...
Use the infrastructure pipeline to create and publish all Azure services to the correct resource group
Create/update application settings in the app service
Create/update all key vault values
Create/update the database schema
Create/update all application settings (ie appsettings.<environment>.json) in the solution
Ensure all API permissions needed by the application in the Azure AD app registration have been added
Expose scopes so that other applications can subscribe to them through API permissions. These are the same scopes that are referenced in a client application's app settings for making requests to the service.
Add the application roles so that Azure AD users and groups can be assigned to them. The roles map 1-to-1 with the API scopes that we just exposed.
From the app registration’s Overview settings, navigate to the enterprise application settings and assign Azure AD user groups to a role in the application. Since this is a shared API, there are obviously many more groups to be added. Also notice that 1 entry must be made on a per application role basis.
Deploy the application to the app service using appropriate pipeline
Depending on environment, the app service may need to be set to load the new build of the application by selecting the latest container. In example below, prod is shown and continuous integration is turned off.
3. Release Steps for TEST
Set version of application in appsettings.json and commit to develop branch
Break off your release branch from develop ensuring you are pointing at the correct commit, name it according to version and place it in release directory
Publish the release branch to TEST environment by running the corresponding CI pipeline. You will need to edit the pipeline and set the correct branch to deploy.
4. Release Steps for PROD
Merge the release branch into master branch by submitting a pull request
Once the pull request is complete, tag the master branch with the version of application
Publish the master branch by running the corresponding CI pipeline. You should not have to edit the pipeline since it should already point to master branch. Simply launch a manual publish of the pipeline.
Log on to App Service and set the image tag to corresponding version that was just built from the pipeline