provision-prod.yml

name: Provision Prod infra

on:
  workflow_dispatch:

permissions:
  id-token: write
  contents: read

jobs:
  provision-prod:
    runs-on: ubuntu-latest
    environment: 
      name: prod
    env:
      AZURE_CLIENT_ID: ${{ vars.AZURE_CLIENT_ID }}
      AZURE_TENANT_ID: ${{ vars.AZURE_TENANT_ID }}
      AZURE_SUBSCRIPTION_ID: ${{ vars.AZURE_SUBSCRIPTION_ID }}
      AZURE_LOCATION: ${{ vars.AZURE_LOCATION }}
      AZURE_SECONDARY_LOCATION: ${{ vars.AZURE_SECONDARY_LOCATION }}
      AZURE_ENV_NAME: ${{ vars.AZURE_ENV_NAME }}-prod
      AZURE_ENV_TYPE: 'prod'
    steps:
      - uses: actions/checkout@v4
      
      - name: Install azd
        uses: Azure/setup-azd@v2
        
      - name: Log in with Azure
        run: |
          azd auth login \
            --client-id "$AZURE_CLIENT_ID" \
            --federated-credential-provider "github" \
            --tenant-id "$AZURE_TENANT_ID"

      - name: Provision Infrastructure (Prod)
        id: provision
        run: |
          azd provision --no-prompt

      # - name: Validate Infrastructure
      #   run: |
      #     # Validate that infrastructure is properly provisioned
      #     azd show --output json | jq -r '.services'