job-deploy.yml

name: Deploy Job

on:
  workflow_call:
    inputs:
      trigger_type:
        description: 'Trigger type (workflow_dispatch, pull_request, schedule)'
        required: true
        type: string
      runner_os:
        description: 'Runner OS (ubuntu-latest or windows-latest)'
        required: true
        type: string
      azure_location:
        description: 'Azure Location For Deployment'
        required: false
        default: 'australiaeast'
        type: string
      resource_group_name:
        description: 'Resource Group Name (Optional)'
        required: false
        default: ''
        type: string
      waf_enabled:
        description: 'Enable WAF'
        required: false
        default: false
        type: boolean
      EXP:
        description: 'Enable EXP'
        required: false
        default: false
        type: boolean
      build_docker_image:
        description: 'Build And Push Docker Image (Optional)'
        required: false
        default: false
        type: boolean
      cleanup_resources:
        description: 'Cleanup Deployed Resources'
        required: false
        default: false
        type: boolean
      run_e2e_tests:
        description: 'Run End-to-End Tests'
        required: false
        default: 'GoldenPath-Testing'
        type: string
      existing_webapp_url:
        description: 'Existing Container WebApp URL (Skips Deployment)'
        required: false
        default: ''
        type: string
      AZURE_ENV_LOG_ANALYTICS_WORKSPACE_ID:
        description: 'Log Analytics Workspace ID (Optional)'
        required: false
        default: ''
        type: string
      AZURE_EXISTING_AI_PROJECT_RESOURCE_ID:
        description: 'AI Project Resource ID (Optional)'
        required: false
        default: ''
        type: string
      docker_image_tag:
        description: 'Docker Image Tag from build job'
        required: false
        default: ''
        type: string
    outputs:
      RESOURCE_GROUP_NAME:
        description: "Resource Group Name"
        value: ${{ jobs.azure-setup.outputs.RESOURCE_GROUP_NAME }}
      WEBAPP_URL:
        description: "Container Web App URL"
        value: ${{ jobs.deploy-linux.outputs.WEBAPP_URL || jobs.deploy-windows.outputs.WEBAPP_URL }}
      MACAE_URL_API:
        description: "MACAE API URL"
        value: ${{ jobs.deploy-linux.outputs.MACAE_URL_API || jobs.deploy-windows.outputs.MACAE_URL_API }}
      ENV_NAME:
        description: "Environment Name"
        value: ${{ jobs.azure-setup.outputs.ENV_NAME }}
      AZURE_LOCATION:
        description: "Azure Location"
        value: ${{ jobs.azure-setup.outputs.AZURE_LOCATION }}
      AZURE_ENV_OPENAI_LOCATION:
        description: "Azure OpenAI Location"
        value: ${{ jobs.azure-setup.outputs.AZURE_ENV_OPENAI_LOCATION }}
      IMAGE_TAG:
        description: "Docker Image Tag Used"
        value: ${{ jobs.azure-setup.outputs.IMAGE_TAG }}
      QUOTA_FAILED:
        description: "Quota Check Failed Flag"
        value: ${{ jobs.azure-setup.outputs.QUOTA_FAILED }}

env:
  GPT_MIN_CAPACITY: 150
  O4_MINI_MIN_CAPACITY: 50
  GPT41_MINI_MIN_CAPACITY: 50
  BRANCH_NAME: ${{ github.event.workflow_run.head_branch || github.head_ref || github.ref_name }}
  WAF_ENABLED: ${{ inputs.trigger_type == 'workflow_dispatch' && (inputs.waf_enabled || false) || false }}
  EXP: ${{ inputs.trigger_type == 'workflow_dispatch' && (inputs.EXP || false) || false }}
  CLEANUP_RESOURCES: ${{ inputs.trigger_type != 'workflow_dispatch' || inputs.cleanup_resources }}
  RUN_E2E_TESTS: ${{ inputs.trigger_type == 'workflow_dispatch' && (inputs.run_e2e_tests || 'GoldenPath-Testing') || 'GoldenPath-Testing' }}
  BUILD_DOCKER_IMAGE: ${{ inputs.trigger_type == 'workflow_dispatch' && (inputs.build_docker_image || false) || false }}

jobs:
  azure-setup:
    name: Azure Setup
    if: inputs.trigger_type != 'workflow_dispatch' || inputs.existing_webapp_url == '' || inputs.existing_webapp_url == null
    runs-on: ubuntu-latest
    outputs:
      RESOURCE_GROUP_NAME: ${{ steps.check_create_rg.outputs.RESOURCE_GROUP_NAME }}
      ENV_NAME: ${{ steps.generate_env_name.outputs.ENV_NAME }}
      AZURE_LOCATION: ${{ steps.set_region.outputs.AZURE_LOCATION }}
      AZURE_ENV_OPENAI_LOCATION: ${{ steps.set_region.outputs.AZURE_ENV_OPENAI_LOCATION }}
      IMAGE_TAG: ${{ steps.determine_image_tag.outputs.IMAGE_TAG }}
      QUOTA_FAILED: ${{ steps.quota_failure_output.outputs.QUOTA_FAILED }}
      
    steps:
      - name: Validate and Auto-Configure EXP
        shell: bash
        run: |
          echo "🔍 Validating EXP configuration..."
          
          if [[ "${{ inputs.EXP }}" != "true" ]]; then
            if [[ -n "${{ inputs.AZURE_ENV_LOG_ANALYTICS_WORKSPACE_ID }}" ]] || [[ -n "${{ inputs.AZURE_EXISTING_AI_PROJECT_RESOURCE_ID }}" ]]; then
              echo "🔧 AUTO-ENABLING EXP: EXP parameter values were provided but EXP was not explicitly enabled."
              echo ""
              echo "You provided values for:"
              [[ -n "${{ inputs.AZURE_ENV_LOG_ANALYTICS_WORKSPACE_ID }}" ]] && echo "  - Azure Log Analytics Workspace ID: '${{ inputs.AZURE_ENV_LOG_ANALYTICS_WORKSPACE_ID }}'"
              [[ -n "${{ inputs.AZURE_EXISTING_AI_PROJECT_RESOURCE_ID }}" ]] && echo "  - Azure AI Project Resource ID: '${{ inputs.AZURE_EXISTING_AI_PROJECT_RESOURCE_ID }}'"
              echo ""
              echo "✅ Automatically enabling EXP to use these values."
              echo "EXP=true" >> $GITHUB_ENV
              echo "📌 EXP has been automatically enabled for this deployment."
            fi
          fi
          
      - name: Checkout Code
        uses: actions/checkout@v4

      - name: Login to Azure
        shell: bash
        run: |
          az login --service-principal -u ${{ secrets.AZURE_CLIENT_ID }} -p ${{ secrets.AZURE_CLIENT_SECRET }} --tenant ${{ secrets.AZURE_TENANT_ID }}
          az account set --subscription ${{ secrets.AZURE_SUBSCRIPTION_ID }}
      
      - name: Run Quota Check
        id: quota-check
        run: |
          export AZURE_CLIENT_ID=${{ secrets.AZURE_CLIENT_ID }}
          export AZURE_TENANT_ID=${{ secrets.AZURE_TENANT_ID }}
          export AZURE_CLIENT_SECRET=${{ secrets.AZURE_CLIENT_SECRET }}
          export AZURE_SUBSCRIPTION_ID="${{ secrets.AZURE_SUBSCRIPTION_ID }}"
          export GPT_MIN_CAPACITY=${{ env.GPT_MIN_CAPACITY }}
          export O4_MINI_MIN_CAPACITY=${{ env.O4_MINI_MIN_CAPACITY }}
          export GPT41_MINI_MIN_CAPACITY=${{ env.GPT41_MINI_MIN_CAPACITY }}
          export AZURE_REGIONS="${{ vars.AZURE_REGIONS }}"

          chmod +x infra/scripts/checkquota.sh
          if ! infra/scripts/checkquota.sh; then
            # If quota check fails due to insufficient quota, set the flag
            if grep -q "No region with sufficient quota found" infra/scripts/checkquota.sh; then
              echo "QUOTA_FAILED=true" >> $GITHUB_ENV
            fi
            exit 1  # Fail the pipeline if any other failure occurs
          fi

      - name: Set Quota Failure Output
        id: quota_failure_output
        if: env.QUOTA_FAILED == 'true'
        shell: bash
        run: |
          echo "QUOTA_FAILED=true" >> $GITHUB_OUTPUT
          echo "Quota check failed - will notify via separate notification job"
      
      - name: Fail Pipeline if Quota Check Fails
        if: env.QUOTA_FAILED == 'true'
        shell: bash
        run: exit 1
      
      - name: Set Deployment Region
        id: set_region
        shell: bash
        run: |
          echo "Selected Region from Quota Check: $VALID_REGION"
          echo "AZURE_ENV_OPENAI_LOCATION=$VALID_REGION" >> $GITHUB_ENV
          echo "AZURE_ENV_OPENAI_LOCATION=$VALID_REGION" >> $GITHUB_OUTPUT
          
          if [[ "${{ inputs.trigger_type }}" == "workflow_dispatch" && -n "${{ inputs.azure_location }}" ]]; then
            USER_SELECTED_LOCATION="${{ inputs.azure_location }}"
            echo "Using user-selected Azure location: $USER_SELECTED_LOCATION"
            echo "AZURE_LOCATION=$USER_SELECTED_LOCATION" >> $GITHUB_ENV
            echo "AZURE_LOCATION=$USER_SELECTED_LOCATION" >> $GITHUB_OUTPUT
          else
            echo "Using location from quota check for automatic triggers: $VALID_REGION"
            echo "AZURE_LOCATION=$VALID_REGION" >> $GITHUB_ENV
            echo "AZURE_LOCATION=$VALID_REGION" >> $GITHUB_OUTPUT
          fi

      - name: Generate Resource Group Name
        id: generate_rg_name
        shell: bash
        run: |
          # Check if a resource group name was provided as input
          if [[ -n "${{ inputs.resource_group_name }}" ]]; then
            echo "Using provided Resource Group name: ${{ inputs.resource_group_name }}"
            echo "RESOURCE_GROUP_NAME=${{ inputs.resource_group_name }}" >> $GITHUB_ENV
          else
            echo "Generating a unique resource group name..."
            ACCL_NAME="macaev3"
            SHORT_UUID=$(uuidgen | cut -d'-' -f1)
            UNIQUE_RG_NAME="arg-${ACCL_NAME}-${SHORT_UUID}"
            echo "RESOURCE_GROUP_NAME=${UNIQUE_RG_NAME}" >> $GITHUB_ENV
            echo "Generated RESOURCE_GROUP_NAME: ${UNIQUE_RG_NAME}"
          fi

      - name: Install Bicep CLI
        shell: bash
        run: az bicep install

      - name: Check and Create Resource Group
        id: check_create_rg
        shell: bash
        run: |
          set -e  
          echo "🔍 Checking if resource group '$RESOURCE_GROUP_NAME' exists..."
          rg_exists=$(az group exists --name $RESOURCE_GROUP_NAME)
          if [ "$rg_exists" = "false" ]; then
            echo "📦 Resource group does not exist. Creating new resource group '$RESOURCE_GROUP_NAME' in location '$AZURE_LOCATION'..."
            az group create --name $RESOURCE_GROUP_NAME --location $AZURE_LOCATION || { echo "❌ Error creating resource group"; exit 1; }
            echo "✅ Resource group '$RESOURCE_GROUP_NAME' created successfully."
          else
            echo "✅ Resource group '$RESOURCE_GROUP_NAME' already exists. Deploying to existing resource group."
          fi
          echo "RESOURCE_GROUP_NAME=$RESOURCE_GROUP_NAME" >> $GITHUB_OUTPUT
          echo "RESOURCE_GROUP_NAME=$RESOURCE_GROUP_NAME" >> $GITHUB_ENV

      - name: Generate Unique Solution Prefix
        id: generate_solution_prefix
        shell: bash
        run: |
          set -e
          COMMON_PART="psldg"
          TIMESTAMP=$(date +%s)  
          UPDATED_TIMESTAMP=$(echo $TIMESTAMP | tail -c 6) 
          UNIQUE_SOLUTION_PREFIX="${COMMON_PART}${UPDATED_TIMESTAMP}"
          echo "SOLUTION_PREFIX=${UNIQUE_SOLUTION_PREFIX}" >> $GITHUB_ENV
          echo "Generated SOLUTION_PREFIX: ${UNIQUE_SOLUTION_PREFIX}" 

      - name: Determine Docker Image Tag
        id: determine_image_tag
        shell: bash
        run: |
          if [[ "${{ env.BUILD_DOCKER_IMAGE }}" == "true" ]]; then
            if [[ -n "${{ inputs.docker_image_tag }}" ]]; then
              IMAGE_TAG="${{ inputs.docker_image_tag }}"
              echo "🔗 Using Docker image tag from build job: $IMAGE_TAG"
            else
              echo "❌ Docker build job failed or was skipped, but BUILD_DOCKER_IMAGE is true"
              exit 1
            fi
          else
            echo "🏷️ Using existing Docker image based on branch..."
            BRANCH_NAME="${{ env.BRANCH_NAME }}"
            echo "Current branch: $BRANCH_NAME"
            
            if [[ "$BRANCH_NAME" == "main" ]]; then
              IMAGE_TAG="latest_v3"
            elif [[ "$BRANCH_NAME" == "dev-v3" ]]; then
              IMAGE_TAG="dev_v3"
            elif [[ "$BRANCH_NAME" == "hotfix" ]]; then
              IMAGE_TAG="hotfix"
            else
              IMAGE_TAG="latest_v3"
            fi
            echo "Using existing Docker image tag: $IMAGE_TAG"
          fi
          
          echo "IMAGE_TAG=$IMAGE_TAG" >> $GITHUB_ENV
          echo "IMAGE_TAG=$IMAGE_TAG" >> $GITHUB_OUTPUT

      - name: Generate Unique Environment Name
        id: generate_env_name
        shell: bash
        run: |
          COMMON_PART="pslc"
          TIMESTAMP=$(date +%s)
          UPDATED_TIMESTAMP=$(echo $TIMESTAMP | tail -c 6)
          UNIQUE_ENV_NAME="${COMMON_PART}${UPDATED_TIMESTAMP}"
          echo "ENV_NAME=${UNIQUE_ENV_NAME}" >> $GITHUB_ENV
          echo "Generated Environment Name: ${UNIQUE_ENV_NAME}"
          echo "ENV_NAME=${UNIQUE_ENV_NAME}" >> $GITHUB_OUTPUT

      - name: Display Workflow Configuration to GitHub Summary
        shell: bash
        run: |
          echo "## 📋 Workflow Configuration Summary" >> $GITHUB_STEP_SUMMARY
          echo "" >> $GITHUB_STEP_SUMMARY
          echo "| Configuration | Value |" >> $GITHUB_STEP_SUMMARY
          echo "|---------------|-------|" >> $GITHUB_STEP_SUMMARY
          echo "| **Trigger Type** | \`${{ github.event_name }}\` |" >> $GITHUB_STEP_SUMMARY
          echo "| **Branch** | \`${{ env.BRANCH_NAME }}\` |" >> $GITHUB_STEP_SUMMARY
          echo "| **Runner OS** | \`${{ inputs.runner_os }}\` |" >> $GITHUB_STEP_SUMMARY
          echo "| **WAF Enabled** | ${{ env.WAF_ENABLED == 'true' && '✅ Yes' || '❌ No' }} |" >> $GITHUB_STEP_SUMMARY
          echo "| **EXP Enabled** | ${{ env.EXP == 'true' && '✅ Yes' || '❌ No' }} |" >> $GITHUB_STEP_SUMMARY
          echo "| **Run E2E Tests** | \`${{ env.RUN_E2E_TESTS }}\` |" >> $GITHUB_STEP_SUMMARY
          echo "| **Cleanup Resources** | ${{ env.CLEANUP_RESOURCES == 'true' && '✅ Yes' || '❌ No' }} |" >> $GITHUB_STEP_SUMMARY
          echo "| **Build Docker Image** | ${{ env.BUILD_DOCKER_IMAGE == 'true' && '✅ Yes' || '❌ No' }} |" >> $GITHUB_STEP_SUMMARY
          
          if [[ "${{ inputs.trigger_type }}" == "workflow_dispatch" && -n "${{ inputs.azure_location }}" ]]; then
            echo "| **Azure Location** | \`${{ inputs.azure_location }}\` (User Selected) |" >> $GITHUB_STEP_SUMMARY
          fi
          
          if [[ -n "${{ inputs.resource_group_name }}" ]]; then
            echo "| **Resource Group** | \`${{ inputs.resource_group_name }}\` (Pre-specified) |" >> $GITHUB_STEP_SUMMARY
          else
            echo "| **Resource Group** | \`${{ env.RESOURCE_GROUP_NAME }}\` (Auto-generated) |" >> $GITHUB_STEP_SUMMARY
          fi
          
          echo "" >> $GITHUB_STEP_SUMMARY
          
          if [[ "${{ inputs.trigger_type }}" != "workflow_dispatch" ]]; then
            echo "ℹ️ **Note:** Automatic Trigger - Using Non-WAF + Non-EXP configuration" >> $GITHUB_STEP_SUMMARY
          else
            echo "ℹ️ **Note:** Manual Trigger - Using user-specified configuration" >> $GITHUB_STEP_SUMMARY
          fi

  deploy-linux:
    name: Deploy on Linux
    needs: azure-setup
    if: inputs.runner_os == 'ubuntu-latest' && !cancelled() && needs.azure-setup.result == 'success'
    uses: ./.github/workflows/job-deploy-linux.yml
    with:
      ENV_NAME: ${{ needs.azure-setup.outputs.ENV_NAME }}
      AZURE_ENV_OPENAI_LOCATION: ${{ needs.azure-setup.outputs.AZURE_ENV_OPENAI_LOCATION }}
      AZURE_LOCATION: ${{ needs.azure-setup.outputs.AZURE_LOCATION }}
      RESOURCE_GROUP_NAME: ${{ needs.azure-setup.outputs.RESOURCE_GROUP_NAME }}
      IMAGE_TAG: ${{ needs.azure-setup.outputs.IMAGE_TAG }}
      BUILD_DOCKER_IMAGE: ${{ inputs.build_docker_image || 'false' }}
      EXP: ${{ inputs.EXP || 'false' }}
      WAF_ENABLED: ${{ inputs.waf_enabled == true && 'true' || 'false' }}
      AZURE_ENV_LOG_ANALYTICS_WORKSPACE_ID: ${{ inputs.AZURE_ENV_LOG_ANALYTICS_WORKSPACE_ID }}
      AZURE_EXISTING_AI_PROJECT_RESOURCE_ID: ${{ inputs.AZURE_EXISTING_AI_PROJECT_RESOURCE_ID }}
    secrets: inherit

  deploy-windows:
    name: Deploy on Windows
    needs: azure-setup
    if: inputs.runner_os == 'windows-latest' && !cancelled() && needs.azure-setup.result == 'success'
    uses: ./.github/workflows/job-deploy-windows.yml
    with:
      ENV_NAME: ${{ needs.azure-setup.outputs.ENV_NAME }}
      AZURE_ENV_OPENAI_LOCATION: ${{ needs.azure-setup.outputs.AZURE_ENV_OPENAI_LOCATION }}
      AZURE_LOCATION: ${{ needs.azure-setup.outputs.AZURE_LOCATION }}
      RESOURCE_GROUP_NAME: ${{ needs.azure-setup.outputs.RESOURCE_GROUP_NAME }}
      IMAGE_TAG: ${{ needs.azure-setup.outputs.IMAGE_TAG }}
      BUILD_DOCKER_IMAGE: ${{ inputs.build_docker_image || 'false' }}
      EXP: ${{ inputs.EXP || 'false' }}
      WAF_ENABLED: ${{ inputs.waf_enabled == true && 'true' || 'false' }}
      AZURE_ENV_LOG_ANALYTICS_WORKSPACE_ID: ${{ inputs.AZURE_ENV_LOG_ANALYTICS_WORKSPACE_ID }}
      AZURE_EXISTING_AI_PROJECT_RESOURCE_ID: ${{ inputs.AZURE_EXISTING_AI_PROJECT_RESOURCE_ID }}
    secrets: inherit