S04 Deployment Script Customization

S04 Deployment Script Customization

Overview

The deploy.ps1 script has been customized from the SAIF reference implementation to align with S04-service-validation scenario naming conventions and workflow.

Key Customizations

Resource Naming

Resource Groups:

• Pattern: rg-s04-validation-{region-suffix}
• Examples:
  • Sweden Central: rg-s04-validation-swc01
  • Germany West Central: rg-s04-validation-gwc01
  • West Europe: rg-s04-validation-weu01
  • North Europe: rg-s04-validation-neu01

Previous (SAIF): rg-saifv2-{gwc01|swc01}

Region Configuration

Default Region: swedencentral (changed from germanywestcentral)

Supported Regions:

• swedencentral (default)
• germanywestcentral
• westeurope
• northeurope

Aligns with repository default region policy.

Tagging

Application Tag: S04-Service-Validation (default)

• Previous: SAIF

Environment Tag: demo

• Previous: hackathon

Purpose Tag: Service Validation and Testing Demo

• Previous: Security Training

Container Images

Image Name: s04/api:latest

• Previous: saifv2/api:latest

Build Source: ../app (relative to scripts folder)

• Contains SAIF api-v2 application adapted for S04

Deployment Names

Deployment Name: s04-validation-{timestamp}

• Previous: main-v2-{timestamp}

User Guidance

Post-Deployment Output: Enhanced with next steps for testing phases:

Next Steps:
  1. Run load tests: .\testing\load-testing\Run-LoadTest.ps1
  2. Execute chaos experiments: .\testing\chaos\Run-ChaosExperiment.ps1
  3. Perform UAT: .\testing\uat\Run-UATTests.ps1

Script References

SQL Configuration Script: Configure-SqlAccess.ps1

• Previous: Configure-SAIF-SqlAccess.ps1

Usage

Basic Deployment

# Deploy to Sweden Central (default)
.\scripts\deploy.ps1

# Deploy to Germany West Central
.\scripts\deploy.ps1 -location germanywestcentral

# Deploy to custom resource group
.\scripts\deploy.ps1 -resourceGroupName "rg-my-validation-test"

Advanced Options

# Infrastructure only (skip containers)
.\scripts\deploy.ps1 -skipContainers

# Skip SQL access configuration
.\scripts\deploy.ps1 -skipSqlAccessConfig

# Custom firewall rule and roles
.\scripts\deploy.ps1 -FirewallRuleName "dev-laptop" -GrantRoles db_datareader,db_datawriter

# User-assigned managed identity
.\scripts\deploy.ps1 -UserAssignedClientId "<guid>"

Prerequisites

• ✅ Azure CLI installed (authentication pre-configured)
• ✅ PowerShell 5.1+ or PowerShell Core 7+
• ✅ Docker installed (for container builds)
• ✅ Contributor access to Azure subscription
• ✅ Sufficient quota for:
  • App Service Plan (Premium P1v3)
  • Azure SQL Database (S1 tier)
  • Azure Container Registry (Standard)

Infrastructure Path

The script references: ../infra/main.bicep (relative to scripts folder)

Full Path: /scenarios/S04-service-validation/solution/infra/main.bicep

Validation

After deployment, verify:

1. Resource Group Created:

   az group show --name rg-s04-validation-swc01 --query "{name:name,location:location,provisioningState:properties.provisioningState}"
   

2. Application Accessible:

   • API: https://app-{name}.azurewebsites.net
   • API Docs: https://app-{name}.azurewebsites.net/docs

3. Managed Identity Configured:

   az webapp identity show --name <api-app-name> --resource-group rg-s05-validation-swc01
   

4. SQL Access (for Managed Identity):

   # Test SQL whoami endpoint
   curl https://<api-url>/api/sqlwhoami
   

Troubleshooting

Container Build Fails

# Verify Docker is running
docker version

# Verify ACR permissions
az acr login --name <acr-name>

SQL Connection Issues

# Run SQL access configuration manually
.\scripts\Configure-SqlAccess.ps1 -location swedencentral -ResourceGroupName rg-s05-validation-swc01

Deployment Timeout

# Check deployment status
az deployment group show --name s05-validation-<timestamp> --resource-group rg-s05-validation-swc01

# View deployment logs
az deployment group list --resource-group rg-s05-validation-swc01

Cleanup

# Delete all resources
az group delete --name rg-s05-validation-swc01 --yes --no-wait

Related Files

• deploy.ps1 - Main deployment script
• Configure-SqlAccess.ps1 - SQL firewall and managed identity configuration
• Update-Containers.ps1 - Container update script (if exists)
• ../infra/main.bicep - Infrastructure template (solution/infra/main.bicep)
• ../app/ - Application source code (solution/app/)
• ../web/ - Web frontend source code (solution/web/)

Time Savings

Manual Deployment: 2-3 hours (infrastructure + app + configuration)

With Script: 15-20 minutes (fully automated)

Savings: 85-90% reduction in deployment time

Note: This script is based on SAIF Deploy-SAIF-v2.ps1 and has been customized for the S05 Service Validation scenario. For SAIF-specific deployment, refer to the original SAIF repository.