main.go

package main

import (
	nativecdn "github.com/pulumi/pulumi-azure-native-sdk/cdn/v2"
	"github.com/pulumi/pulumi-azure-native-sdk/resources/v2"
	"github.com/pulumi/pulumi-azure-native-sdk/storage/v2"
	"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/core"
	"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/dns"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config"
)

type cfgKeys struct {
	// pulumi/env names
	projectKey string
	envKey     string
	siteKey    string
	// Azure service values we pull in from projects external to this (for now)
	thisAzureTenantId   string
	dnsResourceGrp      string
	dnsLookupZone       string
	dnsRecordTTL        string
	cdnAzureId          string
	kvAzureSubscription string // keyvault can live elsewhere
	kvAzureResourceGrp  string
	kvAzureName         string
	// Github service values pulled in from other projects external to this one
	ghAppSrcRepo string
}

type svcPrincipals struct {
	cicd ServicePrincipalEnvelope
}

type dnsRecords struct {
	a     *dns.ARecord
	cname *dns.CNameRecord
}

type projectResources struct {
	pulumiCtx *pulumi.Context
	cfg       *config.Config
	cfgKeys   cfgKeys
	// Azure service values for top-level Subscription
	thisAzureSubscription *core.LookupSubscriptionResult
	svcPrincipals         svcPrincipals
	dnsRecords            dnsRecords
	webResourceGrp        *resources.ResourceGroup
	webStorageAccount     *storage.StorageAccount
	webStaticEp           pulumi.StringOutput
	webCdnProfile         *nativecdn.Profile
	webCdnEp              *nativecdn.Endpoint
	webDnsZone            *dns.LookupZoneResult
	webFqdn               pulumi.StringOutput
}

const PROD = "prod"
const DEV = "dev"

func main() {

	pulumi.Run(func(ctx *pulumi.Context) error {
		// Init common resources
		pr := projectResources{
			pulumiCtx: ctx,
			cfg:       config.New(ctx, ""),
		}
		// Init config keys from Pulumi key:values set per project/env
		err := pr.initConfigKeys()
		if err != nil {
			return err
		}

		// Create an Azure Resource Group
		err = pr.createResourceGroup()
		if err != nil {
			return err
		}

		// Create an Azure Storage Account to host our site
		err = pr.newStorageAccount()
		if err != nil {
			return err
		}

		// Enable static web hosting on storage account
		err = pr.enableStaticWebHostOnStorageAccount()
		if err != nil {
			return err
		}

		// Strip leading 'https://' and trailing '/' from web endpoint address
		// for the Storage Account's static website URL
		pr.webStaticEp = stripWebStorageEndPointUrl(pr.webStorageAccount)

		// Create CDN Profile for usage by our endpoint(s)
		err = pr.createCdnProfile()
		if err != nil {
			return err
		}

		// Create CDN Endpoint using newly created CDN Profile
		err = pr.createCdnEndpoint()
		if err != nil {
			return err
		}

		// Look up DNS zone based on pulumi stack config var for external resource group that houses DNS records
		err = pr.lookupDnsZone()
		if err != nil {
			return err
		}

		// Set up domains depending on env
		err = pr.createDnsRecordByEnv()
		if err != nil {
			return err
		}

		// Set up TLS depending on environment and custom domain types
		err = pr.setupTlsTermination()
		if err != nil {
			return err
		}

		// Create+authorize Service Principal to be used in CI/CD process (uploading new content, invalidating cdn cache)
		err = pr.generateCICDServicePrincipal()
		if err != nil {
			return err
		}

		// Export service principal secret/id, cdn profile/endpoint, resource group, storage acct
		// to GitHub repo Deployment secrets/vars where Actions build and deploy to each environment re: gitops flow
		err = pr.exportDeployEnvDataToGitHubRepo()
		if err != nil {
			return err
		}

		return nil
	})
}