Cost optimisation for dev/test client app, and GitHub secret integration

Author: russdaygh

README.md

@@ -1,15 +1,17 @@
 # PocketDDD
 
 # Running terraform locally
-Ensure both terraform and the Azure CLI are installed
+Ensure the Azure, GitHub, and terraform CLIs are installed
 ```
-brew install terraform
 brew install azure-cli
+bre install gh
+brew install terraform
 ```
 
-Login to Azure
+Login to Azure and GitHub
 ```
 az login
+gh auth login
 ```
 
 From the `terraform` directory run init, plan, then apply if happy with the changes.

terraform/blazor_client.tf

@@ -2,4 +2,14 @@ resource "azurerm_static_web_app" "blazor-client" {
   name                = "${local.resource_prefix}-blazorclient"
   location            = "westeurope"
   resource_group_name = azurerm_resource_group.rg.name
+
+  sku_tier = var.client_sku_tier
+  sku_size = var.client_sku_size
+}
+
+resource "github_actions_environment_secret" "test_secret" {
+  repository       = data.github_repository.repo.name
+  environment      = github_repository_environment.repo_environment.environment
+  secret_name      = "AZURE_STATIC_WEB_APPS_API_TOKEN"
+  plaintext_value  = azurerm_static_web_app.blazor-client.api_key
 }

terraform/main.tf

@@ -21,3 +21,11 @@ locals {
   db_connection_string = "Server=tcp:${local.sql_server_name}.database.windows.net,1433;Initial Catalog=pocketddd-dev-sqldatabase;Persist Security Info=False;User ID=${random_string.admin_login.result};Password=${random_password.admin_password.result};MultipleActiveResultSets=False;Encrypt=True;TrustServerCertificate=False;Connection Timeout=30;"
 }
 
+data "github_repository" "repo" {
+  name = "PocketDDD"
+}
+
+resource "github_repository_environment" "repo_environment" {
+  repository       = "PocketDDD"
+  environment      = var.env
+}

terraform/terraform.tf

@@ -4,6 +4,10 @@ terraform {
       source  = "hashicorp/azurerm"
       version = "3.100.0"
     }
+    github = {
+      source = "integrations/github"
+      version = "6.2.1"
+    }
     random = {
       source  = "hashicorp/random"
       version = "3.6.1"
@@ -16,4 +20,8 @@ provider "azurerm" {
   features {
 
   }
+}
+
+provider "github" {
+  owner = "dddsw"
 }

terraform/variables.tf

@@ -26,4 +26,16 @@ variable "api_always_on" {
   default = true
   nullable = false
   type = bool
-}
+}
+
+variable "client_sku_tier" {
+  default = ""
+  nullable = false
+  type = string
+}
+
+variable "client_sku_size" {
+  default = ""
+  nullable = false
+  type = string
+}

tfvars/dev.tfvars

@@ -2,4 +2,6 @@ env = "dev"
 sql_db_sku = "Basic"
 sql_max_storage = "2"
 api_app_service_sku = "F1"
-api_always_on = false
+api_always_on = false
+client_sku_tier = "Free"
+client_sku_size = "Free"

tfvars/prod.tfvars

@@ -2,4 +2,6 @@ env = "prod"
 sql_db_sku = "S0"
 sql_max_storage = "10"
 api_app_service_sku = "B1"
-api_always_on = true
+api_always_on = true
+client_sku_tier = "Standard"
+client_sku_size = "Standard"

tfvars/test.tfvars

@@ -2,4 +2,6 @@ env = "dev"
 sql_db_sku = "Basic"
 sql_max_storage = "2"
 api_app_service_sku = "F1"
-api_always_on = false
+api_always_on = false
+client_sku_tier = "Free"
+client_sku_size = "Free"