Python on Azure App Service — Code Deploy
Deploys Python (Flask, Django, FastAPI, generic) code to Azure App Service Linux (P0v3, Python 3.14). Creates RG + Plan + Web App if missing. Hand off to azure-prepare for VNet, Key Vault, databases, or IaC.
MCP tools used: mcp_azure_mcp_subscription_list, mcp_azure_mcp_group_list, mcp_azure_mcp_appservice, mcp_azure_mcp_azd (when azure.yaml is present).
Workflow
- Resolve context — smart defaults, minimal prompts. Only the app name is interactive; RG (
<app>-rg), Plan (<app>-plan), region (current az default or eastus2), subscription are derived. create-app.md [blocked] §1.
- Detect framework (advisory, never blocks). detect.md [blocked].
- Choose path —
azure.yaml host: appservice → deploy-azd.md [blocked]; else deploy-azcli.md [blocked].
- Ensure RG → Plan (
P0v3 --is-linux) → Web App (--runtime "PYTHON:3.14") exist. On transient ARM errors, follow transient-retry.md [blocked]. create-app.md [blocked].
- Set startup — Flask/Django: none (Oryx auto-detects). FastAPI: always
python -m uvicorn main:app --host 0.0.0.0. Other: warn. startup-commands.md [blocked].
- Set
SCM_DO_BUILD_DURING_DEPLOYMENT=true.
- Deploy —
azd deploy or az webapp deploy --type zip --track-status false.
- STOP. Print the post-deploy message (post-deploy-message.md [blocked]) and end the turn.
Hard rules
- ⛔ NO POST-DEPLOY VERIFICATION — after deploy returns, do not run
az webapp log tail, curl, Invoke-WebRequest, or any health probe. App Service needs 2–3 min to warm; a quiet log or early 5xx is not failure.
- ⛔ SHELL SAFETY — for
--runtime always use "PYTHON:3.14" (colon). Never "PYTHON|3.14" (pipe is a shell operator).
- ⛔ NEVER
az webapp up — deprecated. Use Step 7 commands.
- ✅ URL FORMAT — present endpoints as https://... URLs.
Error Handling
See errors.md [blocked] for the full symptom → cause → fix matrix. Quick triage: missing plan/app → re-run Step 4; container ping timeout on 8000 → fix startup (Step 5); ModuleNotFoundError after deploy → ensure Step 6 ran, redeploy.