deploy-resource-group.yaml

name: Deploy resource group

on:
  push:
    paths:
      - 'src/infra/**'
      - '.github/workflows/**'
  workflow_dispatch:

permissions:
    id-token: write
    contents: read

jobs:
  deploy-dev:
    environment: dev
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@main

      - name: Log into Azure
        uses: azure/login@v1
        with:
          client-id: ${{ secrets.AZURE_CLIENT_ID }}
          tenant-id: ${{ secrets.AZURE_TENANT_ID }}
          subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
          enable-AzPSSession: true

      - name: Deploy DEV resource group
        uses: azure/powershell@v1
        with:
          inlineScript: |
            $ParamsDev = @{
                TemplateFilePath = "./src/infra/resourceGroup.bicep"
                TemplateParameterFilePath = "./src/infra/resourceGroup.dev.bicepparam"
            }

            ./src/scripts/Deploy-ToSubscription.ps1 @ParamsDev
          azPSVersion: "11.4.0"

  deploy-prd:
    environment: prd
    if: github.ref == 'refs/heads/main'
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@main

      - name: Log into Azure
        uses: azure/login@v1
        with:
          client-id: ${{ secrets.AZURE_CLIENT_ID }}
          tenant-id: ${{ secrets.AZURE_TENANT_ID }}
          subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
          enable-AzPSSession: true

      - name: Deploy PROD resource group
        uses: azure/powershell@v1
        with:
          inlineScript: |
            $ParamsProd = @{
                TemplateFilePath = "./src/infra/resourceGroup.bicep"
                TemplateParameterFilePath = "./src/infra/resourceGroup.prd.bicepparam"
            }

            ./src/scripts/Deploy-ToSubscription.ps1 @ParamsProd
          azPSVersion: "11.4.0"