Adding App Insights Integration

Author: erikschlegel

src/.gitignore

@@ -6,7 +6,7 @@ COPY requirements.txt .
 
 RUN pip3 install -r requirements.txt
 
-COPY . /app
+COPY . .
 
 EXPOSE 5000
-ENTRYPOINT [ "python3", "api/app.py" ]
+ENTRYPOINT ["gunicorn", "-c", "gunicorn.conf.py", "app:app"]

src/Dockerfile

@@ -0,0 +1,22 @@
+import os
+
+from flask import Flask
+from opencensus.ext.azure.trace_exporter import AzureExporter
+from opencensus.ext.flask.flask_middleware import FlaskMiddleware
+from opencensus.trace.samplers import ProbabilitySampler
+
+app_insights_connection_string = os.getenv('APPLICATIONINSIGHTS_CONNECTION_STRING')
+
+def create_app():
+    flask = Flask(__name__)
+
+    from . import app
+    flask.register_blueprint(app.bp, threaded=True)
+    _ = FlaskMiddleware(\
+        flask, \
+        exporter=AzureExporter(\
+        connection_string=app_insights_connection_string), \
+        sampler=ProbabilitySampler(rate=1.0)
+    )
+
+    return flask

src/api/__init__.py

@@ -1,14 +1,25 @@
-from flask import Flask, jsonify
+import logging
+
+from flask import jsonify, Blueprint
+from opencensus.trace import config_integration
+from opencensus.trace.samplers import AlwaysOnSampler
+from opencensus.trace.tracer import Tracer
 import randomname
 
-app = Flask(__name__)
+bp = Blueprint("names", __name__)
+config_integration.trace_integrations(['logging'])
+logging.basicConfig(format='%(asctime)s traceId=%(traceId)s spanId=%(spanId)s %(message)s')
+tracer = Tracer(sampler=AlwaysOnSampler())
+logger = logging.getLogger(__name__)
+logger.setLevel(logging.DEBUG)
 
-@app.route('/')
+@bp.route("/")
 def hello_world():
     # Generate a random name including a first name and adjective
     random_name = randomname.generate()
+    with tracer.span(name=__name__):
+        logger.info("Random Name Selected: - %s", random_name)
+
     json = {"name": random_name}
-    return jsonify(json)
 
-if __name__ == '__main__':
-    app.run(debug=True,host='0.0.0.0')
+    return jsonify(json)

src/api/app.py

@@ -1,5 +1,7 @@
 nameOverride: ${SERVICE_NAME}-istio-svc
 fullnameOverride: ${SERVICE_NAME}-istio-svc
+virtualServicePort: 5000
+
 replicas: 1
 
 istio:
@@ -13,4 +15,17 @@ image:
   pullSecret: private-registry
 
 service:
-  port: 5000
+  port: 5000
+  
+secretStore:
+  enabled: true
+  keyvaultName: ${AZURE_KEY_VAULT_NAME}
+  tenantId: ${AZURE_TENANT_ID}
+  useVMManagedIdentity: "true"
+  usePodIdentity: "false"
+  secrets:
+  - envName: APPLICATIONINSIGHTS_CONNECTION_STRING
+    objectName: appInsightsConnectionString
+    alias: appsinsights
+  identity:
+    clientId: ${AZURE_AKS_KV_PROVIDER_CLIENT_ID}

src/api/manifests/values.yaml.tmpl

@@ -0,0 +1,3 @@
+from api import create_app
+
+app = create_app()

src/app.py

@@ -0,0 +1,4 @@
+bind = "[::]:5000"
+workers = 4
+threads = 4
+timeout = 120

src/azure.yaml

@@ -81,6 +81,7 @@ def set_azd_env_variable(name, value, export=False):
         )
 
     target_cluster = prompt_user_for_target_clusters(clusters)
+    kubelet_identity = target_cluster.addon_profiles["azureKeyvaultSecretsProvider"].identity
     resource_group_name = target_cluster.id.split("/")[4]
     bb_keyvault = client.get_keyvault(
         target_cluster.tags[AZD_ENVIRONMENT_NAME_RESOURCE_TAG], subscription_id, resource_group_name
@@ -95,6 +96,7 @@ def set_azd_env_variable(name, value, export=False):
     github_pat_token = client.get_keyvault_secret(bb_keyvault, "githubToken")
 
     registry = client.get_container_registry(subscription_id, resource_group_name)
+    tenant_id = bb_keyvault.properties.tenant_id
 
     if registry is None:
         raise ValueError(
@@ -108,9 +110,11 @@ def set_azd_env_variable(name, value, export=False):
     set_azd_env_variable("AZURE_AKS_CLUSTER_NAME", target_cluster.name)
     set_azd_env_variable("AZURE_KEY_VAULT_ENDPOINT", bb_keyvault.properties.vault_uri)
     set_azd_env_variable("AZURE_KEY_VAULT_NAME", bb_keyvault.name)
+    set_azd_env_variable("AZURE_AKS_KV_PROVIDER_CLIENT_ID", kubelet_identity.client_id)
     set_azd_env_variable("AZURE_RESOURCE_GROUP", resource_group_name)
     set_azd_env_variable("AZURE_AKS_ENVIRONMENT_NAME", \
         target_cluster.tags[AZD_ENVIRONMENT_NAME_RESOURCE_TAG], True)
+    set_azd_env_variable("AZURE_TENANT_ID", tenant_id)
     set_azd_env_variable("AZURE_CONTAINER_REGISTRY_ENDPOINT", registry.login_server)
     set_azd_env_variable("GITOPS_REPO_RELEASE_BRANCH", \
         target_cluster.tags["gitops-release-branch"], True)

src/gunicorn.conf.py

@@ -1,3 +1,8 @@
 Flask==2.3.2
 requests==2.21.0
-randomname
+randomname
+opencensus-ext-azure
+opencensus
+opencensus-ext-logging
+opencensus-ext-flask 
+gunicorn==21.2.0