Merge pull request 'Migrated to NodeJS/Vite/Express/Material UI 2' (#1) from feature/migration-to-nodejs into main

Reviewed-on: #1

.gitignore

@@ -12,8 +12,12 @@
 **/playground.py
 
 # Azure Secrets and Configuration.
-/.acr-pat
-/azure.env
+.acr-pat
+azure.env
 
 # MacOS Finder files
 **/.DS_Store
+
+# Node/React rewrite outputs
+**/node_modules
+**/dist

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Sławomir Koszewski
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

README.md

@@ -1,46 +1,78 @@
 # Azure Image Chooser
 
-Azure Image Chooser is a [Streamlit](https://streamlit.io) application that allows users to select Azure VM images from the Azure Marketplace.
+Azure Image Chooser is a Node.js application that allows users to select Azure VM images from the Azure Marketplace.
 
-Azure Image Chooser is written in Python and requires Python interpreter. At the time of writing this, Python 3.13 is the latest.
+Azure Image Chooser has a TypeScript backend (Express) and a React frontend (Vite). At the time of writing this, Node.js 24 is used by the container image and is the recommended version for local runs.
 
-You can run it on your local machine or deploy to any platform that runs containers. A Docker file and Terraform code to deploy to the Azure are provided.
+You can run it on your local machine or deploy to any platform that runs containers.
+
+## Environment variables
+
+Required for both local and container run:
+
+- `AZURE_SUBSCRIPTION_ID`: Azure subscription used for Marketplace queries.
+
+Authentication variables (only needed when identity is not provided by the environment):
+
+- `AZURE_TENANT_ID`: Microsoft Entra tenant ID for service principal auth.
+- `AZURE_CLIENT_ID`: Service principal (app registration) client ID.
+- `AZURE_CLIENT_SECRET`: Service principal client secret.
+
+Optional:
+
+- `PORT`: Backend listening port. Default is `3000`.
+
+Local run notes:
+
+- `AZURE_SUBSCRIPTION_ID` must be set.
+- Use either Azure CLI login (`az login`) or the service principal variables above.
+
+Container run notes:
+
+- `AZURE_SUBSCRIPTION_ID` must be passed to the container.
+- Pass `AZURE_TENANT_ID`, `AZURE_CLIENT_ID`, and `AZURE_CLIENT_SECRET` unless your container runtime provides identity (for example Managed Identity / Workload Identity).
 
 ## Running on a local machine
 
-Create a Python development environment file `.env`:
+Load environment variables from the repository environment file:
 
 ```shell
-AZURE_SUBSCRIPTION_ID="subscription_id"
-AZURE_CLIENT_ID="client_id"
-AZURE_CLIENT_SECRET="client_secret"
-AZURE_TENANT_ID="tenant_id"
-AZURE_LOCATION="westeurope"
+set -a; source azure.env; set +a
 ```
 
-> NOTE: Replace the placeholder values with your actual values. Omit `AZURE_CLIENT_ID`, `AZURE_CLIENT_SECRET`, and `AZURE_TENANT_ID` if you are using Azure CLI authentication.
-
-Execute the following commands to run the app:
+Execute the following commands to install dependencies, build, and run the app:
 
 ```shell
-python3 -m venv .venv
-source .venv/bin/activate
-python -m pip install pip --upgrade
-pip install -r requirements.txt
-cd app
-streamlit run image-chooser.py
+cd app/backend
+npm ci
+
+cd ../frontend
+npm ci
+
+cd backend
+npm run build
+
+cd ../frontend
+npm run build
+
+cd ../backend
+npm run start
 ```
 
-The app will block terminal and start a web server. Follow the instructions in the terminal to access the app.
+The app will block the terminal and start a web server on port 3000. Open http://localhost:3000 in your browser.
 
-## Add Certificate Binding for Azure Deployment
+## Running with Docker
 
-Unfortunately, as of now, the Terraform Azure Resource Manager Provider does not support binding certificates to container apps. You can still bind the certificate using the Azure CLI.
+Build and run the container:
 
 ```shell
-# Find the certificate name
-CERTIFICATE_LOWERCASE_NAME=$(az containerapp env certificate list -g $RESOURCE_GROUP -n $ENVIRONMENT --query '[].name' -o tsv)
-
-# Bind the certificate to the container app
-az containerapp hostname bind --hostname $DOMAIN_NAME -g $RESOURCE_GROUP -n $CONTAINER_APP --environment $ENVIRONMENT --certificate $CERTIFICATE_LOWERCASE_NAME --validation-method CNAME
+docker build -t azure-image-chooser-node ./app
+docker run --rm -p 3000:3000 \
+  -e AZURE_SUBSCRIPTION_ID="subscription_id" \
+  -e AZURE_CLIENT_ID="client_id" \
+  -e AZURE_CLIENT_SECRET="client_secret" \
+  -e AZURE_TENANT_ID="tenant_id" \
+  azure-image-chooser-node
 ```
+
+> NOTE: As with local runs, you can omit AZURE_CLIENT_ID, AZURE_CLIENT_SECRET, and AZURE_TENANT_ID when the runtime environment already provides Azure credentials.

app-streamlit/Dockerfile

@@ -0,0 +1,15 @@
+FROM python:3.13-slim
+
+WORKDIR /app
+
+COPY requirements.txt .
+
+RUN pip install --root-user-action=ignore --no-cache-dir -r requirements.txt
+
+COPY image-chooser.py .
+COPY templates/ templates/
+COPY templates.json .
+COPY ./entrypoint.sh /
+
+ENTRYPOINT [ "/entrypoint.sh" ]
+CMD [ "run", "image-chooser.py" ]

app-streamlit/README.md

@@ -0,0 +1,46 @@
+# Azure Image Chooser
+
+Azure Image Chooser is a [Streamlit](https://streamlit.io) application that allows users to select Azure VM images from the Azure Marketplace.
+
+Azure Image Chooser is written in Python and requires Python interpreter. At the time of writing this, Python 3.13 is the latest.
+
+You can run it on your local machine or deploy to any platform that runs containers. A Docker file and Terraform code to deploy to the Azure are provided.
+
+## Running on a local machine
+
+Create a Python development environment file `.env`:
+
+```shell
+AZURE_SUBSCRIPTION_ID="subscription_id"
+AZURE_CLIENT_ID="client_id"
+AZURE_CLIENT_SECRET="client_secret"
+AZURE_TENANT_ID="tenant_id"
+AZURE_LOCATION="westeurope"
+```
+
+> NOTE: Replace the placeholder values with your actual values. Omit `AZURE_CLIENT_ID`, `AZURE_CLIENT_SECRET`, and `AZURE_TENANT_ID` if you are using Azure CLI authentication.
+
+Execute the following commands to run the app:
+
+```shell
+python3 -m venv .venv
+source .venv/bin/activate
+python -m pip install pip --upgrade
+pip install -r requirements.txt
+cd app
+streamlit run image-chooser.py
+```
+
+The app will block terminal and start a web server. Follow the instructions in the terminal to access the app.
+
+## Add Certificate Binding for Azure Deployment
+
+Unfortunately, as of now, the Terraform Azure Resource Manager Provider does not support binding certificates to container apps. You can still bind the certificate using the Azure CLI.
+
+```shell
+# Find the certificate name
+CERTIFICATE_LOWERCASE_NAME=$(az containerapp env certificate list -g $RESOURCE_GROUP -n $ENVIRONMENT --query '[].name' -o tsv)
+
+# Bind the certificate to the container app
+az containerapp hostname bind --hostname $DOMAIN_NAME -g $RESOURCE_GROUP -n $CONTAINER_APP --environment $ENVIRONMENT --certificate $CERTIFICATE_LOWERCASE_NAME --validation-method CNAME
+```

app-streamlit/entrypoint.sh

@@ -0,0 +1,8 @@
+#!/bin/sh
+
+if [ "$1" = "-s" ] || [ "$1" = "--shell" ]; then
+  shift
+  exec bash $@
+fi
+
+exec streamlit $@

app-streamlit/templates.json

@@ -0,0 +1,17 @@
+[
+    {
+        "label": "Terraform VM image reference",
+        "language": "hcl",
+        "file": "azurerm_hcl.tpl"
+    },
+    {
+        "label": "Azure CLI",
+        "language": "shell",
+        "file": "shell.tpl"
+    },
+    {
+        "label": "Azure Resource Manager Template",
+        "language": "json",
+        "file": "arm_vm.jsonc"
+    }
+]

app-streamlit/templates/arm_vm.jsonc

@@ -0,0 +1,17 @@
+{
+    // This is a partial Azure virtual machine resource template.
+    "type": "Microsoft.Compute/virtualMachines",
+    "apiVersion": "2022-03-01",
+    "name": "example-vm",
+    "location": "westeurope",
+    "properties": {
+        "storageProfile": {
+            "imageReference": {
+                "publisher": "{{ publisher }}",
+                "offer": "{{ offer }}",
+                "sku": "{{ sku }}",
+                "version": "{{ version }}"
+            }
+        }
+    }
+}

app-streamlit/templates/azurerm_hcl.tpl

@@ -0,0 +1,6 @@
+source_image_reference = {
+    publisher = "{{ publisher }}"
+    offer     = "{{ offer }}"
+    sku       = "{{ sku }}"
+    version   = "{{ version }}"
+}

app-streamlit/templates/shell.tpl

@@ -0,0 +1 @@
+az create -n MyVM -g MyResourceGroup --image {{ publisher }}:{{ offer }}:{{ sku }}:{{ version }}

app/Dockerfile

@@ -1,15 +1,50 @@
-FROM python:3.13-slim
+# Build stage
+FROM node:24-trixie-slim AS build
 
 WORKDIR /app
 
-COPY requirements.txt .
+# Copy sources required for build
+COPY backend/*.json backend/
+COPY backend/src backend/src
 
-RUN pip install --root-user-action=ignore --no-cache-dir -r requirements.txt
+COPY frontend/*.json frontend/
+COPY frontend/vite.config.ts frontend/vite.config.ts
+COPY frontend/index.html frontend/index.html
+COPY frontend/src frontend/src
+COPY frontend/test frontend/test
 
-COPY image-chooser.py .
-COPY templates/ templates/
-COPY templates.json .
-COPY ./entrypoint.sh /
+COPY templates templates
+COPY templates.json templates.json
 
-ENTRYPOINT [ "/entrypoint.sh" ]
-CMD [ "run", "image-chooser.py" ]
+# Build backend and frontend
+RUN cd backend && npm ci && npm run build && npm prune --omit=dev
+RUN cd frontend && npm ci && npm run build
+
+# Build the container
+FROM node:24-trixie-slim AS runtime
+
+WORKDIR /app
+
+# Copy built artifacts
+COPY --from=build /app/dist dist
+COPY --from=build /app/templates templates
+COPY --from=build /app/templates.json templates.json
+COPY --from=build /app/backend/node_modules dist/backend/node_modules
+
+# Copy entrypoint and healthcheck scripts
+COPY entrypoint.sh entrypoint.sh
+COPY healthcheck.js healthcheck.js
+
+# Ensure entrypoint script is executable
+RUN chmod +x entrypoint.sh
+
+# Set environment variables and expose port
+ENV NODE_ENV=production
+ENV PORT=3000
+EXPOSE 3000
+
+# Configure health check
+HEALTHCHECK --interval=30s --timeout=5s --start-period=15s --retries=3 CMD ["node", "/app/healthcheck.js"]
+
+# Configure entrypoint
+ENTRYPOINT ["./entrypoint.sh"]

app/backend/package.json

@@ -0,0 +1,32 @@
+{
+  "name": "azure-image-chooser-backend",
+  "version": "1.0.0",
+  "author": "Sławomir Koszewski",
+  "license": "MIT",
+  "private": true,
+  "type": "commonjs",
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "dev": "tsx watch src/server.ts",
+    "start": "node ../dist/backend/server.js",
+    "test": "vitest run"
+  },
+  "dependencies": {
+    "@azure/arm-compute": "^23.3.0",
+    "@azure/identity": "^4.13.1",
+    "cors": "^2.8.5",
+    "dotenv": "^17.2.3",
+    "express": "^5.2.1",
+    "nunjucks": "^3.2.4",
+    "zod": "^4.3.6"
+  },
+  "devDependencies": {
+    "@types/cors": "^2.8.19",
+    "@types/express": "^5.0.3",
+    "@types/nunjucks": "^3.2.6",
+    "@types/node": "^24.9.1",
+    "typescript": "^6.0.3",
+    "tsx": "^4.20.6",
+    "vitest": "^3.2.4"
+  }
+}

app/backend/src/azure-service.ts

@@ -0,0 +1,130 @@
+import { ComputeManagementClient } from "@azure/arm-compute";
+import { DefaultAzureCredential } from "@azure/identity";
+import { MemoryCache } from "./cache";
+import { sortImageVersionsIfSemantic } from "./version";
+import type { LocationOption } from "./types";
+
+const CACHE_TTL_MS = 5 * 60 * 1000;
+
+export class AzureImageService {
+  private readonly credential = new DefaultAzureCredential();
+
+  private readonly computeClient: ComputeManagementClient;
+
+  private readonly cache = new MemoryCache();
+
+  public constructor(private readonly subscriptionId: string) {
+    this.computeClient = new ComputeManagementClient(this.credential, subscriptionId);
+  }
+
+  public async getLocations(): Promise<LocationOption[]> {
+    const cacheKey = "locations";
+    const cached = this.cache.get<LocationOption[]>(cacheKey);
+    if (cached) {
+      return cached;
+    }
+
+    const token = await this.credential.getToken("https://management.azure.com/.default");
+    const url = `https://management.azure.com/subscriptions/${this.subscriptionId}/locations?api-version=2022-12-01`;
+    const response = await fetch(url, {
+      headers: {
+        Authorization: `Bearer ${token?.token ?? ""}`
+      }
+    });
+
+    if (!response.ok) {
+      throw new Error(`Failed to fetch Azure locations: ${response.status} ${response.statusText}`);
+    }
+
+    const payload = (await response.json()) as {
+      value?: Array<{ name?: string; displayName?: string; metadata?: { regionType?: string } }>;
+    };
+
+    const allLocations = (payload.value ?? [])
+      .filter((loc) => Boolean(loc.name))
+      .map((loc) => ({
+        name: loc.name as string,
+        displayName: loc.displayName ?? (loc.name as string),
+        regionType: loc.metadata?.regionType
+      }));
+
+    const physical = allLocations.filter((loc) => loc.regionType?.toLowerCase() === "physical");
+    const locations = (physical.length > 0 ? physical : allLocations).map((loc) => ({
+      name: loc.name,
+      displayName: loc.displayName
+    }));
+
+    locations.sort((a, b) => a.name.localeCompare(b.name));
+    this.cache.set(cacheKey, locations, CACHE_TTL_MS);
+    return locations;
+  }
+
+  public async getPublishers(location: string): Promise<string[]> {
+    const cacheKey = `publishers:${location}`;
+    const cached = this.cache.get<string[]>(cacheKey);
+    if (cached) {
+      return cached;
+    }
+
+    const response = await this.computeClient.virtualMachineImages.listPublishers(location);
+    const publishers = this.extractNames(response).sort((a, b) => a.localeCompare(b));
+
+    this.cache.set(cacheKey, publishers, CACHE_TTL_MS);
+    return publishers;
+  }
+
+  public async getOffers(location: string, publisher: string): Promise<string[]> {
+    const cacheKey = `offers:${location}:${publisher}`;
+    const cached = this.cache.get<string[]>(cacheKey);
+    if (cached) {
+      return cached;
+    }
+
+    const response = await this.computeClient.virtualMachineImages.listOffers(location, publisher);
+    const offers = this.extractNames(response).sort((a, b) => a.localeCompare(b));
+
+    this.cache.set(cacheKey, offers, CACHE_TTL_MS);
+    return offers;
+  }
+
+  public async getSkus(location: string, publisher: string, offer: string): Promise<string[]> {
+    const cacheKey = `skus:${location}:${publisher}:${offer}`;
+    const cached = this.cache.get<string[]>(cacheKey);
+    if (cached) {
+      return cached;
+    }
+
+    const response = await this.computeClient.virtualMachineImages.listSkus(location, publisher, offer);
+    const skus = this.extractNames(response).sort((a, b) => a.localeCompare(b));
+
+    this.cache.set(cacheKey, skus, CACHE_TTL_MS);
+    return skus;
+  }
+
+  public async getVersions(location: string, publisher: string, offer: string, sku: string): Promise<string[]> {
+    const cacheKey = `versions:${location}:${publisher}:${offer}:${sku}`;
+    const cached = this.cache.get<string[]>(cacheKey);
+    if (cached) {
+      return cached;
+    }
+
+    const response = await this.computeClient.virtualMachineImages.list(location, publisher, offer, sku);
+    const versions = this.extractNames(response);
+
+    const sorted = sortImageVersionsIfSemantic(versions);
+    this.cache.set(cacheKey, sorted, CACHE_TTL_MS);
+    return sorted;
+  }
+
+  private extractNames(source: unknown): string[] {
+    const items = Array.isArray(source)
+      ? source
+      : typeof source === "object" && source !== null && "value" in source && Array.isArray((source as { value?: unknown }).value)
+        ? ((source as { value: unknown[] }).value as unknown[])
+        : [];
+
+    return items
+      .map((item) => (typeof item === "object" && item !== null && "name" in item ? (item as { name?: string }).name : undefined))
+      .filter((value): value is string => Boolean(value));
+  }
+}

app/backend/src/cache.ts

@@ -0,0 +1,29 @@
+type CacheEntry<T> = {
+  value: T;
+  expiresAt: number;
+};
+
+export class MemoryCache {
+  private readonly store = new Map<string, CacheEntry<unknown>>();
+
+  public get<T>(key: string): T | undefined {
+    const hit = this.store.get(key);
+    if (!hit) {
+      return undefined;
+    }
+
+    if (Date.now() >= hit.expiresAt) {
+      this.store.delete(key);
+      return undefined;
+    }
+
+    return hit.value as T;
+  }
+
+  public set<T>(key: string, value: T, ttlMs: number): void {
+    this.store.set(key, {
+      value,
+      expiresAt: Date.now() + ttlMs
+    });
+  }
+}

app/backend/src/server.ts

@@ -0,0 +1,195 @@
+import { existsSync } from "node:fs";
+import { join } from "node:path";
+import cors from "cors";
+import express from "express";
+import { z } from "zod";
+import { AzureImageService } from "./azure-service";
+import { TemplateService } from "./template-service";
+
+const findAppRoot = (): string => {
+  const candidates = [join(__dirname, "../../.."), join(__dirname, "../..")];
+
+  for (const candidate of candidates) {
+    if (existsSync(join(candidate, "templates.json"))) {
+      return candidate;
+    }
+  }
+
+  throw new Error("Unable to resolve app root");
+};
+
+const queryLocation = z.object({ location: z.string().min(1) });
+const queryOffer = z.object({ location: z.string().min(1), publisher: z.string().min(1) });
+const querySku = z.object({ location: z.string().min(1), publisher: z.string().min(1), offer: z.string().min(1) });
+const queryVersion = z.object({ location: z.string().min(1), publisher: z.string().min(1), offer: z.string().min(1), sku: z.string().min(1) });
+
+const renderBody = z.object({
+  templateFile: z.string().min(1),
+  selection: z.object({
+    location: z.string().min(1),
+    publisher: z.string().min(1),
+    offer: z.string().min(1),
+    sku: z.string().min(1),
+    version: z.string().min(1)
+  })
+});
+
+const makeApp = () => {
+  const app = express();
+  const port = Number.parseInt(process.env.PORT ?? "3000", 10);
+  const subscriptionId = process.env.AZURE_SUBSCRIPTION_ID;
+
+  app.use(cors());
+  app.use(express.json());
+
+  const azure = subscriptionId ? new AzureImageService(subscriptionId) : null;
+  const templates = new TemplateService();
+
+  app.get("/api/health", (_req, res) => {
+    if (!subscriptionId) {
+      res.status(500).json({
+        status: "error",
+        message: "Missing AZURE_SUBSCRIPTION_ID"
+      });
+      return;
+    }
+
+    res.json({ status: "ok" });
+  });
+
+  const requireAzure = (): AzureImageService => {
+    if (!azure) {
+      throw new Error("Missing AZURE_SUBSCRIPTION_ID");
+    }
+
+    return azure;
+  };
+
+  app.get("/api/locations", async (_req, res, next) => {
+    try {
+      res.json(await requireAzure().getLocations());
+    } catch (error) {
+      next(error);
+    }
+  });
+
+  app.get("/api/publishers", async (req, res, next) => {
+    try {
+      const { location } = queryLocation.parse(req.query);
+      res.json(await requireAzure().getPublishers(location));
+    } catch (error) {
+      next(error);
+    }
+  });
+
+  app.get("/api/offers", async (req, res, next) => {
+    try {
+      const { location, publisher } = queryOffer.parse(req.query);
+      res.json(await requireAzure().getOffers(location, publisher));
+    } catch (error) {
+      next(error);
+    }
+  });
+
+  app.get("/api/skus", async (req, res, next) => {
+    try {
+      const { location, publisher, offer } = querySku.parse(req.query);
+      res.json(await requireAzure().getSkus(location, publisher, offer));
+    } catch (error) {
+      next(error);
+    }
+  });
+
+  app.get("/api/versions", async (req, res, next) => {
+    try {
+      const { location, publisher, offer, sku } = queryVersion.parse(req.query);
+      res.json(await requireAzure().getVersions(location, publisher, offer, sku));
+    } catch (error) {
+      next(error);
+    }
+  });
+
+  app.get("/api/templates", (_req, res) => {
+    res.json(templates.getTemplates());
+  });
+
+  app.post("/api/render", (req, res, next) => {
+    try {
+      const payload = renderBody.parse(req.body);
+      const rendered = templates.render(payload.templateFile, payload.selection);
+      res.json({ rendered });
+    } catch (error) {
+      next(error);
+    }
+  });
+
+  app.get("/api/sku-export", async (req, res, next) => {
+    try {
+      const { location, publisher, offer } = querySku.parse(req.query);
+      const skus = await requireAzure().getSkus(location, publisher, offer);
+      res.json({ rendered: templates.buildSkuExport(skus) });
+    } catch (error) {
+      next(error);
+    }
+  });
+
+  app.use((err: unknown, _req: express.Request, res: express.Response, _next: express.NextFunction) => {
+    if (err instanceof z.ZodError) {
+      res.status(400).json({ message: "Invalid request", issues: err.issues });
+      return;
+    }
+
+    const message = err instanceof Error ? err.message : "Unexpected error";
+    res.status(500).json({ message });
+  });
+
+  const frontendRoot = join(findAppRoot(), "dist/frontend");
+  if (existsSync(frontendRoot)) {
+    app.use(express.static(frontendRoot));
+    app.get(/^(?!\/api).*/, (_req, res) => {
+      res.sendFile(join(frontendRoot, "index.html"));
+    });
+  }
+
+  return { app, port };
+};
+
+if (require.main === module) {
+  const { app, port } = makeApp();
+  const server = app.listen(port, () => {
+    // eslint-disable-next-line no-console
+    console.log(`azure-image-chooser listening on ${port}`);
+  });
+
+  let shuttingDown = false;
+  const shutdown = (signal: NodeJS.Signals) => {
+    if (shuttingDown) {
+      return;
+    }
+
+    shuttingDown = true;
+    // eslint-disable-next-line no-console
+    console.log(`received ${signal}, shutting down`);
+    server.close((error) => {
+      if (error) {
+        // eslint-disable-next-line no-console
+        console.error("graceful shutdown failed", error);
+        process.exit(1);
+      }
+
+      process.exit(0);
+    });
+
+    // Force-exit if connections do not close in time.
+    setTimeout(() => {
+      // eslint-disable-next-line no-console
+      console.error("shutdown timeout reached, forcing exit");
+      process.exit(1);
+    }, 10_000).unref();
+  };
+
+  process.on("SIGTERM", shutdown);
+  process.on("SIGINT", shutdown);
+}
+
+export { makeApp };

app/backend/src/template-service.ts

@@ -0,0 +1,41 @@
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import nunjucks from "nunjucks";
+import type { ImageSelection, UsageTemplate } from "./types";
+
+const findAppRoot = (): string => {
+  const candidates = [join(__dirname, "../../.."), join(__dirname, "../..")];
+
+  for (const candidate of candidates) {
+    if (existsSync(join(candidate, "templates.json"))) {
+      return candidate;
+    }
+  }
+
+  throw new Error("Unable to resolve app template root");
+};
+
+export class TemplateService {
+  private readonly appRoot = findAppRoot();
+
+  private readonly env = nunjucks.configure(join(this.appRoot, "templates"), {
+    autoescape: false,
+    noCache: true
+  });
+
+  private readonly templates: UsageTemplate[] = JSON.parse(
+    readFileSync(join(this.appRoot, "templates.json"), "utf8")
+  ) as UsageTemplate[];
+
+  public getTemplates(): UsageTemplate[] {
+    return this.templates;
+  }
+
+  public render(templateFile: string, selection: ImageSelection): string {
+    return this.env.render(templateFile, selection);
+  }
+
+  public buildSkuExport(skus: string[]): string {
+    return `[\n${skus.map((sku) => `\t\"${sku}\"`).join(",\n")}\n]`;
+  }
+}

app/backend/src/types.ts

@@ -0,0 +1,18 @@
+export type LocationOption = {
+  name: string;
+  displayName: string;
+};
+
+export type UsageTemplate = {
+  label: string;
+  language: string;
+  file: string;
+};
+
+export type ImageSelection = {
+  location: string;
+  publisher: string;
+  offer: string;
+  sku: string;
+  version: string;
+};

app/backend/src/version.ts

@@ -0,0 +1,22 @@
+const SEMVER_PATTERN = /^[0-9]+\.[0-9]+\.[0-9]+$/;
+
+const semverSortKey = (value: string): number[] => value.split(".").map((part) => Number.parseInt(part, 10));
+
+export const sortImageVersionsIfSemantic = (versions: string[]): string[] => {
+  if (!versions.every((value) => SEMVER_PATTERN.test(value))) {
+    return [...versions].sort((a, b) => a.localeCompare(b, undefined, { numeric: true, sensitivity: "base" }));
+  }
+
+  return [...versions].sort((a, b) => {
+    const aParts = semverSortKey(a);
+    const bParts = semverSortKey(b);
+
+    for (let i = 0; i < aParts.length; i += 1) {
+      if (aParts[i] !== bParts[i]) {
+        return aParts[i] - bParts[i];
+      }
+    }
+
+    return 0;
+  });
+};

app/backend/test/version.test.ts

@@ -0,0 +1,14 @@
+import { describe, expect, it } from "vitest";
+import { sortImageVersionsIfSemantic } from "../src/version";
+
+describe("sortImageVersionsIfSemantic", () => {
+  it("sorts only semantic versions", () => {
+    const sorted = sortImageVersionsIfSemantic(["1.10.0", "1.2.0", "2.0.0"]);
+    expect(sorted).toEqual(["1.2.0", "1.10.0", "2.0.0"]);
+  });
+
+  it("sorts non-semantic versions naturally", () => {
+    const original = ["latest", "1.0.0", "beta"];
+    expect(sortImageVersionsIfSemantic(original)).toEqual(["1.0.0", "beta", "latest"]);
+  });
+});

app/backend/tsconfig.json

@@ -0,0 +1,16 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "Node16",
+    "moduleResolution": "Node16",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "forceConsistentCasingInFileNames": true,
+    "resolveJsonModule": true,
+    "rootDir": "src",
+    "outDir": "../dist/backend",
+    "types": ["node", "vitest/globals"]
+  },
+  "include": ["src"]
+}

app/entrypoint.sh

@@ -1,8 +1,4 @@
-#!/bin/sh
+#!/usr/bin/env sh
+set -eu
 
-if [ "$1" = "-s" ] || [ "$1" = "--shell" ]; then
-  shift
-  exec bash $@
-fi
-
-exec streamlit $@
+exec node /app/dist/backend/server.js

app/frontend/index.html

@@ -0,0 +1,12 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>Azure Image Chooser</title>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="/src/main.tsx"></script>
+  </body>
+</html>

app/frontend/package.json

@@ -0,0 +1,33 @@
+{
+  "name": "azure-image-chooser-frontend",
+  "version": "1.0.0",
+  "author": "Sławomir Koszewski",
+  "license": "MIT",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "vite",
+    "build": "tsc -p tsconfig.json && vite build",
+    "preview": "vite preview",
+    "test": "vitest run"
+  },
+  "dependencies": {
+    "@emotion/react": "^11.14.0",
+    "@emotion/styled": "^11.14.1",
+    "@mui/material": "^9.0.0",
+    "@tanstack/react-query": "^5.99.2",
+    "react": "^19.2.5",
+    "react-dom": "^19.2.5"
+  },
+  "devDependencies": {
+    "@testing-library/jest-dom": "^6.9.1",
+    "@testing-library/react": "^16.3.0",
+    "@types/react": "^19.2.14",
+    "@types/react-dom": "^19.2.3",
+    "@vitejs/plugin-react": "^6.0.1",
+    "jsdom": "^27.0.1",
+    "typescript": "^6.0.3",
+    "vite": "^8.0.8",
+    "vitest": "^3.2.4"
+  }
+}

app/frontend/src/App.tsx

@@ -0,0 +1,292 @@
+import { useEffect, useMemo, useState } from "react";
+import {
+  Alert,
+  Autocomplete,
+  Box,
+  Button,
+  Card,
+  CardContent,
+  CircularProgress,
+  Container,
+  FormControl,
+  Grid,
+  InputLabel,
+  MenuItem,
+  Select,
+  Stack,
+  TextField,
+  Typography
+} from "@mui/material";
+import { useQuery } from "@tanstack/react-query";
+import { api } from "./api";
+import type { SelectionState } from "./types";
+
+const EMPTY_SELECTION: SelectionState = {
+  location: "",
+  publisher: "",
+  offer: "",
+  sku: "",
+  version: ""
+};
+
+const App = () => {
+  const [selection, setSelection] = useState<SelectionState>(EMPTY_SELECTION);
+  const [templateFile, setTemplateFile] = useState("");
+  const [renderedUsage, setRenderedUsage] = useState("");
+  const [skuExport, setSkuExport] = useState("");
+  const [renderError, setRenderError] = useState("");
+
+  const healthQuery = useQuery({ queryKey: ["health"], queryFn: api.health });
+  const locationsQuery = useQuery({ queryKey: ["locations"], queryFn: api.locations });
+  const publishersQuery = useQuery({
+    queryKey: ["publishers", selection.location],
+    queryFn: () => api.publishers(selection.location),
+    enabled: Boolean(selection.location)
+  });
+  const offersQuery = useQuery({
+    queryKey: ["offers", selection.location, selection.publisher],
+    queryFn: () => api.offers(selection.location, selection.publisher),
+    enabled: Boolean(selection.location && selection.publisher)
+  });
+  const skusQuery = useQuery({
+    queryKey: ["skus", selection.location, selection.publisher, selection.offer],
+    queryFn: () => api.skus(selection.location, selection.publisher, selection.offer),
+    enabled: Boolean(selection.location && selection.publisher && selection.offer)
+  });
+  const versionsQuery = useQuery({
+    queryKey: ["versions", selection.location, selection.publisher, selection.offer, selection.sku],
+    queryFn: () => api.versions(selection.location, selection.publisher, selection.offer, selection.sku),
+    enabled: Boolean(selection.location && selection.publisher && selection.offer && selection.sku)
+  });
+  const templatesQuery = useQuery({ queryKey: ["templates"], queryFn: api.templates });
+
+  useEffect(() => {
+    setSelection((previous) => ({ ...previous, publisher: "", offer: "", sku: "", version: "" }));
+    setRenderedUsage("");
+    setSkuExport("");
+  }, [selection.location]);
+
+  useEffect(() => {
+    setSelection((previous) => ({ ...previous, offer: "", sku: "", version: "" }));
+    setRenderedUsage("");
+    setSkuExport("");
+  }, [selection.publisher]);
+
+  useEffect(() => {
+    setSelection((previous) => ({ ...previous, sku: "", version: "" }));
+    setRenderedUsage("");
+  }, [selection.offer]);
+
+  useEffect(() => {
+    setSelection((previous) => ({ ...previous, version: "" }));
+    setRenderedUsage("");
+  }, [selection.sku]);
+
+  const canRender = useMemo(
+    () => Boolean(selection.location && selection.publisher && selection.offer && selection.sku && selection.version && templateFile),
+    [selection, templateFile]
+  );
+
+  const publishers = useMemo(
+    () => [...(publishersQuery.data ?? [])].sort((a, b) => a.localeCompare(b)),
+    [publishersQuery.data]
+  );
+  const offers = useMemo(
+    () => [...(offersQuery.data ?? [])].sort((a, b) => a.localeCompare(b)),
+    [offersQuery.data]
+  );
+  const skus = useMemo(
+    () => [...(skusQuery.data ?? [])].sort((a, b) => a.localeCompare(b)),
+    [skusQuery.data]
+  );
+  const versions = useMemo(
+    () => [...(versionsQuery.data ?? [])].sort((a, b) => a.localeCompare(b, undefined, { numeric: true, sensitivity: "base" })),
+    [versionsQuery.data]
+  );
+
+  const containsFilter = (options: string[], inputValue: string) => {
+    const query = inputValue.trim().toLowerCase();
+    if (!query) {
+      return options;
+    }
+
+    return options.filter((option) => option.toLowerCase().includes(query));
+  };
+
+  const onRender = async () => {
+    setRenderError("");
+    try {
+      const [usage, skuBlock] = await Promise.all([
+        api.render(templateFile, selection),
+        api.skuExport(selection.location, selection.publisher, selection.offer)
+      ]);
+      setRenderedUsage(usage);
+      setSkuExport(skuBlock);
+    } catch (error) {
+      setRenderError(error instanceof Error ? error.message : "Unexpected render error");
+    }
+  };
+
+  const loading = locationsQuery.isLoading || templatesQuery.isLoading;
+  const healthError = healthQuery.error instanceof Error ? healthQuery.error.message : "";
+  const appNotConfigured = healthError.includes("Missing AZURE_SUBSCRIPTION_ID");
+  const locationsError = locationsQuery.error instanceof Error ? locationsQuery.error.message : "Failed to load locations";
+
+  return (
+    <Box sx={{ minHeight: "100vh", py: 4 }}>
+      <Container maxWidth="lg">
+        <Stack spacing={3}>
+          <Typography variant="h4" sx={{ fontWeight: 500 }}>
+            Azure Image Chooser
+          </Typography>
+          <Typography color="text.secondary">
+            Select a marketplace image and generate reusable snippets.
+          </Typography>
+
+          {appNotConfigured ? (
+            <Alert severity="warning">
+              App is not configured. Set AZURE_SUBSCRIPTION_ID (and Azure credentials) in the container start environment, then restart the app.
+            </Alert>
+          ) : null}
+
+          {loading ? (
+            <CircularProgress />
+          ) : locationsQuery.isError ? (
+            <Alert severity={appNotConfigured ? "warning" : "error"}>{locationsError}</Alert>
+          ) : (
+            <Card>
+              <CardContent>
+                <Grid container spacing={2}>
+                  <Grid size={{ xs: 12, md: 6 }}>
+                    <FormControl fullWidth>
+                      <InputLabel id="location-label">Location</InputLabel>
+                      <Select
+                        labelId="location-label"
+                        label="Location"
+                        value={selection.location}
+                        onChange={(event) => setSelection((prev) => ({ ...prev, location: event.target.value }))}
+                      >
+                        {(locationsQuery.data ?? []).map((location) => (
+                          <MenuItem key={location.name} value={location.name}>
+                            {location.displayName}
+                          </MenuItem>
+                        ))}
+                      </Select>
+                    </FormControl>
+                  </Grid>
+
+                  <Grid size={{ xs: 12, md: 6 }}>
+                    <Autocomplete
+                      options={publishers}
+                      value={selection.publisher || null}
+                      disabled={!selection.location}
+                      onChange={(_event, value) => setSelection((prev) => ({ ...prev, publisher: value ?? "" }))}
+                      filterOptions={(options, state) => containsFilter(options, state.inputValue)}
+                      renderInput={(params) => <TextField {...params} label="Publisher" />}
+                    />
+                  </Grid>
+
+                  <Grid size={{ xs: 12, md: 4 }}>
+                    <Autocomplete
+                      options={offers}
+                      value={selection.offer || null}
+                      disabled={!selection.publisher}
+                      onChange={(_event, value) => setSelection((prev) => ({ ...prev, offer: value ?? "" }))}
+                      filterOptions={(options, state) => containsFilter(options, state.inputValue)}
+                      renderInput={(params) => <TextField {...params} label="Offer" />}
+                    />
+                  </Grid>
+
+                  <Grid size={{ xs: 12, md: 4 }}>
+                    <Autocomplete
+                      options={skus}
+                      value={selection.sku || null}
+                      disabled={!selection.offer}
+                      onChange={(_event, value) => setSelection((prev) => ({ ...prev, sku: value ?? "" }))}
+                      filterOptions={(options, state) => containsFilter(options, state.inputValue)}
+                      renderInput={(params) => <TextField {...params} label="SKU" />}
+                    />
+                  </Grid>
+
+                  <Grid size={{ xs: 12, md: 4 }}>
+                    <FormControl fullWidth disabled={!selection.sku}>
+                      <InputLabel id="version-label">Version</InputLabel>
+                      <Select
+                        labelId="version-label"
+                        label="Version"
+                        value={selection.version}
+                        onChange={(event) => setSelection((prev) => ({ ...prev, version: event.target.value }))}
+                      >
+                        {versions.map((version) => (
+                          <MenuItem key={version} value={version}>
+                            {version}
+                          </MenuItem>
+                        ))}
+                      </Select>
+                    </FormControl>
+                  </Grid>
+
+                  <Grid size={{ xs: 12, md: 8 }}>
+                    <FormControl fullWidth>
+                      <InputLabel id="template-label">Usage scenario</InputLabel>
+                      <Select
+                        labelId="template-label"
+                        label="Usage scenario"
+                        value={templateFile}
+                        onChange={(event) => setTemplateFile(event.target.value)}
+                      >
+                        {(templatesQuery.data ?? []).map((template) => (
+                          <MenuItem key={template.file} value={template.file}>
+                            {template.label}
+                          </MenuItem>
+                        ))}
+                      </Select>
+                    </FormControl>
+                  </Grid>
+
+                  <Grid size={{ xs: 12, md: 4 }}>
+                    <Button fullWidth variant="contained" sx={{ height: "100%" }} color="primary" onClick={onRender} disabled={!canRender}>
+                      Generate usage
+                    </Button>
+                  </Grid>
+                </Grid>
+              </CardContent>
+            </Card>
+          )}
+
+          {renderError ? <Alert severity="error">{renderError}</Alert> : null}
+
+          {renderedUsage ? (
+            <Card>
+              <CardContent>
+                <Typography variant="h6">Usage snippet</Typography>
+                <Box
+                  component="pre"
+                  sx={{ overflowX: "auto", p: 2, bgcolor: "grey.100", color: "text.primary", borderRadius: 1, border: 1, borderColor: "divider" }}
+                >
+                  {renderedUsage}
+                </Box>
+              </CardContent>
+            </Card>
+          ) : null}
+
+          {skuExport ? (
+            <Card>
+              <CardContent>
+                <Typography variant="h6">Available SKUs</Typography>
+                <Box
+                  component="pre"
+                  sx={{ overflowX: "auto", p: 2, bgcolor: "grey.100", color: "text.primary", borderRadius: 1, border: 1, borderColor: "divider" }}
+                >
+                  {skuExport}
+                </Box>
+              </CardContent>
+            </Card>
+          ) : null}
+        </Stack>
+      </Container>
+    </Box>
+  );
+};
+
+export default App;

app/frontend/src/api.ts

@@ -0,0 +1,55 @@
+import type { LocationOption, SelectionState, UsageTemplate } from "./types";
+
+const json = async <T>(path: string): Promise<T> => {
+  const response = await fetch(path);
+  if (!response.ok) {
+    let details = "";
+    try {
+      const payload = (await response.json()) as { message?: string };
+      details = payload.message ?? "";
+    } catch {
+      // Ignore non-JSON error payloads.
+    }
+
+    throw new Error(details || `Request failed for ${path} (${response.status})`);
+  }
+
+  return (await response.json()) as T;
+};
+
+export const api = {
+  health: () => json<{ status: string; message?: string }>("/api/health"),
+  locations: () => json<LocationOption[]>("/api/locations"),
+  publishers: (location: string) => json<string[]>(`/api/publishers?location=${encodeURIComponent(location)}`),
+  offers: (location: string, publisher: string) =>
+    json<string[]>(`/api/offers?location=${encodeURIComponent(location)}&publisher=${encodeURIComponent(publisher)}`),
+  skus: (location: string, publisher: string, offer: string) =>
+    json<string[]>(
+      `/api/skus?location=${encodeURIComponent(location)}&publisher=${encodeURIComponent(publisher)}&offer=${encodeURIComponent(offer)}`
+    ),
+  versions: (location: string, publisher: string, offer: string, sku: string) =>
+    json<string[]>(
+      `/api/versions?location=${encodeURIComponent(location)}&publisher=${encodeURIComponent(publisher)}&offer=${encodeURIComponent(offer)}&sku=${encodeURIComponent(sku)}`
+    ),
+  templates: () => json<UsageTemplate[]>("/api/templates"),
+  render: async (templateFile: string, selection: SelectionState): Promise<string> => {
+    const response = await fetch("/api/render", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ templateFile, selection })
+    });
+
+    if (!response.ok) {
+      throw new Error("Failed to render template");
+    }
+
+    const payload = (await response.json()) as { rendered: string };
+    return payload.rendered;
+  },
+  skuExport: async (location: string, publisher: string, offer: string): Promise<string> => {
+    const payload = await json<{ rendered: string }>(
+      `/api/sku-export?location=${encodeURIComponent(location)}&publisher=${encodeURIComponent(publisher)}&offer=${encodeURIComponent(offer)}`
+    );
+    return payload.rendered;
+  }
+};

app/frontend/src/main.tsx

@@ -0,0 +1,16 @@
+import { StrictMode } from "react";
+import { createRoot } from "react-dom/client";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import { CssBaseline } from "@mui/material";
+import App from "./App";
+
+const queryClient = new QueryClient();
+
+createRoot(document.getElementById("root")!).render(
+  <StrictMode>
+    <QueryClientProvider client={queryClient}>
+      <CssBaseline />
+      <App />
+    </QueryClientProvider>
+  </StrictMode>
+);

app/frontend/src/types.ts

@@ -0,0 +1,18 @@
+export type LocationOption = {
+  name: string;
+  displayName: string;
+};
+
+export type UsageTemplate = {
+  label: string;
+  language: string;
+  file: string;
+};
+
+export type SelectionState = {
+  location: string;
+  publisher: string;
+  offer: string;
+  sku: string;
+  version: string;
+};

app/frontend/test/app.test.tsx

@@ -0,0 +1,57 @@
+import { render, screen } from "@testing-library/react";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import { ThemeProvider, createTheme } from "@mui/material";
+import { beforeEach, afterEach, describe, expect, it, vi } from "vitest";
+import App from "../src/App";
+
+const originalFetch = globalThis.fetch;
+
+const createResponse = (payload: unknown) =>
+  new Response(JSON.stringify(payload), {
+    status: 200,
+    headers: { "Content-Type": "application/json" }
+  });
+
+describe("App", () => {
+  beforeEach(() => {
+    globalThis.fetch = vi.fn((url: string) => {
+      if (url === "/api/locations") {
+        return Promise.resolve(createResponse([{ name: "westeurope", displayName: "West Europe" }]));
+      }
+
+      if (url === "/api/templates") {
+        return Promise.resolve(createResponse([{ label: "Azure CLI", language: "shell", file: "shell.tpl" }]));
+      }
+
+      return Promise.resolve(createResponse([]));
+    }) as typeof fetch;
+  });
+
+  afterEach(() => {
+    globalThis.fetch = originalFetch;
+  });
+
+  it("renders application heading", async () => {
+    const client = new QueryClient({
+      defaultOptions: {
+        queries: {
+          retry: false,
+          gcTime: 0
+        }
+      }
+    });
+    const theme = createTheme();
+
+    const view = render(
+      <QueryClientProvider client={client}>
+        <ThemeProvider theme={theme}>
+          <App />
+        </ThemeProvider>
+      </QueryClientProvider>
+    );
+
+    expect(await screen.findByText("Azure Image Chooser")).toBeInTheDocument();
+    view.unmount();
+    client.clear();
+  });
+});

app/frontend/test/setup.ts

@@ -0,0 +1 @@
+import "@testing-library/jest-dom/vitest";

app/frontend/tsconfig.json

@@ -0,0 +1,15 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "lib": ["ES2022", "DOM", "DOM.Iterable"],
+    "module": "ESNext",
+    "moduleResolution": "Bundler",
+    "jsx": "react-jsx",
+    "strict": true,
+    "skipLibCheck": true,
+    "noEmit": true,
+    "resolveJsonModule": true,
+    "types": ["vite/client", "vitest/globals"]
+  },
+  "include": ["src", "test", "vite.config.ts"]
+}

app/frontend/vite.config.ts

@@ -0,0 +1,19 @@
+import { defineConfig } from "vite";
+import react from "@vitejs/plugin-react";
+
+export default defineConfig({
+  plugins: [react()],
+  build: {
+    outDir: "../dist/frontend",
+    emptyOutDir: true
+  },
+  server: {
+    port: 5173,
+    proxy: {
+      "/api": {
+        target: "http://localhost:3000",
+        changeOrigin: true
+      }
+    }
+  }
+});

app/frontend/vitest.config.ts

@@ -0,0 +1,8 @@
+import { defineConfig } from "vitest/config";
+
+export default defineConfig({
+  test: {
+    environment: "jsdom",
+    setupFiles: ["./test/setup.ts"]
+  }
+});

app/healthcheck.js

@@ -0,0 +1,39 @@
+#!/usr/bin/env node
+"use strict";
+
+const http = require("node:http");
+
+const port = Number.parseInt(process.env.PORT || "3000", 10);
+const path = process.env.HEALTHCHECK_PATH || "/api/health";
+const timeoutMs = Number.parseInt(process.env.HEALTHCHECK_TIMEOUT_MS || "3000", 10);
+
+const req = http.request(
+  {
+    host: "127.0.0.1",
+    port,
+    path,
+    method: "GET",
+    timeout: timeoutMs
+  },
+  (res) => {
+    // Drain the response so the socket can close cleanly.
+    res.resume();
+
+    if (res.statusCode && res.statusCode >= 200 && res.statusCode < 400) {
+      process.exit(0);
+      return;
+    }
+
+    process.exit(1);
+  }
+);
+
+req.on("timeout", () => {
+  req.destroy(new Error("healthcheck timeout"));
+});
+
+req.on("error", () => {
+  process.exit(1);
+});
+
+req.end();

app/templates.json

@@ -13,5 +13,10 @@
     "label": "Azure Resource Manager Template",
     "language": "json",
     "file": "arm_vm.jsonc"
+  },
+  {
+    "label": "Bicep VM image reference",
+    "language": "bicep",
+    "file": "bicep_vm.tpl"
   }
 ]

app/templates/bicep_vm.tpl

@@ -0,0 +1,14 @@
+resource virtualMachine 'Microsoft.Compute/virtualMachines@2024-03-01' = {
+  name: 'example-vm'
+  location: resourceGroup().location
+  properties: {
+    storageProfile: {
+      imageReference: {
+        publisher: '{{ publisher }}'
+        offer: '{{ offer }}'
+        sku: '{{ sku }}'
+        version: '{{ version }}'
+      }
+    }
+  }
+}