prod_drift_citizen-auth.yml

name: Drift Detection on prod citizen-auth

on:
  workflow_dispatch:
  schedule:
    - cron: '08 00 * * *'

permissions:
  id-token: write
  contents: read

env:
  DIR: "src/domains/citizen-auth"
  AZURE_ENVIRONMENT: prod

jobs:

  terraform_driftdetection_job:
    name: Terraform Drift Detection
    runs-on: self-hosted
    environment: prod-ci
    steps:
      - name: Checkout
        id: checkout
        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
        with:
          persist-credentials: false
          fetch-depth: 0

      - name: Setup terraform
        id: setup-version
        # https://github.com/pagopa/terraform-install-action/commits/main
        uses: pagopa/terraform-install-action@1f76f593176e58c423b88d72273a612ba7ba430b

      - name: Terraform drift detection common
        # from https://github.com/pagopa/terraform-driftdetection-azure-action/commits/main
        uses: pagopa/terraform-driftdetection-azure-action@71bd771b3a071c78b36e5e0ecbd666ac39b1113c
        with:
          client_id: ${{ secrets.ARM_CLIENT_ID }}
          tenant_id: ${{ secrets.ARM_TENANT_ID }}
          subscription_id: ${{ secrets.ARM_SUBSCRIPTION_ID }}
          dir: ${{ env.DIR }}-common
          azure_environment: prod

      - name: Terraform drift detection weu-prod01
        # from https://github.com/pagopa/terraform-driftdetection-azure-action/commits/main
        uses: pagopa/terraform-driftdetection-azure-action@71bd771b3a071c78b36e5e0ecbd666ac39b1113c
        with:
          client_id: ${{ secrets.ARM_CLIENT_ID }}
          tenant_id: ${{ secrets.ARM_TENANT_ID }}
          subscription_id: ${{ secrets.ARM_SUBSCRIPTION_ID }}
          dir: ${{ env.DIR }}-app
          azure_environment: weu-prod01