prod_ci_citizen-auth.yml

name: Continuous Integration on prod citizen-auth

on:
  merge_group:
  workflow_dispatch:
  pull_request:
    types:
      - opened
      - edited
      - synchronize
      - reopened
      - ready_for_review
    paths:
      - "src/domains/citizen-auth**"
      - ".github/workflows/prod**citizen-auth.yml"

permissions:
  id-token: write
  contents: read

env:
  DIR: "src/domains/citizen-auth"
  AZURE_ENVIRONMENT: prod

jobs:

  terraform_plan_job:
    name: Terraform Plan
    runs-on: self-hosted
    environment: prod-ci
    env:
      ARM_CLIENT_ID: ${{ secrets.ARM_CLIENT_ID }}
      ARM_SUBSCRIPTION_ID: ${{ secrets.ARM_SUBSCRIPTION_ID }}
      ARM_TENANT_ID: ${{ secrets.ARM_TENANT_ID }}

    steps:

      - name: Checkout
        id: checkout
        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
        with:
          persist-credentials: false
          fetch-depth: 0

      - name: Setup terraform
        id: setup-version
        # https://github.com/pagopa/terraform-install-action/commits/main
        uses: pagopa/terraform-install-action@1f76f593176e58c423b88d72273a612ba7ba430b

      - name: Terraform plan common
        # from https://github.com/pagopa/terraform-plan-azure-action/commits/main
        uses: pagopa/terraform-plan-azure-action@392aca28cbb33f5dc28215dfb72385e136fd813b
        with:
          client_id: ${{ secrets.ARM_CLIENT_ID }}
          tenant_id: ${{ secrets.ARM_TENANT_ID }}
          subscription_id: ${{ secrets.ARM_SUBSCRIPTION_ID }}
          dir: ${{ env.DIR }}-common
          azure_environment: prod

      - name: Terraform plan weu-prod01
        # from https://github.com/pagopa/terraform-plan-azure-action/commits/main
        uses: pagopa/terraform-plan-azure-action@392aca28cbb33f5dc28215dfb72385e136fd813b
        with:
          client_id: ${{ env.ARM_CLIENT_ID }}
          tenant_id: ${{ env.ARM_TENANT_ID }}
          subscription_id: ${{ env.ARM_SUBSCRIPTION_ID }}
          dir: ${{ env.DIR }}-app
          azure_environment: weu-prod01