Development Environment

The development environment is the first environment in the Microtec deployment pipeline. It receives automatic deployments on every merge to the default branch and is used for integration testing, exploratory development, and developer-facing demos.

---

Environment Snapshot

Property	Value
Environment name	dev
VNet CIDR	10.0.0.0/16
Domain	microtec-test.com
Key Vault	mic-erp-be-dev-skv
ACR	micerpbedevacr
Branch trigger	Any branch (auto-deploys on push)
Approval gate	None
SLA	Best-effort (no uptime commitment)

---

Subnets

Subnet	CIDR	Hosts
Public (CAE)	10.0.1.0/24	Gateway, Keycloak
Private (CAE)	10.0.2.0/23	All backend microservices
App Service	10.0.4.0/24	App Service integration
Function Apps	10.0.5.0/24	Function App integration
Private Endpoints	10.0.6.0/24	PaaS private endpoints (SQL, Redis, etc.)

---

Who Uses Dev

Role	Usage
Backend developers	Test API changes immediately after merge
Frontend developers	Point Angular apps at gateway.microtec-test.com
QA engineers	Early feature verification before stage
DevOps engineers	Infrastructure change validation
Product managers	Sprint demo environment

Dev Is Not Stable

Dev receives multiple deployments per day. Services may be briefly unavailable during rolling restarts. Do not use dev for any customer-facing demos — use stage or UAT instead.

---

Key Infrastructure Resources

Container App Environment

CAE	Name	Apps
Public	mic-erp-be-dev-cae-public	Gateway, Keycloak
Private	mic-erp-be-dev-cae-private	All other microservices

Networking

• VNet: mic-erp-be-dev-vnet (10.0.0.0/16)
• NSG: mic-erp-be-dev-public-nsg, mic-erp-be-dev-private-nsg
• Private DNS zones: privatelink.database.windows.net, privatelink.redis.cache.windows.net

Storage and Registry

Resource	Name
Container Registry	micerpbedevacr.azurecr.io
Key Vault	mic-erp-be-dev-skv
Redis	mic-erp-be-dev-redis.uksouth.redis.azure.net:10000 (Azure Managed Redis, Balanced_B0)

SQL

Dev microservices share the cross-environment SQL VM (mic-backend-shared-sql-rg, 20.50.120.95). Each tenant gets its own database following the {TenantId}_DB naming pattern.

---

Configuration

Key Vault Secrets

All environment-specific secrets are stored in mic-erp-be-dev-skv. Secret names use double-dash (--) in place of double-colon (::) to satisfy Azure Key Vault naming rules:

KV Secret Name	Maps To (appsettings)
ConnectionStrings--DefaultConnection	ConnectionStrings:DefaultConnection
RedisConfiguration--Password	RedisConfiguration:Password
AzureServiceBus--ConnectionString	AzureServiceBus:ConnectionString
Jwt--Secret	Jwt:Secret
XApiKey	XApiKey

Domain and TLS

All dev services are accessible via *.microtec-test.com:

Service	URL
API Gateway	https://gateway.microtec-test.com
Keycloak	https://auth.microtec-test.com
Business Owner Portal	https://bo.microtec-test.com
ERP Frontend	https://erp.microtec-test.com

TLS certificates are issued and auto-renewed via Azure Front Door managed certificates.

---

ACR Image Pull

Container App Environments pull images from micerpbedevacr using a user-assigned managed identity:

Identity: mic-erp-be-dev-acr-pull-id
Role: AcrPull on micerpbedevacr

The pipeline pushes images tagged $(Build.BuildId) and also updates the latest tag.

---

Reset Procedures

Restart All Services

Use the Azure CLI to restart all Container Apps in the private CAE:

az containerapp list \
  --resource-group mic-erp-be-dev-apps-private-rg \
  --query "[].name" -o tsv | \
xargs -I{} az containerapp restart \
  --name {} \
  --resource-group mic-erp-be-dev-apps-private-rg

Redeploy a Specific Service

Trigger a manual pipeline run for a single service:

# Using Azure DevOps CLI
az pipelines run \
  --name "mic-erp-backend-deploy" \
  --branch main \
  --variables "serviceName=accounting" "targetEnv=dev"

Flush Redis Cache

# Connect via Azure CLI with Key Vault secret
REDIS_PWD=$(az keyvault secret show \
  --vault-name mic-erp-be-dev-skv \
  --name "RedisConfiguration--Password" \
  --query value -o tsv)

redis-cli \
  -h mic-erp-be-dev-redis.uksouth.redis.azure.net \
  -p 10000 \
  -a "${REDIS_PWD}" \
  --tls FLUSHALL

FLUSHALL Clears All Cache Data

FLUSHALL removes ALL keys including DataProtection keys. After flushing, users will be logged out and existing session tokens will be invalidated. Only run this during off-hours or when directed by a service owner.

Reset Dev Tenant Database

# SSH into SQL VM
ssh -i ~/.ssh/mic-shared-sql sqladmin@20.50.120.95

# Drop and recreate a tenant DB (replace <TenantId>)
sqlcmd -S localhost -Q "
  DROP DATABASE IF EXISTS [<TenantId>_DB];
  CREATE DATABASE [<TenantId>_DB];
"

After recreation, trigger the EF Core migration pipeline step to re-apply all migrations.

---

Monitoring

Dev environment telemetry is sent to:

Tool	Details
Seq	http://seq.microtec-test.com:1234 (internal)
Application Insights	mic-erp-be-dev-ai workspace
OpenTelemetry	OTLP endpoint http://otel-collector.microtec-test.com:4317

Dev Log Verbosity

Dev is configured with Serilog:MinimumLevel:Default = Debug to maximise diagnostic information. Stage and above use Information level.