApiKey $(ReviewApiKey)
              -sqlServerAdministratorLogin $(SqlServerAdministratorLogin)
              -sqlServerAdministratorLoginPassword $(SqlServerAdministratorLoginPassword)

- ${{ if eq(parameters.environmentType, 'Production') }}:
  - stage: Preview_${{parameters.environmentType}}
    displayName: Preview (${{parameters.environmentType}} Environment)
    jobs:
    - job: PreviewAzureChanges
      displayName: Preview Azure changes
      variables:
      - group: ToyWebsite${{parameters.environmentType}}
      steps:
        - task: AzureCLI@2
          name: RunWhatIf
          displayName: Run what-if
          inputs:
            azureSubscription: ToyWebsite${{parameters.environmentType}}
            scriptType: 'bash'
            scriptLocation: 'inlineScript'
            inlineScript: |
              az deployment group what-if \
                --resource-group $(ResourceGroupName) \
                --template-file deploy/main.bicep \
                --parameters environmentType=$(EnvironmentType) \
                             reviewApiUrl=$(ReviewApiUrl) \
                             reviewApiKey=$(ReviewApiKey) \
                             sqlServerAdministratorLogin=$(SqlServerAdministratorLogin) \
                             sqlServerAdministratorLoginPassword=$(SqlServerAdministratorLoginPassword)

- stage: Deploy_${{parameters.environmentType}}
  displayName: Deploy (${{parameters.environmentType}} Environment)
  jobs:
  - deployment: DeployWebsite
    displayName: Deploy website
    pool:
      vmImage: windows-latest
    variables:
    - group: ToyWebsite${{parameters.environmentType}}
    environment: ${{parameters.environmentType}}
    strategy:
      runOnce:
        deploy:
          steps:
            - checkout: self

            - task: AzureResourceManagerTemplateDeployment@3
              name: DeployBicepFile
              displayName: Deploy Bicep file
              inputs:
                connectedServiceName: ToyWebsite${{parameters.environmentType}}
                deploymentName: $(Build.BuildNumber)
                location: ${{parameters.deploymentDefaultLocation}}
                resourceGroupName: $(ResourceGroupName)
                csmFile: deploy/main.bicep
                overrideParameters: >
                  -environmentType $(EnvironmentType)
                  -reviewApiUrl $(ReviewApiUrl)
                  -reviewApiKey $(ReviewApiKey)
                  -sqlServerAdministratorLogin $(SqlServerAdministratorLogin)
                  -sqlServerAdministratorLoginPassword $(SqlServerAdministratorLoginPassword)
                deploymentOutputs: deploymentOutputs

            - bash: |
                echo "##vso[task.setvariable variable=appServiceAppName]$(echo $DEPLOYMENT_OUTPUTS | jq -r '.appServiceAppName.value')"
                echo "##vso[task.setvariable variable=appServiceAppHostName;isOutput=true]$(echo $DEPLOYMENT_OUTPUTS | jq -r '.appServiceAppHostName.value')"
                echo "##vso[task.setvariable variable=storageAccountName]$(echo $DEPLOYMENT_OUTPUTS | jq -r '.storageAccountName.value')"
                echo "##vso[task.setvariable variable=storageAccountImagesBlobContainerName]$(echo $DEPLOYMENT_OUTPUTS | jq -r '.storageAccountImagesBlobContainerName.value')"
                echo "##vso[task.setvariable variable=sqlServerFullyQualifiedDomainName]$(echo $DEPLOYMENT_OUTPUTS | jq -r '.sqlServerFullyQualifiedDomainName.value')"
                echo "##vso[task.setvariable variable=sqlDatabaseName]$(echo $DEPLOYMENT_OUTPUTS | jq -r '.sqlDatabaseName.value')"
              name: SaveDeploymentOutputs
              displayName: Save deployment outputs into variables
              env:
                DEPLOYMENT_OUTPUTS: $(deploymentOutputs)

            - task: AzureRmWebAppDeployment@4
              name: DeployWebsiteApp
              displayName: Deploy website
              inputs:
                appType: webApp
                ConnectionType: AzureRM
                azureSubscription: ToyWebsite${{parameters.environmentType}}
                ResourceGroupName: $(ResourceGroupName)
                WebAppName: $(appServiceAppName)
                Package: '$(Pipeline.Workspace)/website/publish.zip'

            - task: SqlAzureDacpacDeployment@1
              name: DeploySqlDatabaseDacpac
              displayName: Deploy DACPAC to database
              inputs:
                ConnectedServiceNameARM: ToyWebsite${{parameters.environmentType}}
                authenticationType: 'server'
                serverName: $(sqlServerFullyQualifiedDomainName)
                databaseName: $(sqlDatabaseName)
                sqlUsername: $(SqlServerAdministratorLogin)
                sqlPassword: $(SqlServerAdministratorLoginPassword)
                deployType: 'DacpacTask'
                deploymentAction: 'Publish'
                dacpacFile: '$(Pipeline.Workspace)/database/ToyCompany.Database.dacpac'

            - ${{ if ne(parameters.environmentType, 'Production') }}:
              - task: SqlAzureDacpacDeployment@1
                name: AddTestDataToDatabase
                displayName: Add test data to database
                inputs:
                  ConnectedServiceNameARM: ToyWebsite${{parameters.environmentType}}
                  authenticationType: 'server'
                  serverName: $(sqlServerFullyQualifiedDomainName)
                  databaseName: $(sqlDatabaseName)
                  sqlUsername: $(SqlServerAdministratorLogin)
                  sqlPassword: $(SqlServerAdministratorLoginPassword)
                  deployType: 'sqlTask'
                  sqlFile: 'deploy/sample-data/Toys.sql'

              - task: AzureCLI@2
                name: UploadSampleImages
                displayName: Upload sample images
                inputs:
                  azureSubscription: ToyWebsite${{parameters.environmentType}}
                  scriptType: 'bash'
                  scriptLocation: 'inlineScript'
                  inlineScript: |
                    az storage blob upload-batch \
                      --account-name $(storageAccountName) \
                      --destination $(storageAccountImagesBlobContainerName) \
                      --source 'deploy/sample-data/toyimages'

- stage: SmokeTest_${{parameters.environmentType}}
  displayName: Smoke Test (${{parameters.environmentType}} Environment)
  jobs:
  - job: SmokeTest
    displayName: Smoke test
    variables:
      appServiceAppHostName: $[ stageDependencies.Deploy_${{parameters.environmentType}}.DeployWebsite.outputs['DeployWebsite.SaveDeploymentOutputs.appServiceAppHostName'] ]
    steps:
      - task: PowerShell@2
        name: RunSmokeTests
        displayName: Run smoke tests
        inputs:
          targetType: inline
          script: |
            $container = New-PesterContainer `
              -Path 'deploy/Website.Tests.ps1' `
              -Data @{ HostName = '$(appServiceAppHostName)' }
            Invoke-Pester `
              -Container $container `
              -CI

      - task: PublishTestResults@2
        name: PublishTestResults
        displayName: Publish test results
        condition: always()
        inputs:
          testResultsFormat: NUnit
          testResultsFiles: 'testResults.xml'

    如果沒有，請更新以符合檔案內容。

  3. 儲存對檔案所做的變更。

  4. 認可並推送您的變更至 Git 存放庫。 在 Visual Studio Code 終端中，執行下列命令：

    git add .
git commit -m "Add SQL database"
git push

執行管線

  1. 在您的瀏覽器中，移至 [管線]。

  2. 選取管線的最近一次執行。

    等候測試環境的所有階段都成功完成。 請注意，煙霧測試現在也會成功。

    Screenshot of Azure DevOps showing the pipeline run's Smoke Test stage for the test environment. The status shows that the stage succeeded.

  3. 等候管線在「預覽 (實際執行環境)」階段之前再次暫停，因為它這次需要不同變數群組的權限。

    Screenshot of Azure DevOps showing the pipeline run paused at the Deploy stage. Permission is required to continue. The View button is highlighted.

  4. 選取 [檢視]，然後選取 [允許] > [允許]。

    「預覽 (實際執行環境)」階段會成功完成。

  5. 在管線完成最後階段時對其進行監視。

    部署 (實際執行環境) 階段會成功完成，而煙霧測試 (實際執行環境) 階段也會成功完成。

    Screenshot of Azure DevOps showing the pipeline run with all stages showing success.

檢視網站

  1. 選取 [部署 (測試環境)] 階段來開啟管線記錄。

  2. 選取 [Deploy website] \(部署網站\) 步驟。

    按住 Ctrl 鍵 (macOS 上為 ⌘)，然後選取 App Service 應用程式的 URL，以在新瀏覽器索引標籤中將其開啟。

    Screenshot of Azure DevOps showing the pipeline run log for the test environment's Deploy stage. The URL of the App Service app is highlighted.

  3. 選取 [玩具]。

    Screenshot of the toy company website homepage, with the Toys link highlighted.

    請注意，範例資料即會在測試環境中顯示。

    Screenshot of the test website's toy page, with the sample toys displayed.

  4. 針對 [部署 (實際執行環境)] 階段的應用程式重複前述程序。

    請注意，實際執行環境中不會顯示任何範例資料。

    Screenshot of the production website's toy page, with no toys displayed.

清除資源

現在練習已完成，您應該移除資源，以避免因此產生費用。

在 Visual Studio Code 終端中，執行下列命令：

az group delete --resource-group ToyWebsiteTest --yes --no-wait
az group delete --resource-group ToyWebsiteProduction --yes --no-wait

資源群組會在背景中刪除。

Remove-AzResourceGroup -Name ToyWebsiteTest -Force
Remove-AzResourceGroup -Name ToyWebsiteProduction -Force