Complete hosting migration to Azure

[thekaveman]

We have an initial CI/CD pipeline working for deployments into Azure. This epic tracks the outstanding tasks before we are "officially" in Azure.

Acceptance Criteria

• The app no longer deploys to AWS
• There are at least 2 separate deployment slots in the Azure environment (in addition to the production app):
  • dev
  • test
• The app is online and functioning at the corresponding URL
  • dev-benefits.calitp.org
  • test-benefits.calitp.org
  • benefits.calitp.org

Tasks

• Get traffic logs to appear for Azure apps #631
• Upload and configure SSL cert
• Configure dev slot in Azure
  • App settings
  • Fixture - Update with changes from Login.gov IAL2 for age verification (seniors) #635
  • DNS
    • Azure verify CNAME
    • AppService custom domain
    • AppService custom domain cert binding
    • dev-benefits.calitp.org CNAME Azure FrontDoor configuration change
    • Custom domain configured in Azure FrontDoor Backend Host Header setting
  • Deployment settings
    • repository Webhook
    • Update Azure Deployment Center settings ghcr.io/cal-itp/benefits:dev
    • APPLICATIONINSIGHTS_CONNECTION_STRING see Get Azure exception monitoring working again #861
  • VNet integration
  • Update DMV IP allowlist
  • Run the complete flow on dev-benefits.calitp.org
• Update documentation
  • some in Chore: remove AWS deployment #603
  • chore: better integrate infrastructure documentation #670
• Chore: remove AWS deployment #603
• Configure test slot in Azure
  • App settings
  • Fixture - Update with changes from Login.gov IAL2 for age verification (seniors) #635
  • DNS
    • Remove NS records for AWS
    • Azure verify CNAME
    • test-benefits.calitp.org CNAME
    • AppService custom domain
    • AppService custom domain cert binding
    • Azure FrontDoor configuration for new app service slot
    • Custom domain configured in Azure FrontDoor Backend Host Header setting
  • Deployment settings
    • repository Webhook
    • Update Azure Deployment Center settings ghcr.io/cal-itp/benefits:test
    • APPLICATIONINSIGHTS_CONNECTION_STRING see Get Azure exception monitoring working again #861
  • VNet integration
• Configure production app in Azure
  • App settings
  • Fixtures
  • Path mapping for fixture
  • DNS
    • Remove NS records for AWS
    • Azure verify awverify.benefits.calitp.org CNAME awverify.as-cdt-pub-vip-calitp-p-001.azurewebsites.net
    • benefits.calitp.org CNAME fd-cdt-shrd-p003.azurefd.net
    • AppService custom domain
    • AppService custom domain cert binding
    • Azure FrontDoor configuration for new app service slot @cal-itp/cdt-devsecops
    • Custom domain configured in Azure FrontDoor Backend Host Header setting @cal-itp/cdt-devsecops
  • Deployment settings
    • Repository webhook
    • APPLICATIONINSIGHTS_CONNECTION_STRING see Get Azure exception monitoring working again #861
  • VNet integration

Additional context

Prior work towards this:

• Update dev deploy to push into Azure #586
• Feat: configure Azure deploy for dev env #587
• Fix: use the correct azure deploy step #588
• Fix: remove azure deploy steps #589
• Chore: temp change to trigger CI #590
• Feat: try Azure deploy again #592
• Fix: remove deploy to Azure web apps #593
• Chore: undo temp change in UI #594

[thekaveman]

Currently blocked waiting for CDT to create the Production subscription in Azure.

[thekaveman]

• Currently unable to connect to CDT Auth Server in UAT:

  

• Currently blocked because we can't Get traffic logs to appear for Azure apps #631 so cannot diagnose issue properly

[thekaveman]

• Fixed the connection with CDT AuthServer for dev slot
  • Azure FrontDoor Origin setting, adding to checklist for test and prod slots
• Proceeding with Chore: remove AWS deployment #603

[thekaveman]

As noted in #861, we removed the APPLICATIONINSIGHTS_CONNECTION_STRING from dev and prod (it was not set in test) to workaround a bug and get the app live.

Will use that issue to track adding these settings back in.

[thekaveman]

We are live at all 3 environments in Azure!