title	description	author	ms.author	ms.manager	ms.topic	ms.date	ms.custom
Configure CI/CD with Pipelines	Learn how to deploy your code to Azure App Service from a CI/CD pipeline by using Azure Pipelines.	cephalin	jukullam	mijacobs	how-to	06/04/2024	devops-pipelines-deploy

Deploy to Azure App Service by using Azure Pipelines

Azure DevOps Services | Azure DevOps Server 2020 | Azure DevOps Server 2019

[!INCLUDE regionalization-note]

Use Azure Pipelines to automatically deploy your web app to Azure App Service on every successful build. Azure Pipelines lets you build, test, and deploy with continuous integration and continuous delivery (CI/CD) by using Azure DevOps.

YAML pipelines are defined by using a YAML file in your repository. A step is the smallest building block of a pipeline and can be a script or task (prepackaged script). Learn about the key concepts and components that make up a pipeline.

You use the Azure Web App task (AzureWebApp) to deploy to Azure App Service in your pipeline. For more complicated scenarios, like when you need to use XML parameters in your deployment, you can use the Azure App Service deploy task AzureRmWebAppDeployment.

Prerequisites:

An Azure account with an active subscription. Create an account for free.
An Azure DevOps organization. Create one for free.
The ability to run pipelines on Microsoft-hosted agents. You can purchase a parallel job or request a free tier.
A working Azure App Service app with the code hosted on GitHub or Azure Repos.
- .NET: Create an ASP.NET Core web app in Azure.
- ASP.NET: Create an ASP.NET Framework web app in Azure.
- JavaScript: Create a Node.js web app in Azure App Service.
- Java: Create a Java app in Azure App Service.
- Python: Create a Python app in Azure App Service.

1. Create a pipeline for your stack

The code examples in this section assume that you're deploying an ASP.NET web app. You can adapt the instructions for other frameworks.

Learn more about Azure Pipelines ecosystem support.

YAML

Sign in to your Azure DevOps organization and go to your project.
Go to Pipelines and select New Pipeline.
When prompted, select the location of your source code: either Azure Repos Git or GitHub.

You might be redirected to GitHub to sign in. If so, enter your GitHub credentials.
When the list of repositories appears, select your repository.
You might be redirected to GitHub to install the Azure Pipelines app. If so, select Approve & install.
When the Configure tab appears, select ASP.NET Core.
When your new pipeline appears, take a look at the YAML to see what it does. When you're ready, select Save and run.

Classic

To get started:

Create a pipeline and select the ASP.NET Core template. This selection automatically adds the tasks required to build the code in the sample repository.
To see it in action, save the pipeline and queue a build.

The ASP.NET Core pipeline template publishes the deployment ZIP file as an Azure artifact for the deployment task in the next step.

2. Add the deployment task

YAML

Select the end of the YAML file, and then select Show assistant.
Use the Task assistant to add the Azure web app task.

Alternatively, you can add the Azure App Service deploy AzureRmWebAppDeployment task.
Choose your Azure subscription. Make sure to select Authorize to authorize your connection. The authorization creates the required service connection.

Select the App type, App name, and Runtime stack based on your App Service app. Your complete YAML should look similar to the following code.

variables:
  buildConfiguration: 'Release'

steps:
- task: DotNetCoreCLI@2
  inputs:
    command: 'publish'
    publishWebProjects: true
- task: AzureWebApp@1
  inputs:
    azureSubscription: '<service-connection-name>'
    appType: 'webAppLinux'
    appName: '<app-name>'
    package: '$(System.DefaultWorkingDirectory)/**/*.zip'

azureSubscription: Name of the authorized service connection to your Azure subscription.
appName: Name of your existing app.
package: File path to the package or a folder containing your App Service contents. Wildcards are supported.

Classic

To get started:

Create a release pipeline. Select Releases from the left menu and select New pipeline.
Select the Azure App Service deployment template for your stage. This step automatically adds the necessary tasks.

[!NOTE] If you're deploying a Node.js app to App Service on Windows, select the Deployed Node.js App to Azure App Service template. The only difference between these templates is that the Node.js template configures the task to generate a web.config file that contains a parameter that starts the iisnode service.
To link this release pipeline to the Azure artifact from the previous step, select Add an artifact > Build.
In Source (build pipeline), select the build pipeline you created in the previous section. Then select Add.
To see it in action, save the release pipeline and create a release.

Example: Deploy a .NET app

YAML

To deploy a .zip web package (for example, from an ASP.NET web app) to an Azure web app, use the following snippet to deploy the build to an app.

variables:
  buildConfiguration: 'Release'

steps:
- task: DotNetCoreCLI@2
  inputs:
    command: 'publish'
    publishWebProjects: true
- task: AzureWebApp@1
  inputs:
    azureSubscription: '<service-connection-name>'
    appType: 'webAppLinux'
    appName: '<app-name>'
    package: '$(System.DefaultWorkingDirectory)/**/*.zip'

azureSubscription: Your Azure subscription.
appType: Your web app type.
appName: The name of your existing app service.
package: File path to the package or a folder containing your App Service contents. Wildcards are supported.

Classic

For classic pipelines, it's easier to define build and release stages in separate panes (Pipelines and Releases, respectively).

On the Pipelines pane, build and test your app by using the template of your choice, such as ASP.NET Core, Node.js with Grunt, Maven, or others. Publish an artifact.
On the Release pane, use the generic Azure App Service deployment template to deploy the artifact.

There might be templates for specific programming languages to choose from.

Example: Deploy to a virtual application

YAML

By default, your deployment happens to the root application in the Azure web app. You can deploy to a specific virtual application by using the VirtualApplication property of the Azure App Service deploy task AzureRmWebAppDeployment:

- task: AzureRmWebAppDeployment@4
  inputs:
    VirtualApplication: '<name of virtual application>'

VirtualApplication: The name of the virtual application configured in the Azure portal. For more information, see Configure an App Service app in the Azure portal .

Classic

By default, your deployment happens to the root application in the Azure web app. If you want to deploy to a specific virtual application, enter its name in the Virtual Application property of the Azure App Service deploy task.

Example: Deploy to a slot

YAML

The following example shows how to deploy to a staging slot, and then swap to a production slot:

- task: AzureWebApp@1
  inputs:
    azureSubscription: '<service-connection-name>'
    appType: webAppLinux
    appName: '<app-name>'
    deployToSlotOrASE: true
    resourceGroupName: '<name of resource group>'
    slotName: staging
    package: '$(Build.ArtifactStagingDirectory)/**/*.zip'

- task: AzureAppServiceManage@0
  inputs:
    azureSubscription: '<service-connection-name>'
    appType: webAppLinux
    WebAppName: '<app-name>'
    ResourceGroupName: '<name of resource group>'
    SourceSlot: staging
    SwapWithProduction: true

azureSubscription: Your Azure subscription.
appType: (Optional) Use webAppLinux to deploy to a web app on Linux.
appName: The name of your existing app service.
deployToSlotOrASE*: Boolean. Deploy to an existing deployment slot or Azure App Service Environment.
resourceGroupName: Name of the resource group. Required if deployToSlotOrASE is true.
slotName: Name of the slot, which defaults to production. Required if deployToSlotOrASE is true.
package: File path to the package or a folder containing your App Service contents. Wildcards are supported.
SourceSlot: Slot sent to production when SwapWithProduction is true.
SwapWithProduction: Boolean. Swap the traffic of source slot with production.

Classic

Use the option Deploy to Slot or App Service Environment in the Azure Web App task to specify the slot to deploy to. To swap the slots, use the Azure App Service manage task.

Example: Deploy to multiple web apps

YAML

You can use jobs in your YAML file to set up a pipeline of deployments. By using jobs, you can control the order of deployment to multiple web apps.

jobs:
- job: buildandtest
  pool:
    vmImage: ubuntu-latest
 
  steps:
  # publish an artifact called drop
  - task: PublishPipelineArtifact@1
    inputs:
      targetPath: '$(Build.ArtifactStagingDirectory)' 
      artifactName: drop
  
  # deploy to Azure Web App staging
  - task: AzureWebApp@1
    inputs:
      azureSubscription: '<service-connection-name>'
      appType: <app type>
      appName: '<staging-app-name>'
      deployToSlotOrASE: true
      resourceGroupName: <group-name>
      slotName: 'staging'
      package: '$(Build.ArtifactStagingDirectory)/**/*.zip'

- job: deploy
  dependsOn: buildandtest
  condition: succeeded()

  pool: 
    vmImage: ubuntu-latest  
  
  steps:
    # download the artifact drop from the previous job
  - task: DownloadPipelineArtifact@2
    inputs:
      source: 'current'
      artifact: 'drop'
      path: '$(Pipeline.Workspace)'

  - task: AzureWebApp@1
    inputs:
      azureSubscription: '<service-connection-name>'
      appType: <app type>
      appName: '<production-app-name>'
      resourceGroupName: <group-name>
      package: '$(Pipeline.Workspace)/**/*.zip'

Classic

To deploy to multiple web apps, add stages to your release pipeline. You can control the order of deployment. To learn more, see Stages.

Example: Deploy conditionally

YAML

To deploy conditionally in YAML, you can use one of the following techniques:

Isolate the deployment steps into a separate job, and add a condition to that job.
Add a condition to the step.

The following example shows how to use step conditions to deploy only builds that originate from the main branch:

- task: AzureWebApp@1
  condition: and(succeeded(), eq(variables['Build.SourceBranch'], 'refs/heads/main'))
  inputs:
    azureSubscription: '<service-connection-name>'
    appName: '<app-name>'

To learn more about conditions, see Specify conditions.

Classic

In your release pipeline, you can implement various checks and conditions to control the deployment:

Set branch filters to configure the continuous deployment trigger on the artifact of the release pipeline.
Set pre-deployment approvals or configure gates as a precondition for deployment to a stage.
Specify conditions for a task to run.

To learn more, see Release, branch, and stage triggers, Release deployment control using approvals, Release deployment control using gates, and Specify conditions for running a task.

Example: Deploy using Web Deploy

The Azure App Service deploy task AzureRmWebAppDeployment can deploy to App Service by using Web Deploy.

YAML

trigger:
- main

pool:
  vmImage: windows-latest

variables:
  buildConfiguration: 'Release'

steps:
- task: DotNetCoreCLI@2
  inputs:
    command: 'publish'
    publishWebProjects: true
    arguments: '--configuration $(buildConfiguration)'
    zipAfterPublish: true
- task: AzureRmWebAppDeployment@4
  inputs:
    ConnectionType: 'AzureRM'
    azureSubscription: '<service-connection-name>'
    appType: 'webApp'
    WebAppName: '<app-name>'
    packageForLinux: '$(System.DefaultWorkingDirectory)/**/*.zip'
    enableCustomDeployment: true
    DeploymentType: 'webDeploy'

Classic

If you're using the Azure App Service deployment template in the release pipeline:

Select the Tasks tab, and then select Deploy Azure App Service (the AzureRmWebAppDeployment task).
In the dialog, make sure that Connection type is set to Azure Resource Manager.
In the dialog, expand Additional Deployment Options and choose Select deployment method. Make sure that Web Deploy is selected as the deployment method.
Save the release pipeline.

Note

With the AzureRmWebAppDeployment@3 and AzureRmWebAppDeployment@4 tasks, you should use the Azure Resource Manager connection type or AzureRM when you deploy with Web Deploy. It uses publishing profiles for deployment when basic authentication is enabled for your app. When basic authentication is disabled, it uses the more secure Microsoft Entra ID authentication.

Frequently asked questions

What's the difference between the `AzureWebApp` and `AzureRmWebAppDeployment` tasks?

The Azure Web App task AzureWebApp is the simplest way to deploy to an Azure web app. By default, your deployment happens to the root application in the Azure web app.

The Azure App Service Deploy task (AzureRmWebAppDeployment) can handle more custom scenarios, such as:

Deploy with Web Deploy, if you usually use the Internet Information Services (IIS) deployment process.
Deploy to virtual applications.
Deploy to other app types, like container apps, function apps, WebJobs, or API and mobile apps.

Note

The separate File Transform task also supports file transforms and variable substitution for use in Azure Pipelines. You can use the File Transform task to apply file transformations and variable substitutions on any configuration and parameters files.

Why do I get the message "Invalid App Service package or folder path provided"?

In YAML pipelines, depending on your pipeline, there might be a mismatch between where your built web package is saved and where the deploy task is looking for it. For example, the AzureWebApp task picks up the web package for deployment. The AzureWebApp task might look in $(System.DefaultWorkingDirectory)/**/*.zip. If the web package is deposited elsewhere, modify the value of package.

Why do I get the message "Publish using webdeploy options are supported only when using Windows agent"?

This error occurs in the AzureRmWebAppDeployment task when you configure the task to deploy using Web Deploy, but your agent isn't running Windows. Verify that your YAML includes something similar to the following code:

pool:
  vmImage: windows-latest

Why doesn't Web Deploy work when I disable basic authentication?

For troubleshooting information on getting Microsoft Entra ID authentication to work with the AzureRmWebAppDeployment task, see I can't Web Deploy to my Azure App Service using Microsoft Entra ID authentication from my Windows agent.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

deploy-azure-pipelines.md

deploy-azure-pipelines.md

Deploy to Azure App Service by using Azure Pipelines

Prerequisites:

1. Create a pipeline for your stack

YAML

Classic

2. Add the deployment task

YAML

Classic

Example: Deploy a .NET app

YAML

Classic

Example: Deploy to a virtual application

YAML

Classic

Example: Deploy to a slot

YAML

Classic

Example: Deploy to multiple web apps

YAML

Classic

Example: Deploy conditionally

YAML

Classic

Example: Deploy using Web Deploy

YAML

Classic

Frequently asked questions

What's the difference between the `AzureWebApp` and `AzureRmWebAppDeployment` tasks?

Why do I get the message "Invalid App Service package or folder path provided"?

Why do I get the message "Publish using webdeploy options are supported only when using Windows agent"?

Why doesn't Web Deploy work when I disable basic authentication?

Related content

Files

deploy-azure-pipelines.md

Latest commit

History

deploy-azure-pipelines.md

File metadata and controls

Deploy to Azure App Service by using Azure Pipelines

Prerequisites:

1. Create a pipeline for your stack

2. Add the deployment task

Example: Deploy a .NET app

Example: Deploy to a virtual application

Example: Deploy to a slot

Example: Deploy to multiple web apps

Example: Deploy conditionally

Example: Deploy using Web Deploy

Frequently asked questions

What's the difference between the AzureWebApp and AzureRmWebAppDeployment tasks?

Why do I get the message "Invalid App Service package or folder path provided"?

Why do I get the message "Publish using webdeploy options are supported only when using Windows agent"?

Why doesn't Web Deploy work when I disable basic authentication?

Related content

What's the difference between the `AzureWebApp` and `AzureRmWebAppDeployment` tasks?