Deployment Options Reference¶

# Deploy a ZIP package (Linux or Windows)
az webapp deploy \
  --resource-group $RG \
  --name $APP_NAME \
  --src-path ./deploy.zip \
  --type zip

WARNING: Initiating deployment
WARNING: Deploying from local path: ./deploy.zip
WARNING: Warmed up Kudu instance successfully.
WARNING: Deployment has completed successfully
WARNING: You can visit your app at: http://app-deploy-test-5b293a.azurewebsites.net

# Legacy ZIP deploy
az webapp deployment source config-zip \
  --resource-group $RG \
  --name $APP_NAME \
  --src ./deploy.zip

# 1. Enable Run from Package
az webapp config appsettings set \
  --resource-group $RG \
  --name $APP_NAME \
  --settings WEBSITE_RUN_FROM_PACKAGE="1"

# 2. Deploy the ZIP (it will be mounted, not unpacked)
az webapp deploy \
  --resource-group $RG \
  --name $APP_NAME \
  --src-path ./deploy.zip \
  --type zip

# 1. Enable Local Git and retrieve the Git URL
az webapp deployment source config-local-git \
  --resource-group $RG \
  --name $APP_NAME \
  --output json

# 2. Enable SCM basic authentication (disabled by default)
az resource update \
  --resource-group $RG \
  --name scm \
  --namespace Microsoft.Web \
  --resource-type sites/basicPublishingCredentialsPolicies \
  --parent "sites/$APP_NAME" \
  --set properties.allow=true

# 3. Get app-scope credentials
az webapp deployment list-publishing-credentials \
  --resource-group $RG \
  --name $APP_NAME \
  --query "{user:publishingUserName, pass:publishingPassword}" \
  --output json

# 4. Add remote and push
git remote add azure https://<user>:<password>@$APP_NAME.scm.azurewebsites.net/$APP_NAME.git
git push azure main

Kudu deployment status: { "id": "9e974c8a7517", "active": false, "status": 1, "message": "initial deploy" }

# 1. Enable FTP basic authentication
az resource update \
  --resource-group $RG \
  --name ftp \
  --namespace Microsoft.Web \
  --resource-type sites/basicPublishingCredentialsPolicies \
  --parent "sites/$APP_NAME" \
  --set properties.allow=true

# 2. Get FTPS URL and credentials from publish profile
az webapp deployment list-publishing-profiles \
  --resource-group $RG \
  --name $APP_NAME \
  --output json

# 3. Upload a file via FTPS
curl --ftp-ssl \
  --user "$FTP_USER:$FTP_PASS" \
  --upload-file ./app.py \
  "ftps://waws-prod-<region>.ftp.azurewebsites.windows.net/site/wwwroot/app.py"

* Connected to waws-prod-se1-003.ftp.azurewebsites.windows.net port 990
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-SHA384
* Server certificate: CN=waws-prod-se1-003.publish.azurewebsites.windows.net
RESULT: 226 Transfer complete

# Deploy a WAR to Tomcat (root context)
az webapp deploy \
  --resource-group $RG \
  --name $APP_NAME \
  --src-path ./target/app.war \
  --type war

# Deploy a JAR (Spring Boot / Java SE runtime)
az webapp deploy \
  --resource-group $RG \
  --name $APP_NAME \
  --src-path ./target/app.jar \
  --type jar

# Deploy an EAR to JBoss
az webapp deploy \
  --resource-group $RG \
  --name $APP_NAME \
  --src-path ./target/app.ear \
  --type ear

Runtime: TOMCAT:10.1-java21
az webapp deploy --type war → HTTP 200 from Tomcat root context

# .github/workflows/deploy.yml
name: Deploy to Azure App Service

on:
  push:
    branches: [main]

jobs:
  deploy:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
      contents: read

    steps:
      - uses: actions/checkout@v4

      - name: Azure login
        uses: azure/login@v2
        with:
          client-id: ${{ secrets.AZURE_CLIENT_ID }}
          tenant-id: ${{ secrets.AZURE_TENANT_ID }}
          subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}

      - name: Deploy to App Service
        uses: azure/webapps-deploy@v3
        with:
          app-name: ${{ env.APP_NAME }}
          package: ./deploy.zip

# azure-pipelines.yml
steps:
  - task: AzureWebApp@1
    inputs:
      azureSubscription: $(serviceConnection)
      appType: webAppLinux
      appName: $(appName)
      package: $(Pipeline.Workspace)/drop/*.zip
      deploymentMethod: zipDeploy

# Via Azure Pipelines (Windows agent only)
# deploymentMethod: webDeploy in AzureWebApp@1 task
- task: AzureWebApp@1
  inputs:
    azureSubscription: $(serviceConnection)
    appType: webApp
    appName: $(appName)
    deploymentMethod: webDeploy

# Create app with container image
az webapp create \
  --resource-group $RG \
  --plan $PLAN_NAME \
  --name $APP_NAME \
  --deployment-container-image-name "$ACR_NAME.azurecr.io/$IMAGE:$TAG"

# Enable managed identity pull from ACR
az webapp identity assign \
  --resource-group $RG \
  --name $APP_NAME

az role assignment create \
  --assignee $(az webapp identity show --resource-group $RG --name $APP_NAME --query principalId --output tsv) \
  --role AcrPull \
  --scope $(az acr show --name $ACR_NAME --query id --output tsv)

az webapp config set \
  --resource-group $RG \
  --name $APP_NAME \
  --generic-configurations '{"acrUseManagedIdentityCreds": true}'