/prj1_infra_app

Primary LanguageHCL

README

To run CI/CD you must:

Add the backend values to the secrets:

TFSTATE_STORAGE_ACCOUNT_NAME
TFSTATE_STORAGE_CONTAINER_NAME
TFSTATE_KEY
TFSTATE_RESOURCES_GROUP_NAME

With Service Principal Name (SPN)

Create an SPN with the Storage Blob Data Owner role on the storage account.

On the GitHub repository add SPN credentials:

ARM_SPN_CLIENT_ID
ARM_SPN_CLIENT_SECRET
ARM_SUBSCRIPTION_ID
ARM_TENANT_ID

With OIDC

  • Create an application registration
  • Add federated credentials inside secrets and credentials
  • Choose GitHub action and select the owner / repository. You can specify a branch but the best approach is to specify an environment which exist inside your GitHub repository.
  • Add Storage Blob Data Owner role on the storage account to your application registration

On the GitHub repository add the credentials:

ARM_CLIENT_ID => The App Registration one
ARM_SUBSCRIPTION_ID
ARM_TENANT_ID