fix: deployment errors for the AI Agent GOV backend and enable a successful deploy to Azure Web App via GitHub Actions.

.deployment

@@ -0,0 +1,2 @@
+[config]
+project = src/backend

.dockerignore

@@ -0,0 +1,49 @@
+# Python
+__pycache__/
+*.pyc
+*.pyo
+*.pyd
+.Python
+*.so
+
+# Virtual environments
+.venv/
+venv/
+env/
+ENV/
+
+# Development
+.git/
+.gitignore
+*.md
+README*
+LICENSE
+tests/
+test_*
+*_test.py
+
+# IDE
+.vscode/
+.idea/
+*.swp
+*.swo
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Logs
+*.log
+logs/
+
+# Azure
+.azure/
+azure.yaml
+
+# Frontend
+../frontend/
+../src/frontend/
+
+# Large files
+*.zip
+*.tar.gz

.github/workflows/aiagentsfrontend2-AutoDeployTrigger-0cf35e2e-15fd-47a4-a226-5ca10a29dd5d.yml

@@ -0,0 +1,49 @@
+name: Trigger auto deployment for aiagentsfrontend2
+
+# When this action will be executed
+on:
+  # Automatically trigger it when detected changes in repo
+  push:
+    branches: 
+      [ main ]
+    paths:
+    - '**'
+    - '.github/workflows/aiagentsfrontend2-AutoDeployTrigger-0cf35e2e-15fd-47a4-a226-5ca10a29dd5d.yml'
+
+  # Allow manual trigger 
+  workflow_dispatch:      
+
+jobs:
+  build-and-deploy:
+    runs-on: ubuntu-latest
+    permissions: 
+      id-token: write #This is required for requesting the OIDC JWT Token
+      contents: read #Required when GH token is used to authenticate with private repo
+
+    steps:
+      - name: Checkout to the branch
+        uses: actions/checkout@v2
+
+      - name: Azure Login
+        uses: azure/login@v2
+        with:
+          client-id: ${{ secrets.AIAGENTSFRONTEND2_AZURE_CLIENT_ID }}
+          tenant-id: ${{ secrets.AIAGENTSFRONTEND2_AZURE_TENANT_ID }}
+          subscription-id: ${{ secrets.AIAGENTSFRONTEND2_AZURE_SUBSCRIPTION_ID }}
+
+      - name: Build and push container image to registry
+        uses: azure/container-apps-deploy-action@v2
+        with:
+          appSourcePath: ${{ github.workspace }}
+          _dockerfilePathKey_: _dockerfilePath_
+          _targetLabelKey_: _targetLabel_
+          registryUrl: ca2a76f03945acr.azurecr.io
+          registryUsername: ${{ secrets.AIAGENTSFRONTEND2_REGISTRY_USERNAME }}
+          registryPassword: ${{ secrets.AIAGENTSFRONTEND2_REGISTRY_PASSWORD }}
+          containerAppName: aiagentsfrontend2
+          resourceGroup: aiagentsgov
+          imageToBuild: ca2a76f03945acr.azurecr.io/aiagentsfrontend2:${{ github.sha }}
+          _buildArgumentsKey_: |
+            _buildArgumentsValues_
+
+

.github/workflows/backend-aiagents-gov-AutoDeployTrigger-66d7852e-1596-4a66-824a-0498253f1e64.yml

@@ -0,0 +1,110 @@
+name: Trigger auto deployment for backend-aiagents-gov
+
+# When this action will be executed
+# Retry deployment after debugging changes
+on:
+  # Automatically trigger it when detected changes in repo
+  push:
+    branches: 
+      [ main ]
+    paths:
+    - '**'
+    - '.github/workflows/backend-aiagents-gov-AutoDeployTrigger-66d7852e-1596-4a66-824a-0498253f1e64.yml'
+
+  # Allow manual trigger 
+  workflow_dispatch:      
+
+jobs:
+  build-and-deploy:
+    runs-on: ubuntu-latest
+    permissions: 
+      id-token: write #This is required for requesting the OIDC JWT Token
+      contents: read #Required when GH token is used to authenticate with private repo
+
+    steps:
+      - name: Checkout to the branch
+        uses: actions/checkout@v2
+
+      - name: Azure Login
+        uses: azure/login@v2
+        with:
+          creds: ${{ secrets.AZURE_CREDENTIALS }}
+
+      - name: Extract Azure credentials
+        id: azure-creds
+        run: |
+          echo "Extracting Azure credentials from AZURE_CREDENTIALS secret..."
+          TENANT_ID=$(echo '${{ secrets.AZURE_CREDENTIALS }}' | jq -r '.tenantId')
+          CLIENT_ID=$(echo '${{ secrets.AZURE_CREDENTIALS }}' | jq -r '.clientId')
+          CLIENT_SECRET=$(echo '${{ secrets.AZURE_CREDENTIALS }}' | jq -r '.clientSecret')
+
+          echo "TENANT_ID extracted: ${TENANT_ID:0:8}..."
+          echo "CLIENT_ID extracted: ${CLIENT_ID:0:8}..."
+          echo "CLIENT_SECRET extracted: [REDACTED]"
+
+          echo "AZURE_TENANT_ID=$TENANT_ID" >> $GITHUB_OUTPUT
+          echo "AZURE_CLIENT_ID=$CLIENT_ID" >> $GITHUB_OUTPUT
+          echo "AZURE_CLIENT_SECRET=$CLIENT_SECRET" >> $GITHUB_OUTPUT
+
+      - name: Build and push container image to registry
+        uses: azure/container-apps-deploy-action@v2
+        with:
+          appSourcePath: ${{ github.workspace }}/src/backend
+          dockerfilePath: Dockerfile.azure
+          registryUrl: ca2a76f03945acr.azurecr.io
+          registryUsername: ${{ secrets.BACKENDAIAGENTSGOV_REGISTRY_USERNAME }}
+          registryPassword: ${{ secrets.BACKENDAIAGENTSGOV_REGISTRY_PASSWORD }}
+          containerAppName: backend-aiagents-gov
+          resourceGroup: rg-info-2259
+          imageToBuild: ca2a76f03945acr.azurecr.io/backend-aiagents-gov:${{ github.sha }}
+
+      - name: Update Container App environment variables using Azure CLI
+        run: |
+          echo "Setting environment variables directly on Container App..."
+
+          # Set environment variables with proper escaping
+          az containerapp update \
+            --name backend-aiagents-gov \
+            --resource-group rg-info-2259 \
+            --set-env-vars \
+              "AZURE_OPENAI_ENDPOINT=https://somc-ai-gov-openai.openai.azure.com/" \
+              "AZURE_OPENAI_DEPLOYMENT_NAME=gpt-4o" \
+              "AZURE_OPENAI_API_VERSION=2024-08-01-preview" \
+              "AZURE_OPENAI_API_KEY=${{ secrets.AZURE_OPENAI_API_KEY }}" \
+              "AZURE_TENANT_ID=${{ steps.azure-creds.outputs.AZURE_TENANT_ID }}" \
+              "AZURE_CLIENT_ID=${{ steps.azure-creds.outputs.AZURE_CLIENT_ID }}" \
+              "AZURE_CLIENT_SECRET=${{ steps.azure-creds.outputs.AZURE_CLIENT_SECRET }}" \
+              "AZURE_AI_SUBSCRIPTION_ID=05cc117e-29ea-49f3-9428-c5d042340a91" \
+              "AZURE_AI_RESOURCE_GROUP=rg-info-2259" \
+              "AZURE_AI_PROJECT_NAME=ai-project-default" \
+              "AZURE_AI_AGENT_ENDPOINT=https://somc-ai-gov-openai.openai.azure.com/" \
+              "COSMOSDB_ENDPOINT=https://cosmos-somc-ai-gov.documents.azure.com:443/" \
+              "COSMOSDB_DATABASE=macae" \
+              "COSMOSDB_CONTAINER=memory" \
+              "BACKEND_API_URL=https://backend-aiagents-gov.victoriouscoast-531c9ceb.westeurope.azurecontainerapps.io" \
+              "FRONTEND_SITE_NAME=https://frontend-aiagents-gov.victoriouscoast-531c9ceb.westeurope.azurecontainerapps.io"
+
+          echo "Environment variables set successfully."
+
+          # Verify environment variables were set
+          echo "Verifying environment variables..."
+          az containerapp show \
+            --name backend-aiagents-gov \
+            --resource-group rg-info-2259 \
+            --query "properties.template.containers[0].env[?name=='AZURE_TENANT_ID'].value" \
+            --output tsv
+
+          # Force restart to ensure environment variables are loaded
+          echo "Forcing Container App restart to ensure environment variables are loaded..."
+          az containerapp revision restart \
+            --name backend-aiagents-gov \
+            --resource-group rg-info-2259 \
+            --revision $(az containerapp revision list \
+              --name backend-aiagents-gov \
+              --resource-group rg-info-2259 \
+              --query "[0].name" \
+              --output tsv)
+
+          echo "Container App restarted successfully with new environment variables."
+
+

.github/workflows/deploy-backend-azure.yml

@@ -0,0 +1,37 @@
+name: Deploy Backend to Azure Container App
+
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - 'src/backend/**'
+  workflow_dispatch:
+
+jobs:
+  build-and-deploy:
+    runs-on: ubuntu-latest
+    env:
+      AZURE_CONTAINER_APP_NAME: camar01
+      AZURE_RESOURCE_GROUP: SomcAI-Project-RG
+      AZURE_REGION: swedencentral
+      DOCKERFILE_PATH: src/backend/Dockerfile.azure
+      REGISTRY_LOGIN_SERVER: somcregistrysweden.azurecr.io
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+
+      - name: Log in to Azure
+        uses: azure/login@v1
+        with:
+          creds: ${{ secrets.AZURE_CREDENTIALS }}
+
+      - name: Build and push image to ACR
+        uses: azure/container-apps-deploy-action@v1
+        with:
+          appName: ${{ env.AZURE_CONTAINER_APP_NAME }}
+          resourceGroup: ${{ env.AZURE_RESOURCE_GROUP }}
+          imageToBuild: ${{ env.REGISTRY_LOGIN_SERVER }}/backend:${{ github.sha }}
+          dockerfilePath: ${{ env.DOCKERFILE_PATH }}
+          registryUrl: ${{ env.REGISTRY_LOGIN_SERVER }}
+          location: ${{ env.AZURE_REGION }}

.github/workflows/deploy-backend-webapp.yml

@@ -0,0 +1,82 @@
+name: Build and deploy Python app to Azure Web App - aiagentsgov-backend
+
+on:
+  push:
+    branches:
+      - main
+  workflow_dispatch:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.11'
+
+      - name: Install zip
+        run: sudo apt-get install zip
+
+      - name: Install dependencies
+        run: pip install -r src/backend/requirements.txt
+
+      - name: Create runtime.txt for Python version detection
+        run: echo "python-3.11" > src/backend/runtime.txt
+
+      - name: Create .deployment file for Azure
+        run: |
+          cat > src/backend/.deployment << 'EOF'
+          [config]
+          SCM_DO_BUILD_DURING_DEPLOYMENT=true
+          PYTHON_VERSION=3.11
+          EOF
+
+      - name: Maak startup.txt met startup command voor Azure
+        run: echo "gunicorn -w 1 -k uvicorn.workers.UvicornWorker app_kernel:app" > src/backend/startup.txt
+
+      - name: Zip alleen src/backend voor deployment (incl. runtime.txt, .deployment, azure.yaml + startup.txt)
+        run: |
+          cd src/backend
+          zip -r ../../release.zip . -x "venv/*" ".git/*" "*.zip"
+          cd ../..
+
+      - name: Upload artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: python-app
+          path: release.zip
+
+  deploy:
+    runs-on: ubuntu-latest
+    needs: build
+    permissions:
+      id-token: write
+      contents: read
+    steps:
+      - name: Download artifact from build job
+        uses: actions/download-artifact@v4
+        with:
+          name: python-app
+
+      - name: Unzip artifact
+        run: unzip release.zip
+
+      - name: Login to Azure
+        uses: azure/login@v2
+        with:
+          client-id: ${{ secrets.AZUREAPPSERVICE_CLIENTID_A554F8148EC544B7A5FC4388C541F484 }}
+          tenant-id: ${{ secrets.AZUREAPPSERVICE_TENANTID_9A99394C1F8F440D9772F371113CBA48 }}
+          subscription-id: ${{ secrets.AZUREAPPSERVICE_SUBSCRIPTIONID_989248AB5335474EABE443589D0AA894 }}
+
+      - name: Deploy to Azure Web App
+        uses: azure/webapps-deploy@v3
+        with:
+          app-name: 'aiagentsgov-backend'
+          slot-name: 'Production'
+          package: release.zip