Add CacheRefresh__ApiKey parameter to bicep deployment configuration

Co-authored-by: csharpfritz <[email protected]>

Author: Copilot

.github/workflows/azure-dev.yml

@@ -28,6 +28,7 @@ jobs:
       AZURE_SUBSCRIPTION_ID: ${{ vars.AZURE_SUBSCRIPTION_ID }}
       AZURE_ENV_NAME: ${{ vars.AZURE_ENV_NAME }}
       AZURE_LOCATION: ${{ vars.AZURE_LOCATION }}
+      CACHE_REFRESH_API_KEY: ${{ secrets.CACHE_REFRESH_API_KEY }}
 
     steps:
       - name: Checkout

AppHost/infra/web.tmpl.yaml

@@ -30,6 +30,8 @@ properties:
     secrets:
       - name: connectionstrings--tables
         value: '{{ .Env.AZURE_STORAGE_TABLEENDPOINT }}'
+      - name: cacherefresh--apikey
+        value: '{{ .Env.CACHE_REFRESH_API_KEY }}'
   template:
     containers:
       - image: {{ .Image }}
@@ -49,6 +51,8 @@ properties:
             value: in_memory
           - name: ConnectionStrings__tables
             secretRef: connectionstrings--tables
+          - name: CacheRefresh__ApiKey
+            secretRef: cacherefresh--apikey
     scale:
       minReplicas: 1
 tags:

infra/main.bicep

@@ -12,6 +12,10 @@ param location string
 @description('Id of the user or app to assign application roles')
 param principalId string = ''
 
+@description('API key for cache refresh endpoint security')
+@secure()
+param cacheRefreshApiKey string = ''
+
 
 var tags = {
   'azd-env-name': environmentName
@@ -29,6 +33,7 @@ module resources 'resources.bicep' = {
     location: location
     tags: tags
     principalId: principalId
+    cacheRefreshApiKey: cacheRefreshApiKey
   }
 }
 

infra/main.parameters.json

@@ -10,6 +10,9 @@
       },
       "location": {
         "value": "${AZURE_LOCATION}"
+      },
+      "cacheRefreshApiKey": {
+        "value": "${CACHE_REFRESH_API_KEY}"
       }
     }
   }

infra/resources.bicep

@@ -3,6 +3,10 @@ param location string = resourceGroup().location
 @description('Id of the user or app to assign application roles')
 param principalId string = ''
 
+@description('API key for cache refresh endpoint security')
+@secure()
+param cacheRefreshApiKey string = ''
+
 
 @description('Tags that will be applied to all resources')
 param tags object = {}