Update content

Author: christosgalano

.github/workflows/ci_cd.yaml

@@ -31,7 +31,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Set up Python 3.10
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5
         with:
           python-version: "3.10"
 
@@ -67,7 +67,7 @@ jobs:
 
       - name: Upload test and coverage results
         if: success() || failure()
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: pytest-results
           path: |
@@ -115,15 +115,15 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Log in to the Container registry
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build and push Docker image
         id: build-push-image
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v6
         with:
           context: ${{ github.workspace }}/src
           push: true

.github/workflows/codeql.yaml

@@ -32,11 +32,11 @@ jobs:
       uses: actions/checkout@v4
 
     - name: Initialize codeql
-      uses: github/codeql-action/init@v2
+      uses: github/codeql-action/init@v3
       with:
         languages: 'python'
 
     - name: Perform codeql analysis
-      uses: github/codeql-action/analyze@v2
+      uses: github/codeql-action/analyze@v3
       with:
         category: "/language:python"

.github/workflows/destroy_infra.yaml

@@ -0,0 +1,44 @@
+name: destroy-infra
+run-name: ${{ github.workflow }}
+on:
+  workflow_dispatch:
+    inputs:
+      deployment_name:
+        description: "Specify deployment name. Must have an output named 'resource_groups' which is an array with the names of the resource groups' to be deleted."
+        default: dwg-prod-deployment
+        required: true
+        type: string
+
+concurrency:
+  group: ${{ github.workflow }}
+  cancel-in-progress: true
+        
+jobs:
+  approve:
+    name: approve-infra-teardown
+    runs-on: ubuntu-latest
+    permissions:
+      issues: write
+    steps:
+      - name: Manual approval
+        uses: trstringer/manual-approval@v1.9.1
+        with:
+          approvers: christosgalano
+          minimum-approvals: 1
+          issue-title: "Approve teardown of infrastructure regarding deployment ${{ inputs.deployment_name }}"
+          secret: ${{ secrets.GITHUB_TOKEN }}
+  destroy:
+    name: destroy-infra
+    needs: approve
+    runs-on: ubuntu-latest
+    steps:
+      - name: Azure login
+        uses: Azure/login@v2
+        with:
+          creds: ${{ secrets.AZURE_CREDENTIALS }}
+
+      - name: Delete resource groups
+        shell: pwsh
+        run: |
+          $resource_groups = az deployment sub show -n ${{ inputs.deployment_name }} --query properties.outputs.resource_groups.value | convertfrom-json
+          $resource_groups | foreach -parallel { Write-Host "Deleting resource group $_ ..."; az group delete -n $_ -y }

README.md

@@ -1,16 +1,12 @@
 # DevOps with GitHub: FastAPI example
 
-[![ci-cd](https://github.com/christosgalano/devops-with-github-example/actions/workflows/ci_cd.yaml/badge.svg)](https://github.com/christosgalano/devops-with-github-example/actions/workflows/ci_cd.yaml)
-[![codeql](https://github.com/christosgalano/devops-with-github-example/actions/workflows/codeql.yaml/badge.svg)](https://github.com/christosgalano/devops-with-github-example/actions/workflows/codeql.yaml)
-[![deploy-infra](https://github.com/christosgalano/devops-with-github-example/actions/workflows/deploy_infra.yaml/badge.svg)](https://github.com/christosgalano/devops-with-github-example/actions/workflows/deploy_infra.yaml)
-
 ## Overview
 
 The purpose of this repository is to demonstrate how someone can leverage GitHub's numerous DevOps capabilities to streamline both application and infrastructure development and deployment processes.
 
-It consists of a FastAPI application, Bicep infrastructure as code (IaC), and GitHub workflows, collectively showcasing how to leverage different GitHub capabilities to simplify and automate the deployment process of an application to the cloud in a secure and reliable way. The application is deployed to Azure, but the same principles can be applied to any cloud provider or even on-premises infrastructure.
+It consists of a FastAPI application, Bicep infrastructure as code (IaC), and GitHub workflows, collectively showcasing how to leverage different GitHub capabilities to simplify and automate the deployment process of an application to the cloud securely and reliably. The application is deployed to Azure, but the same principles can be applied to any cloud provider or even on-premises infrastructure.
 
-The application is a simple API that returns the message "Hello " followed by each value provided in the path parameters, separated by commas.
+The simple API application returns the message "Hello " followed by each value provided in the path parameters, separated by commas.
 
 For example, if the path parameter is "world", the API will return "Hello world", whereas if the path parameters are "world" and "universe", the API will return "Hello world, universe".
 

src/requirements.txt

@@ -1,2 +1,2 @@
 fastapi>=0.93.0,<1.0.0
-uvicorn>=0.20.0,<0.25.0
+uvicorn>=0.20.0,<0.35.0

src/test-requirements.txt

@@ -1,4 +1,4 @@
 httpx>=0.23.0,<0.30.0
-black>=22.10.0,<24.0.0
-pytest>=7.2.2,<8.0.0
-pytest-cov>=4.0.0,<4.5.0
+black>=22.10.0,<25.0.0
+pytest>=7.2.2,<9.0.0
+pytest-cov>=4.0.0,<6.1.0