Skip to content

02 - First Deploy to Azure

This guide walks you through the initial deployment of your Spring Boot application to Azure Container Apps. We'll use the Azure CLI to create a Container Registry, build the image in the cloud, and provision a Container App environment.

Infrastructure Context

Service: Container Apps (Consumption) | Network: VNet integrated | VNet: ✅

This tutorial assumes a production-ready Container Apps deployment with a custom VNet, ACR with managed identity pull, and private endpoints for backend services.

flowchart TD
    INET[Internet] -->|HTTPS| CA["Container App\nConsumption\nLinux Java 17"]

    subgraph VNET["VNet 10.0.0.0/16"]
        subgraph ENV_SUB["Environment Subnet 10.0.0.0/23\nDelegation: Microsoft.App/environments"]
            CAE[Container Apps Environment]
            CA
        end
        subgraph PE_SUB["Private Endpoint Subnet 10.0.2.0/24"]
            PE_ACR[PE: ACR]
            PE_KV[PE: Key Vault]
            PE_ST[PE: Storage]
        end
    end

    PE_ACR --> ACR[Azure Container Registry]
    PE_KV --> KV[Key Vault]
    PE_ST --> ST[Storage Account]

    subgraph DNS[Private DNS Zones]
        DNS_ACR[privatelink.azurecr.io]
        DNS_KV[privatelink.vaultcore.azure.net]
        DNS_ST[privatelink.blob.core.windows.net]
    end

    PE_ACR -.-> DNS_ACR
    PE_KV -.-> DNS_KV
    PE_ST -.-> DNS_ST

    CA -.->|System-Assigned MI| ENTRA[Microsoft Entra ID]
    CAE --> LOG[Log Analytics]
    CA --> AI[Application Insights]

    style CA fill:#107c10,color:#fff
    style VNET fill:#E8F5E9,stroke:#4CAF50
    style DNS fill:#E3F2FD

Deployment Workflow

graph TD
    CODE[Local Source] --> ACR_BUILD[ACR Build]
    ACR_BUILD --> IMAGE[ACR Image]
    IMAGE --> CAE[ACA Environment]
    CAE --> ACA[Container App]
    ACA --> LIVE[FQDN /health]

Prerequisites

  • Azure CLI 2.57+
  • Active Azure Subscription
  • Terminal with common variables set

Step 1: Environment Setup

Before running commands, set your common variables to ensure consistency.

# Variables
RG="rg-java-guide"
LOCATION="koreacentral"
ENVIRONMENT_NAME="cae-java-guide"
ACR_NAME="crjava$(date +%s)"
APP_NAME="ca-java-guide"

Step 2: Create Infrastructure

  1. Create a Resource Group

    az group create --name $RG --location $LOCATION

  2. Create a Container Registry (ACR)

    az acr create --resource-group $RG --name $ACR_NAME --sku Basic

  3. Create a Container Apps Environment

    az containerapp env create --resource-group $RG --name $ENVIRONMENT_NAME --location $LOCATION

Step 3: Build and Push Image

Instead of building locally and pushing, use ACR Tasks to build the image directly in Azure from your source code.

cd apps/java-springboot
az acr build --registry $ACR_NAME --image java-guide:latest .
Expected output 
Packing source code into tar to upload...
Uploading 1.23 MB to registry...
Building image...
[build 1/5] FROM docker.io/library/maven:3.9-eclipse-temurin-21
... (Maven build output)
[stage-1 3/3] COPY --from=build /app/target/*.jar app.jar
Run ID: ce1 was successful after 1m 15s

Step 4: Create the Container App

Deploy the application using the image from your ACR. We'll configure it to listen on port 8000 with public ingress.

az containerapp create \
  --resource-group $RG \
  --name $APP_NAME \
  --environment $ENVIRONMENT_NAME \
  --image $ACR_NAME.azurecr.io/java-guide:latest \
  --target-port 8000 \
  --ingress external \
  --query "properties.configuration.ingress.fqdn"
Expected output 
"<your-app-name>.<environment-hash>.<region>.azurecontainerapps.io"

Step 5: Verification

  1. Check the application URL

    Visit the FQDN returned by the previous command. You should see the application's home page.

  2. Verify health endpoint

    FQDN=$(az containerapp show --resource-group $RG --name $APP_NAME --query "properties.configuration.ingress.fqdn" --output tsv)
curl https://$FQDN/health
    Expected output 
    {"timestamp":"2026-04-04T16:12:58.973766483Z","status":"healthy"}

  3. Verify info endpoint

    curl https://$FQDN/info
    Expected output 
    {"runtime":{"vendor":"Eclipse Adoptium","java":"21.0.10"},"app":"azure-container-apps-java-guide","version":"1.0.0"}

Deployment Verification Checklist

  • [x] ACR Image build succeeded
  • [x] Container App is in Provisioned state
  • [x] Ingress FQDN is accessible
  • [x] /health returns HTTP 200

Managed Identity for ACR Pull

In this first deployment, the CLI handles authentication between ACR and ACA. For production-ready templates, use a User-Assigned Managed Identity for the container app to pull images from the registry.

CLI Alternative (No Bicep)

Use these commands to deploy without Bicep templates. This creates the same resources imperatively.

Step 1: Set variables

RG="rg-springboot-containerapp"
LOCATION="koreacentral"
APP_NAME="ca-springboot-demo"
BASE_NAME="springboot-app"
ENVIRONMENT_NAME="cae-springboot-demo"
ACR_NAME="crspringbootdemo"
LOG_NAME="log-springboot-demo"
Expected output 
Variables set for resource group, logging workspace, registry, environment, and app.

Step 2: Create resource group

az group create --name $RG --location $LOCATION
Expected output 
{
  "id": "/subscriptions/<subscription-id>/resourceGroups/rg-springboot-containerapp",
  "location": "koreacentral",
  "name": "rg-springboot-containerapp",
  "properties": {
    "provisioningState": "Succeeded"
  }
}

Step 3: Create Log Analytics workspace

az monitor log-analytics workspace create --resource-group $RG --workspace-name $LOG_NAME --location $LOCATION
Expected output 
{
  "customerId": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
  "id": "/subscriptions/<subscription-id>/resourceGroups/rg-springboot-containerapp/providers/Microsoft.OperationalInsights/workspaces/log-springboot-demo",
  "location": "koreacentral",
  "name": "log-springboot-demo",
  "provisioningState": "Succeeded"
}

Step 4: Create Azure Container Registry

az acr create --resource-group $RG --name $ACR_NAME --sku Basic
Expected output 
{
  "id": "/subscriptions/<subscription-id>/resourceGroups/rg-springboot-containerapp/providers/Microsoft.ContainerRegistry/registries/crspringbootdemo",
  "loginServer": "crspringbootdemo.azurecr.io",
  "name": "crspringbootdemo",
  "provisioningState": "Succeeded",
  "sku": {
    "name": "Basic"
  }
}

Step 5: Create Container Apps environment

LOG_ID=$(az monitor log-analytics workspace show --resource-group $RG --workspace-name $LOG_NAME --query customerId --output tsv)
LOG_KEY=$(az monitor log-analytics workspace get-shared-keys --resource-group $RG --workspace-name $LOG_NAME --query primarySharedKey --output tsv)
az containerapp env create --resource-group $RG --name $ENVIRONMENT_NAME --location $LOCATION --logs-workspace-id $LOG_ID --logs-workspace-key $LOG_KEY
Expected output 
{
  "id": "/subscriptions/<subscription-id>/resourceGroups/rg-springboot-containerapp/providers/Microsoft.App/managedEnvironments/cae-springboot-demo",
  "location": "koreacentral",
  "name": "cae-springboot-demo",
  "provisioningState": "Succeeded"
}

Step 6: Build and push image with ACR Tasks

az acr build --registry $ACR_NAME --image $BASE_NAME:v1 ./apps/java-springboot
Expected output 
Packing source code into tar to upload...
Uploading archived source code from '/tmp/build.tar.gz'...
Queued a build with ID: cf1
Run ID: cf1 was successful after 1m 10s

Step 7: Create Container App

az containerapp create --resource-group $RG --name $APP_NAME --environment $ENVIRONMENT_NAME --image $ACR_NAME.azurecr.io/$BASE_NAME:v1 --target-port 8000 --ingress external --query "properties.configuration.ingress.fqdn"
Expected output 
"ca-springboot-demo.gentlewave-1a2b3c4d.koreacentral.azurecontainerapps.io"

Step 8: Verify deployment

FQDN=$(az containerapp show --resource-group $RG --name $APP_NAME --query "properties.configuration.ingress.fqdn" --output tsv)
curl https://$FQDN/health
Expected output 
{"timestamp":"2026-04-09T09:14:22.103125Z","status":"healthy"}

See Also

Sources