Assignment 3 - Jake Tonani (Redo)

[npcjake]

Assignment 3 - Jake Tonani

Azure Resource Group

https://portal.azure.com/#@ewueagles.onmicrosoft.com/resource/subscriptions/d7dc33ae-d588-44a6-bda7-3e08dbd66d6f/resourceGroups/rg-assignment3/overview

GitHub Repo

https://github.com/npcjake/EWU-CSCD396-2026-Spring

---

Checklist

1. Azure Function Bound to Service Bus

• Managed Identity enabled on the Function App (identity { type = "SystemAssigned" } in Terraform)
• Storage Account created for messages (ewua3jake26msg)
• Function App identity granted Storage Blob Data Contributor on the messages storage account
• Function App identity granted Azure Service Bus Data Receiver on the Service Bus namespace
• The function (Assignment3/function-app/src/functions/serviceBusHandler.js) triggers on the messages queue and writes each message as a JSON blob to the messages container

2. Container App Writes to Service Bus

• System-assigned Managed Identity added to the Container App via Terraform
• Container App identity granted Azure Service Bus Data Sender on the Service Bus namespace
• The web app (Assignment3/container-app/server.js) has a text box and submit button that sends messages to the Service Bus queue using DefaultAzureCredential
• Live URL: https://ca-assign3-jake.lemonisland-77590730.eastus.azurecontainerapps.io

3. CI/CD Workflow Triggering

Application code deployment (.github/workflows/app-deploy.yml):

• Triggers on push to main when files change under Assignment3/container-app/** or Assignment3/function-app/**
• Builds Docker image → pushes to ACR → updates Container App
• Zips function code → deploys to Function App
• Does NOT run when only Terraform files change

Infrastructure deployment (.github/workflows/terraform-deploy.yml):

• Triggers on push to main when files change under Terraform/**
• Runs terraform apply to update infrastructure
• Does NOT deploy application code at the same time

Automatic app redeployment after Terraform:

• After terraform apply completes, the deploy-apps job in terraform-deploy.yml calls app-deploy.yml via workflow_call
• This ensures app code is always redeployed with any new infrastructure configuration

4. Access

• jcurry9@ewu.edu has Contributor access at the subscription level

[npcjake]

need to fix same issue from assingment 2 with tf

[npcjake]

@philspokas should be good!